AWS CCP QUIZ SET1 Author: CloudVikas Published Date: 25 January 2021 9 Comments on AWS CCP QUIZ SET1 Welcome to this quiz. Please share your comment at the end of quiz. It will help us to improve its quality. Hope you will enjoy this. 1. ######QUESTION#########Jason is a Solution Architect working on an application in a cloud based company cloudVikas, the application server needs to be in a private subnet without access to the internet. The solution must retrieve and upload files to an Amazon S3 bucket. How should Jason design a solution to meet these requirements?Deploy a proxy serverUse Amazon S3 VPC endpoints2. ######QUESTION#########A website, with global users, runs on EC2 Instances behind an ELB Application Load Balancer. The instances run in an Auto Scaling Group across multiple Availability Zones and deliver several large files that are stored on a shared Amazon EFS file system. The company needs to avoid serving the files from website every time a user requests these digital assets. How can the company improve the user experience of the web site?Cache static content using CloudFront.Resize the files so that they are smaller.3. ###############################Which parameter act as a firewall for associated subnets, controlling both inbound and outbound traffic at the subnet level.Network ACLsEC2S34. ######QUESTION#########Jason is working as a Solution Architect in a new startup company. He is assigned a task to design media processing flows for them. The file system should have an ability to be mounted on various Linux EC2 Instances and manipulate large files with file locking capability. Which of the following would be an ideal storage service for this requirement?Amazon EFSAmazon S35. Amazon Aurora offers MySQL-compatible relational database and it can scale capacity automatically based on demand? Select appropriate answers from below options? Aurora is fully managed by Amazon Relational Database Service (RDS), which automates time-consuming administration tasks like hardware provisioning, database setup, patching, and backups. Amazon Aurora is a MySQL and PostgreSQL compatible relational database built for the cloud, that combines the performance and availability of high-end commercial databases with the simplicity and cost-effectiveness of open source databases. Amazon Aurora is a graph database service. Amazon Aurora features "Amazon Aurora Serverless" which is an on-demand, auto-scaling configuration for Amazon Aurora (MySQL-compatible and PostgreSQL-compatible editions), where the database will automatically start up, shut down, and scale capacity up or down based on your application's needs. Aurora is up to five times faster than standard MySQL databases and three times faster than standard PostgreSQL databases. It provides the security, availability, and reliability of commercial-grade databases at 1/10th the cost.6. ###############################Alex has created an application to run his business. Which service would help to support his web application to offload serving static assets and store user uploaded images? Select the best response.Amazon EC2Amazon EBSAmazon S37. What AWS technology is often used to provide the elasticity value proposition?Auto-scalingPay-as-you-go8. ###############################Consider a cloud based company is currently using the Enterprise Support plan. They want quick and efficient guidance with their billing and account inquiries. Which of the following included services could assist them?AWS Support ConciergeAWS AdvisorAWS Support API9. ###############################What are the benefits of having infrastructure hosted in the AWS Cloud? (Choose two) There is no need to worry about security Increase speed and agility Competitive upfront costs All of the physical security and most of the data/network security are taken care of for you10. Which of the following are important design principles you should adopt when architecting cloud-based systems?Build as much automation as possibleRemove single points of failure and Build as much automation as possible11. ######QUESTION#########Consider the following situation:Your manager has assigned you a job to design a disaster recovery model for all the resources in their AWS account. The key requirement while devising the solution is to ensure that the cost is at a minimum. Which of the following disaster recovery mechanisms would you employ in such a scenario?Backup and RestoreMulti-Site12. Inherited Controls are controls which a customer fully inherits from AWS such as physical controls and environmental controls.Let’s say you have built an application in AWS for customers to securely store their data. But your customers are concerned about the security of the data and ensuring compliance requirements are met. Then what will you do to achieve customer demands? In AWS,Environmental controls and Physical controls are controls which a customer fully inherits from AWS. company can host customer data in its corporate or remote offices. Companies do not have physical access to the AWS data centers, and as such, they fully inherit the physical and environmental controls from AWS. We can host customer data in AWS data centers.13. What is true about AWS Elastic Beanstalk? AWS Elastic Beanstalk is an application container on top of Amazon Web Services. Developers simply upload their application code, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring. Elastic Beanstalk makes it easy for developers to quickly deploy and manage applications in the AWS Cloud. AWS Elastic Beanstalk is a database, compute engine and storage service14. ###############################Jack is planning to host his education website on AWS. Most of his video courses will be streamed all around the world. Which of the following AWS services would help him achieve high transfer speeds?AWS CloudFrontAWS Cloud DistributerAWS Delivery15. Which of these elements of the security value proposition contributes to securing data in storage?KMSVPN16. What is Amazon Inspector? Amazon Inspector can be used to check the network accessibility of your Amazon EC2 instances -at the instance level- but this is not done automatically. Amazon Inspector can be used to check the network accessibility of your Amazon EC2 instances -at the instance level- but this is not done automatically. Amazon Inspector can be used to check the network accessibility of your Amazon EC2 instances -at the subnet level- but this is not done automatically. Amazon Inspector allows you to create assessment templates to automate security vulnerability assessments throughout your development and deployment pipelines or for static production systems. Amazon Inspector is an automated security assessment service that helps you test the network accessibility of your Amazon EC2 instances and the security state of your applications running on the instances.17. ###############################What does Amazon CloudFront use to distribute content to global users with low latency?AWS RegionsAWS Edge Locations18. ###############################As we know that an Amazon Machine Image (AMI) provides the information required to launch an instance. We want to use an AMI to launch an instance( this AMI is the copy of the AMI running as a virtual server on a host computer in Amazon's data center). Can we do this?NoYes19. ######QUESTION#########John has started a new company, it has enabled CloudTrail logs for its AWS account for audits. In addition, the IT Security department has mentioned that the logs has to be encrypted and measures be taken to check if the logs are not being modified. How can this be achieved? Choose 2 answers Enable CloudTrail Log File Integrity Validation. CloudTrail, by default, encrypts the logs in S3 Enable SSL certificates for the CloudTrail logs.20. ######QUESTION#########John is working in a MNC , he is an administrator, setting permissions to other IAM users with limited permissions. On the AWS Management Console, he created a dev group where new developers will be added to and on your workstation you configured a developer profile. He would like to test that this user cannot terminate instances. Which of the following options would he execute?Retrieve the policy using the EC2 meta data service and use the IAM policy simulatorUse the AWS CLI --dry-run option21. AWS is responsible for items such as the physical security of the DC (data center), creating hypervisors, replacement of old disk drives, and patch management of the infrastructure. What is responsiblity of customers? The customers are responsible for items such as building application schema The customers are responsible for analyzing network performance, configuring security groups and network ACLs and encrypting their data22. ###############################Which of the following is correct ?AWS CloudFormation is a service that does not give developers and businesses an easy way to create a collection of related AWS resources and provision them in an orderly and predictable fashion.Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.23. ######QUESTION#########You have created an AWS CodePipeline pipeline through the AWS Management Console. You would like to view a list of API calls performed by your pipeline because many changes have been made by you and other administrators. Which AWS service will provide this information?CloudTrailCodePipeline Logs24. ###############################Which of the following S3 storage classes is ideal for data with unpredictable access patterns?Amazon S3 Standard-Infrequent Access.Amazon S3 Intelligent-Tiering.25. Which of these are elements of the cost value proposition from AWS? Labor Servers Power and Facilities26. EC2 instance pricing varies depending on many variables. What are those variables? Selected AMI and Selected instance type Region and Data Transfer in/out The buying option (On-demand, Reserved, Spot, Dedicated) The Availability Zone27. ######QUESTION#########John is working on a project, a pipeline was created from the AWS Management Console using service AWS CodePipeline. The process consists of pulling code changes committed to GitHub, generating a build with AWS CodeBuild and deploying to an AWS Elastic Beanstalk environment. Unexpectedly, John's unchanged CodePipeline broke because it cannot find or use the target Elastic Beanstalk environment to deploy his application to. What should he do to find the root cause of this problem? (select three) Look in IAM for Policy changes Look in CodePipeline for changes Look in CloudTrail for a 'delete' event in Elastic Beanstalk Look in CloudFormation for deletions28. ###############################Amazon S3 is an object-level storage service.FalseTrue29. What is the Amazon RDS feature that allows for data redundancy across regions and improves disaster recovery?Multi-region replicationRead Replicas30. ############################### There are more Regions than Edge Locations. Select the best response.FalseTrue31. ######QUESTION#########In Cloud project, John is working on EC2 instance creation and he used to provide EC2 instance details to his team members for project purpose.Consider he is deploying an application on Amazon EC2 that must call AWS APIs. Which method of securely passing credentials to the application should he use?Store the API credentials on the instance using instance metadataStore API credentials as an object in Amazon S3Assign IAM roles to the EC2 instances32. ###############################Which of the following is incorrect regarding Amazon EC2 On-demand instances?You have to pay a start-up fee when launching a new instance for the first timeWith on-demand instances, no longer-term commitments or upfront payments are neededWhen using on-demand instances, you are charged per second based on an hourly rate33. What is the AWS service that gives you full control over the underlying virtual infrastructure? How is that service suitable?Amazon AuroraAmazon Aurora features "Amazon Aurora Serverless" which is an on-demand, auto-scaling configuration for Amazon Aurora (MySQL-compatible and PostgreSQL-compatible editions), where the database will automatically start up, shut down, and scale capacity up or down based on your application's needs.Amazon EC2 provides you with complete control of your virtual instances including root access and the ability to interact with them as you would any machine.34. ###############################The S3 Intelligent-Tiering storage class is designed to optimize costs by automatically moving data to the most cost-effective access tier, without performance impact or operational overhead. Is it true or false?falseTrue35. ###############################Which are the following options are correct about Reserved Instances? Standard RIs provide the most significant discount (up to 75% off On-Demand) and are best suited for steady-state usage. Elastic RI is not a valid RI type. Scheduled RIs are available to launch within the time windows you reserve. This option allows you to match your capacity reservation to a predictable recurring schedule that only requires a fraction of a day, a week, or a month. Convertible RIs provide a discount (up to 54% off On-Demand) and the capability to change the attributes of the RI as long as the exchange results in the creation of Reserved Instances of equal or greater value.36. What is the Amazon RDS feature that can you use to improve the availability of your database and why? AWS Regions AWS Regions and Multi-AZ Deployment Read Replicas-Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances. This feature makes it easy to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads. You can create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read throughput. Multi-AZ Deployment- In a Multi-AZ deployment, Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone. The primary DB instance is synchronously replicated across Availability Zones to a standby replica to provide data redundancy, eliminate I/O freezes, and minimize latency spikes during system backups. Running a DB instance with high availability can enhance availability during planned system maintenance, and help protect your databases against DB instance failure and Availability Zone disruption.37. Which of the following options are correct for Amazon Elastic Container Service (Amazon ECS)? It allows you to run containerized applications on a cluster of EC2 instances It is a highly scalable, high-performance container orchestration service that supports Docker containers and allows you to easily run and scale containerized applications on AWS It can be used to store data in Big data technology.38. ######QUESTION#########John is a Solution Architect working for a project in a mnc , he is building a mobile social media management solution and using S3 as their data store. As per the requirement the application should allow newly registered users to upload their profile picture within a week after registration is completed. How can John handle the uploads in a simplest way?Use Pre-Signed URLs instead to upload the pictures.Control it through the S3 bucket policy39. What component of the AWS infrastructure directly houses the datacenters?Availability zonesEndpoints40. ###############################John is working in cloudvikas company. In his company, one team is developing a critical web application in AWS and the security of the application is one of the top priorities. Which of the following AWS services will provide infrastructure security optimization recommendations?AWS Management ConsoleAWS Trusted Advisor41. ###############################An AMI is template that contains a software configuration such as an operating system, application server, and applications. Choose the best response.TrueFalse42. ###############################What does the "Principle of Least Privilege" refer to?All IAM users should have at least the necessary permissions to access the core AWS services.You should grant your users only the permissions they need when they need them and nothing more.43. ###############################Which of the following options are correct about S3?1) For a small monthly monitoring and automation fee per object, Amazon S3 monitors access patterns of the objects in S3 Intelligent-Tiering, and moves the ones that have not been accessed for 30 consecutive days to the infrequent access tier. 2)If an object in the infrequent access tier is accessed, it is automatically moved back to the frequent access tier. There are no retrieval fees when using the S3 Intelligent-Tiering storage class, and no additional tiering fees when objects are moved between access tiers. 3)S3 Standard does not offer high durability, availability, and performance object storage for frequently accessed data.4)S3 Glacier is a high cost storage class for data archiving.1 and 31 and 22144. ######QUESTION#########You have gone for interview where you have been asked to describe the benefits of using AWS Lambda compared to EC2 instances. Which of the below statements are incorrect?AWS Lambda scales automaticallyWith AWS Lambda the customer does not have any responsibility for deploying and managing the compute infrastructureWith AWS lambda, the client is responsible for launching and administering the underlying AWS compute infrastructure45. Alex has choosen AWS RDS in his project. Which are the below options suitable for AWS RDS? The Multi-region replication is an Amazon RDS feature. Write Replicas is a valid feature of Amazon RDS. If You want to create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of data. If you want to create Read Replicas across regions that improves your disaster recovery capabilities and allows you to scale out globally. If you want to Read Replicas that provides enhanced performance and durability for database (DB) instances. If you want to scale out the capacity constraints of a single DB instance for read-heavy database workloads.46. What does Amazon Elastic Beanstalk provide?A PaaS solution to automate application deployment.A NoSQL database service47. ###############################Consider you are working in an Cloud based organization that has decided to reserve EC2 compute capacity for four years to get more discounts. Their application workloads are likely to change during this time period. What is the EC2 Reserved Instance (RI) type that allows them to change the attributes of the RI whenever they need?Convertible RIsScheduled RIsStandard RIs48. ###############################Which of the following AWS term are not used for physically distinct groups of data centers? Select the best response. Region Availability Zone Edge Location49. ######QUESTION#########A weather reporting app for the Android mobile phones assists citizens with preparation tips for Hurricanes in Florida before hurricanes land. The next version of the weather reporting app will include notification messages directly to mobile apps notifying of updates and of upcoming developing storms. Which of the following technologies will help for the second version?KinesisSNS50. ###############################Which of the following is correct regarding Amazon EC2 On-demand instances? With On-Demand instances, you pay for compute capacity by the hour with no long-term commitments. You can increase or decrease your compute capacity depending on the demands of your application and only pay the specified hourly rate for the instances you use. The use of On-Demand instances frees you from the costs and complexities of planning, purchasing, and maintaining hardware and transforms what are commonly large fixed costs into much smaller variable costs. Dedicated instances can not be used if you require your instance be physically isolated at the host hardware level from instances that belong to other AWS accounts.51. As part of your disaster recovery preparation, you have decided to maintain a replica of your on-site data on AWS S3 using Storage Gateway. AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. Customers use Storage Gateway to simplify storage management and reduce costs for key hybrid cloud storage use cases.Which mode should you use?Volume Gateway Cached ModeGateway Cached Volume ModeGateway Transfer ModeTape GatewayGateway Stored Volume Mode52. ######QUESTION#########AWS X-Ray SDK was bundled into each function to record outgoing calls for tracing purposes. When your team lead goes to the X-Ray service in the AWS Management Console to get an overview of the information collected, they discover that no data is available. What is the most likely reason for this?X-Ray only works with AWS Lambda aliasesFix the IAM Role53. Which cloud deployment model is often owned, managed, and operated by an entity, yet exists entirely on the premises of the cloud provider?PrivatePublic54. ######QUESTION#########You are an administrator for a video on demand web application where content creators upload videos directly into S3. Recent support requests from customers state that uploading video files near 500GB size causes the website to break. After doing some investigation you find the following error: 'Your proposed upload exceeds the maximum allowed size'. What must you do to solve this error?You need to place a service limit request increase with AWSYou need to use multi-part upload for large files55. You are architecting a complex application landscape that values fast disk I/O for EC2 instances above everything else. Which storage option would you choose?IOPSInstance StoreEBSS3EFS56. ###############################IAM user is an important service in AWS.Which of the following should an IAM user provide to interact with AWS services using the AWS CLI?Secret tokenAccess keys57. ######QUESTION#########George is working as a Solution Architect in cloudVikas. The company is using API Gateway and deployment stages to manage multiple release stages for each API, such as alpha, beta, and production. They want to specify a different AWS Lambda function name for each stage in your API. How should George design the API Gateway?API Gateway variablesStage Variables58. ###############################With Amazon EC2, you don’t have to pay any start-up or termination fees.Is it True or False?FalseTrue59. ###############################John wants to run a questionnaire application for only one day (without interruption), which AWS EC2 purchase option would you choose?Dedicated instancesOn-demand instancesSpot instances60. ###############################The principle “design for failure and nothing will fail” is very important when designing your AWS Cloud architecture. Which of the following would help adhere to this principle? (Choose two)Elastic MapReduceAvailability ZonesElastic Load Balancer61. ######QUESTION#########A cloud based company cloudvikas.com is generating large datasets with millions of rows that must be summarized by column. Each company is using some storage service.Here,Which storage service meets the requirements?Amazon ElastiCacheAmazon DynamoDBAmazon RedShift62. ######QUESTION#########Thomas is working on a project that have a workload that requires persistent block storage for Microsoft SQL Server. High availability and durability is a requirement. The solution must allow for daily snapshots and be mountable to other EC2 instances in case of instance failures. Which of the following storage options should he choose?EBSS363. Consider you have created Amazon EC2 instance.To find out the private and public IP addresses for an Amazon EC2 instance,you retrieve the instance metadata. http://169.254.169.254/latest/meta-data/.Is it true or false?FalseTrue64. ###############################What is the AWS database service that allows you to upload data structured in key-value format?Amazon RedshiftDynamoDB65. What type of service would the AWS Virtual Private Cloud (VPC) be considered?IaaSSaaS66. ######QUESTION######### The project team members who perform the same role are assigned to a Microsoft Active Directory group and you have been asked to use Identity Federation and RBAC. Which AWS services would you use to configure this access? (choose 2) AWS Directory Service Simple AD AWS Directory Service AD Connector AWS IAM Groups AWS IAM Roles67. What is Server-Side Encryption ? Server-Side Encryption is related to the Amazon RDS service. Server-Side Encryption is an option of protecting data at rest in Amazon S3. Server-Side Encryption involves requesting Amazon S3 to encrypt your object before saving it on disks in its data centers and decrypt it when you download the objects68. ###############################John is working on a web application that needs to read/write an Amazon DynamoDB table and an Amazon S3 bucket. This operation requires AWS credentials and authorization to use AWS services. Which service would John use? Choose the best response.SSL EndpointsAWS IAM RoleAWS Multi-Tier Security Groups69. ###############################Which among the following AWS service is used to ensure that messages between software components are not lost if one or more components fail?Amazon ConnectAmazon SQS70. ###############################What acts as an additional layer of security at the subnet level in a VPC? Select the best response.Network Access Control ListsRoute TablesSecurity Groups1 out of Enter your email ID details to get QUIZ Result Author: CloudVikas