What happens when an IAM user's permissions are revoked in AWS?
AAccess remains until session expiry
BAll policies are removed immediately
COnly the last session is revoked
DNew permissions are granted automatically
Explanation
Access is preserved until session expiration, while other options suggest incorrect immediate effects.
Q22
Which service provides automated governance for cloud resources?
ACloudHealth
BAWS Lambda
CAmazon S3
DAWS CodeDeploy
Explanation
CloudHealth automates governance, while others focus on different functionalities.
Q23
A company needs to monitor their Kubernetes workloads on AWS. Which Tanzu service should they use?
ATanzu Observability
BTanzu Service Mesh
CTanzu Kubernetes Grid
DTanzu Mission Control
Explanation
Tanzu Observability provides monitoring for Kubernetes workloads, while others focus on management and control.
Q24
You are configuring cost allocation tags for AWS resources. What happens if you forget to enable these tags on resources?
ATags will still be auto-enabled
BCosts cannot be tracked correctly
CAll resources will be tagged by default
DAWS will alert you automatically
Explanation
Forgetting to enable means costs will not be tracked by tag, while others do not accurately represent tag behavior.
Q25
Which service is used for container orchestration based on Kubernetes in VMware Tanzu?
ATanzu Kubernetes Grid
BVMware vSphere
CVMware NSX
DvRealize Operations
Explanation
Tanzu Kubernetes Grid manages Kubernetes clusters, while others serve different purposes.
Q26
A company needs to manage costs in multiple AWS accounts effectively. Which feature in CloudHealth should they utilize?
APolicies
BDashboards
CReporting
DInventory
Explanation
Policies allow for automated cost management across accounts, while others provide data insights.
Q27
You are configuring service integration with CloudHealth. What happens when incorrect API credentials are provided?
ASuccessful integration will occur
BIntegration will fail silently
CError message will display
DCredentials will auto-correct
Explanation
An error message will indicate authentication failure, ensuring the user is aware.
Q28
Which service helps in monitoring AWS costs effectively?
AAWS Cost Explorer
BAWS Management Console
CAmazon CloudWatch
DAWS Config
Explanation
AWS Cost Explorer allows users to visualize and manage their AWS costs, while others serve different management purposes.
Q29
A company needs to secure its AWS resources by assigning roles based on the principle of least privilege. What IAM feature should they use?
AAWS Policy Simulator
BIAM Service Control Policies
CIAM Roles
DIAM Users
Explanation
IAM Roles allow temporary permissions to users and can enforce the least privilege model effectively; other options lack this temporary capability for resource access.
Q30
You are configuring Amazon RDS for a production workload. What happens if you set the backup retention period to 0 days?
ABackups will be taken manually.
BAutomatic daily backups are disabled.
CBackups will save for 7 days.
DOnly weekly backups are stored.
Explanation
Setting the backup retention period to 0 days disables automatic backups, while other options suggest incorrect behaviors regarding backup frequency and types.