AWS CLOUD EXAM 2022/2023| UPDATED WITH CORRECT
ANSWERS AND RATIONALE
1) Which of the following are valid ways for a customer to interact with AWS services? (Choose
two.)
A . Command line interface
B . On-premises
C . Software Development Kits
D . Software-as-a-service
E . Hybrid
2) If you have a files in your local data center that you need to daily
sync to on an EFS volume in your AWS account , which service would
best meet this need ?AWS DATA SYNC
3) Which design principles for cloud architecture are recommended when re-
architecting a large monolithic application? (Select TWO.)
• A. Use manual monitoring.
• B. Use fixed servers.
• C. Implement loose coupling.
D. Rely on individual components.
E. Design for scalability.
4) Which of the following can limit Amazon Storage Service (Amazon S3) bucket access
to specific users?
A . A public and private key-pair
B . Amazon Inspector
C . AWS Identity and Access Management (IAM) policies
D . Security Groups
VIEW ANSWER
5) Which of the following AWS services can be used to serve large amounts of online
video content with the lowest possible latency? (Select TWO.)
• A. AWS Storage Gateway
• B. Amazon S3
• C. Amazon Elastic File System (EFS)
• D. Amazon Glacier
• E. Amazom CloudFront
, Hide Answer
6) Which of the following Amazon EC2 pricing models allow customers to use existing
server-bound software licenses?
• A. Spot Instances
• B. Reserved Instances
• C. Dedicated Hosts
• D. On-Demand Instances
7) Which is a recommended pattern for designing a highly available architecture on
AWS?
A . Ensure that components have low-latency network connectivity.
B . Run enough Amazon EC2 instances to operate at peak load.
C . Ensure that the application is designed to accommodate failure of any single
component.
D . Use a monolithic application that handles all operations.
8) Which of the following security measures
protect access to an AWS account?
04/12/2020 – by Mod_GuideK1
Which of the following security measures protect access to an AWS account? (Select
TWO.)
A. Enable AWS CloudTrail.
B. Grant least privilege access to IAM users.
C. Create one IAM user and share with many developers and users.
D. Enable Amazon CloudFront.
E. Activate multi-factor authentication (MFA) for privileged users.
9) Which methods can be used to identify AWS costs by departments?
(Choose two.)
Create separate account for each department
Use tags to associate each instance with a particular department
, 10) Which of the following services will automatically scale with an expected increase in web
traffic?
A . AWS CodePipeline
B . Elastic Load Balancing
C . Amazon EBS
D . AWS Direct Connect
11) One of the advantages to moving infrastructure from an on-premises data center to
the AWS Cloud is:
• A. it allows the business to eliminate IT bills.
• B. it allows the business to put a server in each customer's data center.
• C. it allows the business to focus on business activities.
• D. it allows the business to leave servers unpatched.
12) Which of the following security-related actions are available at no cost?
A . Calling AWS Support
B . Contacting AWS Professional Services to request a workshop
C . Accessing forums, blogs, and whitepapers
D . Attending AWS classes at a local university
13) What costs are included when comparing AWS Total Cost of Ownership (TCO) with
on-premises TCO?
• A. Project management
• B. Antivirus software licensing
• C. Data center security
• D. Software development
14) Which of the following services could be used to deploy an application to servers
running on-premises? (Select TWO.)
• A. AWS Elastic Beanstalk
• B. AWS OpsWorks
• C. AWS CodeDeploy
, • D. AWS Batch
• E. AWS X-Ray
15) Which of the following common IT tasks can AWS cover to free up company IT
resources? (Select TWO.)
• A. Patching databases software
• B. Testing application releases
• C. Backing up databases
• D. Creating database schema
E. Running penetration tests
16) Which of the following are categories of AWS Trusted Advisor? (Choose two.)
• A. Fault Tolerance
• B. Instance Usage
• C. Infrastructure
• D. Performance
• E. Storage Capacity
Hide Answer
Hide Answer
• 17) Which service enables risk auditing by continuously monitoring and logging
account activity, including user actions in the AWS Management Console and AWS
SDKs?
A . Amazon CloudWatch
B . AWS CloudTrail
C . AWS Config
D . AWS Health
ANSWERS AND RATIONALE
1) Which of the following are valid ways for a customer to interact with AWS services? (Choose
two.)
A . Command line interface
B . On-premises
C . Software Development Kits
D . Software-as-a-service
E . Hybrid
2) If you have a files in your local data center that you need to daily
sync to on an EFS volume in your AWS account , which service would
best meet this need ?AWS DATA SYNC
3) Which design principles for cloud architecture are recommended when re-
architecting a large monolithic application? (Select TWO.)
• A. Use manual monitoring.
• B. Use fixed servers.
• C. Implement loose coupling.
D. Rely on individual components.
E. Design for scalability.
4) Which of the following can limit Amazon Storage Service (Amazon S3) bucket access
to specific users?
A . A public and private key-pair
B . Amazon Inspector
C . AWS Identity and Access Management (IAM) policies
D . Security Groups
VIEW ANSWER
5) Which of the following AWS services can be used to serve large amounts of online
video content with the lowest possible latency? (Select TWO.)
• A. AWS Storage Gateway
• B. Amazon S3
• C. Amazon Elastic File System (EFS)
• D. Amazon Glacier
• E. Amazom CloudFront
, Hide Answer
6) Which of the following Amazon EC2 pricing models allow customers to use existing
server-bound software licenses?
• A. Spot Instances
• B. Reserved Instances
• C. Dedicated Hosts
• D. On-Demand Instances
7) Which is a recommended pattern for designing a highly available architecture on
AWS?
A . Ensure that components have low-latency network connectivity.
B . Run enough Amazon EC2 instances to operate at peak load.
C . Ensure that the application is designed to accommodate failure of any single
component.
D . Use a monolithic application that handles all operations.
8) Which of the following security measures
protect access to an AWS account?
04/12/2020 – by Mod_GuideK1
Which of the following security measures protect access to an AWS account? (Select
TWO.)
A. Enable AWS CloudTrail.
B. Grant least privilege access to IAM users.
C. Create one IAM user and share with many developers and users.
D. Enable Amazon CloudFront.
E. Activate multi-factor authentication (MFA) for privileged users.
9) Which methods can be used to identify AWS costs by departments?
(Choose two.)
Create separate account for each department
Use tags to associate each instance with a particular department
, 10) Which of the following services will automatically scale with an expected increase in web
traffic?
A . AWS CodePipeline
B . Elastic Load Balancing
C . Amazon EBS
D . AWS Direct Connect
11) One of the advantages to moving infrastructure from an on-premises data center to
the AWS Cloud is:
• A. it allows the business to eliminate IT bills.
• B. it allows the business to put a server in each customer's data center.
• C. it allows the business to focus on business activities.
• D. it allows the business to leave servers unpatched.
12) Which of the following security-related actions are available at no cost?
A . Calling AWS Support
B . Contacting AWS Professional Services to request a workshop
C . Accessing forums, blogs, and whitepapers
D . Attending AWS classes at a local university
13) What costs are included when comparing AWS Total Cost of Ownership (TCO) with
on-premises TCO?
• A. Project management
• B. Antivirus software licensing
• C. Data center security
• D. Software development
14) Which of the following services could be used to deploy an application to servers
running on-premises? (Select TWO.)
• A. AWS Elastic Beanstalk
• B. AWS OpsWorks
• C. AWS CodeDeploy
, • D. AWS Batch
• E. AWS X-Ray
15) Which of the following common IT tasks can AWS cover to free up company IT
resources? (Select TWO.)
• A. Patching databases software
• B. Testing application releases
• C. Backing up databases
• D. Creating database schema
E. Running penetration tests
16) Which of the following are categories of AWS Trusted Advisor? (Choose two.)
• A. Fault Tolerance
• B. Instance Usage
• C. Infrastructure
• D. Performance
• E. Storage Capacity
Hide Answer
Hide Answer
• 17) Which service enables risk auditing by continuously monitoring and logging
account activity, including user actions in the AWS Management Console and AWS
SDKs?
A . Amazon CloudWatch
B . AWS CloudTrail
C . AWS Config
D . AWS Health
