Video: Show 1. Which service provides a user the ability to warehouse data in the AWS Cloud? A. Amazon EFS 2. A user is planning to migrate an application workload to the AWS Cloud. Which control becomes the responsibility of AWS once the migration is complete? A. Patching the guest operating system 3. Which AWS service can be used to provide an on-demand, cloud-based contact center? A. AWS Direct Connect 4. What tool enables customers without an AWS account to estimate costs for almost all AWS services? A. Cost Explorer 5. Which component must be attached to a VPC to enable inbound Internet access? A. NAT gateway 6. Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year? A. Spot Instance 7. A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage. Which set of tasks would meet this requirement? A. Add an Application Load Balancer in front of the EC2 instance 8. A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity? A. Using an AWS IAM user policy 9. Under the AWS shared responsibility model, which of the following is the customer’s responsibility? A. Patching guest OS and applications 10. Which of the following tasks is required to deploy a PCI-compliant workload on AWS? A. Use any AWS service
and implement PCI controls at the application layer 11. Which are benefits of using Amazon RDS over Amazon EC2 when running relational databases on AWS? (Choose two.) A. Automated backups 12. What does the Amazon S3 Intelligent-Tiering storage class offer? A. Payment flexibility by reserving storage capacity 13. A company has multiple data sources across the organization and wants to consolidate data into one data warehouse. Which AWS service can be used to meet this requirement? A. Amazon DynamoDB 14. Which AWS service can be used to track resource changes and establish compliance? A. Amazon
CloudWatch 15. A user has underutilized on-premises resources. Which AWS Cloud concept can BEST address this issue? A. High availability 16. A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload? A. On-Demand Instances 17. A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions. What is the most suitable and cost-effective option for this task? A. On-Demand Instance 18. Which of the following are benefits of using AWS Trusted Advisor? (Choose two.) A. Providing high-performance container orchestration 19. A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.) A. Grant the developer access to only the AWS resources needed to perform the job. 20. Which AWS storage service is designed to transfer petabytes of data in and out of the cloud? A. AWS Storage Gateway 21. Which AWS service allows for effective cost management of multiple AWS accounts? A. AWS Organizations 22. A company is piloting a new customer-facing application on Amazon Elastic Compute Cloud (Amazon EC2) for one month. What pricing model is appropriate? A. Reserved Instances 23. Which AWS tools automatically forecast future AWS costs? A. AWS Support
Center 24. Under the AWS shared responsibility model, which of the following is a responsibility of AWS? A. Enabling server-side encryption for objects stored in S3 25. A user is able to set up a master payer account to view consolidated billing reports through: A. AWS Budgets. 26. Performing operations as code is a design principle that supports which pillar of the AWS Well-Architected Framework? A. Performance efficiency 27. Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework? A. Vertical
scaling 28. What is a characteristic of Convertible Reserved Instances (RIs)? A. Users can exchange Convertible RIs for other Convertible RIs from a different instance family. 29. The user is fully responsible for which action when running workloads on AWS? A. Patching the infrastructure components 30. An architecture design includes Amazon EC2, an Elastic Load Balancer, and Amazon RDS. What is the BEST way to get a monthly cost estimation for this architecture? A. Open an AWS Support case, provide the architecture proposal, and ask for a monthly cost estimation. 31. Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand? A. Amazon GuardDuty 32. Which AWS managed services can be used to extend an on-premises data center to the AWS network? (Choose two.) A. AWS VPN 33. Which requirement must be met for a member account to be unlinked from an AWS Organizations account? A. The linked account must
be actively compliant with AWS System and Organization Controls (SOC). 34. What AWS benefit refers to a customer’s ability to deploy applications that scale up and down the meet variable demand? A. Elasticity 35. During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request? A. AWS Personal Health Dashboard 36. A company wants to set up a highly available workload in AWS with a disaster recovery plan that will allow the company to recover in case of a regional service interruption. Which configuration will meet these requirements? A. Run on two Availability Zones in one AWS Region, using the additional Availability Zones in the AWS Region for the disaster recovery site. 37. A company has a 500 TB image repository that needs to be transported to AWS for processing. Which AWS service can import this data MOST cost-effectively? A. AWS Snowball 38. Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)? A. Amazon DynamoDB 39. Which of the following assist in identifying costs by department? (Choose two.) A. Using tags on resources 40. A company must store critical business data in Amazon S3 with a backup to another AWS Region. How can this be achieved? A. Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally 41. Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded? A. AWS Budgets 42. What is the recommended method to request penetration testing on AWS resources? A. Open a support case 43. A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3. Which AWS service can meet these requirements? A. Amazon Inspector 44. Which components are required to build a successful site-to-site VPN connection on AWS? (Choose two.) A. Internet gateway 45. Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted? A. Spot Instances 46. Which AWS cloud architecture principle states that systems should reduce interdependencies? A. Scalability 47. What is the MOST effective resource for staying up to date on AWS security announcements? A. AWS Personal Health Dashboard 48. Which AWS service offers persistent storage for a file system? A. Amazon S3 49. Which of the following allows AWS users to manage cost allocations for billing? A. Tagging resources 50. Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.) A. Closing an AWS
account 51. Fault tolerance refers to: A. the ability of an application to accommodate growth without changing design 52. A company operating in the AWS Cloud requires separate invoices for specific environments, such as development, testing, and production. How can this be achieved? A. Use multiple AWS accounts 53. Which AWS service can be used in the application deployment process? A. AWS AppSync 54. What can be used to reduce the cost of running Amazon EC2 instances? (Choose two.) A. Spot Instances for stateless and flexible workloads 55. A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and A. AWS Certificate Manager 56. Which AWS service can be used to track unauthorized API calls? A. AWS Config 57. A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes. Which AWS service can be used to meet these requirements? A. AWS Trusted Advisor 58. A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take? A. Launch the instances across multiple Availability Zones in a single AWS Region. 59. A company’s application has flexible start and end times. Which Amazon EC2 pricing model will be the MOST cost-effective? A. On-Demand Instances 60. Under the AWS shared responsibility model, what are the customer’s responsibilities? (Choose two.) A. Physical and environmental security 61. A cloud practitioner has a data analysis workload that is infrequently executed and can be interrupted without harm. To optimize for cost, which Amazon EC2 purchasing option should be used? A. On-Demand Instances 62. Which AWS container service will help a user install, operate, and scale the cluster management infrastructure? A. Amazon Elastic Container Registry (Amazon ECR) 63. Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials? A. Amazon Cognito 64. A company with a Developer-level AWS Support plan provisioned an Amazon RDS database and cannot connect to it. Who should the developer contact for this level of support? A. AWS Support using a support case 65. What is the purpose of having an internet gateway within a VPC? A. To create a VPN connection to the VPC 66. A company must ensure that its endpoint for a database instance remains the same after a single Availability Zone service interruption. The application needs to resume database operations without the need for manual administrative intervention. How can these requirements be met? A. Use multiple Amazon Route 53 routes to the standby database instance endpoint hosted on AWS Storage Gateway. 67. Which AWS managed service can be used to distribute traffic between one or more Amazon EC2 instances? A. NAT gateway 68. AWS Trusted Advisor provides recommendations on which of the following? (Choose two.) A. Cost optimization Part 1:
https://www.awslagi.com/aws-certified-cloud-practitioner Which components are required to build a successful siteThe components involved in a Site-to-Site VPN connection to an AWS VPC are: A Customer Gateway (CGW) on the local network. A Virtual Private Gateway (VGW) on the AWS network. A VPN tunnel to connect CGW and VGW.
What is needed for siteIn order to set up an internet-based site-to-site VPN between two sites, a VPN gateway (router, firewall, VPN concentrator, or security appliance) such as the Cisco Adaptive Security Appliance (ASA) is required at both sites.
Which items must be created before configuring a siteTo establish a VPN connection between your VPC and your on-premises network, you must create a target gateway on the AWS side of the connection. The target gateway can be a virtual private gateway or a transit gateway.
How does sitePrivate IP Site-to-Site VPN feature allows you to deploy VPN connections to an AWS Transit Gateway using private IP addresses. Private IP VPN works over an AWS Direct Connect transit virtual interface (VIF). You can select private IP addresses as your outside tunnel IP addresses while creating a new VPN connection.
|
Which components are required to build a successful site-to-site vpn connection on aws?
zusammenhängende Posts
Urheberrechte © © 2024 ketiadaan Inc.
