Which of the following can be used to protect EC2 instances hosted in AWS?
Are you looking for free questions and answers to prepare for the AWS Certified Cloud Practitioner exam? Show
Here are our newly updated 30 Free questions on the AWS cloud practitioner certification exam which are very similar to the practice test as well as the real exam. Why do we provide AWS Cloud Practitioner Exam questions for free?AWS Certified Cloud Practitioner exams are designed to test and recognize your skills on AWS cloud infrastructure, compliance and security, user management, value propositions, and operating/deploying principles in the AWS cloud environment. We are giving it for free to help you in passing the AWS cloud practitioner exam just like your colleagues. It’s a free takeaway from the Whizlabs team for AWS Job seekers during this new year 2022. AWS Cloud Practitioner Exam QuestionsYou can find a lot of video courses on AWS cloud practitioner exam to learn the exam objectives. And now, it’s the time to test your hard-earned AWS skills by studying the exam simulator questions on AWS certified cloud practitioner exam. Our AWS certified experts even curated these AWS simulator questions carefully which are based on the latest syllabus and very relevant to the real exam. This list of free questions on AWS certified cloud practitioner exams can help you in up-skilling the knowledge gaps. Once you have spent some time learning these AWS questions on Cloud Practitioner certification, you can face the real exam with more confidence and ensure passing it in your first attempt itself. Let’s get started!
Domain: Cloud ConceptsQ 1: According to AWS, what is the benefit of Elasticity?A. Minimize storage requirements by reducing logging and auditing activities Answer – B Explanation : The concept of Elasticity is the means of an application having the ability to scale up and scale down based on demand. An example of such a service is the Autoscaling service For more information on AWS Autoscaling service, please refer to the below URL: https://aws.amazon.com/autoscaling/ A, C and D are incorrect. Elasticity will not have positive effects on storage, cost or design agility.
Domain : Billing and PricingQ2: Which tool can you use to forecast your AWS spending?A. AWS Organizations Answer – D Explanation : The AWS Documentation mentions the following. Cost Explorer is a free tool that you can use to view your costs. You can view data up to the last 12 months. You can forecast how much you are likely to spend for the next 12 months and get recommendations for what Reserved Instances to purchase. You can use Cost Explorer to see patterns in how much you spend on AWS resources over time, identify areas that need further inquiry, and see trends that you can use to understand your costs. You also can specify time ranges for the data and view time data by day or by month. For more information on the AWS Cost Explorer, please refer to the below URL: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-explorer-what-is.html A, B and C are incorrect. These services do not relate to billing and cost.
Domain : TechnologyQ3: A business analyst would like to move away from creating complex database queries and static spreadsheets when generating regular reports for high-level management. They would like to publish insightful, graphically appealing reports with interactive dashboards. Which service can they use to accomplish this?A. Amazon QuickSight Correct Answer – A Explanation : Amazon QuickSight is the most appropriate service in the scenario. It is a fully-managed service that allows for insightful business intelligence reporting with creative data delivery methods, including graphical and interactive dashboards. QuickSight includes machine learning that allows users to discover inconspicuous trends and patterns on their datasets. AWS Quick Sight tool | Source: aws.amazon.com/quicksight
Domain : TechnologyQ4. What is the AWS feature that enables fast, easy and secure transfers of files over long distances between your client and your Amazon S3 bucket?A. File Transfer Answer – C Explanation : The AWS Documentation mentions the following. Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path. For more information on S3 transfer acceleration, please visit the Link: http://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html Options A, B and D are incorrect. These features deal with transferring data but not between clients and an S3 bucket.
Domain : SecurityQ5: What best describes the “Principle of Least Privilege”? Choose the correct answer from the options given below.A. All users should have the same baseline permissions granted to them to use basic AWS services. Answer – B Explanation : The principle means giving a user account only those privileges which are essential to perform its intended function. For example, a user account for the sole purpose of creating backups does not need to install the software. Hence, it has rights only to run backup and backup-related applications. For more information on the principle of least privilege, please refer to the following link: https://en.wikipedia.org/wiki/Principle_of_least_privilege Options A, C, and D are incorrect. These actions would not adhere to the Principle of Least Privilege.
Domain : SecurityQ6: A web administrator maintains several public and private web-based resources for an organisation. Which service can they use to keep track of the expiry dates of SSL/TLS certificates as well as updating and renewal?A. AWS Data Lifecycle Manager Correct Answer – D Explanation : The AWS Certificate Manager allows the web administrator to maintain one or several SSL/TLS certificates, both private and public certificates including their update and renewal so that the administrator does not worry about the imminent expiry of certificates. https://aws.amazon.com/certificate-manager/
Domain : SecurityQ7: Which of the following is the responsibility of the customer to ensure the availability and backup of the EBS volumes?A. Delete the data and create a new EBS volume. Answer – B Explanation : Snapshots are incremental backups, which means that only the blocks on the device that have changed after your most recent snapshot are saved. When you create an EBS volume based on a snapshot, the new volume begins as an exact replica of the original volume that was used to create the snapshot. The replicated volume loads data in the background so that you can begin using it immediately. Amazon EBS snapshots | Source: aws.amazon.comOption A is incorrect because there is no need for backup of the volumes if data is already deleted. Option C is incorrect because attaching more EBS volumes doesn’t ensure availability, if there is no snapshot then the volume cannot be available to a different availability zone. Option D is incorrect EBS volumes cannot be copied, they can only be replicated using snapshots. For more information on EBS Snapshots, please refer to the below URL:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html
Domain : SecurityQ8: Which of the following services can be used as an application firewall in AWS?A. AWS Snowball Answer – B Explanation : The AWS Documentation mentions the following: AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront or an Application Load Balancer. AWS WAF also lets you control access to your content. AWS Snowball, a part of the AWS Snow Family, is an edge computing, data migration, and edge storage device that comes in two options. Snowball Edge Storage Optimized devices provide both block storage and Amazon S3-compatible object storage, and 40 vCPUs. For more information on AWS WAF, please refer to the below URL:https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
Domain : Cloud ConceptsQ9: Your design team is planning to design an application that will be hosted on the AWS Cloud. One of their main non-functional requirements is given below: |