Cloud Practitioner Practice Questions

This solution directly addresses both requirements. The EC2 Auto Scaling group will automatically add instances during traffic spikes and remove them when traffic subsides, ensuring both scalability and cost-effectiveness (elasticity). The Application Load Balancer distributes the incoming traffic across the instances. Deploying across multiple Availability Zones also adds high availability. This approach requires minimal manual intervention, which is ideal for a team with limited operational staff. The other options are either manual, not scalable, or do not effectively minimize costs during idle periods.

AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on AWS. Purchases made through AWS Marketplace are integrated with the customer's AWS bill. AWS Service Catalog is for creating and managing a catalog of approved internal IT services. AWS Artifact is for compliance reports.

Amazon DynamoDB is a fully managed, serverless, key-value NoSQL database designed to run high-performance applications at any scale. Amazon RDS and Aurora are relational database services, and Amazon Redshift is a data warehousing service.

The principle of least privilege dictates that you should grant only the permissions required to perform a task. The best practice is to start with a new IAM user who has no permissions at all. Then, you incrementally add only the specific permissions that the user requires to perform their job functions, either by attaching policies to the user or adding the user to a group with appropriate policies.

AWS Artifact is your go-to, central resource for compliance-related information. It provides on-demand access to AWS’s security and compliance reports, such as SOC, PCI, and ISO certifications. Customers can download these documents to support their own compliance and auditing efforts.

This is the most cost-effective strategy. S3 Glacier Flexible Retrieval is designed for long-term archival where data is infrequently accessed but needs to be retrieved within minutes to hours. This fits the 48-hour retrieval requirement perfectly while offering significant cost savings over S3 Standard. S3 Glacier Deep Archive has a longer retrieval time (typically 12+ hours), which might not meet the 48-hour window consistently for all retrieval types, and is designed for even less frequent access. S3 Standard is too expensive for long-term archival. Storing data directly in S3 Glacier Instant Retrieval is more expensive than transitioning it after the initial high-access period.

Service Control Policies (SCPs) are a feature of AWS Organizations that offer central control over the maximum available permissions for all accounts in an organization. An SCP with a Deny statement for the s3:DeleteBucket action, when applied to an account or an Organizational Unit (OU), will override any Allow permissions granted by IAM policies within that account. This provides a centralized, foolproof way to enforce such restrictions. A security group is for network traffic, an S3 bucket policy applies only to a specific bucket, and managing individual IAM policies is not a central or scalable solution.

This statement is true. AWS Cost Explorer is a tool for visualizing, understanding, and managing your AWS costs and usage over time. However, the service used to set up alerts for spending thresholds is AWS Budgets. AWS Budgets allows you to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.

For a workload that is massive, parallelizable, and fault-tolerant (can be stopped and restarted), the combination of Amazon EC2 and Spot Instances is the most cost-effective. Amazon EC2 provides the raw compute power. Spot Instances offer up to a 90% discount on On-Demand prices by leveraging unused EC2 capacity. Since the workload can be interrupted, the risk of a Spot Instance being reclaimed is acceptable in exchange for the huge cost savings. Reserved Instances are for long-term, steady-state workloads. AWS Lambda has execution time and payload limits that would make it unsuitable for a 100 TB dataset processing in this manner.

The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improving processes and procedures. Key topics include automating changes, responding to events, and defining standards to manage daily operations. Reliability is about recovering from failures, Performance Efficiency is about using resources efficiently, and Security is about protecting information and systems.