AWS CLOUD PRACTITIONER EXAM QUESTIONS AND VERIFIED ANSWERS UPDATED

AWS CLOUD PRACTITIONER EXAM QUESTIONS AND VERIFIED ANSWERS UPDATED The following are AWS Storage Sevices A. AWS Relational Database Service and Dynamo DB B. AWS Glacier, Snowball, Import and Export C. Glacier ElastiCache D. Relational Database Service, DyanamoDB, Glacier, ElastiCache B The others have Database services included You have an application running on-premises that processes incoming messages. The application server is continually crashing whenever a spike in demand occurs. You would like to decouple your application from demand by using a queue to allow messages to build up and also have server capacity increased when the queue size increases. You would also like an alert by email if a problem occurs. What AWS services would you use? A. EC2, AutoScaling, S3, CloudWatch, SNS and SES B. EC2, Autoscaling, SQS and SES C. EC2, Autoscaling, SQS and CloudWatch D. EC2, Autoscaling, SQS, SNS and CloudWatch E. EC2, Autoscaling, SQS, SNS, CloudWatch and SES D SNS can send emails when a CloudWatch alarm is triggered, SES is not required. You have a Microsoft SQL Server database that you would to migrate over to AWS EC2 Linux. You still want control over the underlying Linux operating system. What is the best solution? A. Launch an AWS SQL Server RDS instance. B. Launch an AWS EC Linux instance. Install Microsoft SQL Server on instance. C. Launch an AWS EC Windows instance. Install Ubuntu for Windows. Install Microsoft SQL Server on instance. D. This is not possible as Microsoft SQL Server cannot run on Linux. B SQL Server can run on Linux. Use an EC2 instance to run the database if you want control over the underlying operating system. Which of the following is NOT an AWS serverless technology Answers A. DynamoDB B. RDS C. S3 D. Lambda B Although AWS takes care of the underlying operating system, RDS is not a serverless environment. You still need to launch RDS server instances. What is the command to get help on S3? Answers A. aws-s3-help B. aws s3 help or aws s3api help C. s3 help D. cli s3 help E. aws-s3-help or aws-s3api-help B To get a list of all commands available in each tier, use the help argument with the aws s3 or aws s3api commands See: CLI is installed by default on AWS Ubuntu Linux EC2 instances. Answers True False B Installed on AWS Linux AMIs not Ubuntu See: AWS IAM is: Answers A. A web service that enables Amazon Web Services (AWS) customers to manage users and user permissions in AWS. B. A secure database service that enables Amazon Web Services (AWS) customers to manage users and user permissions in AWS. C. A security service that enables Amazon Web Services (AWS) customers to secure AWS resources. D. A network security service that enables Amazon Web Services (AWS) customers to secure AWS infrastructure. A IAM credentials are used to: Answers A. manage your AWS account credentials, such as your password, access keys (access key ID and secret access key). B. manage multi-factor authentication devices. C. create security credentials for your users as needed. D. allow users to access account billing pages. E. allow applications that run on Amazon EC2 to access to AWS resources E Secure access to AWS resources for applications that run on Amazon EC2. You can use IAM features to securely give applications that run on EC2 instances the credentials that they need in order to access other AWS resources, like S3 buckets and RDS or DynamoDB databases. A _____ is an entity that has a set of permissions, and that another entity assumes to make calls to access your AWS resources Answers A. Role B. Credential C. Resource D. Policy A An IAM role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it. Also, a role does not have standard long-term credentials (password or access keys) associated with it. Instead, if a user assumes a role, temporary security credentials are created dynamically and provided to the user. Which is a valid Amazon Resource name (ARN) for IAM? Answers A. aws:iam:::instance-profile/Webserver B. arn:aws:iam:::instance-profile/Webserver C. :aws:iam::instance-profile/Webserver D. arn:aws:iam:us-east-1:::instance-profile/Webserver B IAM is global service so it will not have a region specified in the ARN. arn:aws:iam::account:resource See: You create an IAM user named David. Your company uses AWS S3 and has a bucket with folders for each employee; the bucket has an IAM resource policy (a bucket policy) that lets users access only their own folders in the bucket. Suppose that the employee named David leaves your company and you delete the corresponding IAM user. But later another employ