Mod 1-7
Which Reserved Instance (RI) provides the HIGHEST average cost savings compared to an On-Demand Instance?
3-year, All Upfront, Standard RI
What is an AWS Region?
A physical location around the world where data centers are clustered
A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet these requirements?
AWS Config
A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket. Which AWS tool will meet these requirements?
AWS Cost and Usage Reports
A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month. Which AWS tool should the company use to meet these requirements?
AWS Cost and Usage Reports
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications. Which AWS Support plan will meet these requirements at the LOWEST cost?
AWS Developer Support
A company needs to process data from satellite communications without managing any infrastructure. Which AWS service should the company use to meet these requirements?
AWS Ground Station
Which of the following is available to a company that has an AWS Business Support plan?
AWS Health API
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
AWS IAM Access Analyzer
Which documentation does AWS Artifact provide?
AWS ISO certifications
A company wants to organize its users so that the company can grant permissions to the users as a group. Which AWS service or tool can the company use to meet this requirement?
AWS Identity and Access Management (IAM)
Which AWS service is always provided at no charge?
AWS Identity and Access Management (IAM)
Which AWS service is used to provide encryption for Amazon EBS?
AWS KMS
Which AWS service can be used to encrypt data at rest?
AWS Key Management Service (AWS KMS)
A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket. Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead?
AWS Lambda
A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances. Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased. The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances. Which AWS service or tool should the company use to meet these requirements?
AWS Organizations
Service control policies (SCPs) manage permissions for which of the following?
AWS Organizations
Which of the following is a component of the AWS Global Infrastructure?
AWS Regions
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs. Which AWS service or feature meets these requirements?
AWS Transit Gateway
A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps. Which AWS service should the company use?
AWS Trusted Advisor
A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas. Which AWS service should the company use to meet this requirement?
AWS Trusted Advisor
A user wants to identify any security group that is allowing unrestricted incoming SSH traffic. Which AWS service can be used to accomplish this goal?
AWS Trusted Advisor
Which AWS service can a company use to store and manage Docker images?
Amazon Elastic Container Registry (Amazon ECR)
A company wants to deploy and manage a Docker based application on AWS. Which solution meets these requirements with the LEAST amount of operational overhead?
Amazon Elastic Container Service (Amazon ECS)
Which AWS service is a highly available and scalable DNS web service?
Amazon Route 53
Which AWS service provides domain registration, DNS routing, and service health checks?
Amazon Route 53
Which AWS service is used to host static websites?
Amazon S3
Which AWS service provides highly durable object storage?
Amazon S3
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)
Amazon S3 Amazon DynamoDB
A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time they are requested. Which AWS service will provide a secure and cost-effective solution for retaining these files?
Amazon S3 Glacier
A company wants its employees to have access to virtual desktop infrastructure to securely access company-provided desktops through the employees' personal devices. Which AWS service should the company use to meet these requirements?
Amazon WorkSpaces
Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?
Economies of scale
Which duties are the responsibility of a company that is using AWS Lambda? (Choose two.)
Security inside of code Writing and updating of code
Who can create and manage access keys for an AWS account root user?
The AWS account owner
Which of the following best describes Platform as a Service?
The cloud customer provisions systems that are configured up to the point of deploying code and data.
What is the scope of a VPC within the AWS network?
A VPC can span all Availability Zones within an AWS Region.
A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement?
AWS VPN
Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud?
Compute instances can be launched and terminated as needed to optimize costs.
Which benefits does a company gain when the company moves from on-premises IT architecture to the AWS Cloud? (Choose two.)
Reduced or eliminated tasks for hardware troubleshooting, capacity planning, and procurement Faster deployment of new features and applications
A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated. The data needs to be available for retrieval within seconds. Which S3 storage class meets these requirements MOST cost-effectively?
S3 Standard-Infrequent Access (S3 Standard-IA)
Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3?
S3 Transfer Acceleration
Which AWS service or feature acts as a firewall for Amazon EC2 instances?
Security group
A company plans to create a data lake that uses Amazon S3. Which factor will have the MOST effect on cost?
The selection of S3 storage tiers
What does the AWS Concierge Support team provide?
A primary point of contact for AWS Billing and AWS Support
According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Choose two.)
API access control for AWS resources Amazon EC2 operating system patching
A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?
AWS Abuse team
Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?
AWS Artifact
Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded?
AWS Budgets
A company needs an AWS Support plan that provides programmatic case management through the AWS Support API. Which support plan will meet this requirement MOST cost-effectively?
AWS Business Support
A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a strong IT support team and does not need concierge support. Which AWS Support plan will meet these requirements at the LOWEST cost?
AWS Business Support
What is the LEAST expensive AWS Support plan that contains a full set of AWS Trusted Advisor best practice checks?
AWS Business Support
Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?
AWS Certificate Manager (ACM)
A company needs to migrate all of its development teams to a cloud-based integrated development environment (IDE). Which AWS service should the company use?
AWS Cloud9
A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles. Which AWS service can be used to meet this requirement?
AWS CloudFormation
Which AWS service helps users audit API activity across their AWS account?
AWS CloudTrail
Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?
AWS CloudTrail
A company wants to host a private version control system for its application code in the AWS Cloud. Which AWS service should the company use to meet this requirement?
AWS CodeCommit
A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories, and version controls. Which AWS service should the developer use?
AWS CodeCommit
A company uses Amazon EC2 instances to run its web application. The company uses On-Demand Instances and Spot Instances. The company needs to visualize its monthly spending on both types of instances. Which AWS service or feature will meet this requirement?
AWS Cost Explorer
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
AWS Direct Connect
A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves. Which AWS service should the developers use to meet these requirements?
AWS Elastic Beanstalk
A company needs to deploy applications in the AWS Cloud as quickly as possible. The company also needs to minimize the complexity that is related to the management of AWS resources. Which AWS service should the company use to meet these requirements?
AWS Elastic Beanstalk
A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers. Which combination of AWS services should the company use to meet these requirements? (Choose two.)
AWS Elastic Beanstalk AWS Fargate
A company is migrating to the AWS Cloud. The company requires consultative review and guidance for its applications during the migration. After the migration is complete, the company requires a response within 30 minutes if business-critical systems go down. Which AWS Support plans meet these requirements? (Choose two.)
AWS Enterprise On-Ramp Support AWS Enterprise Support
A company has a complex AWS architecture. The company needs assistance from a dedicated technical professional who can suggest strategies regarding incidents, trade-offs, support, and risk management. Which AWS Support plan will provide the required support?
AWS Enterprise Support
Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)?
AWS Enterprise Support
Which AWS Support plans provide a complete set of AWS Trusted Advisor checks?
AWS Enterprise Support and AWS Business Support
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements?
AWS Fargate
Which AWS services are serverless? (Choose two.)
AWS Fargate Amazon S3
Which AWS service uses edge locations?
AWS Global Accelerator
Which AWS services make use of global edge locations? (Choose two.)
AWS Global Accelerator Amazon CloudFront
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency. Which AWS service or feature should the company use to meet these requirements?
AWS Local Zones
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing. Which AWS service or feature will help the company with its migration?
AWS Managed Services
Which AWS service tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?
AWS Organizations
A large company has a workload that requires hardware to remain on premises. The company wants to use the same management and control plane services that it currently uses on AWS. Which AWS service should the company use to meet these requirements?
AWS Outposts
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co- location environments, or on-premises facilities?
AWS Outposts
A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS. Which AWS service or tool can the company use to obtain this information?
AWS Pricing Calculator
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?
AWS Security Hub
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources. Which AWS solution should the company use to meet this requirement?
AWS Service Catalog
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources. Which AWS solution should the company use to meet this requirement?
AWS Service Catalog
Which AWS service will help protect applications running on AWS from DDoS attacks?
AWS Shield
A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with distributed denial of service (DDoS) attacks. Which AWS service will meet these requirements?
AWS Shield Advanced
A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days. Which AWS service should the company use to accomplish this migration?
AWS Snowball
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later. Which AWS service should the company use to meet these requirements?
AWS Snowball Edge
A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library's capacity to the AWS Cloud. Which AWS service should the company use to meet this requirement?
AWS Storage Gateway
Which AWS service could an administrator use to provide desktop environments for several employees?
AWS Workspaces
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?
AWS only
Which AWS service or feature allows users to connect with and deploy AWS services programmatically?
AWS software development kits (SDKs)
A user wants to control AWS services by using the AWS CLI. What are the MINIMUM security credentials that the user needs to achieve this goal?
Access keys
A company needs to deliver new website features quickly in an iterative manner to minimize the time to market. Which AWS Cloud concept does this requirement represent?
Agility
After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?
All upfront payment
Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.)
Amazon API Gateway Amazon CloudFront
A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops. Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware?
Amazon AppStream 2.0
A company has a global website with static content. Which AWS service will deliver the static content with low latency?
Amazon CloudFront
Which AWS service provides intelligent recommendations to improve code quality and identify an application's most expensive lines of code?
Amazon CodeGuru
A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud. Which AWS service will meet this requirement?
Amazon Cognito
A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the database. The company wants to give users the ability to store personal information, but user access must be controlled in a more secure and reliable way. Which AWS service or feature will meet these requirements?
Amazon Cognito
A company wants to integrate its online shopping website with social media login credentials. Which AWS service can the company use to make this integration?
Amazon Cognito
A company wants to perform sentiment analysis on customer service email messages that it receives. The company wants to identify whether the customer service engagement was positive or negative. Which AWS service should the company use to perform this analysis?
Amazon Comprehend
A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote customer service agents can use to create and manage voice and chat contact flows. Which AWS service will meet these requirements?
Amazon Connect
A company wants to use machine learning to identify suspicious activities in its AWS account. Which AWS service provides this functionality?
Amazon Detective
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated?
Amazon EC2 instance store
Which service is an AWS in-memory data store service?
Amazon ElastiCache
A company needs a managed NFS file system that the company can use with its AWS compute resources. Which AWS service or feature will meet these requirements?
Amazon Elastic File System (Amazon EFS)
Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances?
Amazon Elastic File System (Amazon EFS)
A company recently created its first AWS account. Which AWS services will require the use of a VPC? (Choose two.)
Amazon Elastic File System (Amazon EFS) Amazon EC2
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers. Which AWS service will meet these requirements?
Amazon Elastic Transcoder
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol. Which AWS service will meet these requirements?
Amazon FSx for Windows File Server
A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious. Which AWS service should the company use to meet this requirement?
Amazon GuardDuty
Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts?
Amazon GuardDuty
Which AWS service should a company use to check for IAM access keys that have not been rotated recently?
Amazon Inspector
A large retail company wants to use an AWS service to process clickstream data from the company's ecommerce website. The company wants to collect and analyze the streaming data in real time. Which AWS service meets these requirements?
Amazon Kinesis
A company wants to analyze streaming user data and respond to customer queries in real time. Which AWS service can meet these requirements?
Amazon Kinesis Data Analytics
Which of the following are AWS compute services? (Choose two.)
Amazon Lightsail AWS Batch
A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud. Which AWS service will meet these requirements?
Amazon Macie
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?
Amazon Macie
Which AWS service stores graph data in the form of vertices and edges?
Amazon Neptune
Which AWS service can be used to turn text into lifelike speech?
Amazon Polly
A company wants to add facial identification to its user verification process on an application. Which AWS service should the company use to meet this requirement?
Amazon Rekognition
A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS. Which AWS service should the company use to meet this requirement?
Amazon Route 53
A company wants to set up a Domain Name System (DNS) record for its application with a failover routing policy that is based on health checks. Which AWS service or resource should the company use to achieve this goal?
Amazon Route 53
Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?
Amazon Route 53
Which of the following describes some of the core functionality of Amazon S3?
Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
A company has a set of ecommerce applications. The applications need to be able to send messages to each other. Which AWS service meets this requirement?
Amazon Simple Queue Service (Amazon SQS)
A company accepts enrollment applications on handwritten paper forms. The company uses a manual process to enter the form data into its backend systems. The company wants to automate the process by scanning the forms and capturing the enrollment data from scanned PDF files. Which AWS service should the company use to build this process?
Amazon Textract
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
Amazon WorkSpaces virtual Windows desktop
Which of the following describes AWS Local Zones?
An extension of an AWS Region to more granular locations
What does the Amazon S3 Intelligent-Tiering storage class offer?
Automatic cost savings by moving objects between tiers based on access pattern changes
Which of the following consists of one or more isolated data centers in the same regional area that are interconnected through low-latency networks?
Availability Zone
Which statement describes a characteristic of the AWS global infrastructure?
Availability Zones contain multiple data centers
Which disaster recovery option is the LEAST expensive?
Backup and restore
A company wants to expand from one AWS Region into a second AWS Region. What does the company need to do to expand into the second Region?
Begin to deploy resources in the second Region.
A company needs to design an AWS disaster recovery plan to cover multiple geographic areas. Which action will meet this requirement?
Configure the architecture across multiple AWS Regions.
A company has several departments. Each department has its own AWS accounts for its applications. The company wants all AWS costs on a single invoice to simplify payment, but the company wants to know the costs that each department is incurring. Which AWS tool or feature will provide this functionality?
Consolidated billing
Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
Control access to AWS service APIs and to other specific resources. Protect the AWS environment using multi-factor authentication (MFA).
A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs. Which AWS Billing and Cost Management tool provides this data in a graphical format?
Cost Explorer
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year. Which AWS service or tool provides this information?
Cost Explorer
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?
Cost allocation tags
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?
Create an IAM role with the required permissions. Attach the role to the EC2 instance.
A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application. What can the company do to meet this requirement?
Create cost allocation tags.
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?
Creating versions of Lambda functions
Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.)
Customer gateway Virtual private gateway
A company has a set of databases that are stored on premises. The company wants to bring its existing Microsoft SQL Server licenses when the company moves the databases to run on Amazon EC2 instances. Which EC2 instance purchasing option should the company use to meet these requirements?
Dedicated Hosts
A company owns per-core software licenses. Which Amazon EC2 instance purchasing option must the company use for this license type?
Dedicated Hosts
A user is a new AWS account owner who has no special access requirements. What should this user do with the AWS account root user access keys?
Delete the keys and create IAM users.
Which benefit is included with an AWS Enterprise Support plan?
Designated support from an AWS technical account manager (TAM)
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.)
EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM). EC2 has a flexible, pay-as-you-go pricing model.
Which of the following does Amazon CloudFront use to distribute content to users around the world?
Edge locations
A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur. What could be causing this? (Choose two.)
Elastic IP charges Amazon Elastic Block Store (Amazon EBS) storage charges
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?
Elasticity
Which of the following are advantages of moving from on premises to the AWS Cloud? (Choose two.)
Eliminate costs related to running and maintaining data centers. Benefit from massive economies of scale.
Which of the following is an AWS best practice for managing an AWS account root user?
Enable multi-factor authentication (MFA) for the root user.
Which approach will enhance a user's security on AWS?
Encrypt data by using AWS Key Management Service (AWS KMS).
Which task can a user complete by using AWS Identity and Access Management (IAM)?
Grant permissions to applications that run on Amazon EC2 instances.
A large organization has a single AWS account. What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.)
Having multiple accounts reduces the risks associated with malicious activity targeted at a single account. It allows for administrative isolation between different workloads.
What is the term for the practice of using a combination of both on-premises and cloud resources?
Hybrid Cloud
Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?
IAM credential report
A company has 2 Amazon EC2 instances. Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
Identify and manage the users who are allowed to create or delete EC2 instances. Identify which users can access the EC2 instances, and manage their permissions in the operating system.
What is a benefit of moving to the AWS Cloud in terms of improving time to market?
Increased business agility
How does consolidated billing help reduce costs for a company that has multiple AWS accounts?
It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.
Which duty is a responsibility of AWS under the AWS shared responsibility model?
Maintaining physical hardware
What is a benefit of using AWS serverless computing?
Management of infrastructure is offloaded to AWS.
A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purchasing option that requires no long-term commitment or upfront payment. Which instance purchasing option will meet these requirements MOST cost-effectively?
On-Demand Instances
A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption. Which action should the user take?
Open a production system down support case.
What is the difference between platform as a service (PaaS) and software as a service (SaaS)?
PaaS provides a means for creating applications. SaaS is the application itself.
Which task is the responsibility of the customer according to the AWS shared responsibility model?
Patch the guest operating system of Amazon EC2 instances.
A company is using Amazon EC2 instances. Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
Patch the guest operating system. Configure a security group on deployed EC2 instances.
A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget on cloud resources only as the company uses the resources. Which advantage of the AWS Cloud matches the company's requirements?
Pay-as-you-go pricing
An online retail company has seasonal sales spikes several times a year, primarily around holidays. Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season. Which advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.)
Pay-as-you-go pricing Elasticity
A company is hosting a web application in a Docker container on Amazon EC2. AWS is responsible for which of the following tasks?
Performing hardware maintenance in the AWS facilities that run the AWS Cloud
Which cloud deployment model provides dedicated infrastructure for a single organization and offers maximum control and customization?
Private Cloud
A company stores data in an Amazon S3 bucket. Which task is the responsibility of AWS?
Protect the infrastructure that supports S3 storage.
A company wants to build an application that uses AWS Lambda to run Python code. Under the AWS shared responsibility model, which tasks will be the company's responsibility? (Choose two.)
Providing AWS Identity and Access Management (1AM) access to the Lambda service. Writing the business logic code.
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted. Which S3 feature should the company turn on to meet this requirement?
S3 Versioning
A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network. Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?
Security groups
Which of the following acts as an instance-level firewall to control inbound and outbound access?
Security groups
A company is running an Amazon EC2 instance in a VPC. Which of the following can the company use to route and filter incoming network requests for the EC2 instance?
Security groups and route tables
A global media company uses AWS Organizations to manage multiple AWS accounts. Which AWS service or feature can the company use to limit the access to AWS services for member accounts?
Service control policies (SCPs)
Which of the following describes an AWS Region?
Set of data centers spanning multiple countries
Which task can a company complete by using AWS Organizations?
Share pre-purchased Amazon EC2 resources across accounts.
A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be interrupted. Which EC2 instance type will meet these requirements?
Spot Instances
A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
Standard Reserved Instances
Which of the following are included in AWS Enterprise Support? (Choose two.)
Support of third-party software integration to AWS AWS technical account manager (TAM)
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations. What should the user do to meet this requirement?
Tag the objects in the S3 bucket.
How does the AWS global infrastructure offer high availability and fault tolerance to its users?
The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.
Which of the following is a cloud benefit that AWS offers to its users?
The ability to deploy to AWS on a global scale
Which of the following best fits the responsibility of the cloud customer with a Software as a Service application?
The cloud customer gains access to a fully featured application that just requires their user data and access, possibly with branding also allowed.
Which of the following best describes Infrastructure as a Service?
The cloud provider gives the customer a fully configured network, but the customer is responsible for the configuration of all virtual machines within it.
A company is using the AWS Free Tier for several AWS services for an application. What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?
The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.
Which task requires the use of AWS account root user credentials?
The deletion of IAM users
A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan. Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?
The designated AWS technical account manager (TAM)
Which of the following best describes the concept of "cloud computing"?
The practice of delivering computing services (e.g., servers, storage, databases, networking, software, analytics, and intelligence) over the Internet to offer faster innovation, flexible resources, and economies of scale.
How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model?
There are no upfront cost commitments
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. They are stateless.
What is the purpose of having an internet gateway within a VPC?
To allow communication between the VPC and the internet
What is the total amount of storage offered by Amazon S3?
Unlimited
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
Upgrade the firmware of the network infrastructure. Maintain the physical security of edge locations.
A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month. How can the user see if a change was made?
Use AWS CloudTrail to see if the security group was changed.
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI). Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)
Use AWS Systems Manager Session Manager. Use Amazon EC2 Instance Connect.
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area. Which solution achieves this goal?
Use EC2 instances in multiple AWS Regions
A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud. How should the company make this comparison?
Use Migration Evaluator.
Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Choose two.)
Use access keys and secret access keys on Amazon EC2. Configure multi-factor authentication (MFA).
A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application. Which solution will meet these requirements?
Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
Which statements represent the cost-effectiveness of the AWS Cloud? (Choose two.)
Users benefit from economies of scale. Users can trade fixed expenses for variable expenses.
What is a characteristic of Convertible Reserved Instances (RIs)?
Users can exchange Convertible RIs for other Convertible RIs from a different instance family
Which of the following is an advantage that the AWS Cloud provides to users?
Users eliminate the need to guess about infrastructure capacity requirements.
Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?
Using AWS Artifact
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
VPC Flow Logs
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection. Which AWS service or feature can be used to establish this connection?
VPC peering
In which situations should a company create an IAM user instead of an IAM role? (Choose two.)
When the company creates AWS access credentials for individuals When the company needs to add users to IAM groups
What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)
Whether multi-factor authentication (MFA) has been enabled for an IAM user. The date and time when an IAM user's password was last used to sign in to the AWS Management Console.
A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.
Which AWS service or feature can the company use to meet these requirements? AWS Identity and Access Management (IAM)
An Availability Zone consists of:
one or more data centers in a single location.
