Which statement best describes amazon lex?

Which of the following accurately defines "Actions" of an S3 ACL policy?


Options are :

  • What the outcome will be when the user requests the specific action.
  • Amazon S3 resources for which you can allow or deny permissions.
  • A set of supported operations. (Correct)
  • The account or user who is allowed access to the actions and resources in the statement.

Answer :A set of supported operations.

Which of the following best describes the design principles of Reliability pillar of the AWS Well-Architected Framework? (Select 2)


Options are :

  • Perform operations as code. Make frequent, small, reversible changes.
  • Test recovery procedures. (Correct)
  • Implement Cloud Financial Management.
  • Implement a strong identity foundation. Enable traceability.
  • Use serverless architectures.
  • Manage change in automation. (Correct)

Answer :Test recovery procedures. Manage change in automation.

You need to build applications capable of delivering a wide array of personalization experiences, including specific product recommendations, personalized product re-ranking, and customized direct marketing. Which AWS Service lets you do this?


Options are :

  • Amazon Kendra.
  • Amazon Monitron.
  • Amazon Fraud Detector.
  • Amazon Personalize. (Correct)

Answer :Amazon Personalize.

You want to migrate data to Amazon S3 over SFTP. Which AWS Service lets you do this?


Options are :

  • AWS Transfer Family. (Correct)
  • AWS Backup.
  • AWS VM Import/Export.
  • AWS DataSync.

Answer :AWS Transfer Family.

Which AWS Service provides secure access for thousands of connections for Amazon EC2 instances and on-premises servers simultaneously using a traditional file permissions model, file locking capabilities, and hierarchical directory structure via the NFSv4 protocol?


Options are :

  • Placement Groups.
  • Amazon EFS. (Correct)
  • VPC Peering.
  • Elastic IP address.

Answer :Amazon EFS.

You are developing an online code editor and you want to ensure that user-entered commands are executed in the right order. Which SQS queueing mechanism should you implement for this requirement?


Options are :

  • FIFO Queues. (Correct)
  • LIFO Queues.
  • FILO Queues.
  • Standard Queues.

Answer :FIFO Queues.

Which of the following are valid reasons for choosing Amazon RDS over database on EC2 instance? (Select 2)


Options are :

  • You need a specific Oracle Database version that is not supported by Amazon RDS.
  • You need to use Oracle features or options that are not currently supported by Amazon RDS.
  • You would rather focus on high-level tasks, such as performance tuning and schema optimization, rather than the daily administration of the database. (Correct)
  • Your database IOPS needs are higher than the current IOPS limit.
  • You don�t want to manage backups and, most importantly, point-in-time recoveries of your database. (Correct)

Answer :You would rather focus on high-level tasks, such as performance tuning and schema optimization, rather than the daily administration of the database. You don�t want to manage backups and, most importantly, point-in-time recoveries of your database.

Which AWS Service lets you configure actions to respond to cost and usage status in your accounts, so that if your cost or usage exceeds or is forecasted to exceed your threshold, actions can be executed automatically or with your approval to reduce unintentional over-spending?


Options are :

  • AWS Cost & Usage Report.
  • AWS Budgets. (Correct)
  • AWS Cost Categories.
  • AWS Cost Explorer.

Answer :AWS Budgets.

Which AWS Service integrates with build tools such as Maven, NPM, etc to download software packages, approve and control distribution across the organization, ensuring development teams consume software packages that are safe for use?


Options are :

  • CodeBuild.
  • CodeStar.
  • CodeArtifact. (Correct)
  • CodePipeline.

Answer :CodeArtifact.

Which AWS Service offers easy-to-use cloud platform that offers Virtual servers, storage, databases, and networking needed to build a simple application or website, with a cost-effective, monthly plan?


Options are :

  • Serverless Application Repository.
  • EC2 Image Builder.
  • Lightsail. (Correct)
  • Elastic Beanstalk.

Answer :Lightsail.

Which AWS Service provides carrier gateway to allow inbound traffic from a carrier network in a specific location, and to allow outbound traffic to the carrier network and the internet?


Options are :

  • EC2.
  • Elastic Beanstalk.
  • VPC. (Correct)
  • Lambda.

Answer :VPC.

Which AWS Service or feature simplifies the way you request, approve, implement, and report on operational changes to your application configuration and infrastructure on AWS and on-premises?


Options are :

  • AWS Inspector.
  • AWS Trusted Advisor.
  • AWS Systems Manager Change Manager. (Correct)
  • AWS Config.

Answer :AWS Systems Manager Change Manager.

What is the durability of S3 Standard storage class?


Options are :

  • 99.999%.
  • 99.99%.
  • 99.9%.
  • 99.999999999%. (Correct)

Answer :99.999999999%.

When using AWS Lamdba Functions, which of the following is responsibility of customer as per The Shared Responsibility Model? (Select 2)


Options are :

  • The application platform.
  • Security of the Lambda code. (Correct)
  • Identity and access management (IAM) to the Lambda service and within the function. (Correct)
  • Underlying infrastructure and foundation services.
  • The operating system.

Answer :Security of the Lambda code. Identity and access management (IAM) to the Lambda service and within the function.

You need to spin up an ELK stack but you don't want the operational overhead associated with managing such a platform. Which AWS Service should you use?


Options are :

  • Amazon Kinesis.
  • AWS Data Exchange.
  • AWS Lake Formation.
  • Amazon ElasticSearch. (Correct)

Answer :Amazon ElasticSearch.

You have a requirement to promtp speech output to callers in interactive voice response (IVR) systems, such as Amazon Connect. Which AWS Service should you use for this requirement?


Options are :

  • Amazon Rekognition.
  • Amazon Polly. (Correct)
  • Amazon Transcribe.
  • Amazon Textract.

Answer :Amazon Polly.

You are looking for an EC2 instance to install software that has licenses that are bound to VMs, sockets, and physical cores. Which EC2 purchase option should you consider?


Options are :

  • Dedicated Instances.
  • Dedicated Hosts. (Correct)
  • Reserved Instances.
  • On-Demand Instances.

Answer :Dedicated Hosts.

Which of the following AWS compute service is ideally suited for event driven workloads?


Options are :

  • Batch.
  • EC2.
  • EC2 Image Builder.
  • Lambda. (Correct)

Answer :Lambda.

You want to host multicast applications without redesigning your application or tweaking your on-premises network for multicast support. Which AWS Service or feature lets you do this?


Options are :

  • Use VPN.
  • Use VPC Endpoints.
  • Use Direct Connect.
  • Use Transit Gateway. (Correct)

Answer :Use Transit Gateway.

You want to enable specific conditions such as time of day to control how a user can use AWS, their originating IP address, whether they are using SSL, or whether they have authenticated with a multi-factor authentication device. Which AWS Service should you use for this requirement?


Options are :

  • Secrets Manager.
  • Cognito.
  • Security Hub.
  • IAM. (Correct)

Answer :IAM.

You want to build enterprise chatbots to streamline common work activities such as checking sales data from Salesforce, marketing performance from HubSpot, ticket status from Zendesk, etc to improve organizational efficiencies. Which AWS Service lets you do this?


Options are :

  • Amazon Lex. (Correct)
  • Amazon Forecast.
  • Amazon Translate.
  • Amazon Comprehend.

Answer :Amazon Lex.

Which AWS Services below can be used for deploying resources/applications in AWS?


Options are :

  • AWS Service Catalog.
  • AWS Config.
  • CloudFormation. (Correct)
  • Trusted Advisor.

Answer :CloudFormation.

You want to issue an SSL/TLS certificate for your website without the need to generate a key pair or certificate signing request (CSR), submit a CSR to a Certificate Authority, or upload and install the certificate once received. Which AWS Service should you use to automate these manual steps?


Options are :

  • Key Management Service.
  • Security Hub.
  • Secrets Manager.
  • Certificate Manager. (Correct)

Answer :Certificate Manager.

How are IAM policies evaluated in conjunction with resource-based policies Amazon S3 bucket policies?


Options are :

  • IAM policies are evaluated independently from the service�s resource-based policies. When a policy of any type grants access (without explicitly denying it), the action is allowed.
  • IAM policies are evaluated together with the service�s resource-based policies. When a policy of any type grants access, the action is allowed even if another policy explicitly denies it.
  • IAM policies are evaluated together with the service�s resource-based policies. When a policy of any type grants access (without explicitly denying it), the action is allowed. (Correct)
  • IAM policies are evaluated independently from the service�s resource-based policies. When a policy of any type grants access, the action is allowed even if another policy explicitly denies it.

Answer :IAM policies are evaluated together with the service�s resource-based policies. When a policy of any type grants access (without explicitly denying it), the action is allowed.

Which AWS Service provides persistent file system storage?


Options are :

  • Amazon EBS.
  • Amazon S3.
  • Amazon RDS.
  • Amazon EFS. (Correct)

Answer :Amazon EFS.

Which AWS Service provides recommendations for improving the performance of your service by checking your service limits, ensuring you take advantage of provisioned throughput, and monitoring for overutilized instances?


Options are :

  • AWS Trusted Advisor. (Correct)
  • AWS Config.
  • AWS Inspector.
  • AWS Systems Manager.

Answer :AWS Trusted Advisor.

You want to establish connectivity between your on-premise data centerand AWS while maintaining network separation between the public AWS services and private environments in VPC. Which AWS Service should you use?


Options are :

  • AWS VPN.
  • AWS Direct Connect. (Correct)
  • AWS Cloud Map.
  • AWS App Mesh.

Answer :AWS Direct Connect.

Which serverless AWS Service lets you quickly query your S3 data without having to setup and manage any servers or data warehouses?


Options are :

  • Athena. (Correct)
  • Glue.
  • EMR.
  • QuickSight.

Answer :Athena.

Your company wants to trade capital expenses (such as data centers and physical servers) for variable operational expenses and has started on a cloud migration journey. Which features of AWS Cost Management tools should you consider to optimize and save on costs? (Select 2)


Options are :

  • Track billing information across the organization in a consolidated view. (Correct)
  • Enable continuous threat detection for your AWS workloads.
  • Estimate your resource utilization and spend with forecast dashboards that you create. (Correct)
  • Track the status of your EBS snapshots through CloudWatch Events.
  • Continuously monitor account activity related to actions across your AWS infrastructure.

Answer :Track billing information across the organization in a consolidated view. Estimate your resource utilization and spend with forecast dashboards that you create.

Which AWS Service offers a guided way of sizing, configuring, and deploying AWS resources for third party applications, such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual AWS resources?


Options are :

  • AWS CloudShell.
  • AWS X-Ray.
  • AWS Cloud9.
  • AWS Launch Wizard. (Correct)

Answer :AWS Launch Wizard.

Which AWS service can you use to host an RDS compatible relational database?


Options are :

  • DMS
  • EC2 (Correct)
  • DBMS
  • ECR

Answer :EC2

Which protocol is used if you want to encrypt files as they are transmitted over the Internet to an Amazon S3 bucket?


Options are :

  • FTP
  • HTTPS (Correct)
  • SMTP
  • HTTP

Answer :HTTPS

Which AWS support plans are suitable if you require telephone technical support?  (Choose 2 Answers)


Options are :

  • Developer
  • Basic
  • Global
  • Enterprise (Correct)
  • Business (Correct)

Answer :Enterprise Business

Which of the following services are completely free on the AWS platform? (Choose 4 answers).


Options are :

  • VPC (Correct)
  • IAM (Correct)
  • RDS
  • Elastic Beanstalk Service (Correct)
  • CloudFormation (Correct)
  • Elastic Load Balancers
  • EC2 Instance

Answer :VPC IAM Elastic Beanstalk Service CloudFormation

NACLs traffic rules and restrictions are applied to:


Options are :

  • VPC
  • Subnets (Correct)
  • EC2 Instances
  • Region

Answer :Subnets

Which of the following are components that determine the cost of your RDS Database Instance? (Choose 3 answers)


Options are :

  • Data Transfer In
  • Hours of use (Correct)
  • Number of Requests (Correct)
  • Additional Storage (Correct)
  • S3 Buckets Used

Answer :Hours of use Number of Requests Additional Storage

Which two file formats are used when creating CloudFormation templates? (Choose 2 answers).


Options are :

  • YAML (Correct)
  • XML
  • JAVA
  • JSON (Correct)
  • HTML

Answer :YAML JSON

Your company has multiple branch offices and you have just created a new AMI for an EC2 Instance that your IT colleagues in branch offices need to use.  What is the quickest way to make the AMI available to them?


Options are :

  • Configure VPN connection between the regional offices and copy to a shared folder
  • Subscribe to Amazon Snowball to securely send copies of the AMI to other regions
  • Copy the AMI to the other regions (Correct)
  • Place the AMI in an S3 bucket and set up Cross-Region Replication

Answer :Copy the AMI to the other regions

Amazon RDS offers free backup up to the size of your database (True or false)


Options are :

  • True (Correct)
  • False

Answer :True

You wish to migrate your on-premise tape backup solution to the AWS Storage Gateway Platform.  Which protocol can help you mount these virtual tapes for your backup application?


Options are :

  • MNT
  • iSCSI (Correct)
  • SAN
  • HTTPS

Answer :iSCSI

What type of storage is offered by Amazon S3?


Options are :

  • Block
  • Crypto
  • Brick
  • Object (Correct)

Answer :Object

Which Kinesis Services enables you to securely stream video from connected devices to AWS for analytics, machine learning (ML), playback, and other processing.


Options are :

  • AWS Kinesis Video Stream (Correct)
  • AWS Kinesis Data Stream
  • AWS Kinesis Data Firehose
  • AWS Kinesis Data Analytics

Answer :AWS Kinesis Video Stream

You need to compare the cost of purchasing a new on-premises NAS server with that of deploying an EFS volume in the cloud and hosting your servers in AWS.  Which tool can you use to perform this comparison?


Options are :

  • Total Cost of Ownership (Correct)
  • AWS Storage Calculator
  • EFS Volume Analyzer
  • Simple Monthly Calculator

Answer :Total Cost of Ownership

Which AWS Service offers guidance on how you can further optimize your costs and identify areas to save money?


Options are :

  • AWS Bills
  • Cloud Cost
  • Trusted Advisor (Correct)
  • Cloud Watch

Answer :Trusted Advisor

You wish to create an S3 bucket to be used as a static website.  Which method of granting access to the bucket offers more granularity and less management overhead?


Options are :

  • NTFS Permissions
  • NACLS
  • ACLS
  • Bucket Policies (Correct)

Answer :Bucket Policies

Which of the following determines the price of S3?  (Choose 3 answers).


Options are :

  • EFS Volumes
  • EBS Type
  • Storage Class (Correct)
  • Data Transfer Out (Correct)
  • Amount of Storage (Correct)

Answer :Storage Class Data Transfer Out Amount of Storage

Your organization has multiple AWS Accounts for different purposes, such as Test & Dev, Production and Back Office.  Each Account has its own set of services and incurs charges.  Which AWS service can you use to take advantage of volume discounts by clubbing your Accounts together?


Options are :

  • Consolidated Billing (Correct)
  • AWS Club Accounts
  • AWS Root Account
  • AWS Managed Services

Answer :Consolidated Billing

If you accidentally give your access key ID and secret access key to an unauthorized person, what can you do to protect your account?


Options are :

  • Raise a support request with Amazon to block the keys
  • Reset your IAM User password
  • Re-create your IAM Account
  • Make Inactive using the IAM console (Correct)

Answer :Make Inactive using the IAM console

Which of the following security actions are performed by customers of AWS?  (Choose 2 Answers)


Options are :

  • Implementing password Policies (Correct)
  • Issuing Access Cards to AWS Staff
  • Configuring physical network firewalls at the AWS datacentre
  • Patching Windows OS (Correct)

Answer :Implementing password Policies Patching Windows OS

Which methods are available to you for accessing and configuring AWS cloud services?  (Choose 3 answers)


Options are :

  • Command Line Interface (CLI) (Correct)
  • Command Execution Interface (CEI)
  • AWS and Individual Services Console (Correct)
  • Ability to visit your region AWS Datacentre and access serves interactively
  • Application Programming Interface (API) (Correct)

Answer :Command Line Interface (CLI) AWS and Individual Services Console Application Programming Interface (API)

In order to meet compliance for data residency laws, Amazon never replicates data stored in S3 automatically across:


Options are :

  • Storage Units in a single Availability Zone
  • Disks
  • Availability Zones
  • Regions (Correct)

Answer :Regions

Which of the following best describes EBS?


Options are :

  • Compute Power
  • A virtual hard disk in the cloud (Correct)
  • Object Storage
  • A drive store like Google Drive

Answer :A virtual hard disk in the cloud

You wish to identify when members of your custom group in AWS last logged in.  Where can you get this information?


Options are :

  • In the IAM Console, click on Users and under the �Last activity� column (Correct)
  • In the MetaData Console
  • In the UserData Console
  • In the IAM Console under Last Logged in column

Answer :In the IAM Console, click on Users and under the �Last activity� column

You have just created a bucket and uploaded a file.  When you view the properties of the file, you notice there is a web URL associated with the file.  However, clicking the link gives you an �Access Denied� message.  What could be wrong?


Options are :

  • Set up a bucket policy to open port 80
  • Files could be opened by the root user
  • You need to open port 80 on the security group
  • Grant Public read access to the file for Everyone (Correct)

Answer :Grant Public read access to the file for Everyone

Which of the following services in a VPC grants you Internet Access for the VPC?


Options are :

  • NAT-T
  • EGW
  • NAT
  • IGW (Correct)

Answer :IGW

Which industry standards & best practice does the AWS Managed Service offering comply with?


Options are :

  • ITIL (Correct)
  • Agile
  • PMP
  • Prince2

Answer :ITIL

AWS Full Trusted Advisor is only available for Business and Enterprise Customers. (True or false)


Options are :

  • False
  • True (Correct)

Answer :True

Your company manages a fleet of Windows EC2 instances in a VPC (Public/Private Subnet Configuration) for a client. Your team is connecting to the VPC over the Internet to manage the fleet of Amazon EC2 instances running in both the public and private subnets. You have not yet gotten the approval to configure a site-to-site VPN tunnel from your offices to the client�s VPC. 

You have added a bastion host with Microsoft Remote Desktop Protocol (RDP) access to the application instance in the private subnet, but the client wants to further limit administrative access to all of the instances in the VPC.

Which of the following bastion host deployment options will meet this requirement?


Options are :

  • Configure the Bastion Host in the Public Subnet with an Elastic IP and a Security Group to accept incoming RDP traffic from only your corporate IP Address (Correct)
  • Deploy the Bastion Host in the Private Subnet and configure it with an Elastic IP Address and a Security Group to accept incoming RDP traffic from only your corporate IP Address
  • Configure the Bastion Host to accept only incoming SSH traffic. Disable RDP access to the Bastion host
  • Set up a Direct Connect Link between your office and the client�s VPC

Answer :Configure the Bastion Host in the Public Subnet with an Elastic IP and a Security Group to accept incoming RDP traffic from only your corporate IP Address

What two types of root storage devices are available for EC2 Instances? (Choose 2 answers)


Options are :

  • Glacier
  • EBS (Correct)
  • VDH
  • S3
  • Instance Store (Correct)

Answer :EBS Instance Store

Where can you set up Billing Alarms?


Options are :

  • Trusted Advisor
  • AWS Shield
  • CloudWatch (Correct)
  • EC2 Dashboard

Answer :CloudWatch

What is Amazon Lex used for?

Amazon Lex is an AWS service for building conversational interfaces for applications using voice and text. With Amazon Lex, the same conversational engine that powers Amazon Alexa is now available to any developer, enabling you to build sophisticated, natural language chatbots into your new and existing applications.

Which statement best describes an AWS accounts default network access control list?

Which statement best describes an AWS account's default network access control list? It is stateless and allows all inbound and outbound traffic.

Which of the following are key features of Amazon Lex?

Key features.
High quality speech recognition and natural language understanding. ... .
Context management. ... .
8 kHz telephony audio support. ... .
Multi-turn dialog. ... .
Visual Conversation Builder. ... .
Powerful Lifecycle Management Capabilities. ... .
One-click deployment to multiple platforms. ... .
Streaming conversations..

Is Amazon Lex an image recognition tool?

Amazon Lex is a cloud-based automatic speech recognition and natural language comprehension service.