Kuin_雲301

A company is based in the us-east-1 Region and has a satellite office in the eu-west-2 Region. The company wants to use Amazon WorkSpaces to host its internal web portal and virtual desktops for employees. What should the company do to minimize latency and ensure the best possible performance for employees?. Deploy the internal web portal and virtual desktops to us-east-1 only. Use an Amazon CloudFront distribution for the users in eu-west-2. Deploy the internal web portal to us-east-1 only. Deploy the virtual desktops to us-east-1 and eu-west-2. Deploy the internal web portal to us-east-1 and eu-west-2. Deploy the virtual desktops on network optimized Amazon EC2 instances to us-east-1 only. Deploy the internal web portal and virtual desktops to us-east-1 and eu-west-2.

What exclusive benefit is provided to users with Enterprise Support?. Access to a Technical Project Manager. Access to a Technical Account Manager. Access to a Cloud Support Engineer. Access to a Solutions Architect.

A company has an application with users in both Australia and Brazil. All the company infrastructure is currently provisioned in the Asia Pacific (Sydney) Region in Australia, and Brazilian users are experiencing high latency. What should the company do to reduce latency?. Implement AWS Direct Connect for users in Brazil. Provision resources in the South America (Sao Paulo) Region in Brazil. Use AWS Transit Gateway to quickly route users from Brazil to the application. Launch additional Amazon EC2 instances in Sydney to handle the demand.

Which of the following services provides on-demand access to AWS compliance reports?. AWS IAM. AWS Artifact. Amazon GuardDuty. AWS KMS.

Performing operations as code is a design principle that supports which pillar of the AWS Well-Architected Framework?. Performance efficiency. Operational excellence. Reliability. Security.

AWS Trusted Advisor provides recommendations on which of the following? (Choose two.). Cost optimization. Auditing. Serverless architecture. Performance. Scalability.

A solutions architect needs to create a cost estimate for running workloads on AWS. The cost estimate must then be exported for management review. Which AWS service or feature should be used to accomplish these task?. Cost Explorer. Amazon QuickSight. AWS Pricing Calculator. AWS Budgets.

Which Amazon RDS feature can be used to achieve high availability?. Multiple Availability Zones. Amazon Reserved Instances. Provisioned IOPS storage. Enhanced monitoring.

Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2?. AWS IAM. Amazon Connect. Amazon VPC. Amazon API Gateway.

Which AWS service is a content delivery network that securely delivers data, video, and applications to users globally with low latency and high speeds?. AWS CloudFormation. AWS Direct Connect. Amazon CloudFront. Amazon Pinpoint.

Which credentials used to sign in to the AWS Management Console meet security best practices? (Choose two.). An access key. Multi-factor authentication. X.509 certificates. A secret key. User name and password.

Which of the following are user authentication services managed by AWS? (Choose two.). Amazon Cognito. AWS Lambda. AWS License Manager. AWS Identity and Access Management (IAM). AWS CodeStar.

Which of the following AWS services can be used to run a self-managed database?. Amazon Route 53. AWS X-Ray. AWS Snowmobile. Amazon Elastic Compute Cloud (Amazon EC2).

Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.). Amazon Macie. AWS Certificate Manager. AWS Key Management Service (AWS KMS). AWS Secrets Manager. AWS CloudHSM.

Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Choose two.). Minimize upfront design. Loose coupling. Disposable resources. Server design and concurrency. Minimal viable product.

Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and caches the data locally for low-latency access?. AWS Direct Connect. AWS Storage Gateway. Amazon S3. AWS Snowball Edge.

An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously. Which AWS storage service should be used?. Amazon EBS. Amazon EFS. Amazon S3. AWS Artifact.

A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speed. Which AWS service meets these requirements?. Amazon CloudFront. Elastic Load Balancing. Amazon S3. Amazon Elastic Transcoder.

A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS. Which AWS service or tool can the company use to obtain this information?. AWS Pricing Calculator. AWS Budgets. AWS Trusted Advisor. Cost Explorer.

The pay-as-you-go pricing model for AWS services: reduces capital expenditures. requires payment up front for AWS services. is relevant only for Amazon EC2, Amazon S3, and Amazon RDS. reduces operational expenditures.

According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?. Amazon DynamoDB. Amazon EC2 instances. Amazon RDS instances. Amazon S3.

According to the AWS shared responsibility model, when using Amazon RDS, who is responsible for scheduling and performing backups?. AWS is responsible for both tasks. The customer is responsible for scheduling and AWS is responsible for performing backups. The customer is responsible for both tasks. AWS is responsible for scheduling and the user is responsible for performing backups.

An ecommerce company anticipates a huge increase in web traffic for two very popular upcoming shopping holidays. Which AWS service or feature can be configured to dynamically adjust resources to meet this change in demand?. AWS CloudTrail. Amazon EC2 Auto Scaling. Amazon Forecast. AWS Config.

A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional. What is the best cloud architecture to address this consistently growing demand?. Run the application on a bigger EC2 instance size. Switch to an EC2 instance family that better matches batch requirements. Distribute the application across multiple EC2 instances and run the workload in parallel. Run the application on a bare metal EC2 instance.

What is one of the core principles to follow when designing a highly available application in the AWS Cloud?. Design using a serverless architecture. Assume that all components within an application can fail. Design AWS Auto Scaling into every application. Design all components using open-source code.

AnyCompany recently purchased Example Corp. Both companies use AWS resources, and AnyCompany wants a single aggregated bill. Which option allows AnyCompany to receive a single bill?. Example Corp. must submit a request to its AWS solutions architect or AWS technical account manager to link the accounts and consolidate billing. AnyCompany must create a new support case in the AWS Support Center requesting that both bills be combined. Send an invitation to join the organization from AnyCompany's AWS Organizations master account to Example Corp. Migrate the Example Corp. VPCs, Amazon EC2 instances, and other resources into the AnyCompany AWS account.

Which AWS service enables users to consolidate billing across multiple accounts?. Amazon QuickSight. AWS Organizations. AWS Budgets. Amazon Forecast.

A company has an application workload that is stateless be design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost?. On-Demand Instances. Spot Instances. Reserved Instances. Dedicated Instances.

Which of the following describes AWS Local Zones?. A cluster of data centers in one geographic location. A site used by Amazon CloudFront to cache frequently accessed content. An extension of an AWS Region to more granular locations. One or more data centers with redundant power and networking.

Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?. AWS Budgets. AWS Cost Explorer. AWS Organizations. Consolidated billing.

Which AWS services can be used as infrastructure automation tools? (Choose two.). AWS CloudFormation. Amazon CloudFront. AWS Batch. AWS OpsWorks. Amazon QuickSight.

A company is running a Microsoft SQL Server instance on premises and is migrating its application to AWS. The company lacks the resources need to refactor the application, but management wants to reduce operational overhead as part of the migration. Which database service would MOST effectively support these requirements?. Amazon DynamoDB. Amazon Redshift. Microsoft SQL Server on Amazon EC2. Amazon RDS for SQL Server.

What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval?. Amazon S3. Amazon Glacier. Amazon EBS. Amazon EC2 Instance Store.

A retail company wants to provision only the necessary amount of resources to handle the current demand. Which cloud benefit is the company trying to achieve with this goal?. Reliability. Global reach. Scalability. High availability.

Which AWS services can be used to store files? (Choose two.). Amazon S3. AWS Lambda. Amazon Elastic Block Store (Amazon EBS). Amazon SageMaker. AWS Storage Gateway.

Which of the following is an important architectural design principle when designing cloud applications?. Use multiple Availability Zones. Use tightly coupled components. Use open source software. Provision extra capacity.

Fault tolerance refers to: the ability of an application to accommodate growth without changing design. how well and how quickly an application's environment can have lost data restored. how secure your application is. the built-in redundancy of an application's components.

Which of the following are recommended practices for managing IAM users? (Choose two.). Require IAM users to change their passwords after a specified period of time. Prevent IAM users from reusing previous passwords. Recommend that the same password be used on AWS and other sites. Require IAM users to store their passwords in raw text. Disable multi-factor authentication (MFA) for IAM users.

A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house. Which of the following AWS programs can a customer take advantage of to achieve that outcome?. AWS Partner Network Technology Partners. AWS Marketplace. AWS Partner Network Consulting Partners. AWS Service Catalog.

A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time they are requested. Which AWS service will provide a secure and cost-effective solution for retaining these files?. Amazon DynamoDB. Amazon S3 Glacier. Amazon Connect. Amazon ElastiCache.

Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?. Amazon GuardDuty. Amazon Inspector. Amazon Macie. AWS Shield.

A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers. How can the company meet this requirement?. Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection. Place the EC2 instances in two separate Availability Zones within the same AWS Region. Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection. Place both EC2 instances in a placement group for dedicated bandwidth.

Which AWS service or tool gives a company the ability to release application changes in an automated way?. Amazon AppFlow. AWS CodeDeploy. AWS PrivateLink. Amazon EKS Distro.

An application deployed in the AWS Cloud has unpredictable usage patterns and is running workloads that cannot be interrupted. What is the MOST cost-effective Amazon EC2 pricing option for this application?. Dedicated Instances. Spot Instances. Reserved Instances. On-Demand Instances.

Which service should a customer use to consolidate and centrally manage multiple AWS accounts?. AWS IAM. AWS Organizations. AWS Schema Conversion Tool. AWS Config.

Which AWS services or features help decrease network latency for a globally dispersed user base? (Choose two.). Amazon VPC. Elastic Load Balancer. Amazon CloudFront. AWS Direct Connect. AWS Global Accelerator.

A company wants to track AWS resource configuration changes for compliance reasons. Which AWS feature can be used to meet this requirement?. AWS Cost and Usage Report. AWS Organizations service control policies (SCPs). AWS Config rules. VPC Flow Logs.

What can be used to reduce the cost of running Amazon EC2 instances? (Choose two.). Spot Instances for stateless and flexible workloads. Memory optimized instances for high-compute workloads. On-Demand Instances for high-cost and sustained workloads. Reserved Instances for sustained workloads. Spend limits set using AWS Budgets.

What is the benefit of using AWS managed services, such as Amazon ElastiCache and Amazon Relational Database Service (Amazon RDS)?. They require the customer to monitor and replace failing instances. They have better performance than customer-managed services. They simplify patching and updating underlying OSs. They do not require the customer to optimize instance type or size selections.

An application designed to span multiple Availability Zones is described as: being highly available. having global reach. using an economy of scale. having elasticity.

Treating infrastructure as code in the AWS Cloud allows users to: automate migration of on-premises hardware to AWS data centers. let a third party automate an audit of the AWS infrastructure. turn over application code to AWS so it can run on the AWS infrastructure. automate the infrastructure provisioning process.

Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?. AWS Cost Explorer. AWS Budgets. AWS Cost and Usage report. AWS Billing dashboard.

Which of the following are AWS security best practices for using AWS Identity and Access Management (IAM) to manage an AWS account root user? (Choose two.). Set up multi-factor authentication (MFA) for the root user. Remove all IAM policies from the root user. Delete the root user access keys. Use the root user for daily tasks. Assign a read-only access policy to the root user.

Which of the following is an AWS Cloud architecture design principle?. Implement single points of failure. Implement loose coupling. Implement monolithic design. Implement vertical scaling.

Which of the following security-related services does AWS offer? (Choose two.). Multi-factor authentication physical tokens. AWS Trusted Advisor security checks. Data encryption. Automated penetration testing. Amazon S3 copyrighted content detection.

A company's newly launched application is gaining in popularity very quickly. To improve customer service, the company wants to set up a phone number to manage the increasing volume of calls received by the company's support staff. Which AWS service should be used to meet this requirement?. Amazon Connect. Amazon CloudFront. Amazon DirectConnect. AWS Trusted Advisor.

A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability?. AWS Secrets Manager. AWS Systems Manager. AWS Key Management Service (AWS KMS). AWS Certificate Manager.

Which of the following is a best practice for creating policies for IAM users?. Start with a large set of permissions and remove the permissions that are not required. Use only Amazon managed policies. Start with a minimum set of permissions and grant additional permissions as necessary. Attach policies directly to each user individually.

A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take?. Launch the instances across multiple Availability Zones in a single AWS Region. Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone. Launch the instances in multiple AWS Regions, but in the same Availability Zone. Launch the instances as EC2 Spot Instances in the same AWS Region, but in different Availability Zones.

What does AWS Shield Standard provide?. WAF rules. DDoS protection. Identity and Access Management (IAM) permissions and access to resources. Data encryption.

Under the shared responsibility model, which of the following is the customer responsible for?. Ensuring that disk drives are wiped after use. Ensuring that firmware is updated on hardware devices. Ensuring that data is encrypted at rest. Ensuring that network cables are category six or higher.

A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and AWS agreements. Which AWS service provides on-demand access to these items?. AWS Certificate Manager. AWS Config. AWS Artifact. AWS CloudTrail.

Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?. AWS Snowmobile. AWS Local Zones. AWS Outposts. AWS Fargate.

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS. Where can the company purchase the security solution?. AWS Partner Solutions Finder. AWS Support Center. AWS Management Console. AWS Marketplace.

Which of the following are categories of AWS Trusted Advisor? (Choose two.). Fault Tolerance. Instance Usage. Infrastructure. Performance. Storage Capacity.

Which benefit of the AWS Cloud supports matching the supply of resources with changing workload demands?. Security. Reliability. Elasticity. High availability.

Which of the following enables users to leverage the power of AWS services programmatically?. AWS Command Line Interface (AWS CLI). AWS Trusted Advisor. AWS CodeDeploy. AWS Management Console.

A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack. Who should the user contact FIRST about this situation?. AWS Premium Support. AWS Technical Account Manager. AWS Solutions Architect. AWS Abuse team.

What technology enables compute capacity to adjust as loads change?. Load balancing. Automatic failover. Round robin. Auto Scaling.

What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called?. AWS Direct Connects. Amazon VPCs. Edge locations. Availability Zones.

Which task is AWS responsible for in the shared responsibility model for security and compliance?. Granting access to individuals and services. Encrypting data in transit. Updating Amazon EC2 host firmware. Updating operating systems.

Which AWS service acts as a data extract, transform, and load (ETL) tool to make it easy to prepare data for analytics?. Amazon QuickSight. Amazon Athena. AWS Glue. AWS Elastic Beanstalk.

When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.). Physical storage hardware. Operating system administration. Network infrastructure of data center. Project management. Database schema development.

Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted?. Spot Instances. Dedicated Hosts. On-Demand Instances. Reserved Instances.

Which AWS service or tool helps identify underutilized Amazon EC2 instances and idle Amazon RDS DB instances at no additional charge?. Cost Explorer. AWS Budgets. AWS Organizations. AWS Trusted Advisor.

Which services can be used across hybrid AWS Cloud architectures? (Choose two.). Amazon Route 53. Virtual Private Gateway. Classic Load Balancer. Auto Scaling. Amazon CloudWatch default metrics.

Which AWS hybrid storage service enables a user's on-premises applications to seamlessly use AWS Cloud storage?. AWS Backup. Amazon Connect. AWS Direct Connect. AWS Storage Gateway.

Service control policies (SCPs) manage permissions for which of the following?. Availability Zones. AWS Regions. AWS Organizations. Edge locations.

A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions. What is the most suitable and cost-effective option for this task?. On-Demand Instance. Reserved Instance. Dedicated Host. Spot Instance.

Compared with costs in traditional and virtualized data centers, AWS has: greater variable costs and greater upfront costs. fixed usage costs and lower upfront costs. lower variable costs and greater upfront costs. lower variable costs and lower upfront costs.

How should a customer forecast the future costs for running a new web application?. Amazon Aurora Backtrack. Amazon CloudWatch Billing Alarms. AWS Simple Monthly Calculator. AWS Cost and Usage report.

Which of the following contribute to total cost of ownership of a workload running in the AWS Cloud? (Choose two.). Hardware maintenance. Power and cooling. Storage costs. Space for data center. Network costs.

Which of the following are advantages of AWS consolidated billing? (Choose two.). The ability to receive one bill for multiple accounts. Service limits increasing by default in all accounts. A fixed discount on the monthly bill. Potential volume discounts, as usage in all accounts is combined. The automatic extension of the master account's AWS support plan to all accounts.

Which AWS service or feature allows a user to set up consolidated billing?. AWS Billing Management Console. AWS Organizations. AWS Cost and Usage Report. WAS Systems Manager.

Which AWS service makes it easy to create and manage AWS users and groups, and provide them with secure access to AWS resources at no charge?. AWS Direct Connect. Amazon Connect. AWS Identity and Access Management (IAM). AWS Firewall Manager.

A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds. For how much time will the customer be billed?. A. 3 hours, 5 minutes. B. 3 hours, 5 minutes, and 6 seconds. C. 3 hours, 6 minutes. D. 4 hours.

AWS Budgets can be used to: prevent a given user from creating a resource. send an alert when the utilization of Reserved Instances drops below a certain percentage. set resource limits in AWS accounts to prevent overspending. split an AWS bill across multiple forms of payment.

Which of the following tasks is the responsibility of AWS?. Encrypting client-side data. Configuring AWS Identity and Access Management (IAM) roles. Securing the Amazon EC2 hypervisor. Setting user password policies.

How do AWS users trade infrastructure expenses for operational expenses?. Secure their physical infrastructure to prevent malicious attacks. Use AWS Budgets to ensure that spending on AWS resources does not exceed preset thresholds. Eliminate the electricity costs that are associated with the hosting of physical servers. Use AWS Auto Scaling to dynamically increase and decrease compute resources as needed.

Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.). Closing an AWS account. Creating a new IAM policy. Changing AWS Support plans. Attaching a role to an Amazon EC2 instance. Generating access keys for IAM users.

What are the immediate benefits of using the AWS Cloud? (Choose two.). Increased IT staff. Capital expenses are replaced with variable expenses. User control of infrastructure. Increased agility. AWS holds responsibility for security in the cloud.

A company has a Java web application. The company wants to use auto deployment to create the AWS environment and deploy new versions of its application. Which AWS service will meet these requirements?. AWS Auto Scaling. AWS Elastic Beanstalk. AWS Control Tower. Amazon EC2.

What is a characteristic of Amazon S3 cross-region replication?. Both source and destination S3 buckets must have versioning disabled. The source and destination S3 buckets cannot be in different AWS Regions. S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts. The source S3 bucket owner must have the source and destination AWS Regions disabled for their account.

Which components are required to build a successful site-to-site VPN connection on AWS? (Choose two.). Internet gateway. NAT gateway. Customer gateway. Transit gateway. Virtual private gateway.

How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.). It identifies software vulnerabilities in applications running on AWS. It provides a list of cost optimization recommendations based on current AWS usage. It detects potential security vulnerabilities caused by permissions settings on account resources. It automatically corrects potential security issues caused by permissions settings on account resources. It provides proactive alerting whenever an Amazon EC2 instance has been compromised.

Which AWS service allows for effective cost management of multiple AWS accounts?. AWS Organizations. AWS Trusted Advisor. AWS Trusted Advisor. Amazon Connect.

Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?. Amazon VPC. AWS Direct Connect. AWS Directory Service. Amazon API Gateway.

Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?. AWS Cloud9. AWS CodeStar. AWS Cloud Map. AWS X-Ray.

Which of the following are advantages of using Amazon EC2 instances over traditional on-premises servers? (Choose two.). Pay-as-you-go pricing. Automation. Self-maintenance of servers. Agility. Access to physical hosts.

Which AWS service allows users to identify the changes made to a resource over time?. Amazon Inspector. AWS Config. AWS Service Catalog. AWS IAM.