Which AWS service allows an operations team to model and provision a complete set of AWS resources from a declarative template file, so that identical environments can be recreated on demand?
Easy · Choose one
Explanation
Answer: A. AWS CloudFormation is the AWS infrastructure as code (IaC) service. You describe the desired resources in a JSON or YAML template, and CloudFormation provisions and configures them as a single unit called a stack. Because the template is a file, it can be stored in version control and reused to build identical development, test, and production environments.
B. AWS Systems Manager operates and manages existing instances and resources (patching, run command, parameter store). It is an operations tool, not a template-driven provisioning engine.
C. AWS Config records and evaluates the configuration of resources that already exist and reports on compliance drift. It does not provision resources.
D. AWS Control Tower automates the set-up of a secure multi-account landing zone with guardrails. It orchestrates accounts, not the individual resource stacks inside a workload.
62
An administrator must run the same sequence of AWS operations every night from a Linux server, driven by a shell script that is scheduled with cron. Which method of accessing AWS services is most appropriate?
Easy · Choose one
Explanation
Answer: B. The AWS CLI is a unified tool that issues AWS service commands from a terminal. Because the commands are text, they can be placed in a shell script and scheduled, which makes the CLI the standard choice for repeatable, automated operational tasks. The three primary access methods are the AWS Management Console, the AWS CLI, and the AWS SDKs.
A. AWS Artifact is a self-service portal for downloading AWS compliance reports and agreements. It does not operate AWS resources.
C. The AWS Management Console is a graphical web interface driven by a human clicking through pages. It cannot be invoked by a cron job or scripted.
D. The AWS Health Dashboard reports on the health of AWS services and on events affecting the account. It is an information source, not an automation interface.
63
Which of the following are valid ways to interact with and manage AWS services? (Choose TWO.)
Easy · Select 2 answers
Explanation
Answer: A and E. AWS provides three primary access methods: the AWS Management Console (graphical web interface), the AWS CLI (command line), and the AWS SDKs (programmatic access from application code). The console and the CLI are two of these three.
B. Amazon CloudWatch is a monitoring and observability service for metrics, logs, and alarms. It is not an interface for managing AWS resources broadly.
C. AWS Trusted Advisor is an inspection service that gives recommendations on cost, performance, security, fault tolerance, service limits, and operational excellence. It is a service you consume, not an access method.
D. AWS Artifact is a self-service portal for downloading AWS compliance reports and agreements. It is not an access method for managing services.
64
Which statement best describes an AWS Availability Zone?
Easy · Choose one
Explanation
Answer: B. An Availability Zone (AZ) consists of one or more discrete data centers, each with redundant power, networking, and connectivity, housed in separate facilities within a Region. AZs in a Region are physically separated by a meaningful distance yet connected by high-bandwidth, low-latency, fully redundant private networking.
A. That describes AWS Outposts, which brings AWS infrastructure into a customer facility.
C. That describes an edge location, which is part of the Amazon CloudFront and AWS global edge network, not an Availability Zone.
D. This reverses the relationship. A Region contains multiple Availability Zones, not the other way around.
65
Which component of the AWS global infrastructure does Amazon CloudFront use to cache copies of content close to end users?
Easy · Choose one
Explanation
Answer: D. Amazon CloudFront delivers content through a worldwide network of edge locations. When a user requests content, the request is routed to the edge location that provides the lowest latency, and cached content is served from there instead of from the origin.
A. Availability Zones host the origin infrastructure such as EC2 instances and databases. They are not the caching tier for CloudFront.
B. AWS Outposts extends AWS infrastructure into a customer's data center. It is not part of the CloudFront caching network.
C. Regions are the geographic groupings that contain Availability Zones. There are far fewer Regions than edge locations, so serving from a Region alone would not minimize latency for global users.