Cloud Practitioner Practice Questions

AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. These IT services can include everything from virtual machine images, servers, software, and databases to complete multi-tier application architectures. This enables the university to provide standardized, pre-approved environments (products) that researchers can deploy on-demand, ensuring compliance and governance without granting them direct access to provision underlying services.

A primary economic benefit of the cloud is the shift from capital expenditure (CapEx) to operational expenditure (OpEx). Instead of investing heavily in data centers and servers before you know how you’re going to use them (CapEx), you can pay only when you consume computing resources, and pay only for how much you consume (OpEx).

This solution directly addresses both requirements. The EC2 Auto Scaling group will automatically add instances during traffic spikes and remove them when traffic subsides, ensuring both scalability and cost-effectiveness (elasticity). The Application Load Balancer distributes the incoming traffic across the instances. Deploying across multiple Availability Zones also adds high availability. This approach requires minimal manual intervention, which is ideal for a team with limited operational staff. The other options are either manual, not scalable, or do not effectively minimize costs during idle periods.

AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on AWS. Purchases made through AWS Marketplace are integrated with the customer's AWS bill. AWS Service Catalog is for creating and managing a catalog of approved internal IT services. AWS Artifact is for compliance reports.

Amazon DynamoDB is a fully managed, serverless, key-value NoSQL database designed to run high-performance applications at any scale. Amazon RDS and Aurora are relational database services, and Amazon Redshift is a data warehousing service.

The principle of least privilege dictates that you should grant only the permissions required to perform a task. The best practice is to start with a new IAM user who has no permissions at all. Then, you incrementally add only the specific permissions that the user requires to perform their job functions, either by attaching policies to the user or adding the user to a group with appropriate policies.

AWS Artifact is your go-to, central resource for compliance-related information. It provides on-demand access to AWS’s security and compliance reports, such as SOC, PCI, and ISO certifications. Customers can download these documents to support their own compliance and auditing efforts.

This is the most cost-effective strategy. S3 Glacier Flexible Retrieval is designed for long-term archival where data is infrequently accessed but needs to be retrieved within minutes to hours. This fits the 48-hour retrieval requirement perfectly while offering significant cost savings over S3 Standard. S3 Glacier Deep Archive has a longer retrieval time (typically 12+ hours), which might not meet the 48-hour window consistently for all retrieval types, and is designed for even less frequent access. S3 Standard is too expensive for long-term archival. Storing data directly in S3 Glacier Instant Retrieval is more expensive than transitioning it after the initial high-access period.

Service Control Policies (SCPs) are a feature of AWS Organizations that offer central control over the maximum available permissions for all accounts in an organization. An SCP with a Deny statement for the s3:DeleteBucket action, when applied to an account or an Organizational Unit (OU), will override any Allow permissions granted by IAM policies within that account. This provides a centralized, foolproof way to enforce such restrictions. A security group is for network traffic, an S3 bucket policy applies only to a specific bucket, and managing individual IAM policies is not a central or scalable solution.

This statement is true. AWS Cost Explorer is a tool for visualizing, understanding, and managing your AWS costs and usage over time. However, the service used to set up alerts for spending thresholds is AWS Budgets. AWS Budgets allows you to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.