KUIN‗雲401

Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?. Amazon CloudFront. Amazon GuardDuty. Amazon Route 53. AWS Trusted Advisor.

A company has performance and regulatory requirements that call for it to run its workload only in its on-premises data center. Which AWS services or resources should the company use? (Choose two.). Amazon Pinpoint. Amazon WorkLink. AWS Outposts. AWS Snowball Edge. AWS AppSync.

A company uses Amazon EC2 infrastructure to host steady-state workloads and needs to achieve significant cost savings. Which EC2 instance pricing model should the company select?. Reserved Instances. On-Demand Instances. Spot Instances. Dedicated Hosts.

A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload?. On-Demand Instances. Reserved Instances. Dedicated Instances. Spot Instances.

A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?. Enable AWS Shield Advanced. Create a custom IAM policy. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace. Use AWS Key Management Service (AWS KMS) to create a customer-managed key.

Which AWS service provides a quick and automated way to create and manage AWS accounts?. AWS QuickSight. Amazon Lightsail. AWS Organizations. Amazon Connect.

Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?. AWS Direct Connect. VPC peering. AWS VPN. Amazon Route 53.

A company wants to forecast its AWS Cloud costs for the upcoming year by analyzing its past AWS Cloud spending trends. Which AWS service should the company use to meet this requirement?. AWS Control Tower. Cost Explorer. AWS OpsWorks. AWS CloudFormation.

Which AWS service can be used in the application deployment process?. AWS AppSync. AWS Batch. AWS CodePipeline. AWS DataSync.

Which network security features are supported by Amazon VPC? (Choose two.). Network ACLs. Internet gateways. VPC peering. Security groups. Firewall rules.

Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?. High availability. Decoupled architecture. Resilience. Elasticity.

Which of the following is an AWS database service?. Amazon Redshift. Amazon Elastic Block Store (Amazon EBS). Amazon S3 Glacier. AWS Snowball.

If a user has an AWS account with an Enterprise-level AWS Support plan, who is the primary point of contact for billing or account inquiries?. Solutions architect. AWS Concierge Support team. An AWS Marketplace seller. AWS Partner Network (APN) partner.

Which AWS service provides the ability to manage infrastructure as code?. AWS CodePipeline. AWS CodeDeploy. AWS Direct Connect. AWS CloudFormation.

What are the benefits of using the AWS Cloud for companies with customers in many countries around the world? (Choose two.). Companies can deploy applications in multiple AWS Regions to reduce latency. Amazon Translate automatically translates third-party website interfaces into multiple languages. Amazon CloudFront has multiple edge locations around the world to reduce latency. Amazon Comprehend allows users to build applications that can respond to user requests in many languages. Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world, which reduces latency.

A company hosts images in an Amazon S3 bucket for a public-facing website that is viewed by millions of users around the globe. Which AWS service will deliver this content with reduced latency?. AWS WAF. Amazon CloudWatch. Amazon CloudFront. AWS CloudFormation.

Which component must be attached to a VPC to enable inbound Internet access?. NAT gateway. VPC endpoint. VPN connection. Internet gateway.

Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users?. A public and private key-pair. Amazon Inspector. IAM policies. Security Groups.

What is an Availability Zone in AWS?. One or more physical data centers. A completely isolated geographic location. One or more edge locations based around the world. A data center location with a single source of power and networking.

A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market. Which AWS Cloud feature can provide this?. Elasticity. High availability. Agility. Reliability.

How does AWS charge for AWS Lambda?. Users bid on the maximum price they are willing to pay per hour. Users choose a 1-, 3- or 5-year upfront payment term. Users pay for the required permanent storage on a file system or in a database. Users pay based on the number of requests and consumed compute resources.

Which scenarios represent the concept of elasticity on AWS? (Choose two.). Scaling the number of Amazon EC2 instances based on traffic. Resizing Amazon RDS instances as business needs change. Automatically directing traffic to less-utilized Amazon EC2 instances. Using AWS compliance documents to accelerate the compliance process. Having the ability to create and govern environments using code.

Which security-related task is the responsibility of the customer in the AWS Cloud?. Securing infrastructure at data centers. Maintaining firewall configurations at a hardware level. Maintaining networking among hardware components. Maintaining server-side encryption.

Which service should be used to estimate the costs of running a new project on AWS?. AWS TCO Calculator. AWS Simple Monthly Calculator. AWS Cost Explorer API. AWS Budgets.

Which disaster recovery option is the LEAST expensive?. Warm standby. Multisite. Backup and restore. Pilot light.

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?. Ensuring network connectivity from AWS to the internet. Patching and fixing flaws within the AWS Cloud infrastructure. Ensuring the physical security of cloud data centers. Ensuring Amazon EBS volumes are backed up.

Which AWS service can be used to track unauthorized API calls?. AWS Config. AWS CloudTrail. AWS Trusted Advisor. Amazon Inspector.

Which tool can be used to identify scheduled changes to the AWS infrastructure?. AWS Personal Health Dashboard. AWS Trusted Advisor. Billing Dashboard. AWS Config.

A company recently migrated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts. Which AWS service should the company use to achieve this goal?. Amazon Macie. Amazon GuardDuty. AWS Shield. Amazon Detective.

Which AWS feature allows a company to take advantage of usage tiers for services across multiple member accounts?. Service control policies (SCPs). Consolidated billing. All Upfront Reserved Instances. AWS Cost Explorer.

Which AWS Cloud best practice uses the elasticity and agility of cloud computing?. Provision capacity based on past usage and theoretical peaks. Dynamically and predictively scale to meet usage demands. Build the application and infrastructure in a data center that grants physical access. Break apart the application into loosely coupled components.

A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.). Amazon Connect. Amazon AppStream 2.0. Amazon WorkSpaces. AWS Site-to-Site VPN. Amazon Elastic Container Service (Amazon ECS).

Which AWS service gives users on-demand, self-service access to AWS compliance control reports?. AWS Config. Amazon GuardDuty. AWS Trusted Advisor. AWS Artifact.

Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated?. Amazon EBS. Amazon EC2 instance store. Amazon EFS. Amazon S3.

Which AWS service enables risk auditing of an AWS account by tracking and recording user actions and source IP addresses?. AWS X-Ray. AWS Shield. AWS Trusted Advisor. AWS CloudTrail.

Which AWS service or feature is used to send both text and email messages from distributed applications?. Amazon Simple Notification Service (Amazon SNS). Amazon Simple Email Service (Amazon SES). Amazon CloudWatch alerts. Amazon Simple Queue Service (Amazon SQS).

A company needs 24/7 phone, email, and chat access, with a response time of less than 1 hour if a production system has a service interruption. Which AWS Support plan meets these requirements at the LOWEST cost?. Basic. Developer. Business. Enterprise.

Which of the following common IT tasks can AWS cover to free up company IT resources? (Choose two.). Patching databases software. Testing application releases. Backing up databases. Creating database schema. Running penetration tests.

When comparing the total cost of ownership (TCO) of an on-premises infrastructure to a cloud architecture, what costs should be considered? (Choose two.). The credit card processing fees for application transactions in the cloud. The cost of purchasing and installing server hardware in the on-premises data. The cost of administering the infrastructure, including operating system and software installations, patches, backups, and recovering from failures. The costs of third-party penetration testing. The advertising costs associated with an ongoing enterprise-wide campaign.

Which AWS service or feature allows a user to easily scale connectivity among thousands of VPCs?. VPC peering. AWS Transit Gateway. AWS Direct Connect. AWS Global Accelerator.

Which AWS hybrid storage service enables your on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?. AWS Direct Connect. AWS Snowball. AWS Storage Gateway. AWS Snowball Edge.

Which AWS managed service is used to host databases?. AWS Batch. AWS Artifact. AWS Data Pipeline. Amazon RDS.

What is an AWS Cloud design best practice?. Tight coupling of components. Single point of failure. High availability. Overprovisioning of resources.

How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center?. Users do not have to wait for infrastructure provisioning. The AWS Cloud infrastructure is much faster than an on-premises data center infrastructure. AWS takes over application configuration management on behalf of users. Users do not need to address security and compliance issues.

Which type of AWS infrastructure deployment puts AWS compute, storage, database, and other select services closer to end users to run latency-sensitive　applications?. AWS Regions. Availability Zones. Local Zones. Edge locations.

Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?. Amazon GuardDuty. Amazon GuardDuty. AWS Artifact. AWS Shield.

What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Choose two.). Preventing a single point of failure. Reducing the operational costs of the application. Allowing the application to serve cross-region users with low latency. Increasing the availability of the application. Increasing the load of the application.

Which of the following are benefits of hosting infrastructure in the AWS Cloud? (Choose two.). There are no upfront commitments. AWS manages all security in the cloud. Users have the ability to provision resources on demand. Users have access to free and unlimited storage. Users have control over the physical infrastructure.

Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?. AWS Organizations. AWS Trusted Advisor. AWS Usage Report. Amazon EC2 dashboard.

Which AWS service can be used to manually launch instances based on resource requirements?. Amazon EBS. Amazon S3. Amazon EC2. Amazon ECS.

A company wants to build an application for a new line of business. According to the AWS Well-Architected Framework, what design principles should be implemented? (Choose two.). Consolidate multiple AWS accounts into a single account. Buy and host hardware in the AWS Cloud. Decouple the AWS Cloud architecture to break up monolithic deployments. Move on-premises network hardware to VPCs. Design elasticity into the AWS Cloud design.

What time-savings advantage is offered with the use of Amazon Rekognition?. Amazon Rekognition provides automatic watermarking of images. Amazon Rekognition provides automatic detection of objects appearing in pictures. Amazon Rekognition provides the ability to resize millions of images automatically. Amazon Rekognition uses Amazon Mechanical Turk to allow humans to bid on object detection jobs.

How do customers benefit from Amazon's massive economies of scale?. Periodic price reductions as the result of Amazon's operational efficiencies. New Amazon EC2 instance types providing the latest hardware. The ability to scale up and down when needed. Increased reliability in the underlying hardware of Amazon EC2 instances.

Which AWS service is always free of charge for users?. Amazon S3. Amazon Aurora. Amazon EC2. AWS Identity and Access Management (IAM).

Which of the following are features of Amazon CloudWatch Logs? (Choose two.). Summaries by Amazon Simple Notification Service (Amazon SNS). Free Amazon Elasticsearch Service analytics. Provided at no charge. Adjustable retention. Real-time monitoring.

What is a benefit of loose coupling as a principle of cloud architecture design?. It facilitates low-latency request handling. It allows applications to have dependent workflows. It prevents cascading failures between different components. It allows companies to focus on their physical data center operations.

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?. A public and private key-pair. Amazon Inspector. AWS Identity and Access Management (IAM) policies. Security Groups.

Which of the following is a component of the AWS Global Infrastructure?. Amazon Alexa. AWS Regions. Amazon Lightsail. AWS Organizations.

A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement?. AWS VPN. Amazon Route 53. Amazon API Gateway. Amazon Connect.

Which guideline is a well-architected design principle for building cloud applications?. Keep static data closer to compute resources. Provision resources for peak capacity. Design for automated recovery from failure. Use tightly coupled components.

Which of the following are advantages of the AWS Cloud? (Choose two.). AWS manages the maintenance of the cloud infrastructure. AWS manages the security of applications built on AWS. AWS manages capacity planning for physical servers. AWS manages the development of applications on AWS. AWS manages cost planning for virtual servers.

Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster?. AWS Concierge. AWS CloudFormation. Amazon Simple Storage Service (Amazon S3). Amazon EC2 Auto Scaling. AWS Management Console.

Which AWS tools assist with estimating costs? (Choose three.). Detailed billing report. Cost allocation tags. AWS Simple Monthly Calculator. AWS Total Cost of Ownership (TCO) Calculator. Cost Estimator.

Which services are parts of the AWS serverless platform?. Amazon EC2, Amazon S3, Amazon Athena. Amazon Kinesis, Amazon SQS, Amazon EMR. AWS Step Functions, Amazon DynamoDB, Amazon SNS. Amazon Athena, Amazon Cognito, Amazon EC2.

Which of the following is a cloud architectural design principle?. Scale up, not out. Loosely couple components. Build monolithic systems. Use commercial database software.

Which of the following BEST describe the AWS pricing model? (Choose two.). Fixed-term. Pay-as-you-go. Colocation. Planned. Variable cost.

Which of the following are ways to improve security on AWS? (Choose two.). Using AWS Artifact. Granting the broadest permissions to all IAM roles. Running application code with AWS Cloud9. Enabling multi-factor authentication (MFA) with Amazon Cognito. Using AWS Trusted Advisor security checks.

A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and costsaving purposes. Which service should the company use?. Amazon Redshift. Amazon DynamoDB. Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store. Amazon EC2 with Amazon Elastic Block Store (Amazon EBS).

A company needs to monitor and forecast AWS costs and usage. The company also must set event-driven alert notifications that occur if spending limits are exceeded. Which AWS service or tool should the company use to meet these requirements?. AWS Budgets. Amazon CloudWatch. AWS Config. AWS Service Catalog.

A company is required to store its data close to its primary users. Which benefit of the AWS Cloud supports this requirement?. Security. High availability. Elasticity. Global footprint.

Which AWS services can host a Microsoft SQL Server database? (Choose two.). Amazon EC2. Amazon Relational Database Service (Amazon RDS). Amazon Aurora. Amazon Redshift. Amazon S3.

Which AWS managed service can be used to distribute traffic between one or more Amazon EC2 instances?. NAT gateway. Elastic Load Balancing. Amazon Athena. AWS PrivateLink.

According to the AWS shared responsibility model, who is responsible for configuration management?. It is solely the responsibility of the customer. It is solely the responsibility of AWS. It is shared between AWS and the customer. It is not part of the AWS shared responsibility model.

What is the customer's responsibility when using AWS Lambda?. Operating system configuration. Application management. Platform management. Code encryption.

A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget on cloud resources only as the company uses the resources. Which advantage of the AWS Cloud matches the company's requirements?. Reliability. Global reach. Economies of scale. Pay-as-you-go pricing.

What are the advantages of Reserved Instances? (Choose two.). They provide a discount over on-demand pricing. They provide access to additional instance types. They provide additional networking capability. Customers can upgrade instances as new types become available. Customers can reserve capacity in an Availability Zone.

Which AWS service or feature can be used to prevent SQL injection attacks?. Security groups. Network ACLs. AWS WAF. IAM policy.

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants to alternate to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements?. AWS Lambda. Amazon RDS. AWS Fargate. Amazon Athena.

A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle?. Think parallel. Implement elasticity. Decouple your components. Design for failure.

One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is: it allows the business to eliminate IT bills. it allows the business to put a server in each customer's data center. it allows the business to focus on business activities. it allows the business to leave servers unpatched.

The AWS Cost Management tools give users the ability to do which of the following? (Choose two.). Terminate all AWS resources automatically if budget thresholds are exceeded. Break down AWS costs by day, service, and linked AWS account. Create budgets and receive notifications if current of forecasted usage exceeds the budgets. Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective. Move data stored in Amazon S3 to a more cost-effective storage class.

Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?. Cost Explorer. AWS Budgets. AWS Cost and Usage Report. AWS CloudTrail.

A company wants to transfer petabytes of data as quickly as possible from on-premises locations to the AWS Cloud. Which AWS service should the company use?. AWS Snowball. AWS Global Accelerator. Amazon S3 Transfer Acceleration. Amazon Connect.

Which of the following AWS services provide compute resources? (Choose two.). AWS Lambda. Amazon Elastic Container Service (Amazon ECS). AWS CodeDeploy. Amazon Glacier. AWS Organizations.

During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?. AWS Personal Health Dashboard. AWS Trusted Advisor. AWS Artifact. Amazon S3.

An Elastic Load Balancer allows the distribution of web traffic across multiple: AWS Regions. Availability Zones. Dedicated Hosts. Amazon S3 buckets.

Which duty is a responsibility of AWS under the AWS shared responsibility model?. Identity and access management (IAM). Server-side encryption (SSE). Firewall configuration. Maintaining physical hardware.

Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.). AWS Cost and Usage report. AWS product pages. AWS Simple Monthly Calculator. Billing alerts and Amazon CloudWatch alarms. AWS Price List API.

What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.). Rotate passwords and access keys. Remove MFA tokens. Move resources to a different AWS Region. Delete AWS CloudTrail Resources. Contact AWS Support.

A company is piloting a new customer-facing application on Amazon Elastic Compute Cloud (Amazon EC2) for one month. What pricing model is appropriate?. vReserved Instances. Reserved Instances. On-Demand Instances. Dedicated Hosts.

Which task requires the use of AWS account root account user credentials?. Closing an AWS account. Creating a log file. Modifying IAM user permissions. Deleting IAM users.

Which AWS service is designed to help users who want to use machine learning for natural language processing (NLP) but do not have experience in machine learning?. Amazon Comprehend. Amazon SageMaker. AWS Deep Learning AMIs (DLAMI). Amazon Rekognition.

Which of the following AWS features enables a user to launch a pre-configured Amazon Elastic Compute Cloud (Amazon EC2) instance?. Amazon Elastic Block Store (Amazon EBS). Amazon Machine Image. Amazon EC2 Systems Manager. Amazon AppStream 2.0.

A company wants to reduce the physical compute footprint that developers use to run code. Which service would meet that need by enabling serverless architectures?. Amazon Elastic Compute Cloud (Amazon EC2). AWS Lambda. Amazon DynamoDB. AWS CodeCommit.

Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Choose two.). Ensuring that application data is encrypted at rest. Ensuring that AWS NTP servers are set to the correct time. Ensuring that users have received security training in the use of AWS services. Ensuring that access to data centers is restricted. Ensuring that hardware is disposed of properly.

Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?. Amazon GuardDuty. Amazon Macie. Amazon Inspector. AWS Shield.

Which cloud design principle aligns with AWS Cloud best practices?. Create fixed dependencies among application components. Aggregate services on a single instance. Deploy applications in a single Availability Zone. Distribute the compute load across multiple resources.

Which AWS service or feature is highly available by default?. Amazon EC2. Amazon Aurora. NAT instances. Amazon RDS.

Which AWS managed services can be used to extend an on-premises data center to the AWS network? (Choose two.). AWS VPN. NAT gateway. AWS Direct Connect. Amazon Connect. Amazon Route 53.

Which of the following services is a MySQL-compatible database that automatically grows storage as needed?. vAmazon Elastic Compute Cloud (Amazon EC2). Amazon Relational Database Service (Amazon RDS) for MySQL. Amazon Lightsail. Amazon Aurora.