AWS CLOUD PRACTITIONER EXAM 1 QUESTIONS AND VERIFIED ANSWERS 2024

AWS CLOUD PRACTITIONER EXAM 1 QUESTIONS AND VERIFIED ANSWERS 2024 What are the benefits of having infrastructure hosted in the AWS Cloud? (Choose two) A. All of the physical security and most of the data/network security are taken care of for you B. Having complete control over the physical infrastructure C. Increase speed and agility D. Competitive upfront costs E. There is no need to worry about security A and C Option A : ** All of the physical security are taken care of for you. Amazon data centers are surrounded by three physical layers of security. "Nothing can go in or out without setting off an alarm". It's important to keep bad guys out, but equally important to keep the data in which is why Amazon monitors incoming gear, tracking every disk that enters the facility. And "if it breaks we don't return the disk for warranty. The only way a disk leaves our data center is when it's confetti." ** Most (not all) data and network security are taken care of for you. When we talk about the data/network security, AWS has a "shared responsibility model" where AWS and the customer share the responsibility of securing them. For example the customer is responsible for creating rules to secure his network traffic using the security groups and is also responsible for protecting data with encryption. Option C: In a cloud computing environment, new IT resources are only a click away, which means it requires less time to make those resources available to developers - from weeks to just minutes. This results in a dramatic increase in agility for the organization, since the cost and time it takes to experiment and develop is significantly lower. Option B is not correct. The Physical infrastructure is a responsibility of AWS and not the customer. Hence it is not an advantage of moving to the AWS Cloud. Option D is not correct. In AWS, most of the services are available with no upfront costs as it follows the pay-as-you-go pricing. AWS allows you to pay upfront for some services to get more discounts, but you have the choice to pay upfront or pay as you go. By contrast, traditional IT providers require you to pay upfront for all of their services. Option E is not correct. As mentioned above, security is a shared responsibility between AWS and the customer. For example, the customer has to manage who can access and use AWS resources using the IAM service. You want to monitor the CPU utilization of an EC2 resource in AWS. Which of the below services can help in this regard? A. AWS Config B. AWS Inspector C. AWS Cloudwatch D. AWS Trusted Advisor C. AWS Cloudwatch Amazon CloudWatch is a service that monitors AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, set alarms, and automatically react to changes in your AWS resources. Amazon CloudWatch can monitor AWS resources such as Amazon EC2 instances, Amazon DynamoDB tables, and Amazon RDS DB instances, as well as custom metrics generated by your applications and services, and any log files your applications generate. Option A is not correct. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Option B is not correct. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Option D is not correct. AWS Trusted Advisor is an online tool that provides real time guidance to help you provision your resources following AWS best practices. Which of the following is not a part of the Cloud Computing models? A. Infrastructure as a Service (IaaS) B. Hardware as a Service (HaaS) C. Platform as a Service (PaaS) D. Software as a Service (SaaS B. Hardware as a Service (Haas) There are three Cloud Computing Models: 1) Infrastructure as a Service (IaaS) - Infrastructure as a Service (IaaS) contains the basic building blocks for cloud IT and typically provide access to networking features, computers (virtual or on dedicated hardware), and data storage space. IaaS provides you with the highest level of flexibility and management control over your IT resources and is most similar to existing IT resources that many IT departments and developers are familiar with today. 2) Platform as a Service (PaaS) - Platform as a Service (PaaS) removes the need for your organization to manage the underlying infrastructure (usually hardware and operating systems) and allows you to focus on the deployment and management of your applications. This helps you be more efficient as you don't need to worry about resource procurement, capacity planning, software maintenance, patching, or any of the other undifferentiated heavy lifting involved in running your application. 3) Software as a Service (SaaS) - Software as a Service (SaaS) provides you with a completed product that is run and managed by the service provider. In most cases, people referring to Software as a Service are referring to end-user applications. With a SaaS offering you do not have to think about how the service is maintained or how the underlying infrastructure is managed; you only need to think about how you will use that particular piece of software. A common example of a SaaS application is web-based email which you can use to send and receive email without having to manage feature additions to the email product or maintain the servers and operating systems that the email program is running on. Which of the following can be used to control access to your Amazon EC2 instances? A. DB security groups B. IAM policies C. EC2 security groups D. None of these