AWS Certified Cloud Practitioner

AWS Certified Cloud Practitioner

A key financial benefit of migrating systems hosted on your on-premises data center to AWS.

– Replaces upfront capital expenses (CAPEX) with low variable operational expense (OPEX).
– Reduce the Total Cost of Ownership (TCO)

Which of the following statements are true about Cost Allocation Tags in AWS Billing?

-For each resource, each tag key must be unique, and each tag key can have only one value

-You must activate both AWS generated tags and user-defined tags separately before they can appear in Cost Explorer or on a cost allocation report

Which of the following are components of an AWS Site-to-Site VPN?

-Virtual private gateway (VGW)

-Customer gateway

-Customer gateway device

-Transit gateway

Which AWS service can be used to automate code deployment to Amazon Elastic Compute Cloud (Amazon EC2) instances as well as on-premises instances?

AWS CodeDeploy

What allows you to use programming languages or a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts?

AWS CloudFormation

What connects Amazon Virtual Private Clouds (Amazon VPC) and on-premises networks through a central hub?

AWS Transit Gateway

What automatically has encryption enabled?

-AWS Storage Gateway

-Amazon Simple Storage Service (Amazon S3)

Which budget types can be created under AWS Budgets

-Cost budget

-Usage budget

-Reservation budget

What is the primary benefit of deploying an Amazon Relational Database Service (Amazon RDS) database in a Read Replica configuration?

It improves database scalability

A company has a static website hosted on an Amazon Simple Storage Service (Amazon S3) bucket in an AWS Region in Asia. Although most of its users are in Asia, now it wants to drive growth globally. How can it improve the global performance of its static website?

Use Amazon CloudFront to improve the performance of your website

AWS Identity and Access Management (AWS IAM) policies are written as JSON documents. Which of the following are mandatory elements of an IAM policy?

Amazon CloudWatch billing metric data is stored in which AWS Region?

US East (N. Virginia) - us-east-1

What contains the most frequent & common questions and requests and AWS provided solutions for the same? This should be the starting point of checking for a solution or troubleshooting an issue with AWS services.

AWS Knowledge Center

What is the hub for managing your Support cases?

AWS Support Center

Which AWS services offer block-level storage?

-Amazon Elastic Block Store (Amazon EBS)

-Amazon Elastic Container Service (Amazon ECS)

An automated security assessment service that helps improve the security and compliance of applications deployed on AWS. It automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.

Amazon Inspector

For data transfer charges into or out of an AWS Region?

Only outbound data transfer is charged.

What AWS service allows a database to have flexible schema and supports document data models?

Amazon DynamoDB

Easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.

AWS Elastic Beanstalk

Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two)?

-AWS VPN

-AWS Direct Connect

Which AWS service will help the organization track the history of configuration changes for all the resources?

AWS Config

1st Pillar of Well-Architected Framework

Operational excellence

2nd Pillar of Well-Architected Framework

Security

3rd Pillar of Well-Architected Framework

Reliability

4th Pillar of Well-Architected Framework

Performance efficiency

5th Pillar of Well-Architected Framework

Cost optimization

6th Pillar of Well-Architected Framework

Sustainability

4 cloud architectures design principle in AWS

1. Design for failure.

2. Decouple your components

3. Implement elasticity

4. Think parallel

A Global Infrastructure component that is made up of one or more discrete data centers, with each redundant power, networking, and connectivity housed in separate facilities.

Availability Zones

A cloud best practice that reinforces the use of the Service-Oriented Architecture (SOA) design principle.

Decouple your components

You need to enable your Amazon EC2 instances in the public subnet to connect to the public Internet.

Internet Gateway

You can use it to resolve the connection between your on-premises VPN and your Amazon VPC.

– Virtual Private Gateway – Amazon Route 53

It provides the event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services.

AWS CloudTrail

A company needs to download the compliance-related documents in AWS such as Service Organization Controls (SOC) reports

AWS Artifact

Improve the security of IAM users.

– Enable Multi-Factor Authentication (MFA) – Configure a strong password policy

An IAM identity that uses access keys to manage cloud resources via AWS CLI.

IAM User

Grant temporary access to your AWS resources.

IAM Role

Apply and easily manage the common access permissions to a large number of IAM users in AWS.

IAM Group

Grant the required permissions to access your Amazon S3 resources.

Bucket Policy User Policy

It scales up to millions of users and supports sign-in with social identity providers, such as Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0.

Amazon Cognito

A startup needs to evaluate the newly created IAM policies.

IAM Policy Simulator

A service that discovers, classifies, and protects sensitive data such as personally identifiable information (PII) or intellectual property.

Amazon Macie

A threat detection service that continuously monitors for malicious activity to protect your AWS account.

Amazon GuardDuty

Prevent unauthorized deletion of Amazon S3 objects.

Enable Multi-Factor Authentication (MFA)

A company needs to control the traffic going in and out of its VPC subnets.

Network Access Control List (NACL)

What acts as a virtual firewall in AWS that controls the traffic at the EC2 instance level?

Security Group

Its responsibility is to patch the host operating system of an Amazon EC2 instance.

AWS

A customer can assume the responsibility and management of the guest operating system, including updates and security patches.

Amazon EC2

You need to securely transfer hundreds of petabytes of data and exabyte-scale datasets into and out of the AWS Cloud.

AWS Snowmobile

A type of EC2 instance that allows you to use your existing server-bound software licenses.

Dedicated Host

A Developer can use these to interact with their AWS services.

– AWS Command Line Interface
-AWS SDKs

A highly available and scalable cloud DNS web service in AWS.

Amazon Route 53

Store the results of I/O-intensive SQL database queries to improve the application performance.

Amazon ElastiCache

A combination of AWS services that allows you to serve the static files with the lowest possible latency.

• Amazon S3
• Amazon CloudFront

Automatically scale the capacity of an AWS cloud resource based on the incoming traffic to improve availability and reduce failures

AWS Auto Scaling

A company needs to migrate the on-premises MySQL database to Amazon RDS.

AWS Database Migration Service (AWS DMS)

Automatically transfer your infrequently accessed data in your S3 bucket to a more cost-effective storage class.

S3 Lifecycle Policy

You need to upload a single object as a set of parts to improve throughput and have a quicker recovery from any network issues.

Use Multipart Upload API

A company needs to establish a dedicated connection between its on-premises network and its AWS VPC.

AWS Direct Connect

A Machine Learning service that allows you to add visual analysis features to your applications.

Amazon Rekognition

A source control service that allows you to host Git-based repositories.

AWS CodeCommit

A service that can trace user requests in your application.

AWS X-Ray

Inspects your AWS environment and makes recommendations for saving money, improving system performance, or closing security gaps.

AWS Trusted Advisor

You need to speed up the content delivery of static assets to your customers around the globe.

Amazon CloudFront

Create and deploy infrastructure-as-code templates.

AWS CloudFormation

You have to encrypt the log data that is stored and managed by AWS CloudTrail.

AWS Key Management Service (AWS KMS)

A database service that can be used to store JSON documents.

Amazon DynamoDB

A designated technical point of contact that will maintain an operationally healthy AWS environment.

Technical Account Manager (TAM)

It allows the customer to view his Reserved Instance usage for the past month.

AWS Billing Console

A startup needs to estimate the costs of moving its application to AWS.

AWS Total Cost of Ownership (TCO) Calculator

Allows you to set coverage targets and receive alerts when your utilization drops below the threshold you define.

AWS Budgets

A type of Reserved Instance that allows you to change its instance family, instance type, platform, scope, or tenancy.

Convertible RI

Take advantage of unused EC2 capacity in the AWS Cloud and provides up to 90% discount.

Spot Instance

You need to centrally manage policies and consolidate billing across multiple AWS accounts.

AWS Organizations

The most cost-efficient storage option for retaining database backups that allows occasional data retrieval in minutes.

Amazon Glacier

Forecast future costs and usage of your AWS resources based on your past consumption.

AWS Cost Explorer

Categorize and track AWS costs on a detailed level.

Cost allocation tags

The lowest support plan that allows an unlimited number of technical support cases to be opened.

Developer Support Plan

The most cost-effective option when you purchase a Reserved Instance for a 1-year term.

All Upfront

You have to combine usage volume discounts of your multiple AWS accounts.

Consolidated Billing

Sell your catalog of custom AMIs in AWS

AWS Marketplace