AWS Certified Data Analytics Exam Simulator 2 | (50 questions)

Your users have started to complain about poor application performance. You determine that your on-premises VPN connection is saturated with authentication and authorization traffic to the on-premises Microsoft Active Directory (AD) environment. Which option will reduce on-premises network traffic?

You have configured a consumer Virtual Private Cloud (VPC) endpoint for a remote authentication service hosted by a business partner using AWS PrivateLink. The endpoints have been whitelisted and configured on the consumer and provider. Some instances are not able to access the private authentication service. Which of the following could cause this issue? (Choose two.)

You are using an existing RADIUS-based multi-factor authentication (MFA) infrastructure. Which AWS service is your best choice?

Which of the following uses authentication based on AWS Security Token Service (STS) tokens?

Which Multi-Factor Authentication devices does the IAM service support?

How does multi-factor authentication work?

Which AWS service provides centralized management of access and authentication of users administering the services in an AWS account?

Consider the following statements about the AAA architecture:
I. Authentication deals with the question “Who is the user?”
II. Authorization addresses the question “What is the user allowed to do?”
III. Accountability answers the question “What did the user do?”
Which of the following is correct?

What authorization feature can restrict the actions of an account’s root user?

What is the maximum duration of an AWS penetration testing authorization?

A large manufacturing organization has started capturing data from sensors across the assembly lines. It is looking to perform operational analytics and build real-time dashboards based on specific index patterns and looking at ultra-low latency. The data is available in Elasticsearch. Which of the following visualization techniques is best suited for such an organization?

A leading financial organization is looking to migrate its enterprise data warehouse to AWS. It has 30 TB of data in its data warehouse but is only using 500 GB for reporting and dashboarding while the remaining data is occasionally required for compliance purposes. Which of the following is a more cost-effective solution?

Compliance documents are available from which of the following?

For regulatory compliance, your application may only provide data to requests coming from the United States. Which of the following routing policies can be configured to do this?

Your web application relies on data objects stored in AWS S3 buckets. Compliance with industry regulations requires that those objects are encrypted and that related events can be closely tracked. Which combination of tools should you use? (Choose two.)

Your company must retain legacy compliance data for five years in “an immutable form” in the unlikely event of a tax audit. What is the most cost-effective method that will achieve compliance?

Your company has a compliance requirement to record all writes to an Amazon Simple Storage Service (Amazon S3) bucket and any time that content was read publicly. What are the two steps needed to achieve compliance? (Choose two.)

You must set up centralized logging for an application and create a cost-effective way to archive logs for compliance purposes. Which is the best solution?

Which AWS Cloud service enables governance, compliance, operational auditing, and risk auditing of your AWS account?

You have a set of users that have been granted access to your Amazon S3 bucket. For compliance purposes, you need to keep track of all files accessed in that bucket. To have a record of who accessed your Amazon Simple Storage Service (Amazon S3) data and from where, what should you do?

Which of the following standards governs AWS-based applications processing credit card transactions?

To protect its website, the organization directs you to implement known-attacker protection for the website. The website resides behind an Application Load Balancer. You have subscribed to a threat intelligence service that posts hourly IP reputation lists. What combination of AWS Cloud services will allow you to block traffic based on this threat intelligence?

AWS Shield Standard provides protection at which layers of the Open Systems Interconnection (OSI) model? (Choose two.)

You are looking for an endpoint protection solution, and you want to use the same solution that you are using on-premises today to improve your workload protection running on your Amazon EC2 instances. Where can you find endpoint protection solutions to protect your servers running in the AWS Cloud?

Who is responsible for network traffic protection in Amazon Virtual Private Cloud (Amazon VPC)?

You are looking to run large scale data processing jobs on Amazon EMR running in a stepexecution mode. The data processing jobs can be run at any time with input data available on Amazon S3. Which of the following options will ensure that the data remains available, provides a consistent view, and is encrypted for protection during and after the cluster is terminated after the completion of steps? (Choose One.)

You are looking for an endpoint protection solution, and you want to use the same solution that you are using on-premises today to improve your workload protection running on your Amazon EC2 instances. Where can you find endpoint protection solutions to protect your servers running in the AWS Cloud?

Which of the following provide the most protection against data corruption and accidental deletion for existing objects stored in S3? (Choose two.)

What is the term for a relational database that stores large amounts of structured data from a variety of sources for reporting and analysis?

Your team uses an application to receive information quickly from other parts of your infrastructure. It leverages low-latency multicast feeds to receive information from other applications and displays analysis. Which approach could help satisfy the application’s low latency requirements in AWS?

Read the following statements and choose the correct option:
■ a. A vulnerability is a weakness within a computer system that can be exploited to perform unauthorized actions.
■ b. A security risk is defined as any entity (such as a person or a tool) that can exploit a vulnerability intentionally or by accident.
■ c. A threat relates to the probability of a certain vulnerability being exploited by a threat actor, which will depend on the value of the digital asset under analysis.

Your CIO has recently announced that you will be migrating to AWS to reduce your costs and improve overall agility by benefitting from the breadth and depth of the platform. You have a number of on-premises Oracle databases, which are not only expensive from a licensing perspective but also difficult to scale. You have realized that you can get the same performance from Amazon Aurora at 1/10 of the cost and hence would like to proceed with the migration. You want to create the schema beforehand on the AWS My SQL instance. Which of the following is the easiest approach in getting this done?

Which of the following common partition schemas includes a partition key design that distributes I/O requests evenly across partitions and uses provisioned I/O capacity of an Amazon DynamoDB table efficiently?

What is a collection of related findings, grouped by a common attribute and saved as a filter in AWS Security Hub, called?

You need a cost-effective solution to store a large collection of audio, video, and PDF files and provide users with the ability to track and analyze all your data efficiently using your existing business intelligence tools. Which of the following would form the solution required to fulfill the requirements?

If you specify a hook script in the ApplicationStop lifecycle event of an AWS CodeDeploy appspec.yml, will it run on the first deployment to your instance(s)?

Which of the following AWS services (alone or combined) would suit better the remediate phase of an incident lifecycle?
I. AWS Config
II. AWS CloudTrail
III. AWS Systems Manager

Which of the following classes will usually make the most sense for long-term storage when included within a sequence of lifecycle rules?

Your developers require a service that easily provisions an environment and then deploys and runs applications in the AWS cloud. The service needs to be integrated with developer tools and provides a one-stop experience for you to manage the lifecycle of your applications. What service would provide this capability without needing to write code specifically to deploy the infrastructure?

A company uses a third-party service to send checks to its employees for payroll. The company is required to send the third-party service a JSON file with the person’s name and the check amount. The company’s internal payroll application supports exporting only to CSVs, and it currently has cron jobs set up on their internal network to process these files. The server that is processing the data is aging, and the company is concerned that it might
fail in the future. It is also looking to have the AWS services perform the payroll function. What would be the best serverless option to accomplish this goal?

Which of the following is a distributed data processing option on Apache Hadoop and was the main processing engine until Hadoop 2.0?

You are working for a ride-hailing company that has recently ventured into food delivery and order processing. The order processing system is built on AWS. The order processing runs into scaling issues particularly during lunch and dinner times when there is an excessive amount of orders received. In the current infrastructure, you have EC2 instances that pick up the orders from the application and EC2 instances in an Auto Scaling group to
process the orders. What architecture would you recommended to ensure that the EC2 processing instances are scaled correctly based on the demand?

You are working for a large utilities company which has deployed smart meters across its customer base. They are getting near real-time usage data from their customers and ingesting it into Amazon S3 via Amazon Kinesis. They were previously running some large scale transformations using PySpark on their on-premises Hadoop cluster. They have the Pyspark application available and expect no change other than input and output parameters while
running the job. They are looking to reuse their code as much as possible, while looking at the possibility to tune the environment specific to their workload. Which of the following is the right data processing choice for their workload that meets the customers’ requirements at the lowest cost? (Choose One.)

Your organization expects to be storing and processing large volumes of data in many small increments. When considering S3 usability, you’ll need to know whether you’ll face any practical limitations in the use of AWS account resources. Which of the following will normally be available only in limited amounts?

What are the major differences between Simple Storage Service (S3) and Elastic Block Store (EBS)? (Select TWO.)

What do new Relational Database Service (RDS) instances use for database storage?

What’s the maximum amount of data you can store in a Redshift cluster when using dense storage nodes?

In what ways does Amazon Simple Storage Service (Amazon S3) object storage differ from block and file storage? (Select TWO.)

On an Amazon Elastic Compute Cloud (Amazon EC2) instance using an Amazon Elastic Block Store (Amazon EBS) volume for persistence, there is a large inconsistency in the response times of the database queries. While investigating the issue, you find that there is a large amount of wait time on the database’s disk volume. How can you improve the performance of the database’s storage while maintaining the current persistence of the data? (Choose two.)

In what ways does Amazon Simple Storage Service (Amazon S3) object storage differ from block and file storage? (Choose two.)