Question 1

- (Topic 2)

A company wants to use Amazon EC2 instances for a stable production workload that will run for 1 year. Which instance purchasing option meets these requirements MOST cost-effectively?

Accepted Answer

B is correct because Reserved Instances are the instance purchasing option that offers the most cost-effective way to use Amazon EC2 instances for a st production workload that will run for 1 year, as they provide significant discounts compared to On-Demand Instances in exchange for a commitment to use specific amount of computing power for a period of time. A is incorrect because Dedicated Hosts are the instance purchasing option that allows customers physical servers that are fully dedicated to their use, which is more expensive and less flexible than Reserved Instances. C is incorrect because On-Dem Instances are the instance purchasing option that allows customers to pay for compute capacity by the hour or second with no long-term commitments, whic more suitable for short-term, variable, and unpredictable workloads. D is incorrect because Spot Instances are the instance purchasing option that allow customers to bid on spare Amazon EC2 computing capacity, which is more suitable for flexible, scalable, and fault-tolerant workloads that can tolerate interruptions.

Question 2

- (Topic 1)

Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?

Accepted Answer

AWS is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS. AWS follows strict and audited data destruction processes to ensure that customer data is not exposed to unauthorized individuals or devices when an AWS storage device reaches the end of i useful life. AWS uses techniques detailed in DoD 5220.22-M ('National Industrial Security Program Operating Manual') or NIST 800-88 ('Guidelines for Med Sanitization') to destroy data as part of the decommissioning process3.

Question 3

- (Topic 1)

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

Accepted Answer

AWS manages the encryption of the database clusters and database snapshots for Amazon Aurora, as well as the encryption keys. This is part of the AWS shared responsibility model, where AWS is responsible for the security of the cloud, and the customer is responsible for the security in the cloud. Encr of the security features that AWS provides to protect the data at rest and in transit. For more information, see Amazon Aurora FAQs and AWS Shared Responsibility Model.

Question 4

- (Topic 1)

What is an Availability Zone?

Accepted Answer

An Availability Zone is one or more discrete data centers with redundant power, networking, and connectivity. Availability Zones are part of the AWS gl infrastructure, which consists of AWS Regions, Availability Zones, and edge locations. Availability Zones are physically separate locations within an AW that are engineered to be isolated from failures and connected by low-latency, high-throughput, and highly redundant networking. Each Availability Zone one or more data centers that house the servers and storage devices that run AWS services. Availability Zones enable users to design and operate fault-t and high-availability applications on AWS. AWS Global InfrastructureAWS Certified Cloud Practitioner - aws.amazon.com

Question 5

- (Topic 1)

A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.

Which AWS service or feature will meet this requirement?

Accepted Answer

Security groups are the service or feature that meets the requirement of establishing a security layer in a VPC that will act as a firewall to control Security groups are stateful firewalls that control the inbound and outbound traffic at the instance level. You can assign one or more security groups t instance in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. Security groups are associat network interfaces, and therefore apply to all the instances in the subnets that use those network interfaces. Routing tables are used to direct traffic subnets and gateways, not to filter traffic. Network ACLs are stateless firewalls that control the inbound and outbound traffic at the subnet level, but granular and more cumbersome to manage than security groups. Amazon GuardDuty is a threat detection service that monitors your AWS account and workloads for malicious or unauthorized activity, not a firewall service.

Question 6

- (Topic 1)

A company wants to deploy and manage a Docker-based application on AWS. Which solution meets these requirements with the LEAST amount of operational overhead?

Accepted Answer

Amazon Elastic Container Service (Amazon ECS) is a solution that meets the requirements of deploying and managing a Docker-based application on AWS wit the least amount of operational overhead. Amazon ECS is a fully managed container orchestration service that makes it easy to run, scale, and secure Doc container applications on AWS. Amazon ECS eliminates the need for you to install, operate, and scale your own cluster management infrastructure. With si API calls, you can launch and stop container-enabled applications, query the complete state of your cluster, and access many familiar features like secu Elastic Load Balancing, EBS volumes, and IAM roles3.

Question 7

- (Topic 1)
- A company needs to store data across multiple Availability Zones in an AWS Region. The data will not be accessed regularly but must be immediately retrievable.

Which Amazon Elastic File System (Amazon EFS) storage class meets these requirements MOST cost effectively?

Accepted Answer

EFS Standard-Infrequent Access (EFS Standard-IA) is the storage class that meets the requirements of storing data across multiple Availability Zones in Region, that will not be accessed regularly but must be immediately retrievable, most cost- effectively. EFS Standard-IA is designed for files that are frequently, but still require the same high performance, low latency, and high availability as EFS Standard. EFS Standard-IA has a lower storage cost th Standard, but charges a small additional fee for each access. EFS One Zone and EFS One Zone-IA store data in a single Availability Zone, which reduces t availability and durability compared to EFS Standard and EFS Standard-IA.

Question 8

- (Topic 1)

According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Select TWO.)

Accepted Answer

The correct answers are A and D because network infrastructure and virtualization of infrastructure and physical security of hardware are AWS responsib according to the AWS shared responsibility model. The AWS shared responsibility model is a framework that defines the division of responsibilities betwe and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the global infrastructure, such as the re availability zones, and edge locations; the hardware, software, networking, and facilities that run the AWS services; and the virtualization layer that customer instances and storage. The customer is responsible for the security in the cloud, which includes the customer data, the guest operating systems applications, the identity and access management, the firewall configuration, and the encryption. The other options are incorrect because they are not A responsibilities according to the AWS shared responsibility model. Security of application data, guest operating systems, and credentials and policies a responsibilities according to the AWS shared responsibility model. Reference: [AWS Shared Responsibility Model]

## Recommend!! Get the Full AWS-Certified-Cloud-Practitioner dumps in VCE and PDF From SurePassExam

https://www.surepassexam.com/AWS-Certified-Cloud-Practitioner-exam-dumps.html (370 New Questions)

Question 9

- (Topic 1)

Which database engine is compatible with Amazon RDS?

Accepted Answer

Amazon RDS supports six database engines: Amazon Aurora, MySQL, MariaDB, PostgreSQL, Oracle, and SQL Server. Apache Cassandra, MongoDB, and Neo4j are not compatible with Amazon RDS. Therefore, the correct answer is D. You can learn more about Amazon RDS and its supported database engines fro this page.

Question 10

- (Topic 1)

A company needs to identify the last time that a specific user accessed the AWS Management Console. Which AWS service will provide this information?

Accepted Answer

AWS CloudTrail is the service that will provide the information about the last time that a specific user accessed the AWS Management Console. AWS Cloud is a service that records the API calls and events made by or on behalf of your AWS account. You can use AWS CloudTrail to view, search, and download th history of AWS console sign-in events, which include the user name, date, time, source IP address, and other details of the sign-in activity. Amazon Cog Amazon Inspector, and Amazon GuardDuty are not services that will provide this information. Amazon Cognito is a service that provides user authenticatio authorization for web and mobile applications. Amazon Inspector is a service that assesses the security and compliance of your applications running on A Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity.