NEW QUESTION 1
Which S3 storage class has lowest object availability rating?
Choose the Correct Answer

• A. Standard
• B. Reduced Redundancy
• C. Infrequent Access
• D. All of them have the same availability rating

Answer: C

Explanation:
Infrequent access has the lowest availability rating (99.90%). Standard and Reduced Redundancy have an availability rating of 99.99%

NEW QUESTION 2
What MUST you do before you do any penetration testing on your account?
Choose the Correct Answer

• A. Penetration testing is now allowed.
• B. Contact AWS and let them know first.
• C. Nothing, you are free to do penetration testing whenever you like.
• D. None of the above

Answer: B

Explanation:
You must contact AWS before doing any penetration testing on your account. If you do not notify AWS first, they may shut down your account.

NEW QUESTION 3
Before moving and/or storing object in AWS Glacier, what considerations should you make regarding the data you want to store.
Choose the Correct Answer

• A. Make sure the data is properly formatted for storage Glacier.
• B. Make sure the total amount of data you want to store in under 1 terabyte in size.
• C. Make sure you are ok with it taking at minimum a few minutes to retrieve the data once stored in Glacier.
• D. None of the abov

Answer: C

Explanation:
Objects stored in Glacier take time to retrieve. You can pay for expedited retrieval, which will take several minutes - OR wait several hours (for normal retrieval).

NEW QUESTION 4
You have just set up a brand new AWS account. You want to keep monthly billing under $100, but you are worried about going over that limit. What can you set up in order to be notified when the
monthly bill approaches $100?
Choose the Correct Answer

• A. A CloudTrail billing alarm that triggers an SNS notification to your email address.
• B. A SNS billing alarm that triggers a CloudWatch notification to your email address.
• C. A CloudWatch billing alarm that triggers an SNS notification to your email address.
• D. A CloudWatch billing alarm that triggers a CloudTrail notification to your email addres

Answer: C

Explanation:
In CloudWatch, you can set up a billing alarm that will trigger when your monthly bill hit the set threshold. That alarm can then be set up to trigger an SNS topic that will send you a notification that the alarm threshold as been met.

NEW QUESTION 5
What AWS storage class should be used for long-term, archival storage?
Choose the Correct Answer

• A. Glacier
• B. Long-Term
• C. Standard
• D. Infrequent Access

Answer: A

Explanation:
Glacier should be used for (and is specifically designed for) long-term , archival storage.

NEW QUESTION 6
You notice that five of your 10 S3 buckets are no longer available in your account, and you assume that they have been deleted. You are unsure who may have deleted them, and no one is taking responsibility. What should you do to investigate and find out who deleted the S3 buckets?
Choose the Correct Answer

• A. Look at the S3 logs.
• B. Look at the CloudTrail logs.
• C. Look at the CloudWatch Logs.
• D. Look at the SNS log

Answer: B

Explanation:
CloudTrail is logging service that logs actions taken by AWS users in your AWS account, such as creating/deleting S3 buckets, starting/stopping EC2 stances, etc.

NEW QUESTION 7
If you have a set of frequently accessed files that are used on a daily basis, what S3 storage class should you store them in?
Choose the Correct Answer

• A. Infrequent Access
• B. Reduced Redundancy
• C. Standard
• D. Fast Access

Answer: C

Explanation:
The Standard storage class should be used for files that you access on a daily or very frequent basis.

NEW QUESTION 8
S3 storage classes are rated by what two metric categories? (Select two) Choose the 2 Correct answers:

• A. Objectivity
• B. Durability
• C. Availability
• D. Fault tolerance

Answer: BC

Explanation:
Each S3 storage class is rated on its availability and durability.

NEW QUESTION 9
What is the term used to describe giving an AWS user only access to the exact services he/she needs to do the required job and nothing more?
Choose the Correct Answer

• A. The Least Privilege User Principal
• B. The Principal of Least Privilege
• C. The Only Access Principal.
• D. None of the above

Answer: B

NEW QUESTION 10
John is working with a large data set, and he needs to import it into a relational database service. What AWS service will meet his needs?
Choose the Correct Answer

• A. RDS
• B. Redshift
• C. NoSQL
• D. DynamoDB

Answer: A

Explanation:
RDS is AWS's relational database service.

NEW QUESTION 11
Amit is running a web application with a capacity of 5000 users. Every few days, traffic reaches 5000 users and any additional users are being denied access. What can Amit do to efficiently automate the process of adding and removing server capacity based on traffic demand?
Choose the Correct Answer

• A. Enable elastic load balancing on his application.
• B. Automating this process cannot be done
• C. Enable auto scaling on his application.
• D. Write a custom script to automate the process

Answer: C

Explanation:
Auto scaling in AWS allows you to configure metric-based rules that (when triggered) will add and/or remove instances (server capacity) to your application. Adding/moving instances is then automated based on the metric rules you configure.

NEW QUESTION 12
Consolidated billing is managed through what AWS service?
Choose the Correct Answer

• A. AWS TCO
• B. AWS Billing Manager
• C. AWS Consolidated Management
• D. AWS Organizations

Answer: D

Explanation:
AWS Organizations is where you can manage multiple AWS accounts in one place (including it's billing features, such as consolidated billing).

NEW QUESTION 13
Derek is running a web application and is noticing that he is paying for way more server capacity then is required. What AWS feature should Derek set up and configure to ensure that his application is automatically adding/removing server capacity to keep in line with the required demand?
Choose the Correct Answer

• A. Auto Scaling
• B. Elastic Server Scaling
• C. Elastic Load Balancing
• D. Auto Sizing

Answer: A

Explanation:
Auto scaling is the feature that automated the process of adding/removing server capacity from a system (based on usage demand). Auto scaling creates a very cost effective system by never having too much or too little server capacity.

NEW QUESTION 14
Which AWS service uses a combination of publishers and subscribers?
Choose the Correct Answer

• A. SNS
• B. RDS
• C. EC2
• D. Lambda

Answer: A

Explanation:
In SNS, there are two types of clients: publishers and subscribers. Publishers send the message, and subscribers receive the message.

NEW QUESTION 15
What are the TWO main security layers (firewalls) used inside a VPC? Choose the 2 Correct answers:

• A. NetProtect
• B. Network Access Control List
• C. Security Group
• D. Security Lists

Answer: BC

Explanation:
Network Access Control Lists (NACL) act as a firewall on the subnet level, and Security Groups act as a firewall on the instance level.

NEW QUESTION 16
Your company's upper management is getting very nervous about managing governance, compliance, and risk auditing in AWS. What service should you enable and inform upper management about?
Choose the Correct Answer

• A. CloudAudit
• B. CloudTrail
• C. CloudCompliance
• D. CloudWatch

Answer: B

Explanation:
AWS CloudTrail is designed to log all actions taken in your AWS account. This provides a great resource for governance, compliance, and risk auditing.

NEW QUESTION 17
What AWS service help you estimate the cost of using AWS vs. an on-premises data center?
Choose the Correct Answer

• A. Cost Explorer
• B. Consolidated Billing
• C. TCO Calculator
• D. None of the above

Answer: C

Explanation:
The TCO (total cost of ownership) calculator helps you estimate the cost of using AWS vs. an onpremises data center.

NEW QUESTION 18
What are the benefits of DynamoDB? (Select all that apply) Choose the 3 Correct answers:

• A. Supports multiple known NoSQL database engines like MariaDB and Oracle NoSQL.
• B. Automatic scaling of throughput capacity.
• C. Single-digit millisecond latency.
• D. Supports both document and key-value store data model

Answer: BCD

Explanation:
DynamoDB does not use/support other NoSQL database engines. You only have access to use DynamoDB's built-in engine.

NEW QUESTION 19
What best describes what AWS is?
Choose the Correct Answer

• A. AWS is an online retailer
• B. AWS is the cloud.
• C. AWS is a cloud services provider.
• D. None of the abov

Answer: C

NEW QUESTION 20
What is AWS's relational database service?
Choose the Correct Answer

• A. Redshift
• B. DymamoDB
• C. ElastiCache
• D. RDS

Answer: D

Explanation:
RDS offers SQL database options - otherwise known as relational databases.

NEW QUESTION 21
Kunal is logged into his company's AWS account. He tries to access EC2 but is getting an error. What is the most likely reason why he cannot access EC2?
Choose the Correct Answer

• A. There is not an IAM access policy attached to his IAM user.
• B. He is not part of an IAM Group.
• C. He does not have multi-factor authentication (MFA) enabled.
• D. There is not an IAM access policy attached to his IAM rol

Answer: A

Explanation:
When an IAM user is created, that user has NO access to any AWS services. To gain access to an AWS server, an IAM user must have permission granted to them. This is done by attached an IAM access policy to their IAM user (or through an attached group). However, just being in a group does not
grant access. A proper policy would need to be attached to that group.

NEW QUESTION 22
What are two open source in-memory engines supported by ElastiCache? Choose the 2 Correct answers:

• A. Redis
• B. Aurora
• C. CacheIt
• D. MemcacheD

Answer: AD

NEW QUESTION 23
......