AWS Certified Cloud Practitioner Free Sample Questions

This is the most cost-effective strategy. S3 Glacier Flexible Retrieval is designed for long-term archival where data is infrequently accessed but needs to be retrieved within minutes to hours. This fits the 48-hour retrieval requirement perfectly while offering significant cost savings over S3 Standard. S3 Glacier Deep Archive has a longer retrieval time (typically 12+ hours), which might not meet the 48-hour window consistently for all retrieval types, and is designed for even less frequent access. S3 Standard is too expensive for long-term archival. Storing data directly in S3 Glacier Instant Retrieval is more expensive than transitioning it after the initial high-access period.

Service Control Policies (SCPs) are a feature of AWS Organizations that offer central control over the maximum available permissions for all accounts in an organization. An SCP with a Deny statement for the s3:DeleteBucket action, when applied to an account or an Organizational Unit (OU), will override any Allow permissions granted by IAM policies within that account. This provides a centralized, foolproof way to enforce such restrictions. A security group is for network traffic, an S3 bucket policy applies only to a specific bucket, and managing individual IAM policies is not a central or scalable solution.

This statement is true. AWS Cost Explorer is a tool for visualizing, understanding, and managing your AWS costs and usage over time. However, the service used to set up alerts for spending thresholds is AWS Budgets. AWS Budgets allows you to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.

For a workload that is massive, parallelizable, and fault-tolerant (can be stopped and restarted), the combination of Amazon EC2 and Spot Instances is the most cost-effective. Amazon EC2 provides the raw compute power. Spot Instances offer up to a 90% discount on On-Demand prices by leveraging unused EC2 capacity. Since the workload can be interrupted, the risk of a Spot Instance being reclaimed is acceptable in exchange for the huge cost savings. Reserved Instances are for long-term, steady-state workloads. AWS Lambda has execution time and payload limits that would make it unsuitable for a 100 TB dataset processing in this manner.

The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improving processes and procedures. Key topics include automating changes, responding to events, and defining standards to manage daily operations. Reliability is about recovering from failures, Performance Efficiency is about using resources efficiently, and Security is about protecting information and systems.

Amazon CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds. It does this by caching content in a worldwide network of edge locations. This is the ideal service for distributing game assets to a global user base. AWS Direct Connect is for private network connections, S3 Transfer Acceleration is for fast uploads to S3, and Elastic Load Balancing distributes traffic to backend servers within a region.

The most secure and recommended method is to use an IAM role. An IAM role can be attached to an EC2 instance, which grants the applications on that instance temporary security credentials to access other AWS services. This avoids the need to store long-term credentials (like access keys) on the instance, which is a major security risk. The EC2 instance automatically rotates the temporary credentials provided by the role.

The AWS Cloud pricing model is fundamentally pay-as-you-go. This means you pay only for the individual services you need, for as long as you use them, without requiring long-term contracts or complex licensing. This allows businesses to trade capital expense (CapEx) for variable expense (OpEx).

Availability Zones (AZs) are distinct locations within an AWS Region that are engineered to be isolated from failures in other AZs. By deploying an application across multiple AZs, it can remain operational even if one of the AZs fails, thus significantly increasing its availability and fault tolerance. Reducing global latency is achieved by using multiple Regions or Amazon CloudFront. Data sovereignty is handled at the Region level.

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from an on-premises location to AWS. This provides a more consistent network experience than internet-based connections, offering private connectivity and high bandwidth, which are critical for sensitive workloads like an EHR system. A Site-to-Site VPN connects over the public internet, which may not meet the performance or security requirements. VPC Peering connects two VPCs, and a NAT Gateway provides outbound internet access from a private subnet.