Get instant access to AWS-Certified-Cloud-Practitioner Practice Tests 2021 Free Updated Today!
Welcome to download the newest PassLeader AWS-Certified-Cloud-Practitioner PDF dumps ( 542 Q&As)
NEW QUESTION 167
Which of the AWS global infrastructure is used to cache copies of content for faster delivery to users across the globe?
- A. Availability Zones
- B. Edge locations
- C. Data centers
- D. AWS Regions
Answer: B
Explanation:
When your web traffic is geo-dispersed, it's not always feasible and certainly not cost effective to replicate your entire infrastructure across the globe. A CDN provides you the ability to utilize its global network of edge locations to deliver a cached copy of web content such as videos, webpages, images and so on to your customers. To reduce response time, the CDN utilizes the nearest edge location to the customer or originating request location in order to reduce the response time. Throughput is dramatically increased given that the web assets are delivered from cache. For dynamic data, many CDNs can be configured to retrieve data from the origin servers.
Reference: https://aws.amazon.com/caching/
NEW QUESTION 168
When building a cloud Total Cost of Ownership (TCO) model, which costelements should be considered for workloads running on AWS? (Select THREE.)
- A. Facilities costs
- B. Data transfer costs
- C. Storage costs
- D. Network infrastructure costs
- E. Compute costs
- F. Hardware lifecycle costs
Answer: D,E
NEW QUESTION 169
Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Select TWO )
- A. Amazon EC2
- B. Amazon DynamoDB
- C. Amazon CloudFront
- D. Amazon Inspector
- E. AWSWAF
Answer: C,E
NEW QUESTION 170
What are some common uses of AWS? (Select all that apply)
Choose the 4 Correct answers:
- A. Storage
- B. Networking
- C. Virtualization
- D. Analytics
Answer: A,B,C,D
Explanation:
All of the answers are common uses of AWS. AWS has thousands of different uses. In this course we discussed some of the major categories, including: Storage Compute Power Databases Networking Analytics Developer Tools Virtualization Security
NEW QUESTION 171
How can a customer increase security to AWS account logons? (Choose two.)
- A. Enable Multi-Factor Authentication (MFA)
- B. Configure a strong password policy
- C. Use Amazon Cognito to manage access
- D. Configure AWS Certificate Manager
- E. Enable AWS Organizations
Answer: A,C
Explanation:
Your root account should always be protected by Multi-Factor Authentication (MFA). This additional layer of security helps protect against unauthorized logins to your account by requiring two factors: something you know (a password) and something you have (for example, an MFA device). AWS supports virtual and hardware MFA devices and U2F security keys.
Cognito can be used as an Identity Provider (IdP), where it stores and maintains users and credentials securely for your applications, or it can be integrated with OpenID Connect, SAML, and other popular web identity providers like Amazon.com.
Using Amazon Cognito, you can generate temporary access credentials for your clients to access AWS services, eliminating the need to store long-term credentials in client applications.
Reference: https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using- programmatic-access/
NEW QUESTION 172
Which AWS feature will reduce the customer's total cost of ownership (TCO)?
- A. Single tenancy
- B. Encryption
- C. Shared responsibility security model
- D. Elastic computing
Answer: C
NEW QUESTION 173
Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage?
- A. Elasticity of the AWS Cloud
- B. Security of the AWS Cloud
- C. Lower variable costs due to massive economies of scale
- D. Easy and fast deployment of applications in multiple Regions around the world
Answer: A
NEW QUESTION 174
What is the AWS customer responsible for according to the AWS shared responsibility model?
- A. Environmental risk management
- B. Secure disposal of storage devices
- C. Physical access controls
- D. Data encryption
Answer: D
NEW QUESTION 175
A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future.
Which of the following is a characteristic of the AWS Cloud that would meet this specific need?
- A. Performance
- B. Agility
- C. Reliability
- D. Elasticity
Answer: C
Explanation:
Explanation
Agile is a time boxed, iterative approach to software delivery that builds software incrementally from the start of the project, instead of trying to deliver it all at once near the end.
Reference:
http://www.agilenutshell.com
NEW QUESTION 176
An application runs on multiple Amazon EC2 instances that access a shared
file system simultaneously
Which AWS storage service should be used?
- A. Amazon EBS
- B. Amazon S3
- C. AWS Artifact
- D. Amazon EFS
Answer: D
NEW QUESTION 177
Web servers running on Amazon EC2 access a legacy application running in a corporate data center.
What term would describe this model?
- A. Partner network
- B. Cloud-native
- C. Infrastructure as a service
- D. Hybrid architecture
Answer: D
NEW QUESTION 178
Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts?
- A. AWS Budgets
- B. AWS Trusted Advisor
- C. AWS Organizations
- D. AWS Server Migration Service
Answer: C
Explanation:
Explanation
use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a master account that pays the charges of all the member accounts.
Consolidated billing has the following benefits:
NEW QUESTION 179
Which AWS IAM feature is used to associate a set of permissions with multiple users?
- A. Groups
- B. Password policies
- C. Access keys
- D. Multi-factor authentication
Answer: A
Explanation:
Explanation
An IAM group is a collection of IAM users. You can use groups to specify permissions for a collection of users, which can make those permissions easier to manage for those users. For example, you could have a group called Admins and give that group the types of permissions that administrators typically need.
Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html
NEW QUESTION 180
Which mechanism aHows developers lo access AWS sendees from application code?
- A. AWS CodePipelme
- B. AWS Software Development Kit
- C. AWS Conlig
- D. AWS Management Console
Answer: B
NEW QUESTION 181
Which of the following are benefits of the AWS Cloud? (Choose two.)
- A. Unlimited uptime
- B. Agility
- C. Capital expenses
- D. Elasticity
- E. Colocation
Answer: B,D
Explanation:
Explanation
The most celebrated benefit of AWS cloud is elasticity since you can expand the services when you experience more traffic.
Agile developments in AWS Cloud through strategies are day by day becoming more established within the enterprises across the world. With so much improvement and call for optimization in the cloud, it is necessary that these strategies get established from the ground up within the organizations. It is highly important as already enterprises have a lot of bequest, politics and hierarchies which act as barriers in their businesses.
Reference: https://www.botmetric.com/blog/evolution-agile-enterprises-aws-cloud/
NEW QUESTION 182
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
- A. as-needed access.
- B. restricted access.
- C. least privilege access.
- D. token access.
When you create IAM policies, follow the standard security advice of granting least privilege, or granting only the permissions required to perform a task. Determine what users (and roles) need to do and then craft policies that allow them to perform only those tasks.
Answer: C
NEW QUESTION 183
A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive dat a. Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?
- A. Amazon CloudWatch
- B. ACLs
- C. Security groups
- D. AWS CloudTrail
Answer: D
NEW QUESTION 184
A company is looking for a scalable data warehouse solution.
Which of the following AWS solutions would meet the company's needs?
- A. Amazon Redshift
- B. Amazon DynamoDB
- C. Amazon Kinesis
- D. Amazon Simple Storage Service (Amazon S3)
Answer: A
NEW QUESTION 185
According to the AWS shared responsibility model, which of the following tasks are AWS responsibilities?
(Select TWO.)
- A. Patching and updating the hypervisor.
- B. Patching operating systems on Amazon EC2.
- C. Encrypting customer data.
- D. Defining network firewalls inside the VPC.
- E. The physical security of AWS facilities.
Answer: A,E
NEW QUESTION 186
Which AWS service can run a managed PosigreSQL database that provides online transaction processing (OLTP)?
- A. Amazon EMR
- B. Amazon DynamoDB
- C. Amazon Athena
- D. Amazon RDS
Answer: D
NEW QUESTION 187
A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data.
Which of the following services will help fulfill this requirement?
- A. Amazon CloudFront
- B. Amazon Simple Storage Service (Amazon S3) transfer acceleration
- C. Amazon Route 53 global DNS
- D. AWS Direct Connect
Answer: D
Explanation:
Use AWS Local Zones to deploy workloads closer to your end-users for low-latency requirements. AWS Local Zones have their own connection to the internet and support AWS Direct Connect, so resources created in the Local Zone can serve local end-users with very low-latency communications.nation
NEW QUESTION 188
Which functions can users perform using AWS KMS?
- A. Create and manage AWS access keys for an AWS account IAM user
- B. Create and manage keys for encryption and decryption of data
- C. Create and manage keys for multi-factor authentication
- D. Create and manage AWS access keys for the AWS account root user
Answer: B
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/kms/latest/developerguide/control-access.html
NEW QUESTION 189
A user needs to import 100 TB of video files into Amazon S3. The user has estimated that it will take months to move the files over an on-premises internet connection. Which AWS service can be used to improve the data transport time?
- A. AWS Snowball
- B. AWS DataSync
- C. Amazon S3 Transfer Accelerator
- D. AWS Storage Gateway
Answer: C
NEW QUESTION 190
......
Jul-2021 Latest iPassleader AWS-Certified-Cloud-Practitioner Exam Dumps with PDF and Exam Engine: https://www.ipassleader.com/Amazon/AWS-Certified-Cloud-Practitioner-practice-exam-dumps.html
Premium Quality Amazon AWS-Certified-Cloud-Practitioner Online dumps: https://drive.google.com/open?id=1CmOj67Fbi-QNuCrEflXECe6lBvdZjpuA