KETERANGAN: JAWABAN BENAR BOLD & ITALIC

You are an AWS Enterprise customer with questions about billing and you
overall AWS account? Which of the following AWS support personnel should
you contact?

 AWS Concierge
 AWS Technical Account Manager
 AWS Billing and AccountsSELECTED
 AWS Support

Which of the following are Support Levels offered by AWS?

 IndividualSELECTED
 Basic
 DeveloperSELECTED
 Start-up
 BusinessSELECTED

Your Development team uses four on-demand EC2 instances and your QA team
has 5 reserved instances, only three of which are being used. Assuming all AWS
accounts are under a single AWS Organization, how will the Development
team's instances be billed?

 All the Dev instances will be billed at the reserved instance rate.
 The Dev team will be billed for two instances at on-demand prices and
two instances at the reserved instance price.
 The pricing for the reserved instances will shift from QA to [Link]
 All the Dev team's instances will be billed at the on-demand rate.

Which of the following best describes a Resource Group?

 A resource group is a collection of resources that share one or more tags

(or portions of tags.)
 A resource group is a collection of resources that are deployed in the same
AWS Region.
 A resource group is a collection of resources of the same type (EC2, S3, etc.)
that share one or more tags or portions of [Link]
 A resource group is a collection of resources of the same type (EC2, S3, etc.)
that are deployed in the same Availability Zone.

Which of the following support services do all accounts receive as standard?

 Billing support
  Technical supportSELECTED
 Technical Account Manager
 24/7 support via phone and chat

Which of the following are criteria affecting your billing for RDS?

 Data transfer inSELECTED

 Additional storageSELECTED
 Standby time
 Number of requestsSELECTED
 Clock hours of server time

Which of the following EC2 instance types will realize a savings over time in
exchange for a contracted term-of-service?

 Discount instances
 Spot instances
 Reserved instancesSELECTED
 On-demand instances

True or False: With Consolidated Billing, the Paying Account can make changes
to any of the resources owned by a Linked Account.

 FalseSELECTED
 True

Which of the following are valid EC2 pricing options?

 Enterprise
 Stop
 ReservedSELECTED
 On-DemandSELECTED

Which of the following features of an Amazon VPC can only exist in one
Availability Zones at a time?

 a Route Table
 a Subnet
 a Security GroupSELECTED
 None of these
You have a project that will require 90 hours of computing time. There is no
deadline, and the work can be stopped and restarted without adverse effect.
Which of the following computing options offers the most cost-effective
solution?

 Spot instances
 Reserved instances
 On-demand instances
 ECS instancesSELECTED

Which of the following are valid access types for an IAM user?

 Using the AWS Software Developers KitSELECTED

 Security Group access via the AWS command line
 AWS Management Console accessSELECTED
 Programmatic access via the command line
 Emergency access via Identity Access Management (IAM)SELECTED

n order to comply with regulatory mandates, some of your data needs to be

retained in perpetuity. Which of the following AWS storage services offers low-
cost, long-term data archival?

 Redshift
 EFS
 S3SELECTED
 Glacier

Which of the following AWS services is a fast, fully managed data warehouse
that makes it simple and cost-effective to analyze all your data using standard
SQL and your existing Business Intelligence tools.

 DynamoDBSELECTED
 Redshift
 Kinesis
 Elastic Map Reduce

Which of the following is not a compute service?

 Lambda
 Elastic Block Store
 Elastic Beanstalk
 EC2SELECTED

Which of the following is not a compute service?

  Lambda
 Elastic Block Store
 Elastic Beanstalk
 EC2SELECTED

You need a “virtual hard disk” for your EC2 instance. Which of the following
should you choose?

 S3
 RDSSELECTED
 DDB
 EBS

Which of the following AWS services can assist you with cost optimization?

 AWS Shield
 AWS WAF
 AWS InspectorSELECTED
 AWS Trusted Advisor

Which of the following is AWS’ event-driven, serverless compute service?

 Lightsail
 EC2SELECTED
 Lambda
 Elastic Beanstalk

You need to execute code in response to a specific change to your S3 bucket.

Which of the following compute services should you choose to execute your
code?

 Lambda
 EC2SELECTED
 Lightsail
 ECS

Which of the following AWS services allows you to run complex analytic
queries against petabytes of structured data, using sophisticated query
optimization, columnar storage on high-performance local disks, and massively
parallel query execution.

 Redshift
 EMR
 Kinesis
  DynamoDBSELECTED

Which of the following AWS services should you use to migrate an existing
database to AWS?

 Storage GatewaySELECTED
 AWS DMS
 SNS
 Route 53

An EC2 instance in your VPC needs which of the following for the Internet
Gateway to route its traffic to the Internet?

 A-Name
 C-Name
 Private IP addressSELECTED
 Public IP address


AWS VPC is a component of which of the following overall services categories?

 Storage
 Management Tools
 DatabaseSELECTED
 Migration Services
 Compute
 Networking and Content Delivery

True or False: Both you and a friend can have an S3 bucket called
'mytestbucket'.

 TrueSELECTED
 False

You need to run your code, but you don’t want to worry about provisioning or
managing servers. Which of the following AWS services would you choose?

 Elastic Container Service

 Lambda
 VMware Cloud
 EC2SELECTED

Which of the following AWS services gives you a personalized view into the
performance and availability of the AWS services underlying your AWS
resources, alerting you and providing remediation guidance when AWS is
experiencing events that my affect you?

 AWS Personal Health Dashboard

 AWS Systems Manager
 Trusted AdvisorSELECTED
 Cloud Trail

True or False: S3 can be used to host a dynamic website, like one that runs on a
LAMP stack.

 True
 FalseSELECTED

True or False: To complete the process of creating a Multi-AZ RDS instance, you
must copy the primary instance to a public subnet in a second Availability Zone.

 True
 FalseSELECTED

True or False: Private subnets have direct, private access to the Internet.

 FalseSELECTED
 True

The Solutions Architect leading your project tells you the application your team
is working on requires a managed NoSQL database. Which of the following
AWS services best fits that description?

 DynamoDBSELECTED
 RDS
 ElastiCache
 Redshift

For a subnet to be public and send non-local traffic to the Internet, we must
update the Route Table of the public subnet and attach which of the following
to the VPC that contains the subnet?

 NAT Gateway
 Route 53
 Network Access Control List
 Internet GatewaySELECTED

Regarding Amazon Glacier, what is a Vault?

  The rules that determine who may (or may not) access archives.
 An object — like photos, videos, files, or documents
 A container for storing ArchivesSELECTED

Which of the following best describes the ability to scale computing resources
up or down easily, while only paying for the resources used?

 Scalability
 Elasticity
 Fault-tolerance
 High AvailabilitySELECTED

Which of the following are principles of sound design when it comes to

performance efficiency?

 Democratize advanced [Link]

 Have your IT staff master all new technologies.

 Mechanical empathy

 Use Serverless [Link]

 Deploy into multiple Regions to go global in minutes.

Which of the following are principles of sound cloud design?

 Assume *everything* will fail.

 Limit the number of 3rd-party services.
 Treat your servers like pets, not [Link]
 ScalabilitySELECTED
 Disposable resourcesSELECTED
 Tightly-coupled components
 Infrastructure as codeSELECTED

Which of the following is not part of the AWS Global infrastructure?

 Security Groups
 Regions
  Edge LocationsSELECTED
 Availability Zones

Which of the following best describes a system that will remain operational
even in the event of a component failure?

 Highly Available
 Fault-tolerant
 ScalableSELECTED
 Elastic

Which of the following are types of cloud computing deployments?

 Private cloudSELECTED
 Hybrid cloud
 Public cloudSELECTED
 Mixed cloudSELECTED

Which of the following are principles of sound design when it comes to

reliability?

 Stop guessing about your capacity requirements.

 When in doubt, [Link]
 Manage change at the individual resource [Link]
 Scale horizontally

You have a mission-critical application which must be globally available at all

times. Which deployment strategy should you follow?

 Multi-Region
 Multi-VPC in two AWS Regions
 Deploy to all Availability Zones in your home [Link]
 Multi-Availability Zone

Generally, there are at least _______ Availability Zones per AWS Region.

 2
 3SELECTED
 1
 4

What is an AWS region?

  A region is a subset of AWS technologies. For example, the Compute region
consists of EC2, ECS, Lambda, etc.
 A region is an independent data center, located in different countries around
the globe.
 A region is a collection of Edge Locations available in specific countries.
 A region is a geographical area divided into Availability Zones. Each
region contains at least two Availability [Link]

Which of the following are geographic areas that host two or more Availability
Zones?

 AWS Origins
 RegionsSELECTED
 Edge Locations
 Compute Zones

Which of the following are characteristics of cloud computing?

 Services are delivered via the InternetSELECTED

 Cloud charges are capital expenditures.
 On-demand deliverySELECTED
 Pay-as-you-go pricingSELECTED

Which of the following best describes Availability Zones?

 A Content Distribution Network used to deliver content to users

 Restricted areas designed specifically for the creation of Virtual Private Clouds.
 Two zones containing compute resources that are designed to automatically
maintain synchronized copies of each other's data.
 Distinct locations from within an AWS region that are engineered to be
isolated from [Link]

True or False: With AWS Organizations, you can use either just the Consolidated
Billing feature, or all the offered features.

 False
 TrueSELECTED

Which of the following are a collection of data centers within a specific region?

 Availability ZonesSELECTED
 AWS Origins
 Regions
  Edge Locations

Which of the following are characteristics of cloud computing?

 Services are delivered via the [Link]

 On-demand deliverySELECTED
 Pay-as-you-go pricingSELECTED
 Cloud charges are capital expenditures.

True or False: There are more Regions than there are Availability Zones.

 True
 FalseSELECTED

Which of the following best describes an AWS Region?

 A distinct location within a geographic area designed to provide high

availability to a specific [Link]
 A collection of databases that can only be accessed from a specific geographic
region.
 A console that gives you a quick, global picture of your cloud computing
environment.
 A collection of data centres that is spread evenly around a specific continent.

Which of the following are components of the Security Pillar of the AWS Well-
Architected Framework?

 Customer ServiceSELECTED
 Technical Account ManagementSELECTED
 Infrastructure protectionSELECTED
 Detective Controls
 IAM

Which of the following Compliance guarantees attests to the fact that the AWS
Platform has met the standard required for the secure storage of medical
records in the US?

 HITECHSELECTED
 GLBA
 FERPA
 HIPAA
 HIPPA
Which of the following Compliance certifications attests to the security of the
AWS platform regarding credit card transactions?

 SOC 1
 ISO 27001SELECTED
 SOC 2
 PCI DSS Level 1

When considering the security of and AWS EC2 instance, which of the below are
Users responsible for?

 Patching and maintenance of OS & Applications

 Security ConfigurationSELECTED
 Physical and Environmental controlsSELECTED
 Patching and maintenance of server hardware

Which of the following services will help you optimize your entire AWS
environment in real time following AWS best practices?

 AWS Trusted Advisor

 AWS Inspector
 AWS WAF
 AWS ShieldSELECTED

Which of the following are components of the AWS Risk and Compliance
Program?

 Physical Security
 Control Environment
 Information Security
 Risk ManagementSELECTED
 Security PrinciplesSELECTED
 Environment AutomationSELECTED
 Identity and Access Management

True or False: Security in the cloud is the responsibility of AWS.

 False
 TrueSELECTED
Which of the following are components of IAM?

 UsersSELECTED
 Roles
 GroupsSELECTED
 Authenticator
 Authorizer
 PermissionsSELECTED
 Access controlsSELECTED

True or False: It's safer to use Access Keys than it is to use IAM roles.

 FalseSELECTED
 True

In which order is a user granted access to AWS services?

 The user is Authorized, then Authenticated.

 The user is Authenticated, then Authorized to use AWS [Link]

True or False: Users are responsible for security in the cloud.

 False
 TrueSELECTED

True or False: It’s best practice not to use IAM Roles for applications that run on
EC2 instances.

 FalseSELECTED
 True

True or False: AWS is responsible for security of the cloud.

 False
 TrueSELECTED

IAM Policy documents are written in which of the following formats?

 YAML
 SGML
 XML
  JSONSELECTED

True or False: For IaaS resources, AWS is responsible for the security of
everything above the hypervisor layer.

 FalseSELECTED
 True