AWS CCP Practice Exam 2022;Solved correctly
Your company is migrating its services to the AWS cloud. The DevOps team has heard
about infrastructure as code, and wants to investigate this concept. Which AWS service
would they investigate?
AWS CloudFormation
Which of the following can you use as a web-based interface to view processes in
AWS?
AWS Management Console
After experiencing unusual behavior in your AWS account, you need to determine if
there are any issues with AWS that may be affecting your account. What section of the
AWS portal helps you to inspect account alerts and find remediation guidance for your
account?
AWS Personal Health Dashboard
A company is configuring IAM for its new AWS account. There are 5 departments with
between 5 to 10 users in each department. How can they efficiently apply access
permissions for each of these departments and simplify management of these users?
Create policies for each department that define the permissions needed. Create an IAM
group for each department and attach the policy to each group. Add each department's
members to their respective IAM group.
A company is migrating to the AWS Cloud. They need to set up DNS in the cloud.
Which service is a highly available and scalable cloud DNS service in AWS?
Route 53
A company needs to use a Load Balancer which can serve traffic at the TCP, and UDP
layers. Additionally, it needs to handle millions of requests per second at very low
latencies. Which Load Balancer should they use?
Network Load Balancer
You work for a financial company that has several mission-critical workloads. Which
AWS Support Plan should you use?
Enterprise
A developer is trying to programmatically retrieve information from an EC2 instance
such as public keys, ip address, and instance id. From where can this information be
retrieved?
Instance Metadata
The CFO of a software company had requested an Executive Summary detailing the
advantages of a potential move to the AWS Cloud. What can you say is an advantage
of an RDS database over a traditional database?
AWS maintains the underlying OS and performs software patching on the database.
A company is contemplating a move to the AWS Cloud. What benefits can be gained
from such a move?
The company can focus on its business rather than setting up a data center.
Which of the following is an AWS Global Service?
IAM
, Your team needs to begin monitoring the applications running in your AWS account.
Which AWS service can you use?
Amazon CloudWatch
You are storing sensitive employee information in an S3 Bucket. What can you use to
give bucket access only to authorized personnel?
Bucket Policy
A new application needs temporary access to resources in AWS. How can this best be
achieved?
Create an IAM Role and have the application assume the role.
What is the most cost effective AWS Support Plan if you want the full set of Trusted
Advisor checks?
Business
Which S3 storage class is the best value for long-term storage?
Glacier
You are working with IAM and need to attach policies to users, groups, and roles. Which
will you be attaching these policies to?
Identities
A network security team has noticed some malicious activity on the company AWS
account. Which AWS service can be used to detect malicious activity and help protect
the account?
Amazon GuardDuty
Upon venturing into using the AWS Cloud, your company decides to follow the 5 pillars
of the AWS Well Architected Framework. Which items are pillars of the Well Architected
Framework?
Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization
A new application rolled out by the development team is going to require load balancing
of HTTP and HTTPS traffic. Which Load Balancer is best suited for this type of traffic?
Application Load Balancer
You want to define a virtual network in your AWS cloud to be able to launch resources
in that virtual network. What do you need to configure?
VPC
After configuring your VPC and all of the resources within it, you want to add an extra
layer of security at the subnet level. Which will you use to add this security?
Network ACL
Developers in your company need to interact with AWS from the Command Line
Interface. Which security item will you need to provide to the developers?
Access Key
In Identity and Access Management, which term applies to a person or application that
uses the AWS account root user, an IAM user, or an IAM role to sign in and make
requests to AWS?
Principal
Which of the following is an AWS Global Service?
CloudFront
A video production company uploads large video files to S3 buckets using multipart
upload. To which AWS Cloud best practice does this adhere?
Your company is migrating its services to the AWS cloud. The DevOps team has heard
about infrastructure as code, and wants to investigate this concept. Which AWS service
would they investigate?
AWS CloudFormation
Which of the following can you use as a web-based interface to view processes in
AWS?
AWS Management Console
After experiencing unusual behavior in your AWS account, you need to determine if
there are any issues with AWS that may be affecting your account. What section of the
AWS portal helps you to inspect account alerts and find remediation guidance for your
account?
AWS Personal Health Dashboard
A company is configuring IAM for its new AWS account. There are 5 departments with
between 5 to 10 users in each department. How can they efficiently apply access
permissions for each of these departments and simplify management of these users?
Create policies for each department that define the permissions needed. Create an IAM
group for each department and attach the policy to each group. Add each department's
members to their respective IAM group.
A company is migrating to the AWS Cloud. They need to set up DNS in the cloud.
Which service is a highly available and scalable cloud DNS service in AWS?
Route 53
A company needs to use a Load Balancer which can serve traffic at the TCP, and UDP
layers. Additionally, it needs to handle millions of requests per second at very low
latencies. Which Load Balancer should they use?
Network Load Balancer
You work for a financial company that has several mission-critical workloads. Which
AWS Support Plan should you use?
Enterprise
A developer is trying to programmatically retrieve information from an EC2 instance
such as public keys, ip address, and instance id. From where can this information be
retrieved?
Instance Metadata
The CFO of a software company had requested an Executive Summary detailing the
advantages of a potential move to the AWS Cloud. What can you say is an advantage
of an RDS database over a traditional database?
AWS maintains the underlying OS and performs software patching on the database.
A company is contemplating a move to the AWS Cloud. What benefits can be gained
from such a move?
The company can focus on its business rather than setting up a data center.
Which of the following is an AWS Global Service?
IAM
, Your team needs to begin monitoring the applications running in your AWS account.
Which AWS service can you use?
Amazon CloudWatch
You are storing sensitive employee information in an S3 Bucket. What can you use to
give bucket access only to authorized personnel?
Bucket Policy
A new application needs temporary access to resources in AWS. How can this best be
achieved?
Create an IAM Role and have the application assume the role.
What is the most cost effective AWS Support Plan if you want the full set of Trusted
Advisor checks?
Business
Which S3 storage class is the best value for long-term storage?
Glacier
You are working with IAM and need to attach policies to users, groups, and roles. Which
will you be attaching these policies to?
Identities
A network security team has noticed some malicious activity on the company AWS
account. Which AWS service can be used to detect malicious activity and help protect
the account?
Amazon GuardDuty
Upon venturing into using the AWS Cloud, your company decides to follow the 5 pillars
of the AWS Well Architected Framework. Which items are pillars of the Well Architected
Framework?
Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization
A new application rolled out by the development team is going to require load balancing
of HTTP and HTTPS traffic. Which Load Balancer is best suited for this type of traffic?
Application Load Balancer
You want to define a virtual network in your AWS cloud to be able to launch resources
in that virtual network. What do you need to configure?
VPC
After configuring your VPC and all of the resources within it, you want to add an extra
layer of security at the subnet level. Which will you use to add this security?
Network ACL
Developers in your company need to interact with AWS from the Command Line
Interface. Which security item will you need to provide to the developers?
Access Key
In Identity and Access Management, which term applies to a person or application that
uses the AWS account root user, an IAM user, or an IAM role to sign in and make
requests to AWS?
Principal
Which of the following is an AWS Global Service?
CloudFront
A video production company uploads large video files to S3 buckets using multipart
upload. To which AWS Cloud best practice does this adhere?
