2023 AWS-Certified-Cloud-Practitioner Premium Files Test pdf - Free Dumps Collection
Get ready to pass the AWS-Certified-Cloud-Practitioner Exam right now using our Amazon Foundational Exam Package
NEW QUESTION 122
Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?
- A. AWS Trusted Advisor
- B. AWS Organizations
- C. AWS Usage Report
- D. Amazon EC2 dashboard
Answer: D
Explanation:
Explanation/Reference: https://www.cloudconformity.com/knowledge-base/aws/EC2/security-group-egress-any.html
NEW QUESTION 123
Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?
- A. Cloud
- B. Hybrid
- C. On-premises
- D. Platform as a service
Answer: A
Explanation:
The cloud allows you to trade capital expenses (such as data centers and physical servers) for variable expenses, and only pay for IT as you consume it. Plus, the variable expenses are much lower than what you would pay to do it yourself because of the economies of scale.
Reference: https://aws.amazon.com/what-is-cloud-computing/
NEW QUESTION 124
Under the AWS shared responsibility model, AWS is responsible for what combination of the following? (Select TWO)
- A. Setting and maintaining Amazon S3 access permissions.
- B. Updating Amazon EC2 security groups
- C. Configuring network ACLS
- D. Managing physical access to AWS data centers
- E. Maintaining the hardware that constitutes the cloud
Answer: D,E
NEW QUESTION 125
Which of the following is a correct relationship between regions, Availability Zones, and edge locations?
- A. Data centers contain regions.
- B. Availability Zones contain edge locations.
- C. Regions contain Availability Zones.
- D. Edge locations contain regions.
Answer: C
Explanation:
Reference: https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
#Region_Maps_and_Edge_Networks
NEW QUESTION 126
What is an advantage of using the AWS Cloud over a traditional on-premises solution?
- A. Users can avoid audits by using reports from AWS.
- B. Users can fix costs no matter what their traffic is.
- C. Users do not have to guess about future capacity needs.
- D. Users can utilize existing hardware contracts for purchases.
Answer: B,C
NEW QUESTION 127
Which of the following are advantages of AWS consolidated billing? (Select TWO.)
- A. The automatic extension of the master account's AWS support plan to all accounts
- B. Service limits increasing by default in all accounts
- C. The ability to receive one bill for multiple accounts
- D. A fixed discount on the monthly bill
- E. Potential volume discounts, as usage in all accounts is combined
Answer: C,E
Explanation:
Explanation
https://aws.amazon.com/premiumsupport/knowledge-center/support-consolidated-billing/
NEW QUESTION 128
The financial benefits of using AWS are: (Select TWO.)
- A. deferred payment plans for startups.
- B. increased capital expenditure (capex).
- C. reduced operational expenditure (opex).
- D. business credit lines for stratups.
- E. reduced Total Cost of Ownership (TCO).
Answer: A,E
NEW QUESTION 129
A company is planning to launch a new steady-state workload on AWS that must be accessible 24 hours a day, 7 days a week.
What is the MOST cost-effective Amazon EC2 pricing option?
- A. Dedicated Hosts
- B. Spot Instances
- C. Reserved Instances
- D. On-Demand Instances
Answer: D
NEW QUESTION 130
Which AWS service allows companies to connect an Amazon VPC to an on-premises data center?
- A. AWS VPN
- B. Amazon Redshift
- C. API Gateway
- D. Amazon Direct Connect
Answer: D
Explanation:
Explanation
AWS Direct Connect enables you to securely connect your AWS environment to your on-premises data center or office location over a standard 1 gigabit or 10 gigabit Ethernet fiber-optic connection. AWS Direct Connect offers dedicated high speed, low latency connection, which bypasses internet service providers in your network path. An AWS Direct Connect location provides access to Amazon Web Services in the region it is associated with, as well as access to other US regions. AWS Direct Connect allows you to logically partition the fiber-optic connections into multiple logical connections called Virtual Local Area Networks (VLAN).
You can take advantage of these logical connections to improve security, differentiate traffic, and achieve compliance requirements.
NEW QUESTION 131
Which feature adds elasticity to Amazon EC2 instances to handle the changing demand for workloads?
- A. Amazon EC2 Auto Scaling
- B. Application Load Balancer
- C. Resource groups
- D. Lifecycle policies
Answer: A
Explanation:
Explanation
Support for monitoring the health of each service independently, as health checks are defined at the target group level and many CloudWatch metrics are reported at the target group level. Attaching a target group to an Auto Scaling group enables you to scale each service dynamically based on demand.
Reference: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/introduction.html
NEW QUESTION 132
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses7
- A. Pay-as-you-go pricing
- B. Economies of scale
- C. Global reach
- D. High availability
Answer: A
NEW QUESTION 133
Which AWS service provides on demand downloads of AWS security and compliance documentation?
- A. AWS Artifact
- B. AWS Trusted Advisor
- C. AWS Directory Service
- D. Amazon Inspector
Answer: A
NEW QUESTION 134
Which services can be used across hybrid AWS Cloud architectures? (Choose two.)
- A. Virtual Private Gateway
- B. Auto Scaling
- C. Amazon Route 53
- D. Amazon CloudWatch default metrics
- E. Classic Load Balancer
Answer: A,C
Explanation:
Explanation/Reference: https://www.stratoscale.com/blog/cloud/building-hybrid-cloud-environment-using-amazon-cloud/
NEW QUESTION 135
Which AWS managed service is used to host databases?
- A. Amazon RDS
- B. AWS Batch
- C. AWS Artifact
- D. AWS Data Pipeline
Answer: A
Explanation:
Explanation
Explanation
Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching and backups. It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need.
NEW QUESTION 136
Which of the following security measures protect access to an AWS account? (Select TWO.)
- A. Activate multi-factor authentication (MFA) for privileged users
- B. Create one 1AM user and share with many developers and users
- C. Grant least privilege access to I AM users
- D. Enable AWS CloudTrail.
- E. Enable Amazon Cloud Front
Answer: C,E
NEW QUESTION 137
Which service should be used to estimate the costs of running a new project on AWS?
- A. AWS Simple Monthly Calculator
- B. AWS Cost Explorer API
- C. AWS TCO Calculator
- D. AWS Budgets
Answer: B
Explanation:
Explanation
To forecast your costs, use the AWS Cost Explorer. Use cost allocation tags to divide your resources into groups, and then estimate the costs for each group.
Reference: https://aws.amazon.com/premiumsupport/knowledge-center/estimating-aws-resource-costs/
NEW QUESTION 138
Which of the following are advantages of the AWS Cloud? (Select TWO.)
- A. High economies of scale
- B. Increased deployment time to market
- C. Increased fixed expenses
- D. Ability to quickly change required capacity
- E. AWS management of user-owned infrastructure
Answer: B,D
NEW QUESTION 139
An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region.
How should the company respond to the auditor's request?
- A. Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.
- B. Explain to the auditor that AWS does not need to be audited because the company's application is hosted in multiple Availability Zones.
- C. Open an AWS Support ticket to request that the auditor receive approval to conduct an onsite assessment of the AWS data centers in which the company operates.
- D. Open an AWS Support ticket to request that the AWS technical account manager (TAM) respond and help the auditor
Answer: D
NEW QUESTION 140
Which AWS service is used to track record, and audit configuration changes made to AWS resources?
- A. AWS Config
- B. Amazon Inspector
- C. AWS IAM
- D. AWS Shield
Answer: A
NEW QUESTION 141
Which of the following is the responsibility of AWS?
- A. Patching guest operating systems
- B. Physically destroying storage media at end of life
- C. Setting up AWS Identity and Access Management (IAM) users and groups
- D. Configuring security settings on Amazon EC2 instances
Answer: B
Explanation:
Explanation
Media storage devices used to store customer data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored customer data is not removed from AWS control until it has been securely decommissioned.
NEW QUESTION 142
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?
- A. AWS CloudTrail
- B. Amazon CloudWatch
- C. Amazon Inspector
- D. AWS 1AM
Answer: A
NEW QUESTION 143
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.
Which AWS service meets these requirements?
- A. AWS Lambda
- B. Amazon Athena
- C. AWS Fargate
- D. Amazon RDS
Answer: C
NEW QUESTION 144
What services has built-in DDoS mitigation and/or protection?
Choose the Correct answer:
- A. None of the above
- B. RDS
- C. EC2
- D. SNS
Answer: A
Explanation:
AWS services with built-in DDoS migigation/protection include: 1) Route 53 2) CloudFront 3) WAF (web application firewall) 4) Elastic Load Balancing 5) VPCs and Security Groups
NEW QUESTION 145
As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?
- A. Security management of data center
- B. Patch management
- C. Configuration management
- D. User and access management
Answer: D
Explanation:
Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
NEW QUESTION 146
Which of the following are features of Amazon CloudWatch Logs? (Select TWO.)
- A. Provided at no charge
- B. Adjustable retention
- C. Summaries by Amazon Simple Notification Service (Amazon SNS)
- D. Real-time monitoring
- E. Free Amazon Elasticsearch Service analytics
Answer: B,D
Explanation:
https://aws.amazon.com/cloudwatch/faqs/
NEW QUESTION 147
......
Master 2023 Latest The Questions Amazon Foundational and Pass AWS-Certified-Cloud-Practitioner Real Exam!: https://examtorrent.actual4test.com/AWS-Certified-Cloud-Practitioner_examcollection.html