Certified Cloud Practitioner Exam Personal Study Guide AWS Certified Cloud Practitioner Exam Personal Study Guide Disclaimer: These are my personal study notes I made to prepare for the aws cloud practitioner exam. I can’t guarantee all the information is 100% correct. Please do not use this video as your only source to prepare for the exam. 90% of this content source is from the Amazon AWS website. This is part 2 of my first video on certified cloud practitioner exam personal study guide. I recently passed the exam about 2 weeks ago, so while the information is still fresh in my head, I decided to make a follow up video in a question style format and go over some tips that I learned by taking the exam twice, because I actually failed the first time around,…..you can know the material, but the way they word the question can sometimes trip you up, like for instance, they may use a word in the question, that you may not know what the word means, to know what they are asking exactly, so you may get the question wrong because you didn’t fully understand the question, so that’s why I decided to go with questions this time

What is AWS Responsible for in the Responsibility Model? (Select Two) A. Customer Data B. Operating System C. Firewall D. Heating and Cooling of Data Center E. Network F. Storage D. Heating and Cooling of Data Center F. Storage

Which is not necessarily a Cloud Trail feature? A. securely and reliably handles a broad set of big data B. government, compliance, risk auditing C. Log, monitor, retain, record events across AWS D. Cloudwatch can use this information to take action A. securely and reliably handles a broad set of big data

Total Cost of Ownership consist of which of the following: (Select Two) A. TCO calculator B. based on the popular Jupyter Notebook C. lets you dive deeper into your cost and usage data to identify trends, pinpoint cost drivers, and detect anomalies D. pay as you go model E. offers fully managed Redis and Memcached A. TCO calculator D. Pay as you go model

Which is NOT a necessarily a Cost Explorer feature? A. can be created and tracked from the AWS Budgets dashboard B. easy-to-use interface, visualize, understand, manage costs and usage over time C. dive deeper in cost, usage data, identify trends, pinpoint cost drivers, detect anomalies D. future forecasting A. can be created and tracked from the AWS Budgets dashboard

Which is a feature of Trusted Advisor? A. customized cloud expert, delayed-time software B. It will inspect your aws environment for performance C. It will inspect your aws environment for reliability D. It will inspect aws environment for security A. customized cloud expert, delayed-time software – real time

Which is not a necessarily a feature of Consolidated Billing? A. One bill – You get one bill for multiple accounts. B. Easy tracking – You can track the charges across multiple accounts. C. Combined usage – You can combine the usage across all accounts in the organization D. Auto Scaling– ensures that your application is able to receive traffic. D. Auto Scaling– ensures that your application is able to receive traffic.

Which is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS? A. AWS Shield B. CloudFront C. Security Group D. Cloud Trail A. AWS Shield

Which acts as a firewall that controls traffic allowed to reach one or more instances? A. (DDoS) Response Team B. Security group C. CloudFront D. Edge Location B. Security group

Which is not true about Penetration Testing A. Get Permissions from AWS first B. It can be done on your infrastructure only C. You must be logged into the AWS portal using the root credentials D. You do not have to request permission if you are testing in your own AWS VPC environment D. You do not have to request permission if you are testing in your own AWS VPC environment

True or False? Before performing security testing on AWS resources, you must obtain approval from AWS True

Which is network service that provides an alternative to using the Internet to connect customer's on premise sites to AWS? A) AWS-managed VPN B) AWS Direct Connect B) AWS Direct Connect

Which is a hardware Ipsec Which is a hardware Ipsec.. that enables you to create an encrypted connection over the public Internet? A) AWS-managed VPN B) AWS Direct Connect A) AWS-managed VPN

Which is not a feature of Amazon Inspector? A. automated security assessment service that improve security and compliance of applications deployed B. automatically assesses applications for exposure, vulnerabilities, and deviations from best practices C. is an API-driven service that analyzes network configurations in your AWS account D. manage subnet in your VPC to protect against incoming traffic requests D. manage subnet in your VPC to protect against incoming traffic requests

True or False? An IAM role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS True

Which is a non-relational Database? A. RDS B. Dynamo DB C. mySQL D. Auroa B. Dynamo DB

Which is infrequently accessed data archives? A. Glacier B. S3 C. CloudFront D. CloudWatch E. Edge Location A. Glacier

Which instance type gives a discount (up to 75%) compared to On-Demand instance pricing? A. Reserved Instance B. Spot Instance C. Dedicated Host D. On-Demand A. Reserved Instance

Which instance type gives a discount (up to 90%) compared to On-Demand instance pricing? A. Reserved Instance B. Spot Instance C. Dedicated Host D. On-Demand B. Spot Instance

Which instance type can be interrupted? A. Reserved Instance B. Spot Instance C. Dedicated Host D. On-Demand B. Spot Instance

Which instance type canNOT be interrupted? A. Reserved Instance B. Spot Instance C. Dedicated Host D. On-Demand D. On-Demand

Which instance type can help reduce costs by allowing you to use existing server-bound software licenses? A. Reserved Instance B. Spot Instance C. Dedicated Host D. On-Demand C. Dedicated Host

Which is NOT a feature of Elastic Beanstalk? A. provisions and operates the infrastructure and manages the application stack (platform) for you, so you don't have to spend the time or develop the expertise B. automatically scales your application up and down based on your application's specific need using easily adjustable Auto Scaling settings C. maintains a minimal version of an environment is always running in the cloud D. keep the underlying platform running your application up-to-date with the latest patches and updates C. maintains a minimal version of an environment is always running in the cloud

Which best describes a feature of CloudFormation? A. is available through AWS for a low fee B. allows you to use a simple text file to model and provision, all the resources needed for your applications C. allows you to model a small portion of infrastructure in a text file D. uses multiple files serving as multiple sources of truth for your cloud environment B. allows you to use a simple text file to model and provision, all the resources needed for your applications

Which is NOT a feature of Amazon Direct Connect? A. easy to set up a dedicated network connection from your premises to AWS B. can reduce network costs, increase bandwidth, provide consistent network experience than Internet connections C. can be a VPN Connection D. codifying your infrastructure allows you to treat your infrastructure as just code D. codifying your infrastructure allows you to treat your infrastructure as just code

Which is NOT a feature of SQS? A. diverting traffic to instances based on the demand and least load B. fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications C. You can send, store, and receive messages between software components at any volume, without losing messages or requiring other services to be available D. can send messages to and receive messages from an Amazon SQS queue A. diverting traffic to instances based on the demand and least load

True of False? S3 durability is 99.999999999% and S3 availability 99.99% True

True or False? AWS Config - service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. True

True of False? VPC stands for Visual Private Cloud False – Virtual Private Cloud

Which Framework is NOT necessarily associated with EMR? (Select Two) A. Hadoop B. Hbase C. Ajax D. Flink E. Apache Spark F. JQuery C. Ajax F. JQuery

Which is NOT a feature of AMI A. provides the information required to launch an instance B. You must specify a source AMI when you launch an instance C. You can launch multiple instances from a single AMI D. service that securely delivers data, videos, applications D. service that securely delivers data, videos, applications

Which best suits this definition? offers fully managed Redis and Memcached - real-time apps, gaming, ride hailing, media streaming, dating, social media store as database cache, message broker, queue, real time transactions A. Snap Shot B. Amazon ElastiCache C. S3 D. AMI B. Amazon ElastiCache

Which best suits this definition? fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment using edge locations A. CloudFront B. Amazon ElastiCache C. AWS Marketplace D. Auto Scaling A. CloudFront

Which is a feature of SnapShot? A. are incremental backups B. can continuously monitor your AWS resources C. can receive messages between software components at any volume D. enables you to decouple and scale microservices A. are incremental backups

Which Best Suits this Defintion? sales channel, that makes it easy for Sellers to offer software solutions that run on the AWS cloud A. Acceptable Use Policy B. Service control policies(SCPs) C. AWS Marketplace D. AWS SuperStore C. AWS Marketplace

Which Definition is NOT Correct? A. Acceptable Use Policy - Describes Prohibited Actions B. Policy Document - that provides a formal statement of (one or more permissions) provides formal statement of Permissions, resource, action, effect, principal, JSON, what user can do C. Service control policies (SCPs) - manage your organization and restrict, at the account level of granularity, what services and actions the users, groups, and roles in those accounts can do D. PCI Compliant – software that has the ability to patch itself D. PCI Compliant – software that has the ability to patch itself - The Payment Card Industry Data Security Standard (PCI DSS) AWS offer these services

Which is NOT associated with the AWS support plans? A. Basic B. Developer C. Advanced D. Business E. Enterprise – support Concierge C. Advanced

True or False? AWS Management Console is command line based on your local host? Web-based user interface

GOOD LUCK Hope this helps