VOLUME 1 WITH 300 ACTUAL EXAM

pg. 1

VOLUME 1 WITH 300 ACTUAL EXAM

QUESTIONS AND ANSWERS WITH DETAILED

RATIONALES/ AWS CLOUD PRACTITIONER

CERTIFICATION EXAM / PREP (NEW!)

A company is migrating to the AWS Cloud. They need to set up DNS in the cloud.Which service is a highly available and scalable cloud DNS service in AWS?

• CloudFront
• Amazon Macie
• Route 53
• Amazon VPC - ANSWER-C) Route 53

Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect. Amazon Route 53 is fully compliant with IPv6 as well.

A gaming company is using the AWS Developer Tool Suite to develop, build, and deploy their applications. Which AWS service can be used to trace user requests from end-to-end through the application?

• AWS X-Ray
• CloudTrail
• AWS Inspector
• CloudWatch - ANSWER-A) AWS X-Ray 1 / 4

pg. 2

AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application's underlying components.

A financial company needs to migrate large amounts of data, at a peta-byte scale, to AWS. Which AWS service can perform this type of migration?

• AWS Data Pipeline
• Database Migration Service
• AWS Snowball
• API Gateway - ANSWER-C) AWS Snowball

Snowball is a petabyte-scale data transport solution that uses secure appliances to transfer large amounts of data into and out of the AWS cloud. Using Snowball addresses common challenges with large-scale data transfers including high network costs, long transfer times, and security concerns

A recent audit has dictated that a company begin keeping a log of AWS Management Console actions and API calls. Which AWS service can help with this?

• CloudWatch
• AWS Inspector
• AWS CloudTrail
• AWS X-Ray - ANSWER-C) AWS CloudTrail
• / 4

pg. 3 AWS CloudTrail increases visibility into your user and resource activity by recording AWS Management Console actions and API calls. You can identify which users and accounts called AWS, the source IP address from which the calls were made, and when the calls occurred

What is a monitoring and observability service built for DevOps engineers, developers, site reliability engineers (SREs), and IT managers - ANSWER- Amazon CloudWatch

A new application rolled out by the development team is going to require load balancing of HTTP and HTTPS traffic. Which Load Balancer is best suited for this type of traffic?

• HTTP Load Balancer
• Classic Load Balancer
• Network Load Balancer
• Application Load Balancer - ANSWER-D) Application Load Balancer

Application Load Balancer is best suited for load balancing of HTTP and HTTPS traffic and provides advanced request routing targeted at the delivery of modern application architectures, including microservices and containers.

A colleague tells you about a service that uses machine learning to discover and protect sensitive data stored in S3 Buckets. Which AWS service does this?

• Macie
• Inspector
• Rekognition
• Cognito - ANSWER-A) Macie
• / 4

pg. 4 Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS.

What is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS, automatically assesses applications for exposure, vulnerabilities, and deviations from best practices, and after performing an assessment, it produces a detailed list of security findings prioritized by level of severity - ANSWER-Amazon Inspector

A Healthcare agency needs to store certain patient information for up to 10 years.To save cost, they want to archive this data to cheaper storage. The data needs to be retrieved within 12 hours. Which is the cheapest option?

• Glacier Deep Archive
• Redshift
• S3 Standard IA
• Glacier - ANSWER-A) Glacier Deep Archive

Glacier Deep Archive meets the requirement and is the cheapest option. Amazon S3 Glacier and S3 Glacier Deep Archive are a secure, durable, and extremely low- cost Amazon S3 cloud storage classes for data archiving and long-term backup.They are designed to deliver 99.999999999% durability, and provide comprehensive security and compliance capabilities that can help meet even the most stringent regulatory requirements.

There have been some questionable activities in your AWS account. You need to review your event history, such as actions taken from the Management Console and the CLI. Which service records this type of information?

• AWS Config
• IAM
• / 4