AWS CCP q21-30

A characteristic of edge locations is that they:

• host Amazon EC2 instances closer to users.

• help lower latency and improve performance for users.

• cache frequently changing data without reaching the origin server.

• refresh data changes daily

Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users?

• A public and private key-pair

• Amazon Inspector

• AWS Identity and Access Management (IAM) policies

• Security Groups

Answer explanation

Reference: https://aws.amazon.com/blogs/security/how-to-restrict-amazon-s3-bucket-access-to-a-specificiam-role/

Which of the following security-related actions are available at no cost?

• Calling AWS Support

• Contacting AWS Professional Services to request a workshop

• Accessing forums, blogs, and whitepapers

• Attending AWS classes at a local university

Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value?

• Dedicated RIs

• Scheduled RIs

• Convertible RIs

• Standard RIs

Answer explanation

Reference: https://aws.amazon.com/ec2/pricing/reserved-instances/

Which AWS feature will reduce the customer’s total cost of ownership (TCO)?

• Shared responsibility security model

• Single tenancy

• Elastic computing

• Encryption

Which of the following services will automatically scale with an expected increase in web traffic?

• AWS CodePipeline

• Elastic Load Balancing

• Amazon EBS

• AWS Direct Connect

Answer explanation

Reference: https://aws.amazon.com/elasticloadbalancing/

Where are AWS compliance documents, such as an SOC 1 report, located?

• Amazon Inspector

• AWS CloudTrail

• AWS Artifact

• AWS Certificate Manager

Answer explanation

Reference: https://aws.amazon.com/compliance/soc-faqs/

Under the AWS shared responsibility model, which of the following activities are the customer’s responsibility? (Choose two.)

• Patching operating system components for Amazon Relational Database Server (Amazon RDS)

• Encrypting data on the client-side

• Training the data center staff

• Configuring Network Access Control Lists (ACL)

• Maintaining environmental controls within a data center

Answer explanation

Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

Which is a recommended pattern for designing a highly available architecture on AWS?

• Ensure that components have low-latency network connectivity.

• Run enough Amazon EC2 instances to operate at peak load.

• Ensure that the application is designed to accommodate failure of any single component

• Use a monolithic application that handles all operations

According to best practices, how should an application be designed to run in the AWS Cloud?

• Use tightly coupled components.

• Use loosely coupled components.

• Use infrequently coupled components.

• Use frequently coupled components.

Answer explanation

Reference: https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf