Part 8
How does consolidated billing help reduce costs for a company that has multiple AWS accounts? A. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner. B. It offers an additional 5% discount on purchases of AII Upfront Reserved Instances. C. It provides a simplified billing invoice that the company can process more quickly than a standard invoice. D. It gives AWS resellers the ability to bill their customers for usage.
A
A financial services company wants to ensure that its AWS account activity is logged to meet regulatory requirements for logging, auditing, and governance. Which AWS service meets these requirements? A. AWS CloudTrail B. AWS Trusted Advisor C. AWS Config D. Amazon CloudWatch
A
An online retail company recently deployed a production web application. The system administrator needs to block common attack patterns such as SQL injection and cross-site scripting. Which AWS service should the administrator use to address these concerns? A. AWS WAF B. Amazon VPC C. Amazon GuardDuty D. Amazon CloudWatch
A
Which AWS service or feature enables users to encrypt data at rest in Amazon S3? A. IAM policies B. Server-side encryption C. Amazon GuardDuty D. Client-side encryption
A
Which AWS service is a highly available and scalable DNS web service? A. Amazon VPC B. Amazon CloudFront C. Amazon Route 53 D. Amazon Connect
C
Which pillar of the AWS Well-Architected Framework focuses on the ability to run workloads effectively, gain insight into operations, and continuously improve supporting processes and procedures? A. Cost optimization B. Reliability C. Operational excellence D. Performance efficiency
C
A company has infrastructure in one AWS Region and is expanding operations to a second AWS Region. The company is using the same AWS CloudFormation template in the second Region that the company uses in the original Region. The company attempts to launch Amazon EC2 On-Demand Instances in the second Region and receives error messages. What could cause these error messages? A. A new EC2 key pair has not been created for the EC2 instances. B. The requested EC2 instance types are not available in the second Region. C. The company cannot operate in a second Region until it updates its AWS contract. D. The company has not configured AWS Budgets to monitor the budget for the EC2 instances.
A
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions? A. Create an IAM role with the required permissions. Attach the role to the EC2 instance. B. Create an IAM user and use its access key and secret access key in the application. C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.
A
A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases. Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload? A. Elastic Load Balancing B. Amazon EC2 Auto Scaling C. AWS App2Container (A2C) D. AWS Systems Manager
A
A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement? A. AWS VPN B. Amazon Route 53 C. Amazon API Gateway D. Amazon Connect
A
A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speed. Which AWS service meets these requirements? A. Amazon CloudFront B. Elastic Load Balancing C. Amazon S3 D. Amazon Elastic Transcoder
A
A company needs to perform a one-time migration of 40TB of data from its on-premises storage servers to Amazon S3. The transfer must happen as quickly as possible while keeping costs to a minimum. The company has 100 Mbps internet connectivity. Which AWS service will meet these requirements? A. AWS Snowball B. AWS Direct Connect C. AWS Storage Gateway D. Amazon S3 Transfer Acceleration
A
A company plans to store sensitive data in an Amazon S3 bucket. Which task is the responsibility of AWS? A. Activate encryption at rest for the data. B. Provide security for the physical infrastructure. C. Train the company's employees about cloud security. D. Remove personally identifiable information (PII) from the data.
A
A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the database. The company wants to give users the ability to store personal information, but the user access must be controlled in a more secure and reliable way. Which AWS service or feature will meet these requirements? A. Security groups B. Amazon GuardDuty C. AWS Secrets Manager D. Amazon Cognito
A
Which of the following describes AWS Local Zones? A. A cluster of data centers in one geographic location B. A site used by Amazon CloudFront to cache frequently accessed content C. An extension of an AWS Region to more granular locations D. One or more data centers with redundant power and networking
A
A large organization has a single AWS account. What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.) A. It allows for administrative isolation between different workloads. B. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console. C. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive. D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account. E. Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.
A, C
A user should contact the AWS Abuse team to report which situations? (Choose two.) A. A DDoS attack is being made on an AWS resource. B. A SQL injection attack is being made from an IP address that is not an AWS address. C. AWS resources are being used to host objectionable or illegal content. D. A company's resources are being used in a way that is inconsistent with corporate policy. E. A company is receiving HTTPS requests on a web server that is serving HTTP.
A, C
Which AWS Trusted Advisor checks are available to users with AWS Basic Support? (Choose two.) A. Service limits B. High utilization Amazon EC2 instances C. Security groups â€" specific ports unrestricted D. Load balancer optimization E. Large number of rules in an EC2 security groups
A, C
Which of the following are economic benefits of using AWS Cloud? (Choose two.) A. Consumption-based pricing B. Perpetual licenses C. Economies of scale D. AWS Enterprise Support at no additional cost E. Bring-your-own-hardware model
A, C
Which AWS services can be used to store files? (Choose two.) A. Amazon S3 B. AWS Lambda C. Amazon Elastic Block Store (Amazon EBS) D. Amazon SageMaker E. AWS Storage Gateway
A, C, E
Which network security features are supported by Amazon VPC? (Choose two.) A. Network ACLs B. Internet gateways C. VPC peering D. Security groups E. Firewall rules
A, D
Which of the following are user authentication services managed by AWS? (Choose two.) A. Amazon Cognito B. AWS Lambda C. AWS License Manager D. AWS Identity and Access Management (IAM) E. AWS CodeStar
A, D
Which of the following are responsibilities of the customer in the AWS Cloud? (Choose two.) A. Security in the cloud B. Configuration of AWS infrastructure devices C. Configuration of security groups on Amazon EC2 instances D. Security of the cloud E. Patches for the operating system of Amazon DynamoDB
A, E
Which tasks require use of the AWS account root user? (Choose two.) A. Changing an AWS Support plan B. Modifying an Amazon EC2 instance type C. Grouping resources in AWS Systems Manager D. Running applications in Amazon Elastic Kubernetes Service (Amazon EKS) E. Closing an AWS account
A, E
A company has a Java web application. The company wants to use auto deployment to create the AWS environment and deploy new versions of its application. Which AWS service will meet these requirements? A. AWS Auto Scaling B. AWS Elastic Beanstalk C. AWS Control Tower D. Amazon EC2
B
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally. What is the MOST operationally efficient AWS solution for this scenario? A. Create an Amazon S3 bucket for each users. Mount each bucket by using an S3 file system mounting utility. B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user's workstation to the file gateway. C. Move each user's working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user. D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.
B
A company has an application workload that is stateless be design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost? A. On-Demand Instances B. Spot Instances C. Reserved Instances D. Dedicated Instances
B
A company is based in the us-east-1 Region and has a satellite office in the eu-west-2 Region. The company wants to use Amazon WorkSpaces to host its internal web portal and virtual desktops for employees. What should the company do to minimize latency and ensure the best possible performance for employees? A. Deploy the internal web portal and virtual desktops to us-east-1 only. Use an Amazon CloudFront distribution for the users in eu-west-2. B. Deploy the internal web portal to us-east-1 only. Deploy the virtual desktops to us-east-1 and eu-west-2. C. Deploy the internal web portal to us-east-1 and eu-west-2. Deploy the virtual desktops on network optimized Amazon EC2 instances to us-east-1 only. D. Deploy the internal web portal and virtual desktops to us-east-1 and eu-west-2.
B
A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports. Which AWS service or group can provide these documents? A. AWS Abuse team B. AWS Artifact C. AWS Support D. AWS Config
B
A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances. Which benefit of the AWS Cloud does this example illustrate? A. High availability B. Elasticity C. Reliability D. Global reach
B
A company uses Amazon S3 buckets. One of the company's departments enabled S3 Cross-Region Replication for those buckets to meet new requirements. The company's bill for that month was larger than usual. Which AWS service or feature can the company use to confirm that the cost increase was caused by the data replication? A. Consolidated billing B. Cost Explorer C. AWS Pricing Calculator D. AWS Trusted Advisor
B
A company wants to build a new architecture with AWS services. The company needs to compare service costs at various scales. Which AWS service, tool, or feature should the company use to meet this requirement? A. AWS Compute Optimizer B. AWS Pricing Calculator C. AWS Trusted Advisor D. Cost Explorer rightsizing recommendations
B
A company wants to distribute its incoming traffic across multiple Amazon EC2 instances. Which AWS service or feature should be used to meet this requirement? A. Amazon Virtual Private Cloud (Amazon VPC) B. AWS Application Load Balancer C. AWS Managed VPN D. AWS Direct Connect
B
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys? A. EC2 key pairs B. AWS Systems Manager Session Manager C. AWS Identity and Access Management (IAM) D. Network ACLs
B
A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet. Which AWS service will meet these requirements MOST cost-effectively? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon S3 C. Amazon Elastic File System (Amazon EFS) D. AWS Storage Gateway
B
A company with AWS Enterprise Support has questions about its consolidated bill. Which AWS service, feature, or tool should the company use for assistance? A. AWS Pricing Calculator B. AWS Concierge Support C. AWS Trusted Advisor D. AWS Budgets
B
A company's traffic logs show that IP addresses owned by AWS are being used in an attempt to flood ports on system resources. To whom should the cloud practitioner report this issue? A. AWS Professional Services B. AWS Abuse team C. AWS Partner Network (APN) D. AWS technical account manager (TAM)
B
A network engineer needs to establish a dedicated 10 Gbps network connection from an on-premises environment to AWS. Which AWS service or feature should the engineer use? A. Amazon Route 53 B. AWS Direct Connect C. AWS PrivateLink D. AWS VPN
B
According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following? A. Amazon DynamoDB B. Amazon EC2 instances C. Amazon RDS instances D. Amazon S3
B
An Elastic Load Balancer allows the distribution of web traffic across multiple: A. AWS Regions. B. Availability Zones. C. Dedicated Hosts. D. Amazon S3 buckets.
B
What does Amazon CloudFront provide? A. Automatic scaling for all resources to power an application from a single unified interface B. Secure delivery of data, videos, applications, and APIs to users globally with low latency C. Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo DNS, geoproximity, and weighted round robin D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and AWS Lambda functions
B
What is the LEAST expensive AWS Support plan that provides a designated AWS technical account manager (TAM)? A. AWS Developer Support B. AWS Enterprise Support C. AWS Basic Support D. AWS Business Support
B
Which AWS service allows users to provision resources using a consistent and repeatable process? A. AWS Systems Manager B. AWS CloudFormation C. AWS Batch D. AWS Config
B
Which AWS service can be used to decouple applications? A. AWS Config B. Amazon Simple Queue Service (Amazon SQS) C. AWS Batch D. Amazon Simple Email Service (Amazon SES)
B
Which AWS service or feature provides an online, managed software catalog that helps users purchase and deploy third-party software? A. AWS Support B. AWS Marketplace C. Amazon EC2 private Amazon Machine Images (AMIs) D. AWS reseller programs
B
Which AWS service or feature provides users with recommendations for common billing questions? A. AWS Marketplace B. AWS Knowledge Center C. Amazon Pinpoint D. Amazon Connect
B
Which AWS service should a company use to continuously monitor the compliance of AWS resource configurations? A. AWS Organizations B. AWS Config C. AWS Artifact D. AWS Service Catalog
B
Which AWS service uses edge locations? A. Amazon Aurora B. AWS Global Accelerator C. Amazon Connect D. AWS Outposts
B
Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards? A. Running Amazon GuardDuty B. Using AWS Artifact C. Creating an AWS Support ticket D. Evaluating AWS CloudTrail logs
B
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity? A. Agility B. Elasticity C. Reliability D. Durability
B
Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data? A. Amazon Athena B. AWS Glue C. Amazon S3 D. AWS Snowball Edge
B
Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model? A. IAM access and secret keys are static, so there is no need to rotate them. B. The customer is responsible for rotating keys. C. AWS will rotate the keys whenever required. D. The AWS Support team will rotate keys when requested by the customer.
B
Which AWS services make use of global edge locations? (Choose two.) A. AWS Fargate B. Amazon CloudFront C. AWS Global Accelerator D. AWS Wavelength E. Amazon VPC
B, C
Which of the following are AWS Trusted Advisor support categories? (Choose two.) A. Operational excellence B. Cost optimization C. Security D. Well-Architected Framework Rightsizing
B, C
A company uses Amazon DynamoDB in its AWS Cloud architecture. According to the AWS shared responsibility model, which of the following are responsibilities of the company? (Choose two.) A. Operating system patching and upgrades B. Application of appropriate permissions with IAM tools C. Configuration of data encryption options D. Creation of DynamoDB endpoints Infrastructure provisioning and maintenance
B, D
Which guidelines are key AWS architectural design principles? (Choose two.) A. Design for fixed resources. B. Build scalable architectures. C. Use tightly coupled components. D. Use managed services when possible. E. Design for human interaction
B, D
Which tasks should a user perform if the user suspects that an AWS account has been compromised? (Choose two.) A. Remove any multi-factor authentication (MFA) tokens. B. Rotate and delete all AWS access keys. C. Move resources to a different AWS Region. D. Delete AWS CloudTrail resources. E. Contact AWS Support.
B, E
A company is building a mobile app to provide shopping recommendations to its customers. The company wants to use a graph database as part of the shopping recommendation engine. Which AWS database service should the company choose? A. Amazon DynamoDB B. Amazon Aurora C. Amazon Neptune D. Amazon DocumentDB (with MongoDB compatibility)
C
A company is moving its development and test environments to AWS to increase agility and reduce cost. Because these are not production workloads and the servers are not fully utilized, occasional unavailability is acceptable. What is the MOST cost-effective Amazon EC2 pricing model that will meet these requirements? A. Reserved Instances B. On-Demand Instances C. Spot Instances Dedicated Instances
C
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants to alternate to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements? A. AWS Lambda B. Amazon RDS C. AWS Fargate D. Amazon Athena
C
A company runs its business-critical web application on Amazon Elastic Container Service (Amazon ECS) and Amazon DynamoDB. The workload spikes up to 10 times the normal workload multiple times during the day. Which AWS Cloud feature enables the company to meet these changes in demand? A. Agility B. Global reach C. Scalability D. Security
C
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources. Which AWS service or feature can be used to meet these requirements? A. AWS Local Zones B. Availability Zones C. AWS Outposts D. AWS Wavelength Zones
C
A company wants to establish a private network connection between AWS and its corporate network. Which AWS service or feature will meet this requirement? A. Amazon Connect B. Amazon Route 53 C. AWS Direct Connect D. VPC peering
C
A company wants to increase its ability to recover its infrastructure in the case of a natural disaster. Which pillar of the AWS Well-Architected Framework does this ability represent? A. Cost optimization B. Performance efficiency C. Reliability D. Security
C
A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user. What should the company do to meet these data storage requirements with the LEAST amount of operational overhead? A. Use Amazon EC2 in multiple Regions to host separate databases. B. Use Amazon RDS cross-Region replication. C. Use Amazon DynamoDB global tables. D. Use AWS Database Migration Service (AWS DMS).
C
A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice. Which benefit of the AWS Cloud describes these abilities? A. Reliability B. Economy of scale C. Elasticity D. Pay-as-you-go pricing
C
What should a user do to deploy an application in geographically separate locations? A. Deploy the application in different placement groups. B. Deploy the application to a VPC. C. Deploy the application to multiple AWS Regions. D. Deploy the application by using Amazon CloudFront.
C
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses? A. High availability B. Economies of scale C. Pay-as-you-go pricing D. Global reach
C
Which AWS service is a relational database compatible with MySQL and PostgreSQL? A. Amazon Redshift B. Amazon DynamoDB C. Amazon Aurora D. Amazon Neptune
C
Which AWS service is always free of charge for users? A. Amazon S3 B. Amazon Aurora C. Amazon EC2 D. AWS Identity and Access Management (IAM)
C
Which AWS service or feature can be used to find availability status information on all AWS services? A. AWS Personal Health Dashboard B. AWS CloudTrail C. AWS Service Health Dashboard D. Amazon CloudWatch
C
Which AWS service or feature is available only to users who have an AWS Enterprise Support plan? A. AWS Trusted Advisor B. AWS Support case C. AWS Concierge Support team D. Amazon Connect
C
Which AWS service or feature is designed to help companies take advantage of quantity discounts available from AWS? A. Saving Plans B. AWS Budgets C. AWS Organizations D. AWS Pricing Calculator
C
Which disaster recovery option is the LEAST expensive? A. Warm standby B. Multisite C. Backup and restore D. Pilot light
C
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation? A. AWS CLI B. AWS Developer Center C. AWS Cloud Development Kit (AWS CDK) D. AWS CodeStar
C
Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model? A. Patching of the guest operating system B. Security awareness and training C. Physical and environmental controls D. Development of an IAM password policy
C
Which phase describes agility as a benefit of building in the AWS Cloud? A. The ability to pay only when computing resources are consumed, based on the volume of resources that are consumed B. The ability to eliminate guessing about infrastructure capacity needs C. The ability to support innovation through a reduction in the time that is required to make IT resources available to developers D. The ability to deploy an application in multiple AWS Regions around the world in minutes
C
Which task is an AWS responsibility when a workload is running in Amazon RDS? A. Creating the database table B. Updating the database schema C. Installing the database engine D. Dropping the database records
C
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.) A. Amazon Connect B. Amazon AppStream 2.0 C. Amazon WorkSpaces D. AWS Site-to-Site VPN E. Amazon Elastic Container Service (Amazon ECS)
C, D
A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using the only AWS services that replicates data across multiple Availability Zones. Which AWS services should the company use to meet this requirement? (Choose two.) A. Amazon EC2 B. Amazon Elastic Block Store (Amazon EBS) C. Amazon Aurora D. Amazon DynamoDB E. Amazon Redshift
C, D
Which options are available to a user who wants to contact AWS Support? (Choose two.) A. Create an email case in the AWS Support Center. B. Visit a local AWS Support Center. C. Use live chat functionality. D. Call the customer service phone number. E. Use the video conference functionality of the AWS Support console.
C, D
Which tasks can be performed by an IAM user that has been granted all of the AWS Identity and Access Management (IAM) permissions that are available? (Choose two.) A. Activate IAM access to the AWS Billing and Cost Management console. B. Close an AWS account. C. Turn on multi-factor authentication (MFA) for non-administrative IAM users. D. Change the AWS Support plan. E. Delegate access to another AWS account.
C, E
A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy applications that run on Amazon EC2 instances. Which pillar of the AWS Well-Architected Framework does this action cover? A. Security B. Performance efficiency C. Operational excellence D. Reliability
D
A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads. Which benefit of the AWS Cloud does this scenario describe? A. Global deployments in minutes B. Cost savings C. Agility Elasticity
D
A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application. What can the company do to meet this requirement? A. Set up invoiced billing. B. Use AWS Artifact. C. Set the budgets in Cost Explorer. D. Create cost allocation tags.
D
A company is running a Microsoft SQL Server instance on premises and is migrating its application to AWS. The company lacks the resources need to refactor the application, but management wants to reduce operational overhead as part of the migration. Which database service would MOST effectively support these requirements? A. Amazon DynamoDB B. Amazon Redshift C. Microsoft SQL Server on Amazon EC2 D. Amazon RDS for SQL Server
D
A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet. Which AWS service or feature can the company use to meet these requirements? A. Network ACL B. AWS WAF C. Route table D. Security group
D
A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS. Which AWS service or tool can the company use to obtain this information? A. AWS Pricing Calculator B. AWS Budgets C. AWS Trusted Advisor D. Cost Explorer
D
An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console. Which AWS service should be used to determine what action made this EC2 instance inaccessible? A. Amazon CloudWatch Logs B. AWS Security Hub C. Amazon Inspector D. AWS CloudTrail
D
How do AWS users trade infrastructure expenses for operational expenses? A. Secure their physical infrastructure to prevent malicious attacks. B. Use AWS Budgets to ensure that spending on AWS resources does not exceed preset thresholds. C. Eliminate the electricity costs that are associated with the hosting of physical servers. D. Use AWS Auto Scaling to dynamically increase and decrease compute resources as needed.
D
What is the LEAST expensive AWS Support plan that provides 24-hour access to AWS customer service and AWS communities? A. AWS Enterprise Support B. AWS Business Support C. AWS Developer Support D. AWS Basic Support
D
Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime? A. Agility B. Elasticity C. Scalability D. High availability
D
Which AWS service or feature is highly available by default? A. Amazon EC2 B. Amazon Aurora C. NAT instances D. AmazonRDS
D
Which AWS service or tool helps identify underutilized Amazon EC2 instances and idle Amazon RDS DB instances at no additional charge? A. Cost Explorer B. AWS Budgets C. AWS Organizations D. AWS Trusted Advisor
D
Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications? A. AWS Cloud9 B. AWS CodeStar C. AWS Cloud Map D. AWS X-Ray
D
Which duty is a responsibility of AWS under the AWS shared responsibility model? A. Identity and access management (IAM) B. Server-side encryption (SSE) C. Firewall configuration D. Maintaining physical hardware
D
Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model? A. Operational excellence B. Performance efficiency C. Reliability D. Security
D
Which statement explains the benefit of agility in the AWS Cloud? A. Agility gives users the ability to host applications in multiple AWS Regions around the world. B. Agility gives users the ability to pay upfront to reduce cost. C. Agility provides customizable physical hardware at the lowest possible cost. D. Agility provides the means for users to provision resources in minutes.
D
A company wants to rightsize its infrastructure to control costs. At which points should the company rightsize? (Choose two.) A. Rightsize before a migration occurs to the cloud. B. Rightsize continuously after the cloud onboarding process. C. Rightsize when AWS Support calls and explains that rightsizing is needed. D. Rightsize when seasonal workloads are at their peak. E. Rightsize after purchasing all Reserved Instances.
D, E
Which of the following are customer responsibilities under the AWS shared responsibility model? (Choose two.) A. Physical security of AWS facilities B. Configuration of security groups C. Encryption of customer data on AWS D. Management of AWS Lambda infrastructure E. Management of network throughput of each AWS Region
D, E
