AWS CCP q31-40

AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.)

• Implementing Amazon Rekognition

• Using AWS Shield-protected resources

• Blocking access with Security Groups

• Using Multi-Factor Authentication (MFA)

• Enforcing password strength and expiration

Which AWS services should be used for read/write of constantly changing data? (Choose two.)

• Amazon Glacier

• Amazon RDS

• AWS Snowball

• Amazon Redshift

• Amazon EFS

What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)?

• It simplifies relational database administration tasks

• It provides 99.99999999999% reliability and durability.

• It automatically scales databases for loads

• It enables users to dynamically adjust CPU and RAM resources.

A customer needs to run a MySQL database that easily scales.

Which AWS service should they use?

• Amazon Aurora

• Amazon Redshift

• Amazon DynamoDB

• Amazon ElastiCache

Answer explanation

Reference: https://aws.amazon.com/rds/aurora/serverless/

Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links?

• Availability Zone

• Edge location

• Region

• Private networking

Answer explanation

Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html

Which of the following is a shared control between the customer and AWS?

• Providing a key for Amazon S3 client-side encryption

• Configuration of an Amazon EC2 instance

• Environmental controls of physical AWS data centers

• Awareness and training

Answer explanation

Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

How many Availability Zones should compute resources be provisioned across to achieve high availability?

• A minimum of one

• A minimum of two

• A minimum of three

• A minimum of four or more

One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is:

• it allows the business to eliminate IT bills.

• it allows the business to put a server in each customer’s data center

• it allows the business to focus on business activities.

• it allows the business to leave servers unpatched.

What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval?

• Amazon S3

• Amazon Glacier

• Amazon EBS

• Amazon EC2 Instance Store

Which AWS IAM feature allows developers to access AWS services through the AWS CLI?

• API keys

• Access keys

• User names/Passwords

• SSH keys

Answer explanation

Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html