A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users. The company must ensure that all users can view these videos with low latency. Which AWS service should the company use to meet this requirement? AWS Auto Scaling Amazon Kinesis Video Streams Elastic Load Balancing Amazon CloudFront.
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand? Security Reliability Performance efficiency Cost optimization.
Which TWO of the following are benefits of migrating to the AWS Cloud? Operational resilience Discounts for products on Amazon.com Business agility Business excellence Increased staff retention.
A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration. Which pillar of the AWS Well-Architected Framework does this plan represent? Security Performance efficiency Operational excellence Reliability.
A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances. Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased.
The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances.
Which AWS service or tool should the company use to meet these requirements? AWS Systems Manager Cost Explorer AWS Trusted Advisor AWS Organizations.
Which component of the AWS global infrastructure is made up of one or more discrete data centers that have redundant power, networking, and connectivity? AWS Region Availability Zone Edge location AWS Outposts.
Which TWO duties are the responsibility of a company that is using AWS Lambda? Security inside of code Selection of CPU resources Patching of operating system Writing and updating of code Security of underlying infrastructure.
Which TWO AWS services or features provide disaster recovery solutions for Amazon EC2 instances? Reserved Instances EC2 Amazon Machine Images (AMIs) Amazon Elastic Block Store (Amazon EBS) snapshots AWS Shield Amazon GuardDuty.
A company is migrating to the AWS Cloud instead of running its infrastructure on premises. Which TWO of the following are advantages of this migration? Elimination of the need to perform security auditing Increased global reach and agility Ability to deploy globally in minutes Elimination of the cost of IT staff members Redundancy by default for all compute services.
A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.
Which purchase option meets these requirements MOST cost-effectively? Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate. Buy Reserved Instances to cover all potential usage that results from the seasonal usage.
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year. Which AWS service or tool provides this information? AWS Trusted Advisor Cost Explorer Amazon Forecast Amazon CloudWatch.
A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application. Which AWS solution should the company use to meet these requirements? Amazon EC2 On-Demand Instances AWS Lambda Amazon EC2 Reserved Instances Amazon EC2 Spot Instances.
Which AWS service or feature allows users to connect with and deploy AWS services programmatically? AWS Management Console AWS Cloud9 AWS CodePipeline AWS software development kits (SDKs).
A company plans to create a data lake that uses Amazon S3. Which factor will have the MOST effect on cost? The selection of S3 storage tiers Charges to transfer existing data into Amazon S3 The addition of S3 bucket policies S3 ingest fees for each request.
A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next 12 months. What is the MOST cost-effective instance purchasing option that meets these requirements? Spot Instances Savings Plans Dedicated Hosts On-Demand Instances.
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources? Cost allocation tags Key pairs Amazon Inspector AWS Trusted Advisor.
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing. Which AWS service or feature will help the company with its migration? AWS Trusted Advisor AWS Consulting Partners AWS Artifacts AWS Managed Services.
Which AWS service or tool should a company use to centrally request and track service limit increases? AWS Config Service Quotas AWS Service Catalog AWS Budgets.
Which documentation does AWS Artifact provide? Amazon EC2 terms and conditions AWS ISO certifications A history of a company's AWS spending A list of previous-generation Amazon EC2 instance types.
Which task requires using AWS account root user credentials? Viewing billing information Changing the AWS Support plan Starting and stopping Amazon EC2 instances Opening an AWS Support case.
A company needs to simultaneously process hundreds of requests from different users. Which combination of AWS services should the company use to build an operationally efficient solution? Amazon Simple Queue Service (Amazon SQS) and AWS Lambda AWS Data Pipeline and Amazon EC2 Amazon Kinesis and Amazon Athena AWS Amplify and AWS AppSync.
What is the scope of a VPC within the AWS network? A VPC can span all Availability Zones globally. A VPC must span at least two subnets in each AWS Region. A VPC must span at least two edge locations in each AWS Region. A VPC can span all Availability Zones within an AWS Region.
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection. Which AWS service or feature can be used to establish this connection? AWS Client VPN VPC peering AWS Direct Connect VPC endpoints.
According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database? Manage connections to the database Install Microsoft SQL Server Design encryption-at-rest strategies Apply minor database patches.
What are TWO advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? EC2 includes operating system patch management. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM). EC2 has a 100% service level agreement (SLA). EC2 has a flexible, pay-as-you-go pricing model. EC2 has automatic storage cost optimization.
A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month. How can the user see if a change was made? Use Amazon EC2 to see if the security group was changed. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group. Use AWS CloudTrail to see if the security group was changed. Use Amazon CloudWatch to see if the security group was changed.
Which AWS service will help protect applications running on AWS from DDoS attacks? Amazon GuardDuty AWS WAF AWS Shield Amazon Inspector.
Which AWS service or feature acts as a firewall for Amazon EC2 instances? Network ACL Elastic network interface Amazon VPC Security group.
How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model? AWS resources do not incur costs There are no infrastructure operating costs There are no upfront cost commitments There are no software licensing costs.
A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture. What can the company do to meet this requirement? Scale vertically to a larger EC2 instance size. Scale horizontally across multiple Availability Zones. Purchase an EC2 Dedicated Instance. Change the EC2 instance family to a compute optimized instance.
A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days. Which benefit has this company experienced by moving to the AWS Cloud? Elasticity Flexibility Agility Resilience.
Which of the following TWO are included in AWS Enterprise Support? AWS technical account manager (TAM) AWS partner-led support AWS Professional Services Support of third-party software integration to AWS 5-minute response time for critical issues.
A global media company uses AWS Organizations to manage multiple AWS accounts. Which AWS service or feature can the company use to limit the access to AWS services for member accounts? AWS Identity and Access Management (IAM) Service control policies (SCPs) Organizational units (OUs) Access control lists (ACLs).
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources. Which AWS solution should the company use to meet this requirement? AWS Config AWS software development kits (SDKs) AWS Service Catalog AWS AppSync.
An online company was running a workload on premises and was struggling to launch new products and features. After migrating the workload to AWS, the company can quickly launch products and features and can scale its infrastructure as required. Which AWS Cloud value proposition does this scenario describe? Business agility High availability Security Centralized auditing.
Which TWO of the following are advantages of the AWS Cloud? AWS management of user-owned infrastructure Ability to quickly change required capacity High economies of scale Increased deployment time to market Increased fixed expenses.
AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users. This describes which advantage of the AWS Cloud? Launch globally in minutes Increase speed and agility High economies of scale No guessing about compute capacity.
A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively? Standard Reserved Instances On-Demand Instances Spot Instances Convertible Reserved Instances.
A company is developing a mobile app that needs a high-performance NoSQL database. Which TWO AWS services could the company use for this database? Amazon Aurora Amazon RDS Amazon Redshift Amazon DocumentDB (with MongoDB compatibility) Amazon DynamoDB.
Which TWO tasks are the responsibility of AWS, according to the AWS shared responsibility model? Patch the Amazon EC2 guest operating system. Upgrade the firmware of the network infrastructure. Apply password rotation for IAM users. Maintain the physical security of edge locations. Maintain least privilege access to the root user account.
Which TWO of the following are features of network ACLs as they are used in the AWS Cloud? They are stateless. They are stateful. They evaluate all rules before allowing traffic. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. They operate at the instance level.
A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes. Which pillar of the AWS Well-Architected Framework does this scenario represent? Security Performance efficiency Cost optimization Operational excellence.
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload? Amazon Route 53 Amazon Macie AWS Direct Connect AWS PrivateLink.
A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs. Which AWS Billing and Cost Management tool provides this data in a graphical format? AWS Bills Cost Explorer AWS Cost and Usage Report AWS Budgets.
A company wants to run production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week. Which AWS Support plan will meet these requirements? AWS Basic Support AWS Enterprise Support AWS Business Support AWS Developer Support.
Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud? Use a monolithic design. Design for automation. Design for single points of failure. Loosely couple components.
Which TWO AWS services are managed database services? Amazon Elastic Block Store (Amazon EBS) Amazon S3 Amazon RDS Amazon Elastic File System (Amazon EFS) Amazon DynamoDB.
Which TWO are characteristics of the Amazon Elastic Block Service (EBS)? Best for data that requires retention. Best for temporary data that is not kept long term Separate drives from the host computer of an EC2 instance. Physically attached to the host computer of an EC2 instance Data is deleted when an EC2 instance is stopped.
What are TWO components of an AWS Site-to-Site VPN connection? AWS Storage Gateway Virtual private gateway NAT gateway Customer gateway Internet gateway.
An e-commerce application uses Java Message Service (JMS) messaging to communicate between its fulfillment center and the application after an order has been placed. The company wants to migrate its messaging application to AWS. The company also wants to minimize the effort used to rewrite the messaging code.
Which AWS service will meet these requirements? Amazon Simple Notification Service (Amazon SNS) Amazon Simple Email Service (Amazon SES) Amazon Pinpoint Amazon MQ.
Which of the following is a design principle of the reliability pillar of the AWS Well-Architected Framework? Scale globally in minutes. Adopt a consumption model. Automatically recover from failure. Make frequent, small, reversible changes. .
An application is receiving SQL injection attacks from multiple external sources. Which Amazon service or feature can help automate mitigation against these attacks? AWS Web Application Firewall Security groups Elastic Load Balancer Network ACL.
A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendation to potential cost savings. Which cloud concept does this analysis demonstrate? Autoscaling Rightsizing Load balancing High Availability.
A company is building a new application on AWS. The company needs the application to remain available if an individual application component fails. Which design principle should the company use to meet this requirement? Disposable resources Automation Rightsizing Loose coupling.
Which TWO encryption types can be used to protect objects at rest in Amazon S3? Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) Server-side encryption with AWS KMS managed keys (SSE-KMS) TLS SSL Transparent Data Encryption (TDE)
.
Which TWO AWS network services or features allow CIDR block notation when providing an IP address range? Security groups Amazon Machine Image (AMI) Network access control list (network ACL) AWS Budgets Amazon Elastic Block Store (Amazon EBS).
A company is designing workloads in the AWS Cloud. The company wants the workloads to perform their intended function correctly and consistently throughout their lifecycle. Which pillar of the AWS Well-Architected Framework does this goal represent? Operational excellence Security Reliability Performance efficiency.
A cloud practitioner needs to apply security rules to a subnet for Amazon EC2 instances. Which AWS service or feature can the cloud practitioner use to meet this requirement? AWS WAF Network ACLs Security groups AWS Managed Services (AMS).
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours. Which pricing model enables the company to optimize costs and meet these requirements? Reserved Instances Spot Instances On-Demand Instances Dedicated Instances.
What can a user accomplish using AWS CloudTrail? Generate an IAM user credentials report. Record API calls made to AWS services. Assess the compliance of AWS resource configurations with policies and guidelines. Ensure that Amazon EC2 instances are patched with the latest security updates.
.
Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts? AWS Cost and Usage Report AWS Organizations Cost Explorer AWS Budgets.
Which AWS service provides a scalable data warehouse solution? Amazon S3 Amazon DynamoDB Amazon Kinesis Data Streams Amazon Redshift.
Which TWO tasks are the company's responsibility, according to the AWS shared responsibility model? Patch the servers where the Lambda functions are deployed. Establish the IAM permissions that define who can run the Lambda functions. Write the code for the Lambda functions to define the application logic. Deploy Amazon EC2 instances to support the Lambda functions. Scale out the Lambda functions when the load increases.
.
A company is using the AWS Free Tier for several AWS services for an application. What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits? The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage. AWS Support will contact the company to set up standard service charges. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period. The company's AWS account will be frozen and can be restarted after a payment plan is established.
A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network. Which AWS service or feature should the company use to limit network traffic directly to its RDS instance? Network ACLs Security groups AWS WAF Amazon GuardDuty.
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets? AWS Shield Amazon Macie AWS Network Firewall Amazon Cognito.
A company wants to improve the overall availability and performance of its applications that are hosted on AWS. Which AWS service should the company use? Amazon Connect Amazon Lightsail AWS Global Accelerator AWS Storage Gateway.
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity? AWS Service Catalog AWS Systems Manager AWS IAM Access Analyzer AWS Organizations.
A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements. Which pillar of the AWS Well-Architected Framework aligns with these requirements? Operational excellence Security Reliability Cost optimization.
A company wants to launch its workload on AWS and requires the system to automatically recover from failure. Which pillar of the AWS Well-Architected Framework includes this requirement? Cost optimization Operational excellence Performance efficiency Reliability.
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs. Which AWS service or feature meets these requirements? AWS Direct Connect AWS Transit Gateway AWS Site-to-Site VPN VPC endpoints.
Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data? Amazon Athena Amazon QuickSight Amazon CloudWatch AWS Organizations.
Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization? Amazon Inspector AWS CloudTrail Amazon CloudWatch AWS Config.
A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan. Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event? AWS Abuse team The designated AWS technical account manager (TAM) AWS infrastructure event management AWS Professional Services.
A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles. Which AWS service can be used to meet this requirement? AWS Systems Manager AWS CloudFormation AWS CodeCommit AWS Config.
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes. Which AWS service or tool should the company use to meet these requirements? AWS Organizations Cost Explorer AWS Budgets AWS Trusted Advisor.
Which TWO IT controls do AWS and the customer share, according to the AWS shared responsibility model? Physical and environmental controls Patch management Cloud awareness and training Zone security Application data encryption.
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted. Which S3 feature should the company turn on to meet this requirement? Server access logging S3 Versioning S3 Lifecycle rules Encryption in transit and at rest.
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency. Which AWS service or feature should the company use to meet these requirements? Availability Zones AWS Local Zones AWS Wavelength AWS Outposts.
A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources. Which TWO actions will meet these requirements? Use AWS Service Catalog to identify a list of on-premises resources that can be migrated. Create a VPN connection between an on-premises device and a virtual private gateway in the VPC. Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources. Set up an AWS Direct Connect connection between the on-premises data center and AWS. Use Amazon CloudFront to restrict access to static web content provided through the on- premises web servers.
A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment. Which AWS service should the company use to meet this requirement? Amazon S3 Amazon AppStream 2.0 AWS AppSync AWS Outposts.
A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software. Which AWS service should the company use to meet these requirements? Amazon VPC Amazon EC2 Amazon GuardDuty AWS Direct Connect.
Which AWS service uses edge locations? Amazon Aurora AWS Global Accelerator Amazon Connect AWS Outposts.
Which AWS service eliminates the need to provision and manage the container hosts? AWS Fargate Amazon FSx for Windows File Server Amazon Elastic Container Service (Amazon ECS) Amazon EC2.
Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies? AWS Systems Manager AWS IAM Access Analyzer AWS Trusted Advisor Amazon GuardDuty.
AWS Trusted Advisor can monitor and provide advice on what TWO characteristics of an AWS account? Compliance with security best practices Most Voted Application performance Most Voted Network utilization Cost optimization Most Voted Most Voted Compliance status.
Which TWO credential components are required to gain programmatic access to an AWS account? An access key ID A primary key A secret access key A user ID A secondary key .
A company needs to monitor and receive alerts about AWS Management Console sign-in events that involve the AWS account root user. Which AWS service can the company use to meet these requirements? Amazon Cloudwatch AWS Config Amazon Trusted Advisor Amazon Identity and Access Management (IAM).
Which TWO tasks are the customer’s responsibility according to the AWS shared responsibility model? Patch the operating system that AWS Lambda functions use Install patches on Amazon RDS DB instances Control physical access to the data center that contains a customer’s VPC Configure IAM users according to the principle of least privilege. Configure an Amazon S3 bucket to allow public access.
A company has an on-premises Linux-based server with an Oracle database that runs on it. The company want so migrate the database server to run on an Amazon EC2 instance in AWS. Which service should the company use to complete the migration. AWS Database Migration Service (AWS DMS) AWS Migration Hub AWS Application Migration Service (AWS MGN) AWS Application Discovery Service.
What are TWO benefits of using the AWS Cloud for companies with customers in many countries around the world? Companies can deploy applications in multiple AWS Regions to reduce latency Amazon Translate automatically translates third-party website interfaces into multiple languages. Amazon CloudFront has multiple edge locations around the world to reduce latency. Amazon can allow users to build applications that can respond to user requests in many languages. Elastic Cloud Balancing can distribute applications web traffic to multiple AWS Regions around the world, which reduces latency.
What are the TWO advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? Preventing a single point of failure Reducing the operational costs of the application Allowing the application to serve cross-Region users with low latency Increasing the availability of the application Increasing the load of the application.
A company wants to establish a consistent and private connection from the company’s on-premises data center to the AWS Cloud. Which AWS service will meet these requirements? AWS Client VPN Amazon Connect AWS Direct Connect AWS Site-to-site VPN.
What is the minimum AWS Support plan that provides technical support through phone calls? Enterprise Business Developer Basic.
A company wants to create a learning application for students. The learning application must give students the option to choose a button to have the text read out loud to them. Which AWS machine learning service will meet this requirement? Amazon Transcribe Amazon Polly Amazon Translate Amazon Textract.
Which TWO of the functionalities are characteristics of Amazon S3? A global file system An object store A local file store A network file system A durable storage system.
How does AWS charge for AWS Lambda usage once the free tier has been exceeded? Pick TWO By the time it takes for the Lambda function to run By the number of versions of a specific Lambda function By the number of requests made for a given Lambda function By the programming language that is used for the Lambda function By the total number of Lambda functions in an AWS account.
Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate? Reserved instances On-Demand Instances Dedicated Instances Spot Instances.
Each department within a company has its own independent AWS account and its own payment method. The company needs to centralize departmental governance and consolidate payments. How can the company achieve these objectives by using AWS services or features? Use AWS Cloud Map on each departmental account. Create an organization in AWS Organizations with all feature enabled within one account. Invite all accounts to join the organization. Use AWS System Manager OpsCenter. Use the AWS Cost and Usage Reports page of the AWS Billing and Cost Management Console.
A company is moving all of their development activies to AWS. The company wants a solution to store and manage their developer’s source code. Which AWS coding service will meet this requirement? AWS CodeArtifiact AWS CodeBuild AWS CodePipeline AWS CodeCommit.
Which AWS Service identifies security groups that allow unrestricted access to a user’s AWS resources? AWS Trusted Advisor AWS Config AWS CloudWatch AWS CloudTrail.
A company is hosting a static website from a single Amazon S3 bucket. Which AWS service will achieve lower latency and high transfer speeds? AWS Elastic Beanstalk Amazon DynamoDB Accelerator (DAX) Amazon Route 53 Amazon CloudFront.
A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3. Which AWS service can meet these requirements? Amazon Inspector Amazon Macie Amazon GuardDuty AWS Secrets Manager.
A company requires a relational database on AWS that records new customer orders from a website. Which AWS service or feature will meet this requirement? Amazon Global Accelerator Amazon DynamoDB Amazon Aurora Amazon EBS.
A user deploys an Amazon RDS DB instance in multiple Availability Zones. This strategy involves which pillar of the AWS Well-Architected Framework? Performance efficiency Reliability Cost optimization Security.
A company requires an encrypted connection between the company's on-premises servers and AWS. The connection must use the company's existing internet connection. Which solution will meet these requirements? AWS DirectConnect Amazon Connect Amazon CloudFront AWS Site-to-Site VPN.
A company is building an application on AWS The application needs to comply with credit card regulatory requirements. The company needs proof that the AWS services and deployment are in compliance. Which TWO actions should the company take to meet these requirements? Use Amazon Inspector to submit the application for certification Ensure that the application's underlying hardware components comply with requirements Use AWS Artifact to access AWS documents about the compliance of the services Get the compliance of the application certified by a company assessor Use AWS Security Hub to certify the compliance of the application.
A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise. Which AWS service should the company use to build this capability? Amazon SageMaker Amazon Textract Amazon Recognition Amazon Comprehend.
A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database software. Which AWS service can be used to accomplish this? Amazon RDS Amazon DynamoDB Amazon Aurora Amazon Redshift.
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.
Which AWS service should the company use to meet these requirements? AWS IoT Core Amazon Lightsail AWS Storage Gateway AWS Snowball Edge.
A retail company needs to build a highly available architecture for a new e-commerce platform. The company is using only AWS services that replicate data across multiple Availability Zones. Which TWO AWS services should the company use to meet this requirement? Amazon EC2 Amazon Elastic Block Store (Amazon EBS) Amazon Aurora Amazon DynamoDB Amazon Redshift.
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity? Agility Elasticity Reliability Durability.
Service control policies (SCPs) manage permissions for which of the following? Availability Zones AWS Regions AWS Organizations Edge locations.
Which AWS service can be used to encrypt data at rest? Amazon GuardDuty AWS Shield AWS Security Hub AWS Key Management Service (AWS KMS).
Which TWO characteristics are advantages of using the AWS Cloud? A 100% service level agreement (SLA) for all AWS services Compute capacity that is adjusted on demand Availability of AWS Support for code development Enhanced security Increases in cost and complexity.
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations. What should the user do to meet this requirement? Use AWS Secrets Manager. Tag the objects in the S3 bucket. Use security groups. Use network ACLs.
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers. Which AWS service will meet these requirements? Amazon Elastic Transcoder Amazon Comprehend AWS Glue Amazon Rekognition.
What advantages does a database administrator obtain by using the Amazon Relational Database Service (RDS)? RDS provides 99.99999999999% reliability and durability RDS databases automatically scale based on load RDS enables users to dynamically adjust CPU and RAM resources RDS simplifies relational database administration tasks.
Which TWO design principles are enabled by the AWS Cloud to improve the operation of workloads? Minimize platform design Loose coupling Customized hardware Remove single points of failure Minimum viable product.
A user is planning to launch three EC2 instances behind a single Elastic Load Balancer. The deployment should be highly available. Launch the instances across multiple Availability Zones in a single AWS Region. Launch the instances as EC2 Spot Instances in the same AWS Region and the same Availability Zone. Launch the instances in multiple AWS Regions, and use Elastic IP addresses. Launch the instances as EC2 Reserved Instances in the same AWS Region, but in different Availability Zones.
Why is AWS more economical than traditional data centers for applications with varying compute workloads? Amazon EC2 costs are billed on a monthly basis. Users retain full administrative access to their Amazon EC2 instances. Amazon EC2 instances can be launched on demand when needed. Users can permanently run enough instances to handle peak workloads.
Which AWS service would simplify the migration of a database to AWS? AWS Storage Gateway AWS Database Migration Service (AWS DMS) Amazon EC2 Amazon AppStream 2.0.
Which AWS offering enables users to find, buy, and immediately start using software solutions in their AWS environment? AWS Config AWS OpsWorks AWS SDK AWS Marketplace.
Which AWS networking service enables a company to create a virtual network within AWS? AWS Config Amazon Route 53 AWS Direct Connect Amazon Virtual Private Cloud (Amazon VPC).
Which of the following is an AWS responsibility under the AWS shared responsibility model? Configuring third-party applications Maintaining physical hardware Securing application access and data Managing guest operating systems.
Which component of the AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery? AWS Regions Edge locations Availability Zones Virtual Private Cloud (VPC).
How would a system administrator add an additional layer of login security to a user's AWS Management Console? Use Amazon Cloud Directory Audit AWS Identity and Access Management (IAM) roles Enable multi-factor authentication Enable AWS CloudTrail.
Which service can identify the user that made the API call when an Amazon EC2 instance is terminated? AWS Trusted Advisor AWS CloudTrail AWS X-Ray AWS Identity and Access Management (AWS IAM).
Which service would be used to send alerts based on Amazon CloudWatch alarms? Amazon Simple Notification Service (Amazon SNS) AWS CloudTrail AWS Trusted Advisor Amazon Route 53.
Where can a user find information about prohibited actions on the AWS infrastructure? AWS Trusted Advisor AWS Identity and Access Management (IAM) AWS Billing Console AWS Acceptable Use Policy.
|
