Kuin_雲１

Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries?. Pay-as-you-go pricing. Capacity forecasting. Economies of scale. Global reach.

In which scenario should Amazon EC2 Spot Instances be used?. A company wants to move its main website to AWS from an on-premises web server. A company has a number of application services whose Service Level Agreement (SLA) requires 99.999% uptime. A company's heavily used legacy database is currently running on-premises. A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances.

Which AWS service is used to pay AWS bills, and monitor usage and budget costs?. AWS Billing and Cost Management. Consolidated billing. Amazon CloudWatch. Amazon QuickSight.

A company wants to build its new application workloads in the AWS Cloud instead of using on-premises resources. What expense can be reduced using the AWS Cloud?. The cost of writing custom-built Java or Node .js code. Penetration testing for security. hardware required to support new applications. Writing specific test cases for third-party applications.

Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Choose two.). AWS WAF. AWS Trusted Advisor. AWS Direct Connect. AWS Organizations. Network ACLs.

Which AWS feature should a customer leverage to achieve high availability of an application?. AWS Direct Connect. Availability Zones. Data centers. Amazon Virtual Private Cloud (Amazon VPC).

Which AWS service needs to be enabled to track all user account changes within the AWS Management Console?. AWS CloudTrail. Amazon Simple Notification Service (Amazon SNS). VPC Flow Logs. AWS CloudHSM.

Which of the following is an advantage of using AWS?. AWS audits user data. Data is automatically secure. There is no guessing on capacity needs. AWS manages compliance needs.

What does the Amazon S3 Intelligent-Tiering storage class offer?. Payment flexibility by reserving storage capacity. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume. Automatic cost savings by moving objects between tiers based on access pattern changes. Secure, durable, and lowest cost storage for data archival.

Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.). AWS Trusted Advisor. AWS Online Tech Talks. AWS Blog. AWS Forums. AWS Classroom Training.

The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.). Information on Amazon S3 bucket permissions. AWS service outages. Multi-factor authentication enabled on the AWS account root user. Available software patches. Number of users in the account.

A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting. Which AWS service should the company use?. Amazon GuardDuty. AWS WAF. AWS Trusted Advisor. Amazon Inspector.

Which AWS Support plan provides a full set of AWS Trusted Advisor checks?. Business and Developer Support. Business and Basic Support. Enterprise and Developer Support. Enterprise and Business Support.

The AWS global infrastructure consists of Regions, Availability Zones, and what else?. VPCs. Data centers. Dark fiber network links. Edge locations.

Which AWS service can be used to provide an on-demand, cloud-based contact center?. AWS Direct Connect. Amazon Connect. AWS Support Center. AWS Managed Services.

What is the benefit of elasticity in the AWS Cloud?. Ensure web traffic is automatically spread across multiple AWS Regions. Minimize storage costs by automatically archiving log data. Enable AWS to automatically select the most cost-effective services. Automatically adjust the required compute capacity to maintain consistent performance.

Which AWS service handles the deployment details of capacity provisioning, load balancing, Auto Scaling, and application health monitoring?. AWS Config. AWS Elastic Beanstalk. Amazon Route 53. Amazon CloudFront.

A user deploys an Amazon RDS DB instance in multiple Availability Zones. This strategy involves which pillar of the AWS Well-Architected Framework?. Performance efficiency. Reliability. Cost optimization. Security.

Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers?. Amazon S3. Amazon Glacier. Amazon Elastic Block Store (Amazon EBS). Amazon Elastic File System (Amazon EFS).

A company previously lost data that was stored in an on-premises data center. To protect against future loss of data, the company wants to use AWS to automatically launch thousands of its machines in a fully provisioned state in minutes, in a format that supports data restoration. Which AWS service should the company use to meet these requirements?. AWS Direct Connect. AWS Storage Gateway. Cloud Endure Disaster Recovery. AWS Backup.

A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS. Which AWS service can the company use to meet this requirement?. AWS Step Functions. AWS Service Catalog. Amazon Simple Queue Service (Amazon SQS). AWS Batch.

Which of the following are valid ways for a customer to interact with AWS services? (Choose two.). Command line interface. On-premises. Software Development Kits. Software-as-a-service. Hybrid.

Which Amazon S3 storage class allows users to store data backups for long periods of time at the LOWEST cost?. S3 Standard-Infrequent Access (S3 Standard-IA). S3 Standard. S3 Glacier. S3 One Zone-Infrequent Access (S3 One Zone-IA).

Which load balancer types are available with Elastic Load Balancing (ELB)? (Choose two.). Public load balancers with AWS Application Auto Scaling capabilities. F5 Big-IP and Citrix NetScaler load balancers. Classic Load Balancers. Cross-zone load balancers with public and private IPs. Application Load Balancers.

Which of the following describes a security best practice that can be implemented using AWS IAM?. Disable AWS Management Console access for all users. Generate secret keys for every IAM user. Grant permissions to users who are required to perform a given task only. Store AWS credentials within Amazon EC2 instances.

A system in the AWS Cloud is designed to withstand the failure of one or more components. What is this an example of?. Elasticity. High Availability. Scalability. Agility.

A large organization has a single AWS account. What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.). It allows for administrative isolation between different workloads. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account. Amazon Quick Sight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.

How can a company isolate the costs of production and non-production workloads on AWS?. Create Identity and Access Management (IAM) roles for production and non-production workloads. Use different accounts for production and non-production expenses. Use Amazon EC2 for non-production workloads and other services for production workloads. Use Amazon CloudWatch to monitor the use of services.

Which of the following is a component of the shared responsibility model managed entirely by AWS?. Patching operating system software. Encrypting data. Enforcing multi-factor authentication. Auditing physical data center assets.

Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value?. Dedicated RIs. Scheduled RIs. Convertible RIs. Standard RIs.

A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet. Which service will facilitate private hybrid connectivity?. Amazon Virtual Private Cloud (Amazon VPC) NAT Gateway. AWS Direct Connect. Amazon Simple Storage Service (Amazon S3) Transfer Acceleration. AWS Web Application Firewall (AWS WAF).

Which AWS service provides on-demand of AWS security and compliance documentation?. AWS Directory Service. AWS Artifact. AWS Trusted Advisor. Amazon Inspector.

The AWS Total Cost of Ownership (TCO) Calculator is used to: receive reports that break down AWS Cloud compute costs by duration, resource, or tags. estimate savings when comparing the AWS Cloud to an on-premises environment. estimate a monthly bill for the AWS Cloud resources that will be used. enable billing alerts to monitor actual AWS costs compared to estimated costs.

A company must process a large amount of data from social media accounts by making graphical queries with high throughput. Which AWS service will help the company design a cloud architecture that will meet these requirements?. Amazon RDS. Amazon DynamoDB. Amazon Neptune. Amazon Redshift.

An IT department provisions more servers than are needed to run a workload. Which cloud architecture design principle supports changing this approach?. Protect data in transit and at rest. Stop guessing capacity. Improve through game days. Annotate documentation.

What function do security groups serve related to Amazon Elastic Compute Cloud (Amazon EC2) instance security?. Act as a virtual firewall for the Amazon EC2 instance. Secure AWS user accounts with AWS Identity and Access Management (IAM) policies. Provide DDoS protection with AWS Shield. Use Amazon CloudFront to protect the Amazon EC2 instance.

Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud?. Managing edge locations. Physical security. Firewall configuration. Global infrastructure.

An application is receiving SQL injection attacks from multiple external resources. Which AWS service or feature can help automate mitigation against these attacks?. AWS WAF. Security groups. Elastic Load Balancer. Network ACL.

Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?. AWS Direct Connect. Amazon Light-sail. Amazon Simple Queue Service (Amazon SQS). Amazon CloudWatch.

Which AWS service uses edge locations?. Amazon Aurora. AWS Global Accelerator. Amazon Connect. AWS Outposts.

Which AWS service can be used to retrieve compliance reports on demand?. AWS Secrets Manager. AWS Artifact. AWS Security Hub. AWS Certificate Manager.

If each department within a company has its own AWS account, what is one way to enable consolidated billing?. Use AWS Budgets on each account to pay only to budget. Contact AWS Support for a monthly bill. Create an AWS Organization from the payer account and invite the other accounts to join. Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon Redshift, and then run a billing report.

Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?. AWS Secrets Manager. AWS CloudHSM. AWS Key Management Service (AWS KMS). AWS Directory Service.

When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?. Spot Instances. Dedicated Instances. Dedicated Hosts. Reserved Instances.

What is an example of agility in the AWS Cloud?. Access to multiple instance types. Access to managed services. Using Consolidated Billing to produce one bill. Decreased acquisition time for new compute resources.

How can AWS enable a company to control expenses as an application's usage changes unpredictably?. AWS will refund the cost difference if a customer moves to larger servers. The application can be built to scale up or down automatically as resources are needed. Spot instances will automatically be used if the price is lower than on-demand instances. Amazon CloudWatch will automatically predict what resources are needed.

Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS Command Line Interface (AWS CLI)?. IAM group. IAM user. IAM role. IAM policy.

Which of the following is an AWS Well-Architected Framework design principle related to reliability?. Deployment to a single Availability Zone. Ability to recover from failure. Design for cost optimization. Perform operations as code.

Which disaster recovery scenario offers the lowest probability of down time?. Multi-site active-active. Warm standby. Pilot light. Backup and restore.

An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What it the SIMPLEST way to provide this information?. Create an IAM user account for the auditor, granting the auditor administrator permissions. Take a screenshot of each user's page in the AWS Management Console, then provide the screenshots to the auditor. Download the IAM credential report, then provide the report to the auditor. D. Download the AWS Trusted Advisor report, then provide the report to the auditor.

A company needs to improve the response rate of high-volume queries to its relational database. Which AWS service should the company use to offload requests to the database and improve overall response times?. Amazon DynamoDB Accelerator (DAX). Amazon ElastiCache. Elastic Load Balancing. AWS Global Accelerator.

Which AWS tool is used to compare the cost of running an application on-premises to running the application in the AWS Cloud?. AWS Trusted Advisor. AWS Simple Monthly Calculator. AWS Total Cost of Ownership (TCO) Calculator. Cost Explorer.

How do Amazon EC2 Auto Scaling groups help achieve high availability for a web application?. They automatically add more instances across multiple AWS Regions based on global demand of the application. They automatically add or replace instances across multiple Availability Zones when the application needs it. They enable the application's static content to reside closer to end users. They are able to distribute incoming requests across a tier of web server instances.

What credential components are required to gain programmatic access to an AWS account? (Choose two.). An access key ID. A primary key. A secret access key. A user ID. A secondary key.

What will help a company perform a cost benefit analysis of migrating to the AWS Cloud?. Cost Explorer. AWS Total Cost of Ownership (TCO) Calculator. AWS Simple Monthly Calculator. AWS Trusted Advisor.

Which tool can be used to monitor AWS service limits?. AWS Total Cost of Ownership (TCO) Calculator. AWS Trusted Advisor. AWS Personal Health Dashboard. AWS Cost and Usage report.

A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server. Which Amazon EC2 instance pricing option will meet these requirements?. Dedicated Hosts. Dedicated Instances. Spot Instances. Reserved Instances.

According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.). Network infrastructure and virtualization of infrastructure. Security of application data. Guest operating systems. Physical security of hardware. Credentials and policies.

Which are customer responsibilities when using Amazon EC2? (Choose two.). Underlying hardware maintenance. File-system-level encryption. Guest operating system firewall configuration. Hypervisor-level software patching. Physical security at data center facilities.

Which services use AWS edge locations? (Choose two.). Amazon CloudFront. AWS Shield. Amazon EC2. Amazon RDS. Amazon ElastiCache.

What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas?. AWS Enterprise Support. AWS Solutions Architects. AWS Professional Services. AWS Account Managers.

How does the AWS Enterprise Support Concierge team help users?. Supporting application development. Providing architecture guidance. Answering billing and account inquires. Answering questions regarding technical support cases.

Which AWS service or feature is designed to help companies take advantage of quantity discounts available from AWS?. Saving Plans. AWS Budgets. AWS Organizations. AWS Pricing Calculator.

Which AWS service or feature enables users to encrypt data at rest in Amazon S3?. IAM policies. Server-side encryption. Amazon GuardDuty. Client-side encryption.

The AWS Cloud's multiple Regions are an example of: agility. global infrastructure. elasticity. pay-as-you-go pricing.

What are the benefits of consolidated billing for AWS Cloud services? (Choose two.). Volume discounts. A minimal additional fee for use. One bill for multiple accounts. Installment payment options. Custom cost and usage budget creation.

A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?. Deliver the content through Amazon CloudFront. Store the content on Amazon S3 and enable S3 cross-region replication. Implement a VPN across multiple AWS Regions. Deliver the content through AWS PrivateLink.

Where can AWS compliance and certification reports be downloaded?. AWS Artifact. AWS Concierge. AWS Certificate Manager. AWS Trusted Advisor.

Which AWS service provides a simple way to set up a new multi-account AWS environment and govern it at scale?. AWS Trusted Advisor. AWS Security Hub. AWS Control Tower. AWS Resource Access Manager.

A user needs to generate a report that outlines the status of key security checks in an AWS account. The report must include: "The status of Amazon S3 bucket permissions. Whether multi-factor authentication is enabled for the AWS account root user. If any security groups are configured to allow unrestricted access." Where can all this information be found in one location?. Amazon QuickSight dashboard. AWS CloudTrail trails. AWS Trusted Advisor report. IAM credential report.

Which service enables customers to audit API calls in their AWS accounts?. AWS CloudTrail. AWS Trusted Advisor. Amazon Inspector. AWS X-Ray.

A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?. EC2 security groups. AWS Config. Amazon Macie. Amazon Inspector.

Which AWS service is a relational database compatible with MySQL and PostgreSQL?. Amazon Redshift. Amazon DynamoDB. Amazon Aurora. Amazon Neptune.

A user is able to set up a master payer account to view consolidated billing reports through: AWS Budgets. Amazon Macie. Amazon QuickSight. AWS Organizations.

Which of the following is the customer's responsibility under the AWS shared responsibility model?. Patching underlying infrastructure. Physical security. Patching Amazon EC2 instances. Patching network infrastructure.

A company's web application currently has tight dependencies on underlying components, so when one component fails the entire web application fails. Applying which AWS Cloud design principle will address the current design issue?. Implementing elasticity, enabling the application to scale up or scale down as demand changes. Enabling several EC2 instances to run in parallel to achieve better performance. Focusing on decoupling components by isolating them and ensuring individual components can function when other components fail. Doubling EC2 computing resources to increase system fault tolerance.

Which AWS services help to improve application performance by reducing latency while accessing content globally? (Choose two.). Amazon CloudFront. AWS VPN. AWS Direct Connect. AWS Global Accelerator. Amazon S3 Glacier.

A company plans to store sensitive data in an Amazon S3 bucket. Which task is the responsibility of AWS?. Activate encryption at rest for the data. Provide security for the physical infrastructure. Train the company's employees about cloud security. Remove personally identifiable information (PII) from the data.

When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)?. Dedicated Hosts. Reserved Instances. On-Demand Instances. No Upfront Reserved Instances.

A company wants to allow full access to an Amazon S3 bucket for a particular user. Which element in the S3 bucket policy holds the user details that describe who needs access to the S3 bucket?. Principal. Action. Resource. Statement.

A company must store critical business data in Amazon S3 with a backup to another AWS Region. How can this be achieved?. Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally. Set up Amazon S3 cross-region replication to another AWS Region. Configure the AWS Backup service to back up to the data to another AWS Region. Take Amazon S3 bucket snapshots and copy that data to another AWS Region.

What approach to transcoding a large number of individual video files adheres to AWS architecture principles?. Using many instances in parallel. Using a single large instance during off-peak hours. Using dedicated hardware. Using a large GPU instance type.

A company has a 500 TB image repository that needs to be transported to AWS for processing. Which AWS service can import this data MOST cost-effectively?. AWS Snowball. AWS Direct Connect. AWS VPN. Amazon S3.

What is a characteristic of Convertible Reserved Instances (RIs)?. Users can exchange Convertible RIs for other Convertible RIs from a different instance family. Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions. Users can sell and buy Convertible RIs on the AWS Marketplace. Users can shorten the term of their Convertible RIs by merging them with other Convertible RIs.

Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.). Setting up server-side encryption on an Amazon S3 bucket. Amazon RDS instance patching. Network and firewall configurations. Physical security of data center facilities. Compute capacity availability.

A company wants to migrate a MySQL database to AWS but does not have the budget for Database Administrators to handle routine tasks including provisioning, patching, and performing backups. Which AWS service will support this use case?. Amazon RDS. Amazon DynamoDB. Amazon DocumentDB. Amazon ElastiCache.

A cloud practitioner needs an effective method to decrease application latency and increase performance for end users. Which services will help? (Choose two.). Amazon Elastic Container Service (Amazon ECS) for Kubernetes. Amazon S3. Amazon AppStrearn 2.0. Amazon ElastiCache. Amazon CloudFront.

A customer is deploying a new application and needs to choose an AWS Region. Which of the following factors could influence the customer's decision? (Choose two.). Reduced latency to users. The application's presentation in the local language. Data sovereignty compliance. Cooling costs in hotter climates. Proximity to the customer's office for on-site visits.

A company needs an Amazon S3 bucket that cannot have any public objects due to compliance requirements. How can this be accomplished?. Enable S3 Block Public Access from the AWS Management Console. Hold a team meeting to discuss the importance if only uploading private S3 objects. Require all S3 objects to be manually approved before uploading. Create a service to monitor all S3 uploads and remove any public uploads.

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?. Vertical scaling. Manual failure recovery. Testing recovery procedures. Changing infrastructure manually.

Which AWS service can send an alert when personally identifiable information (PII) is stored within an Amazon S3 bucket?. Amazon GuardDuty. Amazon Macie. Amazon Inspector. AWS Trusted Advisor.

Which of the following IT tasks does AWS perform to offload a company's IT resource management responsibilities? (Choose two.). Configuring operating system firewalls. Setting up access controls for data. Backing up databases. Configuring database user accounts. Installing operating systems.

A company needs to migrate its on-premises data to the AWS Cloud. The company requires elastic, highly optimized connectivity. Which AWS service meets these requirements?. Amazon S3 Glacier. AWS Storage Gateway. AWS Backup. Amazon Elastic File System (Amazon EFS).

Why should a company choose AWS instead of a traditional data center?. AWS provides users with full control over the underlying resources. AWS does not require long-term contracts and provides a pay-as-you-go model. AWS offers edge locations in every country, supporting global reach. AWS has no limits on the number of resources that can be created.

Why should a company choose AWS instead of a traditional data center?. AWS provides users with full control over the underlying resources. AWS does not require long-term contracts and provides a pay-as-you-go model. AWS offers edge locations in every country, supporting global reach. AWS has no limits on the number of resources that can be created.

Who is responsible for patching the guest operating system for Amazon RDS?. The AWS Product team. The customer Database Administrator. Managed partners. AWS Support.

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?. AWS CLI. AWS Developer Center. AWS Cloud Development Kit (AWS CDK). AWS CodeStar.

How should a web application be deployed to ensure high availability in the AWS Cloud?. Deploy multiple instances of the application in multiple Availability Zones. Deploy multiple instances of the application in a single Availability Zone. Deploy the application to a compute-optimized Amazon EC2 instance in a single Availability Zone. Deploy the application in one Amazon EC2 instance in an Auto Scaling group.

A user with an AWS Basic Support plan has determined that illegal activities are being run on their AWS resources. What is the recommended method for the user to report the activity to AWS?. Contact the AWS Concierge Support team. Contact an AWS technical account manager. Contact the AWS Abuse team. Contact the AWS Support team.

Which security credentials are required to run commands by using the AWS Command Line Interface (AWS CLI)?. Access Key ID and Secret Access Key. AWS root user email and password. Amazon Elastic Compute Cloud (Amazon EC2) key pairs. AWS Identity and Access Management (IAM) user name and password.