AWS Certified Cloud Practitioner

AWS Certified Cloud Practitioner practice questions, page 20 of 40, with answer review and explanations.

Question 96

Which of the following acts as an instance-level firewall to control inbound and outbound access?

  1. Network access control list
  2. Security groups
  3. AWS Trusted Advisor
  4. Virtual private gateways

Question 97

A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions. Which Amazon EC2 purchasing option will be MOST cost-effective?

  1. All Upfront Reserved Instances
  2. Partial Upfront Reserved Instances
  3. Dedicated Instances
  4. On-Demand Instances

Question 98

Which AWS service helps protect against DDoS attacks?

  1. AWS Shield
  2. Amazon Inspector
  3. Amazon GuardDuty
  4. Amazon Detective

Question 99

Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?

  1. Security
  2. Operational excellence
  3. Performance efficiency
  4. Cost optimization

Question 100

Which AWS tool or feature acts as a VPC firewall at the subnet level?

  1. Security group
  2. Network ACL
  3. Traffic Mirroring
  4. Internet gateway