AWS questions
Which tool should a developer use to integrate AWS service features directly into an application? A. AWS Software Development Kit B. AWS CodeDeploy C. AWS Lambda D. AWS Batch
AWS Software Development Kit
Which Reserved Instance (RI) provides the HIGHEST average cost savings compared to an On-Demand Instance? A. 1-year, No Upfront, Standard RI B. 1-year, All Upfront, Convertible RI C. 3-year, All Upfront, Standard RI D. 3-year, No Upfront, Convertible RI
3-year, All Upfront, Standard RI
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model? A. Both AWS and the customer B. The customer only C. The EC2 hardware manufacturer D. AWS only
AWS only
In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.) A. AWS replaces upfront capital expenditures with pay-as-you-go costs. B. AWS is designed for high availability, which eliminates user downtime. C. AWS eliminates the need for on-premises IT staff. D. AWS uses economies of scale to continually reduce prices. E. AWS offers a single pricing model for Amazon EC2 instances.
AWS replaces upfront capital expenditures with pay-as-you-go costs. AWS uses economies of scale to continually reduce prices.
Which AWS service or feature allows users to connect with and deploy AWS services programmatically? A. AWS Management Console B. AWS Cloud9 C. AWS CodePipeline D. AWS software development kits (SDKs)
AWS software development kits (SDKs)
Which of the following are included in AWS Enterprise Support? (Choose two.) A. AWS technical account manager (TAM) B. AWS partner-led support C. AWS Professional Services D. Support of third-party software integration to AWS E. 5-minute response time for critical issues
AWS technical account manager (TAM) Support of third-party software integration to AWS
Which of the following are advantages of the AWS Cloud? (Choose two.) A. AWS management of user-owned infrastructure B. Ability to quickly change required capacity C. High economies of scale D. Increased deployment time to market E. Increased fixed expenses
Ability to quickly change required capacity High economies of scale
Which of the following is a benefit of decoupling an AWS Cloud architecture? A. Reduced latency B. Ability to upgrade components independently C. Decreased costs D. Fewer components to manage
Ability to upgrade components independently
A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive.Which AWS service can be used to improve the database performance? A. Amazon DynamoDB Accelerator (DAX) B. Amazon EMR C. Amazon ElastiCache D. Amazon Redshift
Amazon ElastiCache
A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.Which AWS service will meet this requirement? A. Amazon Cognito B. AWS Security Hub C. AWS Shield D. AWS WAF
Amazon Cognito
A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third- party provider.Which AWS service should the company use to meet these requirements? A. AWS Single Sign-On B. AWS Signer C. Amazon Cognito D. AWS Directory Service
Amazon Cognito
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale? A. Amazon DynamoDB B. Amazon Aurora C. Amazon DocumentDB (with MongoDB compatibility) D. Amazon Neptune
Amazon DynamoDB
Which AWS service provides the ability to host a NoSQL database in the AWS Cloud? A. Amazon Aurora B. Amazon DynamoDB C. Amazon RDS D. Amazon Redshift
Amazon DynamoDB
Which AWS service should a company use to create a NoSQL database? A. Amazon Aurora B. Amazon DynamoDB C. Amazon Redshift D. Amazon Neptune
Amazon DynamoDB
Which of the following is an AWS key-value database offering consistent single-digit millisecond performance at any scale? A. Amazon RDS B. Amazon Aurora C. Amazon DynamoDB D. Amazon Redshift
Amazon DynamoDB
A company is developing a mobile app that needs a high-performance NoSQL database.Which AWS services could the company use for this database? (Choose two.) A. Amazon Aurora B. Amazon RDS C. Amazon Redshift D. Amazon DocumentDB (with MongoDB compatibility) E. Amazon DynamoDB
Amazon DynamoDB Amazon DocumentDB (with MongoDB compatibility)
Which AWS service allows for file sharing between multiple Amazon EC2 instances? A. AWS Direct Connect B. AWS Snowball Edge C. AWS Backup D. Amazon Elastic File System (Amazon EFS)
Amazon Elastic File System (Amazon EFS)
Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances? A. Amazon WorkSpaces B. Amazon Elastic File System (Amazon EFS) C. AWS Database Migration Service (AWS DMS) D. AWS Snowball Edge
Amazon Elastic File System (Amazon EFS)
A company recently created its first AWS account.Which AWS services will require the use of a VPC? (Choose two.) A. Amazon S3 B. Amazon Elastic File System (Amazon EFS) C. Amazon Cognito D. Amazon DynamoDB E. Amazon EC2
Amazon Elastic File System (Amazon EFS) Amazon EC2
Which of the following are AWS compute services? (Choose two.) A. Amazon Lightsail B. AWS Systems Manager C. AWS CloudFormation D. AWS Batch E. Amazon Inspector
Amazon Lightsail AWS Batch
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.) A. Amazon Simple Notification Service (Amazon SNS) B. Amazon Simple Queue Service (Amazon SQS) C. AWS CodeBuild D. Amazon S3 E. Amazon DynamoDB
Amazon S3 Amazon DynamoDB
A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week.Which solution will meet these requirements? A. AWS Direct Connect B. Amazon VPC C. AWS Site-to-Site VPN D. Edge location
AWS Site-to-Site VPN
Which controls are shared under the AWS shared responsibility model? (Choose two.) A. Awareness and training B. Patching of Amazon RDS C. Configuration management D. Physical and environmental controls E. Service and communications protection or security
. Awareness and training Configuration management
Which of the following is a component of the AWS Global Infrastructure? A. Amazon Alexa B. AWS Regions C. Amazon Lightsail D. AWS Organizations
AWS Regions
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity? A. Agility B. Elasticity C. Reliability D. Durability
Elasticity
What is the scope of a VPC within the AWS network? A. A VPC can span all Availability Zones globally. B. A VPC must span at least two subnets in each AWS Region. C. A VPC must span at least two edge locations in each AWS Region. D. A VPC can span all Availability Zones within an AWS Region.
A VPC can span all Availability Zones within an AWS Region.
Why is an AWS Well-Architected review a critical part of the cloud design process? A. A Well-Architected review is mandatory before a workload can run on AWS. B. A Well-Architected review helps identify design gaps and helps evaluate design decisions and related documents. C. A Well-Architected review is an audit mechanism that is a part of requirements for service level agreements. D. A Well-Architected review eliminates the need for ongoing auditing and compliance tests.
A Well-Architected review helps identify design gaps and helps evaluate design decisions and related documents.
What is an AWS Region? A. A broad set of global, cloud-based products that include compute, storage, and databases B. A physical location around the world where data centers are clustered C. One or more discrete data centers with redundant power, networking, and connectivity D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users
A physical location around the world where data centers are clustered
What does the AWS Concierge Support team provide? A. A technical expert dedicated to the user B. A primary point of contact for AWS Billing and AWS Support C. A partner to help provide scaling guidance for an event launch D. A dedicated AWS staff member who reviews the user's application architecture
A primary point of contact for AWS Billing and AWS Support
Which AWS service or feature offers HTTP attack protection to users running public-facing web applications? A. Security groups B. Network ACLs C. AWS WAF D. AWS Shield Standard
AWS WAF
A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model? A. AWS B. The company C. AWS Marketplace partners D. Third-party partners
AWS
Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS? A. Customer B. AWS C. Account creator D. Auditing team
AWS
A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS.Which AWS team should the company contact to report this issue? A. AWS Customer Service team B. AWS Sales team C. AWS Abuse team D. AWS Technical Support team
AWS Abuse team
A company suspects that its AWS resources are being used for illegal activities.Which AWS group or team should the company notify? A. AWS Abuse team B. AWS Support team C. AWS technical account managers D. AWS Professional Services team
AWS Abuse team
A company has an online shopping website and wants to store customers' credit card data. The company must meet Payment Card Industry (PCI) standards.Which service can the company use to access AWS compliance documentation? A. Amazon Cloud Directory B. AWS Artifact C. AWS Trusted Advisor D. Amazon Inspector
AWS Artifact
A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS).Where can the company find this documentation? A. AWS Artifact B. AWS Organizations C. AWS Trusted Advisor D. AWS Support Center
AWS Artifact
A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports.Which AWS service or group can provide these documents? A. AWS Abuse team B. AWS Artifact C. AWS Support D. AWS Config
AWS Artifact
A company runs an ecommerce website that is hosted on AWS. External auditors have requested proof that the AWS services that the company uses are compliant with the Payment Card Industry Data Security Standard (PCI DSS).Which AWS service will provide this information? A. AWS Certificate Manager (ACM) B. AWS Artifact C. AWS License Manager D. AWS CloudTrail
AWS Artifact
An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks.Which AWS service will provide this information? A. AWS Artifact B. AWS Trusted Advisor C. Amazon GuardDuty D. AWS Certificate Manager (ACM)
AWS Artifact
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand? A. Amazon GuardDuty B. AWS Security Hub C. AWS Artifact D. AWS Shield
AWS Artifact
Which AWS service gives users the ability to download compliance reports from third party auditors? A. AWS Lambda B. AWS Trusted Advisor C. AWS Artifact D. AWS Audit Manager
AWS Artifact
A company is running a web application on Amazon EC2 instances. The company wants the application's compute capacity to automatically adjust to meet customer demand.Which AWS service or capability should the company use to meet this requirement? A. AWS Compute Optimizer B. AWS Auto Scaling C. AWS Launch Wizard D. AWS AppConfig
AWS Auto Scaling
A company needs to centralize the periodic backups that are being created for Amazon EC2 instances and an Amazon Elastic File System (Amazon EFS) file system.Which AWS service will meet this requirement with MINIMAL operational effort? A. Amazon S3 B. AWS Data Pipeline C. AWS Backup D. AWS Storage Gateway
AWS Backup
Which AWS service allows users to model and provision AWS resources using common programming languages? A. AWS CloudFormation B. AWS CodePipeline C. AWS Cloud Development kit (AWS CDK) D. AWS Systems Manager
AWS Cloud Development kit (AWS CDK)
A company needs to migrate all of its development teams to a cloud-based integrated development environment (IDE).Which AWS service should the company use? A. AWS CodeBuild B. AWS Cloud9 C. AWS OpsWorks D. AWS Cloud Development Kit (AWS CDK)
AWS Cloud9
A company wants to use a web browser to run. test, and debug AWS Lambda functions in an integrated development environment (IDE).Which AWS service provides this functionality? A. AWS Cloud9 B. Amazon CodeGuru C. AWS CodeDeploy D. AWS CodeCommit
AWS Cloud9
A cloud engineer needs to track AWS costs. The cloud engineer also needs to receive event driven alerts when costs exceed specific thresholds.Which AWS tool provides this functionality? A. AWS Cost Explorer B. AWS Budgets C. Cost allocation tags D. AWS Cost and Usage Reports
AWS Budgets
A company needs a solution that can provide automated notifications and perform automated actions if the company's monthly AWS costs exceed a specific threshold.Which AWS service or tool provides this functionality? A. AWS Budgets B. AWS Cost Explorer C. AWS Trusted Advisor D. Amazon Inspector
AWS Budgets
A company wants to set AWS spending targets and track costs against those targets.Which AWS tool or feature should the company use to meet these requirements? A. AWS Cost Explorer B. AWS Budgets C. AWS Cost and Usage Report D. Savings Plans
AWS Budgets
A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.Which AWS service or tool provides this functionality? A. AWS Budgets B. AWS Cost Explorer C. Savings Plans D. AWS Billing Conductor
AWS Budgets
Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded? A. AWS Budgets B. AWS Cost Explorer C. AWS Cost Allocation Tags D. AWS Organizations
AWS Budgets
Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded? A. AWS Budgets B. AWS Trusted Advisor C. AWS CloudTrail D. AWS Support
AWS Budgets
Which AWS service or tool gives users the ability to set alerts that are sent when AWS Cloud costs exceed a certain amount? A. AWS Budgets B. AWS Cost and Usage Report C. AWS Cost Explorer D. Amazon Inspector
AWS Budgets
A company needs an AWS Support plan that provides programmatic case management through the AWS Support API.Which support plan will meet this requirement MOST cost-effectively? A. AWS Business Support B. AWS Basic Support C. AWS Developer Support D. AWS Enterprise Support
AWS Business Support
A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a strong IT support team and does not need concierge support.Which AWS Support plan will meet these requirements at the LOWEST cost? A. AWS Basic Support B. AWS Developer Support C. AWS Business Support D. AWS Enterprise Support
AWS Business Support
What is the LEAST expensive AWS Support plan that contains a full set of AWS Trusted Advisor best practice checks? A. AWS Enterprise Support B. AWS Business Support C. AWS Developer Support D. AWS Basic Support
AWS Business Support
A developer is writing a program that must switch between multiple IAM roles.Which AWS services or features can the program use to meet this requirement? (Choose two.) A. AWS CLI B. AWS Security Token Service (AWS STS) API C. IAM inline policies D. AWS Organizations E. AWS Trusted Advisor
AWS CLI AWS Security Token Service (AWS STS) API
A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.Which AWS service can the company use to meet this goal? A. AWS WAF B. AWS Shield C. Amazon VPC D. AWS Certificate Manager (ACM)
AWS Certificate Manager (ACM)
Which AWS service keeps track of SSL/TLS certificates, creates new certificates, and processes renewals? A. AWS Identity and Access Management (IAM) B. AWS Certificate Manager (ACM) C. AWS Config D. AWS Trusted Advisor
AWS Certificate Manager (ACM)
Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates? A. AWS Secrets Manager B. Amazon Inspector C. AWS CodeDeploy D. AWS Certificate Manager (ACM)
AWS Certificate Manager (ACM)
A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates.Which AWS service will meet these requirements? A. AWS CloudFormation B. AWS Directory Service C. Amazon Lightsail D. AWS CodeDeploy
AWS CloudFormation
A company wants to manage its infrastructure as code in the AWS Cloud.Which AWS service meets this requirement? A. AWS CloudFormation B. AWS Elastic Beanstalk C. AWS Cloud9 D. AWS CloudShell
AWS CloudFormation
A company wants to use a template to reliably provision, manage, and update its infrastructure in the AWS Cloud.Which AWS service will meet these requirements? A. AWS Lambda B. AWS CloudFormation C. AWS Fargate D. AWS CodeDeploy
AWS CloudFormation
A developer needs to use a standardized template to create copies of a company's AWS architecture for development, test, and production environments.Which AWS service should the developer use to meet this requirement? A. AWS Cloud Map B. AWS CloudFormation C. Amazon Cloud Front D. AWS CloudTrail
AWS CloudFormation
A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles.Which AWS service can be used to meet this requirement? A. AWS Systems Manager B. AWS CloudFormation C. AWS CodeCommit D. AWS Config
AWS CloudFormation
Which AWS service gives users the ability to deploy highly repeatable infrastructure configurations? A. AWS CloudFormation B. AWS CodeDeploy C. AWS CodeBuild D. AWS Systems Manager
AWS CloudFormation
A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security.Which AWS service should the engineer use? A. AWS Key Management Service (AWS KMS) B. AWS Certificate Manager (ACM) C. AWS CloudHSM D. AWS Systems Manager
AWS CloudHSM
A company needs to identify the last time that a specific user accessed the AWS Management Console.Which AWS service will provide this information? A. Amazon Cognito B. AWS CloudTrail C. Amazon Inspector D. Amazon GuardDuty
AWS CloudTrail
A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an Amazon EC2 instance.Which AWS service should the system administrator use to identify who made this change? A. Amazon Inspector B. Amazon Pinpoint C. AWS CloudTrail D. AWS Trusted Advisor
AWS CloudTrail
Which AWS service helps users audit API activity across their AWS account? A. AWS CloudTrail B. Amazon Inspector C. AWS WAF D. AWS Config
AWS CloudTrail
Which AWS service should a cloud engineer use to view API calls to AWS services? A. Amazon CloudWatch B. AWS CloudTrail C. AWS Config D. AWS Artifact
AWS CloudTrail
Which AWS service tracks API calls and user activity? A. AWS Organizations B. AWS Config C. Amazon CloudWatch D. AWS CloudTrail
AWS CloudTrail
Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday? A. Amazon CloudWatch B. AWS Trusted Advisor C. AWS CloudTrail D. Amazon Inspector
AWS CloudTrail
Which service enables customers to audit API calls in their AWS accounts? A. AWS CloudTrail B. AWS Trusted Advisor C. Amazon Inspector D. AWS X-Ray
AWS CloudTrail
A company needs to report on events that involve the specific AWS services that the company uses.Which AWS service or resource can the company use with Amazon CloudWatch to meet this requirement? A. Amazon Inspector B. AWS Personal Health Dashboard C. AWS Trusted Advisor D. AWS CloudTrail logs
AWS CloudTrail logs
A company needs to store source code. The source code must be accessible over the internet.Which AWS service should the company use to meet these requirements? A. AWS CodeDeploy B. AWS CodeStar C. AWS CodeCommit D. Amazon CodeGuru
AWS CodeCommit
A company wants to host a private version control system for its application code in the AWS Cloud.Which AWS service should the company use to meet this requirement? A. AWS CodePipeline B. AWS CodeStar C. AWS CodeCommit D. AWS CodeDeploy
AWS CodeCommit
A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories, and version controls.Which AWS service should the developer use? A. AWS CodeStar B. Amazon CodeGuru C. AWS CodeCommit D. AWS CodePipeline
AWS CodeCommit
Which AWS service is a fully hosted version control service? A. AWS CodeCommit B. AWS CodeBuild C. AWS CodeDeploy D. AWS CodeStar
AWS CodeCommit
A company needs to store code in a version control system. The company also needs to continually deploy updated code through a series of automated steps (build, test, package, and deploy).Which combination of AWS services will meet these requirements? (Choose two.) A. AWS CloudFormation B. AWS CodeCommit C. AWS Control Tower D. AWS Elastic Beanstalk E. AWS CodePipoline
AWS CodeCommit AWS CodePipoline
A company wants to set up an entire development and continuous delivery toolchain for coding, building, testing, and deploying code.Which AWS service will meet these requirements? A. Amazon CodeGuru B. AWS CodeStar C. AWS CodeCommit D. AWS CodeDeploy
AWS CodeStar
A user has been granted permission to change their own IAM user password.Which AWS services can the user use to change the password? (Choose two.) A. AWS Command Line Interface (AWS CLI) B. AWS Key Management Service (AWS KMS) C. AWS Management Console D. AWS Resource Access Manager (AWS RAM) E. AWS Secrets Manager
AWS Command Line Interface (AWS CLI) AWS Management Console
Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS accounts? A. AWS Organizations B. Cost Explorer C. AWS Trusted Advisor D. AWS Management Console
AWS Organizations
A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.Which AWS service or program should the company use to determine which AWS services meet the regional requirements? A. AWS Audit Manager B. AWS Shield C. AWS Compliance Program D. AWS Artifact
AWS Compliance Program
A company with AWS Enterprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices.Which AWS tool or resource is available to accomplish these goals? A. Resource tagging B. AWS Concierge Support team C. AWS Abuse team D. AWS Support
AWS Concierge Support team
A company needs to audit its AWS resources. The company must document any changes that have been made to the resources.Which AWS service will meet these requirements? A. AWS Artifact B. AWS Config C. Amazon Inspector D. Amazon CloudWatch
AWS Config
Which AWS service can report how AWS resource configurations have changed over time? A. AWS CloudTrail B. Amazon CloudWatch C. AWS Config D. Amazon Inspector
AWS Config
Which AWS service is used to track, record, and audit configuration changes made to AWS resources? A. AWS Shield B. AWS Config C. AWS IAM D. Amazon Inspector
AWS Config
A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed.Which AWS services can provide this information? (Choose two.) A. AWS Artifact B. AWS Trusted Advisor C. AWS Config D. AWS CloudTrail E. AWS Identity and Access Management (IAM)
AWS Config AWS CloudTrail
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.Which AWS service or feature will help the company with its migration? A. AWS Trusted Advisor B. AWS Consulting Partners C. AWS Artifacts D. AWS Managed Services
AWS Consulting Partners
Which AWS service, feature, or tool uses machine learning to continuously monitor cost and usage for unusual cloud spending? A. Amazon Lookout for Metrics B. AWS Budgets C. Amazon CloudWatch D. AWS Cost Anomaly Detection
AWS Cost Anomaly Detection
A company has migrated its workload to AWS. The company wants to forecast the workload's costs for each quarter for the next year.Which AWS service or tool provides this functionality? A. AWS Organizations B. AWS Budgets C. AWS Cost Explorer D. AWS Cost and Usage Report
AWS Cost Explorer
A company needs the historical cost and service usage details of its Amazon EC2 instances.Which AWS service or tool will provide this information? A. AWS Budgets B. Amazon Forecast C. AWS Cost Explorer D. AWS Pricing Calculator
AWS Cost Explorer
A company needs to create graphs that show historical and current costs for the company's AWS account.Which AWS service or tool provides this functionality? A. AWS Config B. AWS Cost and Usage Report C. AWS Budgets D. AWS Cost Explorer
AWS Cost Explorer
A company uses Amazon EC2 instances to run its web application. The company uses On-Demand Instances and Spot Instances. The company needs to visualize its monthly spending on both types of instances.Which AWS service or feature will meet this requirement? A. AWS Cost Explorer B. AWS Budgets C. Amazon CloudWatch D. AWS Cost Categories
AWS Cost Explorer
A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket.Which AWS tool will meet these requirements? A. AWS Cost and Usage Reports B. AWS Pricing Calculator C. Cost Explorer D. AWS Budgets
AWS Cost and Usage Reports
A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month.Which AWS tool should the company use to meet these requirements? A. Reserved Instance utilization and coverage reports B. Savings Plans utilization reports C. AWS Budgets reports D. AWS Cost and Usage Reports
AWS Cost and Usage Reports
Which AWS service should be used to migrate a company's on-premises MySQL database to Amazon RDS? A. AWS Direct Connect B. AWS Server Migration Service (AWS SMS) C. AWS Database Migration Service (AWS DMS) D. AWS Schema Conversion Tool (AWS SCT)
AWS Database Migration Service (AWS DMS)
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications.Which AWS Support plan will meet these requirements at the LOWEST cost? A. AWS Basic Support B. AWS Developer Support C. AWS Business Support D. AWS Enterprise Support
AWS Developer Support
A company wants to test mobile apps on a variety of popular mobile devices.Which AWS service should the company use to achieve this goal? A. AWS IoT Core B. AWS Wavelength C. AWS Device Farm D. AWS Direct Connect
AWS Device Farm
A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection.Which AWS service should the company use to meet these requirements? A. AWS Backup B. AWS DataSync C. AWS Direct Connect D. AWS Snowball
AWS Direct Connect
A user needs a dedicated private connection between a colocation facility and a VPC.Which AWS service or feature should the user choose? A. AWS VPN B. AWS PrivateLink C. AWS Direct Connect D. AWS Client VPN
AWS Direct Connect
A user wants to transport data between AWS and an on-premises environment using a private network connection.Which AWS service or feature can be used to meet these requirements? A. NAT gateway B. AWS Direct Connect C. Amazon VPC D. Internet gateway
AWS Direct Connect
Which AWS service gives a company the ability to use a private, dedicated connection between a VPC and an on-premises data center? A. AWS Direct Connect B. Amazon API Gateway C. AWS Systems Manager D. AWS Cloud Formation
AWS Direct Connect
Which AWS service gives users the ability to provision a dedicated and private network connection from their internal network to AWS? A. AWS CloudHSM B. AWS Direct Connect C. AWS VPN D. Amazon Connect
AWS Direct Connect
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload? A. Amazon Route 53 B. Amazon Macie C. AWS Direct Connect D. AWS PrivateLink
AWS Direct Connect
A company wants to accelerate migration from its data center to the AWS Cloud.Which combination of AWS services should the company use to meet this requirement? (Choose two.) A. Amazon Connect B. AWS Direct Connect C. AWS Server Migration Service (AWS SMS) D. Amazon Route 53 E. AWS Organizations
AWS Direct Connect AWS Server Migration Service (AWS SMS)
A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves.Which AWS service should the developers use to meet these requirements? A. AWS Cloud Formation B. AWS CodeBuild C. AWS Elastic Beanstalk D. AWS CodeDeploy
AWS Elastic Beanstalk
A company needs to deploy applications in the AWS Cloud as quickly as possible. The company also needs to minimize the complexity that is related to the management of AWS resources.Which AWS service should the company use to meet these requirements? A. AWS Config B. AWS Elastic Beanstalk C. Amazon EC2 D. Amazon Personalize
AWS Elastic Beanstalk
A company wants the ability to quickly upload its applications to the AWS Cloud without needing to provision underlying resources.Which AWS service will meet these requirements? A. AWS CloudFormation B. AWS Elastic Beanstalk C. AWS CodeDeploy D. AWS CodeCommit
AWS Elastic Beanstalk
A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers.Which combination of AWS services should the company use to meet these requirements? (Choose two.) A. Amazon EC2 B. Amazon EC2 Auto Scaling C. AWS Elastic Beanstalk D. Amazon CloudFront E. AWS Fargate
AWS Elastic Beanstalk AWS Fargate
Which services can be used to deploy applications on AWS? (Choose two.) A. AWS Elastic Beanstalk B. AWS Config C. AWS OpsWorks D. AWS Application Discovery Service E. Amazon Kinesis
AWS Elastic Beanstalk AWS OpsWorks
A company has a complex AWS architecture. The company needs assistance from a dedicated technical professional who can suggest strategies regarding incidents, trade-offs, support, and risk management.Which AWS Support plan will provide the required support? A. AWS Business Support B. AWS Enterprise Support C. AWS Developer Support D. AWS Basic Support
AWS Enterprise Support
A company wants to run production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week.Which AWS Support plan will meet these requirements? A. AWS Basic Support B. AWS Enterprise Support C. AWS Business Support D. AWS Developer Support
AWS Enterprise Support
Which AWS Support plan includes infrastructure event management at no additional cost? A. AWS Basic Support B. AWS Business Support C. AWS Enterprise Support D. AWS Developer Support
AWS Enterprise Support
Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)? A. AWS Basic Support B. AWS Developer Support C. AWS Business Support D. AWS Enterprise Support
AWS Enterprise Support
Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts? A. AWS Cost and Usage Report B. AWS Organizations C. Cost Explorer D. AWS Budget
AWS Organizations
A company is migrating to the AWS Cloud. The company requires consultative review and guidance for its applications during the migration. After the migration is complete, the company requires a response within 30 minutes if business-critical systems go down.Which AWS Support plans meet these requirements? (Choose two.) A. AWS Enterprise Support B. AWS Enterprise On-Ramp Support C. AWS Developer Support D. AWS Basic Support E. AWS Business Support
AWS Enterprise Support AWS Enterprise On-Ramp Support
Which AWS Support plans provide a complete set of AWS Trusted Advisor checks? A. AWS Business Support and AWS Basic Support B. AWS Enterprise Support and AWS Business Support C. AWS Enterprise Support and AWS Developer Support D. AWS Business Support and AWS Developer Support
AWS Enterprise Support and AWS Business Support
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements? A. AWS Lambda B. Amazon RDS C. AWS Fargate D. Amazon Athena
AWS Fargate
A company needs to install an application in a Docker container.Which AWS service eliminates the need to provision and manage the container hosts? A. AWS Fargate B. Amazon FSx for Windows File Server C. Amazon Elastic Container Service (Amazon ECS) D. Amazon EC2
AWS Fargate
A developer wants to deploy an application on a container-based service. The service must automatically provision and manage the backend instances. The service must provision only the necessary resources.Which AWS service will meet these requirements? A. Amazon EC2 B. Amazon Lightsail C. Amazon Elastic Kubernetes Service (Amazon EKS) D. AWS Fargate
AWS Fargate
Which AWS services are serverless? (Choose two.) A. AWS Fargate B. Amazon Managed Streaming for Apache Kafka C. Amazon EMR D. Amazon S3 E. Amazon EC2
AWS Fargate Amazon S3
A company manages global applications that require static IP addresses.Which AWS service would enable the company to improve the availability and performance of its applications? A. Amazon CloudFront B. AWS Global Accelerator C. Amazon S3 Transfer Acceleration D. Amazon API Gateway
AWS Global Accelerator
A company wants to improve the overall availability and performance of its applications that are hosted on AWS.Which AWS service should the company use? A. Amazon Connect B. Amazon Lightsail C. AWS Global Accelerator D. AWS Storage Gateway
AWS Global Accelerator
Which AWS service uses edge locations? A. Amazon Aurora B. AWS Global Accelerator C. Amazon Connect D. AWS Outposts
AWS Global Accelerator
Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data? A. Amazon Athena B. AWS Glue C. Amazon S3 D. AWS Snowball Edge
AWS Glue
A company needs to process data from satellite communications without managing any infrastructure.Which AWS service should the company use to meet these requirements? A. Amazon CloudWatch B. Amazon Aurora C. Amazon Athena D. AWS Ground Station
AWS Ground Station
Which of the following is available to a company that has an AWS Business Support plan? A. AWS Support concierge B. AWS DDoS Response Team (DRT) C. AWS technical account manager (TAM) D. AWS Health API
AWS Health API
Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies? A. AWS Systems Manager B. AWS IAM Access Analyzer C. AWS Trusted Advisor D. Amazon GuardDuty
AWS IAM Access Analyzer
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity? A. AWS Service Catalog B. AWS Systems Manager C. AWS IAM Access Analyzer D. AWS Organizations
AWS IAM Access Analyzer
Which documentation does AWS Artifact provide? A. Amazon EC2 terms and conditions B. AWS ISO certifications C. A history of a company's AWS spending D. A list of previous-generation Amazon EC2 instance types
AWS ISO certifications
A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.Which AWS service or feature can the company use to meet these requirements? A. AWS Organizations B. Resource groups C. Resource tagging D. AWS Identity and Access Management (IAM)
AWS Identity and Access Management (IAM)
A company wants to organize its users so that the company can grant permissions to the users as a group.Which AWS service or tool can the company use to meet this requirement? A. Security groups B. AWS Identity and Access Management (IAM) C. Resource groups D. AWS Security Hub
AWS Identity and Access Management (IAM)
Which AWS service is always provided at no charge? A. Amazon S3 B. AWS Identity and Access Management (IAM) C. Elastic Load Balancers D. AWS WAF
AWS Identity and Access Management (IAM)
Which AWS service is used to provide encryption for Amazon EBS? A. AWS Certificate Manager B. AWS Systems Manager C. AWS KMS D. AWS Config
AWS KMS
Which AWS service can be used to encrypt data at rest? A. Amazon GuardDuty B. AWS Shield C. AWS Security Hub D. AWS Key Management Service (AWS KMS)
AWS Key Management Service (AWS KMS)
Where can AWS users review answers to frequently asked questions about security in the AWS Cloud? A. AWS Trusted Advisor B. AWS Knowledge Center C. AWS Support Center D. AWS Artifact
AWS Knowledge Center
A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket.Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead? A. Amazon EC2 B. AWS Code Deploy C. AWS Lambda D. Amazon Lightsail
AWS Lambda
The company needs a compute solution that maximizes A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application.Which AWS solution should the company use to meet these requirements? A. Amazon EC2 On-Demand Instances B. AWS Lambda C. Amazon EC2 Reserved Instances D. Amazon EC2 Spot Instances
AWS Lambda
Which AWS service is suitable for an event-driven workload? A. Amazon EC2 B. AWS Elastic Beanstalk C. AWS Lambda D. Amazon Lumberyard
AWS Lambda
A company wants to run its applications in the AWS Cloud. The company does not have enough staff to maintain and protect its critical business applications.Which AWS service should the company use to perform these tasks? A. AWS Shield B. Amazon RDS C. AWS Config D. AWS Managed Services (AMS)
AWS Managed Services (AMS)
A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.Where can the company purchase the security solution? A. AWS Partner Solutions Finder B. AWS Support Center C. AWS Management Console D. AWS Marketplace
AWS Marketplace
A company is planning an infrastructure deployment to the AWS Cloud. Before the deployment, the company wants a cost estimate for running the infrastructure.Which AWS service or feature can provide this information? A. Cost Explorer B. AWS Trusted Advisor C. AWS Cost and Usage Report D. AWS Pricing Calculator
AWS Pricing Calculator
A company has identified a high-risk network security issue during an AWS Well-Architected review. The company needs a managed solution that the company can use to deploy essential network protections for all of its VPCs.Which AWS service or feature meets these requirements? A. Security groups B. Network ACLs C. AWS Network Firewall D. Amazon VPC Network Access Analyzer
AWS Network Firewall
A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious.Which AWS service should the company use to meet this requirement? A. AWS Shield Advanced B. Amazon Route 53 C. Amazon GuardDuty D. AWS Network Firewall
AWS Network Firewall
Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.) A. AWS Trusted Advisor B. AWS Online Tech Talks C. AWS Blog D. AWS Forums E. AWS Classroom Training
AWS Online Tech Talks AWS Classroom Training
A company acquired another corporation. The company now has two AWS accounts.Which AWS service or tool can the company use to consolidate the billing for these two accounts? A. AWS Systems Manager B. AWS Organizations C. AWS License Manager D. Cost Explorer
AWS Organizations
A company has acquired several other companies. All the companies host their IT infrastructure in the AWS Cloud.Which AWS service should the acquiring company use to centralize the account management? A. AWS Systems Manager B. AWS Organizations C. AWS Security Hub D. Amazon Workspaces
AWS Organizations
A company has multiple AWS accounts. The company needs to simplify and consolidate its billing process.Which AWS service or tool will meet these requirements? A. AWS Cost and Usage Report B. AWS Organizations C. Cost Explorer D. AWS Budgets
AWS Organizations
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation ofAWS accounts, apply service control policies (SCPs), and simplify billing processes.Which AWS service or tool should the company use to meet these requirements? A. AWS Organizations B. Cost Explorer C. AWS Budgets D. AWS Trusted Advisor
AWS Organizations
A financial company needs to centrally manage its AWS accounts and use consolidated billing.Which AWS service or feature should the company use? A. AWS Cost Explorer B. AWS Organizations C. AWS Billing and Cost Management D. AWS Budgets
AWS Organizations
A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances. Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased. The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances. Which AWS service or tool should the company use to meet these requirements? A. AWS Systems Manager B. Cost Explorer C. AWS Trusted Advisor D. AWS Organizations
AWS Organizations
A user is able to set up a management payer account to view consolidated billing reports through. A. AWS Budgets B. Amazon Macie C. Amazon QuickSight. D. AWS Organizations
AWS Organizations
Service control policies (SCPs) manage permissions for which of the following? A. Availability Zones B. AWS Regions C. AWS Organizations D. Edge locations
AWS Organizations
Which AWS service gives users the ability to combine existing accounts into a centrally managed hierarchy? A. AWS Organizations B. AWS Identity and Access Management (IAM) C. AWS Config D. Amazon Inspector
AWS Organizations
Which AWS service has unlimited free use? A. Amazon SageMaker B. AWS Config C. AWS Organizations D. Amazon Cloud Watch
AWS Organizations
Which AWS service of tool helps to centrally manage billing and allow controlled access to resources across AWS accounts? A. AWS Identity and Access Management (IAM) B. AWS Organizations C. Cost Explorer D. AWS Budgets
AWS Organizations
A user is able to set up a master payer account to view consolidated billing reports through: A. AWS Budgets. B. Amazon Macie. C. Amazon QuickSight. D. AWS Organizations.
AWS Organizations.
A company has a workload that requires data to be collected, analyzed, and stored on premises. The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.Which AWS service meets this requirement? A. AWS Outposts B. AWS Storage Gateway C. AWS Direct Connect D. AWS Snowball
AWS Outposts
A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.Which AWS service should the company use to meet these requirements? A. AWS IoT Greengrass B. AWS Lambda C. AWS Outposts D. AWS Snowball Edge
AWS Outposts
A company needs to run a workload that requires low-latency access to an on-premises data center. The company wants a fully managed service to extend its existing VPC to local resources.Which AWS service or resource should the company use? A. AWS Outposts B. Amazon Connect C. AWS Snowball Edge D. Amazon WorkLink
AWS Outposts
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources.Which AWS service or feature can be used to meet these requirements? A. AWS Local Zones B. Availability Zones C. AWS Outposts D. AWS Wavelength Zones
AWS Outposts
A large company has a workload that requires hardware to remain on premises. The company wants to use the same management and control plane services that it currently uses on AWS.Which AWS service should the company use to meet these requirements? A. AWS Device Farm B. AWS Fargate C. AWS Outposts D. AWS Ground Station
AWS Outposts
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload toAWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency.Which AWS service or feature should the company use to meet these requirements? A. Availability Zones B. AWS Local Zones C. AWS Wavelength D. AWS Outposts
AWS Outposts
Which AWS service gives users the ability to run AWS services on premises? A. Amazon CloudFront B. AWS Outposts C. AWS Global Accelerator D. Amazon VPC
AWS Outposts
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co- location environments, or on-premises facilities? A. AWS Snowmobile B. AWS Local Zones C. AWS Outposts D. AWS Fargate
AWS Outposts
Which AWS service provides alerts when an AWS event may impact a company's AWS resources? A. AWS Personal Health Dashboard B. AWS Service Health Dashboard C. AWS Trusted Advisor D. AWS Infrastructure Event Management
AWS Personal Health Dashboard
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.Which AWS service or feature can be used to estimate costs before deployment? A. AWS Free Tier B. AWS Pricing Calculator C. AWS Billing and Cost Management D. AWS Cost and Usage Report
AWS Pricing Calculator
A company is planning to build a workload in the AWS Cloud. The company needs to estimate the costs of the network, compute, storage, and database for the workload.Which AWS service or tool should the company use to generate this estimate? A. AWS Budgets B. AWS Organizations C. Cost Explorer D. AWS Pricing Calculator
AWS Pricing Calculator
A company must compare the cost of running a MySQL database on an Amazon EC2 instance and Amazon RDS DB instance.Which AWS service or tool should the company use? A. AWS Budgets B. AWS Control Tower C. AWS Outposts D. AWS Pricing Calculator
AWS Pricing Calculator
A company plans to launch an application that will run in multiple locations within the United States. The company needs to identify the two AWS Regions where the application can operate at the lowest price.Which AWS service or feature should the company use to determine the Regions that offer the lowest price? A. Cost Explorer B. AWS Budgets C. AWS Trusted Advisor D. AWS Pricing Calculator
AWS Pricing Calculator
A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS.Which AWS service or tool can the company use to obtain this information? A. AWS Pricing Calculator B. AWS Budgets C. AWS Trusted Advisor D. Cost Explorer
AWS Pricing Calculator
A company wants to build a data analytics application that uses Amazon Redshift. The company needs a cost estimate for its future Amazon Redshift usage.Which AWS tool will provide a high-level cost estimation? A. AWS Budgets B. AWS Pricing Calculator C. AWS Cost Explorer D. Saving Plans
AWS Pricing Calculator
Which AWS service or feature can a company use to estimate AWS costs before provisioning workloads? A. AWS Pricing Calculator B. AWS Cost and Usage Report C. Cost Explorer D. AWS Budgets
AWS Pricing Calculator
A company wants to run Amazon EC2 instances in locations that are near the company's global users.Which aspect of the AWS environment will support this requirement? A. Availability Zone B. Edge locations C. AWS Regions D. Regional edge caches
AWS Regions
A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with distributed denial of service (DDoS) attacks.Which AWS service will meet these requirements? A. AWS WAF B. AWS Shield Standard C. Amazon Macie D. AWS Shield Advanced
AWS Shield Advanced
Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Choose two.) A. VPC endpoint B. Virtual private gateway C. AWS Shield Standard D. AWS Config E. AWS WAF
AWS Shield Standard AWS WAF
A company wants to rotate, manage, and retrieve credentials that are used to access databases in the company's AWS account.Which AWS service can the company use to meet these requirements? A. AWS Secrets Manager B. AWS Security Hub C. AWS Shield D. AWS WAF
AWS Secrets Manager
In which of the following AWS services should database credentials be stored for maximum security? A. AWS Identity and Access Management (IAM) B. AWS Secrets Manager C. Amazon S3 D. AWS Key Management Service (AWS KMS)
AWS Secrets Manager
Which AWS service aggregates organizes and prioritizes security alerts and findings from multiple AWS services? A. Amazon Detective B. Amazon Inspector C. Amazon Macie D. AWS Security Hub
AWS Security Hub
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format? A. AWS Security Hub B. AWS Trusted Advisor C. Amazon EventBridge D. Amazon GuardDuty
AWS Security Hub
A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.Which AWS service or feature should the company use to meet these authentication requirements? A. Amazon API Gateway B. IAM users C. AWS Security Token Service (AWS STS) D. IAM instance profiles
AWS Security Token Service (AWS STS)
A developer wants AWS users to access AWS services by using temporary security credentials.Which AWS service or feature should the developer use to provide these credentials? A. IAM policies B. IAM user groups C. AWS Security Token Service (AWS STS) D. AWS IAM Identity Center (AWS Single Sign-On)
AWS Security Token Service (AWS STS)
A company needs to create and manage a portfolio of IT workloads that the company approves for use on AWS.Which AWS service provides this functionality? A. AWS Config B. AWS Service Catalog C. AWS Systems Manager D. AWS CloudFormation
AWS Service Catalog
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources. Which AWS solution should the company use to meet this requirement? A. AWS Config B. AWS software development kits (SDKs) C. AWS Service Catalog D. AWS AppSync
AWS Service Catalog
A company website is experiencing DDoS attacks.Which AWS service can help protect the company website against these attacks? A. AWS Resource Access Manager B. AWS Amplify C. AWS Shield D. Amazon GuardDuty
AWS Shield
Which AWS service helps protect against DDoS attacks? A. AWS Shield B. Amazon Inspector C. Amazon GuardDuty D. Amazon Detective
AWS Shield
Which AWS service will help protect applications running on AWS from DDoS attacks? A. Amazon GuardDuty B. AWS WAF C. AWS Shield D. Amazon Inspector
AWS Shield
A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days.Which AWS service should the company use to accomplish this migration? A. Amazon S3 Glacier B. AWS Database Migration Service (AWS DMS) C. AWS Snowball D. AWS Direct Connect
AWS Snowball
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.Which AWS service should the company use to meet these requirements? A. AWS IoT Core B. Amazon Lightsail C. AWS Storage Gateway D. AWS Snowball Edge
AWS Snowball Edge
A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner.Which of the following should the company use to meet these requirements? A. AWS Snowball Edge device B. Amazon Elastic Block Store (Amazon EBS) C. Amazon Elastic File System (Amazon EFS) D. Amazon S3
AWS Snowball Edge device
A company needs a low-code, visual workflow service that developers can use to build distributed applications.Which AWS service is designed to meet these requirements? A. AWS Step Functions B. AWS Config C. AWS Lambda D. Amazon CloudWatch
AWS Step Functions
Which AWS service should a company use to create a serverless workflow? A. Amazon Connect B. AWS Lambda C. AWS Step Functions D. Amazon Elastic Block Store (Amazon EBS) E. AWS CodeBuild
AWS Step Functions
A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library's capacity to the AWS Cloud.Which AWS service should the company use to meet this requirement? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon S3 C. Amazon Elastic File System (Amazon EFS) D. AWS Storage Gateway
AWS Storage Gateway
A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached.Which AWS service meets these requirements? A. AWS Storage Gateway B. AWS Snowcone C. AWS Backup D. Amazon Elastic File System (Amazon EFS)
AWS Storage Gateway
A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.Which AWS service should the company use to meet these requirements? A. Amazon Elastic Block Store (Amazon EBS) B. AWS Storage Gateway C. Amazon Elastic Container Service (Amazon ECS) D. AWS Lambda
AWS Storage Gateway
Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and caches the data locally for low-latency access? A. AWS Direct Connect B. AWS Storage Gateway C. Amazon S3 D. AWS Snowball Edge
AWS Storage Gateway
Which AWS services or resources can a company use directly on its on-premises servers? (Choose two.) A. AWS OpsWorks B. AWS CloudFormation C. AWS Storage Gateway D. Application Load Balancer E. Amazon Cognito
AWS Storage Gateway Amazon Cognito
Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3? A. Amazon FSx for Lustre B. AWS Storage Gateway volume gateway C. AWS Storage Gateway file gateway D. Amazon Elastic File System (Amazon EFS)
AWS Storage Gateway file gateway
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance, and security.Which AWS service can the company use to meet these requirements? A. AWS Shield B. AWS WAF C. AWS Trusted Advisor D. AWS Service Catalog
AWS Trusted Advisor
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys? A. EC2 key pairs B. AWS Systems Manager Session Manager C. AWS Identity and Access Management (IAM) D. Network ACLs
AWS Systems Manager Session Manager
A company needs to connect multiple VPCs and on-premises networks through a single network connection to the AWS Cloud.Which solution meets this requirement? A. AWS Transit Gateway B. AWS Direct Connect C. VPC peering D. AWS Client VPN
AWS Transit Gateway
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs.Which AWS service or feature meets these requirements? A. AWS Direct Connect B. AWS Transit Gateway C. AWS Site-to-Site VPN D. VPC endpoints
AWS Transit Gateway
A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts that it wants to interconnect.Which AWS service or feature should the company use to help simplify management and reduce operational costs? A. VPC endpoint B. AWS Direct Connect C. AWS Transit Gateway D. VPC peering
AWS Transit Gateway
A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps.Which AWS service should the company use? A. Amazon GuardDuty B. AWS Trusted Advisor C. AWS Management Console D. AWS Systems Manager
AWS Trusted Advisor
A company needs to analyze its AWS Cloud environment to determine whether the company is following security best practices. The company wants recommendations about how to close security gaps.Which AWS service should the company use to obtain these recommendations? A. AWS WAF B. AWS Systems Manager C. AWS Trusted Advisor D. AWS Shield
AWS Trusted Advisor
A company needs to identify its underutilized Amazon Elastic Block Store (Amazon EBS) volumes.Which AWS service should the company use to meet this requirement? A. Amazon Inspector B. AWS Trusted Advisor C. AWS Config D. AWS CloudTrail
AWS Trusted Advisor
A company needs to receive notification when a deployed workload is using more than a certain percentage of a service quota.Which AWS service should the company use to meet this requirement? A. AWS Config B. AWS CloudTrail C. AWS Trusted Advisor D. AWS Lambda
AWS Trusted Advisor
A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas.Which AWS service should the company use to meet this requirement? A. AWS CloudTrail B. AWS Trusted Advisor C. AWS Config D. Amazon Inspector
AWS Trusted Advisor
A user wants to identify any security group that is allowing unrestricted incoming SSH traffic.Which AWS service can be used to accomplish this goal? A. Amazon Cognito B. AWS Shield C. Amazon Macie D. AWS Trusted Advisor
AWS Trusted Advisor
Which AWS service or tool inspects a user's AWS environment and makes recommendations for cost savings and system performance improvements? A. Cost Explorer B. AWS Trusted Advisor C. Amazon Inspector D. AWS Budgets
AWS Trusted Advisor
Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources? A. AWS CloudTrail B. AWS Personal Health Dashboard C. AWS Trusted Advisor D. Amazon CloudWatch
AWS Trusted Advisor
Which AWS service provides recommendations to help users optimize costs and follow AWS best practices? A. AWS Trusted Advisor B. AWS Service Catalog C. AWS Ground Station D. Amazon GuardDuty
AWS Trusted Advisor
Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits? A. AWS Trusted Advisor B. AWS Config C. AWS Security Hub D. AWS Systems Manager
AWS Trusted Advisor
Which AWS service should a company use to check for IAM access keys that have not been rotated recently? A. AWS WAF B. AWS Trusted Advisor C. Amazon Inspector D. AWS Certificate Manager (ACM)
AWS Trusted Advisor
Which of the following will help a user determine if they need to request a VPC service limit increase? A. AWS Personal Health Dashboard B. AWS Trusted Advisor C. AWS Cost and Usage Report D. AWS Service Catalog
AWS Trusted Advisor
A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.Which AWS services can provide this information to the company? (Choose two.) A. AWS Auto Scaling B. AWS Control Tower C. AWS Trusted Advisor D. AWS Compute Optimizer E. Amazon Forecast
AWS Trusted Advisor AWS Compute Optimizer
A company is moving its office and must establish an encrypted connection to AWS.Which AWS service will help meet this requirement? A. AWS VPN B. Amazon Route 53 C. Amazon API Gateway D. Amazon Connect
AWS VPN
A company needs to block SQL injection attacks.Which AWS service or feature provides this functionality? A. AWS WAF B. Network ACLs C. Security groups D. AWS Trusted Advisor
AWS WAF
A company needs to configure rules to identify threats and protect applications from malicious network access.Which AWS service should the company use to meet these requirements? A. AWS Identity and Access Management (IAM) B. Amazon QuickSight C. AWS WAF D. Amazon Detective
AWS WAF
A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses anApplication Load Balancer to distribute traffic to multiple Amazon EC2 instances.Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks? A. Security groups B. AWS WAF C. Network ACLs D. AWS Shield
AWS WAF
An application is receiving SQL injection attacks from multiple external resources.Which AWS service or feature can help automate mitigation against these attacks? A. AWS WAF B. Security groups C. Elastic Load Balancer D. Network ACL
AWS WAF
Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting? A. AWS WAF B. AWS Shield Advanced C. Amazon GuardDuty D. Amazon Detective
AWS WAF
Which of the following promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems? A. AWS Serverless Application Model framework B. AWS Business Support C. Principle of least privilege D. AWS Well Architected Framework
AWS Well Architected Framework
Which AWS service could an administrator use to provide desktop environments for several employees? A. AWS Organizations B. AWS Fargate C. AWS WAF D. AWS Workspaces
AWS Workspaces
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.Which AWS service can the company use to trace user requests as they move through the application's components? A. AWS CloudTrail B. Amazon CloudWatch C. Amazon Inspector D. AWS X-Ray
AWS X-Ray
A company wants to troubleshoot and debug a serverless application that is deployed in the AWS Cloud.Which AWS service should the company use to achieve this goal? A. AWS Config B. AWS CloudFormation C. AWS X-Ray D. AWS CloudTrail
AWS X-Ray
A developer needs to debug and troubleshoot an application that is experiencing runtime errors. The application is running on microservices architecture on AWS.Which AWS service should the developer use to troubleshoot the application? A. Amazon Inspector B. AWS CloudShell C. AWS CodeStar D. AWS X-Ray
AWS X-Ray
Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications? A. AWS Cloud9 B. AWS CodeStar C. AWS Cloud Map D. AWS X-Ray
AWS X-Ray
Which statements explain the business value of migration to the AWS Cloud? (Choose two.) A. The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices. B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime. C. Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery. D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas. E. Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all enterprise applications.
AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas.
Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)? A. AWS Support B. AWS customers C. AWS Key Management Service (AWS KMS) D. AWS Trusted Advisor
AWS customers
How does AWS Cloud computing help businesses reduce costs? (Choose two.) A. AWS charges the same prices for services in every AWS Region. B. AWS enables capacity to be adjusted on demand. C. AWS offers discounts for Amazon EC2 instances that remain idle for more than 1 week. D. AWS does not charge for data sent from the AWS Cloud to the internet. E. AWS eliminates many of the costs of building and maintaining on-premises data centers.
AWS enables capacity to be adjusted on demand. AWS eliminates many of the costs of building and maintaining on-premises data centers.
A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan.Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event? A. AWS Abuse team B. The designated AWS technical account manager (TAM) C. AWS infrastructure event management D. AWS Professional Services
AWS infrastructure event management
Which of the following are benefits that a company receives when it moves an on premises production workload to AWS? (Choose two.) A. AWS trains the company's staff on the use of all the AWS services B. AWS manages all security in the cloud C. AWS offers free support from technical account managers (TAMs) D. AWS offers high availability E. AWS provides economies of scale
AWS offers high availability AWS provides economies of scale
A user wants to control AWS services by using the AWS CLI.What are the MINIMUM security credentials that the user needs to achieve this goal? A. AWS account user name and password B. Multi-factor authentication (MFA) C. Access keys D. Key pairs
Access keys
A newly created IAM user has no IAM policy attached.What will happen when the user logs in and attempts to view the AWS resources in the account? A. All AWS services will be read-only access by default. B. Access to all AWS resources will be denied. C. Access to the AWS billing services will be allowed. D. Access to AWS resources will be allowed through the AWS CLI.
Access to all AWS resources will be denied.
Which AWS Cloud design principle is a company using when the company implements AWS CloudTrail? A. Activate traceability. B. Use serverless compute architectures. C. Perform operations as code. D. Go global in minutes.
Activate traceability.
A company needs to deliver new website features quickly in an iterative manner to minimize the time to market.Which AWS Cloud concept does this requirement represent? A. Reliability B. Elasticity C. Agility D. High availability
Agility
A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days.Which benefit has this company experienced by moving to the AWS Cloud? A. Elasticity B. Flexibility C. Agility D. Resilience
Agility
A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.Which Amazon EC2 purchasing option will be MOST cost-effective? A. All Upfront Reserved Instances B. Partial Upfront Reserved Instances C. Dedicated Instances D. On-Demand Instances
All Upfront Reserved Instances
After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount? A. No upfront payment B. Hourly on-demand payment C. Partial upfront payment D. All upfront payment
All upfront payment
A development team wants to publish and manage web services that provide REST APIs.Which AWS service will meet this requirement? A. AWS App Mesh B. Amazon API Gateway C. Amazon CloudFront D. AWS Cloud Map
Amazon API Gateway
A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware? A. Amazon AppStream 2.0 B. AWS AppSync C. Amazon WorkLink D. AWS Elastic Beanstalk
Amazon AppStream 2.0
A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment.Which AWS service should the company use to meet this requirement? A. Amazon S3 B. Amazon AppStream 2.0 C. AWS AppSync D. AWS Outposts
Amazon AppStream 2.0
Which of the following services is a fully managed AWS service that a company's employees can use to access applications through a virtual interface? A. Amazon EC2 B. AWS Elastic Beanstalk C. Amazon AppStream 2.0 D. AWS Lambda
Amazon AppStream 2.0
A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead? A. Amazon S3 Select B. Amazon Athena C. Amazon Redshift D. Amazon EC2
Amazon Athena
A company stores several terabytes of data in an Amazon S3 bucket. The company needs to query the data by using standard SQL and does not want to set up infrastructure.Which AWS service should the company use to meet these requirements? A. Amazon RDS B. Amazon Redshift C. Amazon Athena D. Amazon EC2
Amazon Athena
Which AWS service is a relational database compatible with MySQL and PostgreSQL? A. Amazon Redshift B. Amazon DynamoDB C. Amazon Aurora D. Amazon Neptune
Amazon Aurora
Which AWS service provides automated backups of data by default? A. Amazon S3 B. Amazon Aurora C. Amazon ElastiCache for Memcached D. Amazon Elastic File System (Amazon EFS)
Amazon Aurora
A company wants to host its relational databases on AWS. The databases have predefined schemas that the company needs to replicate on AWS.Which AWS services could the company use for the databases? (Choose two.) A. Amazon Aurora B. Amazon RDS C. Amazon DocumentDB (with MongoDB compatibility) D. Amazon Neptune E. Amazon DynamoDB
Amazon Aurora Amazon RDS
A company has a global website with static content.Which AWS service will deliver the static content with low latency? A. AWS Lambda B. Amazon CloudFront C. Amazon EC2 Auto Scaling D. AWS Compute Optimizer
Amazon CloudFront
A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users. The company must ensure that all users can view these videos with low latency.Which AWS service should the company use to meet this requirement? A. AWS Auto Scaling B. Amazon Kinesis Video Streams C. Elastic Load Balancing D. Amazon CloudFront
Amazon CloudFront
A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds.Which AWS service meets these requirements? A. Amazon CloudFront B. Elastic Load Balancing C. Amazon S3 D. Amazon Elastic Transcoder
Amazon CloudFront
Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.) A. Amazon Route 53 B. Amazon CloudFront C. AWS Transfer Family D. AWS Site-to-Site VPN E. Amazon API Gateway
Amazon CloudFront Amazon API Gateway
Which AWS services make use of global edge locations? (Choose two.) A. AWS Fargate B. Amazon CloudFront C. AWS Global Accelerator D. AWS Wavelength E. Amazon VPC
Amazon CloudFront AWS Global Accelerator
Which AWS service monitors CPU utilization on Amazon EC2 instances? A. AWS CloudTrail B. Amazon Inspector C. AWS Config D. Amazon CloudWatch
Amazon CloudWatch
Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization? A. Amazon Inspector B. AWS CloudTrail C. Amazon CloudWatch D. AWS Config
Amazon CloudWatch
A company needs to perform queries and interactively search and analyze log data.Which AWS service or feature will meet this requirement? A. Amazon EventBridge (Amazon CloudWatch Events) B. Amazon CloudWatch anomaly detection C. Amazon CloudWatch Logs Insights D. Amazon CloudWatch Logs streams
Amazon CloudWatch Logs Insights
An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal? A. Amazon Simple Queue Service (Amazon SQS) B. Amazon Simple Notification Service (Amazon SNS) C. AWS Systems Manager D. Amazon CloudWatch alarm
Amazon CloudWatch alarm
Which AWS service provides intelligent recommendations to improve code quality and identify an application's most expensive lines of code? A. Amazon CodeGuru B. AWS CodeStar C. AWS CodeCommit D. AWS CodeDeploy
Amazon CodeGuru
A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application.Which AWS service provides this functionality? A. AWS IAM Identity Center (AWS Single Sign-On) B. AWS Config C. Amazon Cognito D. AWS Identity and Access Management (IAM)
Amazon Cognito
A company is developing a new web application. The company must give users the ability to log in to the application through social identity providers.Which AWS service will meet these requirements? A. AWS Directory Service B. Amazon Cognito C. AWS Identity and Access Management (IAM) D. AWS Single Sign-On
Amazon Cognito
A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the database. The company wants to give users the ability to store personal information, but user access must be controlled in a more secure and reliable way.Which AWS service or feature will meet these requirements? A. Security groups B. Amazon GuardDuty C. AWS Secrets Manager D. Amazon Cognito
Amazon Cognito
A company wants to integrate its online shopping website with social media login credentials.Which AWS service can the company use to make this integration? A. AWS Directory Service B. AWS Identity and Access Management (IAM) C. Amazon Cognito D. AWS IAM Identity Center (AWS Single Sign-On)
Amazon Cognito
Which of the following are user authentication services managed by AWS? (Choose two.) A. Amazon Cognito B. AWS Lambda C. AWS License Manager D. AWS Identity and Access Management (1AM) E. AWS CodeStar
Amazon Cognito AWS Identity and Access Management (1AM)
A company wants to perform sentiment analysis on customer service email messages that it receives. The company wants to identify whether the customer service engagement was positive or negative.Which AWS service should the company use to perform this analysis? A. Amazon Textract B. Amazon Translate C. Amazon Comprehend D. Amazon Rekognition
Amazon Comprehend
A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote customer service agents can use to create and manage voice and chat contact flows.Which AWS service will meet these requirements? A. Amazon EventBridge (Amazon CloudWatch Events) B. Amazon Connect C. Amazon Cognito D. AWS Direct Connect
Amazon Connect
Which AWS service can be used to provide an on-demand, cloud-based contact center? A. AWS Direct Connect B. Amazon Connect C. AWS Support Center D. AWS Managed Services
Amazon Connect
Which AWS service provides a cloud-based contact center that scales to support a business of any size? A. Amazon Personalize B. Amazon Cognito C. Amazon Connect D. Amazon Lightsail
Amazon Connect
A company wants to use machine learning to identify suspicious activities in its AWS account.Which AWS service provides this functionality? A. AWS Shield B. Amazon Macie C. Amazon Detective D. AWS WAF
Amazon Detective
Which AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account? A. Amazon Inspector B. Amazon Macie C. Amazon Detective D. Amazon CloudWatch
Amazon Detective
A cloud practitioner needs to design a NoSQL database that is highly scalable, is durable, and requires minimal maintenance.Which AWS service meets these requirements? A. Amazon RDS for MySQL B. Microsoft SQL Server on Amazon EC2 C. Amazon DynamoDB D. Amazon Redshift
Amazon DynamoDB
A company is building an application that will receive millions of database queries each second. The company needs the data store for the application to scale to meet these needs.Which AWS service will meet this requirement? A. Amazon DynamoDB B. AWS Cloud9 C. Amazon Elastic ache for Memcached D. Amazon Neptune
Amazon DynamoDB
A company is designing an application. For the data persistence layer, the company wants to use a NoSQL database.Which AWS service should the company use for the database? A. Amazon Redshift B. AWS DataSync C. Amazon Athena D. Amazon DynamoDB
Amazon DynamoDB
A company is developing a new Node.js application. The application must have a scalable NoSQL database to meet increasing demand as the popularity of the application grows.Which AWS service will meet the requirements for the database? A. Amazon Aurora Serverless B. Amazon ElastiCache C. Amazon DynamoDB D. Amazon Redshift
Amazon DynamoDB
A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database software.Which AWS service can be used to accomplish this? A. Amazon RDS B. Amazon DynamoDB C. Amazon Aurora D. Amazon Redshift
Amazon DynamoDB
An application requires a database that offers consistent performance and latency that can be measured in single-digit milliseconds.Which AWS service meets these requirements? A. Amazon DynamoDB B. Amazon RDS C. Amazon Redshift D. Amazon EMR
Amazon DynamoDB
A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating systems that host its applications.Which AWS service should the company use to meet these requirements? A. Amazon DynamoDB B. Amazon EC2 C. AWS Lambda D. Amazon RDS
Amazon EC2
A company needs to perform data processing once a week that typically takes about 5 hours to complete.Which AWS service should the company use for this workload? A. AWS Lambda B. Amazon EC2 C. AWS CodeDeploy D. AWS Wavelength
Amazon EC2
A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity.Which AWS service should the company use to meet these requirements? A. AWS Lambda B. Amazon Cognito C. Amazon Athena D. Amazon EC2
Amazon EC2
A company would like to host its MySQL databases on AWS and maintain full control over the operating system, database installation, and configuration.Which AWS service should the company use to host the databases? A. Amazon RDS B. Amazon EC2 C. Amazon DynamoDB D. Amazon Aurora
Amazon EC2
A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones.Which AWS services should the company use to meet this requirement? (Choose two.) A. Amazon EC2 B. Amazon Elastic Block Store (Amazon EBS) C. Amazon Aurora D. Amazon DynamoDB E. Amazon Redshift
Amazon EC2 Amazon Elastic Block Store (Amazon EBS)
A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases.Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload? A. Elastic Load Balancing B. Amazon EC2 Auto Scaling C. AWS App2Container (A2C) D. AWS Systems Manager
Amazon EC2 Auto Scaling
A company needs steady and predictable performance from its Amazon EC2 instances at the lowest possible cost. The company also needs the ability to scale resources to ensure that it has the right resources available at the right time.Which AWS service or resource will meet these requirements? A. Amazon CloudWatch B. Application Load Balancer C. AWS Batch D. Amazon EC2 Auto Scaling
Amazon EC2 Auto Scaling
A company's application has high customer usage during certain times of the day. The company wants to reduce the number of Amazon EC2 instances that run when application usage is low.Which AWS service or instance purchasing option should the company use to meet this requirement? A. EC2 Instance Savings Plans B. Spot Instances C. Reserved Instances D. Amazon EC2 Auto Scaling
Amazon EC2 Auto Scaling
An ecommerce company has been monitoring usage of its online store that is hosted on a fleet of Amazon EC2 instances. Surges in traffic occur every weekend day at the same time and last for approximately 4 hours.Which AWS service should the company use to ensure that there are enough instances to meet the surges in demand? A. AWS Lambda B. Amazon EventBridge (Amazon CloudWatch Events) C. Elastic Load Balancing (ELB) D. Amazon EC2 Auto Scaling
Amazon EC2 Auto Scaling
A company is designing a web application that will run on Amazon EC2 instances.Which AWS services and features will improve availability and reduce the impact of failures for this application? (Choose two.) A. Amazon EC2 Auto Scaling for the EC2 instances B. VPC subnet ACLs to check the health of a service C. Resources that are distributed across multiple Availability Zones D. Configuration of AWS Server Migration Service (AWS SMS) to move the EC2 instances to a different AWS Region E. Resources that are distributed across multiple AWS points of presence
Amazon EC2 Auto Scaling for the EC2 instances Resources that are distributed across multiple Availability Zones
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon EC2 instance store C. Amazon Elastic File System (Amazon EFS) D. Amazon S3
Amazon EC2 instance store
According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following? A. Amazon DynamoDB B. Amazon EC2 instances C. Amazon RDS instances D. Amazon S3
Amazon EC2 instances
A company is creating a document that defines the operating system patch routine for all the company's systems.Which AWS resources should the company include in this document? (Choose two.) A. Amazon EC2 instances B. AWS Lambda functions C. AWS Fargate tasks D. Amazon RDS instances E. Amazon Elastic Container Service (Amazon ECS) instances
Amazon EC2 instances Amazon Elastic Container Service (Amazon ECS) instances
According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Choose two.) A. Hardware maintenance B. Amazon EC2 operating system patching C. API access control for AWS resources D. Configuration management of infrastructure devices E. Maintenance of an Availability Zone
Amazon EC2 operating system patching API access control for AWS resources
An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously.Which AWS storage service should be used? A. Amazon EBS B. Amazon EFS C. Amazon S3 D. AWS Artifact
Amazon EFS
A company wants an in-memory data store that is compatible with open source in the cloud.Which AWS service should the company use? A. Amazon DynamoDB B. Amazon ElastiCache C. Amazon Elastic Block Store (Amazon EBS) D. Amazon Redshift
Amazon ElastiCache
Which AWS database service providers in-memory data storage? A. Amazon DynamoDB B. Amazon ElastiCache C. Amazon RDS D. Amazon Timestream
Amazon ElastiCache
Which AWS database service provides in-memory data storage? A. Amazon DynamoDB B. Amazon ElastiCache C. Amazon RDS D. Amazon Timestream
Amazon ElastiCache
Which service is an AWS in-memory data store service? A. Amazon Aurora B. Amazon RDS C. Amazon DynamoDB D. Amazon ElastiCache
Amazon ElastiCache
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.) A. ׀•׀¡2 Reserved Instances B. EC2 Amazon Machine Images (AMIs) C. Amazon Elastic Block Store (Amazon EBS) snapshots D. AWS Shield E. Amazon GuardDuty
Amazon Elastic Block Store (Amazon EBS) snapshots EC2 Amazon Machine Images (AMIs)
A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur.What could be causing this? (Choose two.) A. Amazon Elastic Block Store (Amazon EBS) storage charges B. Operating system charges C. Hardware charges D. Elastic IP charges E. Input/output (I/O) charges
Amazon Elastic Block Store (Amazon EBS) storage charges Elastic IP charges
Which AWS service can a company use to store and manage Docker images? A. Amazon DynamoDB B. Amazon Kinesis Data Streams C. Amazon Elastic Container Registry (Amazon ECR) D. Amazon Elastic File System (Amazon EFS)
Amazon Elastic Container Registry (Amazon ECR)
A company wants to deploy and manage a Docker based application on AWS.Which solution meets these requirements with the LEAST amount of operational overhead? A. An open source Docker orchestrator on Amazon EC2 instances B. AWS AppSync C. Amazon Elastic Container Registry (Amazon ECR) D. Amazon Elastic Container Service (Amazon ECS)
Amazon Elastic Container Service (Amazon ECS)
A company needs a managed NFS file system that the company can use with its AWS compute resources.Which AWS service or feature will meet these requirements? A. Amazon Elastic Block Store (Amazon EBS) B. AWS Storage Gateway Tape Gateway C. Amazon S3 Glacier Flexible Retrieval D. Amazon Elastic File System (Amazon EFS)
Amazon Elastic File System (Amazon EFS)
A company's project team needs to simultaneously mount a file system on multiple Amazon EC2 Linux instances. The file system also will be shared across multiple Availability Zones.Which AWS service will meet these requirements? A. Amazon Elastic File System (Amazon EFS) B. Amazon S3 C. Amazon Elastic Block Store (Amazon EBS) D. Amazon FSx for Windows File Server
Amazon Elastic File System (Amazon EFS)
Which AWS services provide high availability across multiple Availability Zones by default? (Choose two.) A. Amazon EC2 B. Amazon Elastic Block Store (Amazon EBS) C. Amazon Elastic File System (Amazon EFS) D. Amazon Redshift E. Amazon S3
Amazon Elastic File System (Amazon EFS) Amazon S3
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers.Which AWS service will meet these requirements? A. Amazon Elastic Transcoder B. Amazon Comprehend C. AWS Glue D. Amazon Rekognition
Amazon Elastic Transcoder
A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code.Which AWS service meets these requirements? A. AWS Lambda B. Amazon Simple Queue Service (Amazon SQS) C. Amazon CloudWatch D. Amazon EventBridge
Amazon EventBridge
A company's application stores data in an Amazon S3 bucket. The company has an AWS Lambda function that processes data in the S3 bucket. The company needs to invoke the function once a day at a specific time.Which AWS service should the company use to meet this requirement? A. AWS Managed Services (AMS) B. AWS CodeStar C. Amazon EventBridge D. AWS Step Functions
Amazon EventBridge
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.Which AWS service will meet these requirements? A. Amazon S3 B. Amazon Elastic File System (Amazon EFS) C. Amazon FSx for Windows File Server D. Amazon Elastic Block Store (Amazon EBS)
Amazon FSx for Windows File Server
A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the ability to initiate automated actions against threats that are identified in the security findings.Which service will meet these requirements? A. AWS Trusted Advisor B. Amazon Detective C. Amazon Inspector D. Amazon GuardDuty
Amazon GuardDuty
A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats.Which AWS service should the company use to meet these requirements? A. AWS Artifact B. Amazon Macie C. AWS Identity and Access Management (IAM) D. Amazon GuardDuty
Amazon GuardDuty
A company wants to continuously monitor its AWS accounts and workloads for malicious activity. The company also wants to receive detailed security findings for visibility and remediation.Which AWS service should the company use to meet these requirements? A. Amazon GuardDuty B. AWS Shield C. AWS WAP D. AWS CloudTrail
Amazon GuardDuty
A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software.Which AWS service should the company use to meet these requirements? A. Amazon VPC B. Amazon EC2 C. Amazon GuardDuty D. AWS Direct Connect
Amazon GuardDuty
Which AWS service monitors AWS accounts for security threats? A. Amazon GuardDuty B. AWS Secrets Manager C. Amazon Cognito D. AWS Certificate Manager (ACM)
Amazon GuardDuty
Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts? A. Amazon Macie B. AWS Config C. Amazon GuardDuty D. Amazon Inspector
Amazon GuardDuty
Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3? A. AWS Shield B. AWS Firewall Manager C. Amazon GuardDuty D. Amazon Inspector
Amazon GuardDuty
A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances.Which AWS service or feature should the company use to meet this requirement? A. AWS Trusted Advisor B. Security groups C. Amazon Macie D. Amazon Inspector
Amazon Inspector
A large retail company wants to use an AWS service to process clickstream data from the company's ecommerce website. The company wants to collect and analyze the streaming data in real time.Which AWS service meets these requirements? A. Amazon Kinesis B. Amazon Athena C. Amazon CloudFront D. AWS Data Exchange
Amazon Kinesis
A company wants to analyze streaming user data and respond to customer queries in real time.Which AWS service can meet these requirements? A. Amazon QuickSight B. Amazon Redshift C. Amazon Kinesis Data Analytics D. AWS Data Pipeline
Amazon Kinesis Data Analytics
If a company wants to build an interactive chatbot to make a call center more efficient, which AWS service should be used? A. Amazon Connect B. Amazon Lex C. Amazon Translate D. Amazon Polly
Amazon Lex
A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited operational knowledge to perform the migration.Which AWS service supports this use case? A. Amazon EC2 B. Amazon Lightsail C. Amazon S3 D. AWS Lambda
Amazon Lightsail
An ecommerce application uses Java Message Service (JMS) messaging to communicate between its fulfillment center and the application after an order has been placed. The company wants to migrate its messaging application to AWS. The company also wants to minimize the effort used to rewrite the messaging code.Which AWS service will meet these requirements? A. Amazon Simple Notification Service (Amazon SNS) B. Amazon Simple Email Service (Amazon SES) C. Amazon Pinpoint D. Amazon MQ
Amazon MQ
Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements? A. Amazon Elastic Block Store (Amazon EBS) volume B. AWS CloudFormation template C. Amazon Elastic Block Store (Amazon EBS) snapshot D. Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
A company needs to identify personally identifiable information (PII), such as credit card numbers, from data that is stored in Amazon S3.Which AWS service should the company use to meet this requirement? A. Amazon Inspector B. AWS Shield C. Amazon GuardDuty D. Amazon Macie
Amazon Macie
A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud.Which AWS service will meet these requirements? A. Amazon Inspector B. Amazon Macie C. Amazon GuardDuty D. AWS Audit Manager
Amazon Macie
A company wants a service that will discover the company's sensitive data on AWS and identity potential exposure of the data.Which AWS service will meet these requirements in the LEAST amount of time? A. AWS Glue B. Amazon Polly C. Amazon Macie D. AWS Secrets Manager
Amazon Macie
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets? A. AWS Shield B. Amazon Macie C. AWS Network Firewall D. Amazon Cognito
Amazon Macie
Which AWS service stores graph data in the form of vertices and edges? A. Amazon DynamoDB B. Amazon RDS C. Amazon Quantum Ledger Database (Amazon QLDB) D. Amazon Neptune
Amazon Neptune
Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.) A. Amazon ElastiCache B. Amazon RDS for Oracle C. Amazon Neptune D. Amazon DocumentDB (with MongoDB compatibility) E. Amazon Redshift
Amazon Neptune Amazon DocumentDB (with MongoDB compatibility)
Which AWS service can be used to turn text into lifelike speech? A. Amazon Polly B. Amazon Kendra C. Amazon Rekognition D. Amazon Connect
Amazon Polly
Which AWS service can convert text to lifelike speech? A. Amazon Polly B. Amazon Textract C. Amazon Transcribe D. Amazon Comprehend
Amazon Polly
A company is building a business intelligence solution using Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it.Which service should the company use? A. Amazon CloudWatch B. AWS Personal Health Dashboard C. AWS Service Catalog D. Amazon QuickSight
Amazon QuickSight
A company needs to use dashboards and charts to analyze insights from business data.Which AWS service will provide the dashboards and charts for these insights? A. Amazon Macie B. Amazon Aurora C. Amazon QuickSight D. AWS CloudTrail
Amazon QuickSight
Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights? A. Amazon Athena B. Amazon Kendra C. Amazon QuickSight D. Amazon Redshift
Amazon QuickSight
Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data? A. Amazon Athena B. Amazon QuickSight C. Amazon CloudWatch D. AWS Organizations
Amazon QuickSight
A company has an on-premises Oracle database. The company spends a significant amount of time on database administration activities. The company is moving the database to AWS and needs to minimize the time that is required for those administration activitiesWhich AWS service should the company use to meet this requirement? A. Amazon ElastiCache B. Amazon EC2 C. Amazon RDS D. Amazon DynamoDB
Amazon RDS
A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application.To which AWS service could the company migrate the database? A. Amazon Athena B. Amazon DynamoDB C. Amazon RDS D. Amazon DocumentDB (with MongoDB compatibility)
Amazon RDS
A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a solution that will reduce the administrative overhead of the database.Which AWS service will meet this requirement? A. Amazon Redshift B. Amazon ElastiCache C. Amazon RDS D. Amazon Elastic File System (Amazon EFS)
Amazon RDS
A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud.Which AWS service should the company use to reduce management overhead for this environment? A. Amazon Elastic Container Service (Amazon ECS) B. Amazon SageMaker C. Amazon RDS D. Amazon Athena
Amazon RDS
Which AWS service allows a user to provision a managed MySQL DB instance? A. Amazon DynamoDB B. Amazon Redshift C. Amazon RDS D. AWS Database Migration Service (AWS DMS)
Amazon RDS
Which AWS services should a company use to read and write data that changes frequently? (Choose two.) A. Amazon S3 Glacier B. Amazon RDS C. AWS Snowball D. Amazon Redshift E. Amazon Elastic File System (Amazon EFS)
Amazon RDS Amazon Elastic File System (Amazon EFS)
Which AWS services are managed database services? (Choose two.) A. Amazon Elastic Block Store (Amazon EBS) B. Amazon S3 C. Amazon RDS D. Amazon Elastic File System (Amazon EFS) E. Amazon DynamoDB
Amazon RDS Amazon DynamoDB
A company is running a standard PostgreSQL database on premises. The company is migrating the database to the AWS Cloud and does not want to change the queries that access the database. The company must maximize the query performance.Which AWS service will meet these requirements? A. Amazon RDS for PostgreSQL B. Amazon Aurora PostgreSQL C. Amazon DocumentDB (with MongoDB compatibility) D. Amazon DynamoDB
Amazon RDS for PostgreSQL
A company needs to deploy a PostgreSQL database into Amazon RDS. The database must be highly available and fault tolerant.Which AWS solution should the company use to meet these requirements? A. Amazon RDS with a single Availability Zone B. Amazon RDS snapshots C. Amazon RDS with multiple Availability Zones D. AWS Database Migration Service (AWS DMS)
Amazon RDS with multiple Availability Zones
A company needs to generate reports for business intelligence and operational analytics on petabytes of semistructured and structured data. These reports are produced from standard SQL queries on data that is in an Amazon S3 data lake.Which AWS service provides the ability to analyze this data? A. Amazon RDS B. Amazon Neptune C. Amazon DynamoDB D. Amazon Redshift
Amazon Redshift
A company needs to implement an AWS data warehouse solution that can manage petabytes of data. A reporting application will perform online analytic processing (OLAP) queries on the data.Which AWS service should the company use to meet these requirements? A. Amazon Elastic File System (Amazon EFS) B. Amazon Redshift C. Amazon RDS for MySQL D. Amazon DynamoDB
Amazon Redshift
A company needs to set up a petabyte-scale data warehouse in the AWS Cloud.Which AWS service will meet this requirement? A. Amazon DynamoDB B. Amazon RDS C. Amazon Redshift D. Amazon ElastiCache
Amazon Redshift
A company needs to use standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake.Which AWS service meets these requirements? A. Amazon DynamoDB B. Amazon Aurora C. Amazon Athena D. Amazon Redshift
Amazon Redshift
A company wants to migrate its on-premises data warehouse to AWS. The information in the data warehouse is used to populate analytics dashboards.Which AWS service should the company use for the data warehouse? A. Amazon ElastiCache B. Amazon Aurora C. Amazon RDS D. Amazon Redshift
Amazon Redshift
Which AWS service can a company use to perform complex analytical queries? A. Amazon RDS B. Amazon DynamoDB C. Amazon Redshift D. Amazon ElastiCache
Amazon Redshift
Which AWS service provides a scalable data warehouse solution? A. Amazon S3 B. Amazon DynamoDB C. Amazon Kinesis Data Streams D. Amazon Redshift
Amazon Redshift
Which AWS service provides highly durable object storage? A. Amazon S3 B. Amazon Elastic File System (Amazon EFS) C. Amazon Elastic Block Store (Amazon EBS) D. Amazon FSx
Amazon S3
A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.Which AWS service should the company use to build this capability? A. Amazon SageMaker B. Amazon Textract C. Amazon Rekognition D. Amazon Comprehend
Amazon Rekognition
A company wants to add facial identification to its user verification process on an application.Which AWS service should the company use to meet this requirement? A. Amazon Polly B. Amazon Transcribe C. Amazon Lex D. Amazon Rekognition
Amazon Rekognition
Which AWS service provides machine learning capability to detect and analyze content in images and videos? A. Amazon Connect B. Amazon Lightsail C. Amazon Personalize D. Amazon Rekognition
Amazon Rekognition
Which AWS service should a company use to organize, characterize, and search large numbers of images? A. Amazon Transcribe B. Amazon Rekognition C. Amazon Aurora D. Amazon QuickSight
Amazon Rekognition
A company has deployed its publicly accessible application in two different AWS Regions. The company has designated one Region as primary and the other Region as secondary for disaster recovery purposes.Which AWS service or resource can automatically divert all incoming application requests to the secondary Region? A. Application Load Balancer B. Amazon Route 53 C. AWS Direct Connect D. AWS VPN
Amazon Route 53
A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS.Which AWS service should the company use to meet this requirement? A. AWS Lambda B. Amazon Route 53 C. Amazon CloudFront D. AWS Direct Connect
Amazon Route 53
A company wants to set up a Domain Name System (DNS) record for its application with a failover routing policy that is based on health checks.Which AWS service or resource should the company use to achieve this goal? A. Amazon Connect B. Application Load Balancer C. Amazon Route 53 D. AWS WAF
Amazon Route 53
Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers? A. Amazon CloudFront B. Amazon GuardDuty C. Amazon Route 53 D. AWS Trusted Advisor
Amazon Route 53
Which AWS service is a highly available and scalable DNS web service? A. Amazon VPC B. Amazon CloudFront C. Amazon Route 53 D. Amazon Connect
Amazon Route 53
Which AWS service provides domain registration, DNS routing, and service health checks? A. AWS Direct Connect B. Amazon Route 53 C. Amazon CloudFront D. Amazon API Gateway
Amazon Route 53
Which AWS service can serve a static website? A. Amazon S3 B. Amazon Route 53 C. Amazon QuickSight D. AWS X-Ray
Amazon S3
Which AWS service is used to host static websites? A. Amazon S3 B. Amazon Elastic Block Store (Amazon EBS) C. AWS CloudFormation D. Amazon Elastic File System (Amazon EFS)
Amazon S3
A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time they are requested.Which AWS service will provide a secure and cost-effective solution for retaining these files? A. Amazon DynamoDB B. Amazon S3 Glacier C. Amazon Connect D. Amazon ElastiCache
Amazon S3 Glacier
Which of the following describes some of the core functionality of Amazon S3? A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2. B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability. C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol. D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.
Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
A company needs to monitor compute usage and receive an email message notification every time an Amazon EC2 instance starts or stops.Which AWS service should the company use to meet these requirements? A. Amazon EventBridge B. Amazon WorkMail C. Amazon Simple Email Service (Amazon SES) D. AWS Trusted Advisor
Amazon Simple Email Service (Amazon SES)
A company is planning to configure multi-factor authentication (MFA) for a business application. The company needs to use text messages to distribute one-time passwords to its customers worldwide.Which AWS service should the company use to meet this requirement? A. Amazon EventBridge (Amazon CloudWatch Events) B. AWS Identity and Access Management (IAM) C. Amazon Simple Notification Service (Amazon SNS) D. Amazon Connect
Amazon Simple Notification Service (Amazon SNS)
Which AWS service or feature is used to send both text and email messages from distributed applications? A. Amazon Simple Notification Service (Amazon SNS) B. Amazon Simple Email Service (Amazon SES) C. Amazon CloudWatch alerts D. Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Notification Service (Amazon SNS)
Which AWS service uses a combination of publishers and subscribers? A. AWS Lambda B. Amazon Simple Notification Service (Amazon SNS) C. Amazon Cloud Watch D. AWS CloudFormation
Amazon Simple Notification Service (Amazon SNS)
A company has a set of ecommerce applications. The applications need to be able to send messages to each other.Which AWS service meets this requirement? A. AWS Auto Scaling B. Elastic Load Balancing C. Amazon Simple Queue Service (Amazon SQS) D. Amazon Kinesis Data Streams
Amazon Simple Queue Service (Amazon SQS)
A company is building an application that requires the ability to send, store, and receive messages between application components. The company has another requirement to process messages in first-in, first-out (FIFO) order.Which AWS service should the company use? A. AWS Step Functions B. Amazon Simple Notification Service (Amazon SNS) C. Amazon Kinesis Data Streams D. Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Queue Service (Amazon SQS)
Which AWS service can be used to decouple applications? A. AWS Config B. Amazon Simple Queue Service (Amazon SQS) C. AWS Batch D. Amazon Simple Email Service (Amazon SES)
Amazon Simple Queue Service (Amazon SQS)
Which AWS service decouples application components so that the components run independently? A. Amazon Simple Notification Service (Amazon SNS) B. Amazon Simple Workflow Service (Amazon SWF) C. AWS Glue D. Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Queue Service (Amazon SQS)
Which AWS service enables the decoupling and scaling of applications? A. Amazon Simple Queue Service (Amazon SQS) B. AWS Outposts C. Amazon S3 D. Amazon Simple Email Service (Amazon SES)
Amazon Simple Queue Service (Amazon SQS)
Which AWS service helps developers use loose coupling and reliable messaging between microservices? A. Elastic Load Balancing B. Amazon Simple Notification Service (Amazon SNS) C. Amazon CloudFront D. Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Queue Service (Amazon SQS)
Which AWS service should a company use to decouple large monolithic applications into smaller microservices components? A. AWS Direct Connect B. Amazon Lightsail C. Amazon Simple Queue Service (Amazon SQS) D. Amazon CloudWatch
Amazon Simple Queue Service (Amazon SQS)
A company needs to simultaneously process hundreds of requests from different users.Which combination of AWS services should the company use to build an operationally efficient solution? A. Amazon Simple Queue Service (Amazon SQS) and AWS Lambda B. AWS Data Pipeline and Amazon EC2 C. Amazon Kinesis and Amazon Athena D. AWS Amplify and AWS AppSync
Amazon Simple Queue Service (Amazon SQS) and AWS Lambda
A company accepts enrollment applications on handwritten paper forms. The company uses a manual process to enter the form data into its backend systems.The company wants to automate the process by scanning the forms and capturing the enrollment data from scanned PDF files.Which AWS service should the company use to build this process? A. Amazon Rekognition B. Amazon Textract C. Amazon Transcribe D. Amazon Comprehend
Amazon Textract
A company wants its employees to have access to virtual desktop infrastructure to securely access company-provided desktops through the employees' personal devices.Which AWS service should the company use to meet these requirements? A. Amazon AppStream 2.0 B. AWS AppSync C. Amazon FSx for Windows File Server D. Amazon WorkSpaces
Amazon WorkSpaces
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model? A. Amazon FSx for Windows File Server B. Amazon WorkSpaces virtual Windows desktop C. AWS Directory Service for Microsoft Active Directory D. Amazon RDS for Microsoft SQL Server
Amazon WorkSpaces virtual Windows desktop
Which of the following describes AWS Local Zones? A. A cluster of data centers in one geographic location B. A site used by Amazon CloudFront to cache frequently accessed content C. An extension of an AWS Region to more granular locations D. One or more data centers with redundant power and networking
An extension of an AWS Region to more granular locations
A company that operates in the AWS Cloud wants to test workloads and team responses to simulated events. The company will conduct an exercise to identify potential issues that need to be addressed.Which design principle of the AWS Well-Architected Framework does this exercise represent? A. Anticipate failure. B. Automatically recover from failure. C. Measure overall cost efficiency. D. Implement loosely coupled dependencies.
Anticipate failure.
Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework? A. Create annotated documentation. B. Anticipate failure. C. Ensure performance efficiency. D. Optimize costs.
Anticipate failure.
An application is running on multiple Amazon EC2 instances. The company wants to make the application highly available by configuring a load balancer with requests forwarded to the EC2 instances based on URL paths.Which AWS load balancer will meet these requirements and take the LEAST amount of effort to deploy? A. Network Load Balancer B. Application Load Balancer C. AWS OpsWorks Load Balancer D. Custom Load Balancer on Amazon EC2
Application Load Balancer
An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.Which AWS service or resource will meet this requirement? A. Amazon EC2 Auto Scaling B. Application Load Balancer C. Gateway Load Balancer D. Network Load Balancer
Application Load Balancer
A company is using Amazon RDS.Which task is the company's responsibility, according to the AWS shared responsibility model? A. Apply encryption options for the database. B. Manage the underlying server hardware on which Amazon RDS runs. C. Apply patches to the underlying operating system. D. Apply minor patches to the database.
Apply encryption options for the database.
A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.Which best practice for cost governance does this example show? A. Resource controls B. Cost allocation C. Architecture optimization D. Tagging enforcement
Architecture optimization
A company deployed an application on an Amazon EC2 instance. The application ran as expected for 6 months in the past week, users have reported latency issues. A system administrator found that the CPU utilization was at 100% during business hours. The company wants a scalable solution to meet demand.Which AWS service or feature should the company use to handle the load for its application during periods of high demand? A. Auto Scaling groups B. AWS Global Accelerator C. Amazon Route 53 D. An Elastic IP address
Auto Scaling groups
What does the Amazon S3 Intelligent-Tiering storage class offer? A. Payment flexibility by reserving storage capacity B. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume C. Automatic cost savings by moving objects between tiers based on access pattern changes D. Secure, durable, and lowest cost storage for data archival
Automatic cost savings by moving objects between tiers based on access pattern changes
What is the primary use case for Amazon GuardDuty? A. Prevention of DDoS attacks B. Protection against SQL injection attacks C. Automatic monitoring for threats to AWS workloads D. Automatic provisioning of AWS resources
Automatic monitoring for threats to AWS workloads
Which of the following is a design principle of the reliability pillar of the AWS Well-Architected Framework? A. Scale globally in minutes. B. Adopt a consumption model. C. Automatically recover from failure. D. Make frequent, small, reversible changes.
Automatically recover from failure.
Which design principles of the AWS Well-Architected Framework help increase reliability? (Choose two.) A. Automatically recover from failure. B. Enable traceability. C. Scale horizontally to increase workload availability. D. Automate security best practices. E. Keep people away from data.
Automatically recover from failure. Scale horizontally to increase workload availability.
Which design principles support the reliability pillar of the AWS Well Architected framework? (Choose two.) A. Perform operations as code B. Enable traceability C. Automatically scale to meet demand D. Deploy resources globally to improve response time E. Automatically recover from failure
Automatically scale to meet demand Automatically recover from failure
Which component of the AWS global infrastructure is made up of one or more discrete data centers that have redundant power, networking, and connectivity? A. AWS Region B. Availability Zone C. Edge location D. AWS Outposts
Availability Zone
Which of the following consists of one or more isolated data centers in the same regional area that are interconnected through low-latency networks? A. Availability Zone B. Edge location C. AWS Region D. Private networking
Availability Zone
Which statement describes a characteristic of the AWS global infrastructure? A. Edge locations contain multiple AWS Regions B. AWS Regions contain multiple Regional edge caches C. Availability Zones contain multiple data centers D. Each data center contains multiple edge locations
Availability Zones contain multiple data centers
Which of the following is a recommended design principle for AWS Cloud architecture? A. Design tightly coupled components. B. Build a single application component that can handle all the application functionality. C. Make large changes on fewer iterations to reduce chances of failure. D. Avoid monolithic architecture by segmenting workloads.
Avoid monolithic architecture by segmenting workloads.
Which disaster recovery option is the LEAST expensive? A. Warm standby B. Multisite C. Backup and restore D. Pilot light
Backup and restore
Which actions are examples of a company's effort to rightsize its AWS resources to control cloud costs? (Choose two.) A. Switch from Amazon RDS to Amazon DynamoDB to accommodate NoSQL datasets. B. Base the selection of Amazon EC2 instance types on past utilization patterns. C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers. D. Use Multi-AZ deployments for Amazon RDS. E. Replace existing Amazon EC2 instances with AWS Elastic Beanstalk.
Base the selection of Amazon EC2 instance types on past utilization patterns. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.
A company wants to expand from one AWS Region into a second AWS Region.What does the company need to do to expand into the second Region? A. Contact an AWS account manager to sign a new contract. B. Move an Availability Zone to the second Region. C. Begin to deploy resources in the second Region. D. Download the AWS Management Console for the second Region.
Begin to deploy resources in the second Region.
Which guidelines are key AWS architectural design principles? (Choose two.) A. Design for fixed resources. B. Build scalable architectures. C. Use tightly coupled components. D. Use managed services when possible. E. Design for human interaction.
Build scalable architectures. Use managed services when possible.
An online company was running a workload on premises and was struggling to launch new products and features. After migrating the workload to AWS, the company can quickly launch products and features and can scale its infrastructure as required.Which AWS Cloud value proposition does this scenario describe? A. Business agility B. High availability C. Security D. Centralized auditing
Business agility
A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.Which purchase option meets these requirements MOST cost-effectively? A. Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load. B. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances. C. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate. D. Buy Reserved Instances to cover all potential usage that results from the seasonal usage.
Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate.
A company is using AWS Lambda.Which task is the company's responsibility, according to the AWS shared responsibility model? A. Update the Lambda runtime language. B. Maintain the runtime environment. C. Maintain the networking infrastructure. D. Configure the resource.
Configure the resource.
Which tasks require use of the AWS account root user? (Choose two.) A. Changing an AWS Support plan B. Modifying an Amazon EC2 instance type C. Grouping resources in AWS Systems Manager D. Running applications in Amazon Elastic Kubernetes Service (Amazon EKS) E. Closing an AWS account
Changing an AWS Support plan Closing an AWS account
Which task requires using AWS account root user credentials? A. Viewing billing information B. Changing the AWS Support plan C. Starting and stopping Amazon EC2 instances D. Opening an AWS Support case
Changing the AWS Support plan
A company is using Amazon EC2 instances.Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.) A. Choose the initial root password of new Linux instances. B. Identify which users can access the EC2 instances, and manage their permissions in the operating system. C. Apply the updates of the hypervisor where the EC2 instances are running. D. Choose between a Wi-Fi connection and an Ethernet connection for the global internet access. E. Identify and manage the users who are allowed to create or delete EC2 instances.
Choose the initial root password of new Linux instances. Identify and manage the users who are allowed to create or delete EC2 instances.
How does the AWS Cloud help companies build agility into their processes and cloud infrastructure? A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required. B. Companies can expand into new geographic regions. C. Companies can access a range of technologies to experiment and innovate quickly. D. Companies can pay for IT resources only when they use the resources.
Companies can access a range of technologies to experiment and innovate quickly.
Which characteristics are advantages of using the AWS Cloud? (Choose two.) A. A 100% service level agreement (SLA) for all AWS services B. Compute capacity that is adjusted on demand C. Availability of AWS Support for code development D. Enhanced security E. Increases in cost and complexity
Compute capacity that is adjusted on demand Enhanced security
Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud? A. Compute instances can be launched and terminated as needed to optimize costs. B. Compute costs can be viewed in the AWS Billing and Cost Management console. C. Users retain full administrative access to their compute instances. D. Users can optimize costs by permanently running enough instances at peak load.
Compute instances can be launched and terminated as needed to optimize costs.
Which of the following are customer responsibilities under the AWS shared responsibility model? (Choose two.) A. Physical security of AWS facilities B. Configuration of security groups C. Encryption of customer data on AWS D. Management of AWS Lambda infrastructure E. Management of network throughput of each AWS Region
Configuration of security groups Encryption of customer data on AWS
Which actions represent best practices for using AWS IAM? (Choose two.) A. Configure a strong password policy. B. Share the security credentials among users of AWS accounts who are in the same Region. C. Use access keys to lag in to the AWS Management Console. D. Rotate access keys on a regular basis. E. Avoid using IAM roles to delegate permissions.
Configure a strong password policy. Rotate access keys on a regular basis.
According to the AWS shared responsibility model, which task is the responsibility of the customer? A. Protect the global infrastructure that runs all of the services offered in the AWS Cloud. B. Configure logical access controls for resources, and protect account credentials. C. Configure the security used by managed services. D. Patch and back up Amazon Aurora.
Configure logical access controls for resources, and protect account credentials.
A company needs to design an AWS disaster recovery plan to cover multiple geographic areas.Which action will meet this requirement? A. Configure multiple AWS accounts. B. Configure the architecture across multiple Availability Zones in an AWS Region. C. Configure the architecture across multiple AWS Regions. D. Configure the architecture among many edge locations.
Configure the architecture across multiple AWS Regions.
A company has several departments. Each department has its own AWS accounts for its applications. The company wants all AWS costs on a single invoice to simplify payment, but the company wants to know the costs that each department is incurring.Which AWS tool or feature will provide this functionality? A. AWS Cost and Usage Reports B. Consolidated billing C. Savings Plans D. AWS Budgets
Consolidated billing
A company that has multiple AWS accounts wants to reduce its recurring cloud costs. The company is using AWS Organizations.Which AWS tool or feature will share volume pricing discounts and Savings Plans among accounts? A. AWS Budgets B. Consolidated billing C. AWS credits D. Cost allocation tags
Consolidated billing
Which AWS Organizations feature can be used to track charges across multiple accounts and report the combined cost? A. Service control policies (SCPs) B. Cost Explorer C. Consolidated billing D. AWS Identity and Access Management (IAM)
Consolidated billing
Which of the following are economic benefits of using the AWS Cloud? (Choose two.) A. Consumption-based pricing B. Perpetual licenses C. Economies of scale D. AWS Enterprise Support at no additional cost E. Bring-your-own-hardware model
Consumption-based pricing Economies of scale
Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.) A. Control access to AWS service APIs and to other specific resources. B. Provide intelligent threat detection and continuous monitoring. C. Protect the AWS environment using multi-factor authentication (MFA). D. Grant users access to AWS data centers. E. Provide firewall protection for applications from common web attacks.
Control access to AWS service APIs and to other specific resources. Protect the AWS environment using multi-factor authentication (MFA).
A company has a business-critical Amazon RDS for MySQL DB instance that resides in a single Availability Zone.Which solution will improve the availability of the DB instance? A. Convert the DB instance into a multi-Region deployment. B. Create an Amazon Simple Queue Service (Amazon SQS) queue in the same AWS Region to manage writes to the DB instance. C. Convert the DB instance into a Multi-AZ deployment. D. Create an Amazon Simple Queue Service (Amazon SQS) queue in a different AWS Region to manage writes to the DB instance.
Convert the DB instance into a Multi-AZ deployment.
A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs.Which AWS Billing and Cost Management tool provides this data in a graphical format? A. AWS Bills B. Cost Explorer C. AWS Cost and Usage Report D. AWS Budgets
Cost Explorer
A company wants to forecast future costs and usage of AWS resources based on past consumption.Which AWS service or tool will provide this forecast? A. AWS Cost and Usage Report B. Amazon Forecast C. AWS Pricing Calculator D. Cost Explorer
Cost Explorer
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year. Which AWS service or tool provides this information? A. AWS Trusted Advisor B. Cost Explorer C. Amazon Forecast D. Amazon CloudWatch
Cost Explorer
Which AWS service or tool can a company use to visualize, understand, and manage AWS spending and usage over time? A. AWS Trusted Advisor B. Amazon CloudWatch C. Cost Explorer D. AWS Budgets
Cost Explorer
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources? A. Cost allocation tags B. Key pairs C. Amazon Inspector D. AWS Trusted Advisor
Cost allocation tags
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.Which cost is the company's direct responsibility? A. Cost of application software licenses B. Cost of the hardware infrastructure on AWS C. Cost of power for the AWS servers D. Cost of physical security for the AWS data center
Cost of application software licenses
A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.Which costs will the company eliminate with this migration? (Choose two.) A. Cost of data center operations B. Cost of application licensing C. Cost of marketing campaigns D. Cost of physical server hardware E. Cost of network management
Cost of data center operations Cost of physical server hardware
A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.Which pillar of the AWS Well-Architected Framework aligns with these requirements? A. Operational excellence B. Security C. Reliability D. Cost optimization
Cost optimization
Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud? A. Sustainability B. Cost optimization C. Operational excellence D. Reliability
Cost optimization
Which task is the responsibility of a company that is using Amazon RDS? A. Provision the underlying infrastructure. B. Create IAM policies to control administrative access to the service. C. Install the cables to connect the hardware for compute and storage. D. Install and patch the RDS operating system.
Create IAM policies to control administrative access to the service.
A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources.Which actions will meet these requirements? (Choose two.) A. Use AWS Service Catalog to identify a list of on-premises resources that can be migrated. B. Create a VPN connection between an on-premises device and a virtual private gateway in the VPC. C. Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources. D. Set up an AWS Direct Connect connection between the on-premises data center and AWS. E. Use Amazon CloudFront to restrict access to static web content provided through the on-premises web servers.
Create a VPN connection between an on-premises device and a virtual private gateway in the VPC. Set up an AWS Direct Connect connection between the on-premises data center and AWS.
A company requires an isolated environment within AWS for security purposes.Which action can be taken to accomplish this? A. Create a separate Availability Zone to host the resources. B. Create a separate VPC to host the resources. C. Create a placement group to host the resources. D. Create an AWS Direct Connect connection between the company and AWS.
Create a separate VPC to host the resources.
A user needs to perform a one-time backup of an Amazon Elastic Block Store (Amazon EBS) volume that is attached to an Amazon EC2 instance.What is the MOST operationally efficient way to perform this backup? A. Attach another EBS volume to the EC2 instance, and copy the contents. B. Copy the EBS volume to a server that is running outside AWS and is connected with AWS Direct Connect. C. Create an EBS snapshot of the volume. D. Create a custom script to copy the EBS file contents to Amazon S3.
Create an EBS snapshot of the volume.
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and AmazonDynamoDB.What is the MOST operationally efficient solution to delegate permissions? A. Create an IAM role with the required permissions. Attach the role to the EC2 instance. B. Create an IAM user and use its access key and secret access key in the application. C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.
Create an IAM role with the required permissions. Attach the role to the EC2 instance.
A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application.What can the company do to meet this requirement? A. Set up invoiced billing. B. Use AWS Artifact. C. Set budgets in Cost Explorer. D. Create cost allocation tags.
Create cost allocation tags.
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions? A. Creating versions of Lambda functions B. Maintaining server and operating systems C. Scaling Lambda resources according to demand D. Updating the Lambda runtime environment
Creating versions of Lambda functions
What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model? A. Software licenses B. Networking C. Customer data D. Encryption keys
Customer data
Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic regions connected by a network with low latency, high throughput, and redundancy? A. Economies of scale B. Security C. Elasticity D. Global reach
Global reach
Which of the following is included within the security pillar of the AWS Well-Architected Framework? A. Identity federation B. Data protection C. Incident reporting D. Disaster recovery
Data protection
Which benefit of AWS Cloud computing provides lower latency between users and applications? A. Agility B. Economies of scale C. Global reach D. Pay-as-you-go pricing
Global reach
A company wants to build an application for a new line of business.According to the AWS Well-Architected Framework, what design principles should be implemented? (Choose two.) A. Consolidate multiple AWS accounts into a single account. B. Buy and host hardware in the AWS Cloud. C. Decouple the AWS Cloud architecture to break up monolithic deployments. D. Move on-premises network hardware to VPCs. E. Design elasticity into the AWS Cloud design.
Decouple the AWS Cloud architecture to break up monolithic deployments. Design elasticity into the AWS Cloud design.
A company has a set of databases that are stored on premises. The company wants to bring its existing Microsoft SQL Server licenses when the company moves the databases to run on Amazon EC2 instances.Which EC2 instance purchasing option should the company use to meet these requirements? A. Dedicated Instances B. Reserved Instances C. Dedicated Hosts D. Spot Instances
Dedicated Hosts
A company owns per-core software licenses.Which Amazon EC2 instance purchasing option must the company use for this license type? A. Reserved Instances B. Dedicated Hosts C. Spot Instances D. Dedicated Instances
Dedicated Hosts
When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required? A. Spot Instances B. Dedicated Instances C. Dedicated Hosts D. Reserved Instances
Dedicated Hosts
A user is a new AWS account owner who has no special access requirements.What should this user do with the AWS account root user access keys? A. Share the keys with all relevant internal users so that those users can programmatically access AWS services. B. Post the keys on GitHub to provide development teams with access to AWS services. C. Use the keys for access, but do not share the keys with anyone. D. Delete the keys and create IAM users.
Delete the keys and create IAM users.
A company plans to run its IT infrastructure in the AWS Cloud. The infrastructure must be highly available. The company also must minimize the network latency between servers.Which deployment scenario will meet these requirements? A. Deploy in multiple Availability Zones in multiple AWS Regions. B. Deploy in one Availability Zone in one AWS Region C. Deploy in multiple AWS Regions. Deploy in one Availability Zone in each Region. D. Deploy in multiple Availability Zones in one AWS Region.
Deploy in multiple Availability Zones in one AWS Region.
Which guideline is a well-architected design principle tor building cloud applications? A. Keep static data closer to compute resources. B. Provision resources for peak capacity. C. Design for automated recovery from failure. D. Use tightly coupled components.
Design for automated recovery from failure.
When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice? A. Perform quarterly disaster recovery tests. B. Place the main component on the us-east-1 Region. C. Design for automatic failover to healthy resources. D. Design workloads to fit on a single Amazon EC2 instance.
Design for automatic failover to healthy resources.
An ecommerce company is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2.This architecture follows which AWS Well-Architected Framework best practice? A. Secure the workload B. Decouple infrastructure components C. Design for failure D. Think parallel
Design for failure
Which design principle should be considered when architecting in the AWS Cloud? A. Think of servers as non-disposable resources B. Use synchronous integration of services C. Design loosely coupled components D. Implement the least permissive rules for security groups
Design loosely coupled components
Which benefit is included with an AWS Enterprise Support plan? A. AWS Partner Network (APN) support at no cost. B. Designated support from an AWS technical account manager (TAM) C. On-site support from AWS engineers D. AWS managed compliance as code with AWS Config
Designated support from an AWS technical account manager (TAM)
A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional.What is the best cloud architecture to address this consistently growing demand? A. Run the application on a bigger EC2 instance size. B. Switch to an EC2 instance family that better matches batch requirements. C. Distribute the application across multiple EC2 instances and run the workload in parallel. D. Run the application on a bare metal EC2 instance.
Distribute the application across multiple EC2 instances and run the workload in parallel.
Which statement is an AWS Cloud best practice that focuses on the elasticity and agility of cloud computing? A. Provision capacity based on past usage and theoretical peaks. B. Dynamically scale to meet usage demands. C. Build the application and infrastructure in a data center that grants physical access. D. Break apart the application into loosely coupled components.
Dynamically scale to meet usage demands.
Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images? A. EC2 Image Builder B. Amazon Machine Image (AMI) C. AWS Launch Wizard D. AWS Elastic Beanstalk
EC2 Image Builder
A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously.Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances? A. AWS Graviton processor B. Dedicated Hosts C. EC2 Instance Savings Plans D. Amazon EC2 Auto Scaling instances
EC2 Instance Savings Plans
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.) A. EC2 includes operating system patch management. B. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM). C. EC2 has a 100% service level agreement (SLA). D. EC2 has a flexible, pay-as-you-go pricing model. E. EC2 has automatic storage cost optimization.
EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM). EC2 has a flexible, pay-as-you-go pricing model.
Which benefit of cloud computing gives a company the ability to deploy applications to users all over the world through a network of AWS Regions, Availability Zones, and edge locations? A. Economy of scale B. Global reach C. Agility D. High availability
Global reach
Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes? A. Pay-as-you-go pricing B. High availability C. Global reach D. Economies of scale
Economies of scale
Which option is an advantage of AWS Cloud computing that minimizes variable costs? A. High availability B. Economies of scale C. Global reach D. Agility
Economies of scale
Which component of the AWS global infrastructure does Amazon CloudFront use to speed up the delivery of content to users across the world? A. Amazon VPC B. Edge location C. Local Zone D. AWS Outposts connection
Edge location
Which component of the AWS global infrastructure provides low-latency access to content in multiple geographic areas by storing copies of data close to end users? A. AWS Regions B. Availability Zones C. Local Zones D. Edge locations
Edge locations
Which of the following does Amazon CloudFront use to distribute content to users around the world? A. Amazon VPC B. AWS Local Zones C. Edge locations D. Availability Zones
Edge locations
A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances.Which benefit of the AWS Cloud does this example illustrate? A. High availability B. Elasticity C. Reliability D. Global reach
Elasticity
A company wants the ability to accommodate peak application usage without purchasing equipment for on-premises data centers.Which AWS Cloud benefit is the company seeking? A. High availability B. Security C. Reliability D. Elasticity
Elasticity
An online retail company has seasonal sales spikes several times a year, primarily around holidays. Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season.Which advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.) A. Global footprint B. Elasticity C. AWS service quotas D. AWS shared responsibility model E. Pay-as-you-go pricing
Elasticity Pay-as-you-go pricing
Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries? A. Pay-as-you-go pricing B. Capacity forecasting C. Economies of scale D. Global reach
Global reach
Which of the following are advantages of moving from on premises to the AWS Cloud? (Choose two.) A. Trade variable expenses for capital expenses. B. Eliminate costs related to running and maintaining data centers. C. Benefit from massive economies of scale. D. Eliminate the need to tram IT staff. E. Gam the ability to reserve capacity for 7 years or more.
Eliminate costs related to running and maintaining data centers. Benefit from massive economies of scale.
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud? A. Elimination of expenses for running and maintaining data centers B. Price discounts that are identical to discounts from hardware providers C. Distribution of all operational controls to AWS D. Elimination of operational expenses
Elimination of expenses for running and maintaining data centers
What is the security best practice concerning sensitive data stored in Amazon S3? A. Enable cross-Region replication on the S3 bucket. B. Enable S3 server-side encryption on the S3 bucket. C. Configure AWS WAF to prevent unauthorized access to the S3 bucket. D. Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.
Enable S3 server-side encryption on the S3 bucket.
Which of the following is an AWS best practice for managing an AWS account root user? A. Keep the root user password with the security team. B. Enable multi-factor authentication (MFA) for the root user. C. Create an access key for the root user. D. Keep the root user password consistent for compliance purposes.
Enable multi-factor authentication (MFA) for the root user.
Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.) A. Secure the virtualization layer. B. Encrypt data and maintain data integrity. C. Patch the Amazon RDS operating system. D. Maintain identity and access management controls. E. Secure Availability Zones.
Encrypt data and maintain data integrity. Maintain identity and access management controls.
Which approach will enhance a user's security on AWS? A. Use Multi-AZ deployments with Amazon RDS. B. Create a hybrid architecture by using AWS Direct Connect. C. Monitor application-specific information with AWS X-Ray. D. Encrypt data by using AWS Key Management Service (AWS KMS).
Encrypt data by using AWS Key Management Service (AWS KMS).
Which task does AWS perform automatically? A. Encrypt data that is stored in Amazon DynamoDB. B. Patch Amazon EC2 instances. C. Encrypt user network traffic. D. Create TLS certificates for users' websites.
Encrypt data that is stored in Amazon DynamoDB.
A company uses Amazon WorkSpaces.Which task is the responsibility of AWS, according to the AWS shared responsibility model? A. Set up multi-factor authentication (MFA) for each WorkSpaces user account. B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces. C. Provide security for WorkSpaces user accounts through AWS Identity and Access Management (IAM). D. Configure AWS CloudTrail to log API calls and user activity.
Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.
Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model? A. Ensuring network connectivity from AWS to the internet B. Patching and fixing flaws within the AWS Cloud infrastructure C. Ensuring the physical security of cloud data centers D. Ensuring Amazon EBS volumes are backed up
Ensuring Amazon EBS volumes are backed up
A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the operating system of the server where the DB instance runs.What is the company's responsibility in this situation, according to the AWS shared responsibility model? A. Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system. B. Open a support case and request that AWS patch the DB instance operating system. C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for the DB instance. D. Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.
Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.
A company is using AWS Lambda functions to build an application.Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.) A. Patch the servers where the Lambda functions are deployed. B. Establish the IAM permissions that define who can run the Lambda functions. C. Write the code for the Lambda functions to define the application logic. D. Deploy Amazon EC2 instances to support the Lambda functions. E. Scale out the Lambda functions when the load increases.
Establish the IAM permissions that define who can run the Lambda functions. Write the code for the Lambda functions to define the application logic.
A company has two AWS accounts in an organization in AWS Organizations for consolidated billing. All of the company's AWS resources are hosted in one AWS Region.Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances running. Account B has not purchased any RIs and also has four EC2 instances running.Which statement is true regarding pricing for these eight instances? A. The eight instances will be charged as regular instances. B. Four instances will be charged as RIs, and four will be charged as regular instances. C. Five instances will be charged as RIs, and three will be charged as regular instances. D. The eight instances will be charged as RIs.
Five instances will be charged as RIs, and three will be charged as regular instances.
Which of the following are aspects of the AWS shared responsibility model? (Choose two.) A. Configuration management of infrastructure devices is the customer's responsibility. B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms. C. AWS is responsible for protecting the physical cloud infrastructure. D. AWS is responsible for training the customer's employees on AWS products and services. E. For Amazon EC2, AWS is responsible for maintaining the guest operating system.
For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms. AWS is responsible for protecting the physical cloud infrastructure.
A company wants to deploy a highly available third-party firewall appliance.Which AWS service or resource will support this task? A. AWS WAF B. AWS Security Hub C. AWS Firewall Manager D. Gateway Load Balancer
Gateway Load Balancer
Which task can a user complete by using AWS Identity and Access Management (IAM)? A. Validate JSON syntax from an application configuration file. B. Analyze logs from an Amazon API Gateway call. C. Filter traffic to or from an Amazon EC2 instance. D. Grant permissions to applications that run on Amazon EC2 instances.
Grant permissions to applications that run on Amazon EC2 instances.
Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime? A. Agility B. Elasticity C. Scalability D. High availability
High availability
AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users.This describes which advantage of the AWS Cloud? A. Launch globally in minutes B. Increase speed and agility C. High economies of scale D. No guessing about compute capacity
High economies of scale
Which of the following are advantages of the AWS Cloud? (Choose two.) A. Trade variable expenses for capital expenses B. High economies of scale C. Launch globally in minutes D. Focus on managing hardware infrastructure E. Over provision to ensure capacity
High economies of scale Launch globally in minutes
Which AWS Cloud deployment model uses AWS Outposts as part of the application deployment infrastructure? A. On-premises B. Serverless C. Cloud native D. Hybrid
Hybrid
Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices? A. AWS Shield B. AWS Trusted Advisor C. Amazon Inspector D. IAM credential report
IAM credential report
A company's web application requires AWS credentials and authorizations to use an AWS service.Which IAM entity should the company use as best practice? A. IAM role B. IAM user C. IAM group D. IAM multi-factor authentication (MFA)
IAM role
A system administrator wants to allow IT department users to access the AWS CLI.What is the MINIMUM credential that is required to achieve this goal? A. Multi-factor authentication (MFA) code B. Key pair C. IAM user name and password D. AWS access keys
IAM user name and password
A company needs an AWS design solution for a distributed system. The system's components need to be set up so that one system component cannot negatively impact another component.Which AWS architectural best practice will meet this requirement? A. Use request throttling B. Use a stateful service C. Implement automatic data backups D. Implement loose coupling
Implement loose coupling
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan? A. Integrate functional testing as part of AWS deployment. B. Use automation to deploy changes. C. Deploy the application to multiple locations. D. Implement loosely coupled dependencies.
Implement loosely coupled dependencies
Which of the following are benefits of Amazon EC2 Auto Scaling? (Choose two.) A. Improved health and availability of applications B. Reduced network latency C. Optimized performance and costs D. Automated snapshots of data E. Cross-Region Replication
Improved health and availability of applications Optimized performance and costs
A company that uses AWS needs to transfer 2 TB of data.Which type of transfer of that data would result in no cost for the company? A. Inbound data transfer from the internet B. Outbound data transfer to the internet C. Data transfer between AWS Regions D. Data transfer between Availability Zones
Inbound data transfer from the internet
A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks.Which benefit of the AWS Cloud does this scenario demonstrate? A. Cost savings B. Improved operational resilience C. Increased business agility D. Enhanced security
Increased business agility
What is a benefit of moving to the AWS Cloud in terms of improving time to market? A. Decreased deployment speed B. Increased application security C. Increased business agility D. Increased backup capabilities
Increased business agility
A company is migrating to the AWS Cloud instead of running its infrastructure on premises.Which of the following are advantages of this migration? (Choose two.) A. Elimination of the need to perform security auditing B. Increased global reach and agility C. Ability to deploy globally in minutes D. Elimination of the cost of IT staff members E. Redundancy by default for all compute services
Increased global reach and agility Ability to deploy globally in minutes
A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud.Which of the following are benefits of building this app in the AWS Cloud? (Choose two.) A. A large, upfront capital expense and low variable expenses B. Increased speed for trying out new projects C. Complete control over the physical security of the infrastructure D. Flexibility to scale up in minutes as the application becomes popular E. Ability to pick the specific data centers that will host the application servers
Increased speed for trying out new projects Flexibility to scale up in minutes as the application becomes popular
Which of the following are economic advantages of the AWS Cloud? (Choose two.) A. Increased workforce productivity B. Decreased need to encrypt user data C. Manual compliance audits D. Simplified total cost of ownership (TCO) accounting E. Faster product launches
Increased workforce productivity Faster product launches
Which task is an AWS responsibility when a workload is running in Amazon RDS? A. Creating the database table B. Updating the database schema C. Installing the database engine D. Dropping the database records
Installing the database engine
How does consolidated billing help reduce costs for a company that has multiple AWS accounts? A. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner. B. It offers an additional 5% discount on purchases of All Upfront Reserved Instances. C. It provides a simplified billing invoice that the company can process more quickly than a standard invoice. D. It gives AWS resellers the ability to bill their customers for usage.
It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.
A large organization has a single AWS account.What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.) A. It allows for administrative isolation between different workloads. B. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console. C. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive. D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account. E. Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.
It allows for administrative isolation between different workloads. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.
What type of database is Amazon DynamoDB? A. In-memory B. Relational C. Key-value D. Graph
Key-value
A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores.How can the company meet this requirement in the AWS Cloud? A. Launch an Amazon EC2 instance with default tenancy. B. Launch an Amazon EC2 instance on a Dedicated Host. C. Create an On-Demand Capacity Reservation. D. Purchase Dedicated Reserved Instances.
Launch an Amazon EC2 instance on a Dedicated Host.
Which of the following is a recommended design principle of the AWS Well-Architected Framework? A. Reduce downtime by making infrastructure changes infrequently and in large increments. B. Invest the time to configure infrastructure manually. C. Learn to improve from operational failures. D. Use monolithic application design for centralization.
Learn to improve from operational failures.
A company is building a new application on AWS. The company needs the application to remain available if an individual application component fails.Which design principle should the company use to meet this requirement? A. Disposable resources B. Automation C. Rightsizing D. Loose coupling
Loose coupling
Which AWS design principle emphasizes the reduction of interdependencies between components of an application? A. Scalability B. Loose coupling C. Automation D. Caching
Loose coupling
Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Choose two.) A. Minimize upfront design B. Loose coupling C. Disposable resources D. Server design and concurrency E. Minimal viable product
Loose coupling Disposable resources
Which of the following is an architectural design principle of the AWS Well-Architected Framework? A. Loosely couple components B. Build monolithic systems C. Scale vertically, not horizontally D. Use third-party software
Loosely couple components
Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud? A. Use a monolithic design. B. Design for automation. C. Design for single points of failure. D. Loosely couple components.
Loosely couple components.
Which duty is a responsibility of AWS under the AWS shared responsibility model? A. Identity and access management B. Server-side encryption (SSE) C. Firewall configuration D. Maintaining physical hardware
Maintaining physical hardware
Which of the following are AWS Cloud design principles? (Choose two.) A. Pay for compute resources in advance B. Make data driven decisions to determine cloud architectural design C. Emphasize manual processes to allow for changes D. Test systems at production scale E. Refine operational procedures infrequently
Make data driven decisions to determine cloud architectural design Test systems at production scale
Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud? A. Go global in minutes. B. Make frequent, small, reversible changes. C. Implement a strong foundation of identity and access management. D. Stop spending money on hardware infrastructure for data center operations.
Make frequent, small, reversible changes.
According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database? A. Manage connections to the database B. Install Microsoft SQL Server C. Design encryption-at-rest strategies D. Apply minor database patches
Manage connections to the database
A company is using Amazon DynamoDB.Which task is the company's responsibility, according to the AWS shared responsibility model? A. Patch the operating system. B. Provision hosts. C. Manage database access permissions. D. Secure the operating system.
Manage database access permissions.
Which activity can companies complete by using AWS Organizations? A. Troubleshoot the performance of applications. B. Manage service control policies (SCPs). C. Migrate applications to microservices. D. Monitor the performance of applications.
Manage service control policies (SCPs).
What is a benefit of using AWS serverless computing? A. Application deployment and management are not required. B. Application security will be fully managed by AWS. C. Monitoring and logging are not needed. D. Management of infrastructure is offloaded to AWS.
Management of infrastructure is offloaded to AWS.
Which task is a customer's responsibility, according to the AWS shared responsibility model? A. Management of the guest operating systems B. Maintenance of the configuration of infrastructure devices C. Management of the host operating systems and virtualization D. Maintenance of the software that powers Availability Zones
Management of the guest operating systems
Which databases are available on Amazon RDS? (Choose two.) A. Sybase B. Microsoft SQL Server C. IBM Db2 D. MongoDB E. PostgreSQL
Microsoft SQL Server PostgreSQL
A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage.Which set of tasks would meet this requirement? A. Add an Application Load Balancer in front of the EC2 instance. B. Configure EC2 Auto Recovery to move the instance to another Availability Zone. C. Migrate to Amazon RDS and enable Multi-AZ. D. Enable termination protection for the EC2 instance to avoid outages.
Migrate to Amazon RDS and enable Multi-AZ.
A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes.Which solution will meet these requirements? A. Create a read replica of the DB instance. B. Create a template of the DB instance by using AWS CloudFormation. C. Take frequent snapshots of the DB instance. Store the snapshots in Amazon S3. D. Modify the DB instance to be a Multi-AZ deployment.
Modify the DB instance to be a Multi-AZ deployment.
Which of the following are security principles in the AWS Well-Architected Framework? (Choose two.) A. Analyze and attribute expenditures. B. Monitor, alert, and audit actions and changes to AWS resources. C. Deploy globally in minutes. D. Protect data in transit and at rest. E. Perform operations as code
Monitor, alert, and audit actions and changes to AWS resources. Protect data in transit and at rest.
A company is running Amazon EC2 instances in a private subnet in a VPC.Which AWS service or feature can provide the EC2 instances with network connections to the internet? A. Gateway endpoint B. NAT gateway C. Network Load Balancer D. Amazon Route 53
NAT gateway
Which AWS tool or feature acts as a VPC firewall at the subnet level? A. Security group B. Network ACL C. Traffic Mirroring D. Internet gateway
Network ACL
A cloud practitioner needs to apply security rules to a subnet for Amazon EC2 instances.Which AWS service or feature can the cloud practitioner use to meet this requirement? A. AWS WAF B. Network ACLs C. Security groups D. AWS Managed Services (AMS)
Network ACLs
Which AWS service or feature can a company use to apply security rules to a subnet for Amazon EC2 instances? A. AWS WAF B. AWS Shield C. Network ACLs D. Security groups
Network ACLs
Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a VPC? A. Network ACLs B. Security groups C. AWS Identity and Access Management (IAM) D. AWS WAF
Network ACLs
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.) A. High availability B. Performance efficiency C. Cost optimization D. Going global in minutes E. Continuous development
Performance efficiency Cost optimization
A company needs stateless network filtering for its VPC.Which AWS service, tool, or feature will meet this requirement? A. AWS PrivateLink B. Security group C. Network access control list (ACL) D. AWS WAF
Network access control list (ACL)
Which AWS tool acts as a firewall to control traffic in and out of subnets within a VPC? A. Security group B. Route table C. VPC endpoint D. Network access control list (ACL)
Network access control list (ACL)
A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.Which AWS service or feature will meet this requirement? A. Routing tables B. Network access control lists (network ACLs) C. Security groups D. Amazon GuardDuty
Network access control lists (network ACLs)
According to the AWS shared responsibility model which of the following are AWS responsibilities? (Choose two.) A. Network infrastructure and virtualization of infrastructure B. Security of application data C. Guest operating systems D. Physical security of hardware E. Credentials and policies
Network infrastructure and virtualization of infrastructure Physical security of hardware
A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purchasing option that requires no long-term commitment or upfront payment.Which instance purchasing option will meet these requirements MOST cost-effectively? A. On-Demand Instances B. Spot Instances C. Dedicated Hosts D. Reserved Instances
On-Demand Instances
Which option is the default pricing model for Amazon EC2 instances? A. On-Demand Instances B. Savings Plans C. Spot instances D. Reserved Instances
On-Demand Instances
What is an Availability Zone? A. A location where users can deploy compute storage, database and other select AWS services where no AWS Region currently exists B. One or more discrete data centers with redundant power, networking and connectivity C. One or more clusters of servers where new workloads can be deployed D. A fast content delivery network (CDN) service that securely delivers data videos applications and APIs to users globally
One or more discrete data centers with redundant power, networking and connectivity
A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption.Which action should the user take? A. Contact the dedicated AWS technical account manager (TAM). B. Contact the dedicated AWS Concierge Support team. C. Open a business-critical system down support case. D. Open a production system down support case.
Open a production system down support case.
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances? A. Database backups B. Database software patches C. Operating system patches D. Operating system installations.
Operating system installations.
A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes.Which pillar of the AWS Well-Architected Framework does this scenario represent? A. Security B. Performance efficiency C. Cost optimization D. Operational excellence
Operational excellence
A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible increments.Which pillar of the AWS Well-Architected Framework does this design support? A. Security B. Performance efficiency C. Operational excellence D. Reliability
Operational excellence
A company wants to continuously improve processes and procedures to deliver business value.Which pillar of the AWS Well-Architected Framework does this goal represent? A. Performance efficiency B. Operational excellence C. Reliability D. Sustainability
Operational excellence
A company wants to use the AWS Cloud to define its entire infrastructure as code. The company wants to limit human error and activate consistent responses to events.Which pillar of the AWS Well-Architected Framework does this plan support? A. Security B. Operational excellence C. Cost optimization D. Reliability
Operational excellence
Which of the following is one of the pillars of the AWS Well-Architected Framework? A. Efficiency and redundancy B. High availability C. Operational excellence D. Business optimization
Operational excellence
Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority? A. Cost optimization B. Reliability C. Performance efficiency D. Operational excellence
Operational excellence
What are the five pillars of the AWS Well-Architected Framework? A. Encryption, documentation, speed, hybrid design, and cost optimization B. Containerization, cost margins, globalization, marketplace, and developer operations C. Network, compute, storage, security, and developer operations D. Operational excellence, reliability, performance efficiency, security, and cost optimization
Operational excellence, reliability, performance efficiency, security, and cost optimization
Which of the following are benefits of migrating to the AWS Cloud? (Choose two.) A. Operational resilience B. Discounts for products on Amazon.com C. Business agility D. Business excellence E. Increased staff retention
Operational resilience and Business agility
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.) A. Patch AWS network devices. B. Set user password rules. C. Provide physical security for compute resources. D. Configure security groups. E. Patch the operating system of an Amazon EC2 instance.
Patch AWS network devices. Provide physical security for compute resources.
Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.) A. Physical and environmental controls B. Patch management C. Cloud awareness and training D. Zone security E. Application data encryption
Patch management Cloud awareness and training
Which task is the responsibility of the customer according to the AWS shared responsibility model? A. Maintain the security of the hardware that runs Amazon EC2 instances. B. Patch the guest operating system of Amazon EC2 instances. C. Protect the security of the AWS global infrastructure. D. Patch Amazon RDS software.
Patch the guest operating system of Amazon EC2 instances.
A company is using Amazon EC2 instances.Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.) A. Maintain the network infrastructure. B. Patch the guest operating system. C. Configure a security group on deployed EC2 instances. D. Provide physical security for the underlying hardware of the EC2 instances. E. Manage the underlying hypervisor.
Patch the guest operating system. Configure a security group on deployed EC2 instances.
A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget on cloud resources only as the company uses the resources.Which advantage of the AWS Cloud matches the company's requirements? A. Reliability B. Global reach C. Economies of scale D. Pay-as-you-go pricing
Pay-as-you-go pricing
Management at a large company wants to avoid long-term contracts and is interested in AWS to move from fixed costs to variable costs.What is the value proposition of AWS for this company? A. Economy of scale B. Pay-as-you-go pricing C. Volume discounts D. Cost optimization
Pay-as-you-go pricing
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses? A. High availability B. Economies of scale C. Pay-as-you-go pricing D. Global reach
Pay-as-you-go pricing
Which feature of the AWS Cloud gives users the ability to pay based on current needs rather than forecasted needs? A. AWS Budgets B. Pay-as-you-go pricing C. Volume discounts D. Savings Plans
Pay-as-you-go pricing
An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost- effective manner.Which AWS Cloud features will help the company meet this requirement? (Choose two.) A. Cross-Region workload deployment B. Pay-as-you-go pricing C. Built-in AWS CloudTrail audit capabilities D. Auto Scaling policies E. Centralized logging
Pay-as-you-go pricing Auto Scaling policies
Which task is the responsibility of AWS, according to the AWS shared responsibility model? A. Apply guest operating system patches to Amazon EC2 instances. B. Provide monitoring of human resources information management (HRIM) systems. C. Perform automated backups of Amazon RDS instances. D. Optimize the costs of running AWS services.
Perform automated backups of Amazon RDS instances.
How can an AWS user conduct security assessments of Amazon EC2 instances, NAT gateways, and Elastic Load Balancers in a way that is approved by AWS? A. Flood a target with requests. B. Use Amazon Inspector. C. Perform penetration testing. D. Use the AWS Service Health Dashboard.
Perform penetration testing.
A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration. Which pillar of the AWS Well-Architected Framework does this plan represent? A. Security B. Performance efficiency C. Operational excellence D. Reliability
Performance efficiency
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.) A. Resource scalability B. Performance efficiency C. System elasticity D. Agile development E. Operational excellence
Performance efficiency Operational excellence
A company is hosting a web application in a Docker container on Amazon EC2.AWS is responsible for which of the following tasks? A. Scaling the web application and services developed with Docker B. Provisioning or scheduling containers to run on clusters and maintain their availability C. Performing hardware maintenance in the AWS facilities that run the AWS Cloud D. Managing the guest operating system, including updates and security patches
Performing hardware maintenance in the AWS facilities that run the AWS Cloud
Which controls does the customer fully inherit from AWS in the AWS shared responsibility model? A. Patch management controls B. Awareness and training controls C. Physical and environmental controls D. Configuration management controls
Physical and environmental controls
Which of the following is entirely the responsibility of AWS, according to the AWS snared responsibility model? A. Security awareness and training B. Development of an IAM password policy C. Patching of the guest operating system D. Physical and environmental controls
Physical and environmental controls
Which of the following is a method for building a highly available application on AWS? A. Place an Independent copy of the application in two or more Availability Zones. B. Place codependent components of the application in two or more Availability Zones C. Run one version of the application in one Availability Zone and run an earlier version of the application in a second Availability Zone. D. Deploy two copies of the application in a single Availability Zone.
Place an Independent copy of the application in two or more Availability Zones.
A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers.How can the company meet this requirement? A. Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection. B. Place the EC2 instances in two separate Availability Zones within the same AWS Region. C. Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection. D. Place both EC2 instances in a placement group for dedicated bandwidth.
Place the EC2 instances in two separate Availability Zones within the same AWS Region.
A company stores data in an Amazon S3 bucket.Which task is the responsibility of AWS? A. Configure an S3 Lifecycle policy. B. Activate S3 Versioning. C. Configure S3 bucket policies. D. Protect the infrastructure that supports S3 storage.
Protect the infrastructure that supports S3 storage.
A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS.Which security measures fall under the responsibility of AWS? (Choose two.) A. Running a virus scan on EC2 instances B. Protecting against IP spoofing and packet sniffing C. Installing the latest security patches on the RDS instance D. Encrypting communication between the EC2 instances and the Elastic Load Balancer E. Configuring a security group and a network access control list (NACL) for EC2 instances
Protecting against IP spoofing and packet sniffing Installing the latest security patches on the RDS instance
What can a user accomplish using AWS CloudTrail? A. Generate an IAM user credentials report. B. Record API calls made to AWS services. C. Assess the compliance of AWS resource configurations with policies and guidelines. D. Ensure that Amazon EC2 instances are patched with the latest security updates.
Record API calls made to AWS services.
Which of the following is a benefit of using an AWS managed service? A. Reduced operational overhead for a company's IT staff B. Increased fixed costs that can be predicted by a finance team C. Removal of the need to have a backup strategy D. Removal of the need to follow compliance standards
Reduced operational overhead for a company's IT staff
Which benefits does a company gain when the company moves from on-premises IT architecture to the AWS Cloud? (Choose two.) A. Reduced or eliminated tasks for hardware troubleshooting, capacity planning, and procurement B. Elimination of the need for trained IT staff C. Automatic security configuration of all applications that are migrated to the cloud D. Elimination of the need for disaster recovery planning E. Faster deployment of new features and applications
Reduced or eliminated tasks for hardware troubleshooting, capacity planning, and procurement Faster deployment of new features and applications
A company wants to protect its AWS Cloud information systems and assets while performing risk assessment and mitigation tasksWhich pillar of the AWS Well Architected framework is supported by these goals? A. Reliability B. Security C. Operational excellence D. Performance efficiency
Security
A company simulates workflows to review and validate that all processes are effective and that staff are familiar with the processes.Which design principle of the AWS Well-Architected Framework is the company following with this practice? A. Perform operations as code. B. Refine operation procedures frequently. C. Make frequent, small, reversible changes. D. Structure the company to support business outcomes.
Refine operation procedures frequently.
Which of the following are characteristics of AWS Regions and Availability Zones? (Choose two.) A. Regions bring AWS services to on-premises facilities. B. Regions consist of multiple Availability Zones. C. An Availability Zone contains several Regions. D. Regions are within 100 km (60 miles) of each other. E. Regions are located around the world.
Regions consist of multiple Availability Zones. Regions are located around the world.
A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy applications that run onAmazon EC2 instances.Which pillar of the AWS Well-Architected Framework does this action cover? A. Security B. Performance efficiency C. Operational excellence D. Reliability
Reliability
A company is designing workloads in the AWS Cloud. The company wants the workloads to perform their intended function correctly and consistently throughout their lifecycle.Which pillar of the AWS Well-Architected Framework does this goal represent? A. Operational excellence B. Security C. Reliability D. Performance efficiency
Reliability
A company wants to increase its ability to recover its infrastructure in the case of a natural disaster.Which pillar of the AWS Well-Architected Framework does this ability represent? A. Cost optimization B. Performance efficiency C. Reliability D. Security
Reliability
A company wants to launch its workload on AWS and requires the system to automatically recover from failure.Which pillar of the AWS Well-Architected Framework includes this requirement? A. Cost optimization B. Operational excellence C. Performance efficiency D. Reliability
Reliability
A gaming company wants to move its on-premises environment to AWS. The company needs its resources to be highly available.Which benefit does the AWS Cloud provide to meet this requirement? A. Reliability B. The AWS shared responsibility model C. Security D. Agility
Reliability
A system automatically recovers from failure when a company launches its workload on the AWS Cloud services platform.Which pillar of the AWS Well-Architected Framework does this situation demonstrate? A. Cost optimization B. Operational excellence C. Performance efficiency D. Reliability
Reliability
Which pillar of the AWS Well-Architected Framework is focused on the ability of a workload to perform its intended function correctly and consistently at the expected time? A. Performance efficiency B. Operational excellence C. Reliability D. Security
Reliability
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand? A. Security B. Reliability C. Performance efficiency D. Cost optimization
Reliability
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.) A. Availability B. Reliability C. Scalability D. Responsive design E. Operational excellence
Reliability Operational excellence
A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost effectively? A. Reserved Instances B. Spot Instances C. On Demand Instances D. Dedicated Hosts
Reserved Instances
An application that is hosted on Amazon EC2 has a steady and consistent workload. The application will operate for at least 1 year.What is the MOST cost-effective instance purchasing option to meet these requirements? A. Spot Instances B. Reserved Instances C. On-Demand Instances D. Dedicated Hosts
Reserved Instances
Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.) A. Resource configuration management B. Network data integrity C. Employee awareness and training D. Physical and environmental security E. Replacement and disposal of disk drives
Resource configuration management Employee awareness and training
Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand? A. Speed of innovation B. Resource elasticity C. Decoupled architecture D. Global deployment
Resource elasticity
Which of the following is a cost efficiency principle related to the AWS Cloud? A. Right size services based on capacity requirements B. Use the Billing Dashboard to access information about monthly bills C. Use AWS Organizations to combine the expenses of multiple accounts into a single bill D. Tag all AWS resources
Right size services based on capacity requirements
A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.What can the company do to meet this requirement? A. Use AWS Key Management Service (AWS KMS). B. Use multiple AWS accounts and consolidated billing. C. Use AWS CloudFormation to deploy the infrastructure. D. Rightsize all the EC2 instances that are used in the deployment.
Rightsize all the EC2 instances that are used in the deployment.
A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings.Which cloud concept does this analysis demonstrate? A. Auto scaling B. Rightsizing C. Load balancing D. High availability
Rightsizing
A company is running a workload in the AWS Cloud.Which AWS best practice ensures the MOST cost-effective architecture for the workload? A. Loose coupling B. Rightsizing C. Caching D.
Rightsizing
Which action will help increase security in the AWS Cloud? A. Enable programmatic access for all IAM users. B. Use IAM users instead of IAM roles to delegate permissions. C. Rotate access keys on a reoccurring basis. D. Use inline policies instead of customer managed policies.
Rotate access keys on a reoccurring basis.
Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Choose two.) A. Use the AWS account root user tor daily access. B. Use access keys and secret access keys on Amazon EC2. C. Rotate credentials on a regular basis. D. Create a shared set of access keys for system administrators. E. Configure multi-factor authentication (MFA).
Rotate credentials on a regular basis. Configure multi-factor authentication (MFA).
What should a user do if the user loses an IAM secret access key? A. Retrieve the secret access key by using the IAM console. B. Create a new user with a new access key and a new secret access key. C. Rotate the secret access key. D. Request a new secret access key from AWS Support.
Rotate the secret access key.
A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data daily.Which S3 storage class will meet those requirements MOST cost-effectively? A. S3 Standard B. S3 Glacier Deep Archive C. S3 One Zone-Infrequent Access (S3 One Zone-IA) D. S3 Intelligent-Tiering
S3 Intelligent-Tiering
A company needs to use Amazon S3 to store audio files that are each 5 megabytes in size. The company will rarely access the files, but the company must be able to retrieve the files immediately.Which S3 storage class will meet these requirements MOST cost-effectively? A. S3 Standard B. S3 Standard-Infrequent Access (S3 Standard-IA) C. S3 Glacier Flexible Retrieval D. S3 Glacier Deep Archive
S3 Standard-Infrequent Access (S3 Standard-IA)
A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated. The data needs to be available for retrieval within seconds.Which S3 storage class meets these requirements MOST cost-effectively? A. S3 Standard B. S3 One Zone-Infrequent Access (S3 One Zone-IA) C. S3 Standard-Infrequent Access (S3 Standard-IA) D. S3 Glacier
S3 Standard-Infrequent Access (S3 Standard-IA)
A company with many remote global locations needs to upload 100 GB of data daily to its Amazon S3 data lake. The remote locations experience high latency uploading data and need to find a solution to improve performance.Which AWS service or feature will meet these requirements? A. AWS Snowball B. AWS Storage Gateway C. AWS Database Migration Service (AWS DMS) D. S3 Transfer Acceleration
S3 Transfer Acceleration
Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3? A. S3 Cross-Region Replication B. S3 Transfer Acceleration C. S3 Event Notifications D. S3 Standard-Infrequent Access (S3 Standard-IA)
S3 Transfer Acceleration
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted.Which S3 feature should the company turn on to meet this requirement? A. Server access logging B. S3 Versioning C. S3 Lifecycle rules D. Encryption in transit and at rest
S3 Versioning
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.Which S3 feature should the company use to meet these requirements? A. S3 Lifecycle rules B. S3 Versioning C. S3 bucket policies D. S3 server-side encryption
S3 Versioning
A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next12 months.What is the MOST cost-effective instance purchasing option that meets these requirements? A. Spot Instances B. Savings Plans C. Dedicated Hosts D. On-Demand Instances
Savings Plans
A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture.What can the company do to meet this requirement? A. Scale vertically to a larger EC2 instance size. B. Scale horizontally across multiple Availability Zones. C. Purchase an EC2 Dedicated Instance. D. Change the EC2 instance family to a compute optimized instance.
Scale horizontally across multiple Availability Zones.
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud? A. Scale the number of EC2 instances in or out automatically, based on demand. B. Use serverless EC2 instances. C. Scale the size of EC2 instances up or down automatically, based on demand. D. Transfer unused CPU resources between EC2 instances.
Scale the number of EC2 instances in or out automatically, based on demand.
Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar? A. Security B. Operational excellence C. Performance efficiency D. Cost optimization
Security
Which AWS service or feature acts as a firewall for Amazon EC2 instances? A. Network ACL B. Elastic network interface C. Amazon VPC D. Security group
Security group
Which AWS service or tool is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic? A. AWS WAF B. AWS Shield C. Network access control list (ACL) D. Security group
Security group
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege.Which AWS service or feature should the company use to enforce this principle? A. Security groups B. AWS Shield C. AWS Global Accelerator D. AWS Direct Connect gateway
Security groups
A company needs to apply security rules to specific Amazon EC2 instances.Which AWS service or feature provides this functionality? A. AWS WAF B. Network ACLs C. Amazon VPC D. Security groups
Security groups
A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network.Which AWS service or feature should the company use to limit network traffic directly to its RDS instance? A. Network ACLs B. Security groups C. AWS WAF D. Amazon GuardDuty
Security groups
Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances? A. Security groups B. Amazon Route 53 C. AWS Direct Connect D. Amazon VPC
Security groups
Which of the following acts as an instance-level firewall to control inbound and outbound access? A. Network access control list B. Security groups C. AWS Trusted Advisor D. Virtual private gateways
Security groups
Which AWS services or features can control VPC traffic? (Choose two.) A. Security groups B. AWS Direct Connect C. Amazon GuardDuty D. Network ACLs E. Amazon Connect
Security groups Network ACLs
Which AWS network services or features allow CIDR block notation when providing an IP address range? (Choose two.) A. Security groups B. Amazon Machine Image (AMI) C. Network access control list (network ACL) D. AWS Budgets E. Amazon Elastic Block Store (Amazon EBS)
Security groups Network access control list (network ACL)
A company is running an Amazon EC2 instance in a VPC.Which of the following can the company use to route and filter incoming network requests for the EC2 instance? A. Route tables and web application firewalls B. Security groups and route tables C. Security groups and a network intrusion system D. Route tables and AWS Shield
Security groups and route tables
A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.Which of the following is the company responsible for managing, according to the AWS shared responsibility model? A. EC2 hypervisor B. Security patching of the guest operating system C. Network connectivity of the host server D. Uptime service level agreement (SLA) for the EC2 instances
Security patching of the guest operating system
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.) A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) B. Server-side encryption with AWS KMS managed keys (SSE-KMS) C. TLS D. SSL E. Transparent Data Encryption (TDE)
Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) Server-side encryption with AWS KMS managed keys (SSE-KMS)
Which AWS service or tool should a company use to centrally request and track service limit increases? A. AWS Config B. Service Quotas C. AWS Service Catalog D. AWS Budgets
Service Quotas
A company has an application that uses AWS services. During scaling events, the company wants to keep application usage within AWS service quotas.Which AWS services or tools can report on the quotas so that the company can improve the reliability of the application? (Choose two.) A. Service Quotas console B. AWS Trusted Advisor C. AWS Systems Manager D. AWS Shield E. AWS Cost Explorer
Service Quotas console AWS Trusted Advisor
A global media company uses AWS Organizations to manage multiple AWS accounts.Which AWS service or feature can the company use to limit the access to AWS services for member accounts? A. AWS Identity and Access Management (IAM) B. Service control policies (SCPs) C. Organizational units (OUs) D. Access control lists (ACLs)
Service control policies (SCPs)
Which task can a company complete by using AWS Organizations? A. Track application deployment statuses globally. B. Remove unused and underutilized AWS resources across all accounts. C. Activate DDoS protection across all accounts. D. Share pre-purchased Amazon EC2 resources across accounts.
Share pre-purchased Amazon EC2 resources across accounts.
Which of the following describes an AWS Region? A. Specific location within a geographic area that provides high availability B. Set of data centers spanning multiple countries C. A global picture of a user's cloud computing environment D. A collection of databases that can be accessed from a specific geographic area only
Specific location within a geographic area that provides high availability
A company is running multiple workloads in the AWS Cloud and recently began investigating ways to reduce costs. The company is already running fault-tolerant workloads on Amazon EC2 that perform periodic checkpoints in case of an outage.Which AWS service or pricing model can provide the GREATEST cost savings? A. Capacity Reservations B. Amazon Lightsail C. Spot Instances D. Dedicated Hosts
Spot Instances
A company plans to move its test workloads to Amazon EC2. The test workloads can be interrupted and are not required to start at a particular time.Which EC2 instance purchasing option is MOST cost-effective for this use case? A. On-Demand Instances: B. Spot Instances C. Reserved Instances D. Dedicated Hosts
Spot Instances
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements? A. Reserved Instances B. Spot Instances C. On-Demand Instances D. Dedicated Instances
Spot Instances
A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be interrupted.Which EC2 instance type will meet these requirements? A. Spot Instances B. On-Demand Instances C. Reserved Instances D. Dedicated Instances
Spot Instances
A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.Which instance purchasing option will meet these requirements MOST cost-effectively? A. Spot Instances B. Reserved Instances C. Dedicated Hosts D. On-Demand Instances
Spot Instances
A company wants to design a reliable web application that is hosted on Amazon EC2.Which approach will achieve this goal? A. Launch large EC2 instances in the same Availability Zone B. Spread EC2 instances across more than one security group C. Spread EC2 instances across more than one Availability Zone. D. Use an Amazon Machine Image (AMI) from AWS Marketplace.
Spread EC2 instances across more than one Availability Zone.
A company needs an Amazon EC2 instance for a rightsized database server that must run constantly for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively? A. Standard Reserved Instance B. Convertible Reserved Instance C. On-Demand Instance D. Spot Instance
Standard Reserved Instance
A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively? A. Standard Reserved Instances B. On-Demand Instances C. Spot Instances D. Convertible Reserved Instances
Standard Reserved Instances
Which of the following are design principles of the reliability pillar of the AWS Well-Architected Framework? (Choose two.) A. Perform operations as code. B. Stop guessing capacity. C. Make changes to infrastructure by using automation. D. Use build and deployment management systems. E. Make changes to infrastructure by using automation.
Stop guessing capacity. Make changes to infrastructure by using automation.
Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources? A. Objects; access control lists (ACLs) B. Subnets; internet gateways C. Access policies; buckets D. Groups; roles
Subnets; internet gateways
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations.What should the user do to meet this requirement? A. Use AWS Secrets Manager. B. Tag the objects in the S3 bucket. C. Use security groups. D. Use network ACLs.
Tag the objects in the S3 bucket.
A company runs an application in the AWS Cloud. The levels of traffic to the application vary throughout the week. The company wants to increase the reliability of its application at all times, even during times of high traffic.Which combination of steps will meet this requirement? (Choose two.) A. Test recovery procedures. B. Purchase instances weekly based on the previous week's high traffic points. C. Handle software failures automatically. D. Scale the application vertically. E. Make all changes in the environment manually.
Test recovery procedures. Handle software failures automatically.
Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework? A. Vertical scaling B. Manual failure recovery C. Testing recovery procedures D. Changing infrastructure manually
Testing recovery procedures
A company is using AWS Identity and Access Management (IAM).Who can manage the access keys of the AWS account root user? A. IAM users in the same account that have been granted permission B. IAM roles in any account that have been granted permission C. IAM users and roles that have been granted permission D. The AWS account owner
The AWS account owner
Who can create and manage access keys for an AWS account root user? A. The AWS account owner B. An IAM user that has administrator permissions C. IAM users within a designated group D. An IAM user that has the required role
The AWS account owner
How does the AWS global infrastructure offer high availability and fault tolerance to its users? A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and are interconnected with low-latency networks and redundant power supplies. B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location. C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions. D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.
The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.
Which of the following is a cloud benefit that AWS offers to its users? A. The ability to configure AWS data center hypervisors B. The ability to purchase hardware in advance of increased traffic C. The ability to deploy to AWS on a global scale D. Compliance audits for user IT environments
The ability to deploy to AWS on a global scale
Which benefit does Amazon Rekognition provide? A. The ability to place watermarks on images B. The ability to detect objects that appear in pictures C. The ability to resize millions of images automatically D. The ability to bid on object detection jobs
The ability to detect objects that appear in pictures
Which of the following is a benefit of operating in the AWS Cloud? A. The ability to migrate on-premises network devices to the AWS Cloud B. The ability to expand compute, storage, and memory when needed C. The ability to host custom hardware in the AWS Cloud D. The ability to customize the underlying hypervisor layer for Amazon EC2
The ability to expand compute, storage, and memory when needed
Elasticity in the AWS Cloud refers to which of the following? (Choose two.) A. How quickly an Amazon EC2 instance can be restarted B. The ability to rightsize resources as demand shifts C. The maximum amount of RAM an Amazon EC2 instance can use D. The pay-as-you-go billing model E. How easily resources can be procured when they are needed
The ability to rightsize resources as demand shifts How easily resources can be procured when they are needed
Which of the following are advantages of moving to the AWS Cloud? (Choose two.) A. The ability to turn over the responsibility for all security to AWS B. The ability to use the pay as you go model C. The ability to have full control over the physical infrastructure D. No longer having to guess what capacity will be required E. No longer worrying about users access controls
The ability to use the pay as you go model No longer having to guess what capacity will be required
Which of the following are characteristics of a serverless application that runs in the AWS Cloud? (Choose two.) A. Users must manually configure Amazon EC2 instances. B. Users have a choice of operating systems. C. The application has built-in fault tolerance. D. Users can run Amazon EC2 Spot Instances. E. The application can scale based on demand.
The application has built-in fault tolerance. The application can scale based on demand.
Which task requires the use of AWS account root user credentials? A. The deletion of IAM users B. The change to a different AWS Support plan C. The creation of an organization in AWS Organizations D. The deletion of Amazon EC2 instances
The change to a different AWS Support plan
A company is using the AWS Free Tier for several AWS services for an application.What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits? A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage. B. AWS Support will contact the company to set up standard service charges. C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period. D. The company's AWS account will be frozen and can be restarted after a payment plan is established.
The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.
What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.) A. The date and time when an IAM user's password was last used to sign in to the AWS Management Console. B. The type of multi-factor authentication (MFA) device assigned to an IAM user. C. The User-Agent browser identifier for each IAM user currently logged in. D. Whether multi-factor authentication (MFA) has been enabled for an IAM user. E. The number of incorrect login attempts by each IAM user in the previous 30 days.
The date and time when an IAM user's password was last used to sign in to the AWS Management Console. Whether multi-factor authentication (MFA) has been enabled for an IAM user.
What is the total amount of storage offered by Amazon S3? A. 100MB B. 5 GB C. 5 TB D. Unlimited
Unlimited
A user is using AWS account root user credentials to try to close an AWS account that is managed by AWS Organizations. However, the attempt is unsuccessful.What could cause this attempt to be unsuccessful? A. No multi-factor authentication (MFA) has been configured. B. The root user is not specifically assigned to the administration group. C. The root user's password does not meet the minimum password complexity requirements. D. The organizational administrator has used a service control policy (SCP) to limit the root user permissions.
The organizational administrator has used a service control policy (SCP) to limit the root user permissions.
Which of the following is a characteristic of the AWS account root user? A. The root user is the only user that can be configured with multi-factor authentication (MFA). B. The root user is the only user that can access the AWS Management Console. C. The root user is the first sign-in identity that is available when an AWS account is created. D. The root user has a password that cannot be changed.
The root user is the first sign-in identity that is available when an AWS account is created.
A company plans to create a data lake that uses Amazon S3.Which factor will have the MOST effect on cost? A. The selection of S3 storage tiers B. Charges to transfer existing data into Amazon S3 C. The addition of S3 bucket policies D. S3 ingest fees for each request
The selection of S3 storage tiers
What does the concept of agility mean in AWS Cloud computing? (Choose two.) A. The speed at which AWS resources are implemented B. The speed at which AWS creates new AWS Regions C. The ability to experiment quickly D. The elimination of wasted capacity E. The low cost of entry into cloud computing
The speed at which AWS resources are implemented The ability to experiment quickly
How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model? A. AWS resources do not incur costs B. There are no infrastructure operating costs C. There are no upfront cost commitments D. There are no software licensing costs
There are no upfront cost commitments
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.) A. They are stateless. B. They are stateful. C. They evaluate all rules before allowing traffic. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. E. They operate at the instance level.
They are stateless They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
What is the purpose of having an internet gateway within a VPC? A. To create a VPN connection to the VPC B. To allow communication between the VPC and the internet C. To impose bandwidth constraints on internet traffic D. To load balance traffic from the internet across Amazon EC2 instances
To allow communication between the VPC and the internet
Which of the following is an advantage of AWS Cloud computing? A. Trade security for elasticity B. Trade operational excellence for agility C. Trade fixed expenses for variable expenses D. Trade elasticity for performance
Trade fixed expenses for variable expenses
According to the AWS shared responsibility model, which task is the customer's responsibility? A. Maintaining the infrastructure needed to run AWS Lambda B. Updating the operating system of Amazon DynamoDB instances C. Maintaining Amazon S3 infrastructure D. Updating the guest operating system on Amazon EC2 instances
Updating the guest operating system on Amazon EC2 instances
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.) A. Patch the Amazon EC2 guest operating system. B. Upgrade the firmware of the network infrastructure. C. Apply password rotation for IAM users. D. Maintain the physical security of edge locations. E. Maintain least privilege access to the root user account.
Upgrade the firmware of the network infrastructure. Maintain the physical security of edge locations.
A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month. How can the user see if a change was made? A. Use Amazon EC2 to see if the security group was changed. B. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group. C. Use AWS CloudTrail to see if the security group was changed. D. Use Amazon CloudWatch to see if the security group was changed.
Use AWS CloudTrail to see if the security group was changed.
Which task is the responsibility of the customer, according to the AWS shared responsibility model? A. Patch the Amazon DynamoDB operating system. B. Secure Amazon CloudFront edge locations by allowing physical access according to the principle of least privilege. C. Protect the hardware that runs AWS services. D. Use AWS Identity and Access Management (1AM) according to the principle of least privilege.
Use AWS Identity and Access Management (1AM) according to the principle of least privilege.
A company is considering a migration from on premises to the AWS Cloud. The company's IT team needs to offload support of the workload.What should the IT team do to accomplish this goal? A. Use AWS Managed Services to provision, run, and support the company infrastructure. B. Build hardware refreshes into the operational calendar to ensure availability. C. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances. D. Overprovision compute capacity for seasonal events and traffic spikes to prevent downtime.
Use AWS Managed Services to provision, run, and support the company infrastructure.
A large company wants to track the combined AWS usage costs of all of its linked accounts.How can this be accomplished? A. Use AWS Trusted Advisor to generate customized summary reports. B. Use AWS Organizations to generate consolidated billing reports. C. Use AWS Budgets to set utilization targets and receive summary reports. D. Use the AWS Control Tower dashboard to get a summary report of all inked account costs.
Use AWS Organizations to generate consolidated billing reports.
A company wants to use Amazon EC2 instances to provide a static website to users all over the world. The company needs to minimize latency for the users.Which solution meets these requirements? A. Use EC2 instances in a single Availability Zone. B. Use EC2 instances across multiple Availability Zones in the same AWS Region. C. Use Amazon CloudFront with the EC2 instances configured as the source. D. Use EC2 instances in the same edge location and the same AWS Region.
Use Amazon CloudFront with the EC2 instances configured as the source.
A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user.What should the company do to meet these data storage requirements with the LEAST amount of operational overhead? A. Use Amazon EC2 in multiple Regions to host separate databases B. Use Amazon RDS cross-Region replication C. Use Amazon DynamoDB global tables D. Use AWS Database Migration Service (AWS DMS)
Use Amazon DynamoDB global tables
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI).Which actions can a system administrator take to connect to the EC2 instance? (Choose two.) A. Use Amazon EC2 Instance Connect. B. Use a Remote Desktop Protocol (RDP) connection. C. Use AWS Batch D. Use AWS Systems Manager Session Manager. E. Use Amazon Connect
Use Amazon EC2 Instance Connect. Use AWS Systems Manager Session Manager.
A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters.The company wants to move this workload to AWS so that these tasks will be completed automatically.What should the company do to meet these requirements? A. Deploy MySQL database server clusters on Amazon EC2 instances. B. Use Amazon RDS with a MySQL database. C. Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances. D. Migrate all the MySQL database data to Amazon S3.
Use Amazon RDS with a MySQL database.
Which of the following are design principles for reliability in the AWS Cloud? (Choose two.) A. Build architectures with tightly coupled resources. B. Use AWS Trusted Advisor to meet security best practices. C. Use automation to recover immediately from failure. D. Right size Amazon EC2 instances to ensure optimal performance. E. Simulate failures to test recovery processes.
Use automation to recover immediately from failure. Simulate failures to test recovery processes.
A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available.Which solution meets these requirements? A. Use EC2 instances in a single Availability Zone. B. Use EC2 instances in multiple AWS Regions. C. Use Amazon CloudFront with the EC2 instances configured as the source. D. Use EC2 instances in the same edge location and the same AWS Region.
Use EC2 instances in a single Availability Zone.
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.Which solution achieves this goal? A. Use EC2 instances in a single Availability Zone B. Use EC2 instances in multiple AWS Regions C. Use EC2 instances in multiple edge locations. D. Use Amazon CloudFront with the EC2 instances configured as the source.
Use EC2 instances in multiple AWS Regions
A company wants its Amazon EC2 instances to share the same geographic area but use multiple independent underlying power sources.Which solution achieves this goal? A. Use EC2 instances in a single Availability Zone. B. Use EC2 instances in multiple AWS Regions. C. Use EC2 instances in multiple Availability Zones in the same AWS Region. D. Use EC2 instances in the same edge location and the same AWS Region.
Use EC2 instances in multiple Availability Zones in the same AWS Region.
A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud.How should the company make this comparison? A. Review the AWS shared responsibility model. B. Audit existing software and hardware licensing costs. C. Analyze the AWS Well-Architected Framework. D. Use Migration Evaluator.
Use Migration Evaluator.
A company is developing an application that the company will host on Amazon EC2 instances. The application must be available 24 hours a day, 7 days a week. The company needs a scalable, highly available cloud architecture to support the application.Which guidelines should the company apply in its design to meet these requirements? (Choose two.) A. Use EC2 Spot Instances B. Use Multi-AZ deployments. C. Use Auto Scaling groups D. Use AWS Backup. E. Use EC2 Reserved Instances.
Use Multi-AZ deployments. Use Auto Scaling groups
An ecommerce company has Amazon EC2 instances running as web servers. There is a predictable pattern of peak traffic load that occurs two times each day, always at the same time. The EC2 instances are idle for the remainder of the day.What is the MOST cost-effective way to manage these resources while maintaining fault tolerance? A. Use an Auto Scaling group to scale resources in and out based on demand. B. Purchase Reserved Instances to ensure peak capacity at all times. C. Write a cron job to stop the EC2 instances when the traffic demand is low. D. Write a script to vertically scale the EC2 instances during peak traffic demand.
Use an Auto Scaling group to scale resources in and out based on demand.
A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances.According to AWS security best practices, how should the company grant permissions to allow the applications for access the S3 bucket? A. Use the AWS account root user access keys. B. Use the AWS access key ID and the EC2 secret access key. C. Use an IAM role with the necessary permissions. D. Activate multi-factor authentication (MFA) and versioning on the S3 bucket.
Use an IAM role with the necessary permissions.
A company has multiple departments. The company must charge each department for its exact AWS Cloud usage, including data transfer costs.How can the company determine these costs by department? A. Use one AWS account for each department. B. Use cost allocation tags on services that are used the most often. C. Use AWS Trusted Advisor. D. Use Savings Plans.
Use cost allocation tags on services that are used the most often.
A company is running applications on Amazon EC2 instances in the same AWS account for several different projects. The company wants to track the infrastructure costs for each of the projects separately. The company must conduct this tracking with the least possible impact to the existing infrastructure and with no additional cost.What should the company do to meet these requirements? A. Use a different EC2 instance type for each project. B. Publish project-specific custom Amazon CloudWatch metrics for each application. C. Deploy EC2 instances for each project in a separate AWS account. D. Use cost allocation tags with values that are specific to each project.
Use cost allocation tags with values that are specific to each project.
A company needs to label its AWS resources so that the company can categorize and track costs.What should the company do to meet this requirement? A. Use cost allocation tags. B. Use AWS Identity and Access Management (IAM). C. Use AWS Organizations. D. Use the AWS Cost Management coverage report.
Use cost allocation tags.
A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application.Which solution will meet these requirements? A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage. B. Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level. C. Create Amazon CloudWatch dashboards to visually organize and track costs individually. D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.
Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.Which of the following is an AWS best practice for using the AWS account root user credentials? A. Allow only the manager to use the account root user credentials for normal activities. B. Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier. C. Use the account root user credentials only when they alone must be used to perform a required function. D. Use the account root user credentials only for the creation of private VPC subnets.
Use the account root user credentials only when they alone must be used to perform a required function.
What is a characteristic of Convertible Reserved Instances (RIs)? A. Users can exchange Convertible RIs for other Convertible RIs from a different instance family B. Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions C. Users can sell and buy Convertible RIs on the AWS Marketplace D. Users can shorten the term of their Convertible RIs by merging them with other Convertible RIs
Users can exchange Convertible RIs for other Convertible RIs from a different instance family
Which of the following are advantages of the AWS Cloud? (Choose two.) A. AWS manages all the security within the cloud. B. Expenses never change from month to month. C. Users can stop spending money on the maintenance of data centers. D. Users do not need to deploy applications globally. E. Users can stop guessing about resource capacity.
Users can stop spending money on the maintenance of data centers. Users can stop guessing about resource capacity.
Which statements represent the cost-effectiveness of the AWS Cloud? (Choose two.) A. Users can trade fixed expenses for variable expenses. B. Users can deploy all over the world in minutes. C. AWS offers increased speed and agility. D. AWS is responsible for patching the infrastructure. E. Users benefit from economies of scale.
Users can trade fixed expenses for variable expenses. Users benefit from economies of scale.
Which of the following is an advantage that the AWS Cloud provides to users? A. Users eliminate the need to guess about infrastructure capacity requirements. B. Users decrease their variable costs by maintaining sole ownership of IT hardware. C. Users maintain control of underlying IT infrastructure hardware. D. Users maintain control of operating systems for managed services
Users eliminate the need to guess about infrastructure capacity requirements.
Which of the following are advantages of moving to the AWS Cloud? (Choose two.) A. Users can implement all AWS services in seconds. B. AWS assumes all responsibility for the security of infrastructure and applications. C. Users experience increased speed and agility. D. Users benefit from massive economies of scale. E. Users can move hardware from their data center to the AWS Cloud.
Users experience increased speed and agility. Users benefit from massive economies of scale.
Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards? A. Running Amazon GuardDuty B. Using AWS Artifact C. Creating an AWS Support ticket D. Evaluating AWS CloudTrail logs
Using AWS Artifact
Which AWS services and features are provided to all customers at no charge? (Choose two.) A. Amazon Aurora B. VPC C. Amazon SageMaker D. AWS Identity and Access Management (IAM) E. Amazon Polly
VPC AWS Identity and Access Management (IAM)
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC? A. VPC Flow Logs B. Amazon Inspector C. VPC endpoint services D. NAT gateway
VPC Flow Logs
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection.Which AWS service or feature can be used to establish this connection? A. AWS Client VPN B. VPC peering C. AWS Direct Connect D. VPC endpoints
VPC peering
Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.) A. AWS Storage Gateway B. Virtual private gateway C. NAT gateway D. Customer gateway E. Internet gateway
Virtual private gateway Customer gateway
What is the total volume of data that can be stored in Amazon S3? A. 10 PB B. 50 PB C. 100 PB D. Virtually unlimited
Virtually unlimited
Which Amazon Route 53 routing policy can a company use to route traffic to multiple resources in specified proportions? A. Weighted routing policy B. Multivalue answer routing policy C. Failover routing policy D. Latency routing policy
Weighted routing policy
In which situations should a company create an IAM user instead of an IAM role? (Choose two.) A. When an application that runs on Amazon EC2 instances requires access to other AWS services B. When the company creates AWS access credentials for individuals C. When the company creates an application that runs on a mobile phone that makes requests to AWS D. When the company needs to add users to IAM groups E. When users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time
When the company creates AWS access credentials for individuals When the company needs to add users to IAM groups
Which duties are the responsibility of a company that is using AWS Lambda? (Choose two.) A. Security inside of code B. Selection of CPU resources C. Patching of operating system D. Writing and updating of code E. Security of underlying infrastructure
Writing and updating of code Security inside of code
A company wants to build an application that uses AWS Lambda to run Python code.Under the AWS shared responsibility model, which tasks will be the company's responsibility? (Choose two.) A. Management of the underlying infrastructure B. Management of the operating system. C. Writing the business logic code. D. Installation of the computer language runtime. E. Providing AWS Identity and Access Management (1AM) access to the Lambda service.
Writing the business logic code. Providing AWS Identity and Access Management (1AM) access to the Lambda service.
A company needs to reserve a certain amount of Amazon EC2 compute resources in a specific Availability Zone within an AWS Region.Which purchasing option should the company use to meet this requirement? A. EC2 Instance Savings Plans B. Compute Savings Plans C. Regional Reserved Instances D. Zonal Reserved Instances
Zonal Reserved Instances
Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of: A. a loosely coupled architecture. B. a tightly coupled architecture. C. a stateless architecture. D. a stateful architecture.
a loosely coupled architecture.
Treating infrastructure as code in the AWS Cloud allows users to: A. automate migration of on-premises hardware to AWS data centers. B. let a third party automate an audit of the AWS infrastructure. C. turn over application code to AWS so it can run on the AWS infrastructure. D. automate the infrastructure provisioning process.
automate the infrastructure provisioning process.
An Availability Zone consists of: A. one or more data centers in a single location. B. two or more data centers in multiple locations. C. one or more physical hosts in a single data center. D. two or more physical hosts in multiple data centers.
one or more data centers in a single location.