aws - study
A user should contact the AWS Abuse team to report which situations? (Choose two.) A. A DDoS attack is being made on an AWS resource. B. A SQL injection attack is being made from an IP address that is not an AWS address. C. AWS resources are being used to host objectionable or illegal content. D. A company's resources are being used in a way that is inconsistent with corporate policy. E. A company is receiving HTTPS requests on a web server that is serving HTTP.
AC
The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.) A. Information on Amazon S3 bucket permissions B. AWS service outages C. Multi-factor authentication enabled on the AWS account root user D. Available software patches E. Number of users in the account
AC
Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.) A. Setting up server-side encryption on an Amazon S3 bucket B. Amazon RDS instance patching C. Network and firewall configurations D. Physical security of data center facilities E. Compute capacity availability
AC
When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Choose three.) A. Compute costs B. Facilities costs C. Storage costs D. Data transfer costs E. Network infrastructure costs F. Hardware lifecycle costs
ACD
Which of the following are included in AWS Enterprise Support? (Choose two.) A. AWS technical account manager (TAM) B. AWS partner-led support C. AWS Professional Services D. Support of third-party software integration to AWS E. 5-minute response time for critical issues
AD. https://i.ytimg.com/vi/0LQcq_zyNmg/maxresdefault.jpg
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets? A. AWS Shield B. Amazon Macie C. AWS Network Firewall D. Amazon Cognito
B
Which documentation does AWS Artifact provide? A. Amazon EC2 terms and conditions B. AWS ISO certifications C. A history of a company's AWS spending D. A list of previous-generation Amazon EC2 instance types
B
Which of the following is an AWS best practice for managing an AWS account root user? A. Keep the root user password with the security team. B. Enable multi-factor authentication (MFA) for the root user. C. Create an access key for the root user. D. Keep the root user password consistent for compliance purposes.
B
A company with AWS Enterprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices.Which AWS tool or resource is available to accomplish these goals? A. Resource tagging B. AWS Concierge Support team C. AWS Abuse team D. AWS Support
B -- AWS Enterprise Support customers have access to an AWS Concierge Support team, which is a dedicated team of technical support engineers that provide personalized guidance and best practices to help customers optimize their AWS usage and costs. This team can help customers understand their monthly AWS bills, identify and resolve issues that contribute to unexpected costs, and implement billing best practices. AWS Resource tagging is a way to organize AWS resources by attaching metadata, called tags, to the resources. This can help to categorize and manage resources, but it's not the best option for understanding the monthly bill and implementing billing best practices. AWS Support and AWS Abuse team are different teams, Support team deals with technical issues and Abuse team deals with abuse and security issues.
Which disaster recovery option is the LEAST expensive? A. Warm standby B. Multisite C. Backup and restore D. Pilot light
C
What is the total amount of storage offered by Amazon S3? A. 100MB B. 5 GB C. 5 TB D. Unlimited
D
Which of the following describes AWS Local Zones? A. A cluster of data centers in one geographic location B. A site used by Amazon CloudFront to cache frequently accessed content C. An extension of an AWS Region to more granular locations D. One or more data centers with redundant power and networking
C
Which AWS service can be used to encrypt data at rest? A. Amazon GuardDuty B. AWS Shield C. AWS Security Hub D. AWS Key Management Service (AWS KMS)
D
Which AWS service does AWS Snowball Edge natively support? A. AWS Server Migration Service (AWS SMS) B. Amazon Aurora C. AWS Trusted Advisor D. Amazon EC2
D. Another device is S3
A company plans to create a data lake that uses Amazon S3.Which factor will have the MOST effect on cost? A. The selection of S3 storage tiers B. Charges to transfer existing data into Amazon S3 C. The addition of S3 bucket policies D. S3 ingest fees for each request
a
Which of the following are economic advantages of the AWS Cloud? (Choose two.) A. Increased workforce productivity B. Decreased need to encrypt user data C. Manual compliance audits D. Simplified total cost of ownership (TCO) accounting E. Faster product launches
???
A Cloud Practitioner identifies a billing issue after examining the AWS Cost and Usage report in the AWS Management Console.Which action can be taken to resolve this? A. Open a detailed case related to billing and submit it to AWS Support for help. B. Upload data describing the issue to a new object in a private Amazon S3 bucket. C. Create a pricing application and deploy it to a right-sized Amazon EC2 instance for more information. D. Proceed with creating a new dashboard in Amazon QuickSight.
A
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege.Which AWS service or feature should the company use to enforce this principle? A. Security groups B. AWS Shield C. AWS Global Accelerator D. AWS Direct Connect gateway
A
A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur.What could be causing this? (Choose two.) A. Amazon Elastic Block Store (Amazon EBS) storage charges B. Operating system charges C. Hardware charges D. Elastic IP charges E. Input/output (I/O) charges
A
A company needs a low-code, visual workflow service that developers can use to build distributed applications.Which AWS service is designed to meet these requirements? A. AWS Step Functions B. AWS Config C. AWS Lambda D. Amazon CloudWatch
A
A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.Which AWS service will meet this requirement? A. Amazon Cognito B. AWS Security Hub C. AWS Shield D. AWS WAF
A
A company needs to install an application in a Docker container.Which AWS service eliminates the need to provision and manage the container hosts? A. AWS Fargate B. Amazon FSx for Windows File Server C. Amazon Elastic Container Service (Amazon ECS) D. Amazon EC2
A
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers.Which AWS service will meet these requirements? A. Amazon Elastic Transcoder B. Amazon Comprehend C. AWS Glue D. Amazon Rekognition
A
A company's project team needs to simultaneously mount a file system on multiple Amazon EC2 Linux instances. The file system also will be shared across multiple Availability Zones.Which AWS service will meet these requirements? A. Amazon Elastic File System (Amazon EFS) B. Amazon S3 C. Amazon Elastic Block Store (Amazon EBS) D. Amazon FSx for Windows File Server
A
A company's web application requires AWS credentials and authorizations to use an AWS service.Which IAM entity should the company use as best practice? A. IAM role B. IAM user C. IAM group D. IAM multi-factor authentication (MFA)
A
A gaming company wants to move its on-premises environment to AWS. The company needs its resources to be highly available.Which benefit does the AWS Cloud provide to meet this requirement? A. Reliability B. The AWS shared responsibility model C. Security D. Agility
A
A large retail company wants to use an AWS service to process clickstream data from the company's ecommerce website. The company wants to collect and analyze the streaming data in real time.Which AWS service meets these requirements? A. Amazon Kinesis B. Amazon Athena C. Amazon CloudFront D. AWS Data Exchange
A
According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database? A. Manage connections to the database B. Install Microsoft SQL Server C. Design encryption-at-rest strategies D. Apply minor database patches
A
An application requires a database that offers consistent performance and latency that can be measured in single-digit milliseconds.Which AWS service meets these requirements? A. Amazon DynamoDB B. Amazon RDS C. Amazon Redshift D. Amazon EMR
A
When comparing AWS with on-premises Total Cost of Ownership (TCO), what costs are included? A. Data center security B. Business analysis C. Project management D. Operating system administration
A
Which AWS service can be used to turn text into lifelike speech? A. Amazon Polly B. Amazon Kendra C. Amazon Rekognition D. Amazon Connect
A
Which AWS service is used to host static websites? A. Amazon S3 B. Amazon Elastic Block Store (Amazon EBS) C. AWS CloudFormation D. Amazon Elastic File System (Amazon EFS)
A
Which AWS service provides alerts when an AWS event may impact a company's AWS resources? A. AWS Personal Health Dashboard B. AWS Service Health Dashboard C. AWS Trusted Advisor D. AWS Infrastructure Event Management
A
Which AWS service would identify if unrestricted access to a resource has been allowed by a security group? A. AWS Trusted Advisor B. Amazon CloudWatch C. VPC Flow Logs D. AWS CloudTrail
A
Which service enables customers to audit API calls in their AWS accounts? A. AWS CloudTrail B. AWS Trusted Advisor C. Amazon Inspector D. AWS X-Ray
A
Which task does AWS perform automatically? A. Encrypt data that is stored in Amazon DynamoDB. B. Patch Amazon EC2 instances. C. Encrypt user network traffic. D. Create TLS certificates for users' websites.
A
A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively? A. Standard Reserved Instances B. On-Demand Instances C. Spot Instances D. Convertible Reserved Instances
A https://aws.amazon.com/ec2/pricing/reserved-instances/
A company is running a standard PostgreSQL database on premises. The company is migrating the database to the AWS Cloud and does not want to change the queries that access the database. The company must maximize the query performance.Which AWS service will meet these requirements? A. Amazon RDS for PostgreSQL B. Amazon Aurora PostgreSQL C. Amazon DocumentDB (with MongoDB compatibility) D. Amazon DynamoDB
A OR B ?
A user has been granted permission to change their own IAM user password.Which AWS services can the user use to change the password? (Choose two.) A. AWS Command Line Interface (AWS CLI) B. AWS Key Management Service (AWS KMS) C. AWS Management Console D. AWS Resource Access Manager (AWS RAM) E. AWS Secrets Manager
AC
A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.Which costs will the company eliminate with this migration? (Choose two.) A. Cost of data center operations B. Cost of application licensing C. Cost of marketing campaigns D. Cost of physical server hardware E. Cost of network management
AD
What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.) A. The date and time when an IAM user's password was last used to sign in to the AWS Management Console. B. The type of multi-factor authentication (MFA) device assigned to an IAM user. C. The User-Agent browser identifier for each IAM user currently logged in. D. Whether multi-factor authentication (MFA) has been enabled for an IAM user. E. The number of incorrect login attempts by each IAM user in the previous 30 days.
AD - https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
Which AWS services are serverless? (Choose two.) A. AWS Fargate B. Amazon Managed Streaming for Apache Kafka C. Amazon EMR D. Amazon S3 E. Amazon EC2
AD -- https://aws.amazon.com/serverless/
Which of the following are AWS compute services? (Choose two.) A. Amazon Lightsail B. AWS Systems Manager C. AWS CloudFormation D. AWS Batch E. Amazon Inspector
AD -- https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.) A. They are stateless. B. They are stateful. C. They evaluate all rules before allowing traffic. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. E. They operate at the instance level.
AD.
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.How can these reports be generated? A. Contact the AWS Compliance team B. Download the reports from AWS Artifact C. Open a case with AWS Support D. Generate the reports with Amazon Macie
B
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted.Which S3 feature should the company turn on to meet this requirement? A. Server access logging B. S3 Versioning C. S3 Lifecycle rules D. Encryption in transit and at rest
B
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications.Which AWS Support plan will meet these requirements at the LOWEST cost? A. AWS Basic Support B. AWS Developer Support C. AWS Business Support D. AWS Enterprise Support
B
A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps.Which AWS service should the company use? A. Amazon GuardDuty B. AWS Trusted Advisor C. AWS Management Console D. AWS Systems Manager
B
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection.Which AWS service or feature can be used to establish this connection? A. AWS Client VPN B. VPC peering C. AWS Direct Connect D. VPC endpoints
B
A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs.Which AWS Billing and Cost Management tool provides this data in a graphical format? A. AWS Bills B. Cost Explorer C. AWS Cost and Usage Report D. AWS Budgets
B
A company needs to perform data processing once a week that typically takes about 5 hours to complete.Which AWS service should the company use for this workload? A. AWS Lambda B. Amazon EC2 C. AWS CodeDeploy D. AWS Wavelength
B
A company owns per-core software licenses.Which Amazon EC2 instance purchasing option must the company use for this license type? A. Reserved Instances B. Dedicated Hosts C. Spot Instances D. Dedicated Instances
B
A company requires an isolated environment within AWS for security purposes.Which action can be taken to accomplish this? A. Create a separate Availability Zone to host the resources. B. Create a separate VPC to host the resources. C. Create a placement group to host the resources. D. Create an AWS Direct Connect connection between the company and AWS.
B
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.Which solution achieves this goal? A. Use EC2 instances in a single Availability Zone B. Use EC2 instances in multiple AWS Regions C. Use EC2 instances in multiple edge locations. D. Use Amazon CloudFront with the EC2 instances configured as the source.
B
A company wants the ability to quickly upload its applications to the AWS Cloud without needing to provision underlying resources.Which AWS service will meet these requirements? A. AWS CloudFormation B. AWS Elastic Beanstalk C. AWS CodeDeploy D. AWS CodeCommit
B
A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers.How can the company meet this requirement? A. Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection. B. Place the EC2 instances in two separate Availability Zones within the same AWS Region. C. Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection. D. Place both EC2 instances in a placement group for dedicated bandwidth.
B
A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited operational knowledge to perform the migration.Which AWS service supports this use case? A. Amazon EC2 B. Amazon Lightsail C. Amazon S3 D. AWS Lambda
B
A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas.Which AWS service should the company use to meet this requirement? A. AWS CloudTrail B. AWS Trusted Advisor C. AWS Config D. Amazon Inspector
B
A company wants to reduce the physical compute footprint that developers use to run code.Which service would meet that need by enabling serverless architectures? A. Amazon Elastic Compute Cloud (Amazon EC2) B. AWS Lambda C. Amazon DynamoDB D. AWS CodeCommit
B
A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment.Which AWS service should the company use to meet this requirement? A. Amazon S3 B. Amazon AppStream 2.0 C. AWS AppSync D. AWS Outposts
B
A company would like to host its MySQL databases on AWS and maintain full control over the operating system, database installation, and configuration.Which AWS service should the company use to host the databases? A. Amazon RDS B. Amazon EC2 C. Amazon DynamoDB D. Amazon Aurora
B
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs.Which AWS service or feature meets these requirements? A. AWS Direct Connect B. AWS Transit Gateway C. AWS Site-to-Site VPN D. VPC endpoints
B
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations.What should the user do to meet this requirement? A. Use AWS Secrets Manager. B. Tag the objects in the S3 bucket. C. Use security groups. D. Use network ACLs.
B
Amazon S3 buckets that are publicly available? A. AWS Service Health Dashboard B. Amazon CloudWatch Logs C. AWS Trusted Advisor D. AWS Service Catalog
B
An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.Which AWS service or resource will meet this requirement? A. Amazon EC2 Auto Scaling B. Application Load Balancer C. Gateway Load Balancer D. Network Load Balancer
B
How many Availability Zones should compute resources be provisioned across to achieve high availability? A. A minimum of one B. A minimum of two C. A minimum of three D. A minimum of four or more
B
Using AWS Identity and Access Management (IAM), what can be attached to an Amazon EC2 instance to make service requests? A. Group B. Role C. Policy D. Access key
B
Where can AWS users review answers to frequently asked questions about security in the AWS Cloud? A. AWS Trusted Advisor B. AWS Knowledge Center C. AWS Support Center D. AWS Artifact
B
Which AWS service handles the deployment details of application health monitoring? A. AWS Config B. AWS Elastic Beanstalk C. Amazon Route 53 D. Amazon CloudFront
B
Which AWS service of tool helps to centrally manage billing and allow controlled access to resources across AWS accounts? A. AWS Identity and Access Management (IAM) B. AWS Organizations C. Cost Explorer D. AWS Budgets
B
Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies? A. AWS Systems Manager B. AWS IAM Access Analyzer C. AWS Trusted Advisor D. Amazon GuardDuty
B
Which AWS service or tool should a company use to centrally request and track service limit increases? A. AWS Config B. Service Quotas C. AWS Service Catalog D. AWS Budgets
B
Which AWS service provides automated backups of data by default? A. Amazon S3 B. Amazon Aurora C. Amazon ElastiCache for Memcached D. Amazon Elastic File System (Amazon EFS)
B
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon EC2 instance store C. Amazon Elastic File System (Amazon EFS) D. Amazon S3
B
Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3? A. S3 Cross-Region Replication B. S3 Transfer Acceleration C. S3 Event Notifications D. S3 Standard-Infrequent Access (S3 Standard-IA)
B. S3 Transfer Acceleration Amazon S3 Transfer Acceleration uses the AWS backbone network, a globally distributed network of edge locations, to reduce the latency of uploading and downloading files to and from Amazon S3. It enables fast, easy, and secure transfers of files over long distances between your client and S3 bucket by using the AWS global network. This feature optimizes data transfer by routing data over the optimal network path and provides a URL that can be used to transfer data to and from Amazon S3.
A company is developing an application that the company will host on Amazon EC2 instances. The application must be available 24 hours a day, 7 days a week. The company needs a scalable, highly available cloud architecture to support the application.Which guidelines should the company apply in its design to meet these requirements? (Choose two.) A. Use EC2 Spot Instances B. Use Multi-AZ deployments. C. Use Auto Scaling groups D. Use AWS Backup. E. Use EC2 Reserved Instances.
BC
A company uses Amazon DynamoDB in its AWS Cloud architecture.According to the AWS shared responsibility model, which of the following are responsibilities of the company? (Choose two.) A. Operating system patching and upgrades B. Application of appropriate permissions with IAM tools C. Configuration of data encryption options D. Creation of DynamoDB endpoints E. Infrastructure provisioning and maintenance
BC
A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS.Which security measures fall under the responsibility of AWS? (Choose two.) A. Running a virus scan on EC2 instances B. Protecting against IP spoofing and packet sniffing C. Installing the latest security patches on the RDS instance D. Encrypting communication between the EC2 instances and the Elastic Load Balancer E. Configuring a security group and a network access control list (NACL) for EC2 instances
BC
What does AWS Marketplace allow users to do? (Choose two.) A. Sell unused Amazon EC2 Spot Instances. B. Sell solutions to other AWS users. C. Buy third-party software that runs on AWS. D. Purchase AWS security and compliance documents. E. Order AWS Snowball.
BC
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.) A. ׀•׀¡2 Reserved Instances B. EC2 Amazon Machine Images (AMIs) C. Amazon Elastic Block Store (Amazon EBS) snapshots D. AWS Shield E. Amazon GuardDuty
BC
Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.) A. Physical and environmental controls B. Patch management C. Cloud awareness and training D. Zone security E. Application data encryption
BC
Which AWS services should a company use to read and write data that changes frequently? (Choose two.) A. Amazon S3 Glacier B. Amazon RDS C. AWS Snowball D. Amazon Redshift E. Amazon Elastic File System (Amazon EFS)
BD
Which characteristics are advantages of using the AWS Cloud? (Choose two.) A. A 100% service level agreement (SLA) for all AWS services B. Compute capacity that is adjusted on demand C. Availability of AWS Support for code development D. Enhanced security E. Increases in cost and complexity
BD
Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.) A. AWS Storage Gateway B. Virtual private gateway C. NAT gateway D. Customer gateway E. Internet gateway
BD
Which statements explain the business value of migration to the AWS Cloud? (Choose two.) A. The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices. B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime. C. Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery. D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas. E. Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all enterprise applications.
BD
A company needs to store code in a version control system. The company also needs to continually deploy updated code through a series of automated steps (build, test, package, and deploy).Which combination of AWS services will meet these requirements? (Choose two.) A. AWS CloudFormation B. AWS CodeCommit C. AWS Control Tower D. AWS Elastic Beanstalk E. AWS CodePipoline
BE
A company recently created its first AWS account.Which AWS services will require the use of a VPC? (Choose two.) A. Amazon S3 B. Amazon Elastic File System (Amazon EFS) C. Amazon Cognito D. Amazon DynamoDB E. Amazon EC2
BE
Elasticity in the AWS Cloud refers to which of the following? (Choose two.) A. How quickly an Amazon EC2 instance can be restarted B. The ability to rightsize resources as demand shifts C. The maximum amount of RAM an Amazon EC2 instance can use D. The pay-as-you-go billing model E. How easily resources can be produced when they are needed
BE
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.) A. EC2 includes operating system patch management. B. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM). C. EC2 has a 100% service level agreement (SLA). D. EC2 has a flexible, pay-as-you-go pricing model. E. EC2 has automatic storage cost optimization.
BE
Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.) A. Amazon Route 53 B. Amazon CloudFront C. AWS Transfer Family D. AWS Site-to-Site VPN E. Amazon API Gateway
BE
Which of the following are design principles of the reliability pillar of the AWS Well-Architected Framework? (Choose two.) A. Perform operations as code. B. Stop guessing capacity. C. Adopt serverless architecture whenever possible. D. Use build and deployment management systems. E. Make changes to infrastructure by using automation.
BE
A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS.Which AWS team should the company contact to report this issue? A. AWS Customer Service team B. AWS Sales team C. AWS Trust & Safety team D. AWS Technical Support team
C
A company has a set of ecommerce applications. The applications need to be able to send messages to each other.Which AWS service meets this requirement? A. AWS Auto Scaling B. Elastic Load Balancing C. Amazon Simple Queue Service (Amazon SQS) D. Amazon Kinesis Data Streams
C
A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection.Which AWS service should the company use to meet these requirements? A. AWS Backup B. AWS DataSync C. AWS Direct Connect D. AWS Snowball
C
A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan.Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event? A. AWS Abuse team B. The designated AWS technical account manager (TAM) C. AWS infrastructure event management D. AWS Professional Services
C
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.Which AWS service will meet these requirements? A. Amazon S3 B. Amazon Elastic File System (Amazon EFS) C. Amazon FSx for Windows File Server D. Amazon Elastic Block Store (Amazon EBS)
C
A company needs stateless network filtering for its VPC.Which AWS service, tool, or feature will meet this requirement? A. AWS PrivateLink B. Security group C. Network access control list (ACL) D. AWS WAF
C
A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.Which AWS service or program should the company use to determine which AWS services meet the regional requirements? A. AWS Audit Manager B. AWS Shield C. AWS Compliance Program D. AWS Artifact
C
A company needs to use dashboards and charts to analyze insights from business data.Which AWS service will provide the dashboards and charts for these insights? A. Amazon Macie B. Amazon Aurora C. Amazon QuickSight D. AWS CloudTrail
C
A company wants to ensure its infrastructure is designed for fault tolerance and business continuity in the event of an environmental disruption.Which AWS infrastructure component should the company replicate across? A. Edge locations B. Availability Zones C. Regions D. Amazon Route 53
C
A company wants to integrate its online shopping website with social media login credentials.Which AWS service can the company use to make this integration? A. AWS Directory Service B. AWS Identity and Access Management (IAM) C. Amazon Cognito D. AWS IAM Identity Center (AWS Single Sign-On)
C
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.Which AWS solution should the company use to meet this requirement? A. AWS Config B. AWS software development kits (SDKs) C. AWS Service Catalog D. AWS AppSync
C
A company wants to run Amazon EC2 instances in locations that are near the company's global users.Which aspect of the AWS environment will support this requirement? A. Availability Zone B. Edge locations C. AWS Regions D. Regional edge caches
C
A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated. The data needs to be available for retrieval within seconds.Which S3 storage class meets these requirements MOST cost-effectively? A. S3 Standard B. S3 One Zone-Infrequent Access (S3 One Zone-IA) C. S3 Standard-Infrequent Access (S3 Standard-IA) D. S3 Glacier
C
A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user.What should the company do to meet these data storage requirements with the LEAST amount of operational overhead? A. Use Amazon EC2 in multiple Regions to host separate databases B. Use Amazon RDS cross-Region replication C. Use Amazon DynamoDB global tables D. Use AWS Database Migration Service (AWS DMS) Reveal Solution
C
A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts that it wants to interconnect.Which AWS service or feature should the company use to help simplify management and reduce operational costs? A. VPC endpoint B. AWS Direct Connect C. AWS Transit Gateway D. VPC peering
C
A user wants to control AWS services by using the AWS CLI.What are the MINIMUM security credentials that the user needs to achieve this goal? A. AWS account user name and password B. Multi-factor authentication (MFA) C. Access keys D. Key pairs
C
What should a user do if the user loses an IAM secret access key? A. Retrieve the secret access key by using the IAM console. B. Create a new user with a new access key and a new secret access key. C. Rotate the secret access key. D. Request a new secret access key from AWS Support.
C
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity? A. AWS Service Catalog B. AWS Systems Manager C. AWS IAM Access Analyzer D. AWS Organizations
C
Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances? A. Amazon WorkSpaces B. Amazon Elastic File System (Amazon EFS) C. AWS Database Migration Service (AWS DMS) D. AWS Snowball Edge
C
Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3? A. AWS Shield B. AWS Firewall Manager C. Amazon GuardDuty D. Amazon Inspector
C
Which AWS service should a company use to create a serverless workflow? A. Amazon Connect B. AWS Lambda C. AWS Step Functions D. Amazon Elastic Block Store (Amazon EBS) E. AWS CodeBuild
C
Which Reserved Instance (RI) provides the HIGHEST average cost savings compared to an On-Demand Instance? A. 1-year, No Upfront, Standard RI B. 1-year, All Upfront, Convertible RI C. 3-year, All Upfront, Standard RI D. 3-year, No Upfront, Convertible RI
C
Which controls does the customer fully inherit from AWS in the AWS shared responsibility model? A. Patch management controls B. Awareness and training controls C. Physical and environmental controls D. Configuration management controls
C
Which functions can users perform using AWS KMS? A. Create and manage AWS access keys for the AWS account root user B. Create and manage AWS access keys for an AWS account IAM user C. Create and manage keys for encryption and decryption of data D. Create and manage keys for multi-factor authentication
C
Which pillar of the AWS Well-Architected Framework is focused on the ability of a workload to perform its intended function correctly and consistently at the expected time? A. Performance efficiency B. Operational excellence C. Reliability D. Security
C
A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.Which best practice for cost governance does this example show? A. Resource controls B. Cost allocation C. Architecture optimization D. Tagging enforcement
C. -- The example provided shows the best practice of architecture optimization for cost governance. Architecture optimization is the process of refining an organization's workloads to use specific AWS services or configurations to improve efficiency and reduce costs. By choosing the most cost-effective services and configurations, an organization can optimize its architecture to minimize costs while still meeting its performance and functionality requirements.
A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones.Which AWS services should the company use to meet this requirement? (Choose two.) A. Amazon EC2 B. Amazon Elastic Block Store (Amazon EBS) C. Amazon Aurora D. Amazon DynamoDB E. Amazon Redshift Reveal Solution
CD
Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.) A. Amazon ElastiCache B. Amazon RDS for Oracle C. Amazon Neptune D. Amazon DocumentDB (with MongoDB compatibility) E. Amazon Redshift
CD
When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.) A. Software development B. Project management C. Storage hardware D. Physical servers E. Antivirus software license
CD Network infra of data center
A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library's capacity to the AWS Cloud.Which AWS service should the company use to meet this requirement? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon S3 C. Amazon Elastic File System (Amazon EFS) D. AWS Storage Gateway
D
A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the ability to initiate automated actions against threats that are identified in the security findings.Which service will meet these requirements? A. AWS Trusted Advisor B. Amazon Detective C. Amazon Inspector D. Amazon GuardDuty
D
A company needs to create graphs that show historical and current costs for the company's AWS account.Which AWS service or tool provides this functionality? A. AWS Config B. AWS Cost and Usage Report C. AWS Budgets D. AWS Cost Explorer
D
A company needs to report on events that involve the specific AWS services that the company uses.Which AWS service or resource can the company use with Amazon CloudWatch to meet this requirement? A. Amazon Inspector B. AWS Personal Health Dashboard C. AWS Trusted Advisor D. AWS CloudTrail logs
D
A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity.Which AWS service should the company use to meet these requirements? A. AWS Lambda B. Amazon Cognito C. Amazon Athena D. Amazon EC2
D
A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious.Which AWS service should the company use to meet this requirement? A. AWS Shield Advanced B. Amazon Route 53 C. Amazon GuardDuty D. AWS Network Firewall
D
A company wants to forecast future costs and usage of AWS resources based on past consumption.Which AWS service or tool will provide this forecast? A. AWS Cost and Usage Report B. Amazon Forecast C. AWS Pricing Calculator D. Cost Explorer
D
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.Which AWS service or feature will help the company with its migration? A. AWS Trusted Advisor B. AWS Consulting Partners C. AWS Artifacts D. AWS Managed Services
D
A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.Which AWS service can the company use to meet this goal? A. AWS WAF B. AWS Shield C. Amazon VPC D. AWS Certificate Manager (ACM)
D
A developer wants to deploy an application on a container-based service. The service must automatically provision and manage the backend instances. The service must provision only the necessary resources.Which AWS service will meet these requirements? A. Amazon EC2 B. Amazon Lightsail C. Amazon Elastic Kubernetes Service (Amazon EKS) D. AWS Fargate
D
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload toAWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency.Which AWS service or feature should the company use to meet these requirements? A. Availability Zones B. AWS Local Zones C. AWS Wavelength D. AWS Outposts
D
A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future.Which of the following is a characteristic of the AWS Cloud that would meet this specific need? A. Elasticity B. Reliability C. Performance D. Agility
D
An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal? A. Amazon Simple Queue Service (Amazon SQS) B. Amazon Simple Notification Service (Amazon SNS) C. AWS Systems Manager D. Amazon CloudWatch alarm
D
Fault tolerance refers to: A. the ability of an application to accommodate growth without changing design B. how well and how quickly an application's environment can have lost data restored C. how secure your application is D. the built-in redundancy of an application's components
D
What can assist in evaluating an application for migration to the cloud? (Choose two.) A. AWS Trusted Advisor B. AWS Professional Services C. AWS Systems Manager D. AWS Partner Network (APN) E. AWS Secrets Manager
D
What is the scope of a VPC within the AWS network? A. A VPC can span all Availability Zones globally. B. A VPC must span at least two subnets in each AWS Region. C. A VPC must span at least two edge locations in each AWS Region. D. A VPC can span all Availability Zones within an AWS Region.
D
Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates? A. AWS Secrets Manager B. Amazon Inspector C. AWS CodeDeploy D. AWS Certificate Manager (ACM)
D
Which AWS service should the company use to meet this requirement? A. Amazon Polly B. Amazon Transcribe C. Amazon Lex D. Amazon Rekognition
D
Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data? A. Amazon Athena B. Amazon QuickSight C. Amazon CloudWatch D. AWS Organizations
D
Which task can a company complete by using AWS Organizations? A. Track application deployment statuses globally. B. Remove unused and underutilized AWS resources across all accounts. C. Activate DDoS protection across all accounts. D. Share pre-purchased Amazon EC2 resources across accounts.
D
A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption.Which action should the user take? A. Contact the dedicated AWS technical account manager (TAM). B. Contact the dedicated AWS Concierge Support team. C. Open a business-critical system down support case. D. Open a production system down support case.
D -- https://aws.amazon.com/premiumsupport/plans/
Which AWS service or feature acts as a firewall for Amazon EC2 instances? A. Network ACL B. Elastic network interface C. Amazon VPC D. Security group
D. Security group - at instance level NACL - subnet level
A company has a complex AWS architecture. The company needs assistance from a dedicated technical professional who can suggest strategies regarding incidents, trade-offs, support, and risk management.Which AWS Support plan will provide the required support? A. AWS Business Support B. AWS Enterprise Support C. AWS Developer Support D. AWS Basic Support
a
A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS.Which AWS service or tool can the company use to obtain this information? A. AWS Pricing Calculator B. AWS Budgets C. AWS Trusted Advisor D. Cost Explorer
a
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions? A. Creating versions of Lambda functions B. Maintaining server and operating systems C. Scaling Lambda resources according to demand D. Updating the Lambda runtime environment
a
Which AWS service provides intelligent recommendations to improve code quality and identify an application's most expensive lines of code? A. Amazon CodeGuru B. AWS CodeStar C. AWS CodeCommit D. AWS CodeDeploy
a
Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud? A. Compute instances can be launched and terminated as needed to optimize costs. B. Compute costs can be viewed in the AWS Billing and Cost Management console. C. Users retain full administrative access to their compute instances. D. Users can optimize costs by permanently running enough instances at peak load.
a
A company is migrating to the AWS Cloud. The company requires consultative review and guidance for its applications during the migration. After the migration is complete, the company requires a response within 30 minutes if business-critical systems go down.Which AWS Support plans meet these requirements? (Choose two.) A. AWS Enterprise Support B. AWS Enterprise On-Ramp Support C. AWS Developer Support D. AWS Basic Support E. AWS Business Support
ab
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI).Which actions can a system administrator take to connect to the EC2 instance? (Choose two.) A. Use Amazon EC2 Instance Connect. B. Use a Remote Desktop Protocol (RDP) connection. C. Use AWS Batch D. Use AWS Systems Manager Session Manager. E. Use Amazon Connect
ad
A company wants to set up an entire development and continuous delivery toolchain for coding, building, testing, and deploying code.Which AWS service will meet these requirements? A. Amazon CodeGuru B. AWS CodeStar C. AWS CodeCommit D. AWS CodeDeploy
b
A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses anApplication Load Balancer to distribute traffic to multiple Amazon EC2 instances.Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks? A. Security groups B. AWS WAF C. Network ACLs D. AWS Shield
b
Which AWS tool or feature acts as a VPC firewall at the subnet level? A. Security group B. Network ACL C. Traffic Mirroring D. Internet gateway
b
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model? A. Amazon FSx for Windows File Server B. Amazon WorkSpaces virtual Windows desktop C. AWS Directory Service for Microsoft Active Directory D. Amazon RDS for Microsoft SQL Server
b
A company needs to set up a petabyte-scale data warehouse in the AWS Cloud.Which AWS service will meet this requirement? A. Amazon DynamoDB B. Amazon RDS C. Amazon Redshift D. Amazon ElastiCache
c
A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.Which purchase option meets these requirements MOST cost-effectively? A. Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load. B. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances. C. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate. D. Buy Reserved Instances to cover all potential usage that results from the seasonal usage.
c
Service control policies (SCPs) manage permissions for which of the following? A. Availability Zones B. AWS Regions C. AWS Organizations D. Edge locations
c
Which AWS service is used to provide encryption for Amazon EBS? A. AWS Certificate Manager B. AWS Systems Manager C. AWS KMS D. AWS Config
c
Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework? A. Vertical scaling B. Manual failure recovery C. Testing recovery procedures D. Changing infrastructure manually
c
A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed.Which AWS services can provide this information? (Choose two.) A. AWS Artifact B. AWS Trusted Advisor C. AWS Config D. AWS CloudTrail E. AWS Identity and Access Management (IAM)
cd
Which AWS services provide high availability across multiple Availability Zones by default? (Choose two.) A. Amazon EC2 B. Amazon Elastic Block Store (Amazon EBS) C. Amazon Elastic File System (Amazon EFS) D. Amazon Redshift E. Amazon S3
ce
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.Which AWS service can the company use to trace user requests as they move through the application's components? A. AWS CloudTrail B. Amazon CloudWatch C. Amazon Inspector D. AWS X-Ray
d
Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime? A. Agility B. Elasticity C. Scalability D. High availability
d
Which AWS service, feature, or tool uses machine learning to continuously monitor cost and usage for unusual cloud spending? A. Amazon Lookout for Metrics B. AWS Budgets C. Amazon CloudWatch D. AWS Cost Anomaly Detection
d
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model? A. Both AWS and the customer B. The customer only C. The EC2 hardware manufacturer D. AWS only
d
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.) A. Amazon Simple Notification Service (Amazon SNS) B. Amazon Simple Queue Service (Amazon SQS) C. AWS CodeBuild D. Amazon S3 E. Amazon DynamoDB
de
