questions

Which task does AWS perform automatically?

A. Encrypt data that is stored in Amazon DynamoDB.

A company needs to audit its AWS resources. The company must document any changes that have been made to the resources.Which AWS service will meet these requirements?

AMAZON CONFIG

A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.Which AWS service or feature will help the company with its migration?

AWS Consulting Partners (APN)

A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications.Which AWS Support plan will meet these requirements at the LOWEST cost?

AWS Developer Support

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

AWS IAM Access Analyzer

Which documentation does AWS Artifact provide?

AWS ISO certifications

A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs.Which AWS service or feature meets these requirements?

AWS Transit Gateway

Which of the following are benefits of Amazon EC2 Auto Scaling?

Improved health and availability of applications, optimized performance and costs

A company wants to host a private version control system for its application code in the AWS Cloud.Which AWS service should the company use to meet this requirement?

codecommit

True or False: There are no outbound data transfer charges between Amazon Web Services in the same Region

true

A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas.Which AWS service should the company use to meet this requirement?

trusted advisor

Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?

trusted advisor

Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

upgrade the firmware of the network infrastructure, maintain the physical security of edge locations

Which of the following are components of an AWS Site-to-Site VPN connection?

virtual private gateway, customer gateway

In which situations should a company create an IAM user instead of an IAM role?

when the company creates AWS access credentials for individuals, when the company needs to add users to IAM groups

A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.Which AWS service can the company use to trace user requests as they move through the application's components?

xray

A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.Which AWS service should the company use to meet these requirements?

snowball edge

Which AWS service or feature is used to send both text and email messages from distributed applications?

sns

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)

stateless, they process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic

Which of the following are design principles of the reliability pillar of the AWS Well-Architected Framework? (Choose two.)

stop guessing capacity, make changes to infrastructure using automation

A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library's capacity to the AWS Cloud.Which AWS service should the company use to meet this requirement?

storage gateway

What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)

time and data last logged in and The User-Agent browser identifier for each IAM user currently logged in.

What is the scope of a VPC within the AWS network?

A VPC can span all Availability Zones within an AWS Region.

What does the AWS Concierge Support team provide?

A primary point of contact for AWS Billing and AWS Support

A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.Which AWS service can the company use to meet this goal?

AWS Certificate Manager

A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles.Which AWS service can be used to meet this requirement?

AWS CloudFormation

Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

AWS Direct Connect

Which AWS service uses edge locations?

AWS Global Accelerator

A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload toAWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency.Which AWS service or feature should the company use to meet these requirements?

AWS Local Zones

Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

AWS Route 53

A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.Which AWS solution should the company use to meet this requirement?

AWS Service Catalog

Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and caches the data locally for low-latency access?

AWS Storage Gateway

A company is moving its office and must establish an encrypted connection to AWS.Which AWS service will help meet this requirement?

AWS VPN

A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan.Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?

AWS infrastructure event management

Which AWS service or feature allows users to connect with and deploy AWS services programmatically?

AWS software development kits (SDKs)

A user wants to control AWS services by using the AWS CLI.What are the MINIMUM security credentials that the user needs to achieve this goal?

Access keys

Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data?

Amazon QuickSight

Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

Amazon WorkSpaces virtual Windows desktop

Question #324 Topic 1 Which AWS service provides automated backups of data by default?

Aurora

Which actions are examples of a company's effort to rightsize its AWS resources to control cloud costs? (Choose two.)

Base the selection of Amazon EC2 instance types on past utilization patterns, use s3 lifecycle policy

A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs.Which AWS Billing and Cost Management tool provides this data in a graphical format?

Cost Explorer

Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?

Cost allocation tags

A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources.Which actions will meet these requirements? (Choose two.)

Create a VPN connection between an on-premises device and a virtual private gateway in the VPC, Set up an AWS Direct Connect connection between the on-premises data center and AWS.

Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?

Creating versions of Lambda functions

Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances?

EC2 Amazon Machine Images (AMIs), Amazon Elastic Block Store (Amazon EBS) snapshots

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

EC2 Image Builder

What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises?

EC2 has a flexible, pay-as-you-go pricing model, EC2 has automatic storage cost optimization

Question #327 Topic 1 A company recently created its first AWS account.Which AWS services will require the use of a VPC?

EC2, EFS

Which AWS services provide high availability across multiple Availability Zones by default?

EFS, S3

A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive.Which AWS service can be used to improve the database performance?

ElastiCache

Service Control Policies (SCPs)

Enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access.

A developer wants to deploy an application on a container-based service. The service must automatically provision and manage the backend instances. The service must provision only the necessary resources.Which AWS service will meet these requirements?

FARGATE

Which of the following is available to a company that has an AWS Business Support plan?

Health API

A company wants to organize its users so that the company can grant permissions to the users as a group.Which AWS service or tool can the company use to meet this requirement?

IAM

Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?

IAM Access Analyzer

A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes.Which pillar of the AWS Well-Architected Framework does this scenario represent?

Operational excellence

Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

Personal Health Dashboard

A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network.Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?

Security groups

Which AWS service or tool should a company use to centrally request and track service limit increases?

Service Quotas

Which of the following are included in AWS Enterprise Support?

TAM and 15-minute business-critical response time

A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations.What should the user do to meet this requirement?

Tag the objects in the S3 bucket.

A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month.How can the user see if a change was made?

Use AWS CloudTrail to see if the security group was changed.

Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

VPC Flow Logs

A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection.Which AWS service or feature can be used to establish this connection?

VPC peering

An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.Which AWS service or resource will meet this requirement?

application load balancer

A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.Which best practice for cost governance does this example show?

architecture optimization

A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

athena

A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones.Which AWS services should the company use to meet this requirement? (Choose two.)

aurora and dynamoDB

A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.Which AWS service or program should the company use to determine which AWS services meet the regional requirements?

aws compliance program

What is the LEAST expensive AWS Support plan that contains a full set of AWS Trusted Advisor best practice checks?

business

A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a strong IT support team and does not need concierge support.Which AWS Support plan will meet these requirements at the LOWEST cost?

business support

A company needs to report on events that involve the specific AWS services that the company uses.Which AWS service or resource can the company use with Amazon CloudWatch to meet this requirement?

cloudtrail logs

An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?

cloudwatch alarm

A company is developing a new web application. The company must give users the ability to log in to the application through social identity providers.Which AWS service will meet these requirements?

cognito

A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.Which AWS service should the company use to build this capability?

comprehend

A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month.Which AWS tool should the company use to meet these requirements?

cost and usage report

A company wants to forecast future costs and usage of AWS resources based on past consumption.Which AWS service or tool will provide this forecast?

cost explorer

A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year.Which AWS service or tool provides this information?

cost explorer

What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

customer data

A user is a new AWS account owner who has no special access requirements.What should this user do with the AWS account root user access keys?

delete the keys and use iam users

A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection.Which AWS service should the company use to meet these requirements?

direct connect

A company wants to accelerate migration from its data center to the AWS Cloud.Which combination of AWS services should the company use to meet this requirement? (Choose two.)

direct connect, server migration service

A company is developing a mobile app that needs a high-performance NoSQL database.Which AWS services could the company use for this database? (Choose two.)

documentDB, dynamoDB

A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur.What could be causing this? (Choose two.)

ebs charges, elastic IP charges

A company would like to host its MySQL databases on AWS and maintain full control over the operating system, database installation, and configuration.Which AWS service should the company use to host the databases?

ec2

A company is creating a document that defines the operating system patch routine for all the company's systems.Which AWS resources should the company include in this document? (Choose two.)

ec2 and rds

A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves.Which AWS service should the developers use to meet these requirements?

elastic beanstalk

A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers.Which combination of AWS services should the company use to meet these requirements? (Choose two.)

elastic beanstalk, fargate; NOT EC2

A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances.Which benefit of the AWS Cloud does this example illustrate?

elasticity

Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.)

employee training and resource configuration management

Which task does AWS perform automatically? A. Encrypt data that is stored in Amazon DynamoDB. B. Patch Amazon EC2 instances. C. Encrypt user network traffic. D. Create TLS certificates for users' websites.

encrypt data in dynamoDB

the default view for the aws management console shows resources in all regions

false

Which AWS services are serverless?

fargate, S3

A company's web application requires AWS credentials and authorizations to use an AWS service.Which IAM entity should the company use as best practice?

iam role

A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances.Which AWS service or feature should the company use to meet this requirement?

inspector

Which task is an AWS responsibility when a workload is running in Amazon RDS?

installing the database engine

Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Choose two.)

loose coupling, disposable resources (inf as code, create and destroy as needed)

Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?

make small, reversible, changes

According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?

manage connections to the database, design encryption-at-rest strategies

Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.)

neptune, documentDB

Which AWS tool or feature acts as a VPC firewall at the subnet level?

network acl

can you pick the data center your stuff is hosted on

no

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

operating system installations

A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible increments.Which pillar of the AWS Well-Architected Framework does this design support?

operational excellence

Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)

patch management, cloud awareness and training

A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration.Which pillar of the AWS Well-Architected Framework does this plan represent?

performance efficiency

Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?

physical and environmental controls

A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS.Which security measures fall under the responsibility of AWS? (Choose two.)

protecting against IP spoofing and packet sniffing, installing security patches on RDS Instance (securing underlying infrastructure)

Which AWS service can a company use to perform complex analytical queries?

redshift

A company needs to design an AWS disaster recovery plan to cover multiple geographic areas.Which action will meet this requirement?

replicate it over multiple regions

What should a user do if the user loses an IAM secret access key?

rotate the secret access key

Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)

s3, dynamoDB

What is the security best practice concerning sensitive data stored in Amazon S3?

server side encryption on the bucket