Try Out Simulasi AWS Cloud Practitioner Certification
Waktu: 60 menit
1. As per the AWS Acceptable Use Policy,
penetration testing of EC2 instances:
A. May be performed by AWS, and is
periodically performed by AWS.
B. May be performed by AWS, and will be
performed by AWS upon customer
request.
C. May be performed by the customer on
their own instances with prior
authorization from AWS.
D. May be performed by the customer on
their own instances, only if performed
from EC2 instances.
E. Are expressly prohibited under all
circumstances.
2. Who has control of the data in an AWS
account?
A. AWS Security Team
B. AWS Account Owner
C. AWS Technical Account Manager (TAM)
D. AWS Support Team
3. Which of the below mentioned services can
be used to host virtual servers in the AWS
Cloud?
A. AWS IAM
B. AWS Server
C. AWS EC2
D. AWS Regions
4. Where can a customer go to get more detail
about Amazon Elastic Compute Cloud
(Amazon EC2) billing activity that took place
3 month ago?
A. AWS Cost and Usage reports
B. AWS Cloud Trail logs stored in Amazon
Simple Storage Service (Amazon S3)
C. Amazon EC2 dashboard
D. AWS Trusted Advisor dashboard
5. Which of the following examples supports
the cloud design principle “design for
failure and nothing will fail’’?
A. Deploying an application in multiple
Availability Zones
B. Creating and deploying the most cost-
effective solution
C. Using Amazon CloudWatch alerts to
monitor performance
D. Adding an elastic load balancer in front
of a single Amazon Elastic Compute
Cloud (Amazon EC2) instance
6. A company is planning to use AWS to host
critical resources. Most of their systems are
business critical and need to have response
times less than 15 minutes. Which of the
following support plans should they
consider?
A. Enterprise
B. Business
C. Developer
D. Basic
7. Which tool can display the distribution of
AWS spending?
A. AWS Cost Explorer
B. Amazon Dev Pay
C. AWS Trusted Advisor
D. AWS organizations
8. What AWS feature enables a user to
manage services through a web-based user
interface?
A. AWS Software Development Kit (SDK)
B. AWS Application Programming Interface
(API)
C. Amazon CloudWatch
D. AWS Management Console
9. A company needs to know which user was
responsible for terminating several critical
Amazon Elastic Compute Cloud (Amazon
EC2) Instances. Where can the customer
find this information?
A. AWS Cloud Trail logs
B. Amazon EC2 instance usage report
C. AWS Trusted Advisor
D. Amazon CloudWatch
10. Which of the following are advantages of
having infrastructure hosted on the AWS
Cloud? Choose 2 answers from the options
given below.
A. Having no need to worry about security
B. Having the pay as you go model
C. Having complete control over the
physical infrastructure
D. No Upfront costs
11. There is a requirement for storage of
objects. The objects should be able to be
downloaded via a URL. Which storage
option would you choose?
A. Amazon EBS
B. Amazon S3
C. Amazon Glacier
D. Amazon Storage Gateway
12. Which of the following are 2 ways that AWS
allows to link accounts?
A. Consolidating billing
B. IAM
C. AWS Organizations
D. Cost Explorer
13. Which of the following is a factor when
calculating Total Cost of Ownership (TCO)
for the AWS Cloud?
A. The number of servers migrated to AWS
B. The number of passwords migrated to
AWS
C. The number of keys migrated to AWS
D. The number of users migrated to AWS
14. There is a requirement for a development
and test environment for 3 months. Which
would you use?
A. Partial Upfront costs Reserved
B. No Upfront costs Reserved
C. Spot Instances
D. On-Demand
15. Which of the following statements are
TRUE when it comes to elasticity? Choose 2
answers from the options given below
A. Diverting traffic to instances with the
least load
B. Diverting traffic across multiple regions
C. Diverting traffic to instances based on
the demand
D. Diverting traffic to instances with higher
capacity
16. Which of the following is the concept of the
Elastic load balancer?
A. To increase the size of the EC2 Instance
based on demand
B. To scale up EC2 Instances
C. To distribute traffic to AWS resources
across multiple regions
D. To distribute traffic to multiple EC2
Instances
17. Which of the below can be used to get data
onto Amazon Glacier? Choose 3 answers
from the options given below.
A. AWS S3 Lifecycle policies
B. AWS Console
C. AWS Glacier API
D. AWS Glacier SDK
18. When creating security groups, which of the A. On-demand instances
following is a responsibility of the B. Regular instances
customer. Choose 2 answers from the C. Reserved instances
options given below. D. Spot instances
A. Defining the rules as per the customer
requirements. 23. There is a requirement to host a database
B. Giving a name and description for the server for a minimum period of one year.
security group. Which of the following would result in the
C. Ensure the security groups are linked to least cost?
the Elastic Network interface. A. Spot Instances
D. Ensure the rules are applied B. Partial Upfront costs Reserved
immediately. C. No Upfront costs Reserved
D. On-Demand
19. Which of the following disaster recovery
deployment mechanisms that has the 24. Which of the following services uses AWS
lowest downtime? edge locations?
A. Backup Restore A. Amazon Elastic Compute Cloud (Amazon
B. Pilot light EC2)
C. Warm standby B. AWS Storage Gateway
D. Devops C. Amazon Virtual Private Cloud (Amazon
VPC)
20. How can the AWS Management Console be D. Amazon CloudFront
secured against unauthorized access?
A. Set up a secondary password 25. Which of the following is a compatible
B. Apply Multi-Factor Authentication MySQL database which also has the ability
(MFA) to grow in storage size on its own?
C. Disable AWS console access A. DynamoDB
D. Request root access privileges B. RDS Microsoft SQL Server
C. Aurora
21. Which of the following services can be used D. RDS MySQL
as a web application firewall in AWS?
A. AWS WAF 26. Which of the following is a benefit of
B. AWS Firewall Amazon Elastic Compute Cloud (Amazon
C. AWS Protection EC2) over physical servers?
D. AWS EC2 A. The ability to choose hardware vendors
B. Paying only for what you use
22. You are currently hosting an infrastructure C. Root /administrator access
and most of the EC2 instances are near 90 – D. Automated backup
100% utilized. What is the type of EC2
instances you would utilize to ensure costs
are minimized?
27. You are developing and planning on 31. What is the ability provided by AWS to
deployment an application onto the AWS enable fast, easy, and secure transfers of
Cloud. This application needs to be PCI files over long distances between your
Compliance. Which of the below steps client and your Amazon S3 bucket?
would you carry out to ensure the A. File Transfer
compliance is met for the application? B. HTTP Transfer
Choose 2 answers: C. S3 Acceleration
A. Ensure the AWS Services are made PCI D. Transfer Acceleration
Compliant
B. Ensure the right steps are taken during 32. Which AWS service is used to as a global
application development for PCI content delivery network (CDN) service in
Compliance AWS?
C. Do an audit after the deployment of the A. Amazon CloudFront
application for PCI Compliance B. Amazon SES
D. Choose AWS services which are PCI C. Amazon S3
Compliant D. Amazon Cloudtrail

28. Which of the following is the secure way of 33. A company wants to host a self-managed
using AWS API to call AWS services from database in AWS. How would you ideally
EC2 Instances? implement this solution?
A. IAM Groups A. Using the AWS RDS service
B. IAM policies B. Hosting a database on an EC2 Instance
C. IAM Roles C. Using the AWS DynamoDB service
D. IAM Users D. Using the Amazon Aurora service

29. Which of the following is a fully managed 34. Which of the following can be used to call
NoSQL database service available with AWS services from programming
AWS? languages?
A. AWS MongoDB A. AWS Console
B. AWS DynamoDB B. AWS SDK
C. AWS RDS C. AWS IAM
D. AWS Redshift D. AWS CLI

30. A disaster recovery strategy on AWS should 35. A company wants to store data that is not
be based on launching infrastructure in a frequently accessed. What is the best and
separate: cost-efficient solution that should be
A. Subnet considered?
B. Amazon Virtual Private Cloud (Amazon A. Amazon Glacier
VPC) B. Amazon EBS
C. AWS Region C. Amazon Storage Gateway
D. AWS edge location D. Amazon S3
36. The Trusted Advisor service provides insight 40. Which service allows for the collection and
regarding which four categories of an AWS tracking of metrics for AWS services?
account? A. Amazon CloudSearch
A. Performance, cost optimization, B. Amazon CloudFront
security, and fault tolerance C. Amazon CloudWatch
B. Security, access control, high availability, D. Amazon Machine Learning (Amazon ML)
and performance
C. Security, fault tolerance, high 41. Which of the following can be used to
availability, and connectivity protect EC2 Instances hosted in AWS.
D. Performance, cost optimization, access Choose 2 answers from the options given
control, and connectivity below.
A. Usage of the Internet gateway
37. Which AWS service automates B. Usage of Network Access Control Lists
infrastructure provisioning and C. Usage of Security Groups
administrative tasks for an analytical data D. Usage of AMI’s
warehouse?
A. Amazon Redshift 42. Which of the following is the responsibility
B. Amazon ElastiCache of the customer when ensuring that data on
C. Amazon Aurora EBS volumes is left safe?
D. Amazon DynamoDB A. Attaching volumes to EC2 Instances
B. Creating copies of EBS Volumes
38. Which of the following is used to derive the C. Deleting the data when the device is
costs for moving artefacts from on-premise destroyed
to AWS? D. Creating EBS snapshots
A. AWS Config
B. AWS TCO calculator 43. Which service should an administrator use
C. AWS Consolidating billing to register a new domain name with AWS?
D. AWS Cost Explorer A. Amazon Cloud Front
B. Amazon Route 53
39. You work for a company that is planning on C. Amazon Virtual Private Cloud (Amazon
using the AWS EC2 service. They currently VPC)
create golden images of their deployed D. Elastic Load Balancing
Operating system. Which of the following
correspond to a golden image in AWS? 44. There is an external audit being carried out
A. EC2 Copies on your company. The IT auditor needs to
B. EBS Volumes have a log of all access to the AWS
C. Amazon Machines Images resources in the company’s account. Which
D. EBS Snapshots of the below services can assist in providing
these details?
A. AWS EC2
B. AWS SNS
C. AWS Cloudwatch
D. AWS Cloudtrail
45. You want to add an extra layer of
protection to the current authentication
mechanism of user names and passwords
for AWS. Which of the following can help in
this regard?
A. Using AWS WAF
B. Using a mix of user names
C. Using MFA
D. Using Password Policies
46. Which of the following is NOT a feature of
an edge location do?
A. Used in conjunction with the Cloudfront
service
B. Distribute load across multiple resources
C. Distribute content to users
D. Cache common responses
47. The main benefit of decoupling an
application is to:
A. Have the ability to execute automated
bootstrapping actions.
B. Create a tightly integrated application
C. Reduce inter-dependencies so failures
do not impact other components
D. Enable data synchronization across the
web application layer.
48. Which of the following services in AWS
allows for object level storage on the cloud?
A. Amazon Storage gateway
B. Amazon EBS
C. Amazon SQS
D. Amazon S3
49. Which of the following in the AWS Support
plans gives access to a Support Concierge?
A. Business
B. Enterprise
C. Developer
D. Basic
50. Which of the following helps in DDos
protection? Choose 2 answers from the
options given below.
A. B. AWS Shield
B. AWS EC2
C. AWS Config
D. Cloudfront
51. What best describes the "Principal of Least
Privilege"? Choose the correct answer from
the options given below.
A. Users should submit all access request in
written so that there is a paper trail of
who needs access to different AWS
resources.
B. Users should always have a little more
access granted to them then they need,
just in case they end up needed it in the
future.
C. All users should have the same baseline
permissions granted to them to use
basic AWS services.
D. Users should be granted permission to
access only resources they need to do
their assigned job.
52. Which service allows an administrator to
create and modify AWS user permissions?
A. AWS Config
B. AWS Key Management Service (AWS
KMS)
C. AWS Identity and Access Management
(IAM)
D. AWS Cloud Trail
53. Which of the following features of RDS
allows for data redundancy across regions?
A. Using Multi-AZ feature
B. Creating Read Replica’s
C. Using snapshots
D. Cross region replication
54. Systems applying the cloud architecture
principle of elasticity will:
A. Accelerate the design process because
recovery from failure is automated,
reducing the need for testing
B. Create systems that scale to the
required capacity based on changes in
demand
C. Minimize storage requirements by
reducing logging and auditing activities
D. Enable AWS to automatically select the
most cost-effective services.
55. Which AWS Cloud service is used to turn on
Multi-Factor Authentication (MFA)?
A. AWS Config
B. Amazon Elastic Compute Cloud (Amazon
EC2)
C. AWS Identity and Access Management
(IAM)
D. Amazon Inspector
56. Amazon Elastic Compute Cloud (Amazon
EC2) Spot instances are appropriate for
which of the following workloads?
A. Workloads where the availability of the
Amazon EC2 instances can be flexible
B. Workloads that need to run for long
periods of time without interruption
C. Workloads that are only run in the
morning and stopped at night
D. Workloads that are critical and need
Amazon EC2 instances with termination
protection
57. Which of the following is a benefit of
running an application across two
Availability Zones?
A. It significantly reduces the total cost of
ownership versus running in a single
Availability Zone.
B. Performance is improved over running
in a single Availability Zone.
C. It increases the availability of an
application compared to running in a
single Availability Zone.
D. It is more secure than running in a single
Availability Zone.
58. Which of the following is the concept of
Autoscaling?
A. To distribute traffic to AWS resources
across multiple regions
B. To distribute traffic to multiple EC2
Instances
C. To increase the size of the EC2 Instance
based on demand
D. To scale up resources based on demand
59. A company is deploying a two-tier, highly
available web application to AWS. Which
service provides durable storage for static
content while utilizing lower Overall CPU
resources for the web tier?
A. Amazon RDS instance
B. Amazon EC2 instance store
C. Amazon EBS volume
D. Amazon S3
60. Your company has a set of EC2 Instances
hosted in AWS. There is a requirement to
create snapshots from the EBS volumes
attached to these EC2 Instances in another
geographical location. As per this
requirement, where would you create the
snapshots?
A. In another data center
B. In another Edge location
C. In another Region
D. In another Availability Zone