AWS Certified Cloud Practitioner Exam - Free Exam Q&as, Page 1 - ExamTopics

12/7/22, 8:59 AM AWS Certified Cloud Practitioner Exam – Free Exam Q&As, Page 1 | ExamTopics
- Expert Verified, Online, Free.
 Custom View Settings
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner/custom-view/ 1/456
Topic 1 - Single Topic
Question #1 Topic 1
A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users.
The company must ensure that all users can view these videos with low latency.
Which AWS service should the company use to meet this requirement?
A. AWS Auto Scaling
B. Amazon Kinesis Video Streams
C. Elastic Load Balancing
D. Amazon CloudFront
Correct Answer: D
Community vote distribution

D (100%)
  Jlee7 2 days, 10 hours ago

D: Amazon CLoutFront
upvoted 1 times
  Abhiram2404 2 days, 17 hours ago

AWS CloudFront provides Securely deliver content with low latency and high transfer speeds
upvoted 2 times
  Scylon 2 weeks, 6 days ago

Selected Answer: D
Re-reviewed the material as I had forgotten about edge sites function.
upvoted 1 times
  JYKL88 3 weeks, 1 day ago

D is the answer
upvoted 1 times
  ZK1999 1 month ago

Selected Answer: D
CloudFront
upvoted 2 times
  SOLIU 1 month, 1 week ago

D: Amazon CloudFront
upvoted 1 times
  ccpmad 1 month, 2 weeks ago

Selected Answer: D
D is correct
upvoted 1 times
  ymbv 1 month, 2 weeks ago

Selected Answer: D
D: Amazon Cloudfront
upvoted 2 times
  JA2018 1 month, 2 weeks ago

Selected Answer: D
Reduce latency by delivering data through 410+ globally dispersed Points of Presence (PoPs) with automated network mapping and intelligent
routing.
https://aws.amazon.com/cloudfront/
upvoted 4 times
  zeighnab 1 month, 2 weeks ago

Selected Answer: D
D: Amazon Cloudfront
upvoted 1 times
  newme 1 month, 3 weeks ago
Selected Answer: D
It's D
upvoted 1 times
  SoloMehar 1 month, 3 weeks ago

can anyone please share this dump to this email veerlasaimehar@gmail.com thanks in advance.
upvoted 1 times
  Suresh78 1 month, 3 weeks ago

Amazon CloudFront
upvoted 1 times
  ooyanpaing 1 month, 4 weeks ago

Selected Answer: D
It is D cloud front.
upvoted 1 times
  sri_ram 2 months ago

Selected Answer: D
D cloud front
upvoted 1 times
  MST5 2 months ago

Answer is D
upvoted 1 times
  apchandana 2 months ago

Selected Answer: D
Cloud front is the CDN
upvoted 1 times
Question #2 Topic 1
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and
dynamically acquire computing resources to meet demand?
A. Security
B. Reliability
C. Performance efficiency
D. Cost optimization
Correct Answer: B

B (100%)
  jackmuihk Highly Voted  3 months, 1 week ago

Selected Answer: B
B. Reliability
The reliability pillar focuses on workloads performing their intended functions and how to recover quickly from failure to meet demands. Key topics
include distributed system design, recovery planning, and adapting to changing requirements.
https://aws.amazon.com/architecture/well-architected/
upvoted 8 times
  jackmuihk 3 months, 1 week ago

If you are considering C.Performance Efficiency, here's the explanation:
The performance efficiency pillar focuses on structured and streamlined allocation of IT and computing resources. Key topics include selecting
resource types and sizes optimized for workload requirements, monitoring performance, and maintaining efficiency as business needs evolve.
upvoted 3 times
  zomo2022 Most Recent  4 days, 16 hours ago

B. Reliability
upvoted 1 times
  picosola 1 week, 2 days ago

Selected Answer: B
B correct
upvoted 1 times
  bulla 2 weeks, 3 days ago

Hi Guys - Could you share the PDF on chandra.d1983@gmail.com
upvoted 1 times
  sruet 2 weeks, 3 days ago

Selected Answer: B
Reliability
upvoted 1 times

Selected Answer: B
Reliability
upvoted 1 times
  Kantene 1 month, 1 week ago

B. Releability
upvoted 1 times

Selected Answer: B
It is B
upvoted 1 times
  Suresh78 1 month, 3 weeks ago
Reliability
upvoted 1 times

Selected Answer: B
Reliability
upvoted 1 times
  Makanhudo 2 months ago

Selected Answer: B
Reliability
upvoted 1 times
  JuanAnTech 2 months, 1 week ago

Selected Answer: B
Reliability
upvoted 1 times
  T_234 2 months, 1 week ago

Answer is B.Reliability (recover)
upvoted 1 times
  nitul 2 months, 2 weeks ago

B. Reliability
upvoted 1 times
  M5858 2 months, 2 weeks ago

Selected Answer: B
Answer is B
upvoted 1 times
  khulecal 2 months, 2 weeks ago

B. Reliability
upvoted 2 times
  sumanshu 2 months, 3 weeks ago

Vote for B
upvoted 1 times
Question #3 Topic 1
Which of the following are benefits of migrating to the AWS Cloud? (Choose two.)
A. Operational resilience
B. Discounts for products on Amazon.com
C. Business agility
D. Business excellence
E. Increased staff retention
Correct Answer: AC

AC (100%)
  Kayode Highly Voted  3 months ago

Selected Answer: AC
Ref: https://www.easydeploy.io/blog/benefits-of-aws-migration/
upvoted 5 times
  ZK1999 Most Recent  1 month ago

Selected Answer: AC
A and C
upvoted 1 times

Vote for A and C
upvoted 2 times
  ACLOUD_PRACTITIONER 1 month, 2 weeks ago

Selected Answer: AC
C. Business Agility
upvoted 2 times

Selected Answer: AC
It is A, C
upvoted 1 times

Selected Answer: AC
C. Business Agility
upvoted 1 times
  Nazdak 2 months ago

C. Business Agility
upvoted 1 times

Selected Answer: AC
C. Business Agility
upvoted 1 times

C. Business Agility
upvoted 1 times
  Moedges 2 months, 1 week ago

Selected Answer: AC
Vote for A and C
upvoted 1 times
  M5858 2 months, 2 weeks ago
Selected Answer: AC
C. Business agility
upvoted 1 times
  jrba0001 2 months, 3 weeks ago

Selected Answer: AC
a and c
upvoted 1 times

Vote for A & C
upvoted 1 times
  Julio_P 3 months ago

Selected Answer: AC
Agree with the correct answer
upvoted 1 times
Question #4 Topic 1
A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able
to take advantage of advanced technologies quickly after the migration.
Which pillar of the AWS Well-Architected Framework does this plan represent?
A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability
Correct Answer: B

B (72%) C (28%)
  MottaM 2 days, 21 hours ago

Reference: https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/
My answer would be B because of the following reason:

In the official documentation, for the design principle of pillar "Operational Efficiency" we don't see the work serverless computing mentioned as
below:
Design Principles
There are five design principles for operational excellence in the cloud:
Perform operations as code

Make frequent, small, reversible changes
Refine operations procedures frequently
Anticipate failure
Learn from all operational failures
but we could see the "serverless computing" mentioned in pillar "Performance Efficiency"
Design Principles
There are five design principles for performance efficiency in the cloud:
Democratize advanced technologies

Go global in minutes
#####Use serverless architectures#####
Experiment more often
Consider mechanical sympathy
upvoted 1 times
  rocketdog48 6 days, 7 hours ago

Selected Answer: C
This is not a well worded question. Both B and C are technically correct. The mention of the word "serverless" implies B and not C, but many are
ignoring the second requirement which is taking advantage of the tech immediately, which implies C, operational excellence. I'm leaving this
question out of my personal scoring.
upvoted 1 times
  parku 1 week, 5 days ago

Selected Answer: B
performance efficieny is the 6 pillars of aws well architected framework which focuses on serverless.
https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/
upvoted 2 times

Selected Answer: B
Performance efficiency: The performance efficiency pillar focuses on the efficient use of computing resources to meet requirements, and how to
maintain efficiency as demand changes and technologies evolve.
Operational Excellence: The operational excellence pillar includes how your organization supports your business objectives, your ability to run
workloads effectively, gain insight into their operations, and to continuously improve supporting processes and procedures to deliver business
value.
I understand why you could think it is C, but I believe the correct answer is B (key part: as demand changes and technologies evolve)
upvoted 4 times
  JYKL88 2 weeks, 4 days ago
Selected Answer: B
serverless and advance tech... is performance, not operation. answer B
upvoted 2 times
  Lechomaster 2 weeks, 5 days ago

I suggest C as all other looks much more less probable
upvoted 1 times

Selected Answer: C
for me C is the least probable option
upvoted 1 times
  drinktea28 2 weeks, 5 days ago

Selected Answer: B
Key words: severless, advanced technologies. See: https://docs.aws.amazon.com/wellarchitected/latest/framework/perf-dp.html.
Performance efficiency design principles: Democratize advanced technologies and Use serverless architectures. It's clear.
upvoted 2 times

Selected Answer: C
C seems more applicable as it relates to automation vs performance which is about resource management, not really advanced features.
upvoted 1 times
  rajpint 3 weeks, 4 days ago

Answer is C. Clearly stated in https://docs.aws.amazon.com/wellarchitected/latest/serverless-applications-lens/prepare.html
upvoted 2 times
  ogerber 3 weeks, 6 days ago

Selected Answer: C
Text mentions serverless. Serverless means less operational overhead.
upvoted 3 times
  Mizaan 4 weeks ago

Selected Answer: C
Text mentions serverless. Serverless means less operational overhead. Leass operational overhead is Operational excellence.
upvoted 1 times

Selected Answer: B
Performance efficiency
upvoted 2 times
  ksellesl 1 month, 1 week ago

Not preformance efficiency, but operational excellence. Serverless is all about reducing operational overhead.
upvoted 3 times
  JA2018 1 month, 1 week ago

Selected Answer: B
From: https://docs.aws.amazon.com/wellarchitected/latest/performance-efficiency-pillar/performance-efficiency.html
The performance efficiency pillar focuses on the efficient use of computing resources to meet requirements, and how to maintain efficiency as
demand changes and technologies evolve.
upvoted 1 times
  EazElr 1 month, 1 week ago

Selected Answer: B
"Serverless" is the key word here.
upvoted 1 times

B. Performance Efficiency
upvoted 1 times
Question #5 Topic 1
A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved
Instances.
Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they
purchased.
The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Systems Manager
B. Cost Explorer
C. AWS Trusted Advisor
D. AWS Organizations
Correct Answer: B
Reference:
https://aws.amazon.com/ru/organizations/

D (100%)
  Aidee Highly Voted  1 month, 2 weeks ago

I'm seriously concerned about the integrity of the answers said to be correct
upvoted 11 times
  RachnaArun Highly Voted  1 month, 4 weeks ago

AWS organization manages and optimises costs across AWS accounts and resources using the tool "Cost Explorer"
As the question is which tool to be used, answer is Cost explorer
upvoted 7 times
  rocketdog48 Most Recent  6 days, 7 hours ago

Selected Answer: D
This needs to be corrected. Cost Explorer does not provide this functionality. The answer is absolutely D.
upvoted 1 times
  aftu 1 week, 4 days ago

I found this tricky. The Cost Explorer tool would be the one that helps the organization identify the problem in resource allocation. However, the
requirement in question is the accounts management between departments, so the AWS Organizations would be the service to enable this
functionality - the questions ask for a service or tool. My answer is D.
upvoted 1 times

Selected Answer: D
AWS organizations help manage share reserved instances by other departments under it.
upvoted 1 times

Selected Answer: D
from AWS Organisations page:
Use cases: Share common resources across accounts. More easily share central resources, software applications, directories, and services within
your organization.
upvoted 2 times

Selected Answer: D
This one is clearly D. Costs are associated with your bills, where organizations allow you to share these resources and get better discounts.
upvoted 1 times

Ans: AWS Organization. can share the unused reserved instances
upvoted 1 times
  N3ar 3 weeks, 2 days ago

D. AWS Organization!
upvoted 1 times
  ferrari_ 3 weeks, 3 days ago

answer is Aws Organization. Cost explorer is a tool that enables you to view and analyze your costs and usage
upvoted 2 times
  myan2492 1 month ago

upvoted 1 times
  marck0996 1 month ago

"The company needs to manage the AWS accounts for all the departments" that should be an hint
upvoted 2 times

Correct is D. Because asked "manage the AWS accounts for all the departments"
upvoted 2 times
  rbortolin 1 month, 1 week ago

Selected Answer: D
Correct is D, not B
upvoted 1 times
  JA2018 1 month, 2 weeks ago

Selected Answer: D
More easily share central resources, software applications, directories, and services within your organization.
BTW, did this question appear in the exam?
https://aws.amazon.com/organizations/
upvoted 1 times
  Alexyz 1 month, 2 weeks ago

I believe the correct is D
upvoted 1 times
  ACLOUD_PRACTITIONER 1 month, 2 weeks ago

Selected Answer: D
Cost Explorer is a tool used by AWS Organization Service. So the answer is D.
upvoted 1 times
Question #6 Topic 1
Which component of the AWS global infrastructure is made up of one or more discrete data centers that have redundant power, networking, and
connectivity?
A. AWS Region
B. Availability Zone
C. Edge location
D. AWS Outposts
Correct Answer: B

B (92%) 8%
  Amandine 2 weeks, 6 days ago

The answer is B
upvoted 1 times
  JA2018 3 weeks ago

Selected Answer: B
Every AWS AZ will have 1 or more independent Data Centers
from: https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
upvoted 2 times

ANS: B
upvoted 1 times
  chen_max 3 weeks, 6 days ago

the anwser is B
upvoted 1 times
  Kaleche 4 weeks ago

Selected Answer: B
availability zone
upvoted 1 times

Vote B. Availability Zone
upvoted 1 times

An availability zone contains multiple data centers?
I thought an availability zone meant a data center.
upvoted 2 times

Every AWS AZ will have 1 or more independent Data Centers
from: https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
upvoted 2 times
  Rejoice_Benjamin 2 months ago

B. Availability zone
upvoted 1 times
  nina1983 2 months, 1 week ago

Availability Zone
upvoted 1 times

Selected Answer: B
B. Availability Zone
upvoted 1 times

FROM AMIT :) B. AZ
upvoted 1 times
  FR_Wolfman 2 months, 2 weeks ago

Selected Answer: B
Answer is B. An availability zone can be made of one or multiple datacenters. An AWS region has at least 3 availability zones, that are separated by
multiple kilometers. Then, a region has at least 3 datacenters. It cannot be answer A.
upvoted 3 times
  anagy11 2 months, 3 weeks ago

Selected Answer: B
Answer is B
upvoted 1 times

Selected Answer: B
vote b
upvoted 1 times

Vote for B
upvoted 1 times
  real111 2 months, 4 weeks ago

B - An Availability Zone is a single data center or a group of data centers within a Region.
Availability Zones are located tens of miles apart from each other. This helps them to provide interconnectivity to support the services and
applications that run within a Region.
upvoted 1 times
  30Miles 2 months, 4 weeks ago

Selected Answer: B
B is correct
upvoted 1 times
Question #7 Topic 1
Which duties are the responsibility of a company that is using AWS Lambda? (Choose two.)
A. Security inside of code
B. Selection of CPU resources
C. Patching of operating system
D. Writing and updating of code
E. Security of underlying infrastructure
Correct Answer: AD

AD (92%) 8%
  cyndd Highly Voted  3 months ago

Selected Answer: AD
Lambda runs your code on high availability compute infrastructure and performs all the administration of your compute resources. This includes
server and operating system maintenance, capacity provisioning and automatic scaling, code and security patch deployment, and code monitoring
and logging. All you need to do is supply the code. Ref:https://aws.amazon.com/lambda/features/
upvoted 5 times
  Amandine Most Recent  2 weeks, 6 days ago

A and D
upvoted 1 times

A and D
upvoted 2 times

Selected Answer: AD
https://aws.amazon.com/compliance/shared-responsibility-model/
Customer is responsible for security "IN" the cloud. For this question, it means the Company ("Customer") is responsible for their own code
management (updates. CI/CD)
upvoted 1 times

AND
upvoted 2 times
  MadhuBachu 1 month, 2 weeks ago

in this question Company means Customer? i got confused.
upvoted 2 times

Selected Answer: AD
It is A, D
upvoted 1 times

Selected Answer: AD
upvoted 1 times

C. Patching of operating system
upvoted 1 times
  Caio_V 1 month, 2 weeks ago

C. is incorrect because Lambda is a serverless solution, thus, the OS and functioning infrastructure is not a responsability of developers.
The correct is: A/D
upvoted 3 times
Selected Answer: AD
upvoted 1 times
  sylva91 2 months, 2 weeks ago

Selected Answer: D
everything that is code related is your responsibility
upvoted 1 times

Selected Answer: AD
Answer is AD
upvoted 1 times

Vote for A & D
upvoted 1 times
  urhobo 3 months ago

Ans :D
AWS Lambda is a serverless, event-driven compute service that lets you run code for virtually any type of application.
https://aws.amazon.com/lambda/
https://aws.amazon.com/lambda/
upvoted 2 times

Selected Answer: AD
As a serverless service, all your worries are about your code so the answer is correct
upvoted 1 times
Question #8 Topic 1
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
A. 2¡‫ ׀•׀‬Reserved Instances
B. EC2 Amazon Machine Images (AMIs)
C. Amazon Elastic Block Store (Amazon EBS) snapshots
D. AWS Shield
E. Amazon GuardDuty
Correct Answer: BC

BC (100%)
  jlima2k Highly Voted  3 months ago

https://docs.aws.amazon.com/whitepapers/latest/disaster-recovery-workloads-on-aws/disaster-recovery-options-in-the-cloud.html
You can back up Amazon EC2 instances used by your workload as Amazon Machine Images (AMIs). The AMI is created from snapshots of your
instance's root volume and any other EBS volumes attached to your instance. You can use this AMI to launch a restored version of the EC2 instance
upvoted 8 times

B and C
upvoted 1 times

B and C
upvoted 1 times

B. EC2 Amazon Machine Images (AMIs)
C. Amazon Elastic Block Store (Amazon EBS) snapshots
upvoted 1 times
  discussion_nickname 2 months, 1 week ago

Selected Answer: BC
b and c
upvoted 2 times

Selected Answer: BC
Answer is BC
upvoted 2 times

voted b/c
upvoted 1 times

Only B&C looks valid, after eliminating other options
upvoted 1 times
  Howard9192 3 months ago

Where does the EC2 AMI come in?
upvoted 3 times
  JA2018 2 weeks, 2 days ago

from jlima2k's response
You can back up Amazon EC2 instances used by your workload as Amazon Machine Images (AMIs). The AMI is created from snapshots of your
instance's root volume and any other EBS volumes attached to your instance. You can use this AMI to launch a restored version of the EC2
instance
upvoted 1 times
  30Miles 3 months, 1 week ago

snapshots: https://aws.amazon.com/ebs/snapshots/
upvoted 2 times
Question #9 Topic 1
A company is migrating to the AWS Cloud instead of running its infrastructure on premises.
Which of the following are advantages of this migration? (Choose two.)
A. Elimination of the need to perform security auditing
B. Increased global reach and agility
C. Ability to deploy globally in minutes
D. Elimination of the cost of IT staff members
E. Redundancy by default for all compute services
Correct Answer: BD

BC (88%) 9%
  sriAWSome Highly Voted  2 months, 2 weeks ago

Additional reference to support the answers B, C.
Refer to: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 6 times
  amishomu Most Recent  4 days, 16 hours ago

Selected Answer: B
As per the six benefits of using cloud, B&C should be the answer
upvoted 1 times
  bonee 5 days, 16 hours ago

B and C
upvoted 1 times

Selected Answer: BC
absolutely B+C. Cloud Practitioner documentation explicitly states that AWS does not reduce the need for staff of training.
upvoted 1 times
  Cricca1862 2 weeks, 2 days ago

Selected Answer: BC
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
  Munwalinwali 2 weeks, 2 days ago

Selected Answer: BC
Cost of IT staff might stay the same
upvoted 2 times

Selected Answer: BC
Elimination of the IT Staff just by moving to the cloud? B and C are the correct ones
upvoted 1 times
  Serkan_Bill 2 weeks, 3 days ago

Additional reference to support the answers B, C.
Six advantages of cloud computing
1-Trade fixed expense for variable expense
2-Benefit from massive economies of scale
3-Stop guessing capacity
4-Increase speed and agility
5-Stop spending money running and maintaining data centers
6-Go global in minutes
upvoted 1 times

B and C
upvoted 1 times
  teegasper 3 weeks ago
B,C, D are all correct

upvoted 1 times

even after moving to AWS (or any public cloud platform), you can never eliminate the cost of IT staff members. You still need IT staff to manage
the EC2 instances sitting on top of the hypervisor.
upvoted 2 times

dont agree with D though. so B and C
upvoted 1 times

B, C.....
upvoted 1 times
  robertomsen 4 weeks ago

Selected Answer: BC
B and C are the correct answers.
upvoted 1 times
  Renzo22 4 weeks ago

Selected Answer: BC
B, C is right
upvoted 1 times
  Nageswar_5050 4 weeks, 1 day ago

Selected Answer: BD
B and D
upvoted 1 times
  Anirudct 4 weeks, 1 day ago

Selected Answer: BC
B and C are the correct answers
upvoted 1 times
  SmartLearner 1 month ago

Selected Answer: BC
B and C
upvoted 1 times
Question #10 Topic 1
A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any
interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is
not possible to modify the application.
Which purchase option meets these requirements MOST cost-effectively?
A. Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load.
B. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances.
C. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate.
D. Buy Reserved Instances to cover all potential usage that results from the seasonal usage.
Correct Answer: B

C (97%)
  Iragmt Highly Voted  2 months, 1 week ago

Selected Answer: C
Who's providing the "correct" answer here? Answers should all be reviewed, you're confusing the examinees. C should be the answer.
upvoted 20 times
  khensi Highly Voted  1 month, 2 weeks ago

C is the correct answer, the question explicitly mentioned that "The application cannot sustain any interruption" of which Spot Instances are ideal
for workloads with flexible start and end times, or that can withstand interruptions. Ideally we want pricing that doesn't allow interruption in this
case it will be On-Demand.
upvoted 10 times

Selected Answer: C
C is the correct answer, there is no doubt about it. The question mentions "Interruption Can not be tolerated' and 'MOST Cost Effective'
upvoted 1 times

Selected Answer: C
Spot instances can be interrupted.
upvoted 1 times

Selected Answer: C
application cannot sustain interruptions
upvoted 2 times

Selected Answer: C
If it can't sustain interruptions, Spot instances are out of question. C
upvoted 2 times

I go with C
upvoted 1 times

Selected Answer: C
Its C. The question specifically stated the program can't be changed so B is not an option.
upvoted 1 times
  Tittu14 3 weeks, 1 day ago

The Correct Ans is B . No doubt .
upvoted 1 times

hint - cannot sustain interruption. so Spot instance is out. Ans is C
upvoted 1 times
  Makku69 3 weeks, 1 day ago

Selected Answer: C
Question clearly states that it cant sustain any interruptions. So On-Demand is a better option. Not sure why B is that includes SPOT ?
upvoted 2 times
  Danjes 3 weeks, 3 days ago

Selected Answer: C
Spot instances can be interrupted, so that can't be the correct answer.
The correct answers is use "On-Demand" for the seasonal peaks.
Correct Answer: C
upvoted 2 times

Selected Answer: C
predictable usage means need to use reserved instances. for unpredictable need to use on-demand . As application cannot be interrupted , spot
instances cannot be selected.
upvoted 2 times

Answer is C. Cause it cannot be interrupted. Spot instances can cause interruption
upvoted 1 times
  ogerber 3 weeks, 6 days ago

Selected Answer: B
The application cannot sustain any interruption
upvoted 1 times

Selected Answer: C
The question says, that it can't be interrupted, so the Spot instance shouldn't be the right one.
upvoted 1 times

Selected Answer: C
Spot instance has interruption.
upvoted 1 times
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year.
Which AWS service or tool provides this information?
A. AWS Trusted Advisor
B. Cost Explorer
C. Amazon Forecast
D. Amazon CloudWatch
Correct Answer: B

B (100%)
  blackcomb Highly Voted  3 months ago

After you enable Cost Explorer, AWS prepares the data about your costs for the current month and the last 12 months, and then calculates the
forecast for the next 12 months. The current month's data is available for viewing in about 24 hours. The rest of your data takes a few days longer.
Cost Explorer updates your cost data at least once every 24 hours.
upvoted 9 times

Selected Answer: B
'B' is the answer
upvoted 1 times
  zomo2022 4 days, 17 hours ago

C. Amazon Forecast
upvoted 1 times
  Guderz90 1 week, 6 days ago

Selected Answer: B
cost explorer is the answer
upvoted 1 times
  dexdinh91 2 weeks ago

definitely B
upvoted 1 times

Selected Answer: B
it's B
upvoted 1 times

it should B
upvoted 1 times

Selected Answer: B
It is B
upvoted 2 times

Selected Answer: B
vote for b
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Agree with the correct answer and people explanations
upvoted 1 times
  Kayode 3 months ago

Selected Answer: B
https://aws.amazon.com/aws-cost-management/aws-cost-explorer/
upvoted 2 times
  Howard9192 3 months ago

This is what is said on AWS, "AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and
usage over time. Get started quickly by creating custom reports that analyze cost and usage data. Analyze your data at a high level (for example,
total costs and usage across all accounts) or dive deeper into your cost and usage data to identify trends, pinpoint cost drivers, and detect
anomalies."
upvoted 2 times
  Ashif_Ejaz 3 months ago

cost explorer is used to forecast not use to review previous months cost, cloud watch or cloud usage report will be correct answer
upvoted 2 times

There are cost explorer services available that will help you to view and analyze your usage costs for the last 13 months. You can also get a cost
forecast for the upcoming three months.
upvoted 2 times
A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by
shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the
application.
Which AWS solution should the company use to meet these requirements?
A. Amazon EC2 On-Demand Instances
B. AWS Lambda
C. Amazon EC2 Reserved Instances
D. Amazon EC2 Spot Instances
Correct Answer: B

B (100%)
  Luwatz Highly Voted  3 months, 1 week ago

Selected Answer: B
I totally agree with you people on this. Well done Exam topic team
upvoted 5 times
  UchihaUdrama Most Recent  1 day, 20 hours ago

Vote B
upvoted 1 times

Selected Answer: B
It's B
upvoted 1 times

It is A
upvoted 1 times

I change my mind, it should be B
upvoted 1 times

Selected Answer: B
Lamda is the answer
upvoted 1 times

Selected Answer: B
From: https://aws.amazon.com/lambda/
1. Run code without provisioning or managing infrastructure. Simply write and upload code as a .zip file or container image.
2. Automatically respond to code execution requests at any scale, from a dozen events per day to hundreds of thousands per second.
3. Save costs by paying only for the compute time you use—by per-millisecond—instead of provisioning infrastructure upfront for peak capacity.
upvoted 4 times

Selected Answer: B
Lambda is created for this purpose, I think.
Maybe one of the purposes
upvoted 2 times

Selected Answer: B
B-AWS Lambda
upvoted 2 times

Vote for B
upvoted 2 times

Selected Answer: B
There are many clues in the question that points to AWS Lambda definition.
upvoted 4 times
Which AWS service or feature allows users to connect with and deploy AWS services programmatically?
A. AWS Management Console
B. AWS Cloud9
C. AWS CodePipeline
D. AWS software development kits (SDKs)
Correct Answer: D

D (88%) 13%

Selected Answer: D
it says programmatically, so it's SDK
upvoted 1 times

Selected Answer: D
if it is programmatically, it has to be SDK
upvoted 1 times

Selected Answer: D
SDK is the key
upvoted 1 times

answer is D, SDK!
upvoted 1 times

Selected Answer: D
https://docs.aws.amazon.com/sdk-for-java/?icmpid=docs_homepage_sdktoolkits
The AWS SDK for Java provides a Java API for Amazon Web Services infrastructure services. Using the SDK, you can build applications on top of
Amazon S3, Amazon EC2, Amazon DynamoDB, and more.
upvoted 3 times

Selected Answer: D
D is correct. SDK.
upvoted 1 times
  Tharun07 1 month, 1 week ago

Selected Answer: D
D for sure
upvoted 1 times
  master_mak 1 month, 2 weeks ago

Selected Answer: C
Question is asking for AWS Service and SDK is not an AWS Service. imho it is C
upvoted 1 times
  MrSaint 2 days, 16 hours ago

AWS services OR FEATURE, so SDK is a feature.
upvoted 1 times
  master_mak 1 month, 2 weeks ago

Question is asking for AWS Service and SDK is not an AWS Service. imho it is C
upvoted 1 times

Selected Answer: D
"programmatically" is the keyword

upvoted 2 times
  hditano 2 months, 2 weeks ago
Selected Answer: D
D of course
upvoted 1 times

Vote for D
upvoted 1 times
  WSanka 3 months ago

Selected Answer: D
D is the answer
Code pipeline is to orchestrate code commit,build and deploy
upvoted 1 times
  anipanwar 3 months ago

D. AWS software development kits (SDKs)
SDK allows to connect programmatically
upvoted 1 times
  nic1501 3 months, 1 week ago

Selected Answer: D
The best answer would be cloud formation but since its not there D seems to be closest
upvoted 2 times
  AlrexZ 3 months, 1 week ago

Selected Answer: C
I think it's C
upvoted 1 times
  highlightfilm 3 months, 1 week ago

CodePipeline is not necessarily used for deploying AWS services. It is a DevOps service that offers CI/CD that allows you to deploy code changes
to a set codebase given your team/company’s release cycle.
The correct answer is D
upvoted 6 times
A company plans to create a data lake that uses Amazon S3.

Which factor will have the MOST effect on cost?
A. The selection of S3 storage tiers
B. Charges to transfer existing data into Amazon S3
C. The addition of S3 bucket policies
D. S3 ingest fees for each request
Correct Answer: A

A (94%) 6%
  Eagle01 Highly Voted  3 weeks, 4 days ago

Selected Answer: A
I don’t know why some people are considering “Charges to Transfer existing Data into Amazon S3” if AWS charges nothing to “Data transferred IN
from Internet”.
See Prices calculations of AWS S3 on https://aws.amazon.com/s3/pricing/
upvoted 5 times
  Cricca1862 Most Recent  2 weeks, 2 days ago

Selected Answer: A
it's clearly A
upvoted 1 times

I go with A
upvoted 1 times

Vote A
upvoted 2 times
  Jay1234_ 1 month, 1 week ago

Selected Answer: A
Vote A. The most "effect" on cost. Transferring the data is going to be a set cost. There's not really multiple options to effect the price of
transferring. Which storage tier they pick out of all the options can largely effect the final cost.
upvoted 2 times
  Yaosoft 1 month, 1 week ago

Selected Answer: A
The question is "Which factor..."
The storage tiers is a factor (A) while
ingestion is an operation(D).
upvoted 3 times
  VedantMunster 1 month, 2 weeks ago

Vote A
upvoted 1 times
  Aniruth0077 1 month, 2 weeks ago

I think it is B As transfer of data takes some serious cost
upvoted 1 times
  nublit 1 month, 3 weeks ago

Selected Answer: D
It is D, because Amazon charges for data entry, and mentions that it wants to enter a data lake, which refers to a lot of data.
upvoted 1 times
  Shaychay 1 month, 1 week ago

Amazon only charges for egress data not ingress
upvoted 4 times
Selected Answer: A
It is A
upvoted 1 times
  SMarius 1 month, 3 weeks ago

Selected Answer: A
Vote A
upvoted 1 times
  ubexam 2 months, 2 weeks ago

Selected Answer: A
if they have infrequently accessed data then they must select tier accordingly. Similarly may be glacier is an option for them
upvoted 2 times

Vote for A
upvoted 1 times
A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously
for the next
12 months.
What is the MOST cost-effective instance purchasing option that meets these requirements?
A. Spot Instances
B. Savings Plans
C. Dedicated Hosts
D. On-Demand Instances
Correct Answer: B

B (100%)
  real111 Highly Voted  2 months, 3 weeks ago

Selected Answer: B
Amazon EC2 Savings Plans enable you to reduce your compute costs by committing to a consistent amount of compute usage for a 1-year or 3-
year term. This results in savings of up to 72% over On-Demand Instance costs. Any usage up to the commitment is charged at the discounted
Savings Plan rate (for example, $10 an hour). Any usage beyond the commitment is charged at regular On-Demand Instance rates.
upvoted 6 times
  N9 Most Recent  4 days, 12 hours ago

What if upfront reserve instances vs saving plans?
upvoted 1 times
  Islam27 2 weeks, 4 days ago

It was appeared to be dedicated but 1year-3years will be saving plans as the most suitable option B
upvoted 2 times

Vote B
upvoted 1 times

Selected Answer: B
https://aws.amazon.com/savingsplans/
upvoted 2 times

Selected Answer: B
Vote B
upvoted 1 times

Selected Answer: B
It is B
upvoted 1 times
  RICHARDALEX007 2 months, 3 weeks ago

Correct, it is Saving Plants
upvoted 3 times

Vote for B
upvoted 1 times
  Nomething 2 months, 3 weeks ago

Selected Answer: B
B. Savings Plans
upvoted 2 times
  bravemanvvn 3 months ago
Selected Answer: B
Savings Plans 12 month
upvoted 4 times

B. Savings Plans
upvoted 2 times
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?
A. Cost allocation tags
B. Key pairs
C. Amazon Inspector
D. AWS Trusted Advisor
Correct Answer: A

A (100%)
  amishomu 4 days, 15 hours ago

Selected Answer: A
Answer is 'A'
upvoted 1 times
  ExamGuruBhai 6 days, 8 hours ago

Vote A
upvoted 1 times

I go with A
upvoted 2 times

Selected Answer: A
answer: A
upvoted 1 times
  Uchendum 1 month ago

Vote A
upvoted 1 times

Selected Answer: A
Vote A
upvoted 2 times

Selected Answer: A
it is A
upvoted 1 times
  lij3438 1 month, 3 weeks ago

A should be the answer.
upvoted 1 times

Selected Answer: A
voting for a
upvoted 1 times
  v1mal 2 months, 1 week ago

Selected Answer: A
answer is A
upvoted 1 times
  Istiaque 2 months, 1 week ago

answer is A
upvoted 2 times
  IvanKhru 2 months, 3 weeks ago

Vote for A
upvoted 1 times
Vote for A
upvoted 1 times
  Esward 3 months ago

Cost Allocation Tags is the correct answer
upvoted 3 times
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.
Which AWS service or feature will help the company with its migration?
B. AWS Consulting Partners
C. AWS Artifacts
D. AWS Managed Services
Correct Answer: D

B (62%) D (38%)
  manolin Highly Voted  2 months, 4 weeks ago

Answer is D: Consulting Partners is not a AWS service, it is a collaboration of third parties
upvoted 25 times

D definitely can't be answer as managed service like lamda etc has nothing to do with migration.
upvoted 2 times
  youssefrm 1 week, 6 days ago

you still need expertise to use managed services ?
upvoted 1 times
  N9 4 days, 12 hours ago

APN Consulting partners
An APN Consulting Partner helps an AWS customer implement and manage an AWS cloud deployment. These types of partners include
system integrators, managed services providers, and other consultancies and agencies. An APN Technology Partner provides software
tools and services that are hosted on or integrated with AWS.
upvoted 1 times
  Ricx24 Highly Voted  1 month, 2 weeks ago

Selected Answer: B
AWS Partner Network (APN) Consulting Partners help customers design, architect, build,
migrate, and manage workloads and applications on Amazon Web Services.
https://d1.awsstatic.com/partner-network/APN_Consulting-Benefits_Brochure-Digital.pdf
upvoted 11 times
  ekisako Most Recent  1 day, 15 hours ago

Selected Answer: B
similar question appears on AWS skillbuilder practice exam and the correct answer is B
upvoted 2 times
  chris0975 3 days, 7 hours ago

Selected Answer: D
AWS service
upvoted 1 times
  vipulchoubisa 1 week, 2 days ago

Answer is B
AWS Managed Service can be with Enterprise Plan. Once you have that plan then only it can be used that's what I feel. Company want to go on
AWS not for expertise at the start stage.
upvoted 2 times

I consider Managed Services as the correct answer; Consulting partners is more like a feature of some services or programs that AWS offers from
my point of view. On the other hand, AWS Management Services comprehend a set of services and tools that ease the migration process (page 61:
https://d1.awsstatic.com/whitepapers/aws-overview.pdf)
upvoted 1 times

Selected Answer: D
hi all,
after reviewing https://aws.amazon.com/managed-services/features/, my opinion now tends to favour option D.

upvoted 1 times
  Rivii 2 weeks, 2 days ago
ok D is correct google: what are AWS Managed services used for
in response you will find
AWS Managed Services is a set of services and tools that automate infrastructure management tasks for Amazon Web Services (AWS) deployments.
The service is aimed at large enterprises that want a simplified way to migrate on-premises workloads to the public cloud and then manage those
workloads after migration.
upvoted 3 times

Selected Answer: B
https://d1.awsstatic.com/partner-network/APN_Consulting-Benefits_Brochure-Digital.pdf
upvoted 2 times
  N9 2 weeks, 3 days ago

Selected Answer: B
B is the correct answer. APN - 'AWS Partner Network' is responsible for that.
upvoted 1 times

I go with D
upvoted 1 times

Selected Answer: B
my answer will be consulting partner
upvoted 2 times

Selected Answer: B
plain and simple sense
upvoted 1 times
  terrifiedbyexams 3 weeks, 4 days ago

I would say the correct answer is B after reading this:
https://docs.aws.amazon.com/whitepapers/latest/how-customers-can-work-with-aws-and-our-apn-partners/apn-partners.html
although the question ask the AWS service specifically.
upvoted 3 times
  robertomsen 3 weeks, 6 days ago

Selected Answer: D
D, Consulting Partners is not a AWS service
upvoted 2 times

B. AWS Partner Network (APN) Consulting Partners
upvoted 2 times
  Anneh 1 month ago

Selected Answer: D
D is the answer
upvoted 2 times
Which AWS service or tool should a company use to centrally request and track service limit increases?
A. AWS Config
B. Service Quotas
C. AWS Service Catalog
D. AWS Budgets
Correct Answer: B

B (100%)
  30Miles Highly Voted  3 months, 1 week ago

Selected Answer: B
https://aws.amazon.com/about-aws/whats-new/2021/04/service-quotas-available-aws-govcloud-us-regions/
upvoted 6 times

Selected Answer: B
https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html
upvoted 2 times

I go with C
upvoted 1 times
  Subash_Vk 3 weeks, 1 day ago

Selected Answer: B
B is the right answer
upvoted 2 times

Selected Answer: B
You can now use Service Quotas in AWS GovCloud (US) Regions to view and manage your service quotas at scale as your AWS workloads grow.
upvoted 3 times
  Popular 1 month ago

take what ever you want...!
upvoted 1 times
  cangkangy 1 week, 6 days ago

lol haha
upvoted 1 times

Selected Answer: B
Vote B
upvoted 1 times

Selected Answer: B
B
upvoted 4 times
  Siamak 1 month, 4 weeks ago

B service quotas
upvoted 2 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B
upvoted 2 times
Which documentation does AWS Artifact provide?
A. Amazon EC2 terms and conditions
B. AWS ISO certifications
C. A history of a company's AWS spending
D. A list of previous-generation Amazon EC2 instance types
Correct Answer: B

B (90%) 10%
  Nucleric Highly Voted  2 months, 4 weeks ago

According to AWS:
What is an AWS artifact?
AWS Artifact is a web service that enables you to download AWS security and compliance documents such as ISO certifications and SOC reports.
User Guide. Describes key concepts of AWS Artifact and provides instructions for using the features of AWS Artifact.
upvoted 6 times
  Agil09 Most Recent  2 days, 13 hours ago

Selected Answer: B
ISO key word
upvoted 1 times

Selected Answer: B
vote B
upvoted 1 times

Selected Answer: B
Answer is B
upvoted 2 times

correct answer is B. AWS ISO certifications.
upvoted 2 times
  Jhoy 3 weeks, 5 days ago

B. AWS Artifact provides on-demand downloads of AWS security and compliance documents, such as AWS ISO certifications, Payment Card
Industry (PCI), and Service Organization Control (SOC) reports.
upvoted 2 times

Selected Answer: B
Vote B
upvoted 2 times

Selected Answer: B
https://docs.aws.amazon.com/artifact/latest/ug/what-is-aws-artifact.html
upvoted 2 times
  samurosales 2 months, 3 weeks ago

Selected Answer: B
seems like B its the correct answer
upvoted 1 times

Vote for B
upvoted 1 times
Selected Answer: B
Answer is B
upvoted 1 times
  Lutendo96 3 months ago

Hi please share the dump at lutendomulaudzi5@gmail.com
upvoted 1 times
  oab720 3 months ago

Selected Answer: B
Yes, of course
upvoted 1 times

learnt this today lol
upvoted 1 times

Selected Answer: B
Asnwer B
Artifact is all about governance and regulatory related documentations
upvoted 2 times
  RichardACKUN 3 months ago

answer is B
upvoted 2 times

B should the correct answer
upvoted 1 times
  cachemoney 3 months ago

Selected Answer: B
It's B
upvoted 1 times
Which task requires using AWS account root user credentials?
A. Viewing billing information
B. Changing the AWS Support plan
C. Starting and stopping Amazon EC2 instances
D. Opening an AWS Support case
Correct Answer: B

B (100%)

Selected Answer: B
The answer is B
upvoted 1 times
  Josh11211 2 weeks, 5 days ago

Can be A
upvoted 1 times

Vote for B
upvoted 1 times
  Wangyan 3 weeks, 6 days ago

Selected Answer: B
Vote for B
upvoted 2 times

Selected Answer: B
Vote for B
https://aws.amazon.com/premiumsupport/knowledge-center/change-support-plan/?nc1=h_ls
upvoted 3 times
  Caramonion 1 month, 2 weeks ago

No right answer here.. remember that AWS functions change over time. You can clearly see here that neither B or D are correct..
https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.html#aws_tasks-that-require-root
Both actions can be delegated to IAM users.
upvoted 3 times

You're supposed to pick best fit.
upvoted 2 times
  Caramonion 1 month, 2 weeks ago

Additional link to support this case:
https://docs.aws.amazon.com/awssupport/latest/user/accessing-support.html
upvoted 3 times

Selected Answer: B
others can be done by nonroot user
upvoted 3 times

Selected Answer: B
https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.html#aws_tasks-that-require-root
upvoted 2 times

support plan is not listed there
upvoted 2 times

Vote for B
upvoted 2 times

Selected Answer: B
B is correct. It is the most important action within the given options and corresponds to root account to change it.
upvoted 3 times

Agree. B is the correct answer
upvoted 3 times

B. Changing the AWS Support plan
upvoted 3 times
A company needs to simultaneously process hundreds of requests from different users.

Which combination of AWS services should the company use to build an operationally efficient solution?
A. Amazon Simple Queue Service (Amazon SQS) and AWS Lambda
B. AWS Data Pipeline and Amazon EC2
C. Amazon Kinesis and Amazon Athena
D. AWS Amplify and AWS AppSync
Correct Answer: B

A (100%)
  Jaccky Highly Voted  3 months ago

Why there're so much controversial questions
upvoted 17 times
  AnnieApples Highly Voted  3 months ago

Selected Answer: A
Data pipeline is not relevant for this question - it moves data between AWS compute / storage services and on prem data.
upvoted 12 times
  I_hate_dba Most Recent  2 days ago

I think its A
upvoted 1 times
  jatric 3 days, 2 hours ago

Selected Answer: A
Option A makes more sense
upvoted 2 times

Not sure if there is a correct answer in the options given:
A. Amazon SQS is indeed a tool to manage requests efficiently. However, Lambda isn't cost-optimal to manage a constant flow of requests.
B. AWS Data Pipeline processes and moves data between services.
C. Kinesis is a stream analysis tool and Atena is a relational database service.
D. Amplify and AppSync are designed for app optimization.
For me, combinations that meet the "simultaneously process hundreds of requests" requirement would contain AWS ELB, Amazon SQS, and maybe
CloudFront if we are talking about latency. Those in combination with EC2 could be options to manage a huge constant flow of requests.
For reference: https://d1.awsstatic.com/whitepapers/aws-overview.pdf
upvoted 1 times

Vote for A
upvoted 2 times

Selected Answer: A
A is my answer
upvoted 1 times
  Oussama86 3 weeks, 1 day ago

According to AWS: AWS Data Pipeline helps you easily create complex data processing workloads that are fault tolerant, repeatable, and highly
available.
upvoted 1 times
  N3ar 3 weeks, 1 day ago

Has to be something like SQS or ELB or similar. So, I would go for A. Why did someone pick B? I don't understand this.
upvoted 2 times

correct answer is A. I DONT UNDERSTAND WHY ANYONE WOULD PICK DATA PIPELINE
upvoted 2 times
Selected Answer: A
Data pipeline is not a relevant for this example.
upvoted 2 times
  Renzo22 4 weeks ago

Selected Answer: A
Starting to question the credibility of this site
upvoted 2 times

SQS helps with the question. I vote A
upvoted 4 times
  Tanie 1 month ago

Selected Answer: A
vote for A
upvoted 1 times

Selected Answer: A
Vote for A
upvoted 1 times
  Alexyz 1 month, 3 weeks ago

why not B
upvoted 1 times
  tarryking 1 month, 3 weeks ago

Selected Answer: A
A is the correct answer
upvoted 1 times
What is the scope of a VPC within the AWS network?
A. A VPC can span all Availability Zones globally.
B. A VPC must span at least two subnets in each AWS Region.
C. A VPC must span at least two edge locations in each AWS Region.
D. A VPC can span all Availability Zones within an AWS Region.
Correct Answer: D

D (100%)
  hviana Highly Voted  3 months ago

Correct answer D
* A VPC is a logically isolated piece of AWS cloud dedicated to your company. This means, you can run applications on overly provisioned, highly
available, and redundant infrastructure setup and it is managed by AWS. All the complexity of setting up a data center with cables, server racks,
hardware, power supply, etc. all are managed by AWS.
* A VPC belongs to a region.
* A VPC spans all availability zones.
* You can have multiple VPCs per region.
* VPC contains one or more subnets.
* A Subnet is tied to a single availability zone.
* EC2 instances launch into subnets.
upvoted 26 times

vote for D
upvoted 2 times

Selected Answer: D
Vote for D
upvoted 2 times
  Aishwarya4400 2 months ago

Correct answer is D
upvoted 1 times

Selected Answer: D
D is answer
upvoted 1 times

From Amit :) D is answer
upvoted 1 times
  Blacosmiles 2 months, 3 weeks ago

my answer is D
upvoted 1 times

Vote for D
upvoted 1 times

Agree D is the correct answer
upvoted 3 times

D. A VPC can span all Availability Zones within an AWS Region.
upvoted 3 times
Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.)
A. AWS Storage Gateway
B. Virtual private gateway
C. NAT gateway
D. Customer gateway
E. Internet gateway
Correct Answer: BD

BD (100%)
  real111 Highly Voted  2 months, 3 weeks ago

Selected Answer: BD
The VPC has an attached virtual private gateway, and your on-premises (remote) network includes a customer gateway device, which you must
configure to enable the Site-to-Site VPN connection. You set up the routing so that any traffic from the VPC bound for your network is routed to
the virtual private gateway.
upvoted 11 times
  giovanit Highly Voted  3 months, 1 week ago

Selected Answer: BD
https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html
upvoted 8 times
  cvoiceip Most Recent  2 days, 1 hour ago

Answer is B) & D)
upvoted 1 times

Selected Answer: BD
VPN and customer gateway
upvoted 2 times
  ChiragVisavadiya 3 weeks, 6 days ago

https://docs.aws.amazon.com/vpn/latest/s2svpn/how_it_works.html
upvoted 2 times

Selected Answer: BD
Vote for B and D
https://docs.aws.amazon.com/vpn/latest/s2svpn/how_it_works.html
upvoted 1 times

Answer is B) & D)
Private Virtual Gateway for AWS
& Customer gateway for Client or on premises
upvoted 1 times

Vote for B & D
upvoted 1 times

B,D is correct
upvoted 2 times

BD is correct
upvoted 1 times
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use
the existing infrastructure of the VPCs for this connection.
Which AWS service or feature can be used to establish this connection?
A. AWS Client VPN
B. VPC peering
C. AWS Direct Connect
D. VPC endpoints
Correct Answer: B
Reference:
https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html

B (100%)
  thangdd 2 weeks, 5 days ago

Selected Answer: B
Can read more in this page: https://docs.aws.amazon.com/devicefarm/latest/developerguide/amazon-vpc-cross-region.html
upvoted 2 times

Selected Answer: B
Vote for B
upvoted 2 times
  AlaN652 1 month, 3 weeks ago

Selected Answer: B
Vote for B
upvoted 2 times

Answer is VPC Peering. VPC1 connect to VPC2 from different regions
upvoted 2 times
  At0513 2 months, 2 weeks ago

B is the correct answer.
upvoted 2 times

Selected Answer: B
A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4
addresses or IPv6 addresses.
upvoted 4 times

Vote for B
upvoted 1 times

B. VPC peering
upvoted 1 times
  avinash4344 3 months, 1 week ago

Selected Answer: B
Connect two VPC, privately using VPC peering
upvoted 3 times
According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?
A. Manage connections to the database
B. Install Microsoft SQL Server
C. Design encryption-at-rest strategies
D. Apply minor database patches
Correct Answer: A

A (64%) C (36%)
  vadiminski_a Highly Voted  1 month, 2 weeks ago

Selected Answer: A
Not C because:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
upvoted 8 times
  susunz Most Recent  22 hours, 31 minutes ago

Selected Answer: A
dont overthinking... it is A
upvoted 1 times

Selected Answer: A
A seems more appropriate as customer don't design encryption strategy for the data stored at rest in AWS
upvoted 1 times

Selected Answer: C
The answer is definitely 'C'. As per the link provided by vadiminski_a, please look at the line that states,
"To encrypt a new DB instance, choose Enable encryption on the Amazon RDS console. For information on creating a DB instance, see Creating an
Amazon RDS DB instance."
That means, RDS DBs are not encrypted by default, we have to enable it while creating the DB
upvoted 2 times

C is default take care by AWS and that is feature provided by AWS. When it handled read replica, backup..etc the data is already encrypted. So my
Answer is A.
upvoted 1 times

Selected Answer: A
upvoted 1 times

Selected Answer: C
my answer will be C
upvoted 1 times

disagreed,
please refer to vadiminski_a's reply above.

upvoted 1 times
  N30Force 3 weeks, 1 day ago

Selected Answer: C
Sorry to break your heart, but..
https://aws.amazon.com/compliance/shared-responsibility-
model/#:~:text=Customers%20are%20responsible%20for%20managing,also%20extends%20to%20IT%20controls
upvoted 2 times

Selected Answer: C
In a managed service, data is only customer responsibility.
upvoted 2 times

Selected Answer: A
Vote for A, encryption-at-rest is a feature for RDS
upvoted 3 times
  amd112b 1 month ago

Selected Answer: A
IT is clear that the encryption is managed at Rest in RDS
upvoted 3 times
  Jamestey 1 month, 1 week ago

Answer C: Data at rest is customer responsibility
upvoted 1 times

Selected Answer: A
Vote for A
upvoted 2 times
  DamyanG 1 month, 2 weeks ago

Selected Answer: C
RDS is managed service
upvoted 1 times
  srk1520 1 month, 2 weeks ago

Selected Answer: A
DB connections to the (customer) apps need to be managed/configured by the customer only
upvoted 4 times
  Ricx24 1 month, 2 weeks ago

Selected Answer: A
Because the client cannot design an encryption
upvoted 3 times
  ashwin4force 1 month, 2 weeks ago

A is correct.
https://aws.amazon.com/rds/?p=ft&c=db&z=3
upvoted 2 times
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.)
A. EC2 includes operating system patch management.
B. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM).
C. EC2 has a 100% service level agreement (SLA).
D. EC2 has a flexible, pay-as-you-go pricing model.
E. EC2 has automatic storage cost optimization.
Correct Answer: DE

BD (75%) DE (25%)
  jr_2022 Highly Voted  3 months, 1 week ago

I think it should be B and D. Based on https://www.amazonaws.cn/en/ec2/
upvoted 13 times
  highlightfilm 3 months, 1 week ago

B technically isn’t an advantage. You can implement Audit logging (Win Event Viewer etc.), Identity and Access Management on prem (Active
Directory) and also on-prem networks are already behind a firewall protecting from public internet traffic which VPC offers but in the cloud. C
and D are the right answers imo
upvoted 1 times
  tinyfoot 2 months, 3 weeks ago

C isn't true. The only AWS service with a 100% uptime SLA is route 53. EC2 is around 99.99% to 99.5%.
https://aws.amazon.com/compute/sla/
I do think that native integrations between EC2 and the various AWS services like cloudtrail/VPC/IAM is an advantage over on-prem
solutions which tend to be more piecemeal. While I agree that VPC and IAM there may be equivalent to on-prem solutions, you cannot track
API calls on your on-prem like you would via CloudTrail.
As for Option E of automatic cost optimization for storage cost. I do not believe that instance store scales up (vertical scaling) automatically.
ASGs only spin up more instances of the same type. EBS does not scale and you pay for what is provisioned whether you use or not.
upvoted 6 times

Selected Answer: BD
BD is correct
upvoted 1 times
  teegasper 3 weeks ago

D,E is practically related and explain technical similarities so i go for B,D
upvoted 2 times

Selected Answer: DE
D and E is my answer
upvoted 1 times
  chezokid44 4 weeks ago

Selected Answer: BD
Its B & D not D & E
upvoted 1 times
  Mizaan 4 weeks, 1 day ago

Selected Answer: BD
I think it should be B and D. No auto storage optimization. Not 100% uptime.
upvoted 1 times

Selected Answer: BD
D is obvious.
upvoted 1 times

Selected Answer: BD
E. EC2 is not storage service
upvoted 2 times
  Salacity 1 month, 2 weeks ago

Wouldn't E refer to S3? Keyword is "Storage". I believe the answer is BD.
upvoted 1 times
  jellybiscuit 1 month, 3 weeks ago

Selected Answer: BD
B/D ...
upvoted 1 times
  AlaN652 1 month, 3 weeks ago

Selected Answer: BD
EC2 doesn't have auto storage cost optimization
upvoted 4 times
  tongje 2 months, 1 week ago

Selected Answer: DE
I think the list of pros and cons.
the answer is "DE"
upvoted 1 times

B and D
upvoted 1 times
  Jeyarajmohan 2 months, 1 week ago

Selected Answer: DE
With AWS cost and capacity optimization services and tools, you can spend more time building and less time managing compute costs. AWS has
the services and tools you need to cost optimize your EC2 usage to do more in the cloud within your existing budget.
upvoted 1 times

Selected Answer: BD
BD as EC2 doesn't have any storage cost optimization options, only S3 has:
https://aws.amazon.com/s3/cost-optimization/
upvoted 4 times
  Carmelorm7 2 months, 2 weeks ago

Selected Answer: BD
E is not true, that is for S3
upvoted 1 times

Selected Answer: BD
Not E because EC2 doesn't havy any storage cost optimiztaions.. EBS/EFS has instead.
upvoted 1 times
A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month.
How can the user see if a change was made?
A. Use Amazon EC2 to see if the security group was changed.
B. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group.
C. Use AWS CloudTrail to see if the security group was changed.
D. Use Amazon CloudWatch to see if the security group was changed.
Correct Answer: C

C (93%) 7%
  41km Highly Voted  3 months ago

Selected Answer: C
CloudTrail is the correct answer:
https://aws.amazon.com/cloudtrail/features/
"CloudTrail records user activity and API calls across AWS services as events. CloudTrail events help you answer the questions of "who did what,
where, and when?""
upvoted 5 times

Selected Answer: C
CloudTrail shows better user activity.
upvoted 1 times

Selected Answer: C
I vote for C
upvoted 1 times

Selected Answer: C
voted C
upvoted 1 times

Selected Answer: C
AWS CloudTrail trucks users activities
upvoted 1 times

Selected Answer: C
Vote for C. AWS CloudTrail
upvoted 1 times
  Caio_V 1 month, 2 weeks ago

Selected Answer: C
The right answer would be C.
upvoted 1 times
  rojecco 2 months, 1 week ago

Vote C.
upvoted 1 times

Vote for C
upvoted 1 times

Vote for C
upvoted 1 times
  oab720 2 months, 4 weeks ago

Selected Answer: C
Cloudtrail is too on point
upvoted 1 times
  Vic_d_gr8 3 months ago

The answer is C. Read more about the CloudTrail Schema to know more about the kind of logs it will report.
upvoted 2 times
  gfxrdsfg 3 months ago

Selected Answer: C
CloudTrail
upvoted 2 times
  radsreed 3 months ago

Any settings changed in Security Group can be found in the logs of cloud trail. Answer is C
upvoted 2 times
  Hs110 3 months ago

Selected Answer: B
Answer is B
upvoted 1 times
Which AWS service will help protect applications running on AWS from DDoS attacks?
A. Amazon GuardDuty
B. AWS WAF
C. AWS Shield
D. Amazon Inspector
Correct Answer: C

C (93%) 7%

Selected Answer: C
shield is the answer to DDoS
if you see DDoS, choose shield
upvoted 3 times

Vote for C. Shield or Shield Advanced
upvoted 2 times
  ccpmad 1 month, 1 week ago

Selected Answer: C
c shield, firewall is to protect from web app attacks
upvoted 2 times

c shield, firewall is to protect from web app attacks
upvoted 1 times

Shield - DDOs Protection
upvoted 1 times

Vote for C
upvoted 2 times

Selected Answer: C
AWS Shield is correct
upvoted 1 times
  timHAG 3 months ago

protecting applications is through WAF, shield is for other resources https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-
waf.html
upvoted 1 times
  onejason 3 months ago

Selected Answer: C
AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.
https://aws.amazon.com/shield/?nc1=h_ls&whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc
upvoted 1 times

Selected Answer: C
Answer is C
WAF is only protecting from layer 7 attacks, basically web attacks
upvoted 4 times
  41km 3 months ago

Selected Answer: C
Of course C:
https://aws.amazon.com/shield/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc
"AWS Shield is a managed Distributed Denial of Service (DDoS) protection"
upvoted 3 times
  adamwella 3 months ago
This should be B. - AWS WAF
https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html
upvoted 1 times
  AnnieApples 3 months ago

Selected Answer: B
Both B& C seem to be true. The WAF protects against DDoS web app exploits.
upvoted 1 times
Which AWS service or feature acts as a firewall for Amazon EC2 instances?
A. Network ACL
B. Elastic network interface
C. Amazon VPC
D. Security group
Correct Answer: D

D (100%)

Selected Answer: D
https://www.knowledgehut.com/tutorials/aws/nacl-vs-security-groups
upvoted 1 times

Selected Answer: D
Security group - at instance level
NACL - subnet level
upvoted 3 times

Selected Answer: D
Security Group
upvoted 1 times

Selected Answer: D
Vote for D
A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.
upvoted 1 times
  vichu0308 2 months, 2 weeks ago

NACL are virtual firewall for subnets whereas Security groups are virtual firewall for ec2 instances. So its D
upvoted 1 times

Vote for D
upvoted 1 times

Selected Answer: D
D is correct in that case
upvoted 1 times

Selected Answer: D
A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.
upvoted 2 times
  Flex1 3 months ago

Selected Answer: D
Option D - Security Group is correct per AWS Doc : https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html
upvoted 2 times

I think Network ACL, It acts as Virtual firewall that controls in bound and outbound traffic at subnet level.
upvoted 1 times

The question is asking for the service that acts as firewall for Amazon EC2 instances, not at the Subnet level. It's clearly Security group.
upvoted 5 times
How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model?
A. AWS resources do not incur costs
B. There are no infrastructure operating costs
C. There are no upfront cost commitments
D. There are no software licensing costs
Correct Answer: B

C (51%) B (48%)

Selected Answer: B
I believe B is correct, because in AWS you pay for stroage, compute, etc. You don't pay for infra ops directly. On the other hand you can make
commitments with saving plans or reserved instances.
upvoted 21 times

Best answer is C.
upvoted 3 times
  Blimpy 3 weeks, 2 days ago

Yes answer is C bcs the question is specific to Storage.. there are no upfront commitments (savings plan etc apply to ec2 instances only)
upvoted 3 times

I Agree
upvoted 1 times
  Nucleric 2 months, 3 weeks ago

I think you are right
upvoted 1 times
  oab720 Highly Voted  3 months ago

Selected Answer: C
C. No upfront cost as you don't have to acquire hardware. I disagree with B being correct because you indirectly pay infra ops for the compute
services you use albeit through AWS.
upvoted 17 times
  MrSaint Most Recent  2 days, 15 hours ago

We cant look this question at a specific point of time, what I mean is... when you have to plan your storage on prem, you have to think about how
much storage you need for the next 3 years for example, than you buy X Terabytes upfront even tho the first 6 months you are going to use like
15% of the capacity... so You are pay upfront for adquire the storage and to use way less than max capacity for several months or years. On Cloud
you can just buy the right amount of the storage capacity and increase by the necessity... without have to pay for the whole capacity needed in the
next 3 years. Have said that, C should be the right answer. The argument of reserved instances does not apply since the question specify Storage
pricing model. Reserved instance applies to EC2.
upvoted 1 times
  dark_cherrymon 3 days, 6 hours ago

Selected Answer: B
it's not C, note reserved instances
upvoted 1 times

Selected Answer: C
Why not B ? - While calculating the on premises costs, you should make sure you’re looking at all the cost components that go into building and
maintaining your data centers. These costs can range from upfront capital to regular operational expenditures that keep the data center running.
Even though capital expenditures such as hardware, racks, and network equipment are a one-time purchase, they usually have a refresh cycle of
five years.
upvoted 1 times
  TEMPLE022 4 days, 13 hours ago

it's C
upvoted 1 times
  zyjacky 5 days, 23 hours ago

Selected Answer: B
The answer is B, since we are literally not paying any cost of the infrastrucutre.
upvoted 1 times
  dark_cherrymon 1 week, 2 days ago

Selected Answer: B
B
clearly not C, note reserved instances

upvoted 1 times

question specify storage pricing model, reserved instances applies to EC2 only
upvoted 1 times
  zacksogen 1 week, 4 days ago

Selected Answer: C
No upfront cost
upvoted 1 times

Selected Answer: C
best answer is C
upvoted 1 times
  JDKJDKJDK 2 weeks, 5 days ago

Selected Answer: C
Its C come on guys
upvoted 1 times
  ferrari_ 3 weeks, 1 day ago

I will go with C. with a traditional on-premises environment, you purchase your server licenses upfront but with aws cloud your license cots are
built into your monthly bill. You are renting the license instead of buying it outright.
answer is C
upvoted 2 times

Selected Answer: C
Didnt we all learn from beginning about this. There is no upfront cost. I cant believe there is no Infra cost. There always is an infra cost. In case of
AWS - its bourn by Amazon (as shared infra) and passed on to the customers. But due to the elasticity the cost comes down. But its always there.
What makes its more attractive is that there is no upfront cost. The answer needs to be reviewed again.
upvoted 2 times
  N30Force 3 weeks, 1 day ago

vote for C
upvoted 2 times
  Aakuu 3 weeks, 3 days ago

Selected Answer: B
I would say B is the correct answer. You are not managing Infra. but you can make commitment if you go for upfront pricing model
upvoted 1 times
  SmartLearner 3 weeks, 4 days ago

Selected Answer: C
C is correct.
upvoted 1 times

Ans is B.
In cloud, there is upfront cost commitment, for example if you purcase reserve instance, you can choose to pay upfront
upvoted 4 times

question specify storage pricing model, reserved instances applies to EC2 only
upvoted 1 times

No mention of RI in question.
upvoted 1 times

I beg to differ. You dont pay upfront.
upvoted 1 times
A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture.
What can the company do to meet this requirement?
A. Scale vertically to a larger EC2 instance size.
B. Scale horizontally across multiple Availability Zones.
C. Purchase an EC2 Dedicated Instance.
D. Change the EC2 instance family to a compute optimized instance.
Correct Answer: B

B (100%)

Selected Answer: B
Vote for B. Multi AZ for highly available
upvoted 3 times
  ksuccex 1 month, 3 weeks ago

the answer is B
upvoted 2 times

answer b
upvoted 1 times

Vote for B
upvoted 1 times
  Kennyspute 3 months ago

AZ CORREC ANSWER B
upvoted 1 times
  EazElr 3 months ago

Selected Answer: B
AZ for HA
upvoted 2 times
A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application
in 2-3 days.
Which benefit has this company experienced by moving to the AWS Cloud?
A. Elasticity
B. Flexibility
C. Agility
D. Resilience
Correct Answer: A

C (100%)
  still_someone_else Highly Voted  3 months, 1 week ago

I'm pretty sure it should be Agility
upvoted 19 times
  AlaN652 Highly Voted  1 month, 3 weeks ago

Selected Answer: C
Answer is C. This is the definition of agility as per AWS : Increase speed and agility – In a cloud computing environment, new IT resources are only a
click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes. This results in
a dramatic increase in agility for the organization, since the cost and time it takes to experiment and develop is significantly lower.
upvoted 8 times
  zacksogen Most Recent  1 week, 4 days ago

Selected Answer: C
Agility sure
upvoted 1 times
  Habidamson 2 weeks, 1 day ago

C is the right answer.
upvoted 1 times

The reason behind A
https://aws.amazon.com/getting-started/guides/deploy-webapp-ec2/
Remember it's talking about deployment of app through ec2. The E in ec2 stands for elastic. The reason is faster through ec2 because you can get
an instance fast without spending time deciding how strong of a server to get.
Although I still think the correct answer should be agility.
upvoted 2 times

It's obviously Agility... Who has answered Elasticity????????
upvoted 1 times

Selected Answer: C
Definitely C
upvoted 1 times
  Jameel_Shaikh 3 weeks, 4 days ago

it should be C
upvoted 1 times

Selected Answer: C
The question talks about agility in getting an application up and running.
upvoted 2 times
  andriv56 1 month ago

I think C is correct because elasticity is when you need more resources and agility is the time when you accomplish a change.
upvoted 1 times
  tsamo 1 month, 1 week ago

Selected Answer: C
Pour etre agile il faut etre rapide
upvoted 1 times
  Pinnus 1 month, 1 week ago

c is correct for me
upvoted 1 times

Selected Answer: C
vote for C
upvoted 1 times

Selected Answer: C
for sure C
upvoted 1 times

Selected Answer: C
is agility, please check some questions like this, it is a little frustrating
upvoted 1 times
  EazElr 1 month, 2 weeks ago

Selected Answer: C
Elasticity = Scaling. The question is not about scaling.
upvoted 1 times

ANSWER is C
upvoted 1 times
Which of the following are included in AWS Enterprise Support? (Choose two.)
A. AWS technical account manager (TAM)
B. AWS partner-led support
C. AWS Professional Services
D. Support of third-party software integration to AWS
E. 5-minute response time for critical issues
Correct Answer: AD

AD (81%) AE (19%)
  jago808 11 hours, 2 minutes ago

Selected Answer: AE
upvoted 1 times
  reddevil_1996 1 day, 7 hours ago

Selected Answer: AD
https://aws.amazon.com/premiumsupport/plans/
TAM and Interoperability and configuration guidance and troubleshooting for Third-Party Software Support
upvoted 2 times

Selected Answer: AD
AD is correct ans
upvoted 1 times

Selected Answer: AD
not e, it's 15min not 5 min
upvoted 2 times

The answer is AD
upvoted 1 times

Selected Answer: AD
correct is AD
upvoted 1 times

Problem with D, that business and up, is the same support for third party. Problem with E, that is 15 minutes not 5.
upvoted 1 times

Selected Answer: AD
A and D
upvoted 1 times
  jom3az 3 weeks, 4 days ago

Selected Answer: AD
A&D is the correct answer.
upvoted 1 times

Selected Answer: AE
https://aws.amazon.com/premiumsupport/plans/enterprise/
designated Technical Account Manager (TAM) to coordinate access to proactive / preventative programs and AWS subject matter experts.
Response times for general guidance is less than 24 hours, system impaired is less than 12 hours, production system impaired is less than 4 hours,
production system down is less than an hour, and business critical system down is less than 15 minutes.
upvoted 2 times

But the choice is 5 mins
upvoted 1 times

there's no 5-min response option available from AWS
upvoted 1 times

yeah less than 15 minutes response,not 5-minute response time every time
upvoted 2 times

Selected Answer: AE
designated Technical Account Manager (TAM) to coordinate access to proactive / preventative programs and AWS subject matter experts.
Response times for general guidance is less than 24 hours, system impaired is less than 12 hours, production system impaired is less than 4 hours,
production system down is less than an hour, and business critical system down is less than 15 minutes.
upvoted 1 times
  MJ10089001 1 month, 1 week ago

AE Because Third Party Integration is not exclusive to Enterprise only but also Business plan
upvoted 2 times

Selected Answer: AD
Vote for A D
upvoted 1 times
  khensi 1 month, 2 weeks ago

AE
E because Enterprise plan has 15 minutes or less response time for business-critical issues
upvoted 2 times

answer A & D
upvoted 1 times

Vote for A & D
upvoted 1 times
  EazElr 3 months ago

Selected Answer: AD
upvoted 1 times
A global media company uses AWS Organizations to manage multiple AWS accounts.
Which AWS service or feature can the company use to limit the access to AWS services for member accounts?
A. AWS Identity and Access Management (IAM)
B. Service control policies (SCPs)
C. Organizational units (OUs)
D. Access control lists (ACLs)
Correct Answer: C

B (84%) C (16%)
  Prates_BR Highly Voted  3 months, 1 week ago

A, come on admin, check this questions again!
upvoted 23 times
  Shaychay Highly Voted  2 months ago

Selected Answer: B
n AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs). SCPs
enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access.
upvoted 14 times
  reddevil_1996 Most Recent  1 day, 7 hours ago

Selected Answer: B
SCPs offer central control over the maximum available permissions for all accounts in your organization. SCPs help you to ensure your accounts
stay within your organization’s access control guidelines. SCPs are available only in an organization that has all features enabled. SCPs aren't
available if your organization has enabled only the consolidated billing features. For instructions on enabling SCPs, see Enabling and disabling
policy types.
upvoted 1 times
  cool_burn 1 day, 12 hours ago

Selected Answer: B
It's B
upvoted 1 times
  TEMPLE022 4 days, 12 hours ago

upvoted 1 times

Selected Answer: B
https://aws.amazon.com/blogs/industries/best-practices-for-aws-organizations-service-control-policies-in-a-multi-account-
environment/#:~:text=One%20of%20the%20features%20from,each%20member%20account%20can%20access.
upvoted 1 times

Selected Answer: B
https://aws.amazon.com/blogs/industries/best-practices-for-aws-organizations-service-control-policies-in-a-multi-account-
environment/#:~:text=One%20of%20the%20features%20from,each%20member%20account%20can%20access.
upvoted 1 times
  skybd3hel 1 week, 6 days ago

Selected Answer: B
B => SCP enable you to place restrictions on the AWS services
upvoted 1 times

The answer is C
upvoted 1 times

Which type of policy limits AWS permissions with AWS organizations?
SCPs are policies that specify the maximum permissions for an organization, organizational unit (OU), or an individual account. An SCP can limit
permissions for principals in member accounts, including the AWS account root user.
if OU is the answer that would mean that I'm having serious issues with english...
upvoted 2 times

An organizational unit (OU) is a logical grouping of accounts in your organization, created using AWS Organizations. OUs enable you to
organize your accounts into a hierarchy and make it easier for you to apply management controls. AWS Organizations policies are what you use
to apply such controls. but the question asks for a service or a feature.... so to me a SCP is an OU service or feature that alllows to limit
permissions....
upvoted 2 times

Selected Answer: B
In AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs).
upvoted 1 times
  delirent55 2 weeks, 5 days ago

After checking more information, the closest answer should be C. organizational unit (OU).
Because Service control policies (SCPs) can be used to set "permission guardrails". Those guardrails act as permission boundaries. It is just a
"boundaries".
upvoted 1 times

Selected Answer: C
An organizational unit (OU) is a construct used to represent an organization whose resources are logically separate from those resources of other,
similar organizations. You use OUs to control access to resources and to ensure data segregation.
upvoted 1 times
  Jameel_Shaikh 3 weeks, 4 days ago

You can use SCPs to allow or deny access to AWS services for individual AWS accounts with AWS Organizations member accounts, or for groups of
accounts within an organizational unit (OU).
upvoted 1 times

SCPs is used to ONLY ALLOW
upvoted 1 times

Selected Answer: B
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html
Service control policy (SCP)

A policy that specifies the services and actions that users and roles can use in the accounts that the SCP affects. SCPs are similar to IAM permissions
policies except that they don't grant any permissions. Instead, SCPs specify the maximum permissions for an organization, organizational unit (OU),
or account. When you attach an SCP to your organization root or an OU, the SCP limits permissions for entities in member accounts.
upvoted 1 times
  kuririkura 1 month ago

Selected Answer: C
The correct is C if you need to limit the services.
SCP can operate across OUs. and limit only the IAM can be given on each account within OUs or globally
check the diagram https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html
upvoted 2 times

Nope. SCPs specify the maximum permissions for an organization, organizational unit (OU), or account
upvoted 1 times

Selected Answer: B
Vote for B
upvoted 1 times
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.
Which AWS solution should the company use to meet this requirement?
A. AWS Config
B. AWS software development kits (SDKs)
C. AWS Service Catalog
D. AWS AppSync
Correct Answer: C

C (100%)
  Sib777 Highly Voted  3 months, 1 week ago

C.
What is the use of service catalog in AWS?
AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. These IT services can
include everything from virtual machine images, servers, software, and databases to complete multi-tier application architectures.
upvoted 6 times
  Habidamson Most Recent  2 weeks, 1 day ago

The answer is C
upvoted 2 times

Selected Answer: C
From: https://aws.amazon.com/servicecatalog/
Apply access controls

Scale and control permissions so you can manage resource access in multi-account AWS environments.
How it works
AWS Service Catalog lets you centrally manage deployed IT services, applications, resources, and metadata to achieve consistent governance of
your infrastructure as code (IaC) templates. With AWS Service Catalog, you can meet your compliance requirements while making sure your
customers can quickly deploy the approved IT services they need.
upvoted 1 times

Selected Answer: C
"Portfolio" is the key work here.
upvoted 2 times

Selected Answer: C
Vote for C
upvoted 2 times
  Pamban 1 month, 3 weeks ago

Selected Answer: C
Correct answer
upvoted 1 times
  alveswlm 2 months, 2 weeks ago

C is correct.
https://docs.aws.amazon.com/servicecatalog/latest/adminguide/what-is_concepts.html
Scroll the page until "Portfolios".
upvoted 3 times

Vote for C (Using elimination method)
upvoted 1 times

C is correct answer
https://docs.aws.amazon.com/servicecatalog/latest/adminguide/what-is_concepts.html
upvoted 2 times
  Noks7 3 months, 1 week ago
Is a company unable to limit employee access using SDK?
upvoted 1 times
An online company was running a workload on premises and was struggling to launch new products and features. After migrating the workload to
AWS, the company can quickly launch products and features and can scale its infrastructure as required.
Which AWS Cloud value proposition does this scenario describe?
A. Business agility
B. High availability
C. Security
D. Centralized auditing
Correct Answer: A

A (100%)

The answer is A
upvoted 1 times

Selected Answer: A
Increase speed and agility – In a cloud computing environment, new IT resources are only a click away, which means that you reduce the time to
make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization,
since the cost and time it takes to experiment and develop is significantly lower.
upvoted 1 times

A with no doubt!
upvoted 2 times

Selected Answer: A
Vote for A
upvoted 1 times

ANSWER IS A
upvoted 2 times

Vote for A
upvoted 1 times
  fross 3 months, 1 week ago

Selected Answer: A
A, agility
upvoted 2 times
Which of the following are advantages of the AWS Cloud? (Choose two.)
A. AWS management of user-owned infrastructure
B. Ability to quickly change required capacity
C. High economies of scale
D. Increased deployment time to market
E. Increased fixed expenses
Correct Answer: BC

BC (83%) AB (17%)

A is not true for guest OS on EC2
upvoted 1 times
  Testeurtest 1 week, 1 day ago

Selected Answer: BC
In the 6 advantages of Cloud :
C. Economy at scale: You profit of massive aggregation of resources consumed by all customers on the AWS platform
B. Rapidity and Agility.
upvoted 3 times
  atfde 1 week, 1 day ago

Selected Answer: BC
AWS is typically not dealing with *user-owned* infra
upvoted 1 times

Selected Answer: AB
A&B ------------
upvoted 1 times

BC is correct
upvoted 1 times
  IvanKhru 2 months, 1 week ago

Selected Answer: BC
B and C
upvoted 1 times

Vote for B & C
upvoted 3 times
AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users.
This describes which advantage of the AWS Cloud?
A. Launch globally in minutes
B. Increase speed and agility
C. High economies of scale
D. No guessing about compute capacity
Correct Answer: C

C (100%)

The is C
upvoted 1 times

Selected Answer: C
Vote for C
upvoted 1 times

C is answer
upvoted 1 times
  Akinola1 2 months ago

C is Correct
upvoted 1 times
  jacksk 2 months, 2 weeks ago

Selected Answer: C
upvoted 1 times

Vote for C
upvoted 1 times

Vote for C
upvoted 1 times
A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are
suitable for the workload. The workload will run for 1 year.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Standard Reserved Instances
B. On-Demand Instances
C. Spot Instances
D. Convertible Reserved Instances
Correct Answer: A

A (100%)

The answer is A
upvoted 1 times
  Grey654Gandalf 4 weeks ago

Selected Answer: A
Standard Most cost effective for suitable workload
upvoted 2 times
  Popular 1 month ago

Vote for B
upvoted 1 times

Selected Answer: A
Vote for A
upvoted 1 times

A is correct
upvoted 1 times

Vote for A
upvoted 1 times
  LisaLC917 3 months ago

Selected Answer: A
https://aws.amazon.com/ec2/pricing/reserved-instances/
upvoted 3 times

A is correct
upvoted 1 times
A company is developing a mobile app that needs a high-performance NoSQL database.

Which AWS services could the company use for this database? (Choose two.)
A. Amazon Aurora
B. Amazon RDS
C. Amazon Redshift
D. Amazon DocumentDB (with MongoDB compatibility)
E. Amazon DynamoDB
Correct Answer: BE

DE (100%)

Answer should be D & E, because RDS is a SQL based DB. Dynamo DB and Document DB are the only No-SQL options.
upvoted 36 times

You are right.
upvoted 2 times

Agree, RDS is SQL based.
upvoted 3 times
  luky25 Most Recent  2 days, 16 hours ago

RDS in not No SQL Database
THE RESPONSE IS CLEARLY D&E
upvoted 1 times
  JAMTARA 2 days, 16 hours ago

chutiya bana raha hai humko answer is DE
upvoted 1 times
  Bolatolulope 1 week, 4 days ago

The answer should be D and E because RDS support SQL Database.
upvoted 1 times

Selected Answer: DE
documentdb and dynamo db are noSQL DB's.
RDS is a relational DB based on sql and sql queries.

upvoted 2 times
  thangdd 2 weeks, 1 day ago

Selected Answer: DE
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_GettingStarted.html
In the following examples, you can find how to create and connect to a DB instance using Amazon Relational Database Service (Amazon RDS). You
can create a DB instance that uses MariaDB, MySQL, Microsoft SQL Server, Oracle, or PostgreSQL.
upvoted 2 times

The answer is DE
upvoted 1 times

The answer is E
upvoted 1 times

B and E are correct here,
RDS does support noSQL DB's -> Fully managed cloud DB and supports both document and key-value store models.
as for D there is no special selection when choosing Dynamo DB... so logicaly E is better option here as its same answer. That disqualifies D...
upvoted 1 times
  sphiwe 2 weeks, 4 days ago
key word noSql
D and E is correct
upvoted 2 times

Selected Answer: DE
RDS is a SQL based DB, DynamoBD and DDB are a No-SQL Options.
upvoted 2 times
  Achebz 4 weeks, 1 day ago

This admin is nuts, rds is clearly sql
upvoted 3 times

Selected Answer: DE
noSQL Dynamo and Document DB.
upvoted 1 times

Vote D & E.. RDS is and SWL base Database
upvoted 1 times
  codeandbloom 1 month, 1 week ago

I think that some of these answers are misleading
upvoted 2 times

Selected Answer: DE
D & E, because RDS is a Relational DB
upvoted 1 times
  MaGarMa 1 month, 3 weeks ago

Selected Answer: DE
Correct answer is D & E, Amazon DyamoDB it's a NoSQL (Refference: https://aws.amazon.com/es/dynamodb/) and algo MongoDB (Reference:
https://en.wikipedia.org/wiki/MongoDB & https://www.mongodb.com/es/nosql-explained)
upvoted 2 times
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A. Patch the Amazon EC2 guest operating system.
B. Upgrade the firmware of the network infrastructure.
C. Apply password rotation for IAM users.
D. Maintain the physical security of edge locations.
E. Maintain least privilege access to the root user account.
Correct Answer: BD

BD (100%)

Selected Answer: BD
As shown in https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 2 times

Selected Answer: BD
Vote for B and D
upvoted 1 times

BD is correct
upvoted 1 times

B AND D
upvoted 1 times

B and D
upvoted 1 times

Vote for B & D
upvoted 1 times
  RichardACKUN 2 months, 4 weeks ago

B and D are most suitable
upvoted 2 times
  elcid32 2 months, 4 weeks ago

Selected Answer: BD
B & D makes the most sense.
upvoted 1 times
  timHAG 2 months, 4 weeks ago

isn't shared responsibility model related to compliance and regulations?
upvoted 1 times
  blackcomb 3 months ago

Selected Answer: BD
B and D are correct as they are AWS related responsibilities .The other 3 are customer responsibilities
upvoted 2 times

B and D are correct anwers
upvoted 1 times
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
A. They are stateless.
B. They are stateful.
C. They evaluate all rules before allowing traffic.
D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
E. They operate at the instance level.
Correct Answer: AD

AD (100%)

Selected Answer: AD
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html
Network ACLs are stateless, which means that responses to allowed inbound traffic are subject to the rules for outbound traffic (and vice versa).
Rules are evaluated starting with the lowest numbered rule. As soon as a rule matches traffic, it's applied regardless of any higher-numbered rule
that might contradict it.
upvoted 15 times
  Flex1 Highly Voted  3 months ago

Selected Answer: AD
Options A&D . NACL can be understood as the firewall or protection for the subnet. Security group can be understood as a firewall to protect EC2
instances. These are stateless, meaning any change applied to an incoming rule isn't automatically applied to an outgoing rule per
https://www.knowledgehut.com/tutorials/aws/nacl-vs-security-groups
upvoted 6 times
  Habidamson Most Recent  2 weeks, 1 day ago

The answer AD
upvoted 1 times

Selected Answer: AD
Vote for A and D
upvoted 1 times

A AND D
upvoted 1 times

Vote for A & D
upvoted 2 times

A & D are correct. It start evaluation from lowest rules
upvoted 1 times
  1umar 3 months, 1 week ago

A and C
upvoted 2 times

C = They evaluate all rules before allowing traffic.
Is wrong because Nacl have Allow and Deny rules. it is true with Security groups, that have implicit deny.
upvoted 1 times
A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously
improve supporting processes.
Which pillar of the AWS Well-Architected Framework does this scenario represent?
A. Security
C. Cost optimization
D. Operational excellence
Correct Answer: D

D (100%)

Correct answer is D -
The Operational Excellence pillar includes the ability to support development and run workloads effectively, gain insight into their operations, and
to continuously improve supporting processes and procedures to deliver business value.
upvoted 6 times
  Testeurtest Most Recent  1 week, 1 day ago

Selected Answer: D
Correct answer is D -
The Operational Excellence pillar includes the ability to support development and run workloads effectively, gain insight into their operations, and
to continuously improve supporting processes and procedures to deliver business value.
upvoted 1 times
  SilverAlpaca 1 week, 1 day ago

Vote for D
upvoted 1 times

The answer is D
upvoted 1 times

Selected Answer: D
Agreed
https://wa.aws.amazon.com/wat.pillars.wa-pillars.en.html
upvoted 1 times
  Aishwarya4400 1 month, 2 weeks ago

Operational Excellence is the correct answer.
upvoted 1 times

D is correct
upvoted 2 times

ANSWER IS D
upvoted 1 times

Vote for D
https://wa.aws.amazon.com/wat.pillar.operationalExcellence.en.html
upvoted 1 times
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
A. Amazon Route 53
B. Amazon Macie
D. AWS PrivateLink
Correct Answer: D

C (85%) D (15%)

Selected Answer: C
Correct answer is C- Direct connect is for private dedicated connection between on premise and AWS.
PrivateLink provides direct secure connections from VPCs to other AWS services.
VPC Private Link is a way of making your service available to set of consumers. You can expose a service and the consumers can consume your
service by creating an endpoint for your service.With PrivateLink, endpoints are instead created directly inside of your VPC, using Elastic Network
Interfaces (ENIs) and IP addresses in your VPC's subnets.To use AWS PrivateLink, create a VPC endpoint in your VPC, specifying the name of the
service and a subnet. This creates an elastic network interface in the subnet that serves as an entry point for traffic destined to the service. The
service is now in your VPC, enabling connectivity to AWS services via private IP addresses.
upvoted 27 times

The question didnt mention - DEDICATED connection was a requirement. So Correct answer is D. Secured link is good enough.
upvoted 2 times
  SilverAlpaca 1 week, 3 days ago

I'm confused, can you create a private but not dedicated connection between on-prem and AWS?
upvoted 1 times
  jatric Most Recent  2 days, 7 hours ago

Selected Answer: C
What is the difference between AWS private link and direct connect?
PrivateLink is similar, but slightly different, to this popular choice. Unlike Direct Connect, PrivateLink is used as a networking construct inside AWS
to privately expose a service/application residing in one VPC (that of a service provider) to other consumer VPCs within an AWS Region
upvoted 1 times
  henryvex 6 days, 21 hours ago

Selected Answer: C
The key here is "on-premises" AWS PrivateLink provides private connectivity between virtual private clouds (VPCs), supported AWS services, and
your on-premises networks without exposing your traffic to the public internet. https://aws.amazon.com/privatelink/
upvoted 1 times
  henryvex 6 days, 21 hours ago

I meant D
upvoted 2 times

AWS direct connect: Private connection between AWS and On-Prem.
AWS Private Link: Private connection between AWS services (for ex. connection between One Account Region vpc to another Customer Account
VPC to share something like 3rd party software or anything.)
so correct Answer is C
upvoted 1 times
  ChizzyO 1 week, 6 days ago

The answer is C - AWS Direct Connect. https://aws.amazon.com/products/networking/
upvoted 1 times
  thangdd 2 weeks, 1 day ago

Selected Answer: D
Correct answer is D - AWS PrivateLink provides private connectivity between virtual private clouds (VPCs), supported AWS services, and your on-
premises networks without exposing your traffic to the public internet. Interface VPC endpoints, powered by PrivateLink, connect you to services
hosted by AWS Partners and supported solutions available in AWS Marketplace.
https://aws.amazon.com/vi/privatelink/
upvoted 1 times

D. compared and found Direct Connect is more user-facing not workload.
AWS Direct Connect you can establish private connectivity between AWS and your data center, office, or colocation environment, as shown in the
following figure.
AWS PrivateLink provides private connectivity between VPCs, AWS services, and *on-premises applications* securely on AWS.
upvoted 1 times
  Achebz 4 weeks, 1 day ago

This is confusing, with the term workloads I’m kind of understanding why it might be private link
upvoted 1 times
  basit_khan_054 1 month ago

Vote for C
upvoted 1 times
  Anneh 1 month, 1 week ago

C is the correct answer
upvoted 1 times
  satishstechie 1 month, 2 weeks ago

Unlike Direct Connect, PrivateLink is used as a networking construct inside AWS to privately expose a service/application residing in one VPC (that
of a service provider) to other consumer VPCs within an AWS Region
upvoted 1 times

Selected Answer: D
This is a tricky question. Question is about creating private connection between aws and on premises WORKLOAD. You establish the connection
with Direct connect from aws vpc to on premises network. and privatelink is to create the connection between workloads. Not sure I am getting it
correctly. So I would go with D. https://www.megaport.com/blog/aws-privatelink-explained/
upvoted 3 times

C is d answer
upvoted 2 times

😂😂 what
upvoted 2 times
  Sam_Lee 2 months ago

C is correct
upvoted 1 times
  Shaychay 2 months ago

Selected Answer: C
Direct connect.
Unlike Direct Connect, PrivateLink is used as a networking construct inside AWS to privately expose a service/application residing in one VPC (that
of a service provider) to other consumer VPCs within an AWS Region.
upvoted 1 times
  ale27x 2 months ago

Selected Answer: C
Correct Answer Is C
upvoted 1 times
  LloydA 2 months ago

Selected Answer: C
Please fix Admin!
upvoted 2 times
A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs.
Which AWS Billing and Cost Management tool provides this data in a graphical format?
A. AWS Bills
B. Cost Explorer
C. AWS Cost and Usage Report
D. AWS Budgets
Correct Answer: B

B (92%) 8%

Selected Answer: B
Both Cost Explorer and Cost and Usage reports are for same purpose. The main difference is Cost Explorer gives graphically representation. so
correct answer is B
upvoted 2 times

Selected Answer: B
for current billing and cost analysis use cost explorer for analyze spendings.
for forecast and predict future spendings use budgets.
https://www.cloudzero.com/blog/aws-budgets-vs-cost-
explorer#:~:text=AWS%20cost%20tool.-,What%20Are%20The%20Differences%20Between%20AWS%20Budgets%20And%20Cost%20Explorer,costs
%20and%20forecast%20future%20spending.
upvoted 1 times
  Morgothz 2 weeks ago

Selected Answer: B
based on time always Cost Explorer
upvoted 2 times

It sounds more like B: Cost Explorer imo since the keyword here is 'billing and usage over time'.
upvoted 2 times

Selected Answer: B
AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time.
upvoted 3 times
  Kapello10 1 month ago

The ans is C
https://aws.amazon.com/aws-cost-management/aws-cost-and-usage-reporting/
Create and publish billing reports to break down your cloud costs.
upvoted 1 times
  Max17 1 month, 1 week ago

Selected Answer: C
Graphical reports can be viewed in Cost and Usage Reports with breakdown from a month to an hour. My answer C
upvoted 1 times

Graphical reports can be viewed in Cost and Usage Reports with breakdown from a month to an hour. My answer D
upvoted 1 times

Selected Answer: B
Vote for B
upvoted 1 times
  kishorkiran 1 month, 3 weeks ago

Why aint usage reports ?

upvoted 1 times

B is the answer
upvoted 1 times

Vote for B
upvoted 2 times
  30Miles 3 months, 1 week ago

Selected Answer: B
https://aws.amazon.com/aws-cost-management/aws-cost-explorer/features/
upvoted 2 times
A company wants to run production workloads on AWS. The company needs concierge service, a designated AWS technical account manager
(TAM), and technical support that is available 24 hours a day, 7 days a week.
Which AWS Support plan will meet these requirements?
A. AWS Basic Support
B. AWS Enterprise Support
C. AWS Business Support
D. AWS Developer Support
Correct Answer: B

B (100%)

Selected Answer: B
B is correct answer
upvoted 1 times

B is correct
upvoted 1 times
  hiennt 2 months, 1 week ago

Selected Answer: B
Vote for B
upvoted 2 times

Vote for B
upvoted 2 times
  elcid32 2 months, 4 weeks ago

Selected Answer: B
The answer is B: https://aws.amazon.com/premiumsupport/plans/enterprise/
upvoted 3 times
Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?
A. Use a monolithic design.
B. Design for automation.
C. Design for single points of failure.
D. Loosely couple components.
Correct Answer: D

D (100%)
  RICHARDALEX007 Highly Voted  2 months, 3 weeks ago

Loosely coupled is correct. In the cloud practitioner course states that in a microservices approach, application components are loosely coupled. In
this case, if a single component fails, the other components continue to work because they are communicating with each other. The loose coupling
prevents the entire application from failing.
upvoted 8 times
  tonwija Most Recent  1 week, 5 days ago

Selected Answer: D
ABSOLUTELY D
upvoted 1 times

D is correct
upvoted 1 times

Selected Answer: D
vote for D
upvoted 1 times

Vote for D
upvoted 3 times
Which AWS services are managed database services? (Choose two.)
A. Amazon Elastic Block Store (Amazon EBS)
B. Amazon S3
C. Amazon RDS
D. Amazon Elastic File System (Amazon EFS)
E. Amazon DynamoDB
Correct Answer: CE

CE (100%)
  Vinod_Varma Highly Voted  2 months ago

A , B & D are Storage Services.. and C & E are Database Services...
upvoted 7 times
  Max17 Most Recent  1 month, 1 week ago

Selected Answer: CE
C and E
upvoted 1 times

Selected Answer: CE
Vote for C & E
upvoted 1 times

CE is correct
upvoted 1 times
  vikash_0219 2 months, 1 week ago

Except for C & E, none of them is DB services so, the answer is C & E
upvoted 4 times

Vote for C & E
upvoted 1 times
A company is using the AWS Free Tier for several AWS services for an application.
What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?
A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.
B. AWS Support will contact the company to set up standard service charges.
C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption
after the Free Tier period.
D. The company's AWS account will be frozen and can be restarted after a payment plan is established.
Correct Answer: A

A (90%) 10%
  Adirya1 4 days, 12 hours ago

Selected Answer: A
ANSWER IS A
upvoted 1 times

Selected Answer: A
Answer is A, and I don't understand how people can expect to be called by AWS Support...
upvoted 3 times

answer is A
upvoted 1 times
  gcerts 2 months ago

Selected Answer: A
Is correct
upvoted 1 times
  macfau 2 months ago

The Answer is A, the company just charge standard pay-as-you-go
upvoted 2 times

answer is A
upvoted 1 times

Selected Answer: A
When your free tier expires or if your application use exceeds the free tier limits, you simply pay standard, pay-as-you-go service rates
upvoted 1 times
  Kayode 2 months, 2 weeks ago

Selected Answer: A
https://aws.amazon.com/free/free-tier-faqs/?audit=2019q1
upvoted 1 times
  Skwaleks01 2 months, 2 weeks ago

Selected Answer: A
A is correct
upvoted 1 times
  techhb 2 months, 2 weeks ago

Selected Answer: A
upvoted 1 times

Vote for A
upvoted 1 times
  GV99 2 months, 3 weeks ago
A is correct.
When your free tier expires or if your application use exceeds the free tier limits, you simply pay standard, pay-as-you-go service rates (see each
service page for full pricing details)
upvoted 1 times

Selected Answer: B
Security groups is stateful
upvoted 1 times

I'm mistake, please remove it
upvoted 1 times
A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private
corporate network.
Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?
A. Network ACLs
B. Security groups
C. AWS WAF
D. Amazon GuardDuty
Correct Answer: C

B (90%) 10%
  HaslinaF Highly Voted  1 month, 2 weeks ago

stateless-Netwrok ACL
stateful ; security group
upvoted 12 times

Selected Answer: B
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.RDSSecurityGroups.html
upvoted 3 times

Perhaps C is correct. WAF has WACL feature which can block ip ranges. Also, security groups are not really a firewall.
upvoted 1 times

WAF is to protect http and https webservices and content filter that are forwarded to cloudfront.
upvoted 1 times

It said Instance Level so security groups fit here.
upvoted 1 times
  ChizzyO 1 week, 5 days ago

According to AWS cloud practitioner essentials, a security group is a virtual firewall that controls inbound and outbound traffic for an Amazon
EC2 instance. So security groups are firewalls.
upvoted 1 times

Selected Answer: B
agreed, you can't use AWS WAF to protect RDS instance. Check this out:
https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
Cheers,
upvoted 1 times

Selected Answer: B
VPC security groups control the access that traffic has in and out of a DB instance. By default, network access is turned off for a DB instance. You
can specify rules in a security group that allow access from an IP address range, port, or security group.
upvoted 1 times

Selected Answer: B
Vote for B
upvoted 2 times

Correct answer is security group as it is stateful and we can use it for RDS. On the other hand, we can attach to CloudFront or ALB only, it cant be
used for RDS anyway.
upvoted 1 times

we can attach AWS WAF to CloudFront or ALB only, it cant be used for RDS anyway.*
upvoted 2 times
  dasigrist 1 month, 3 weeks ago

Selected Answer: B
upvoted 3 times

B is d most correct
upvoted 1 times
  mirddin 2 months ago

Selected Answer: B
WAF protects against Layer 7 attacks.
Security Groups are stateful and applicable to RDS as well.
upvoted 2 times

answer is B since SG is stateful and WAF stateless
upvoted 1 times
  VKK1982 2 months, 2 weeks ago

B - Security groups is stateful
upvoted 1 times
  akashman 2 months, 2 weeks ago

As in the question they have mentioned about the stateful si answer will be the security group
upvoted 1 times
  AJ79 2 months, 2 weeks ago

Selected Answer: B
SGs are stateful
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
upvoted 1 times

Selected Answer: B
upvoted 1 times
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?
A. AWS Shield
B. Amazon Macie
C. AWS Network Firewall
D. Amazon Cognito
Correct Answer: B

B (100%)
  tonwija 1 week, 5 days ago

Selected Answer: B
cieeeeeee
upvoted 1 times

Selected Answer: B
https://aws.amazon.com/macie/
Amazon Macie is a data security and data privacy service that uses machine learning (ML) and pattern matching to discover and protect your
sensitive data.
upvoted 4 times

Selected Answer: B
upvoted 1 times

macie is d answer,so B is correct
upvoted 2 times

answer is B
upvoted 2 times
  certiflux 2 months, 2 weeks ago

Selected Answer: B
vote for b
upvoted 1 times
  vrusha10 2 months, 3 weeks ago

https://aws.amazon.com/macie/#:~:text=Amazon%20Macie%20is%20a%20fully,your%20sensitive%20data%20in%20AWS.
vote for B
upvoted 2 times

Vote for B
upvoted 2 times
A company wants to improve the overall availability and performance of its applications that are hosted on AWS.
Which AWS service should the company use?
A. Amazon Connect
B. Amazon Lightsail
C. AWS Global Accelerator
D. AWS Storage Gateway
Correct Answer: C

C (86%) 14%
  Cricca1862 Highly Voted  2 weeks, 2 days ago

Selected Answer: C
Global Accelerator improves overall performance and availability. Those who vote B should go check the use cases covered by LightSail and that it's
ONE virtual server, not the best when it comes to availability and performance...
upvoted 5 times
  N3ar Most Recent  3 weeks, 1 day ago

But they want to 'IMPROVE' their existing application, no? Not building one again. Why not C: Global Accelerator then.
upvoted 1 times

Selected Answer: B
This is tricky but after research B is correct, lightsail.
Amazon's Free Virtual Cloud Server

Get started for free with Amazon Lightsail, a powerful virtual cloud server built for reliability & performance.
upvoted 1 times
  N9 1 week, 1 day ago

Lightsail is good for small businesses and simple websites with cheap pricing. On the other hand, Global Accelerator is for availability and
performance.
upvoted 1 times

yes for new setup on AWS but NOT for existing setup
upvoted 1 times
  Thaamizh 1 month ago

Selected Answer: C
Global Accelerator improves overall performance & availability
upvoted 2 times

Selected Answer: C
https://aws.amazon.com/global-accelerator/?blogs-global-accelerator.sort-by=item.additionalFields.createdDate&blogs-global-accelerator.sort-
order=desc&aws-global-accelerator-wn.sort-by=item.additionalFields.postDateTime&aws-global-accelerator-wn.sort-order=desc
AWS Global Accelerator is a networking service that improves the performance of your users’ traffic by up to 60% using Amazon Web Services’
global network infrastructure. When the internet is congested, AWS Global Accelerator optimizes the path to your application to keep packet loss,
jitter, and latency consistently low.
upvoted 3 times

Selected Answer: B
B... C is shortest path routing on network, doesn't related to reliability and performance, while
Amazon Lightsail Is a Powerful Virtual Server That Is Built for Reliability & Performance.
upvoted 1 times

C is correct
upvoted 1 times

answer is C
upvoted 2 times

Selected Answer: C
vote for c
upvoted 2 times

CORRECT ANSWER IS C
upvoted 2 times

Vote for C
upvoted 3 times

Agree C is the correct answer
upvoted 2 times
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
A. AWS Service Catalog
B. AWS Systems Manager
C. AWS IAM Access Analyzer
Correct Answer: C

C (100%)
  Tincho13v Highly Voted  3 months, 1 week ago

Selected Answer: C
Access Analyzer helps you identify the resources in your organization and accounts, such as Amazon S3 buckets or IAM roles, shared with an
external entity. This lets you identify unintended access to your resources and data, which is a security risk.
https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
upvoted 9 times
  hiennt Most Recent  2 months, 1 week ago

Selected Answer: C
Vote C
https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
upvoted 3 times

https://www.google.com/search?
q=Which+AWS+service+or+feature+identifies+whether+an+Amazon+S3+bucket+or+an+IAM+role+has+been+shared+with+an+external+entit
y%3F&rlz=1C1GCEU_zh-TWTW1015TW1015&sourceid=chrome&ie=UTF-8
CRRECT ANSWER C
upvoted 1 times

Vote for C
upvoted 1 times
A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only
for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.
Which pillar of the AWS Well-Architected Framework aligns with these requirements?
A. Operational excellence
B. Security
C. Reliability
Correct Answer: D

D (71%) C (29%)

Selected Answer: C
Principles of Reliability
Automatically recover from failure
Test recovery procedures
> Scale horizontally to increase aggregate workload availability
> Stop guessing capacity
Manage change in automation
upvoted 1 times
  SLEON01 1 week, 6 days ago

Selected Answer: C
C is correct:
Reliability
Scale horizontally to increase aggregate workload availability: Replace one large resource with multiple small resources to reduce the impact of a
single failure on the overall workload. Distribute requests across multiple, smaller resources to ensure that they don’t share a common point of
failure.
Stop guessing capacity: A common cause of failure in on-premises workloads is resource saturation, when the demands placed on a workload
exceed the capacity of that workload (this is often the objective of denial of service attacks).
upvoted 1 times

Selected Answer: D
this is cost optimization by the book
upvoted 2 times
  besxrr 3 weeks, 6 days ago

Selected Answer: D
D is correct
upvoted 2 times

Selected Answer: D
D is right.
upvoted 1 times

Selected Answer: D
Vote for D
upvoted 1 times

Selected Answer: D
D is OK
upvoted 1 times

D is d answer
upvoted 1 times

Selected Answer: D
To optimize costs, you should only pay for the computing resources you consume and increase or decrease usage depending on your business
requirements, not with elaborate forecasting.
https://emergencetek.com/aws-five-pillars-of-a-well-architected-framework/
upvoted 3 times

AWS Well-Architected Framework have 6 Pillars
upvoted 1 times
  derrickalvarez 2 months ago

Selected Answer: D
Cost Optimization
upvoted 2 times
  bluecampana 2 months, 1 week ago

Selected Answer: C
I choose C
As per AWS course:
Reliability is the ability of a system to do the following:

• Recover from infrastructure or service disruptions
• Dynamically acquire computing resources to meet demand
• Mitigate disruptions such as misconfigurations or transient network issues
Reliability includes testing recovery procedures, scaling horizontally to increase aggregate system availability, and automatically recovering from
failure.
upvoted 3 times

Vote for D
upvoted 1 times

There are 6 AWS Well-Architecture Framework Piller - https://aws.amazon.com/architecture/well-architected/
"Cost Optimization Pillar" suits the most

upvoted 2 times
  manolin 2 months, 3 weeks ago

correct answer is D: the question is limited to costs including automatic increased and decreased deployments, means cost optimization <=> pay
as you go.
upvoted 3 times
  hviana 2 months, 4 weeks ago

C is de correct answer
There are five design principles for reliability in the cloud:

Scale horizontally to increase aggregate workload availability
Stop guessing capacity
upvoted 4 times
  ashwin4force 1 month, 1 week ago

Your explanation does not talk about cost. Can you explain to us why should it be Reliability?
upvoted 1 times
A company wants to launch its workload on AWS and requires the system to automatically recover from failure.
Which pillar of the AWS Well-Architected Framework includes this requirement?
A. Cost optimization
B. Operational excellence
D. Reliability
Correct Answer: D

D (100%)

Selected Answer: D
only viable option for this question's context
upvoted 1 times

Selected Answer: D
Answer is D (Refference: https://aws.amazon.com/architecture/well-architected/?nc1=h_ls&wa-lens-whitepapers.sort-
by=item.additionalFields.sortDate&wa-lens-whitepapers.sort-order=desc&wa-guidance-whitepapers.sort-by=item.additionalFields.sortDate&wa-
guidance-whitepapers.sort-order=desc)
upvoted 2 times

D IS CORRECT
upvoted 1 times

Vote for D
upvoted 2 times
  k_akshay 2 months, 3 weeks ago

Reliability
The Reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when it’s expected to. This
includes the ability to operate and test the workload through its total lifecycle. You can find prescriptive guidance on implementation in the
Reliability Pillar whitepaper.
Design Principles
There are five design principles for reliability in the cloud:

upvoted 2 times
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity
between its VPCs.
Which AWS service or feature meets these requirements?
A. AWS Direct Connect
B. AWS Transit Gateway
C. AWS Site-to-Site VPN
D. VPC endpoints
Correct Answer: B

B (100%)
  Thaamizh 1 month ago

Selected Answer: B
Transit gateway acts a 'central hub' for multiple VPC connectivity.
upvoted 2 times

Selected Answer: B
Vote for B
upvoted 2 times

Selected Answer: B
Answer is B. Keyword here is "centrally". Transit gateway acts as a central hub to connect VPCs.
upvoted 4 times

answer is B
upvoted 1 times
  music4kris 2 months, 2 weeks ago

Selected Answer: B
https://aws.amazon.com/transit-gateway/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc
upvoted 2 times
  Vanessa41 2 months, 2 weeks ago

Selected Answer: B
However, if you have services in multiple Regions, a Transit Gateway will allow you to access those services with a simpler network configuration.
upvoted 3 times

It should be VPC Pairing
https://docs.aws.amazon.com/devicefarm/latest/developerguide/amazon-vpc-cross-region.html
upvoted 2 times
  MottaM 2 months, 2 weeks ago

I think the answer should be "C" because of the below reason:
A) AWS Direct connect --> Involves VPC and on premise infra ( So wrong )
B) AWS Transit gateway --> Involves VPC and on premise infra ( so wrong )
D) VPN endpoints ( not relevant )
C) Connects between two VPC ( So i thing this could

be the right one )
upvoted 2 times
  Wachy 1 week, 5 days ago

The question said multiple VPCs, not just two so, we are looking for a hub-like feature. B is the answer.
upvoted 1 times
  AntNest 2 months, 2 weeks ago

AWS Transit Gateway routes all traffic to and from each VPC or VPN, and you have one place to manage and monitor it all.
---quote from "https://aws.amazon.com/transit-gateway/"
upvoted 2 times
Vote for B
upvoted 1 times
Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data?
A. Amazon Athena
B. Amazon QuickSight
C. Amazon CloudWatch
Correct Answer: A

B (86%) 14%
  Cert_alert Highly Voted  2 months, 2 weeks ago

Quicksight for sure. Check the link below. In addition I did a lab last week doing exactly what this scenario talks about.
https://aws.amazon.com/premiumsupport/knowledge-center/quicksight-cost-usage-report/
upvoted 10 times

who gonna ask this kind of question during the first deployment? too advanced
upvoted 1 times

Good, this scenario actually answers this question, great contribution
upvoted 2 times

Selected Answer: B
Keyword here is visual report. Enabling Athena allows you to query the data not visualize it.
"
For Enable report data integration for, select whether you want to enable your Cost and Usage Reports to integrate with Amazon Athena, Amazon
Redshift, or Amazon QuickSight. The report is compressed in the following formats:
Athena: parquet format
Amazon Redshift or Amazon QuickSight: .gz compression
"
https://docs.aws.amazon.com/cur/latest/userguide/cur-create.html
upvoted 1 times

Selected Answer: B
B is correct
upvoted 1 times
  re_333 2 weeks, 3 days ago

Quicksight
upvoted 2 times

Selected Answer: B
agreed
How do I ingest and visualize the AWS Cost and Usage Report (CUR) into Amazon QuickSight?
upvoted 1 times
  lazyyoung 1 month ago

Selected Answer: B
B is the answer
upvoted 1 times

Selected Answer: B
https://docs.aws.amazon.com/quicksight/latest/user/welcome.html
Amazon QuickSight is a cloud-scale business intelligence (BI) service that you can use to deliver easy-to-understand insights to the people who you
work with, wherever they are. Amazon QuickSight connects to your data in the cloud and combines data from many different sources. In a single
data dashboard, QuickSight can include AWS data, third-party data, big data, spreadsheet data, SaaS data, B2B data, and more.
upvoted 2 times

Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. Athena is serverless, so
there is no infrastructure to manage, and you pay only for the queries that you run.
upvoted 1 times

There is no mention of an S3 bucket rather visualization hence the answer is Quicksight
upvoted 1 times
  codeandbloom 1 month ago

This is definitely QuickStart
upvoted 1 times

Selected Answer: B
Please refer to: https://aws.amazon.com/athena/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc
Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. Athena is serverless, so there is
no infrastructure to manage, and you pay only for the queries that you run.
Athena is easy to use. Simply point to your data in Amazon S3, define the schema, and start querying using standard SQL. Most results are
delivered within seconds. With Athena, there’s no need for complex ETL jobs to prepare your data for analysis. This makes it easy for anyone with
SQL skills to quickly analyze large-scale datasets.
Athena is out-of-the-box integrated with AWS Glue Data Catalog, allowing you to create a unified metadata repository across various services,
crawl data sources to discover schemas and populate your Catalog with new and modified table and partition definitions, and maintain schema
versioning.
upvoted 2 times
  thahu 1 month, 1 week ago

Selected Answer: A
A is the right answer.
ref: https://docs.aws.amazon.com/cur/latest/userguide/cur-query-athena.html
upvoted 2 times

Selected Answer: B
B. It's Amazon QuickSight
upvoted 1 times

Selected Answer: A
It's A, my answer was worng as everybody, after a quick research i found the answer here in AWS decumentation.. Athena is the recommended tool
althought Quicksight "is possible" as well
https://docs.aws.amazon.com/cur/latest/userguide/cur-query-athena.html
upvoted 1 times
  FargateA 1 month, 1 week ago

Athena is used to "analyze" the data, but not to visualize it. Quicksight does visualize the data.
upvoted 2 times

SUPPORT B
upvoted 1 times

answer is B
upvoted 1 times
  Aki20220918 2 months, 2 weeks ago

Selected Answer: B
B is correct
upvoted 1 times
  cloudstealth007 2 months, 3 weeks ago

Selected Answer: B
QuickSight fo sho!
upvoted 1 times
Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization?
A. Amazon Inspector
B. AWS CloudTrail
D. AWS Config
Correct Answer: C

C (100%)

C is correct
upvoted 2 times

Selected Answer: C
Amazon CloudWatch is a web service that enables you to monitor and manage various metrics and configure alarm actions based on data from
those metrics.
CloudWatch uses metrics to represent the data points for your resources. AWS services send metrics to CloudWatch. CloudWatch then uses these
metrics to create graphs automatically that show how performance has changed over time.
upvoted 4 times

answer is C
upvoted 1 times

Vote for C
upvoted 1 times
A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS,
and the company has an AWS Enterprise Support plan.
Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?
A. AWS Abuse team
B. The designated AWS technical account manager (TAM)
C. AWS infrastructure event management
D. AWS Professional Services
Correct Answer: B

C (95%) 5%
  dldjven Highly Voted  3 months ago

Selected Answer: C
C
https://aws.amazon.com/premiumsupport/programs/iem/
AWS Infrastructure Event Management (IEM) offers architecture and scaling guidance and operational support during the preparation and
execution of planned events, such as shopping holidays, product launches, and migrations. For these events, AWS Infrastructure Event
Management will help you assess operational readiness, identify and mitigate risks, and execute your event confidently with AWS experts by your
side. The program is included in the Enterprise Support plan and is available to Business Support customers for an additional fee.
upvoted 12 times
  trong1992 Highly Voted  3 months ago

C is anwser
execution of planned events, such as shopping holidays, product launches, and migrations
upvoted 6 times
  Sleo82 Most Recent  6 days, 12 hours ago

Selected Answer: B
Based on one of the stem keywords that they have Enterprise support, I think B is the right answer.
upvoted 1 times
  chop_z_azur 1 month ago

Selected Answer: C
Definitely C
upvoted 1 times
  MoMoCh4n 1 month, 2 weeks ago

Selected Answer: C
I want to know why B is the answer when it’s obviously C?
upvoted 1 times

Selected Answer: C
Infrastructure event management: A short-term engagement with AWS Support that helps your company gain a better understanding of your use
cases. This also provides your company with architectural and scaling guidance.
upvoted 1 times

answer is C
upvoted 1 times

Selected Answer: C
as per the link C is the correct answer
For Enterprise support the TAM only provides the below

Designated Technical Account Manager (TAM) to proactively monitor your environment and assist with optimization and coordinate access to
programs and AWS experts
upvoted 1 times
  cloudstealth007 2 months, 3 weeks ago

Selected Answer: C
AWS Infrastructure Event Management (IEM)
upvoted 1 times

Vote for C
upvoted 1 times
  cata2402 2 months, 4 weeks ago

Selected Answer: C
Correct answer is C
upvoted 1 times
  aynounimed 3 months ago

Correct answer is C
upvoted 1 times
  blackcomb 3 months ago

Selected Answer: C
Correct answer is C
execution of planned events, such as shopping holidays, product launches, and migrations. For these events, AWS Infrastructure Event
Management will help you assess operational readiness, identify and mitigate risks, and execute your event confidently with AWS experts by your
side. The program is included in the Enterprise Support plan and is available to Business Support customers for an additional fee.
https://aws.amazon.com/premiumsupport/programs/iem/#:~:text=AWS%20Infrastructure%20Event%20Management%20(IEM,%2C%20product%2
0launches%2C%20and%20migrations.
upvoted 3 times
A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles.
Which AWS service can be used to meet this requirement?
B. AWS CloudFormation
C. AWS CodeCommit
D. AWS Config
Correct Answer: B

B (100%)
  Shaychay Highly Voted  2 months ago

Infrastructure as code is the process of provisioning and managing your cloud resources by writing a template file that is both human readable,
and machine consumable. For AWS cloud development the built-in choice for infrastructure as code is AWS CloudFormation.
upvoted 6 times
  ksuccex Most Recent  1 month, 3 weeks ago

B is correct
upvoted 1 times

answer is B
upvoted 1 times

Vote for B
upvoted 1 times
  samurosales 2 months, 3 weeks ago

Selected Answer: B
b is correct
upvoted 1 times

yes, is B https://docs.aws.amazon.com/whitepapers/latest/introduction-devops-aws/infrastructure-as-code.html; read at the end
upvoted 2 times
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate
the creation of
AWS accounts, apply service control policies (SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Organizations
B. Cost Explorer
C. AWS Budgets
Correct Answer: A

A (100%)

Selected Answer: A
giveaways in question:
1. centrally manage and govern its AWS Cloud environment
2 . automate the creation of AWS accounts
]3. apply service control policies (SCPs)
4. simplify billing processes.

upvoted 3 times

A is d answer
upvoted 1 times

answer is A
upvoted 1 times

Selected Answer: A
Vote A
upvoted 1 times

A should be the answer.
upvoted 1 times

AWS Organizations
upvoted 1 times

Vote for A
upvoted 1 times
Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)
A. Physical and environmental controls
B. Patch management
C. Cloud awareness and training
D. Zone security
E. Application data encryption
Correct Answer: BC

BC (100%)
  GV99 Highly Voted  2 months, 3 weeks ago

Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In
a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within
their use of AWS services. Examples include:
Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their
guest OS and applications.
Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own
guest operating systems, databases, and applications.
Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.
upvoted 19 times
  marck0996 Most Recent  4 weeks, 1 day ago

Physical and environment - AWS
Zone security - AWS
Encryption - Customer
BC - Shared
upvoted 2 times

Selected Answer: BC
upvoted 2 times
  Gumbo2 1 month, 1 week ago

B & C are correct
upvoted 1 times

BC is correct
upvoted 1 times

answer is BC
upvoted 1 times

Vote for B & C
upvoted 1 times
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have
shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted.
Which S3 feature should the company turn on to meet this requirement?
A. Server access logging
B. S3 Versioning
C. S3 Lifecycle rules
D. Encryption in transit and at rest
Correct Answer: B

B (100%)

Selected Answer: B
agreed
upvoted 1 times

B is correct
upvoted 1 times

answer is B
upvoted 1 times

B is the correct answer: https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html
upvoted 3 times

Selected Answer: B
B seems the logic anwser
upvoted 1 times

Vote for B
upvoted 1 times
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate
the workload to
AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with
minimum latency.
Which AWS service or feature should the company use to meet these requirements?
A. Availability Zones
B. AWS Local Zones
C. AWS Wavelength
D. AWS Outposts
Correct Answer: B

D (53%) B (45%)
  Kanyeeeah Highly Voted  2 months, 1 week ago

Selected Answer: D
AWS Outposts is designed for workloads that need to remain on-premises due to latency requirements, where customers want that workload to
run seamlessly with the rest of their other workloads in AWS.
AWS Local Zones are a new type of AWS infrastructure designed to run workloads that require single-digit millisecond latency, like video rendering
and graphics intensive, virtual desktop applications. Not every customer wants to operate their own on-premises data center, while others may be
interested in getting rid of their local data center entirely. Local Zones allow customers to gain all the benefits of having compute and storage
resources closer to end-users, without the need to own and operate their own data center infrastructure.
(D) AWS Outposts would be the best fit here. Since the client is migrating only the workloads on AWS while (B) AWS Local Zone wants to get rid of
hosting its on-prem data center.
upvoted 14 times

I think it is B. Reason is that although outposts would mostly solve it, the text states: "A manufacturing company has a critical application that
runs at a remote site that has a slow internet connection" . The slow internet connection is the problem, doing Outpost won't fix this. Local Zone
will ...
upvoted 7 times

The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. LOCAL ZONE
DOESN'T EXIT EVERY TIME. OUTPOST HAS CAPABILITY TO MIGRATE WORKLOAD FROM ON-PREM TO AWS
SO ANSWER IS D
upvoted 1 times
  Venkri02 1 month ago

AWS local zones provide low latency outpost needs high network connection so go with local zones
upvoted 2 times
  Kanyeeeah 2 months, 1 week ago

I am clearing this argument now. Have a good day y'all
upvoted 2 times
  Ragdoll Highly Voted  1 month, 2 weeks ago

Selected Answer: B
"... has a slow internet connection.". The Outpost requires a high-speed internet connection to work. AWS Local Zones is the only viable option for
this scenario.
upvoted 5 times

Selected Answer: D
https://aws.amazon.com/blogs/compute/aws-local-zones-and-aws-outposts-choosing-the-right-technology-for-your-edge-workload/
"Latency requirements
Local Zones can achieve low single millisecond latency when accessing within the same metro. On the other hand, Outposts can achieve ultra-low
latency requirements when deployed within your datacenter or at a co-location facility of your choice. When selecting one over the other, you must
work backward from your goal and workload requirements.
If you’re conducting a migration and modernization strategy which requires ultra-low latency between a workloads application and database tiers
that are difficult to migrate to the AWS Regions, then Outposts would be the right solution for you.
Alternatively, if your workload involves streaming live broadcasts to end users which requires low single millisecond latency, but your end users are
located where an AWS Region isn’t available, then Local Zones distributed across various metros would work best to serve your content.
"
upvoted 1 times
Selected Answer: B
bbbbbbbbb
upvoted 1 times
  re_333 3 days, 14 hours ago

Selected Answer: B
Local zones run latency sensitive applications closer to end users.
upvoted 1 times

Selected Answer: B
BBBBBBBBBBBBB
upvoted 1 times
  wooyourdaddy 2 weeks ago

Selected Answer: D
AWS Outposts enables native AWS services, infrastructure, and operating models in on-premises facilities. In AWS Outposts environments, you can
use the same AWS APIs, tools, and infrastructure that you use in the AWS Cloud. Amazon ECS on AWS Outposts is ideal for low-latency workloads
that need to be run in close proximity to on-premises data and applications.
upvoted 1 times
  Josh11211 2 weeks, 1 day ago

If they migrate the application to AWS, then the part of slow internet access doesn't matter. So we need to assume that the application stays there
with the slow internet connection. Also,,
Local zones won't help the slow internet connection. So it's Outposts.
upvoted 1 times
  juangulo 3 weeks ago

should be B
upvoted 1 times

Selected Answer: B
B, Local zones is correct.
AWS outposts is for on-premises. Local zones is for reducing latency near the customer site.
upvoted 3 times
  aradig 3 weeks, 4 days ago

Selected Answer: B
I think the right answer is B, because AWS Outpost is an on-premise hardware, and the question says: The company wants to migrate the workload
to
AWS.
upvoted 3 times

Selected Answer: B
I think it is B. Reason is that although outposts would mostly solve it, the text states: "A manufacturing company has a critical application that runs
at a remote site that has a slow internet connection" . The slow internet connection is the problem, doing Outpost won't fix this. Local Zone will ...
upvoted 2 times

Selected Answer: D
D is correct.
upvoted 1 times

Selected Answer: D
Vote for D
upvoted 1 times
  Ragdoll 1 month, 2 weeks ago

Outpost cannot work in this case at it requires high-speed connection: https://docs.aws.amazon.com/outposts/latest/userguide/outposts-
requirements.html#facility-networking
upvoted 3 times

Selected Answer: D
The answer has to be D. AWS Wavelength only applies to 5G devices, no mention of that here. Local Zones are placed near large population,
industry, and IT centers. AWS Outpost is deployed at a customer site and satisfies low-latency requirements in areas sensitive to latency fluxuations.
upvoted 2 times

Selected Answer: D
Even when Local Zones says this:"Run low-latency applications at the edge" [REF: https://aws.amazon.com/about-aws/global-
infrastructure/localzones/?nc1=h_ls] the AWS Outpost refeer to this: "These can include workloads running on factory floors for automated
operations in manufacturing, real-time patient diagnosis or medical imaging, and content and media streaming" moir suitable for this scenario
[REF: https://aws.amazon.com/outposts/rack/faqs/?nc1=h_ls]
upvoted 2 times
A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access
on-premises resources.
Which actions will meet these requirements? (Choose two.)
A. Use AWS Service Catalog to identify a list of on-premises resources that can be migrated.
B. Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.
C. Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources.
D. Set up an AWS Direct Connect connection between the on-premises data center and AWS.
E. Use Amazon CloudFront to restrict access to static web content provided through the on-premises web servers.
Correct Answer: AD

BD (96%) 4%
  GonzaloD Highly Voted  3 months, 1 week ago

Selected Answer: BD
I think B,D makes more sense
upvoted 17 times

And this is probably why it is correct: https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect-
vpn.html
upvoted 3 times

I chose BD as well
upvoted 3 times

Selected Answer: BD
BD is correct
upvoted 1 times
  maurosabi 2 weeks, 6 days ago

for B to be correct, on-premises device should be replaced by a customer gateway, isn't it?
upvoted 1 times

You are probably trying to say, that virtual private gateway is meant for customers to access stuff on AWS not opposite. You are right, but it
probably can still be used.
upvoted 1 times

Selected Answer: BD
BD is correct.
upvoted 1 times

Selected Answer: BD
I think B and D
upvoted 1 times

Selected Answer: AD
I choose A & D, the reason it's that in the scenario requieres 2 main objectives. (1) migrate its applications and (2) access on-premises resources,
option A meets the first and D the second
upvoted 1 times

by using this logic then A and B could be right as well...
upvoted 1 times

BD is correct
upvoted 1 times
  Rav69 2 months, 1 week ago

purpose becomes redundant to use both vpn and direct connect A and D makes more sense
upvoted 2 times
  liebeskind 2 months, 2 weeks ago

B & D should only choose one. When using Direct Connect, why care to set up VPN?
upvoted 2 times

Direct connect allows a private and dedicated P2P link between on-prem and AWS network
upvoted 1 times

Selected Answer: BD
I voted for BD as it is coherent
upvoted 2 times

Vote for B & D
upvoted 1 times
  Craig92866 3 months ago

B & D is my answer, too. Regarding Service Catalog (SC), 'This helps you achieve consistent governance and meet your compliance requirements,
while enabling users to quickly deploy only the approved IT services they need (link below).' The question never said anything about requiring the
services SC provides. The customer may benefit from SC but it's not needed to meet their requirements.
https://aws.amazon.com/servicecatalog/?aws-service-catalog.sort-by=item.additionalFields.createdDate&aws-service-catalog.sort-order=desc
upvoted 4 times

Selected Answer: BD
B & D to connect to on-prem: either via VPN or Direct Connect
upvoted 2 times

Selected Answer: BD
B&D should be correct
upvoted 2 times
  Prates_BR 3 months, 1 week ago

B and D I think. I don't know why A!!!
upvoted 4 times
  JorgeGarrido 3 months, 1 week ago

I think , you need Direct Connect and VPN. Direct Connect is a dedicated connection, and VPN is a private network to encrypt de data.
upvoted 4 times
A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment.
A. Amazon S3
B. Amazon AppStream 2.0
C. AWS AppSync
D. AWS Outposts
Correct Answer: A

B (92%) 8%
  Sib777 Highly Voted  3 months, 1 week ago

AppStream 2.0 is a fully managed application streaming service that provides users instant access to their desktop applications from anywhere
upvoted 10 times
  CptFarmer Highly Voted  1 month, 3 weeks ago

Appstream is not listed on the exam guide. I see a lot of questions that are using services that are not on the exam guide. Are they even relevant?
upvoted 5 times
  chop_z_azur 1 month ago

Most of them are relevant. In the comment sections of this Exam, people are saying that about 70% is on the exam. Keep that in mind.
upvoted 2 times
  SmartLearner Most Recent  1 month ago

Selected Answer: B
https://aws.amazon.com/pm/appstream2/?trk=11ff099d-a664-4cc9-bb3f-
ef7173e10b69&sc_channel=ps&s_kwcid=AL!4422!3!593877466233!e!!g!!aws%20appstream&ef_id=Cj0KCQjwk5ibBhDqARIsACzmgLQeX468vkRfgjd
pLagjFH7clBYYketIOiDbBWGSVGCmsvdX_U2Urj4aArQBEALw_wcB:G:s&s_kwcid=AL!4422!3!593877466233!e!!g!!aws%20appstream
Secure, reliable, and scalable access to applications and non-persistent desktops from any location
upvoted 3 times

Selected Answer: B
Vote B. It's Amazon AppStream 2.0
upvoted 1 times
  Chakra1 1 month, 3 weeks ago

Selected Answer: B
Option B
upvoted 1 times

Support B.
upvoted 1 times
  Varsi 2 months ago

it should be B Appstream
upvoted 1 times

answer is B
upvoted 1 times

Selected Answer: B
Amazon AppStream 2.0 is a fully managed non-persistent desktop and application service for remotely accessing your work
upvoted 2 times
  techhb 2 months, 2 weeks ago

Selected Answer: B
B is correct
Amazon AppStream 2.0 is a fully managed non-persistent desktop and application service for remotely accessing your work.
Deliver Software as a Service (SaaS) versions of applications without rewrites, special hardware, or device installs; ideal for training, trials and
software demonstrations.
upvoted 1 times
Selected Answer: B
B is correct
upvoted 1 times
  SneakXL 2 months, 2 weeks ago

AppStream is not listed in the exam guide.
upvoted 2 times

Vote for B
upvoted 1 times
  rp711 3 months ago

B is correct
upvoted 2 times

Selected Answer: B
https://aws.amazon.com/appstream2/
upvoted 3 times
  vlad29 3 months ago

Selected Answer: B
AppStream is correct.
upvoted 2 times
  GonzaloD 3 months, 1 week ago

Selected Answer: B
S3 is storage based service, however AppStream allows creating Desktops availeable remotely matching with the question
upvoted 4 times
A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software.
Which AWS service should the company use to meet these requirements?
A. Amazon VPC
B. Amazon EC2
C. Amazon GuardDuty
D. AWS Direct Connect
Correct Answer: C

C (100%)

Selected Answer: C
from: https://aws.amazon.com/guardduty/
1. Continuously monitor your AWS accounts, instances, container workloads, users, and storage for potential threats.
2. Expose threats quickly using anomaly detection, machine learning, behavioral modeling, and threat intelligence feeds from AWS and leading
third-parties.
3. Mitigate threats early by initiating automated responses.

upvoted 1 times

Selected Answer: C
Vote for C
upvoted 2 times

answer is C
upvoted 2 times

Vote for C
upvoted 1 times
  bilel500 3 months, 1 week ago

Selected Answer: C
Answer is C.
upvoted 1 times
Which AWS service uses edge locations?
A. Amazon Aurora
B. AWS Global Accelerator
C. Amazon Connect
D. AWS Outposts
Correct Answer: B
Reference:
https://aws.amazon.com/global-accelerator/

B (83%) D (17%)
  irap1 Highly Voted  2 months, 2 weeks ago

Vote for B.
AWS Global Accelerator and Amazon CloudFront are separate services that use the AWS global network and its edge locations around the world
upvoted 7 times
  MrSaint Most Recent  2 days, 12 hours ago

https://aws.amazon.com/global-accelerator/faqs/Q: How is AWS Global Accelerator different from Amazon CloudFront?
A: AWS Global Accelerator and Amazon CloudFront are separate services that use the AWS global network and its edge locations around the world.
upvoted 1 times
  elbarody 2 weeks, 1 day ago

Selected Answer: D
D Is correct answer
Global accelerator is Not Edg service Its Global
https://aws.amazon.com/edge/services/
upvoted 1 times

Selected Answer: B
Using Global Accelerator, your users' traffic is moved off the internet and onto Amazon’s private global network through 90+ global edge
locations, then directed to your application origins.
upvoted 2 times

Vote for B
upvoted 1 times

AWS Global Accelerator helps bridge the gap between single and multiple Region deployments by improving the network routing for local and
global user traffic. If traffic to your application’s single Region is left on the public internet, it can be negatively impacted by internet congestion
and local outages. Using Global Accelerator, your users' traffic is moved off the internet and onto Amazon’s private global network through 90+
global edge locations, then directed to your application origins. AWS Global Accelerator is quick to setup and increases traffic performance by up
to 60%.
upvoted 1 times
  Craig92866 3 months ago

Selected Answer: B
Correct answer is B. An "Edge Location" is an object within the 'AWS Global Infrastructure' framework (regions, availability zones, edge location).
"AWS Global Accelerator" connects directly to edge locations. 'AWS Outposts' are basically physical servers AWS maintains (physical server and the
software it runs). Not other aspects such as power, communications, cooling, physical security, etc...
https://aws.amazon.com/about-aws/global-infrastructure/
upvoted 1 times

Selected Answer: B
Correct answer is B, Global Accelerator.
AWS Global Accelerator allows you to route requests for key resources through Amazon’s global network—even if the request is going halfway
round the world. The request is initially routed to the closest edge location and then travels through Amazon’s network—often with lower latency
and higher throughput than the public internet. https://www.lastweekinaws.com/blog/what-is-an-edge-location-in-aws-a-simple-explanation/
upvoted 1 times
  shankarece 3 months, 1 week ago
D is correct answer
upvoted 1 times

D is not connect..
What is an outpost in AWS?
An Outpost is a pool of AWS compute and storage capacity deployed at a customer site. AWS operates, monitors, and manages this capacity as
part of an AWS Region. You can create subnets on your Outpost and specify them when you create AWS resources such as EC2 instances, EBS
volumes, ECS clusters, and RDS instances.
upvoted 1 times

Selected Answer: B
Correct answer is B, Global Accelerator
upvoted 1 times
  babakbardia 7 months, 4 weeks ago

D is correct answer
upvoted 4 times
  GV99 2 months, 3 weeks ago

https://aws.amazon.com/edge/services/ <<--link mentions Edge Computing not Edge Locations.
If question is asking about Edge Computing, then AWS Outposts is the correct answer.
upvoted 1 times
  Sib777 3 months, 1 week ago

AWS Global Accelerator - uses edge locations to find an optimal pathwat to the nearest regional endpoint.
upvoted 2 times

no , please read this:
https://aws.amazon.com/fr/global-accelerator/faqs/
upvoted 1 times
A company needs to install an application in a Docker container.

Which AWS service eliminates the need to provision and manage the container hosts?
A. AWS Fargate
B. Amazon FSx for Windows File Server
C. Amazon Elastic Container Service (Amazon ECS)
D. Amazon EC2
Correct Answer: C

A (59%) C (41%)
  Bigbluee Highly Voted  2 months, 1 week ago

Selected Answer: C
The answer is easier than You think.
"Which AWS Service...."
So we are looking for SERVICES in answers.

Is AWS Fargate a service? NO. IT IS AN ENGINE within Elastic Container Service.
And as the name states, ECS is a Service so this is the only possible answer.
C
upvoted 17 times

yes, but no
ECS : service to build and run Docker containers
Fargate : Serverless version for ECS/EKS. Running ECS or EKS without managing the infrastructure hosting your containers
> so Fargate is ECS eliminating the needs to build and manage
upvoted 1 times
  SmartLearner Highly Voted  1 month ago

Selected Answer: A
https://aws.amazon.com/ecs/
Optimize your time with AWS Fargate serverless compute for containers, which eliminates the need to configure and manage control plane, nodes,
and instances.
https://aws.amazon.com/fargate/
Deploy and manage your applications, not infrastructure. Fargate removes the operational overhead of scaling, patching, securing, and managing
servers.
upvoted 6 times
  asdx1 Most Recent  3 days, 18 hours ago

Selected Answer: A
The question is about eliminating managing container *host* not container itself.
A is correct
upvoted 1 times

Selected Answer: A
ECS : service to build and run Docker containers
Fargate : Serverless version for ECS/EKS. Running ECS or EKS without managing the infrastructure hosting your containers
> so Fargate is ECS eliminating the needs to build and manage
upvoted 1 times
  dark_cherrymon 1 week, 1 day ago

AAA, yes also C but A is more correct
upvoted 1 times

eliminates the need to provision and manage the container hosts ->IT MEANS GO SERVERLESS WHICH CAN BE ONLY FARGATE. SO ANSWER IS A
upvoted 1 times

Is there ever two correct answers?
upvoted 1 times

Selected Answer: A
is the correct answer
upvoted 1 times

Selected Answer: A
agreed, giveaways in question:
1. Eliminates the need to provision
2. Manage the container hosts

upvoted 1 times
  fluorescentwhite 1 month, 1 week ago

Answer should be C
AWS Fargate is a serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic
Kubernetes Service (EKS). AWS Fargate makes it easy to focus on building your applications. Fargate eliminates the need to provision and manage
servers, lets you specify and pay for resources per application, and improves security through application isolation by design.
Amazon Elastic Container Service (ECS) is a highly scalable, high performance container management service that supports Docker containers and
Amazon Elastic Kubernetes Service (EKS) is a fully managed Kubernetes service. Both ECS and EKS use containers provisioned by Fargate to
automatically scale, load balance, and optimize container availability through managed scheduling, providing an easier way to build and operate
containerized applications.
URL:https://aws.amazon.com/fargate/faqs/
upvoted 1 times

Selected Answer: A
https://cloudonaut.io/ecs-vs-fargate-whats-the-difference/
AWS Fargate manages the task execution. No EC2 instances to manage anymore. You pay for running tasks. That’s it. As easy as it sounds.
Each task that runs in Fargate comes with a dedicated Elastic Network Interface (ENI) with a private IP address. All containers of the same task can
communicate with each other via localhost. Inbound and outbound task communication goes through the ENI. A public IP address can be enabled
as well.
upvoted 3 times

Selected Answer: C
I think it’s C as well
upvoted 1 times
  vadiminski_a 1 month, 2 weeks ago

Selected Answer: A
Answer A is correct because:
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/Welcome.html
upvoted 2 times

Selected Answer: C
If it's a SERVICE what the scenario wants, then the answer is C, Amazon ECS
upvoted 2 times
  Shaychay 1 month, 4 weeks ago

Selected Answer: A
ECS delivers more control over the infrastructure, but the trade-off is the added management that comes with it. Fargate is the better option for
ease of use as it takes infrastructure management out of the equation allowing you to focus on just the tasks to be run
upvoted 2 times

SUPPORT A
upvoted 3 times

answer is A
upvoted 3 times
Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?
B. AWS IAM Access Analyzer
D. Amazon GuardDuty
Correct Answer: B

B (100%)

answer is B
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B
https://aws.amazon.com/fr/about-aws/whats-new/2021/06/iam-access-analyzer-adds-new-policy-checks-help-validate-conditions-during-iam-
policy-
authoring/#:~:text=AWS%20Identity%20and%20Access%20Management,actionable%20recommendations%20during%20policy%20authoring.
upvoted 4 times
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity.
The company needs to collect, format, and process the data at sea and move the data to AWS later.
A. AWS IoT Core
B. Amazon Lightsail
C. AWS Storage Gateway
D. AWS Snowball Edge
Correct Answer: C

D (75%) A (21%) 4%
  samurosales Highly Voted  2 months, 2 weeks ago

Selected Answer: D
AWS Snow Family - The AWS Snow Family is a collection of physical devices that help migrate large amounts of data into and out of the cloud
without depending on networks. This helps you apply the wide variety of AWS services for analytics, file systems, and archives to your data. You can
use AWS Snow Family services for data transfer and occasional pre-processing on location. Some large data transfer examples include cloud
migration, disaster recovery, data center relocation, and/or remote data collection projects. These projects typically require you to migrate large
amounts of data in the shortest, and most cost-effective, amount of time.
upvoted 10 times

Cargo ship use case is exactly at https://youtu.be/bxSD1Nha2k8?t=46
upvoted 4 times
  SUPERHEROGEEK 5 days, 5 hours ago

Literally everyone needs to watch this video, it's from Amazon itself lol
Thx Wangyan
upvoted 1 times

Everyone should look at this general description of Snow Family and no needed to dig deeper on Storage Gateway.
upvoted 1 times
  Iragmt Highly Voted  2 months, 1 week ago

Selected Answer: A
Going with A. The main focus of the customer is to collect, format and process the data at the sea. The data transfer will happen AFTER. "AWS IoT
provides a range of services specifically designed to make it easy to collect, store, and analyze device data even in noisy, unreliable environments."
https://aws.amazon.com/iot/solutions/industrial-iot/
upvoted 6 times
  parku Most Recent  1 week, 5 days ago

Selected Answer: D
https://aws.amazon.com/snowball/
upvoted 1 times
  elbarody 2 weeks, 1 day ago

Selected Answer: D
upvoted 2 times

Selected Answer: D
Snowball Edge by the book case
upvoted 3 times

I guess the right answer is not Snow Family because it didn't say the data is huge.
upvoted 1 times
Selected Answer: D
Answer provided here : https://aws.amazon.com/snowball/
upvoted 1 times
  terrifiedbyexams 3 weeks, 4 days ago

This has nothing to do with transporting data phsically so snowball edge cannot be the answer whatsoever. I think the correct answer here is A.
upvoted 2 times
  Fenix_Inc 3 weeks, 5 days ago

Selected Answer: A
The right answer is A. IoT Core. https://aws.amazon.com/iot-core/
upvoted 2 times

Selected Answer: D
D is correct.
Accelerate application performance in disconnected, austere edge environments and run compute workloads with little or no connectivity.
upvoted 2 times

I don't think we have answer for this, snowball can't "process" data right?
upvoted 1 times

Intermittent or no internet connectivity
The answer is Snowball
upvoted 3 times

Selected Answer: A
My answer is A
AWS IoT Core is a managed cloud service that lets connected devices easily and securely interact with cloud applications and other devices. AWS
IoT Core can support billions of devices and trillions of messages, and can process and route those messages to AWS endpoints and to other
devices reliably and securely.
Its mentioned at Sea they may have intermittent or no internet. The sensors can pass data when connected.
upvoted 4 times

Selected Answer: D
Vote for D. Snowball Edge
upvoted 1 times
  Ragdoll 1 month, 2 weeks ago

Selected Answer: D
Only Snowball Edge can fulfill all the requirements: https://docs.aws.amazon.com/snowball/latest/developer-guide/whatisedge.html#edge-feature-
overview
upvoted 1 times

Selected Answer: D
Keyword here is "later". The data is to be moved later, which is consistent with how Snowball works.
upvoted 1 times
  situchinmaya 1 month, 3 weeks ago

Selected Answer: A
With Device Shadow, store the latest state of a connected device so it can be read or set at any time, making the device appear to your
applications as if it were online all the time.
You can find the details here in this image

https://d1.awsstatic.com/IoT/diagrams/AWS%20IoT%20Core%20-
%20Read%20and%20Set%20Device%20State.928a7cef76201ff96589cd9eddeafe6983aebc15.png
you can read this page
https://aws.amazon.com/iot-core/
upvoted 1 times
A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that
replicate data across multiple Availability Zones.
Which AWS services should the company use to meet this requirement? (Choose two.)
A. Amazon EC2
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon Aurora
D. Amazon DynamoDB
E. Amazon Redshift
Correct Answer: AB
Reference:
https://aws.amazon.com/rds/features/multi-az/#:~:text=Amazon%20Aurora%20further%20extends%20the,ways%2C%20across%20three%
20Availability%20Zones

CD (51%) AB (31%) Other
  LloydA Highly Voted  2 months, 1 week ago

Please can we get Moderator clarification here
upvoted 25 times
  legacy1996 Highly Voted  1 month, 3 weeks ago

The Answer is C & D. Reason being the questions says company is using AWS services that replicate "DATA" across multiple AZs.
Both EC2 and EBS need to have manually triggered replication. Moreover, their purpose isn't DATA replication.
Natively only C & D allow DATA replication in multiple AZs.
upvoted 13 times
  dark_cherrymon Most Recent  3 days, 3 hours ago

Selected Answer: CE
ce---------
upvoted 1 times

Selected Answer: CD
Aurora
upvoted 1 times

Selected Answer: CD
data replication across AZs is native
upvoted 2 times

Since it says '...replicate data across multiple Availability Zones.', it cut automatically A and B out!!!!!!
upvoted 1 times

Selected Answer: CD
keywords " only AWS services that replicate data across AZs" . Only Aurora and Dynamo DB.
Answer : CD . EBS (ebs snapshots ) doesn't replicate and so does EC2.
upvoted 2 times

Selected Answer: CD
it seems correct
upvoted 2 times
  Tanie 3 weeks, 5 days ago

Selected Answer: CD
Vote for C & D as EC2 and EBS volumes are considered zonal.
upvoted 1 times

Selected Answer: AB
A is for compute requirement. and B is for replication.
https://aws.amazon.com/ebs/
Protect against failures with 99.999% availability, including replication within Availablity Zone (AZs), and 99.999% durability with io2 Block Express
volumes.
upvoted 2 times

At CCP Level EBS is out of it
upvoted 1 times

Selected Answer: AD
My answer A and D as EC2 and Dynamo are both highly available
upvoted 1 times

Selected Answer: CD
"using only AWS services for data replication" so i think C and D
upvoted 1 times
  lebowski 1 month, 1 week ago

Selected Answer: CD
data replication
upvoted 2 times
  Ahmed_Root 1 month, 3 weeks ago

Selected Answer: AB
Amazon EBS volumes are placed in a specific Availability Zone where they are automatically replicated to protect you from the failure of a single
component. All EBS volume types offer durable snapshot capabilities and are designed for 99.999% availability.
upvoted 2 times
  jeauschan 1 month, 3 weeks ago

Selected Answer: AB
Amazon EBS volumes are designed to be highly available, reliable, and durable. At no additional charge to you, Amazon EBS volume data is
replicated across multiple servers in an Availability Zone to prevent the loss of data from the failure of any single component.
https://aws.amazon.com/ebs/faqs/?nc1=h_ls
upvoted 2 times

That’s where you shoot yourself in the foot. The question says replical across availability zones
upvoted 2 times

answer is AB
upvoted 1 times
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?
A. Agility
B. Elasticity
C. Reliability
D. Durability
Correct Answer: B

B (100%)
  Craig92866 Highly Voted  2 months, 2 weeks ago

Selected Answer: B
Elasticity and Agility are pretty much the same thing but Elasticity is for resources (like CPU) and Agility is for services (EC2).
upvoted 5 times
  AJ79 Most Recent  2 months, 2 weeks ago

B, Elasticity helps reduce the instance if underutilised.
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
  fahim_neo 4 months, 1 week ago

Selected Answer: B
B is the correct answer
upvoted 1 times
Service control policies (SCPs) manage permissions for which of the following?
A. Availability Zones
B. AWS Regions
C. AWS Organizations
D. Edge locations
Correct Answer: C
Reference:
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

C (100%)
  diogooliveirafox Highly Voted  1 year ago

Correct answer: C
"Service control policies (SCPs) are a type of
organization policy
that you can use to manage permissions in your organization. "

upvoted 8 times
  N9 Most Recent  1 week, 1 day ago

Selected Answer: C
upvoted 1 times

Vote for C
upvoted 2 times

Selected Answer: C
Answer is C.
upvoted 1 times
  bilel500 3 months, 2 weeks ago

Selected Answer: C
Answer is C.
upvoted 1 times
  Johnfo2941 4 months, 2 weeks ago

Definitivamente la C
upvoted 2 times
  ramireze 5 months, 2 weeks ago

aws organisations
upvoted 1 times
  BrightHart 5 months, 3 weeks ago

the are
upvoted 1 times
  Myxa 8 months, 3 weeks ago

Selected Answer: C
Correct answer: C
upvoted 1 times
  Mano1990 9 months, 2 weeks ago

c. Aws organisation
upvoted 1 times
  easilo 12 months ago

C is correct
upvoted 2 times
  array284 1 year, 1 month ago

It’s Aws organizations 👍
upvoted 2 times
Which AWS service can be used to encrypt data at rest?
A. Amazon GuardDuty
B. AWS Shield
C. AWS Security Hub
D. AWS Key Management Service (AWS KMS)
Correct Answer: D
Reference:
https://aws.amazon.com/blogs/security/how-to-protect-data-at-rest-with-amazon-ec2-instance-store-encryption/

D (100%)

Vote for D
upvoted 1 times

Selected Answer: D
Answer is D.
Using services like AWS KMS, AWS CloudHSM, and AWS ACM, customers can implement a comprehensive data at rest and data in transit
encryption strategy across their AWS ecosystem to ensure all data of a given classification shares the same security posture.
https://docs.aws.amazon.com/whitepapers/latest/logical-separation/encrypting-data-at-rest-and--in-transit.html
upvoted 2 times

Selected Answer: D
Answer is D.
upvoted 1 times
  Ifebobo3 5 months, 2 weeks ago

KMS is used to encrypt data at rest not in transit....Should have been certificate manager for TLS and SSL.....
https://docs.aws.amazon.com/whitepapers/latest/logical-separation/encrypting-data-at-rest-and--in-transit.html
upvoted 2 times
Which characteristics are advantages of using the AWS Cloud? (Choose two.)
A. A 100% service level agreement (SLA) for all AWS services
B. Compute capacity that is adjusted on demand
C. Availability of AWS Support for code development
D. Enhanced security
E. Increases in cost and complexity
Correct Answer: BD
Reference:
https://intellipaat.com/blog/aws-benefits-and-drawbacks/

BD (100%)

Selected Answer: BD
Vote for B & D
upvoted 1 times

Vote for B & D
upvoted 1 times
  bilel500 3 months ago

Selected Answer: BD
Answer is B && D.
upvoted 1 times
  ggttsh 5 months, 2 weeks ago

100%SLA is not possible and it is not 'advantageous' at all, so A is not right.
upvoted 3 times
  coisas123 6 months ago

WHY NOT A?
upvoted 1 times

Its wrong B and D are correct.
upvoted 1 times
  Tonnie85 5 months, 1 week ago

SLA is never 100%
upvoted 6 times
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations.
What should the user do to meet this requirement?
A. Use AWS Secrets Manager.
B. Tag the objects in the S3 bucket.
C. Use security groups.
D. Use network ACLs.
Correct Answer: D

B (73%) D (22%) 4%

Selected Answer: B
Secrets Manager is for secrets (passwords)
Network ACL is a statekless firewall working on IPs, not users.
Security Groups are stateful firewall, not for user permissions.
In this case I'd say tags:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html
"Object tags enable fine-grained access control of permissions. For example, you could grant an IAM user permissions to read-only objects with
specific tags."
upvoted 27 times
  MottaM Most Recent  2 days, 18 hours ago

One-liner: ACL and Network ACL are not the same
So, the answer is B
upvoted 1 times

Selected Answer: B
specific tags."
upvoted 2 times

Selected Answer: B
specific tags."
upvoted 1 times

Would go for D. Tag alone cant really do much, cant assume what theybwill do woth the tag
upvoted 3 times
  kuririkura 4 weeks, 1 day ago

The answer should be object ACL, maybe the test writer a bit drunk while writing this question
upvoted 3 times

Selected Answer: B
B seems correct.
NACL is at subnet level and not object level.
upvoted 1 times

I would vote for D if it is not network ACL.
After the creation of s3 object tag you can create access control list to restrict access to sensitive data.
Link to official vid: https://youtube.com/clip/UgkxQDtEscnaqwsMxkOsjTJv4SywcDL2vR7H

Link to aws docs: https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html
upvoted 3 times
  legacy1996 1 month, 3 weeks ago

The Answer would be D. ACLs are used to restrict access to objects/reosource.
Tags Cannot directly restrict access, but they need to be used in conjunction with other services like AWS Config to apply restriction.
upvoted 2 times

Selected Answer: D
https://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html
upvoted 2 times
  LloydA 2 months, 1 week ago

More clarification here please.
upvoted 1 times

Selected Answer: B
https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging-and-policies.html
upvoted 2 times
  Craig92866 2 months, 2 weeks ago

Selected Answer: D
AWS was tricky with this. I vote for D. Here's my train of thought...
A. Not applicable.
B. Tags can be used for permissions but using them is not an AWS requirement (unlike Security Groups and ACL's which are required). Question
didn't state the environment already utilizes tags so we shouldn't assume they do. Security Groups and/or ACL's are required.
C. Security Groups only support allow access in AWS.
D: Network ACL's support both allow and deny access in AWS. Since it supports Deny, D is the answer.
upvoted 4 times

B is the answer :- https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging-and-policies.html
upvoted 2 times

Selected Answer: B
True that network ACL is only for IPs
upvoted 1 times

Vote for B
upvoted 1 times
  pancman 2 months, 3 weeks ago

Selected Answer: B
specific tags."
upvoted 1 times
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web
browsers.
Which AWS service will meet these requirements?
A. Amazon Elastic Transcoder
B. Amazon Comprehend
C. AWS Glue
D. Amazon Rekognition
Correct Answer: A

A (100%)
  Craig92866 Highly Voted  2 months, 2 weeks ago

Lol. My CLF-001 training didn't cover this. Glad this review exists!
upvoted 5 times
  CptFarmer 1 month, 3 weeks ago

It is also not in the exam-guide. Do we need to know this?
upvoted 2 times
  Nguyen25183 1 month, 1 week ago

surely we do.
upvoted 2 times
  sumanshu Most Recent  2 months, 3 weeks ago

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times
  30Miles 3 months ago

Selected Answer: A
A: https://docs.aws.amazon.com/elastictranscoder/latest/developerguide/introduction.html
upvoted 2 times
Which of the following are benefits of Amazon EC2 Auto Scaling? (Choose two.)
A. Improved health and availability of applications
B. Reduced network latency
C. Optimized performance and costs
D. Automated snapshots of data
E. Cross-Region Replication
Correct Answer: AB

AC (100%)
  zoeyaj Highly Voted  3 months, 1 week ago

Should it be A and C?
upvoted 12 times
  MukulSIngh Most Recent  5 days, 20 hours ago

Selected Answer: AC
Not sure how latency s relevant here
upvoted 1 times

Selected Answer: AC
Availability + Cost
upvoted 1 times

How could auto-scaling reduce network latency regarding to the answer B?
upvoted 1 times

This is confusing .... AC has 100% of votes ... How B is the answer ?
upvoted 2 times

AC shld be the answer
upvoted 1 times

Selected Answer: AC
A and C are correct. B network latency irrelevant.
upvoted 1 times

Selected Answer: AC
AC are the best answers
upvoted 2 times
  Sam_Lee 1 month, 4 weeks ago

support AC.
upvoted 1 times

Answer is ac
upvoted 1 times
  Istiaque 2 months ago

https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html
benefits: better fault tolerance, better availability, better cost management

upvoted 2 times
Selected Answer: AC
Some clarity from Admin here please
upvoted 3 times

Selected Answer: AC
In addition to the link 30Miles posted (https://aws.amazon.com/ec2/autoscaling/faqs), here's a description of the two types of auto scaling
confirming the answer is AC.
• • • Vertical Scaling (C. Optimized performance and costs)

○ You 'scale up' your instance type to a larger instance type with additional resources.
○ Requires shutting the server down.
○ Doesn't rely on ELB.
• • • Horizontal Scaling (A. Improved health and availability of applications)
○ You 'scale out' and add additional instances to handle the demand of your application.
○ Utilizes ELB.
upvoted 3 times

Selected Answer: AC
AC are the correct answers.
upvoted 1 times
  irap1 2 months, 2 weeks ago

Correct Ans is A&C. Auto Scaling benefits are Better fault tolerance, Availability and Cost management.
upvoted 1 times

Vote for A & C
upvoted 1 times

Selected Answer: AC
Correct answer is A and C
upvoted 2 times

Selected Answer: AC
A and C
upvoted 2 times
A company has several departments. Each department has its own AWS accounts for its applications. The company wants all AWS costs on a
single invoice to simplify payment, but the company wants to know the costs that each department is incurring.
Which AWS tool or feature will provide this functionality?
A. AWS Cost and Usage Reports
B. Consolidated billing
C. Savings Plans
D. AWS Budgets
Correct Answer: B

B (100%)

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times

Selected Answer: B
Think B is correct, it actually merges on one bill itemized per OU
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html
upvoted 4 times
  NawlinsTaz 3 months, 1 week ago

Selected Answer: B
B is correct. It is asking for a 'functionality' not a 'report'
upvoted 1 times
  seth1721 3 months, 1 week ago

Shouldn't it be A?
upvoted 4 times

No. 'A' works at the Account layer. A solution that works at the Organization layer is needed so the answer is 'B.'
upvoted 3 times
A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS.
Which AWS service or tool can the company use to obtain this information?
A. AWS Pricing Calculator
B. AWS Budgets
D. Cost Explorer
Correct Answer: D
Reference:
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/ce-forecast.html

A (92%) 8%
  SM786 Highly Voted  11 months, 3 weeks ago

Selected Answer: A
Anticipate / new app = Pricing Calculator
upvoted 17 times
  AJ79 Highly Voted  2 months, 2 weeks ago

Selected Answer: A
Ans is A, Forecast for new service. If it is for existing services, then D
upvoted 9 times

I agree with this
upvoted 2 times
  rajpint Most Recent  3 weeks, 2 days ago

"A" is only option before migration and when you are on premises. You can forecast for future time only when it is already hosted on AWS. So "D"
is not all answer.
upvoted 1 times
  Rivii 4 weeks, 1 day ago

I'm missing something here I guess now we are using words like running workloads on premises but do they have AWS on premises? if yes that
would mean that answer D makes sense. But if they do not and word forecast means that we need to estimate costs then answer A is the way.
because forecasting with cost explorer is only possible if you already have AWS infrastructure. Author of the questions assumes that we will guess
what he was thinking.
upvoted 4 times
  Thaamizh 4 weeks, 1 day ago

Selected Answer: A
New service from on-prem to AWS = Pricing Calculator
Existing service status/utilization = Cost Explorer
upvoted 1 times

Selected Answer: D
D is correct.
https://docs.aws.amazon.com/cost-management/latest/userguide/ce-forecast.html
You create a forecast by selecting a future time range for your report. For more information, see Choosing time ranges for the data that you want
to view. The following section discusses the accuracy of the forecasts created by Cost Explorer and how to read them.
Pricing calculator doesn't fit forecasting.

https://calculator.aws/#/
Estimate the cost for your architecture solution.
Configure a cost estimate that fits your unique business or personal needs with AWS products and services.
AWS budgegs is close but here they're not asking for budgeting.
https://aws.amazon.com/aws-cost-management/aws-budgets/
Improve planning and cost control with flexible budgeting and forecasting
upvoted 2 times

You can forecast for future time only when it is already hosted on AWS. So "D" is not all answer. "A" is only option before migration and when
you are on premises.
upvoted 1 times
  EDCode 1 month ago

Selected Answer: A
Pricing Calculator
upvoted 1 times
  Venkri02 1 month ago

Forecasting with Cost Explorer
You create a forecast by selecting a future time range for your report. You can use a forecast to estimate your AWS bill and set alarms and budgets
for based on predictions.
upvoted 1 times

Answer should be D. Keyword is forecast.
To estimate a bill, use the AWS Pricing Calculator. Choose Create estimate, and then choose your planned resources by service. The AWS Pricing
Calculator provides an estimated cost per month. For more information, see What is AWS Pricing Calculator?
To forecast your costs, use the AWS Cost Explorer. Use cost allocation tags to divide your resources into groups, and then estimate the costs for
each group.
URL: https://aws.amazon.com/premiumsupport/knowledge-center/estimating-aws-resource-costs/
upvoted 2 times

Selected Answer: A
this question is for estimating the costs of moving on-prem workload to AWS, so I feel that pricing calculator will be a better choice
upvoted 1 times
  ikanyu 1 month, 1 week ago

Selected Answer: A
A. Create estimates
upvoted 1 times

I think A
upvoted 1 times

Selected Answer: A
Clarity from Admin here please
upvoted 3 times

This one is a tricky question - if you read forecast in one way you can chose Cost Explorer as the correct answer but if you read Forecast as Estimate
- which will make the company to make a move from On-prem to cloud - then answer is pricing calculator.
upvoted 1 times
  irap1 2 months, 2 weeks ago

Vote for D.AWS Cost Explorer enables you to view and analyze your AWS Cost and Usage Reports (AWS CUR). You can also predict your overall cost
associated with AWS services in the future by creating a forecast of AWS Cost Explorer, but you can't view historical data beyond 12 months.
upvoted 1 times

Vote for A
upvoted 1 times
  Sib777 2 months, 3 weeks ago

Selected Answer: D
Forecasting is cost explorer. It give you past usage and cost data over time. If it said calculating, then perhaps calculator
upvoted 1 times

this question is for estimating the costs of moving on-prem workload to AWS, so I feel that pricing calculator will be a better choice
upvoted 1 times
A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget on
cloud resources only as the company uses the resources.
Which advantage of the AWS Cloud matches the company's requirements?
A. Reliability
B. Global reach
C. Economies of scale
D. Pay-as-you-go pricing
Correct Answer: D
Reference:

D (88%) 8%
  cam10490 1 month, 1 week ago

Selected Answer: D
Has to be D
upvoted 1 times
  Craig92866 2 months, 1 week ago

Selected Answer: D
Compared C and D and the answer is D.
C. https://aws.amazon.com/pricing/?aws-products-pricing.sort-by=item.additionalFields.productNameLowercase&aws-products-pricing.sort-
order=asc&awsf.Free%20Tier%20Type=*all&awsf.tech-category=*all
D. https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times

Selected Answer: D
D, pay as you go is the direct answer
upvoted 1 times

Vote for D
upvoted 1 times
  kp_download 2 months, 4 weeks ago

Selected Answer: C
Why is it not C? C includes Pay as you go advantage.
upvoted 1 times
  LittleSoap 1 week, 6 days ago

Because economies of scale implies that you pay less the more you use in terms of resources, and in that it dosen't answer the question as well
as D - pay as you go pricing
upvoted 1 times

Selected Answer: D
Answer is D.
upvoted 1 times
  rac_sp 3 months, 3 weeks ago

Selected Answer: D
D is the right choice
upvoted 1 times
  bitoyshunfu 3 months, 4 weeks ago

Selected Answer: D
D is the answer
upvoted 2 times
Selected Answer: D
Correct answer should be D
upvoted 3 times
  ovtchinnikov 5 months, 1 week ago

Selected Answer: D
D for sure!
upvoted 3 times
  ramireze 5 months, 1 week ago

D is the correct answer
upvoted 2 times
  nVizzz 6 months, 1 week ago

Selected Answer: D
Vote for D
upvoted 2 times
  saikarthikeya777 6 months, 1 week ago

Selected Answer: A
The option D is not a feature that needs to be used or selected, it is a advantage. So the option A Reliability is best suited here as a feature which
will help for this business solution
upvoted 2 times
  Iyin 6 months, 3 weeks ago

Selected Answer: D
D is paying only for what you use
upvoted 1 times
  Voltaroz 6 months, 3 weeks ago

Selected Answer: D
The answer is definitely D
upvoted 1 times
  Kiki_Pass 6 months, 3 weeks ago

Selected Answer: D
D for sure
upvoted 1 times
  RolandoTrevinoA 6 months, 3 weeks ago

D for sure
upvoted 1 times
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data
centers, colocation environments, or on-premises facilities?
A. AWS Snowmobile
B. AWS Local Zones
C. AWS Outposts
D. AWS Fargate
Correct Answer: C
Reference:
https://aws.amazon.com/outposts/

C (100%)
  Sreekanth_19 3 weeks, 5 days ago

C is correct
upvoted 1 times

Selected Answer: C
C is correct.
AWS Outposts is a family of fully managed solutions delivering AWS infrastructure and services to virtually any on-premises or edge location for a
truly consistent hybrid experience. Outposts solutions allow you to extend and run native AWS services on premises, and is available in a variety of
form factors, from 1U and 2U Outposts servers to 42U Outposts racks, and multiple rack deployments.
Local zone is close.

https://aws.amazon.com/about-aws/global-infrastructure/localzones/
AWS Local Zones are a type of infrastructure deployment that places compute, storage, database, and other select AWS services close to large
population and industry centers.
upvoted 1 times

Answer is C
upvoted 2 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times
  _SHARU_ 5 months, 4 weeks ago

C ANSWER
AWS Outposts • Hybrid Cloud: businesses that keep an on
- premises infrastructure alongside a cloud
infrastructure
• Therefore, two ways of dealing with IT systems: • One for the AWS cloud (using the AWS console,
CLI, and AWS APIs)
• One for their on
-premises infrastructure
• AWS Outposts are “server racks” that offers the
same AWS infrastructure, services, APIs & tools
to build your own applications on
-premises just as in the cloud
• AWS will setup and manage “Outposts Racks”
within your on
-premises infrastructure and you can start leveraging AWS services on-premises
• You are responsible for the Outposts Rack
physical security
upvoted 1 times
  CaptainRed 1 year, 1 month ago

Ans is C
upvoted 1 times
  wiijwqeif 1 year, 1 month ago

correct
upvoted 2 times
A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape
library's capacity to the AWS Cloud.
B. Amazon S3
C. Amazon Elastic File System (Amazon EFS)
D. AWS Storage Gateway
Correct Answer: D

D (86%) 14%

AWS Storage Gateway is a set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage.
upvoted 9 times

Selected Answer: D
D is correct
upvoted 1 times

Selected Answer: D
The key here is how they are actually going to move it
upvoted 1 times

Selected Answer: D
I believe the Storage Gateway contains S3 storage, but the use case definitely falls in line with Storage Gateway.
upvoted 1 times

Selected Answer: B
S3 Glacier Deep Archive : "maintaining data in on-premises tape or archiving data off-site"
upvoted 1 times

Selected Answer: D
S3 Glacier/Glacier Deep Freeze wound be a solid solution, too, since it's meant for archival data. I guess 'S3' didn't mean all of the solutions that
reside in 'S3.'
D will work, too.

upvoted 1 times

Vote for D
upvoted 2 times

Selected Answer: D
Answer is D.
upvoted 1 times

Selected Answer: D
D is correct, storage gateway is a good option for backups
upvoted 1 times
An online retail company has seasonal sales spikes several times a year, primarily around holidays. Demand is lower at other times. The company
finds it difficult to predict the increasing infrastructure demand for each season.
Which advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.)
A. Global footprint
B. Elasticity
C. AWS service quotas
D. AWS shared responsibility model
E. Pay-as-you-go pricing
Correct Answer: BE
Reference:

BE (100%)

Answer is BE
upvoted 1 times

Selected Answer: BE
B & E for the win.
upvoted 1 times

Vote for B & E
upvoted 1 times

Selected Answer: BE
Answer is B && E.
upvoted 1 times
  JeremyIMIM 3 months, 2 weeks ago

Selected Answer: BE
BE for sure
upvoted 1 times
  ducanh301191 8 months, 2 weeks ago

Selected Answer: BE
B + E are correct
upvoted 1 times

Selected Answer: BE
B and E
upvoted 1 times
  MischiShein 1 year ago

B y E definitivo
upvoted 3 times
  CaptainRed 1 year, 2 months ago

The ans is B & E
upvoted 2 times
Which AWS service can be used to turn text into lifelike speech?
A. Amazon Polly
B. Amazon Kendra
C. Amazon Rekognition
D. Amazon Connect
Correct Answer: A
Reference:
https://aws.amazon.com/polly/#:~:text=Amazon%20Polly%20is%20a%20service,synthesize%20natural%20sounding%20human%20speech

A (100%)

Selected Answer: A
https://aws.amazon.com/polly/
upvoted 1 times

Selected Answer: A
not found in the AWS CCP online course & exam prep. LOL
upvoted 1 times

Why the questions from out of syllabus? Who controls the type of questions?
upvoted 3 times
  quixo 2 months ago

A - Poly
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times

Selected Answer: A
A is correct. Directly form AWS White Paper for Services, "Amazon Polly is a service that turns text into lifelike speech."
upvoted 4 times
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
A. VPC Flow Logs
B. Amazon Inspector
C. VPC endpoint services
D. NAT gateway
Correct Answer: A

A (100%)

Selected Answer: A
A is correct.
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times
  CarrieJ 3 months ago

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC.
upvoted 3 times
A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data
centers.
How can the company meet this requirement?
A. Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.
B. Place the EC2 instances in two separate Availability Zones within the same AWS Region.
C. Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection.
D. Place both EC2 instances in a placement group for dedicated bandwidth.
Correct Answer: B

B (80%) D (20%)
  phony2 Highly Voted  1 year, 2 months ago

answer is B ... this is the definition of Available Zones ... separate data centers with minimal communication latency
upvoted 17 times
  JamPauGalBag Highly Voted  10 months, 2 weeks ago

Selected Answer: B
the answer is B.
A cluster placement group is a logical grouping of instances within a SINGLE AVAILABILITY ZONE that benefits from low network latency, high
network throughput.
in the question, it said DIFFERENT DATA CENTERS

upvoted 10 times

Selected Answer: B
question says separate data centers with minimal communication latency: it's B
upvoted 1 times
  anandasa920 2 weeks, 2 days ago

Selected Answer: B
This is correct answer
upvoted 1 times

Vote for B
upvoted 1 times

Could be D as well...(Not Sure)
upvoted 1 times
  Eky_1 1 month, 1 week ago

Placement groups are rack specific. Meaning all placements whatsoever could be in the same data center.
upvoted 1 times

Selected Answer: B
Obviously B
upvoted 1 times
  Ahmed_Root 2 months, 3 weeks ago

Selected Answer: B
in the same AvZone the latency will be lower. Actually the placement group will be a choice but it did not give the option to differenciate the
datacenter between the EC2 instance.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html
upvoted 1 times
  dldjven 3 months ago

Selected Answer: B
B seems to be the best answer even if others might also be correct

upvoted 1 times
Selected Answer: B
Answer is B.
upvoted 2 times
  b4therain 7 months, 2 weeks ago

Selected Answer: D
Batch Group : Logical group of EC2 instances within a single available zone.
upvoted 2 times
  Cara89 7 months, 4 weeks ago

Selected Answer: D
lowest possible communication delay, so is D
upvoted 1 times
  T1Heavy 2 months, 3 weeks ago

That is only half of the question.
The most important half is: ensure that two Amazon EC2 instances are in separate data centers
Within one AZ it is POSSIBLE that they are in ONE data center. So it is wrong.
upvoted 1 times
  ob602 10 months, 1 week ago

I believe D is correct.
Placement group where group members are able to communicate with one another in a way that provides low latency and high throughput.
upvoted 1 times
  Certifighter34 10 months, 3 weeks ago

It's B. Placement Groups are valid though but these types of questions are always looking for the option that is less effort. Just a tricky thing...
engineers and in-depth roles would choose D but caz it's foundational, the higer/abstracter option counts.
upvoted 2 times
  Topupjay 10 months, 3 weeks ago

AWS::EC2::PlacementGroup
Specifies a placement group in which to launch instances. ... A cluster placement group is a logical grouping of instances within a single Availability
Zone that benefit from low network latency, high network throughput. A spread placement group places instances on distinct hardware.… Ans: B
100%
upvoted 1 times
  Topupjay 10 months, 3 weeks ago

I meant D” … Sorry for confusion. D is correct answer. I went further to get the below info for more clarity.
A common misconception is that a single zone equals a single data center. In fact, each zone is usually backed by one or more physical data
centers, with the largest backed by as many as five. While a single availability zone can span multiple data centers, no two zones can share a
data center. Google it yourself “how many DB in a AZ.”
upvoted 3 times

So when an AZ has one data center (which is possible according to you), then D is wrong, yet B is always two different data centers,alway
correct. So Definitely B.
upvoted 1 times
  Nav88 10 months, 4 weeks ago

Selected Answer: B
The answer is B. It isn't D because placement groups are all within the same AZ (data centre).
upvoted 1 times
  somenick 11 months, 1 week ago

Selected Answer: B
answer is B ... this is the definition of Available Zones ... separate data centers with minimal communication latenc
upvoted 1 times
  ruchik 11 months, 3 weeks ago

Selected Answer: D
looks D to me
upvoted 2 times
In which situations should a company create an IAM user instead of an IAM role? (Choose two.)
A. When an application that runs on Amazon EC2 instances requires access to other AWS services
B. When the company creates AWS access credentials for individuals
C. When the company creates an application that runs on a mobile phone that makes requests to AWS
D. When the company needs to add users to IAM groups
E. When users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time
Correct Answer: BD

BD (71%) AC (29%)

Selected Answer: BD
BD seems correct to me
upvoted 1 times
  DongKG 1 week, 5 days ago

Selected Answer: BD
https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html
upvoted 1 times

Selected Answer: AC
Why A and C aren't the correct answer here?
This question is tricky

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html
You can create one or more IAM users in your AWS account. You might create an IAM user when someone joins your team, or when you create a
new application that needs to make API calls to AWS.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users.html
Users and permissions

By default, a brand new IAM user has no permissions to do anything. The user is not authorized to perform any AWS operations or to access any
AWS resources. An advantage of having individual IAM users is that you can assign permissions individually to each user.
upvoted 2 times

Selected Answer: BD
BD seems correct but A is also close.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users.html
An AWS Identity and Access Management (IAM) user is an entity that you create in AWS to represent the person or application that uses it to
interact with AWS. A user in AWS consists of a name and credentials.
upvoted 2 times

Answer is BD
upvoted 1 times

An IAM User account isn't needed when an Amazon EC2 instances requires access to other AWS services?
upvoted 1 times

Vote for B & D
upvoted 1 times

Selected Answer: BD
Answer is B && D.
upvoted 1 times
Which AWS services should a company use to read and write data that changes frequently? (Choose two.)
A. Amazon S3 Glacier
B. Amazon RDS
C. AWS Snowball
D. Amazon Redshift
E. Amazon Elastic File System (Amazon EFS)
Correct Answer: BD

BE (58%) BD (42%)

Selected Answer: BD
b&d, e is wrong
upvoted 1 times
  N3ar 3 weeks ago

I took the AWS Cloud Practitioner Essential course on the AWS learning platform. Over there, they taught me that EFS is for 'reading and writing
simultaneously'
upvoted 4 times

Selected Answer: BE
B and E are correct. Other options are archival.
upvoted 3 times

Should be B & E.
Amazon Redshift can be primarily classified under "Big Data as a Service" instead of "Cloud Storage".
upvoted 3 times

Selected Answer: BD
Vote for B and D
upvoted 1 times
  Teetotaler 2 months, 1 week ago

Selected Answer: BD
The reason why E is not an option is because EFS works with infrequently accessed files also
https://aws.amazon.com/efs/features/infrequent-access/?pg=ln&sec=be
upvoted 2 times
  Iragmt 2 months, 1 week ago

Try reading EFS storage classes. It is not just for infrequently accessed files. https://docs.aws.amazon.com/efs/latest/ug/storage-classes.html
upvoted 2 times

Answer is BE
upvoted 1 times

Selected Answer: BD
The reason E isn't an option is because the question is asking for services and AWS doesn't consider EFS a service.
B. Relation Database Service (RDS) is considered a Platform as a Service (PaaS).

D. Redshift is AWS's data warehouse service. Data warehouses can definitely be used for frequent read/write activity. https://aws.amazon.com/data-
warehouse/
upvoted 2 times
  hvtroller 2 months ago

I see in FAQ showing that EFS is a service btw
> Amazon EFS is a file storage service for use with Amazon compute (EC2, containers, serverless) and on-premises servers
https://aws.amazon.com/efs/faq/?nc1=h_ls
upvoted 1 times

Yeah, but also says this at the beginning: "Amazon Elastic File System (Amazon EFS) is a simple, serverless, set-and-forget elastic file system
that makes it easy to set up, scale, and cost-optimize file storage in AWS"
upvoted 1 times

I agree also that this should not E - Amazon Elastic File System (Amazon EFS) is a simple, serverless, set-and-forget, elastic file system. There is
no minimum fee or setup charge. You pay only for the storage you use, for read and write access to data stored in INFREQUENT access storage
classes, and for any provisioned throughput.
BD - I guess.
upvoted 1 times
  Iragmt 2 months, 1 week ago

EFS is not just for infrequent access. Like S3 it also has different storage classes https://docs.aws.amazon.com/efs/latest/ug/storage-
classes.html
upvoted 1 times

Selected Answer: BE
Redshift is a datawarehouse and cannot be the right answer. correct answer is B and E
upvoted 1 times

It says that, but also this: "Amazon Redshift is a fully managed service and offers both provisioned and serverless options, making it easy for you
to run and scale analytics without having to manage your data warehouse"
REF: https://aws.amazon.com/redshift/faqs/?nc1=h_ls
upvoted 1 times
  kasiv 2 months, 2 weeks ago

Selected Answer: BE
B and E as redshift is warehouse
upvoted 1 times
  BruTTus 2 months, 2 weeks ago

Selected Answer: BE
Redshift is a data warehouse service.
upvoted 1 times

Vote for B & E
upvoted 2 times

Selected Answer: BE
Correct answer is B and E. For those saying B and D, please look up how a data warehouse works.
upvoted 2 times

I chose D because I looked up how a data warehouse works. "A data warehouse is specially designed for data analytics, which involves reading
large amounts of data to understand relationships and trends across the data. A database is used to capture and store data, such as recording
details of a transaction." That sounds like frequent read/write to me. -https://aws.amazon.com/data-warehouse/
upvoted 1 times
  dasigrist 1 month, 3 weeks ago

Data warehouse is write once (batch) - reads frequently. Frequent data read/write is OLTP
upvoted 3 times

Selected Answer: BE
RedShift is for log analytics, the response should be RDS and EFS
upvoted 2 times

Redshift is a warehouse, the key word is "date is frequently used" Redshift is wrong
upvoted 3 times
  Arvina 2 months, 4 weeks ago

Ans should be RDS and EFS
upvoted 1 times
  [Removed] 3 months ago
Selected Answer: BE
Redshift is a data warehouse
upvoted 1 times
Which AWS service is used to provide encryption for Amazon EBS?
A. AWS Certificate Manager
C. AWS KMS
D. AWS Config
Correct Answer: C

C (100%)
  stemtem Highly Voted  1 year, 1 month ago

finally a correct answer
upvoted 11 times
  aprendiendo Highly Voted  1 year, 1 month ago

C. AWS KMS
AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of
AWS services and in your applications. AWS KMS is a secure and resilient service that uses hardware security modules that have been validated
under FIPS 140-2, or are in the process of being validated, to protect your keys. AWS KMS is integrated with AWS CloudTrail to provide you with
logs of all key usage to help meet your regulatory and compliance needs.
https://aws.amazon.com/kms/?nc1=h_ls
upvoted 7 times
  N9 Most Recent  1 week, 2 days ago

Selected Answer: C
KSM
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
upvoted 1 times

Answer is C
upvoted 1 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is A.
upvoted 1 times
  BillyC 1 year ago

C is correct
upvoted 1 times
  RAAAEHL 1 year ago

C - Amazon Key Management (KMS)
upvoted 2 times
  LivFar 1 year, 1 month ago

Correct answer: C
The AWS service that is used to provide encryption for Amazon EBS is AWS KMS
upvoted 3 times
  educastle 1 year, 1 month ago

Yes, is KMS
upvoted 5 times
  ben007CasinoRoyal10outof10imdb 1 year, 1 month ago

Very nice
upvoted 3 times
Which AWS services make use of global edge locations? (Choose two.)
A. AWS Fargate
B. Amazon CloudFront
D. AWS Wavelength
E. Amazon VPC
Correct Answer: BC
Reference:
https://www.lastweekinaws.com/blog/what-is-an-edge-location-in-aws-a-simple-explanation/#:~:text=CloudFront%20is%20the%20most%
20commonly,caches%20content%20in%20edge%20locations

BC (88%) 13%
  N9 1 week, 2 days ago

Selected Answer: BC
Why C because - https://docs.aws.amazon.com/global-accelerator/latest/dg/introduction-ip-ranges.html
upvoted 1 times

Answer is BC
upvoted 2 times
  Krebs2022 2 months, 1 week ago

I love Mind Mapping. For me, it is the easiest way to learn a new topic.
Also, I used it for my certification, which helped me get a great score.
If you are trying to study for the certification or need to learn everything around AWS VPC, it should help you too.
https://store.bitslovers.com/p/mindmap-aws-vpc-everything-that-you-need-to-know-about-in-a-single-mindmap/
upvoted 1 times

Selected Answer: BC
This was tricky. Reason why D is not the answer is because D lives within a mobile provider's network and, per AWS's definition, is not considered a
'Global Edge Location.' -https://aws.amazon.com/cloudfront/features/?p=ugi&l=na&whats-new-cloudfront.sort-
by=item.additionalFields.postDateTime&whats-new-cloudfront.sort-order=desc
upvoted 2 times

Vote for B & C
upvoted 1 times
Selected Answer: BC
b&c
Using Global Accelerator, your users' traffic is moved off the internet and onto Amazon’s private global network through 90+ global edge
locations, then directed to your application origins. AWS Global Accelerator is quick to setup and increases traffic performance by up to 60%.
upvoted 2 times

Selected Answer: BC
Answer is B && C.
upvoted 2 times
  UC1050 3 months ago

Selected Answer: BD
Its B and D.
upvoted 1 times
A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications
with local system interdependencies that require low latency.
A. AWS IoT Greengrass
B. AWS Lambda
C. AWS Outposts
Correct Answer: B

C (74%) B (22%) 4%

Selected Answer: A
why not A
upvoted 1 times

Selected Answer: C
Outposts - is for on-premises local system
upvoted 1 times

Selected Answer: C
this lookscorrect
upvoted 1 times
  NaJeS 2 weeks, 3 days ago

Selected Answer: C
How can you "store data" with Lambda? I don't know.. I believe is Outpost.
upvoted 1 times

C: Outposts
"By providing local access to AWS managed infrastructure, AWS Outposts enables customers to build and run applications on premises using the
same programming interfaces as in AWS Regions, while using local compute and storage resources for lower latency and local data processing
needs." https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html
upvoted 2 times
  anandshuklanine 4 weeks, 1 day ago

Selected Answer: C
With AWS Outposts, you can run some AWS services locally and connect to a broad range of services available in the local AWS Region. Run
applications and workloads on premises using familiar AWS services, tools, and APIs. Outposts supports workloads and devices requiring low
latency access to on-premises systems, local data processing, data residency, and application migration with local system interdependencies.
upvoted 3 times

Selected Answer: C
C is correct.
upvoted 1 times
  senigiro 1 month, 1 week ago

Selected Answer: B
Answer is B, look at the keyword "with local system interdependencies" this is offered Lamda.
upvoted 1 times

https://aws.amazon.com/outposts/
Outposts supports workloads and devices requiring low latency access to on-premises systems, local data processing, data residency, and
application migration with local system interdependencies.
upvoted 2 times

Selected Answer: C
Vote for C.
upvoted 1 times
  tensit 1 month, 2 weeks ago

C
: Because its running on-premise workloads as well
upvoted 1 times

Selected Answer: C
https://d1.awsstatic.com/product-marketing/Outposts/TrulyConsistentHybridCloud.pdf
This document will answer this question

upvoted 1 times
  emanuelneves 2 months ago

Selected Answer: B
Lambda can offer double-digit millisecond latency
upvoted 1 times
  FR_Wolfman 2 months, 1 week ago

Selected Answer: C
The keyword in the question to choose Outposts is "low latency". The data and processing have to be the closest possible to the factory.
upvoted 1 times

I think it should be "B" because of the term "local interdependencies"
upvoted 1 times

Selected Answer: B
A. No because IoT Greengrass doesn't handle storage.
B. Yes because Lambda can offer double-digit millisecond latency when Provisioned Concurrency is enabled. Generally, double-digit latency is
considered 'low' and the question should have clarified what it considers 'low.' This allows you to meet your needs and still utilize all of the
redundancy and other features built into the cloud.
C. No. Yes, this meets their needs, too, but it adds layers of complexity (and failure domains) that Lambda doesn't have to contend with. Kind of like
buying a Mercedes G Wagon (Outpost) to go to a friends house down the street instead of buying a bike (Lambda).
D. No because it only handles storage.
upvoted 4 times
  mihnitu 1 week, 1 day ago

How can you store data with lambda ? Requirement included storing data
upvoted 1 times

But the question doesn't state that it requests something least complex . . .
upvoted 1 times

shouldn't that be common sense when you provide solution to a client?
upvoted 1 times

well lambda is simpler but doesnt fulfill all the requirements.. storage for instance.
upvoted 1 times
  nottie_noe 2 months, 2 weeks ago

C not B !! AWS Outposts is a fully managed service that extends AWS infrastructure, services, APIs, and tools to customer premises. By providing
local access to AWS managed infrastructure, AWS Outposts enables customers to build and run applications on premises using the same
programming interfaces as in AWS Regions, while using local compute and storage resources for lower latency and local data processing needs.
upvoted 2 times
Which of the following is a recommended design principle for AWS Cloud architecture?
A. Design tightly coupled components.
B. Build a single application component that can handle all the application functionality.
C. Make large changes on fewer iterations to reduce chances of failure.
D. Avoid monolithic architecture by segmenting workloads.
Correct Answer: C

D (92%) 8%
  Craig92866 Highly Voted  2 months, 1 week ago

You'll laugh when you read question 95. XD It just proved C is not the answer.
95. A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible
increments.
Which pillar of the AWS Well-Architected Framework does this design support?
upvoted 7 times
  davinkeithlewis Highly Voted  3 months, 1 week ago

D is the right answer
upvoted 7 times
  Testeurtest Most Recent  1 week ago

Selected Answer: D
Next question proves that C is wrong
A & B are just obvious wrong answers
upvoted 1 times

Selected Answer: D
D is answer
upvoted 1 times

Selected Answer: D
answer is D
upvoted 1 times

Selected Answer: D
this lookscorrect
upvoted 1 times
  Osmanly 1 month ago

There are various AWS services that enable
you to build applications that adopt a decoupled architecture design. This enables you to
move away from traditional monolithic design in favor of the more modern microservice
architectures.
upvoted 2 times
  apchandana 1 month, 2 weeks ago

Selected Answer: D
This is very straight forward answer that design principal of avoiding monolithic application designing loosely coupled systems.
upvoted 2 times

Selected Answer: D
Answer is D
upvoted 1 times

Answer is D
upvoted 1 times

Selected Answer: D
Refer to design principles link to prove Option C is wrong
https://docs.aws.amazon.com/wellarchitected/latest/framework/oe-design-principles.html
Refer to design principles link to prove Option D is correct:

https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/design-your-workload-service-architecture.html
upvoted 4 times

Selected Answer: D
Micro services archi is the way to go
upvoted 1 times

Vote for D
upvoted 2 times

Selected Answer: D
Obviously D.
upvoted 1 times

Selected Answer: D
Answer is D.
upvoted 1 times
  lianna 3 months ago

Selected Answer: C
Answer should be C.
In D monolithic architecture should be avoided by cooperating parts of workload, not segmenting workloads.
In C large changes are made by iterations which means not by once, but in steps.
upvoted 1 times

In your reason 'monolithic architecture should be avoided by cooperating parts of workload' ... well, you shouldn't avoid monolith by doing
monolithic things 😅
upvoted 1 times

D says to 'avoid monolithic architecture.'
upvoted 1 times

Hello Lianna, can you please refer the below link - based on which Option C is not correct. Option D is more closer and relevant.
https://docs.aws.amazon.com/wellarchitected/latest/framework/oe-design-principles.html
upvoted 1 times

Selected Answer: D
It's D obviously.
upvoted 1 times
A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible
increments.
Which pillar of the AWS Well-Architected Framework does this design support?
A. Security
D. Reliability
Correct Answer: B

C (96%) 4%

Selected Answer: C
https://wa.aws.amazon.com/wellarchitected/2020-07-02T19-33-23/wat.pillar.operationalExcellence.en.html
upvoted 12 times

this is correct!
upvoted 1 times
  anandasa920 Most Recent  2 weeks, 2 days ago

Selected Answer: C
this lookscorrect
upvoted 1 times

It's C: And these are exact given examples of the pillar
upvoted 1 times
  PrasanthVarada 3 weeks, 1 day ago

Answer is C.
There are five design principles for operational excellence in the cloud:
Perform operations as code
Make frequent, small, reversible changes
Refine operations procedures frequently
Anticipate failure
Learn from all operational failures
upvoted 1 times

Selected Answer: C
Answer is C
upvoted 1 times
  Sam_Lee 1 month, 4 weeks ago

support C
upvoted 1 times

Selected Answer: C
Design principles for operational excellence in the cloud include performing operations as code, annotating documentation, anticipating failure,
and frequently making small, reversible changes.
upvoted 2 times

Answer is C
upvoted 1 times
  hvtroller 2 months, 1 week ago

Selected Answer: B
"The Performance Efficiency pillar includes the ability to use computing resources efficiently to meet system requirements, and to maintain that
efficiency as demand changes and technologies evolve. "
upvoted 1 times
That is C
upvoted 1 times

Selected Answer: C
C is better in this case
upvoted 1 times
  AJ79 2 months, 2 weeks ago

C. I think the author should add a disclaimer at the start of the questions. " Answers could be wrong. Please use your own judgement.' Lot of wrong
answers.
upvoted 3 times

Vote for C
upvoted 1 times

Selected Answer: C
The operational excellence pillar focuses on running and monitoring systems, and continually improving processes and procedures. Key topics
include automating changes, responding to events, and defining standards to manage daily operations.
upvoted 1 times
  bravemanvvn 2 months, 4 weeks ago

Selected Answer: C
Operational excellence
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times

Selected Answer: C
includes the ability to support development and run workloads effectively, gain insight into their operation, and continuously improve supporting
processes and procedures to delivery business value.
upvoted 1 times
Which of the following acts as an instance-level firewall to control inbound and outbound access?
A. Network access control list
B. Security groups
D. Virtual private gateways
Correct Answer: B

B (100%)
  CarrieJ Highly Voted  3 months ago

Security group Operates at the instance level, while Network ACL Operates at the subnet level.
upvoted 8 times
  FreddyBrainy 1 week, 4 days ago

Thanks for that insight. You helped a lot here. Thanks again
upvoted 1 times

Thanks. I chose Network ACL and I know why that isn't the right answer after reading what you said.
upvoted 1 times
  N3ar Most Recent  3 weeks ago

I understand why it's B: Security Group due to the keyword "...as an instance level firewall"
but isn't the question here then a bit unclear since it also says "...to control inbound and outbound access" since the Security Group doesn't control
the outbound?'
upvoted 1 times

Ah never mind! found it https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html
upvoted 1 times

Answer is B
upvoted 1 times

Vote for B
upvoted 1 times
  SumanCert 2 months, 3 weeks ago

Selected Answer: B
Security group is correct.
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.
Which Amazon EC2 purchasing option will be MOST cost-effective?
A. All Upfront Reserved Instances
B. Partial Upfront Reserved Instances
C. Dedicated Instances
D. On-Demand Instances
Correct Answer: A

A (93%) 7%
  GV99 Highly Voted  2 months, 3 weeks ago

Selected Answer: A
With the All Upfront option, you pay for the entire Reserved Instance term with one upfront payment. This option provides you with the largest
discount compared to On-Demand Instance pricing.
https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/
upvoted 7 times

Selected Answer: A
upvoted 1 times

Selected Answer: A
A is winner.
upvoted 2 times

Selected Answer: A
All upfront will always be the most cost efficient option
upvoted 2 times
  OLABLACK 1 month, 3 weeks ago

The answer is D
On-Demand is the best choice for this situation as it is the most economical option that will ensure no interruptions
economical option that will ensure no interruptions
https://digitalcloud.training/certification-training/aws-certifiedcloud-
practitioner/aws-billing-and-pricing/
upvoted 1 times
  marcshj 2 months ago

Selected Answer: D
The workload cannot tolerate service interruptions. --> On-Demand
upvoted 1 times

No, You can choose between three payment options when you purchase a Standard or Convertible Reserved Instance. With the All Upfront
option, you pay for the entire Reserved Instance term with one upfront payment. This option provides you with the largest discount compared
to On-Demand Instance pricing.
upvoted 1 times

Answer is A
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times
Which AWS service helps protect against DDoS attacks?
A. AWS Shield
B. Amazon Inspector
C. Amazon GuardDuty
D. Amazon Detective
Correct Answer: A

A (100%)

Answer is A
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times

i like this kind of qustion LOL
upvoted 4 times
Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected
Framework pillar?
A. Security
Correct Answer: A
Reference:
https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf
(12)

A (100%)
  JohnO1971 Highly Voted  1 year, 2 months ago

From the Security section of https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf " • Enable traceability:
Monitor, alert, and audit actions and changes to your environment in real time. Integrate log and metric collection with systems to automatically
investigate and take action."
upvoted 15 times
  PSL95 Highly Voted  1 year, 2 months ago

A is correct.
upvoted 7 times
  Istiaque Most Recent  2 months, 1 week ago

Answer is A
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times

A is correct
upvoted 2 times
  Joggy12 1 year, 1 month ago

A: to enable traceability, "here are seven design principles for security in the cloud:
Implement a strong identity foundation
Enable traceability
Apply security at all layers
Automate security best practices
Protect data in transit and at rest
Keep people away from data
Prepare for security events"
upvoted 2 times
  bipuljaishwal 1 year, 1 month ago

A is correct. See https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/wellarchitected-security-pillar.pdf
upvoted 4 times
  aboeyunus 1 year, 1 month ago

In the Well Architected Framework
Security: ------> Enable traceability - Integrate logs and metrics with systems to automatically respond and take action
So A is correct!
upvoted 3 times
  ThePunisher77 1 year, 1 month ago

A is correct. Keyword is traceability.
upvoted 2 times
  Vita_Rasta84444 1 year, 2 months ago

I think it is Operational Excellence, B. Anticipate failures and trace it, using AWS Config.
upvoted 3 times
Which AWS tool or feature acts as a VPC firewall at the subnet level?
A. Security group
B. Network ACL
C. Traffic Mirroring
D. Internet gateway
Correct Answer: B

B (88%) 13%

Selected Answer: B
Network ACL >>> Subnet level
Security Groups >>>> Instance level
upvoted 1 times

Selected Answer: B
The security groups is a firewalling solution at instance level. The right answer is B.
upvoted 4 times

Answer is B
upvoted 2 times
  jcrzj 2 months, 2 weeks ago

Selected Answer: B
The key is SUBNET LEVEL
upvoted 3 times

Vote for B
upvoted 2 times
  lmbalati 2 months, 3 weeks ago

The answer is B....."A network access control list (ACL) allows or denies specific inbound or outbound traffic at the SUBNET LEVEL"
upvoted 3 times
  seth1721 2 months, 3 weeks ago

Keyword here is subnet, therefore the correct answer is B: Network ACL
upvoted 2 times

Selected Answer: B
NACL is at subnet level, security group at the EC2 instance level
upvoted 2 times

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html?ref=wellarchitected
upvoted 1 times

Selected Answer: B
"A network access control list (ACL) allows or denies specific inbound or outbound traffic at the subnet level. "
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
  Sib777 3 months ago

Selected Answer: B
At subnet level is Network ACL so B is correct
upvoted 2 times

Selected Answer: A
I would think A is more similar to a FW
upvoted 2 times
Which AWS service can be used to decouple applications?
A. AWS Config
B. Amazon Simple Queue Service (Amazon SQS)
C. AWS Batch
D. Amazon Simple Email Service (Amazon SES)
Correct Answer: B

B (100%)

Selected Answer: B
https://docs.aws.amazon.com/sqs/?id=docs_gateway
Amazon Simple Queue Service (Amazon SQS) is a fully managed message queuing service that makes it easy to decouple and scale microservices,
distributed systems, and serverless applications. Amazon SQS moves data between distributed application components and helps you decouple
these components.
upvoted 7 times

Answer is B
upvoted 1 times

Selected Answer: B
A decoupled application architecture allows each component to perform its tasks independently
upvoted 2 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
  adsdadasdad 11 months, 3 weeks ago

It is B , Only logical choice used with application runtimes
upvoted 2 times
Which disaster recovery option is the LEAST expensive?
A. Warm standby
B. Multisite
C. Backup and restore
D. Pilot light
Correct Answer: C

C (100%)
  cheuvel Highly Voted  8 months ago

Selected Answer: C
C - Nice graph here: https://docs.aws.amazon.com/whitepapers/latest/disaster-recovery-workloads-on-aws/disaster-recovery-options-in-the-
cloud.html
upvoted 15 times

I jumped into the comments to post my graph but yours is much better! Thanks for posting it! Great description of the services on that site, too.
upvoted 1 times
  Noks7 3 months ago

Thank you.
upvoted 1 times

Selected Answer: C
upvoted 1 times

Selected Answer: C
Backup and Restore ---- cheapest
Pilot light --- cheap
Warm standby ---- costlier
Multisite ---- costliest
upvoted 2 times

Answer is c
upvoted 1 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times
  asmida 8 months, 3 weeks ago

Selected Answer: C
the answer is C
upvoted 1 times
  magdoc 10 months, 1 week ago

Selected Answer: C
C. is the correct answer.
upvoted 1 times
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated?
B. Amazon EC2 instance store
D. Amazon S3
Correct Answer: B
When you stop or terminate an instance, every block of storage in the instance store is reset. Therefore, your data cannot be accessed through
the instance store of another instance.
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html

B (100%)

Selected Answer: B
B is the answer
upvoted 1 times

Answer is B
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
Which of the following is a characteristic of the AWS account root user?
A. The root user is the only user that can be configured with multi-factor authentication (MFA).
B. The root user is the only user that can access the AWS Management Console.
C. The root user is the first sign-in identity that is available when an AWS account is created.
D. The root user has a password that cannot be changed.
Correct Answer: B
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html

C (100%)
  davinkeithlewis Highly Voted  3 months, 1 week ago

Selected Answer: C
C is the answer
upvoted 6 times
  bonee Most Recent  3 days, 17 hours ago

Selected Answer: C
upvoted 1 times
  Vicky_Obazee1 3 weeks, 3 days ago

C is the answer
upvoted 1 times
  Makku69 3 weeks, 4 days ago

Selected Answer: C
The explanation points to answer C - not B.
upvoted 1 times

Selected Answer: C
C is the winner.
upvoted 1 times
  Pamban 1 month ago

Selected Answer: C
Explanation is correct. but the answer given is wrong. please correct it to C
upvoted 1 times
  Swapit0 1 month, 1 week ago

Answer is wrong it should be C
upvoted 1 times

Selected Answer: C
pls correct the answer to C. it is a clear cut answer about the root user. answer is C
upvoted 1 times
  GodShiro 2 months ago

Selected Answer: C
Guess this needs to be updated to C
upvoted 1 times

It seems like the answer is not yet updated. "B" can not be the answer as every authenticated user will have access to the AWS console.
upvoted 1 times

Answer is C
upvoted 1 times
  sribalajis883 2 months, 1 week ago

If B is correct then no non-root user can access IAM. Its just non-sense that B selected as right answer.
upvoted 1 times

Selected Answer: C
B is non-sense, we see in reference that C is correct
upvoted 1 times

Vote for C
upvoted 1 times

Selected Answer: C
100% sure it is C
upvoted 1 times

Only root user has access to the AWS Management Console
https://aws.amazon.com/premiumsupport/knowledge-center/sign-in-console/
upvoted 1 times

https://aws.amazon.com/premiumsupport/knowledge-center/sign-in-console/
upvoted 1 times
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and
Amazon
DynamoDB.
What is the MOST operationally efficient solution to delegate permissions?
A. Create an IAM role with the required permissions. Attach the role to the EC2 instance.
B. Create an IAM user and use its access key and secret access key in the application.
C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance
D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.
Correct Answer: A
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html

A (75%) D (25%)
  Agil09 2 days, 9 hours ago

Selected Answer: A
surely A
upvoted 1 times

Selected Answer: D
Surely D, you want them to access multiple resources, not just the EC2 instance ?
upvoted 2 times

I think the question was specifically referring to the EC2 instance.
upvoted 1 times

Selected Answer: A
Instead, you can and should use an IAM role to manage temporary credentials for applications that run on an Amazon EC2 instance. When you use
a role, you don't have to distribute long-term credentials (such as a user name and password or access keys) to an Amazon EC2 instance.
upvoted 2 times

Selected Answer: A
A is correct.
upvoted 1 times

Answer is A
upvoted 1 times

Selected Answer: A
A: the EC2 instance will have the access without having to configure anything else
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times
Which of the following is a component of the AWS Global Infrastructure?
A. Amazon Alexa
B. AWS Regions
C. Amazon Lightsail
Correct Answer: B
Reference:
https://aws.amazon.com/about-aws/global-infrastructure/

B (100%)
  aboeyunus Highly Voted  1 year, 1 month ago

AWS Global Infrastructure:
- AWS Regions <------ Answer B
- AWS Availability Zones
- AWS Data Centers
- AWS Edge Locations /
Points of Presenc
upvoted 13 times

Answer is B
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times

B is correct
upvoted 1 times
  YaoiLova 1 year, 1 month ago

B is correct
upvoted 1 times
  dskim 1 year, 1 month ago

B.....
upvoted 2 times
What is the purpose of having an internet gateway within a VPC?
A. To create a VPN connection to the VPC
B. To allow communication between the VPC and the internet
C. To impose bandwidth constraints on internet traffic
D. To load balance traffic from the internet across Amazon EC2 instances
Correct Answer: B

B (100%)

Answer is B
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
  Tofi_Write 7 months, 3 weeks ago

Selected Answer: B
B, VPC by default is private. by introducing Internet gateway the VPC will be able to communicate with the internet nd vice versa
upvoted 3 times
  lolouis 1 year, 1 month ago

B, An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and
the internet.
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
upvoted 2 times
  marcelitahoyos8 1 year, 1 month ago

B it´s the correct answer for me
upvoted 1 times
  erezs135 1 year, 2 months ago

B is correct
upvoted 1 times
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?
A. Amazon GuardDuty
B. AWS Security Hub
C. AWS Artifact
D. AWS Shield
Correct Answer: C

C (100%)
  marcelitahoyos8 Highly Voted  1 year, 2 months ago

C-Artifact is correct
upvoted 8 times
  Aliciuzza Most Recent  4 days, 18 hours ago

c is correct
upvoted 1 times

Answer is C
upvoted 1 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times

C is correct
upvoted 1 times
  RaulDuke 1 year, 1 month ago

I agree it's C.
upvoted 2 times
A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts
that it wants to interconnect.
Which AWS service or feature should the company use to help simplify management and reduce operational costs?
A. VPC endpoint
B. AWS Direct Connect
C. AWS Transit Gateway
D. VPC peering
Correct Answer: D
Reference:
https://d1.awsstatic.com/whitepapers/building-a-scalable-and-secure-multi-vpc-aws-network-infrastructure.pdf
(9)

C (71%) D (29%)
  bratpyt Highly Voted  1 year, 2 months ago

The answer is C - TransitGateway. The more complicated topology is the more likely TransitGateway will be the answer.
upvoted 20 times
  bratpyt 1 year, 2 months ago

Moreover, VPC peering is not transitive, so you would need to set it up (1000*999)/2 times to interconnect every.
upvoted 8 times

can VPC peering work across different account? can this be the keyword for going Transit, as the VPC peering will not work in the first place.?
upvoted 1 times
  Brant Highly Voted  1 year, 2 months ago

C is correct.
https://aws.amazon.com/transit-gateway/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc
AWS Transit Gateway connects VPCs and on-premises networks through a central hub. This simplifies your network and puts an end to complex
peering relationships. It acts as a cloud router – each new connection is only made once.
upvoted 8 times
  SUPERHEROGEEK Most Recent  4 days, 4 hours ago

I believe that the answer is C.
Connecting two VPCs = Peering
Centrally managing multiple VPCs = Transit Gateway
upvoted 1 times

Selected Answer: C
Transit Gateway by the book
upvoted 1 times

Selected Answer: C
C is correct, as it's efficient.
upvoted 1 times
  basit_khan_054 1 month ago

Vote for C
upvoted 1 times
  satishstechie 1 month, 1 week ago

Selected Answer: D
Transit Gateway is more useful while connecting VPCs from other Regions and charges are applicable.
The keyword here is Single Region & cost optimal solution. Hence, the answer is D
upvoted 1 times
first you can have transit gateway in the same region

than full mesh with that amount of vpc is not manageable
for the last, you have a limitation of max. 125 peering connections per vpc, the question says they have thousandS.
Agree that peering is less expensive but it doest not achieve what they need.
upvoted 1 times
  limaz 1 month, 1 week ago

VPC Peering: "At scale, when you have 10’s-100’s of VPCs, interconnecting them with peering results in a mesh of
100’s-1000’s of peering connections, which are difficult to manage and scale. There is a maximum limit
of 125 peering connections per VPC."
upvoted 1 times

Transit gateway is for peer VPCs across different regions. Here the company is working in one region only.
There is per hour cost for TransitGateway also. Max 3 Transit Gateway in a Region.
Hence, VPC peering is the correct answer.
upvoted 2 times
  Foxxie 1 month, 3 weeks ago

Selected Answer: C
using VPC peering for thousand of VPCs would be a nightmare
upvoted 1 times
  HansiKlose 1 month, 3 weeks ago

Selected Answer: C
With thousands of VPC only C should be right.
upvoted 1 times
  emekadavid 1 month, 3 weeks ago

Selected Answer: C
VPC Peering is not transitive. That is why it's wrong. Transit Gateway acts like a hub and spoke device that can connect instantly to all the VPCs with
the Transit Gateway as the central connector.
upvoted 1 times
  MANNAN9358 1 month, 4 weeks ago

D. VPC peering is the answer
AWS Transit Gateway connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub.
upvoted 2 times

Selected Answer: C
Thousands of VPCs use Transit gateway
Two VPCs use VPC Peering. You get, peer to peer?
upvoted 1 times

Answer is C
upvoted 1 times

Answer is C
upvoted 1 times
  GoldenBoy 2 months, 2 weeks ago

C is correct
upvoted 1 times
A company is planning an infrastructure deployment to the AWS Cloud. Before the deployment, the company wants a cost estimate for running the
infrastructure.
Which AWS service or feature can provide this information?
A. Cost Explorer
B. AWS Trusted Advisor
C. AWS Cost and Usage Report
D. AWS Pricing Calculator
Correct Answer: D

D (100%)
  myan2492 Highly Voted  1 month, 1 week ago

D. pricing calculator -estimate cost
cost explore --graph--show cost, usage over time
cost and usage report -- tracks your AWS usage and provides estimated charges associated with your account.
upvoted 5 times

Selected Answer: D
D " *Before the deployment*
https://aws.amazon.com/it/premiumsupport/knowledge-center/estimating-aws-resource-costs/
https://aws.amazon.com/it/calculator/calculator-assumptions/
upvoted 1 times

Answer is D
upvoted 1 times

Vote for D
upvoted 1 times

Selected Answer: D
Answer is D.
upvoted 1 times
Which AWS service of tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?
A. AWS Identity and Access Management (IAM)
B. AWS Organizations
C. Cost Explorer
D. AWS Budgets
Correct Answer: B

B (86%) 14%
  Aliciuzza 4 days, 18 hours ago

Selected Answer: B
B key: * across aws accounts*
https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
upvoted 1 times

Selected Answer: C
Well, I read this :
AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time. Get started
quickly by creating custom reports that analyze cost and usage data. Analyze your data at a high level (for example, total costs and usage across all
accounts)
upvoted 1 times
  henryvex 6 days ago

The key word here is "centrally manage billing and allow controlled access" and that's AWS Organization
upvoted 1 times

Selected Answer: B
Question is tricky but the hint is " resources across AWS accounts".
upvoted 1 times

Answer is B
upvoted 1 times

Selected Answer: B
B
Key words: "across AWS accounts"
upvoted 3 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources?
A. Objects; access control lists (ACLs)
B. Subnets; internet gateways
C. Access policies; buckets
D. Groups; roles
Correct Answer: B

B (100%)
  stevenyk 6 days, 22 hours ago

[Components of Amazon VPC]
https://varunmanik1.medium.com/how-to-create-aws-vpc-in-10-steps-less-than-5-min-a49ac12064aa
- A Virtual Private Cloud: A logically isolated virtual network in the AWS cloud. You define a VPC’s IP address space from the ranges you select.
- Subnet: A segment of a VPC’s IP address range where you can place groups of isolated resources.
- Internet Gateway: The Amazon VPC side of a connection to the public Internet.
- NAT Gateway: A highly available, managed Network Address Translation (NAT) service for your resources in a private subnet to access the
Internet.
- Route Table: A route table contains a set of rules, called routes, that are used to determine where network traffic from your subnet or gateway is
directed.
- DNS Hostname: The Amazon DNS server resolves a public DNS hostname to the public IPv4 address of the instance outside the network of the
instance.
- CIDR: Classless Inter-Domain Routing
upvoted 1 times
  myan2492 1 month, 1 week ago

B. subnet, internet gateway
upvoted 2 times

Answer is B
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
A company needs to identify the last time that a specific user accessed the AWS Management Console.
Which AWS service will provide this information?
A. Amazon Cognito
B. AWS CloudTrail
C. Amazon Inspector
D. Amazon GuardDuty
Correct Answer: B

B (100%)

AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs,
continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and
remediation actions.
upvoted 2 times

Answer is B
upvoted 1 times

Selected Answer: B
"AWS CloudTrail monitors and records account activity across your AWS infrastructure"
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI).
Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)
A. Use Amazon EC2 Instance Connect.
B. Use a Remote Desktop Protocol (RDP) connection.
C. Use AWS Batch
D. Use AWS Systems Manager Session Manager.
E. Use Amazon Connect
Correct Answer: AC

AD (100%)

A & D. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstances.html
upvoted 8 times
  Rivii Most Recent  2 weeks, 2 days ago

A is 100% correct there is nothing to talk there.
D would be the choice for me because:
AWS Systems Manager Session Manager is a new interactive shell and CLI that helps to provide secure, access-controlled, and audited Windows
and Linux EC2 instance management. Session Manager removes the need to open inbound ports, manage SSH keys, or use bastion hosts.
but C... it can be utilized by admin it is not answering the question on .,,,, wait... which action can a system admin take to connect to the EC2
instance.... No still best choices are AD.
AWS Batch manages compute environments and job queues, allowing you to easily run thousands of jobs of any scale using Amazon ECS, Amazon
EKS, and AWS Fargate with an option between Spot or on-demand resources. You simply define and submit your batch jobs to a queue.
upvoted 1 times
  lazyyoung 1 month ago

Selected Answer: AD
Keyword is "system administrator" thus the definition of AWS System Session Manager: "Allows you to start a secure shell on your EC2 and on-
premises servers"
upvoted 2 times

A,D
With Session Manager, you can manage your Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, and on-premises servers and
virtual machines (VMs
upvoted 2 times

Answer A & D
upvoted 1 times

Why we can't use RDP?
upvoted 2 times
  Foxxie 1 month, 3 weeks ago

In Linux EC2, you need to configure RDP service first before you can use it
upvoted 3 times
  chop_z_azur 2 months, 2 weeks ago

Because it's a Linux ?
upvoted 4 times
  subramani2018 1 month, 3 weeks ago

Yes.. RDP for windows OS only..For linux OS SSH or console.
upvoted 3 times

Vote for A & C
upvoted 1 times

Sorry , A & D
upvoted 1 times

I have no doubts with A. But B is supported over HTTPS by: https://aws.amazon.com/quickstart/architecture/rd-gateway/
upvoted 1 times
  Craig92866 1 month, 2 weeks ago

B doesn't support Linux.
upvoted 1 times

Selected Answer: AD
Answer is A && D.
upvoted 1 times

Selected Answer: AD
Answer is AD
System manager session manager can open ssh session even without opened port 22 access to an EC2 which is more secure
upvoted 2 times

Selected Answer: AD
It's A & D, Batch is for running compute without needing to set up resources manually.
upvoted 3 times
  giovanit 3 months ago

Selected Answer: AD
A & D are correct
upvoted 2 times

Selected Answer: AD
A & D are correct choices
upvoted 1 times
A company wants to perform sentiment analysis on customer service email messages that it receives. The company wants to identify whether the
customer service engagement was positive or negative.
Which AWS service should the company use to perform this analysis?
A. Amazon Textract
B. Amazon Translate
C. Amazon Comprehend
Correct Answer: C

C (100%)
  CarrieJ Highly Voted  3 months ago

Amazon Comprehend uses natural language processing (NLP) to extract insights about the content of documents.
upvoted 5 times
  myan2492 Most Recent  1 month, 1 week ago

Amazon Comprehend is a natural-language processing (NLP) service that uses machine learning to uncover valuable insights and connections in
text.
Amazon Translate is a neural machine translation service that delivers fast, high-quality, affordable, and customizable language translation.
upvoted 3 times

Amazon Textract is a machine learning (ML) service that automatically extracts text, handwriting, and data from scanned documents.
Machine Learning Image and Video Analysis - AWShttps://aws.amazon.com › rekognition

Amazon Rekognition offers pre-trained and customizable computer vision (CV) capabilities to extract information and insights from your images
and videos.
upvoted 2 times

C is correct
upvoted 1 times

Answer is C
upvoted 1 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times
  fross 3 months ago

Correct, Comprehend is used for NLP
upvoted 2 times
What is the total amount of storage offered by Amazon S3?
A. 100MB
B. 5 GB
C. 5 TB
D. Unlimited
Correct Answer: D

D (90%) 10%
  Makku69 3 weeks, 4 days ago

Selected Answer: D
Answer is D.
Some confused with 5 TB. thats the limit for one S3 object.
upvoted 3 times

Selected Answer: D
Key is total
upvoted 1 times
  Craig92866 1 month, 2 weeks ago

Selected Answer: D
S3 storage capacity: Unlimited (figuratively)
S3 object size: Minimum of 0 bytes to a maximum of 5 TB
https://aws.amazon.com/s3/faqs/#:~:text=Q%3A%20How%20much%20data%20can,single%20PUT%20is%205%20GB.
upvoted 2 times

Selected Answer: D
the amount of data which can be stored in S3 is unlimited
upvoted 1 times
  Biren4990 2 months, 1 week ago

Answer is D.
The total volume of data and number of objects you can store are unlimited. Individual Amazon S3 objects can range in size from a minimum of 0
bytes to a maximum of 5 TB.
https://aws.amazon.com/s3/faqs/#:~:text=The%20total%20volume%20of%20data,a%20maximum%20of%205%20TB.
upvoted 2 times

Answer is D
upvoted 1 times

Vote for D
upvoted 1 times
  gbiic 2 months, 3 weeks ago

https://aws.amazon.com › s3 › faqs
bytes to a maximum of 5 TB.
upvoted 2 times
  Steve122 2 months, 3 weeks ago

Selected Answer: D
D for sure. 5TB applies to individual object.
upvoted 2 times

answer is d: question is asking for total amount and not idividual uploads
upvoted 1 times
  ShaifulSam 2 months, 3 weeks ago

ANSWER IS 5TB THUS IT IS C
upvoted 1 times
  tanvir4hmed 2 months, 4 weeks ago

Answer is D
bytes to a maximum of 5 TB. The largest object that can be uploaded in a single PUT is 5 GB.
upvoted 1 times

Selected Answer: B
Answer is B.
Individual Amazon S3 objects can range in size from a minimum of 0 bytes to a maximum of 5 TB. The largest object that can be uploaded in a
single PUT is 5 GB.
upvoted 1 times
A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days.
Which AWS service should the company use to accomplish this migration?
A. Amazon S3 Glacier
B. AWS Database Migration Service (AWS DMS)
C. AWS Snowball
Correct Answer: C

C (100%)

C. snowball
AWS Snowball is a petabyte-scale data transport service that uses secure devices to transfer large amounts of data into and out of the AWS Cloud.
Amazon S3 Glacier (S3 Glacier) is a secure and durable service for low-cost data archiving and long-term backup.
With S3 Glacier, you can store your data cost effectively for months, years, or even decades. S3 Glacier helps you offload the administrative burdens
of operating and scaling storage to AWS, so you don't have to worry about capacity planning, hardware provisioning, data replication, hardware
failure detection and recovery, or time-consuming hardware migration
AWS Database Migration Service (AWS DMS) is a cloud service that makes it easy to migrate relational databases, data warehouses, NoSQL
databases, and other types of data stores. You can use AWS DMS to migrate your data into the AWS Cloud or between combinations of cloud and
on-premises setups.
upvoted 1 times

https://aws.amazon.com/snow/
upvoted 1 times

Answer is c
upvoted 1 times

The answer is C
upvoted 1 times

Vote for C
upvoted 1 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times

Snowball Edge can do local processing and edge-computing workloads in addition to transferring data between your local environment and the
AWS Cloud.
upvoted 2 times
What type of database is Amazon DynamoDB?
A. In-memory
B. Relational
C. Key-value
D. Graph
Correct Answer: C

C (100%)

C. "Amazon DynamoDB is a fully managed, serverless, *key-value* NoSQL database designed to run high-performance applications at any scale."
upvoted 1 times

Answer is c
upvoted 1 times

Selected Answer: C
"Amazon DynamoDB is a fully managed, serverless, *key-value* NoSQL database designed to run high-performance applications at any scale."
upvoted 3 times

Vote for C
upvoted 1 times

Selected Answer: C
Answer is C.
upvoted 1 times
A large organization has a single AWS account.

What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.)
A. It allows for administrative isolation between different workloads.
B. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.
C. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.
D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.
E. Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple
accounts.
Correct Answer: AC

AD (97%)
  muxopancy Highly Voted  11 months, 3 weeks ago

A and D looks correct
upvoted 9 times
  ruchik Highly Voted  11 months, 3 weeks ago

Selected Answer: AD
A and D seems correct
upvoted 5 times
  SmartLearner Most Recent  1 month ago

Selected Answer: AD
A, D is correct.
upvoted 1 times

A+D
Group workloads based on business purpose and ownership
Constrain access to sensitive data
upvoted 2 times

Answer is AD
upvoted 1 times

Selected Answer: AD
A & D.
upvoted 1 times

Selected Answer: AD
https://docs.aws.amazon.com/whitepapers/latest/organizing-your-aws-environment/benefits-of-using-multiple-aws-accounts.html
upvoted 3 times

Vote for A & D
upvoted 1 times
  Edmund_H 2 months, 3 weeks ago

Selected Answer: AD
A & D should be the correct answer.
upvoted 1 times
  bravemanvvn 2 months, 4 weeks ago

Selected Answer: AD
A & D seems correct
upvoted 1 times

Selected Answer: AD
This is the correct choice I believe
upvoted 1 times

Selected Answer: AD
Answer is A && D.
upvoted 1 times

Selected Answer: AD
A & D.
upvoted 2 times

Selected Answer: AD
it's AD
upvoted 1 times

Selected Answer: AD
A & D have my vote
upvoted 1 times
  Luwatz 3 months, 1 week ago

Selected Answer: AD
From what I encountered in the training of recent, A & D are the most correct options
upvoted 2 times
  yzgulec 4 months, 2 weeks ago

Selected Answer: AD
A & D correct
upvoted 1 times
A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The
website uses an
Application Load Balancer to distribute traffic to multiple Amazon EC2 instances.
Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?
A. Security groups
B. AWS WAF
C. Network ACLs
D. AWS Shield
Correct Answer: B

B (100%)
  b3s1 1 month, 1 week ago

AWS WAF - B
upvoted 1 times

Sorry B.. aws WAF
upvoted 1 times

Answer is A
upvoted 1 times

Selected Answer: B
"You can also use AWS WAF to block or allow requests based on conditions that you specify, such as the IP addresses that requests originate from
or *****values in the requests*****."
Values in the requests can match sql injections
upvoted 3 times

Vote for B
https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-sqli-match.html
upvoted 2 times

Selected Answer: B
Answer is B.
upvoted 2 times
Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?
A. AWS CloudTrail
B. AWS Personal Health Dashboard
Correct Answer: D

D (55%) C (43%)
  Jeyarajmohan Highly Voted  2 months, 1 week ago

Selected Answer: D
https://aws.amazon.com/about-aws/whats-new/2019/06/introducing-service-quotas-view-and-manage-quotas-for-aws-services-from-one-
location/
upvoted 6 times

It'd be Trusted advisor (C). Service quota is the key. Cloudwatch just does monitoring.
upvoted 2 times
  Blimpy 1 week, 4 days ago

Yes - https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
There is no question about being alerted (using Cloudwatch). Trusted advisor does proactive monitoring and thats how you plan
upvoted 1 times
  crymo 1 month, 2 weeks ago

the updated answer in 2022 says AWS Trusted Advisor. https://aws.amazon.com/solutions/implementations/quota-monitor/
upvoted 2 times

so which is the correct answer for 2022?
upvoted 1 times

Selected Answer: D
AWS Trusted Advisor brings recommendations on 5 scopes (based on AWS recommendations and best practices):
Security
Cost optimization
Performance
Reliability
> Limits on services (quotas)
upvoted 2 times

Selected Answer: C
In 2022 , C is answer
upvoted 1 times

This solution helps you proactively track resource usage and send notifications when you approach quotas. It leverages the AWS Trusted Advisor
Service Limits checks and Service Quotas to monitor AWS resource usage and raise alerts. - 2022 update
upvoted 1 times

Selected Answer: D
C is correct. Cloud watch does only monitoring
upvoted 2 times
  ozanx 3 weeks, 4 days ago

Monitor and manage quotas
Monitor and manage your quotas: Evaluate your potential usage on AWS, increase your regional service quotas appropriately, and allow planned
growth in usage.
Capture current resource consumption (for example, buckets, instances, etc.): Use service API operations, such as the Amazon EC2
DescribeInstances API, to collect current resource consumption.
Capture your current quotas: Use AWS Service Quotas, AWS Trusted Advisor, and AWS documentation
Use AWS Service Quotas, an AWS service that helps you manage your quotas for over 100 AWS services from one location
Use Trusted Advisor service limits to determine your current service limits
Use service API operations to determine current service quotas where supported
Keep a record of quota increases that have been requested, and their status: After a quota increase has been approved, ensure that you update
your records to reflect the change to the quota.
upvoted 1 times
Selected Answer: C
C seems correct.
https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks.
These checks identify ways to optimize your AWS infrastructure, improve security and performance, reduce costs, and monitor service quotas. You
can then follow the recommendations to optimize your services and resources.
upvoted 2 times

Selected Answer: C
AWS Basic Support and AWS Developer Support customers can access core security checks and checks for service quotas. AWS Business Support
and AWS Enterprise Support customers can access all checks, including cost optimization, security, fault tolerance, performance, and service quotas.
For a complete list of checks and descriptions, see the Trusted Advisor Best Practices.
upvoted 1 times
  IuriiUA 1 month ago

Correct answer: D
You can proactively manage your quotas by configuring Amazon CloudWatch alarms that monitor usage and alert you to approaching quotas.
https://aws.amazon.com/about-aws/whats-new/2019/06/introducing-service-quotas-view-and-manage-quotas-for-aws-services-from-one-
location/#:~:text=You%20can%20proactively%20manage%20your,up%20quotas%20in%20new%20accounts.
upvoted 1 times
  CalT925 1 month ago

Selected Answer: D
Cloudwatch helps monitor resources usage
upvoted 1 times

D. cloudWatch
Amazon CloudWatch collects and visualizes real-time logs, metrics, and event data in automated dashboards to streamline your infrastructure and
application maintenance.
The AWS Health Dashboard is the single place to learn about the availability and operations of AWS services. You can view the overall status of
AWS services, and you can sign in to view personalized communications about your particular AWS account or organization. Your account view
provides deeper visibility into resource issues, upcoming changes, and important notifications.
upvoted 2 times
  srk1520 1 month, 2 weeks ago

Selected Answer: D
CloudWatch with inbuilt metric stats
upvoted 1 times
  crymo 1 month, 2 weeks ago

The updated answer in 2022 says AWS Trusted Advisor. https://aws.amazon.com/solutions/implementations/quota-monitor/
upvoted 2 times
  gcerts 1 month, 3 weeks ago

Selected Answer: B
cloudwatch
upvoted 1 times

You ment D
upvoted 1 times
  Manuel0701 2 months ago

Selected Answer: D
Por el servicio de Quotas, pensaría que es la CloudWatch
upvoted 1 times

Selected Answer: D
Proactive, set alarms. CloudWatch
upvoted 2 times
  Kanyeeeah 2 months ago
Selected Answer: C
D is a distractor.
From the question, there is a word "plan" which Trusted Advisor will fit for this scenario.
AWS Trusted Advisor inspects all of the resources in your AWS account and makes recommendations to improve them as per Amazon Web
Services’ best practices.
When you first begin using AWS, it is relatively simple to keep track of what is running. However, as your account footprint expands, you may
encounter sub-optimal cost management and performance scenarios that go unnoticed.
upvoted 1 times

I am having double thoughts that this is might "D". On the question, it states "monitor and plan service quotas for AWS resources" and not
asking for certain recommendations for the resources.
CloudWatch has a feature of Auto Scaling that helps you automate capacity and resource planning. You can set a threshold to alarm on a key
metric and trigger an automated Auto Scaling action. For example, you could set up an Auto Scaling workflow to add or remove EC2 instances
based on CPU utilization metrics and optimize resource costs.
upvoted 2 times
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
A. Elimination of expenses for running and maintaining data centers
B. Price discounts that are identical to discounts from hardware providers
C. Distribution of all operational controls to AWS
D. Elimination of operational expenses
Correct Answer: A

A (100%)
  nder 1 week, 2 days ago

Selected Answer: A
Moving to AWS in theory means you no longer need any infrastructure on premises other than an internet connection, in practice this is rarely the
case
upvoted 1 times
  KoreaSpurs 1 month ago

is it really A? the question is about USER position
upvoted 1 times

Answer is A
upvoted 1 times

Selected Answer: A
The answer is A
upvoted 1 times

Vote for A
upvoted 1 times

Selected Answer: A
Answer is A.
upvoted 1 times
Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?
A. Create annotated documentation.
B. Anticipate failure.
C. Ensure performance efficiency.
D. Optimize costs.
Correct Answer: B

B (100%)

B. anticipate failure
operational excellence:
anticipate failure
perform operations as code
make frequent, small, reversible changes
refine operations procedures frequently
anticipate failure
learn from all operational failure
upvoted 1 times

Design principles for operational excellence in the cloud include performing operations as code, annotating documentation, anticipating failure,
and frequently making small, reversible changes.
upvoted 1 times

Answer is B
upvoted 1 times

Selected Answer: B
B is correct
upvoted 1 times
  Cert_alert 2 months, 2 weeks ago

Selected Answer: B
BEST answer is Anticipate failures
https://docs.aws.amazon.com/wellarchitected/latest/operational-excellence-pillar/design-principles.html
upvoted 2 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times

Anticipate failure is correct.
https://wa.aws.amazon.com/wellarchitected/2020-07-02T19-33-23/wat.pillar.operationalExcellence.en.html
upvoted 2 times

Selected Answer: B
B, anticipate failure:
https://docs.aws.amazon.com/wellarchitected/latest/operational-excellence-pillar/design-principles.html
upvoted 2 times
Selected Answer: B
Answer is B, creating annotated documents. Creating annotated documents is a pillar of the operational excellence framework.
upvoted 1 times
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Queue Service (Amazon SQS)
C. AWS CodeBuild
D. Amazon S3
E. Amazon DynamoDB
Correct Answer: BD

DE (100%)

D & E https://docs.aws.amazon.com/vpc/latest/privatelink/gateway-endpoints.html
upvoted 8 times
  myan2492 Most Recent  1 month ago

D+ E: S3 and DynamoDB
VPC endpoints enable you to privately connect your VPC to services hosted on AWS without requiring an Internet gateway, a NAT device, VPN, or
firewall proxies. Endpoints are horizontally scalable and highly available virtual devices that allow communication between instances in your VPC
and AWS services. Amazon VPC offers two different types of endpoints: gateway type endpoints and interface type endpoints.
Gateway type endpoints are available only for AWS services including S3 and DynamoDB. These endpoints will add an entry to your route table you
selected and route the traffic to the supported services through Amazon’s private network.
Interface type endpoints provide private connectivity to services powered by PrivateLink, being AWS services, your own services or SaaS solutions,
and supports connectivity over Direct Connect. More AWS and SaaS solutions will be supported by these endpoints in the future. Please refer to
VPC Pricing for the price of interface type endpoints.
upvoted 4 times
  situchinmaya 1 month, 3 weeks ago

Answer is D E.
Gateway type endpoints are available only for AWS services including S3 and DynamoDB. These endpoints will add an entry to your route table you
selected and route the traffic to the supported services through Amazon’s private network.
Reference -
https://aws.amazon.com/vpc/faqs/#:~:text=Gateway%20type%20endpoints%20are%20available,services%20through%20Amazon's%20private%20
network.
upvoted 4 times

Traffic to Amazon S3 or DynamoDB from an instance in a public subnet is routed to the internet gateway for the VPC and then to the service.
upvoted 1 times

Answer is DE
upvoted 1 times

Selected Answer: DE
Clarification from Moderator please.
upvoted 1 times
  Divit_S_K 2 months, 2 weeks ago

Option D & E ie., S3 and DynamoDB
upvoted 1 times
  OAmine 2 months, 2 weeks ago

Selected Answer: DE
SNS and SQS use "interface" VPC endpoints. Here the question is about "gateway' VPC endpoints, so it's S3 and DynamoDB.
upvoted 2 times
Vote for D & E

upvoted 1 times

Selected Answer: DE
Answer D&E.
upvoted 1 times
  avinash4344 3 months ago

Selected Answer: DE
VPC Endpoints
• Endpoints allow you to connect to AWS Services using a private network instead of the public www network
• This gives you enhanced security and lower latency to access AWS services
• VPC Endpoint Gateway: S3 & DynamoDB
• VPC Endpoint Interface: the rest
upvoted 4 times
  Learnerzero 3 months ago

Selected Answer: DE
As jr_2022 mentioned, the answer is D&E.
upvoted 1 times
  khansahab 3 months, 1 week ago

D and E is absolutely correct as Gateway type endpoints are available only for AWS services including S3 and DynamoDB.
upvoted 2 times
  85SUBHO 3 months, 1 week ago

Selected Answer: DE
D and E
upvoted 1 times
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
A. Amazon FSx for Windows File Server
B. Amazon WorkSpaces virtual Windows desktop
C. AWS Directory Service for Microsoft Active Directory
D. Amazon RDS for Microsoft SQL Server
Correct Answer: B

B (100%)
  sravan09 2 weeks, 6 days ago

B Is Correct
upvoted 1 times

B. Amazon worksapce
We recommend that you regularly patch, update, and secure the operating system and applications on your WorkSpaces. You can configure your
WorkSpaces to be updated by WorkSpaces during a regular maintenance window or you can update them yourself.
upvoted 2 times
  BobSchmitty 2 months ago

Selected Answer: B
Pretty sure its B
upvoted 2 times

Answer is B
upvoted 1 times
  Divit_S_K 2 months, 2 weeks ago

upvoted 1 times

Vote for B
https://docs.aws.amazon.com/workspaces/latest/adminguide/update-management.html
upvoted 2 times
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?
A. Both AWS and the customer
B. The customer only
C. The EC2 hardware manufacturer
D. AWS only
Correct Answer: B

D (75%) B (25%)
  Steve122 Highly Voted  2 months, 3 weeks ago

Selected Answer: D
GUEST > customer
------------------------------
HOST > AWS
upvoted 12 times
  Larsh11 Most Recent  16 hours, 54 minutes ago

https://docs.aws.amazon.com/whitepapers/latest/develop-deploy-dotnet-apps-on-aws/amazon-elastic-compute-cloud-ec2-instances.html
Amazon EC2 provides a flexible compute service with a wide variety of virtual machines and bare metal instance types.
AWS is responsible for operating all levels up to hypervisor and host OS, giving you full access and control over the guest operating system. AWS
also provides tools, features, and services that enable you to create a fully automated and self-managing infrastructure, such as AWS Auto Scaling
and AWS Systems Manager.
upvoted 1 times

Selected Answer: B
for sure B
upvoted 1 times

Selected Answer: B
bbbbbbbb
upvoted 1 times
  stevenyk 6 days ago

The customer assumes responsibility and management of the guest operating system (including updates and security patches), other associated
application software as well as the configuration of the AWS provided security group firewall. Customers should carefully consider the services they
choose as their responsibilities vary depending on the services used, the integration of those services into their IT environment, and applicable laws
and regulations.
Who has the responsibility to patch the host operating system of an Amazon EC2 instance? B. The customer only
upvoted 1 times
  Nootonian 6 days, 5 hours ago

Tricky....host/guest is the key
upvoted 1 times
  Testeurtest 1 week ago

Selected Answer: B
Shared responsibility model
AWS is responsible OF the Cloud and Customer is responsible for what he does IN the Cloud
AWS responsibility: Infrastructure Management / Physical datacenters security
Customer responsibility: >>Patching provisioned resources<< / securing network & data / enabling logging
upvoted 1 times

Selected Answer: D
The answer is D. "Aws only" . Please check : https://docs.aws.amazon.com/whitepapers/latest/develop-deploy-dotnet-apps-on-aws/amazon-
elastic-compute-cloud-ec2-instances.html
upvoted 1 times
  Angevin 1 week, 4 days ago

"You are responsible for patching, updating, securing, and maintaining the Windows or Linux OS, application server, web server, and any
application code, either using AWS-provided tools or features, or any other custom methods"
upvoted 1 times
  chop_z_azur 3 weeks, 5 days ago

AWS by "host" mean OS of the virtualization layer. It would be ESXi in VMware world.
upvoted 2 times

Selected Answer: B
Does EC2 have a guest and host operating system?
As far as I know, it only have 2 type. Hypervisor, and Operating System
Hypervisor >> AWS
Operating System >> User..
so B?
upvoted 2 times

D. Only AWS
guest--> customer/ client
host --> AWS
upvoted 2 times
  Swapit0 1 month ago

Sorry I just right answer should be D and not B.
upvoted 1 times

right answer is B and Not D
upvoted 2 times

Selected Answer: D
This shared model can help relieve the customer’s operational burden as AWS operates, manages and controls the components from the host
operating system and virtualization layer down to the physical security of the facilities in which the service operates
upvoted 3 times
  kamdy 1 month, 1 week ago

Hi Everyone, I have this exam scheduled for next week, and I don't have money to pay for the contributor access. Please anyone that has have paid
for this access should please and please help me send the downloaded PDF to this email address: kamdy72@gmail.com
Thanks in advance and God bless.
upvoted 1 times
  Eky_1 1 month, 1 week ago

Hello, did you get any help?
upvoted 1 times
  srk1520 1 month, 1 week ago

Selected Answer: D
"Security and Compliance is a shared responsibility between AWS and the customer. This shared model can help relieve the customer’s operational
burden as AWS operates, manages and controls the components from the host operating system and virtualization layer down to the physical
security of the facilities in which the service operates. The customer assumes responsibility and management of the guest operating system
(including updates and security patches), other associated application software as well as the configuration of the AWS provided security group
firewall."
upvoted 2 times
  Milwen 1 month, 2 weeks ago

Selected Answer: D
Customer is incorrect because their responsibility is to patch the guest operating system of their EC2 instance and not the host operating system.
Both AWS and the customer is incorrect because patching the host operating system of the Amazon EC2 instance is the responsibility of AWS. Take
note that if you are using a fully-managed service like Amazon DynamoDB or Redshift, AWS will also be responsible for the underlying guest
operating system.
Neither AWS nor the customer is incorrect as this task falls under the responsibilities of AWS.
upvoted 1 times
A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the
operating system of the server where the DB instance runs.
What is the company's responsibility in this situation, according to the AWS shared responsibility model?
A. Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system.
B. Open a support case and request that AWS patch the DB instance operating system.
C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for
the DB instance.
D. Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.
Correct Answer: B

D (83%) B (17%)

Should it be D?
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html
upvoted 13 times

The compagny (admins) access and setup a maintenance window as said in your document so:
C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for
the DB instance.
upvoted 1 times

as per reference doc. D would the correct answer
upvoted 1 times

It looks like you're right. Key word is 'regular' I think.
upvoted 1 times
  kuririkura Most Recent  1 month ago

OK.. i'm confused here, wasn't RDS is a managed services where AWS should automatically patch the underlying OS? a patch is applied to all
customer right? no customer should be able to override this?
upvoted 1 times

you are right, it is managed by AWS, but you can tell them how and when to do it. Specially tell them when to do it so it wont be done in a
critical time when your DB needs to be fully operational.
upvoted 1 times

D.
Some maintenance items require that Amazon RDS take your DB instance offline for a short time. Maintenance items that require a resource to be
offline include required operating system or database patching. Required patching is automatically scheduled only for patches that are related to
security and instance reliability. Such patching occurs infrequently (typically once every few months) and seldom requires more than a fraction of
your maintenance window.
key word:
Amazon RDS DB instance ,regular patching of the operating system
upvoted 2 times
  Craig92866 1 month, 1 week ago

Selected Answer: D
Chose D. Here's why....
The Amazon RDS maintenance window

Every DB instance has a weekly maintenance window during which any system changes are applied. Think of the maintenance window as an
opportunity to control when modifications and software patching occur.
upvoted 1 times
Selected Answer: D
upvoted 2 times
  srk1520 1 month, 1 week ago

Selected Answer: D
RDS is a managed service, the underlying OS patching shouldn't be customer's resp
upvoted 1 times

Since RDS is a managed service, the underlying infrastructure is the responsibility of AWS.
upvoted 1 times

Selected Answer: D
upvoted 2 times

Selected Answer: D
upvoted 1 times

Vote for D
upvoted 1 times

Selected Answer: D
Answer should be D
upvoted 1 times
  pampx15 2 months, 3 weeks ago

Selected Answer: D
As per reference doc. D would the correct answer
upvoted 2 times

Selected Answer: B
Answer is B.
upvoted 2 times
Why is an AWS Well-Architected review a critical part of the cloud design process?
A. A Well-Architected review is mandatory before a workload can run on AWS.
B. A Well-Architected review helps identify design gaps and helps evaluate design decisions and related documents.
C. A Well-Architected review is an audit mechanism that is a part of requirements for service level agreements.
D. A Well-Architected review eliminates the need for ongoing auditing and compliance tests.
Correct Answer: B

B (100%)

Selected Answer: B
vote for B
upvoted 1 times

Selected Answer: B
B is the answer
upvoted 1 times

D.
NEC has conducted AWS Well-Architected Framework Reviews on various projects to improve the quality of integration. In the development of
Water Counter Cloud Service, we conducted a review at an early stage of the design process. This enabled us to identify design issues early and
resolve them quickly, allowing us to deliver services to Sakai City Waterworks and Sewerage Bureau as quickly as possible. The AWS Well-
Architected Framework is also very useful for training engineers, and is indispensable for improving our technical capabilities as a system
integrator.”
upvoted 1 times

answer is B
upvoted 1 times

Answer is B
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy
applications that run on
Amazon EC2 instances.
Which pillar of the AWS Well-Architected Framework does this action cover?
A. Security
D. Reliability
Correct Answer: D
Reference:
https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/wellarchitected-reliability-pillar.pdf

D (100%)

D. Reliability
keyword: to recover unhealthy applications
upvoted 1 times

Reliability: The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions
upvoted 1 times

Selected Answer: D
Why isn't the answer Performance Efficiency?
Even though the question mentions scaling, it didn't specifically state vertical or horizontal. Vertical is an example of Performance Efficiency and
horizontal is an example of Reliability. Question said scaling is used to recover unhealthy applications, so horizontal scaling is implied. Horizontal
scaling and Application Load Balancer fall under Reliability.
upvoted 2 times

Selected Answer: D
upvoted 1 times

Answer is D
upvoted 1 times

Vote for D
upvoted 1 times

Selected Answer: D
Answer is D.
upvoted 1 times

AWS Well-Architected Framework: Reliability
upvoted 1 times

Selected Answer: D
Reliability is correct
upvoted 2 times
  ChymKuBoy 4 months, 3 weeks ago

Selected Answer: D
Reliability: The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions
upvoted 2 times
  lulzsec2019 5 months ago

Why not Operational Excellence? As this is not about high availability (reliability) and more on operation.
upvoted 2 times
  tavy 4 months ago

because of 'restore sick apps', check the top comment
upvoted 1 times
  korean_kang 11 months ago

Why not B ?
upvoted 2 times
  dekov1 10 months, 1 week ago

3- Reliability: The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions
upvoted 4 times
Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability
Correct Answer: D

D (100%)
  ydnah2 Highly Voted  1 year ago

D is right. High availability = minimal downtime = recovery quickly from failure. Agility is about how quickly something is deployed.
https://aws.amazon.com/marketplace/solutions/infrastructure-software/high-availability
upvoted 6 times

D. high availability = minimal downtime = recovery quickly from failure
agility= how quickly smt is deployed/ speed

upvoted 1 times
  blasquii Most Recent  2 weeks ago

Selected Answer: D
Answer is D.
upvoted 1 times

Answer is D
upvoted 1 times

Vote for D
upvoted 1 times

Selected Answer: D
Answer is D.
upvoted 1 times
  H0n3y 1 year ago

Should be A.
upvoted 1 times
  Prates_BR 3 months ago

For practitioner exam, when you see agility thing about speed.
upvoted 2 times
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?
A. Creating versions of Lambda functions
B. Maintaining server and operating systems
C. Scaling Lambda resources according to demand
D. Updating the Lambda runtime environment
Correct Answer: A

A (69%) D (26%) 6%
  yogat78735 Highly Voted  1 year, 2 months ago

I think it's A
upvoted 39 times
  Joggy12 1 year, 1 month ago

B and C cannot be Customer responsibility so A is the only option so I would say Answer is A
D is a Shared responsibility: "Typically, no action is required to pick up the latest patches for supported Lambda runtimes, but sometimes action
might be required to test patches before they are deployed (for example, known incompatible runtime patches). If any action is required by
customers, Lambda will contact them through the Personal Health Dashboard, through the AWS account's email, or through other means, with
the specific actions required to be taken.
Customers can use other programming languages in Lambda by implementing a custom runtime. For
custom runtimes, maintenance of the runtime becomes the customer's responsibility, including making sure that the custom runtime includes
the latest security patches"
upvoted 9 times
  eww_cybr 1 year ago

Lambda function scaling is done by AWS - https://docs.aws.amazon.com/lambda/latest/dg/invocation-scaling.html hence C is NOT correct
upvoted 4 times
  Areo Highly Voted  1 year, 1 month ago

C? Lambda is serverless compute service, means you dont need to provision or scale resources. I wish the guy who bet C can pass the exam.
upvoted 12 times
  Areo 1 year, 1 month ago

A, Lambda will create version of your function each time that you publish the function, and you can either create version of your functions via
Lambda console. So this is not only the responsibility of AWS or Customer.
D is correct per https://docs.aws.amazon.com/lambda/latest/dg/runtimes-modify.html
upvoted 3 times

No, it's not D. That document does mention 'update' but it's talking about updating the Lambda config, not the underlining Lambda
runtime.
upvoted 1 times
  4ss0 9 months, 3 weeks ago

"...which allow Lambda to delegate the runtime startup to your script..." so it's not D since is a shared responsability it depends if the user
wants to have it or leave it to Lmabda
upvoted 2 times

Run code without provisioning or managing infrastructure. Simply write and upload code as a .zip file or container image.
upvoted 1 times

A is answer
upvoted 1 times
  teegasper 6 days, 2 hours ago

Hello guy, pls I have this exams in 3 days can anyone pls,pls send me a downloaded pdf version to my email taiwookeowo1@gmail.com
upvoted 1 times

Selected Answer: C
Based on this, costumer is responsible for maintain code, managing resources, and secure iam... so C?
upvoted 1 times
Selected Answer: A
A is correct.
upvoted 1 times

A. true
B. false:
Lambda provides support for these runtimes by continuously scanning for and deploying compatible updates and security patches, and by
performing other runtime maintenance activity. This enables customers to focus on just the maintenance and security of any code included in their
Function and Layer.
upvoted 2 times

D. false
upvoted 1 times

Selected Answer: A
No, it's not D. That document does mention 'update' but it's talking about updating the Lambda config, not the underlining Lambda runtime.
upvoted 1 times

Selected Answer: A
upvoted 1 times

Answer is A
upvoted 1 times

Selected Answer: A
A is correct
upvoted 1 times

Selected Answer: D
You can run customer runtime in lambda. If you do, you need to manage that.
https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html
upvoted 2 times

Vote for A
upvoted 1 times

answer is D. B & C out of question. A: Why should be creating versions of lambda functions a responsability at all? But D: It is a support issue for
open source libraries subject to high variations in validity. A deprecated library is no longer supported by lambda, accordind to aws Runtime
deprecation policy. But if you continue to use it, it is your responsibility to to maintain them, apply security updates and so on.
upvoted 2 times
  fassil 3 months ago

Selected Answer: A
The Shared Responsibility Model For Lambda
https://docs.aws.amazon.com/whitepapers/latest/security-overview-aws-lambda/the-shared-responsibility-model.html
upvoted 3 times

Selected Answer: A
Answer is A.
upvoted 1 times

A. Creating versions and alias is correct
upvoted 1 times
What does the AWS Concierge Support team provide?
A. A technical expert dedicated to the user
B. A primary point of contact for AWS Billing and AWS Support
C. A partner to help provide scaling guidance for an event launch
D. A dedicated AWS staff member who reviews the user's application architecture
Correct Answer: A

B (100%)

Selected Answer: B
The Support Concierge Team are AWS billing and account experts that specialize in working with enterprise accounts.
upvoted 5 times

B.
Billing and account management
upvoted 1 times

Selected Answer: B
http://www.etltechblog.com/2020/05/27-aws-support-concierge.html
upvoted 1 times

Selected Answer: B
upvoted 1 times

Selected Answer: B
https://www.amazonaws.cn/en/support/features/
upvoted 1 times

Vote for B
upvoted 1 times

Selected Answer: B
it should be related to this text:
"Your Amazon Web Services Concierge is a senior customer service agent who is assigned to your account when you subscribe to an Enterprise or
qualified Reseller Support plan. This Concierge agent is your primary point of contact for billing or account inquiries; when you don’t know whom
to call, they will find the right people to help."
found on https://www.amazonaws.cn/en/support/features/
upvoted 2 times
  aynounimed 3 months ago

Selected Answer: B
correct answer is B
upvoted 1 times

Selected Answer: B
Answer is B.
upvoted 1 times
  avinash4344 3 months ago

Selected Answer: B
Concierge Support Team (for billing and account best practices)

upvoted 2 times
none of options are best option i figure
upvoted 1 times
  Learnerzero 3 months ago

Selected Answer: B
As explained by zoeyaj, B is the answer
upvoted 1 times
  JorgeGarrido 3 months ago

b is the right answer
upvoted 2 times

Selected Answer: B
upvoted 2 times
A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month.
Which AWS tool should the company use to meet these requirements?
A. Reserved Instance utilization and coverage reports
B. Savings Plans utilization reports
C. AWS Budgets reports
D. AWS Cost and Usage Reports
Correct Answer: D

D (100%)

Selected Answer: D
Price calculator - for cost estimation
Cost explorer - for current and past cost and usage in graphs
Cost and usage reports - for reports
upvoted 3 times

D. Cost and usage report
AWS Cost and Usage Reports tracks your AWS usage and provides estimated charges associated with your account. Each report contains line items
for each unique combination of AWS products, usage type, and operation that you use in your AWS account. You can customize the AWS Cost and
Usage Reports to aggregate the information either by the hour, day, or month.
upvoted 2 times

Answer is D
upvoted 2 times

Vote for D
upvoted 1 times

Selected Answer: D
Answer is D.
upvoted 1 times
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB
database.
Which AWS service can the company use to trace user requests as they move through the application's components?
A. AWS CloudTrail
B. Amazon CloudWatch
C. Amazon Inspector
D. AWS X-Ray
Correct Answer: D

D (78%) A (22%)
  jellybiscuit Highly Voted  1 month, 3 weeks ago

Selected Answer: D
X-ray - https://aws.amazon.com/xray/
CloudTrail - audit
Cloudwatch - monitor
Inspector - vulnerability management
X-Ray - tracing
upvoted 22 times
  Jay1234_ 1 month, 1 week ago

great breakdown
upvoted 3 times

Perfect overview. Thanks!
upvoted 2 times

Selected Answer: A
Amazon Cloudtrail
Track every APIs Calls (actions done by any administrator (IAM user) in the platform)
Track every activity: Who create this resource? who destroy this resource? when an IAM user has logged in?...
upvoted 1 times
  UD_ 1 month ago

D. Xray
upvoted 1 times

D. X-ray
keyword: through the application's components?
upvoted 2 times

Selected Answer: D
AWS X-Ray provides a complete view of requests as they travel through your application and filters visual data across payloads, functions, traces,
services, APIs, and more with no-code and low-code motions.
upvoted 2 times

Selected Answer: D
https://aws.amazon.com/xray/
AWS X-Ray provides a complete view of requests as they travel through your application and filters visual data across payloads, functions, traces,
services, APIs, and more with no-code and low-code motions
upvoted 2 times

Selected Answer: D
upvoted 1 times
D is the right answer, i have gone through Udemey dump too...
upvoted 1 times
  marck0996 2 months ago

Selected Answer: A
A it's good
upvoted 1 times
  Iragmt 2 months ago

Selected Answer: D
Cloudtrail = Log Management, recording AWS API calls ; X-ray = Performance Monitoring, shows a map of your application’s underlying
components
We're talking about "user requests through application's components" here. So D should be the right answer.
upvoted 2 times

Answer is D
upvoted 1 times

Selected Answer: A
upvoted 2 times

Selected Answer: D
https://aws.amazon.com/xray/
upvoted 3 times

Selected Answer: D
AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture. With X-
Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of
performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your
application’s underlying components.
You can use X-Ray to analyze both applications in development and in production, from simple three-tier applications to complex microservices
applications consisting of thousands of services.
AWS X-Ray works with Amazon EC2, Amazon EC2 Container Service (Amazon ECS), AWS Lambda, and AWS Elastic Beanstalk. You can use X-Ray
with applications written in Java, Node.js, C# .NET, Python and Go that are deployed on these services.
Hence, the correct answer is AWS X-Ray.

upvoted 3 times

Selected Answer: D
I think the key to answer this is that the question wording is 'as they move through the application's components'. This is provided completely only
by AWS X-Ray solution.
upvoted 1 times
  atharvashkl 2 months, 2 weeks ago

D >>
The correct choice
upvoted 1 times

Selected Answer: A
A is ccorrect
upvoted 1 times
A company needs to set up a petabyte-scale data warehouse in the AWS Cloud.

Which AWS service will meet this requirement?
A. Amazon DynamoDB
B. Amazon RDS
C. Amazon Redshift
D. Amazon ElastiCache
Correct Answer: C

C (100%)
  Aakuu 3 weeks, 1 day ago

Data warehouse is the key - C
upvoted 1 times

C. Redshift --data warehouse
upvoted 1 times

Answer is C
upvoted 1 times

Selected Answer: C
C is the answer
upvoted 1 times

Vote for C
upvoted 2 times

Selected Answer: C
Answer is C.
upvoted 1 times

Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse service that makes it simple and cost-effective to efficiently analyze all
your data using your existing business intelligence tools.
upvoted 2 times
Which AWS service is always provided at no charge?
A. Amazon S3
B. AWS Identity and Access Management (IAM)
C. Elastic Load Balancers
D. AWS WAF
Correct Answer: B

B (100%)

Selected Answer: B
From: https://aws.amazon.com/premiumsupport/knowledge-center/iam-
intro/#:~:text=You%20can%20interact%20with%20IAM,offered%20at%20no%20additional%20charge.
"You can interact with IAM through the web-based IAM console, the AWS Command Line Interface, or the AWS API or SDKs. IAM is offered at no
additional charge. "
upvoted 3 times

Answer is b
upvoted 1 times

Vote for B
upvoted 1 times
A company needs to design an AWS disaster recovery plan to cover multiple geographic areas.
Which action will meet this requirement?
A. Configure multiple AWS accounts.
B. Configure the architecture across multiple Availability Zones in an AWS Region.
C. Configure the architecture across multiple AWS Regions.
D. Configure the architecture among many edge locations.
Correct Answer: C

C (100%)
  KoreaSpurs 1 month ago

wait not B?
upvoted 1 times

keyword - multiple geographical areas
upvoted 1 times

Selected Answer: C
From: https://docs.aws.amazon.com/whitepapers/latest/disaster-recovery-workloads-on-aws/disaster-recovery-options-in-the-cloud.html
"In addition to data, you must also back up the configuration and infrastructure necessary to redeploy your workload and meet your Recovery Time
Objective (RTO). AWS CloudFormation provides Infrastructure as Code (IaC), and enables you to define all of the AWS resources in your workload
so you can reliably deploy and redeploy to multiple AWS accounts and AWS Regions. "
upvoted 3 times

Vote for C
upvoted 2 times
Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud?
A. Compute instances can be launched and terminated as needed to optimize costs.
B. Compute costs can be viewed in the AWS Billing and Cost Management console.
C. Users retain full administrative access to their compute instances.
D. Users can optimize costs by permanently running enough instances at peak load.
Correct Answer: A

A (82%) B (18%)

Selected Answer: A
A is right.
upvoted 1 times

A. true
upvoted 1 times

Selected Answer: A
I have this exam scheduled for next week, and I don't have money to pay for the contributor access. Please anyone that has have paid for this
access should please and please help me send the downloaded PDF to this email address: kamdy72@gmail.com
upvoted 1 times
  isnotxy1202 1 month, 1 week ago

could you plz share it if you have received
upvoted 1 times

Selected Answer: A
upvoted 1 times

Selected Answer: A
Answer is A
upvoted 1 times

Answer is A
upvoted 1 times
  jcrzj 2 months, 2 weeks ago

Selected Answer: A
Best fit
upvoted 1 times

Selected Answer: A
I think A is the most suitable answer, as it' about the flexibility only AWS as a cloud provider provides. Of course you can provision and terminate
your compute resources as an on-premises data center as well, but it takes much more manual work and time. In AWS, it's just a few clicks.
upvoted 2 times

Well put.
upvoted 1 times
Selected Answer: A
A is correct
upvoted 2 times
  adamwella 2 months, 2 weeks ago

The best answer is A
upvoted 2 times

Vote for A
upvoted 2 times

Selected Answer: B
why B is Wrong?
upvoted 2 times

B is not wrong.
A is just a better, more compelling benefit.
upvoted 3 times

on-premises data center also offer billing information
upvoted 1 times
  Prates_BR 3 months ago

B is no wrong. The point is, A is better fit about the question. I mean, for practitioner exam, most of time COST is the best option if available.
upvoted 4 times
In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose
two.)
A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
B. AWS is designed for high availability, which eliminates user downtime.
C. AWS eliminates the need for on-premises IT staff.
D. AWS uses economies of scale to continually reduce prices.
E. AWS offers a single pricing model for Amazon EC2 instances.
Correct Answer: AC

AD (81%) Other

Selected Answer: AD
Advantages of the Cloud :
> Translation of IT cost from Capital Expense to Operational Expense
No need to maintain and apply maintenance on the datacenter
> Economy at scale
Rapidity and Agility
upvoted 1 times

The key word is computing resources
A D is correct
upvoted 1 times
  dunknowanything 1 month ago

Selected Answer: AC
The point here is TCO, which includes labor costs associated with on prem operations.
upvoted 1 times

A and D
upvoted 1 times

Selected Answer: C
upvoted 1 times

You moron should prepare with free material and attempt this tests and get the PDF generated yourself.
upvoted 3 times

Selected Answer: AD
Please can we get Moderator clarification here.
upvoted 2 times

AC could be good to me as we say "on premises IT staff" and IT staff won't have to be on premise anymore.
Furthermore, why the cost could decrease continually? at some points we're reaching a blocking point no?
upvoted 2 times

cost per instance... if you need 100 instances it will cost for example 200 USD.. if you need 300 instances, it will cost 500 USD, the cost per
instance decrease as more resources you consume
upvoted 1 times

Selected Answer: AD
AD is correct
upvoted 1 times

Why wouldn't it be A,B??
upvoted 1 times

The question specifically state benefits for 'lower total cost of ownership (TCO)'. While B is correct generally, in this question it is incorrect. As it
does not relate to cost of ownership.
upvoted 1 times

Vote for A & D
upvoted 1 times

Selected Answer: AD
AD should be correct answer
upvoted 1 times

OMG: admin choosing C. no one intends to fire employees. IT equipment is better used in creating added value to the company
upvoted 1 times

Selected Answer: AD
Trade fixed expense for variable expense

Benefit from massive economies of scale
upvoted 1 times

Selected Answer: AD
I believe AD is correct.
upvoted 2 times
  TK926 3 months ago

Selected Answer: AD
n my opinion, it is AD
upvoted 1 times

Selected Answer: AC
AC would be the correct answer for the exam.
upvoted 1 times

Selected Answer: AD
AD please
upvoted 2 times
Which AWS service monitors AWS accounts for security threats?
A. Amazon GuardDuty
B. AWS Secrets Manager
C. Amazon Cognito
D. AWS Certificate Manager (ACM)
Correct Answer: A

A (75%) C (25%)

Selected Answer: A
GuardDuty
Cognito is for social media logins

upvoted 1 times
  smerix 1 week ago

Selected Answer: A
Vote for A
upvoted 1 times

Selected Answer: C
Amazon GuardDuty: Intelligent Detection of threats (using any logs in your deployment by analyze it)
> Amazon Cognito : Simple and Secure User Sign-Up, Sign-In, and Access Control for Application users
upvoted 1 times

A. Amazon GuardDuty: threat detection
upvoted 1 times

Selected Answer: A
Check out: https://aws.amazon.com/guardduty/
upvoted 1 times

answer is A
"Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers
detailed security findings for visibility and remediation"
upvoted 2 times

Vote for A
upvoted 1 times
Which benefit is included with an AWS Enterprise Support plan?
A. AWS Partner Network (APN) support at no cost.
B. Designated support from an AWS technical account manager (TAM)
C. On-site support from AWS engineers
D. AWS managed compliance as code with AWS Config
Correct Answer: B

B (100%)
  CalT925 1 month ago

Selected Answer: B
TAM is only available in enterprise
upvoted 1 times

A:APN Consulting Partners are professional services firms that help customers of all types and sizes design, architect, build, "MIGRATE", and
manage their workloads and applications on AWS, accelerating their migration to AWS cloud. once moved then henceforth support conatct would
be TAM
upvoted 1 times

Vote for B
upvoted 2 times
Which task does AWS perform automatically?
A. Encrypt data that is stored in Amazon DynamoDB.
B. Patch Amazon EC2 instances.
C. Encrypt user network traffic.
D. Create TLS certificates for users' websites.
Correct Answer: A

A (90%) 10%

A. DynamoDB
All user data stored in Amazon DynamoDB is fully encrypted at rest. DynamoDB encryption at rest provides enhanced security by encrypting all
your data at rest using encryption keys stored in AWS Key Management Service (AWS KMS)
upvoted 3 times
  SystemSix 2 months, 2 weeks ago

Selected Answer: A
A default encryption
upvoted 2 times

Selected Answer: A
A is correct
upvoted 2 times

Selected Answer: A
Encryption in DynamoDB tables is by default.
upvoted 2 times
  ynnaw8 2 months, 3 weeks ago

Selected Answer: A
A IS RIGHT
upvoted 3 times

Vote for A
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html
upvoted 2 times

Selected Answer: B
why not B?
upvoted 1 times
  prrrrrrr121 3 months ago

AWS does patching if it's a fully managed service by them and EC2 is not; the customer is responsible for patching, OS etc
upvoted 5 times
Which AWS service or tool can a company use to visualize, understand, and manage AWS spending and usage over time?
B. Amazon CloudWatch
C. Cost Explorer
D. AWS Budgets
Correct Answer: C

C (100%)

C. Cost Explorer --> graph, over time
CloudTrail: monitor and record account activity across AWS infrastructure, giving you control over storage, remediation action. CloudTrail enables
auditing, security monitoring and operational troubleshooting by tracking user activity and API usage
upvoted 1 times

Selected Answer: C
from: https://aws.amazon.com/aws-cost-management/aws-cost-explorer/
upvoted 1 times

Vote for C
upvoted 1 times
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on
premises. There must be low latency between AWS and the company resources.
Which AWS service or feature can be used to meet these requirements?
A. AWS Local Zones
B. Availability Zones
C. AWS Outposts
D. AWS Wavelength Zones
Correct Answer: A
Reference:
https://d1.awsstatic.com/whitepapers/hybrid-cloud-with-aws.pdf
(18)

C (78%) A (22%)
  _SHARU_ Highly Voted  5 months, 4 weeks ago

C ANSWER
AWS Outposts • Hybrid Cloud: businesses that keep an on
- premises infrastructure alongside a cloud
infrastructure
• Therefore, two ways of dealing with IT systems: • One for the AWS cloud (using the AWS console,
CLI, and AWS APIs)
• One for their on
-premises infrastructure
• AWS Outposts are “server racks” that offers the
same AWS infrastructure, services, APIs & tools
to build your own applications on
-premises just as in the cloud
• AWS will setup and manage “Outposts Racks”
within your on
-premises infrastructure and you can start leveraging AWS services on-premises
• You are responsible for the Outposts Rack
physical security
• Benefits:
• Low-latency access to on-premises systems
• Local data processing
• Data residency
• Easier migration from on-premises to the cloud
• Fully managed service
upvoted 12 times
  Oussama86 Most Recent  3 weeks ago

Surely A.Referring to AWS---> AWS Local Zones have their own connection to the internet and support AWS Direct Connect, so resources created
in the Local Zone can serve local end-users with very low-latency communications. the key words here are Direct connect (on-premises) and low
latency
upvoted 1 times

Selected Answer: C
C, outposts seems correct, it's tricky.
Local zones (A) don't offer on premises, it's near your location only.
upvoted 4 times
  CyborgB 3 weeks, 4 days ago

A is the Answer considering the link https://d1.awsstatic.com/whitepapers/hybrid-cloud-with-aws.pdf
upvoted 1 times

Selected Answer: A
A is correct.
Run latency sensitive applications closer to end users
Deliver innovative applications requiring low-latency closer to end users and on-premises installations.
upvoted 1 times

on prem means inside your company instalation... Local Zone is inside Amazon premisses.
upvoted 1 times

Believe this part of question the data must remain local and "on premises" clearly answer should be outpost.
upvoted 1 times

Selected Answer: A
The key here is low latency. The question doesn't mean to extend AWS services to on premises
upvoted 2 times

Selected Answer: C
upvoted 3 times
  hieu2895 1 month ago

If you have an exam, please send me to this email address: hieu2895@gmail.com
upvoted 1 times
  ihtaff 1 month, 1 week ago

Please if someone send the PDF to you , share it with me in this adress . ihtaffi@gmail.com
upvoted 1 times

Selected Answer: C
upvoted 1 times
  chrishd777 1 month, 2 weeks ago

Selected Answer: C
Outposts for on premises
upvoted 1 times

Selected Answer: C
Outposts, obviously
upvoted 1 times

Selected Answer: C
On the text reference says this: "Outposts can support workloads that must remain on-premises due to low latency or
local data processing needs."
upvoted 2 times

the data must remain local and on premises.
the answer is c
upvoted 1 times

Selected Answer: C
This is an error. Please resolve Admin.
upvoted 1 times

Vote for C
upvoted 1 times

answer is A. local areas are installed near large cities and industrial centers with all the infrastructure that houses data centers to run the main
services such as EC2, RDS, etc. Low latency is guaranteed by proximity. What I have not found is what happens if you are not near a big city.
upvoted 1 times
  kshub1234 2 months, 3 weeks ago

https://aws.amazon.com/about-aws/global-infrastructure/localzones/faqs/
upvoted 1 times
A company requires an isolated environment within AWS for security purposes.

Which action can be taken to accomplish this?
A. Create a separate Availability Zone to host the resources.
B. Create a separate VPC to host the resources.
C. Create a placement group to host the resources.
D. Create an AWS Direct Connect connection between the company and AWS.
Correct Answer: B
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html

B (83%) D (17%)
  prodigywole 2 days, 7 hours ago

hello pls can someone help me with the downloaded pdf of 301 question at ogunlade.oluwole94@gmail.com my exam is for sunday
upvoted 1 times
  PruLee 1 month, 1 week ago

@No mind, Could you send the pdf of 301 questions to me by using gmail, lily1243587@gmail.com
upvoted 1 times

upvoted 2 times
  QasimAWS 1 month ago

Share it with me too @ qasimyousufzai112@gmail.com
upvoted 1 times
  Nehc 1 month, 2 weeks ago

Vote for B
upvoted 2 times
  vviicc0385 2 months, 2 weeks ago

B is correct
upvoted 1 times

Selected Answer: B
B is correct
upvoted 1 times
  DL28 2 months, 2 weeks ago

Selected Answer: B
Ans is B
upvoted 1 times
  [Removed] 2 months, 2 weeks ago
B is the answer.
upvoted 1 times

Vote for B
upvoted 1 times
  Alaaaa21 2 months, 3 weeks ago

Hello Everyone , I'v the exam on Monday and I'm not able to access all the 301 questions . Is it possible help me to get it as pdf file ?
upvoted 2 times
  GNelly 3 months, 3 weeks ago

Selected Answer: B
AWS Direct Connect is a service that enables you to establish a dedicated private connection between your data center and a VPC. Not "inside
AWS" there B
upvoted 2 times
  GNelly 3 months, 3 weeks ago

AWS Direct Connect is a service that enables you to establish a dedicated private connection between your data center and a VPC. Not "inside
AWS" there B
upvoted 1 times
  Ombromanto69 3 months, 4 weeks ago

Selected Answer: B
Why D? The right answer for mw is B.
upvoted 1 times
  overtheclouds 4 months ago

A direct connection would provide a separate network environment isolated from the internet.
upvoted 1 times
  overtheclouds 4 months ago

Selected Answer: D
D is the answer.
upvoted 1 times

nope, I don;'t think so...
A company requires an isolated environment within AWS for security purposes.
the question did not mention anything for a hybrid setup

upvoted 1 times
Which AWS service is a highly available and scalable DNS web service?
A. Amazon VPC
C. Amazon Route 53
D. Amazon Connect
Correct Answer: C
Reference:
https://aws.amazon.com/route53/

C (100%)
  BillyC Highly Voted  1 year ago

C is correct
upvoted 5 times

Key word - DNS then Route 53
upvoted 1 times
  ACLOUD_PRACTITIONER 3 weeks, 5 days ago

Selected Answer: C
C.
Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service.
upvoted 1 times
Which of the following is an AWS best practice for managing an AWS account root user?
A. Keep the root user password with the security team.
B. Enable multi-factor authentication (MFA) for the root user.
C. Create an access key for the root user.
D. Keep the root user password consistent for compliance purposes.
Correct Answer: B
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

B (73%) C (27%)
  bratpyt Highly Voted  1 year, 1 month ago

b is correct
upvoted 13 times
  Silascarter Highly Voted  1 year ago

The answer to this Question is D. It is asking "which is not a recommended practice".
A: Securely lock away you root user access key. Recommended

B: Enable MFA on root user. Recommended
C: Create access key for root User. Recommended
D. Not Recommended. (You are supposed to rotate root users password if you are keeping it even though best practice says delete it).
Source: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
upvoted 5 times
  Adeeliqbal123 6 months, 1 week ago

That confuses me for sure because so many people are not reading it properly. It says NOT recommended practice.
upvoted 1 times
  Josh11211 1 week, 5 days ago

no, it does not say NOT
upvoted 3 times
  Craig92866 Most Recent  1 month, 1 week ago

Selected Answer: B
Not C.
If you don't already have an access key for your AWS account root user, don't create one unless you absolutely need to.
https://docs.aws.amazon.com/accounts/latest/reference/best-practices-root-user.html
upvoted 1 times
  hvtroller 1 month, 3 weeks ago

Selected Answer: B
C can not be answer
> However, we strongly recommend that you do not use your AWS account root user access key
upvoted 2 times

Selected Answer: B
The question is what is the BEST practice, not NOT THE BEST practice.
A = no
B = definitely a good practice. "Safeguard your root user credentials the same way you would protect other sensitive personal information. You can
do this by configuring MFA for your root user credentials."
C = nope. "We don't recommend generating access keys for your root user, because they allow full access to all your resources for all AWS services,
including your billing information." https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
D = obviously no. "To protect your password, it's important to follow these best practices: Change your password periodically."
https://docs.aws.amazon.com/accounts/latest/reference/root-user-password.html
This is a basic knowledge every human being using technology should know. This doesn't just apply for AWS.
upvoted 3 times
  gbiic 2 months, 1 week ago

The question doesn't have the word "not" in it as some have expressed.
upvoted 1 times

Answer is B
upvoted 1 times

Selected Answer: B
Correct answer is B as per AWS's documentation regarding root user best practices:
(access keys are strongly encouraged to be used, described on the same link)
upvoted 1 times

Selected Answer: B
Require multi-factor authentication (MFA)
We recommend using IAM roles for human users and workloads that access your AWS resources so that they use temporary credentials. However,
for scenarios in which you need IAM or root users in your account, require MFA for additional security. With MFA, users have a device that
generates a response to an authentication challenge. Each user's credentials and device-generated response are required to complete the sign-in
process. For more information, see Using multi-factor authentication (MFA) in AWS.
If you use IAM Identity Center for centralized access management for human users, you can use the IAM Identity Center MFA capabilities when
your identity source is configured with the IAM Identity Center identity store, AWS Managed Microsoft AD, or AD Connector. For more information
about MFA in IAM Identity Center see Multi-factor authentication in the AWS IAM Identity Center (successor to AWS Single Sign-On) User Guide.
upvoted 1 times
  senbonzakuray 2 months, 4 weeks ago

Selected Answer: B
b is correct
upvoted 2 times
  shankarece 3 months ago

Selected Answer: B
B is right
upvoted 2 times
  esnecho 4 months, 2 weeks ago

C is the Correct Answer.
upvoted 1 times
  Novatolx 4 months, 4 weeks ago

it is on the site... If you don't already have an access key for your AWS account root user, don't create one, it is clearly C
upvoted 1 times
  buntysas 5 months ago

What is the meaning of Option A?
upvoted 1 times
  Wolvster 5 months, 1 week ago

D is my choice....
upvoted 1 times
  AulaitQM 6 months, 3 weeks ago

Selected Answer: C
Answer is C
upvoted 1 times
  Hayder_Alobaidi 8 months, 1 week ago

Selected Answer: C
Correct answer is C ,
This is from aws website
Access keys
If you don't already have an access key for your AWS account root user, don't create one unless you absolutely need to. Instead, use the root user
to create an IAM user for yourself that has administrative permissions.
If you do have an access key for your root user, delete it.
upvoted 4 times
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
A. EC2 key pairs
B. AWS Systems Manager Session Manager
C. AWS Identity and Access Management (IAM)
D. Network ACLs
Correct Answer: B
Reference:
https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html

B (100%)

Selected Answer: B
Agreed, B is the only viable option for this question's context.
upvoted 2 times

Selected Answer: B
AWS Systems Manager Session Manager is a new interactive shell and CLI that helps to provide secure, access-controlled, and audited Windows
and Linux EC2 instance management. Session Manager removes the need to open inbound ports, manage SSH keys, or use bastion hosts.
Answer is B.
upvoted 3 times
  0147 11 months, 3 weeks ago

Hello Team, I have the AWS exam coming up, but reading the questions, should I study the 818 questions?
upvoted 4 times

its helpful, in order to detect trick question o trick answers
upvoted 3 times
  thanoskachacha 11 months ago

Hey did you really study 818 questions?
upvoted 3 times
  SM786 11 months, 3 weeks ago

https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html
So B is right
upvoted 1 times
  Jun0121 11 months, 3 weeks ago

B is right.
upvoted 1 times
After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?
A. No upfront payment
B. Hourly on-demand payment
C. Partial upfront payment
D. All upfront payment
Correct Answer: D
Reference:

D (100%)
  syu31svc Highly Voted  1 year, 2 months ago

From the link: https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/
"You can choose between three payment options when you purchase a Standard or Convertible Reserved Instance. With the All Upfront option, you
pay for the entire Reserved Instance term with one upfront payment. This option provides you with the largest discount compared to On-Demand
Instance pricing"
So answer is D
upvoted 15 times
  Lokokan Most Recent  3 months, 2 weeks ago

D gives more discount
upvoted 1 times
  bilel500 3 months, 2 weeks ago

Selected Answer: D
Answer is D.
upvoted 1 times
  srinivasmanyam 5 months, 1 week ago

the correct answer is 'D'
Reservations can provide up to a 70% discount compared to the On-Demand price. Dedicated Host Reservations can be purchased using the AWS
Management Console or AWS CLI.
You can choose between three Dedicated Host Reservation payment options. With the All Upfront option, you pay for the entire Dedicated Host
Reservation with one upfront payment. This option provides you with the largest discount compared to On-Demand pricing. With the Partial
Upfront option, you make a low upfront payment and are then charged a discounted hourly rate for the Dedicated Host for the duration of the
reservation. The No Upfront option does not require an upfront payment and provides a discounted hourly rate for the duration of the term.
https://aws.amazon.com/ec2/dedicated-hosts/pricing/
upvoted 2 times
  guychow 6 months, 1 week ago

Selected Answer: D
pay all in advance always receive further discount rate.
upvoted 3 times
  AharonQ 8 months, 3 weeks ago

D. all the time
upvoted 1 times
  MJeidah 1 year ago

Definitely D!
upvoted 1 times
  RAAAEHL 1 year, 1 month ago

D - all upfront
upvoted 2 times
  kimalto452 1 year, 1 month ago

D..................
upvoted 2 times
  Mihai2 1 year, 1 month ago
I think it is D.
Go to https://aws.amazon.com/ec2/dedicated-hosts/pricing/ and try to CTRL + F for "With the All Upfront option".
upvoted 4 times
  Jessik 1 year, 2 months ago

The correct answer is B.
https://aws.amazon.com/es/ec2/pricing/dedicated-
instances/#:~:text=Las%20instancias%20dedicadas%20son%20instancias,dedicado%20a%20un%20solo%20cliente.&text=Pague%20por%20las%20
instancias%20dedicadas,90%25%20comprando%20instancias%20de%20spot.
upvoted 3 times
  MinodaZ 1 year, 1 month ago

The host is DEDICATED to you. You don't pay per hour. All Upfront is the correct answer.
upvoted 2 times
  pablo1234567 1 year ago

dios..................
upvoted 1 times
A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.
Which best practice for cost governance does this example show?
A. Resource controls
B. Cost allocation
C. Architecture optimization
D. Tagging enforcement
Correct Answer: B
Reference:
https://d1.awsstatic.com/whitepapers/architecture/AWS-Cost-Optimization-Pillar.pdf

C (60%) B (40%)
  b3llm4n Highly Voted  1 year, 2 months ago

It should be C as per the AWS documentation:
https://docs.aws.amazon.com/whitepapers/latest/cost-management/cost-governance-best-practices.html
"Architecture optimization focuses on the need to continually refine workloads to be more cost-conscious to create better architected systems."
upvoted 35 times
  ayzrian Highly Voted  1 year, 2 months ago

I think it is C.
upvoted 9 times
  aman_aneja Most Recent  3 days, 8 hours ago

Selected Answer: C
This archived whitepaper has all the Cost Governance Best Practices listed in it.
https://d1.awsstatic.com/whitepapers/aws-tco-2-cost-management.pdf
upvoted 1 times

Anyone else excited they're 50% through with the review? Keep the momentum going!
upvoted 4 times

Selected Answer: C
Agreed
upvoted 1 times

Selected Answer: B
Answer is B.
Page 20 states:
These services remove the need for you to manage a resource, and
provide the function of code execution, queuing services, and message delivery. The
other benefit is that they scale in performance and cost in line with usage, allowing
efficient cost allocation and attribution.
https://d1.awsstatic.com/whitepapers/architecture/AWS-Cost-Optimization-Pillar.pdf
upvoted 3 times
  geodfg 4 months, 1 week ago

this is Cost Optimization, I do not know if it is the same as Cost allocation, which is more Cost Awareness, nothing to do with optimization,
maybe it helps but it is not doing it as a.
tool. Even C doesn't sound 100% correct but it is more close.
upvoted 3 times
  nVizzz 6 months ago

Selected Answer: C
Vote for C
upvoted 1 times
  binray 6 months, 1 week ago
C, it should be Architecture optimization because cost allocation doesn't exist and it's full name is cost allocation tags mens it helps you track AWS
cost on detailed level so it doesn't improve your efficiency.
upvoted 2 times
  Hayder_Alobaidi 8 months, 1 week ago

Selected Answer: C
The answer is c , you may have reduce cost by using cost allocation , but without efficiency . C will help you get both
upvoted 1 times

Selected Answer: B
B is correct
keyword(increase efficiency and minimize costs.)
upvoted 1 times
  ostralo 9 months, 1 week ago

C is correct - cost optimization + efficiency
upvoted 1 times
  DriVen 9 months, 2 weeks ago

Selected Answer: B
B is correct without a doubt, in aWS there is no such term as "Architecture optimization", i know it makes sense in general, but B sounds way more
logical and relevant to the question and to AWS logic
upvoted 2 times
  beesknees 10 months ago

Selected Answer: C
It's C
upvoted 1 times
  fatoz 11 months, 1 week ago

It should be C
upvoted 3 times
  kunal_18 1 year ago

Selected Answer: C
It's C
upvoted 4 times
  RaghavendraPrakash 1 year ago

Very vague
upvoted 3 times
  flickreyes 1 year, 1 month ago

Even by the logics of the question, this has nothing to do with how the costs are being allocated. Please correct the answer to "C".
upvoted 1 times
A company would like to host its MySQL databases on AWS and maintain full control over the operating system, database installation, and
configuration.
Which AWS service should the company use to host the databases?
A. Amazon RDS
B. Amazon EC2
C. Amazon DynamoDB
D. Amazon Aurora
Correct Answer: A
Reference:
https://d1.awsstatic.com/whitepapers/best-practices-for-running-oracle-database-on-aws.pdf?did=wp_card&trk=wp_card
(6)

B (92%) 8%
  asad12 Highly Voted  1 year, 1 month ago

b -Hosting a MySQL database on an EC2 instance, you will be able to choose the underlying building blocks such as operating system, storage
settings, and database configuration, giving you full control and flexibility over your MySQL database and surpassing the limitations of Amazon
RDS, while also leveraging all the advantages of the AWS Cloud platform and services.
upvoted 14 times
  MayneE Most Recent  3 weeks, 1 day ago

Selected Answer: B
"...Amazon is responsible for infrastructure, backups, and updates on the Amazon RDS DB instance, the shell access to the underlying operating
system is disabled."
https://bluexp.netapp.com/blog/migrating-mysql-database-ec2-hosted-amazon-rds
upvoted 1 times
  MayneE 3 weeks, 1 day ago

RDS is fully managed...
upvoted 2 times

Selected Answer: B
Page 5 per their own link....
AWS offers its customers three options for running Oracle Database on AWS... Line 2, Running a self-managed Oracle Database directly on Amazon
Elastic Compute Cloud (Amazon EC2)... Running the database on Amazon EC2 is very similar to running the database on your own server. You have
full control of the Oracle binaries database and have operating system-level access.
upvoted 1 times

Selected Answer: B
Only AWS EC2 instances allow you to patch the OS.
upvoted 2 times

Selected Answer: B
Should be EC2, due to requirement of control over OS
upvoted 1 times
  sujitwarrier11 1 month, 4 weeks ago

Selected Answer: B
Should be EC2, due to requirement of control over OS
upvoted 2 times

Selected Answer: B
Your application requirements, database features, functionality, growth capacity, and overall architecture complexity will determine which option to
choose. If you are migrating multiple SQL Server databases to AWS, some of them might be a great fit for Amazon RDS, whereas others might be
better suited to run directly on Amazon EC2. You might have databases that are running on SQL Server Enterprise edition but are a good fit for SQL
Server Standard edition. You may also want to modernize your SQL Server database running on Windows to run on a Linux operating system to
save on cost and licenses. Many AWS customers run multiple SQL Server database workloads across Amazon RDS and Amazon EC2.
https://docs.aws.amazon.com/sql-server-ec2/latest/userguide/sql-server-on-ec2-options.html
upvoted 2 times
  bukkykenny2 2 months, 1 week ago
a : Running a self-managed Oracle Database directly on Amazon Elastic Compute
Cloud (Amazon EC2). This option gives you full control over the setup of the
infrastructure and database environment. Running the database on Amazon EC2
is very similar to running the database on your own server. You have full control
of the Oracle binaries database and have operating system-level access, so you
can run monitoring and management agents and use your choice of tools for data
replication, backup, and restoration. Furthermore, you have the ability to use every
optional module available in Oracle Database. However, this option requires you
to set up, configure, manage, and tune all the components, including Amazon EC2
instances, storage volumes, scalability, networking, and security based on AWS
architecture best practices. ===> In the fully-managed Amazon Relational Database
Service (Amazon RDS) service, this is all taken care of for you.
upvoted 1 times

answer is B
upvoted 1 times
  SideBox21 2 months, 1 week ago

It should be EC2, because of "control over operation system"
upvoted 1 times

Selected Answer: D
Aurora also support MuAql,
https://aws.amazon.com/rds/aurora/faqs/
upvoted 1 times
  I_hate_dba 1 day, 22 hours ago

ITS MYSQL NO MSSQL
upvoted 1 times

Selected Answer: B
No way it can be RDS.
upvoted 1 times

Selected Answer: B
Ans: B. Other options are AWS Managed services
upvoted 1 times

B is correct
upvoted 1 times
  TAvenger 1 year, 1 month ago

"full control" -> B. Amazon EC2
upvoted 3 times
  awsawsmaster 1 year, 1 month ago

C is X
A is O !
upvoted 1 times
How does the AWS global infrastructure offer high availability and fault tolerance to its users?
A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and
are interconnected with low-latency networks and redundant power supplies.
B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic
location.
C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions.
D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency
networking and redundant power supplies.
Correct Answer: D

D (100%)

Selected Answer: D
A: AWS Regions within various Availability Zones. "within"
Availability Zones are distinct locations within an AWS Region that are engineered to be isolated from failures in other Availability Zones.
D: AWS Regions with independent Availability Zones."With"
upvoted 4 times

A, D
look the same to me
upvoted 3 times
  whoareyou 1 year, 1 month ago

Can anyone explain the difference between A&D?
upvoted 2 times
  fabulousethiopia 1 year, 1 month ago

A: AWS Regions within various Availability Zones. "within"
Availability Zones are distinct locations within an AWS Region that are engineered to be isolated from failures in other Availability Zones.
D: AWS Regions with independent Availability Zones."With"
upvoted 8 times
A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances.
Which benefit of the AWS Cloud does this example illustrate?
A. High availability
B. Elasticity
C. Reliability
D. Global reach
Correct Answer: A

B (65%) A (29%) 6%
  Agil09 1 day, 8 hours ago

Selected Answer: B
Auto-scaling = elasticity
upvoted 1 times
  Ankir90 4 days, 18 hours ago

Option B
High Availability -->AZ
Scalability -> Auto Scaling
upvoted 1 times
  TMT91 5 days, 17 hours ago

Selected Answer: B
It's definitely B,
Auto-scaling ----> elasticity
upvoted 1 times
  Testeurtest 6 days, 20 hours ago

Selected Answer: B
Its elasticity. High availability is achieved by deploying in multiple AZs and regions.
upvoted 1 times

B. elasticity
auto-scaling--> eslaticity
upvoted 4 times

Selected Answer: C
Don't kill me but I think it's C. :)
Reliability (encompasses BOTH HA and Elasticity): The Reliability pillar encompasses the ability of a workload to perform its intended function
correctly and consistently when it’s expected to.
upvoted 2 times

well thought but we can have Auto Scaling without improving HA, since you can have several instances of your EC2 in the same AZ because the
workload. But if this AZ fails, all instances fails... so because HA is not guaranteed with auto scaling per se. Elasticity is the right answer.
upvoted 1 times

Yes, it could be HA, but in this case it is asking about auto scaling, not HA. So B is correct.
upvoted 1 times

Selected Answer: B
Auto-Scaling=Elasticity
upvoted 1 times

Selected Answer: B
I think it is answer B, but not sure!
upvoted 2 times
the correct Answer is B - Elasticity.
High Availability is a result of Elasticity but the action being performed is actually Elasticity no HA. ( Check on the section of Scalability vs High
Availability ) there's a thin difference.
upvoted 1 times
  makario 1 month, 3 weeks ago

Vote B
upvoted 1 times

Selected Answer: B
Its elasticity. High availability is achieved by deploying in multiple AZs and regions.
upvoted 3 times
  osmanalp 2 months ago

Selected Answer: B
Elasticity
Elasticity is the ability of the system to scale automatically. Elasticity is basically auto-scaling.
High Availability
High Availability is the ability of the system to be up and running with very little (planned or unplanned) downtime. Azure offers SLA (Service Level
Agreement) for every azure resource for High Availability.
https://coderjony.com/blogs/cloud-computing-concepts-high-availability-scalability-elasticity-agility-fault-tolerance-and-disaster-recovery
upvoted 4 times
  osmanalp 2 months ago

Answer is A. High availability
https://aws.amazon.com/ec2/autoscaling/
Balance capacity across Availability Zones

Amazon EC2 Auto Scaling can automatically balance instances across zones, and always launches new instances so that they are balanced between
zones as evenly as possible across your entire fleet.
upvoted 1 times

Selected Answer: A
When you talk about HA you are talking about using resources without interruption it's not elasticity pd!
upvoted 1 times
  carlos0808 2 months, 1 week ago

Selected Answer: B
The Correct Answer is B.
upvoted 2 times
  nktsr 2 months, 3 weeks ago

The Correct Answer is B. Auto-Scaling can be either vertically or horizontally depending on needs.High Availabilty is only required to scale
horizontally which the question isn't about.
upvoted 4 times

Selected Answer: A
A: https://aws.amazon.com/ec2/autoscaling/
upvoted 3 times
Which AWS service or feature is used to send both text and email messages from distributed applications?
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Email Service (Amazon SES)
C. Amazon CloudWatch alerts
D. Amazon Simple Queue Service (Amazon SQS)
Correct Answer: D
Reference:
https://aws.amazon.com/getting-started/hands-on/send-messages-distributed-
applications/#:~:text=Send%20Messages%20Between%20Distributed%
20Applications%20with%20Amazon%20Simple%20Queue%20Service%20(SQS)

A (75%) D (25%)
  yogat78735 Highly Voted  1 year, 2 months ago

I think it's A
upvoted 30 times
  sasikumar Highly Voted  1 year, 1 month ago

A
Amazon Simple Notification Service (Amazon SNS) is a fully managed messaging service for both application-to-application (A2A) and application-
to-person (A2P) communication.
The A2A pub/sub functionality provides topics for high-throughput, push-based, many-to-many messaging between distributed systems,
microservices, and event-driven serverless applications. Using Amazon SNS topics, your publisher systems can fanout messages to a large number
of subscriber systems including Amazon SQS queues, AWS Lambda functions and HTTPS endpoints, for parallel processing, and Amazon Kinesis
Data Firehose. The A2P functionality enables you to send messages to users at scale via SMS, mobile push, and email.
upvoted 21 times

Selected Answer: A
I think it's A
key " both text and email messages"
upvoted 1 times

Selected Answer: A
From: https://medium.com/awesome-cloud/aws-difference-between-sqs-and-sns-61a397bf76c5
upvoted 1 times
  rac_sp 3 months, 3 weeks ago

Selected Answer: A
clear like water. send text and email messags, therefore letter A
upvoted 1 times
  FareedKamran 4 months, 2 weeks ago

Correct Answer is A
AWS SNS
Amazon SNS is a managed messaging service that lets you decouple publishers from subscribers. This is useful for application-to-application
messaging for microservices, distributed systems, and serverless applications.
Amazon SNS lets you send push notifications to mobile apps, text messages to mobile phone numbers, and plain-text emails to email addresses.
You can fan out messages with a topic, or publish to mobile endpoints directly.
AWS SQS
Amazon SQS provides queues for high-throughput, system-to-system messaging. You can use queues to decouple heavyweight processes and to
buffer and batch work. Amazon SQS stores messages until microservices and serverless applications process them.
Amazon SQS is a message queue service used by distributed applications to exchange messages through a polling model, and can be used to
decouple sending and receiving components.
upvoted 1 times
(https://aws.amazon.com/sns/faqs/)
How is Amazon SNS different from Amazon MQ?
Amazon MQ, Amazon SQS, and Amazon SNS are messaging services that are suitable for anyone from startups to enterprises. If you're using
messaging with existing applications, and want to move your messaging to the cloud quickly and easily, we recommend you consider Amazon MQ.
It supports industry-standard APIs and protocols so you can switch from any standards-based message broker to Amazon MQ without rewriting
the messaging code in your applications. If you are building brand new applications in the cloud, we recommend you consider Amazon SQS and
Amazon SNS. Amazon SQS and SNS are lightweight, fully managed message queue and topic services that scale almost infinitely and provide
simple, easy-to-use APIs. You can use Amazon SQS and SNS to decouple and scale microservices, distributed systems, and serverless applications,
and improve reliability.
upvoted 1 times

sorry ,should be this one
(https://aws.amazon.com/sns/faqs/)
Amazon Simple Queue Service (SQS) and Amazon SNS are both messaging services within AWS, which provide different benefits for developers.
Amazon SNS allows applications to send time-critical messages to multiple subscribers through a “push” mechanism, eliminating the need to
periodically check or “poll” for updates. Amazon SQS is a message queue service used by distributed applications to exchange messages
through a polling model, and can be used to decouple sending and receiving components. Amazon SQS provides flexibility for distributed
components of applications to send and receive messages without requiring each component to be concurrently available.
A common pattern is to use SNS to publish messages to Amazon SQS queues to reliably send messages to one or many system components
asynchronously.
upvoted 1 times
  Skdbc 4 months, 2 weeks ago

Selected Answer: A
Both email and text
upvoted 1 times
  Kanyeeeah 4 months, 3 weeks ago

Q: How is Amazon SNS different from Amazon SQS?
Amazon Simple Queue Service (SQS) and Amazon SNS are both messaging services within AWS, which provide different benefits for developers.
Amazon SNS allows applications to send time-critical messages to multiple subscribers through a “push” mechanism, eliminating the need to
periodically check or “poll” for updates. Amazon SQS is a message queue service used by distributed applications to exchange messages through a
polling model, and can be used to decouple sending and receiving components. Amazon SQS provides flexibility for distributed components of
applications to send and receive messages without requiring each component to be concurrently available.
Reference: https://aws.amazon.com/sns/faqs/
upvoted 1 times
  Kanyeeeah 4 months, 3 weeks ago

Thus, I think its D with the keyword of 'distributed applications' for Amazon SQS.
Any thoughts on this?

upvoted 2 times

Keyword seems correct. I go with D (SQS)
upvoted 1 times

SNS will work but SQS is the way to go. SQS does the same thing that SNS does but adds additional features like fault tolerance.
upvoted 1 times
  1ost1nCl0ud 4 months, 4 weeks ago

I think answer is A. Key word is "send" Only SNS cuz it is fanout messages. SQS you have to "pull" message not "send"
upvoted 1 times
  Tykinz 5 months ago

Selected Answer: D
SQS is a message queuing service for sending, storing, and retrieving messages (text and email) between software components of a distributed
application.
upvoted 1 times
  rude7 5 months, 1 week ago

Selected Answer: A
A
https://medium.com/awesome-cloud/aws-difference-between-sqs-and-sns-61a397bf76c5
upvoted 1 times
  cryptostud 5 months, 1 week ago

The answer is D - SQS. Straight from the AWS Skill Builder - AWS Cloud Practitioner Essentials Module Practice Exam. "You want to send and receive
messages between distributed application components. Which service should you use?" - Answer:
Amazon Simple Queue Service (Amazon SQS) - Amazon SQS is a message queuing service. Using Amazon SQS, you can send, store, and receive
messages between software components at any volume size, without losing messages or requiring other services to be available.
upvoted 3 times
  mihnitu 6 days, 23 hours ago

SQS does not send emails or text messages; there is a difference between queue messages and text messages or emails
upvoted 1 times

Selected Answer: A
I believe the best answrr is A (SNS):
https://medium.com/awesome-cloud/aws-difference-between-sqs-and-sns-61a397bf76c5
upvoted 1 times
  cryptostud 5 months, 2 weeks ago

I originally thought it was A, but it seems like it could be D. I am still completely confused, even after reading the AWS information and links
provided in the discussion. This is absurdly confusing.
upvoted 1 times
  Ashif_Ejaz 5 months, 2 weeks ago

its SNS because SNS is a distributed publish-subscribe system. Messages are pushed to subscribers as and when they are sent by publishers to
SNS.
SQS is distributed queuing system. Messages are not pushed to receivers. Receivers have to poll or pull messages from SQS.
upvoted 1 times
  shree32 5 months, 2 weeks ago

D
Amazon SQS is the AWS service that allows application components to communicate in the cloud. You will use the Amazon SQS console to create
and configure a message queue, send a message, receive and delete that message, and then delete the queue.
upvoted 1 times

SQS does not send any messages - clients send and consume messages. also SQS does not send emails or text messages; messages in the
queue are not text messages or emails
upvoted 1 times
A user is able to set up a master payer account to view consolidated billing reports through:
A. AWS Budgets.
B. Amazon Macie.
C. Amazon QuickSight.
D. AWS Organizations.
Correct Answer: D
Reference:

D (100%)
  TheWicker Highly Voted  1 year, 1 month ago

"You can track the charges across multiple accounts and download the combined cost and usage data."
upvoted 6 times

Selected Answer: D
https://aws.amazon.com/organizations/faqs/
upvoted 1 times
According to the AWS shared responsibility model, which task is the customer's responsibility?
A. Maintaining the infrastructure needed to run AWS Lambda
B. Updating the operating system of Amazon DynamoDB instances
C. Maintaining Amazon S3 infrastructure
D. Updating the guest operating system on Amazon EC2 instances
Correct Answer: D
Reference:
model/#:~:text=Customers%20are%20responsible%20for%20managing,also%20extends%
20to%20IT%20controls

D (100%)

Selected Answer: D
D is correct
upvoted 1 times
  Justyna94 8 months, 2 weeks ago

Selected Answer: D
D is correct
upvoted 1 times
  rch040 1 year ago

D is Correct
upvoted 1 times
  asad12 1 year, 2 months ago

D- correct
upvoted 4 times
A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited
operational knowledge to perform the migration.
Which AWS service supports this use case?
A. Amazon EC2
B. Amazon Lightsail
C. Amazon S3
D. AWS Lambda
Correct Answer: C

B (78%) C (22%)
  semo41 Highly Voted  1 year, 1 month ago

I think the answer is B (lightsail is more suitable for little experience)
upvoted 17 times
  Blimpy 1 week, 4 days ago

Yes - most suitable - "Lightsail instances are specifically engineered by AWS for web servers, developer environments, and small database use
cases." https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-frequently-asked-questions-faq
upvoted 1 times
  storm2513 Highly Voted  1 year, 2 months ago

It’s B
upvoted 7 times
  JYKL88 Most Recent  2 weeks, 4 days ago

Understand why some will choose C, but S3 is only for static website. in this case, I dont think so, thus, lightsail is the answer
upvoted 1 times

Selected Answer: B
From: https://www.google.com/aclk?
sa=l&ai=DChcSEwiGxrXn04D7AhUWCSsKHTzyCPsYABAAGgJzZg&sig=AOD64_0FD10qXAl_Ze1BdEwqMWU_Qcwvog&q&adurl&ved=2ahUKEwi5xK
7n04D7AhV133MBHYhDBzwQ0Qx6BAgHEAE
upvoted 1 times
  HansiKlose 1 month, 2 weeks ago

Selected Answer: B
Because of the databases I guess it is Lightsail.
upvoted 1 times
  hvtroller 1 month, 3 weeks ago

Selected Answer: B
Lightsail
> Create a website or application in just a few clicks. Automatically configure networking, access, and security environments.
s3 is for static web, the question include database
upvoted 2 times

Selected Answer: B
I think it should be B because the point of Lightsail is to quickly provision ready-to-use AWS resources instead of deeping into th technical details
of EC2, S3, DynamoDB etc.
upvoted 1 times

Selected Answer: C
C is correct
upvoted 1 times

Selected Answer: B
Description of Lightsail: Virtual Private Servers made easy! Everything you need to jumpstart your project on AWS with compute, storage, and
networking.
upvoted 1 times
Selected Answer: C
S3 is right
upvoted 1 times

Selected Answer: C
C is right
upvoted 1 times
  irfvan2 6 months ago

S3 is correct. Please pay attention to 'transfer' word. Lightsail used to build a web applications NOT to transfer them.
upvoted 3 times

Have you ever used either S3 or Lightsail?
upvoted 2 times
  nklee529 7 months ago

Selected Answer: C
because the keyword is to transfer a small website and database to the cloud, which mean S3 is more appropriate service in cloud
upvoted 2 times
  nklee529 7 months ago

guys i think the question keyword is -> to transfer a small website and database
so meaning to transfer to S3 in cloud
upvoted 3 times
  jimmy0000 8 months, 4 weeks ago

Selected Answer: B
Key words: "small" , "insufficient expertise"
upvoted 2 times
  Arjuna_Anuradha 10 months, 2 weeks ago

Selected Answer: B
Answer is 'B'.
upvoted 1 times
  Tyron1711 10 months, 3 weeks ago

Selected Answer: B
I thought s3 is for static websites only ?? this says it needs a database as well. Surely it is lightsail then
upvoted 6 times

Please see below link - Amazon S3 can be used as target for AWS DMS service to migrate any database.
https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.S3.html
upvoted 1 times
A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each
application.
What can the company do to meet this requirement?
A. Set up invoiced billing.
B. Use AWS Artifact.
C. Set budgets in Cost Explorer.
D. Create cost allocation tags.
Correct Answer: C

D (88%) 13%

Selected Answer: D
Tricky question again :
https://www.cloudzero.com/blog/aws-budgets-vs-cost-
explorer#:~:text=AWS%20cost%20tool.-,What%20Are%20The%20Differences%20Between%20AWS%20Budgets%20And%20Cost%20Explorer,costs
%20and%20forecast%20future%20spending.
"It’s also not possible to create custom budgets directly from AWS Cost Explorer"
upvoted 1 times
  OliverBd 1 week, 2 days ago

Selected Answer: D
It is D
upvoted 1 times

Selected Answer: C
C. Yes, cost allocation tags (D) are relevant here but those tags are just labels. To pool that data and run analytics, you'll need to create a budget in
Cost Explorer.
upvoted 2 times

Selected Answer: D
D is correct
upvoted 3 times

Selected Answer: D
d is right
upvoted 2 times

Selected Answer: D
Should be D
upvoted 3 times

answer should be D
upvoted 3 times
  B2022 3 months ago

sorry, I take it back, the budget setting is not in cost explorer. agree D
upvoted 3 times
  B2022 3 months ago

the question is a bit tricky, if it is to Monitor the cost against the budget,then answer C might be right.
upvoted 2 times

You can not create budgets in Cost Explorer, so it has to be D
upvoted 1 times

Selected Answer: D
DDD!~!
upvoted 2 times
  zoeyaj 3 months ago

Selected Answer: D
You can use tags to organize your resources, and cost allocation tags to track your AWS costs on a detailed level. You can apply tags that represent
business categories (such as cost centers, application names, or owners) to organize your costs across multiple services.
upvoted 2 times
  zoeyaj 3 months, 1 week ago

I think it's D
upvoted 3 times
Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?
A. Vertical scaling
B. Manual failure recovery
C. Testing recovery procedures
D. Changing infrastructure manually
Correct Answer: C
Reference:

C (100%)
  aprendiendo Highly Voted  1 year, 1 month ago

C. Testing recovery procedures
Reliability
Design Principles
upvoted 11 times
  JohnO1971 Highly Voted  1 year, 2 months ago

No, answer is C. If you follow the link supplied, you will find it mentioned.
upvoted 7 times
  JA2018 Most Recent  2 weeks, 1 day ago

Selected Answer: C
agreed
upvoted 1 times
  seaninwa 8 months, 2 weeks ago

There is no dependability pillar, it's reliability so why are they using the wrong word even though it's essentially the same meaning. Just use the
reliability word, wtf.
upvoted 3 times
  aboeyunus 1 year, 1 month ago

C is correct
Reliabilty
Test recovery procedures - Use automation to simulate different failures or to recreate
scenarios that led to failures before
upvoted 4 times
  aprendiendo 1 year, 1 month ago

Reliability
Design Principles
upvoted 4 times
  Ting0707 1 year, 2 months ago

This is B
upvoted 2 times
  MisooB 1 year, 1 month ago

"Horizontal" scaling is what you ment
upvoted 1 times
  Nancy_kk 1 year, 1 month ago

If B is Automatically recover from failure will be correct, but the option B is manual failure recovery which is incorrect.
upvoted 2 times
A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database
software.
Which AWS service can be used to accomplish this?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift
Correct Answer: B
Reference:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/SQLtoNoSQL.html

B (100%)
  b_d Highly Voted  1 year, 2 months ago

Yes, it's B - DynamoDB.
upvoted 8 times

Selected Answer: B
https://aws.amazon.com/dynamodb/features/
upvoted 1 times
  aman_aneja 3 days, 7 hours ago

Selected Answer: B
https://aws.amazon.com/dynamodb/features/
upvoted 1 times
  wkj 3 months ago

B - DynamoDB
upvoted 1 times

B is correct
upvoted 3 times
  jpush 1 year, 1 month ago

B - DynamoDB.
upvoted 3 times
Which task is an AWS responsibility when a workload is running in Amazon RDS?
A. Creating the database table
B. Updating the database schema
C. Installing the database engine
D. Dropping the database records
Correct Answer: C

C (100%)

C. AWS is responsible for managing RDS database engine
upvoted 1 times

Selected Answer: C
Agreed, AWS is responsible for managing the RDS database engine.
upvoted 1 times

i think its dropping the DB records, installing the DB enging is AWS for RDS as its fully managed by them
upvoted 1 times

i take it back,, i was thinking of customer responsibility.. Q is right, AWS should install DB engin
upvoted 1 times
A development team wants to publish and manage web services that provide REST APIs.
A. AWS App Mesh
B. Amazon API Gateway
C. Amazon CloudFront
D. AWS Cloud Map
Correct Answer: B

B (100%)
  Lorber 3 weeks, 6 days ago

Selected Answer: B
Answer is B
upvoted 1 times
  vichu0308 2 months, 2 weeks ago

Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any
scale. So its B
upvoted 4 times
A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove
inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.
Which AWS service should the company use to build this capability?
A. Amazon SageMaker
B. Amazon Textract
C. Amazon Rekognition
D. Amazon Comprehend
Correct Answer: D

C (100%)
  myan2492 Highly Voted  1 month ago

C. Rekognition
Amazon Rekognition
Automate your image and video analysis with machine learning
Amazon Comprehend
Derive and understand valuable insights from text within documents
upvoted 5 times
  Blimpy 1 week, 1 day ago

100% its explained here https://youtu.be/fnFpE6UEd_I
upvoted 1 times
  JA2018 Most Recent  1 month, 1 week ago

Selected Answer: C
Agreed, please refer to: https://aws.amazon.com/rekognition/
upvoted 1 times
  ArvinShen 1 month, 2 weeks ago

I also believe the correct answer is C.
Answer D is wrong because Amazon Comprehend is to analyze texts and not photos (Refer: https://aws.amazon.com/comprehend/)
upvoted 2 times
  angelaben 2 months, 1 week ago

vote D
https://docs.aws.amazon.com/comprehend/latest/dg/what-is.html
using Amazon Comprehend you can search social networking feeds for mentions of products or scan an entire document repository for key
phrases
upvoted 1 times

Selected Answer: C
Answer is C, The question is the exact scenario when Rekognition should be used.
upvoted 1 times

Selected Answer: C
c is correct
upvoted 1 times

Selected Answer: C
C is correct
upvoted 1 times

Selected Answer: C
Amazon Rekognition enables your applications to confirm user identities by comparing their live image with a reference image.
upvoted 1 times
  geodfg 3 months, 1 week ago
Selected Answer: C
Comprehend is about text, the question refer to inappropriate Photos,
i think correct is Rekognition
upvoted 1 times

Selected Answer: C
https://docs.aws.amazon.com/rekognition/latest/dg/procedure-moderate-images.html
upvoted 1 times
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
B. Database software patches
C. Operating system patches
D. Operating system installations.
Correct Answer: D

D (75%) B (25%)
  dark_cherrymon 1 week ago

Selected Answer: D
D, no such thing as database software patch
upvoted 1 times

Selected Answer: D
vot for D
upvoted 1 times
  ShoobyDooby 2 months, 1 week ago

i thought OS patches is AWS responsibility and Guest OS patches is customer responsibility. confused.
upvoted 1 times

Selected Answer: D
When you choose to use EC2 for your database, you first have to provision the EC2 instance, which means you will use an AMI, containing the OS
itself which is then installed by AWS to the EC2. All the other tasks are your responsibility.
upvoted 4 times

No correct answer here! : https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html
upvoted 1 times
  pekalyok 2 months, 1 week ago

there was non a single word in the question about RDS.
upvoted 2 times

Selected Answer: B
i guess
upvoted 2 times
A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated.
The data needs to be available for retrieval within seconds.
Which S3 storage class meets these requirements MOST cost-effectively?
A. S3 Standard
B. S3 One Zone-Infrequent Access (S3 One Zone-IA)
C. S3 Standard-Infrequent Access (S3 Standard-IA)
D. S3 Glacier
Correct Answer: A

C (73%) B (18%) 9%

Selected Answer: A
Another key statement is "The data needs to be available for retrieval within seconds" - Does this not imply highly available? Only S3 standard is
99.99% available while the other options leave more risk to being unavailable for retrieval
upvoted 1 times

https://aws.amazon.com/s3/storage-classes/
upvoted 1 times

Selected Answer: C
Agreed, check this out: https://aws.amazon.com/s3/storage-classes/?trk=67bd8f28-3315-4e58-8488-
8cd82ecb9cbc&sc_channel=ps&s_kwcid=AL!4422!3!596115621492!p!!g!!amazon%20s3&ef_id=CjwKCAjw2OiaBhBSEiwAh2ZSP5GrvVvKEwQRLgRvz-
wZmpDqyvBO4CHtQu-abwSq6dGpMqPZlfIRYxoCvocQAvD_BwE:G:s&s_kwcid=AL!4422!3!596115621492!p!!g!!amazon%20s3
S3 Standard-IA is for data that is accessed less frequently, but requires rapid access when needed. S3 Standard-IA offers the high durability, high
throughput, and low latency of S3 Standard, with a low per GB storage price and per GB retrieval charge. This combination of low cost and high
performance make S3 Standard-IA ideal for long-term storage, backups, and as a data store for disaster recovery files. S3 Storage Classes can be
configured at the object level and a single bucket can contain objects stored across S3 Standard, S3 Intelligent-Tiering, S3 Standard-IA, and S3 One
Zone-IA. You can also use S3 Lifecycle policies to automatically transition objects between storage classes without any application changes.
upvoted 2 times

Torn between C and D.
S3 Glacier INSTANT retrieval can also be chosen and it is much more cost effective than Standard IA BUT obviously the choice is just "S3 Glacier"
w/o the word "instant" so.. I don't know lol https://aws.amazon.com/s3/pricing/
upvoted 1 times

C
S3 Standard-IA — Amazon S3 stores the object data redundantly across multiple geographically separated Availability Zones (similar to the S3
Standard storage class). S3 Standard-IA objects are resilient to the loss of an Availability Zone. This storage class offers greater availability and
resiliency than the S3 One Zone-IA class.
S3 One Zone-IA — Amazon S3 stores the object data in only one Availability Zone, which makes it less expensive than S3 Standard-IA. However,
the data is not resilient to the physical loss of the Availability Zone resulting from disasters, such as earthquakes and floods. The S3 One Zone-IA
storage class is as durable as Standard-IA, but it is less available and less resilient.
upvoted 3 times

Selected Answer: C
c is correct
upvoted 2 times
  face1 2 months, 3 weeks ago

C is correct. Amazon S3 Standard-Infrequent Access (S3 Standard-IA) S3 Standard-IA is for data that is accessed less frequently, but requires rapid
access when needed.
upvoted 1 times

Selected Answer: C
c is correct
upvoted 1 times
  HarryZ 2 months, 3 weeks ago
C is correct. Price is $0.01 per GB. It is for re creatable infrequent access data that needs milliseconds access
upvoted 1 times

Selected Answer: C
c is the ans
upvoted 1 times

I will go with C. Key word critical data can't be recreated imo means it needs to be stored in multiple AZ's hence it can't take the risk to loos data. It
also need milliseconds access.
https://aws.amazon.com/getting-started/hands-on/getting-started-using-amazon-s3-glacier-storage-classes/?trk=gs_card
upvoted 1 times

Selected Answer: C
S3 Standard-IA is for data that is accessed less frequently, but requires rapid access when needed
upvoted 2 times

Anyone know the answer to this question? I'm leaning towards IA Standard since data is irreplaceable but not sure. All the choices seem like they
can work.
upvoted 1 times

Selected Answer: B
https://aws.amazon.com/s3/pricing/
S3 One Zone - Infrequent Access** - For re-createable infrequently accessed data that needs millisecond access
upvoted 2 times

I change my answer to A. Key word is " can't be recreated". While we can access S3 One Zone in millisecond, it's for re-creatable data.
upvoted 2 times

Im also under the impression A may be correct. Another key statement is "The data needs to be available for retrieval within seconds" - Does
this not imply highly available? Only S3 standard is 99.99% available while the other options leave more risk to being unavailable for retrieval
upvoted 1 times

S3 Standard IA is also high available - same as S3 standard but it offers a better price for infrequently accessed data - please see link
provided below by Blimpy
upvoted 1 times

https://aws.amazon.com/s3/storage-classes/
upvoted 1 times
An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload
increase in a cost- effective manner.
Which AWS Cloud features will help the company meet this requirement? (Choose two.)
A. Cross-Region workload deployment
B. Pay-as-you-go pricing
C. Built-in AWS CloudTrail audit capabilities
D. Auto Scaling policies
E. Centralized logging
Correct Answer: BD

BD (100%)

B+D
auto scaling, pay as you go
upvoted 1 times
  JackFish 2 months ago

Selected Answer: BD
BD – Pay-as-you-go pricing is great for a cost-effective manner, and with auto scaling policies, customer can define a scaling policy that performs
the optimal scaling action, such as change in capacity by value or percentage, or setting exact capacity values.
Cross-Region workload deployment is not fitting for the question (there is nothing about globalisation).
There is no request for monitoring user activity, so CloudTrail is also incorrect.
There is nothing about checking any statuses or collecting logs, so there is no need for centralized logging.
upvoted 3 times
Which AWS service helps developers use loose coupling and reliable messaging between microservices?
A. Elastic Load Balancing
B. Amazon Simple Notification Service (Amazon SNS)
D. Amazon Simple Queue Service (Amazon SQS)
Correct Answer: D

D (100%)

D. simple queue service
What is Amazon SQS used for?
Amazon SQS is a message queue service used by distributed applications to exchange messages through a polling model, and can be used to
decouple sending and receiving components.
upvoted 1 times

Selected Answer: D
D - Amazon SQS is a fully managed message queuing for microservices, distributed systems, and serverless applications.
Elastic Load Balancing automatically distributes incoming application traffic; it doesn’t help with developer work in this context.
Amazon SNS is used for email and notifications to users, not for developers.
Amazon CloudFront is a content delivery network (CDN) service built for securely delivering content to customers. It is not used for loose coupling
nor microservices.
upvoted 4 times
A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The
company must abide by regional regulatory requirements.
Which AWS service or program should the company use to determine which AWS services meet the regional requirements?
A. AWS Audit Manager
B. AWS Shield
C. AWS Compliance Program
D. AWS Artifact
Correct Answer: C

C (67%) D (33%)
  ChizzyO 1 day, 20 hours ago

The correct answer is D - AWS Artifact
From AWS skillbuilder: "If you run software that deals with consumer data in the EU, you would need to make sure that you're in compliance with
GDPR, or if you run healthcare applications in the US you will need to design your architectures to meet HIPAA compliance requirements. "
"One place you can access these documents is through a service called AWS Artifact. With AWS Artifact, you can gain access to compliance reports
done by third parties who have validated a wide range of compliance standards. Check out the AWS Compliance Center in order to find compliance
information all in one place. It will show you compliance enabling services as well as documentation like the AWS Risk and Security Whitepaper,
which you should read to ensure that you understand security and compliance with AWS. "
upvoted 1 times
  Angevin 6 days, 15 hours ago

The question is "Which Service" Artifact is a service and AWS compliance Program is a program so it is not a service. Answer D
upvoted 1 times
  SUPERHEROGEEK 2 days, 21 hours ago

It says "which service or program"
upvoted 1 times
  Munwalinwali 2 weeks, 2 days ago

Selected Answer: C
https://aws.amazon.com/compliance/programs/ https://aws.amazon.com/artifact/
upvoted 2 times

Selected Answer: C
At first I thought it was D but after comparing those two documentations I think the correct answer is C
https://aws.amazon.com/compliance/programs/
https://aws.amazon.com/artifact/
upvoted 3 times

Selected Answer: D
I think D makes more sense, given the question's context.
From: https://aws.amazon.com/artifact/
AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security
and compliance reports and select online agreements.
upvoted 2 times

Selected Answer: C
not sure
upvoted 1 times

Selected Answer: C
In my opinion it is C – AWS Compliance Program, and let me explain why.
upvoted 3 times

It is a tricky question, both AWS Artifact and AWS Compliance Program are correct for the compliance topic. But the main clue in the question is
“DETERMINE which AWS services meet the regional requirements”.
AWS Compliance program is described as “helping customers to understand the robust controls in place at AWS to maintain security and
compliance in the cloud.”, so the understanding if they meet the requirements before doing anything in AWS:
https://aws.amazon.com/compliance/programs/
AWS Artifact is used to manage and accept all required agreements for IAM roles for members of the organization, as well as monitor for new
future agreements, but that is after acknowledging which services are already running: https://www.youtube.com/watch?v=rss0CJ0bw40
So with that knowledge, from the question I understand that the customer wants to check which services meet the regional requirements before
doing any action, so C is more fitting in that scenario.
upvoted 6 times

Selected Answer: C
C is correct. The key word is "which AWS services meet the regional requirements?" In this case, it refers to GDPR for Europe.
Inherit the most comprehensive compliance controls with AWS. AWS supports more security standards and compliance certifications than any
other offering, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-2, and NIST 800-171, helping customers satisfy compliance
requirements for virtually every regulatory agency around the globe.
upvoted 3 times

Selected Answer: D
AWS Artifact
upvoted 1 times

Selected Answer: D
I think it's rather D than C.
upvoted 2 times

The correct answer is D! https://aws.amazon.com/artifact/
Key wording "AWS Artifact is your go-to, central resource for compliance-related information that matters to you". The compliance Program is
related to AWS compliance's not the user's business needs.
upvoted 4 times

Selected Answer: C
correct answer compliance program, to comply to regional regulations , https://aws.amazon.com/compliance/programs/
upvoted 2 times
  Moezey 2 months, 3 weeks ago

Selected Answer: D
Artifacts
upvoted 2 times
A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.
A. Amazon Cognito
B. AWS Security Hub
C. AWS Shield
D. AWS WAF
Correct Answer: A

A (100%)

Selected Answer: A
Agreed, from what is published on https://aws.amazon.com/cognito/details/, Amazon Cognito makes more sense for this question.
upvoted 1 times

Selected Answer: A
A – Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.
AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated
remediation. Not relevant.
AWS Shield and AWS WAF are for threat protection (Shield for DDoS, WAF for SQL injections), not relevant to the question.
upvoted 4 times
A company needs an Amazon EC2 instance for a rightsized database server that must run constantly for 1 year.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Standard Reserved Instance
B. Convertible Reserved Instance
C. On-Demand Instance
D. Spot Instance
Correct Answer: A

A (88%) 13%

Selected Answer: A
for sure A
upvoted 2 times

Selected Answer: A
From: https://docs.aws.amazon.com/whitepapers/latest/cost-optimization-reservation-models/standard-vs.-convertible-offering-classes.html
Standard Reserved Instances typically provide the highest discount levels. One-year Standard Reserved Instances provide a similar discount to
three-year Convertible Reserved Instances.
upvoted 2 times

Selected Answer: A
I think it's A, keyword is MOST cost-effective. In the question's context, "rightsized" means to me you likely won't change your instance in the
following year -> standard reserved instance. Convertible reserved instances are about changing resources dynamically when required.
Additionally:
"Standard Reserved Instances typically provide the highest discount levels. One-year Standard Reserved Instances provide a similar discount to
three-year Convertible Reserved Instances."
https://docs.aws.amazon.com/whitepapers/latest/cost-optimization-reservation-models/standard-vs.-convertible-offering-classes.html
upvoted 2 times
  malfoys 2 months, 2 weeks ago

Selected Answer: A
Standard Reserved Instances typically provide the highest discount levels. One-year Standard Reserved Instances provide a similar discount to
three-year Convertible Reserved Instances.
upvoted 1 times
  face1 2 months, 3 weeks ago

B is correct -> keyword rightsized
upvoted 1 times
  lrbk 2 months, 4 weeks ago

Selected Answer: B
rightsized -> B
upvoted 1 times
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2
instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege.
Which AWS service or feature should the company use to enforce this principle?
A. Security groups
B. AWS Shield
D. AWS Direct Connect gateway
Correct Answer: A

A (100%)
  JackFish Highly Voted  2 months ago

Selected Answer: A
A – Security groups control the traffic that is allowed to reach and leave the resources that it is associated with.
AWS Shield is for DDoS protection.
AWS Global Accelerator is for global reach.
AWS Direct Connect is a cloud service that links your network directly to AWS to deliver consistent, low-latency performance.
upvoted 7 times
  nder Most Recent  1 week, 2 days ago

Selected Answer: A
Security groups act as a firewall at the INSTANCE level
upvoted 1 times
A company's web application requires AWS credentials and authorizations to use an AWS service.
Which IAM entity should the company use as best practice?
A. IAM role
B. IAM user
C. IAM group
D. IAM multi-factor authentication (MFA)
Correct Answer: A

A (100%)

Selected Answer: A
upvoted 2 times
A company is creating a document that defines the operating system patch routine for all the company's systems.
Which AWS resources should the company include in this document? (Choose two.)
A. Amazon EC2 instances
B. AWS Lambda functions
C. AWS Fargate tasks
D. Amazon RDS instances
E. Amazon Elastic Container Service (Amazon ECS) instances
Correct Answer: AD

AE (55%) AD (18%) A (18%) 9%

Selected Answer: AE
AE (and NOT AD)
You have to patch ECS system yourself, in RDS AWS do it (you just have to allow/plan it on maintenance period)
https://aws.amazon.com/blogs/industries/automate-patching-by-replacing-amazon-ecs-container-instances/
upvoted 1 times

SERVERLESS: FARGATE,LAMBDA,ECS SO ANSWER IS AD
upvoted 1 times

Selected Answer: AD
In my opinion the answer is AD, as per this documentation here:
Major version upgrades can contain database changes that are not backward-compatible with existing applications. As a result, Amazon RDS
doesn't apply major version upgrades automatically; you must manually modify your DB instance.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.MySQL.html
but idk lol

upvoted 1 times
  Nobody71 4 weeks ago

Selected Answer: AE
https://docs.aws.amazon.com/AmazonECS/latest/bestpracticesguide/security-shared.html
upvoted 3 times

https://binx.io/2022/01/04/how-does-the-aws-shared-responsibility-model-work/
upvoted 1 times

Selected Answer: AE
A is obvious, you need to patch EC2 instances. E because you have to manage the EC2 instance used by the containers.
upvoted 2 times
  Tigur 2 months ago

Selected Answer: AD
'Amazon RDS) is a collection of managed services' - https://aws.amazon.com/rds/
'Amazon Aurora is fully managed by RDS' - https://www.amazonaws.cn/en/rds/aurora/
RDS is not 'fully' managed, it is a managed instance. Therefore answer is AD

upvoted 1 times

Selected Answer: A
Question is wrong, only A is the correct one.
upvoted 2 times
This question should only apply to A there rest of the services here a fully managed! This should be removed or changed to fit.
upvoted 1 times

RDS is a fully managed system, no need to patch!
upvoted 2 times

Selected Answer: AC
going for AC
upvoted 1 times

changed my mind. patch routine, existing answer can fit, AWS might want to know how to patch RDS based on client input
upvoted 3 times

I'm doubtful for D, RDS instances. Aren't RDS instances fully managed by AWS?
upvoted 4 times

same doubt, but thinking that the patch routine document is provided to AWS for the routine of patching given some dependcy of DB
managed instance (eg. what and when to start/stop the instance), so it could be an answer.
upvoted 1 times
Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?
A. Security groups
B. Amazon Route 53
D. Amazon VPC
Correct Answer: D

A (100%)
  shankarece Highly Voted  3 months ago

Selected Answer: A
A security group acts as a virtual firewall for your EC2 instances to control incoming and outgoing traffic. Inbound rules control the incoming traffic
to your instance, and outbound rules control the outgoing traffic from your instance. When you launch an instance, you can specify one or more
security groups.
upvoted 13 times

I put A as well.
upvoted 4 times

Selected Answer: A
A
Security groups allow or deny specific inbound and outbound traffic at the resource level (such as an EC2 instance).
When you launch an instance, you can associate it with one or more security groups.
upvoted 1 times
  l2eena 4 days, 18 hours ago

A is correct. VPC is a service.
"Amazon Virtual Private Cloud is a commercial cloud computing service that provides users a virtual private cloud, by “provisioning a logically
isolated section of Amazon Web Services Cloud”. Enterprise customers are able to access the Amazon Elastic Compute Cloud over an IPsec based
virtual private network."
upvoted 1 times

ACTUALLY OUTGOING IS FREE, YOU CAN'T CONTROL WITH SECURITY GROUPS. BUT I THINK AS PER CCP SECURITY GROUPS IS ANSWER.
upvoted 1 times
  MayneE 3 weeks, 2 days ago

Instance level = Security Groups
Subnet level = VPC
upvoted 2 times

Instance level = security group
subnect level = NACL, not VPC
upvoted 2 times

forgot to add, answer is A
upvoted 1 times

The answer is A,!!! the question is about the EC2 Instance not the VPC! Please correct
upvoted 3 times
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The
company also wants general architectural guidance as teams build and test new applications.
Which AWS Support plan will meet these requirements at the LOWEST cost?
B. AWS Developer Support
D. AWS Enterprise Support
Correct Answer: B

B (100%)

Developer support
access to technical support during business hours.
upvoted 1 times

Selected Answer: B
Agreed, reference URL: https://www.amazonaws.cn/en/support/compare-plans/
upvoted 2 times

Selected Answer: B
We recommend AWS Developer Support if you are testing or doing early development on AWS and want the ability to get technical support during
business hours as well as general architectural guidance as you build and test.
In addition to enhanced technical support and architectural guidance, Developer Support provides access to documentation and forums, AWS
Trusted Advisor, and AWS Personal Health Dashboard.
upvoted 3 times
A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS.
A. AWS Lambda
B. Amazon Route 53
Correct Answer: B

B (100%)

Route 53: DNS: Domain name service (53= port 53)
upvoted 1 times

Selected Answer: B
B – Route 53 is responsible for domain names.
upvoted 1 times
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service
limits, fault tolerance, and security.
Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
D. AWS Service Catalog
Correct Answer: C

C (100%)
  JackFish Highly Voted  2 months ago

C – AWS Trusted Advisor is used to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance,
service limits, fault tolerance, and security.
AWS Shield is for DDoS protection.
AWS WAF is for SQL injection protection.
AWS Service Catalog is for managing services.

upvoted 6 times

Selected Answer: C
All requirements listed as benefits on this page:
upvoted 1 times

C. trusted advisor
five categories: cost, performance, service limits, fault tolerance, and security.
upvoted 2 times
Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?
A. AWS Cloud9
B. AWS CodeStar
C. AWS Cloud Map
D. AWS X-Ray
Correct Answer: D

D (100%)

Selected Answer: D
agreed
upvoted 1 times
  satnandi 11 months, 2 weeks ago

D correct
upvoted 2 times
  GeO15 11 months, 2 weeks ago

D: https://aws.amazon.com/xray/?nc2=type_a
upvoted 2 times
Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?
A. Pay-as-you-go pricing
C. Global reach
D. Economies of scale
Correct Answer: A

D (100%)
  TAvenger Highly Voted  1 year, 1 month ago

upvoted 11 times
  MayneE Most Recent  3 weeks, 2 days ago

D
upvoted 2 times

D. economies of scale
because pay as you go = on demend
upvoted 1 times

Selected Answer: D
D is correct
upvoted 2 times

Selected Answer: D
D is right
upvoted 2 times

Selected Answer: D
economies of scale
upvoted 3 times
  akosigengen 3 months ago

D Economies Of Scale
upvoted 3 times

Selected Answer: D
upvoted 2 times

Selected Answer: D
D is correct
upvoted 1 times
  Maddy_123 10 months, 1 week ago

Benefit from massive economies of scale – By using cloud computing, you can achieve a lower variable cost than you can get on your own. Because
usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher economies of scale, which
translates into lower pay as-you-go prices.
upvoted 2 times
  fedeX 1 year, 2 months ago

E is correct
upvoted 2 times

I suppose you wanted to say
upvoted 3 times
Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads,
and data that is stored in Amazon S3?
A. AWS Shield
B. AWS Firewall Manager
C. Amazon GuardDuty
D. Amazon Inspector
Correct Answer: C

C (100%)

Selected Answer: C
https://aws.amazon.com/guardduty/features/
upvoted 1 times

GuardDuty == threat detection
upvoted 1 times

Answer is "C" Amazon GuardDuty
upvoted 1 times
  MSAzureguy 1 month, 3 weeks ago

C .Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers
detailed security findings for visibility and remediation.
https://aws.amazon.com/guardduty/
upvoted 3 times
Which AWS service can a company use to store and manage Docker images?
A. Amazon DynamoDB
B. Amazon Kinesis Data Streams
C. Amazon Elastic Container Registry (Amazon ECR)
Correct Answer: C

C (100%)
  ACLOUD_PRACTITIONER 5 days, 11 hours ago

C is correct. Amazon Elastic Container Registry (ECR) is a highly available and secure private container repository that makes it easy to store and
manage your Docker container images, encrypting and compressing images at rest so they are fast to pull and secure.
upvoted 1 times

C. Container
upvoted 2 times

Selected Answer: C
Agreed, Check out the following resources:
1.
https://aws.amazon.com/docker/#:~:text=AWS%20provides%20Amazon%20Elastic%20Container,and%20quickly%20retrieving%20Docker%20imag
es.
2. https://aws.amazon.com/ecr/
upvoted 1 times
A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report
also must identify operating system vulnerabilities on those instances.
Which AWS service or feature should the company use to meet this requirement?
B. Security groups
C. Amazon Macie
D. Amazon Inspector
Correct Answer: D
  bichivega 4 days, 10 hours ago

no lo tengo claro, creo que quizas el B, porque habla de EC2
upvoted 1 times

D. AWS inspector
Amazon Inspector is an automated vulnerability management service that continually scans
AWS workloads for software vulnerabilities and unintended network exposure.
upvoted 2 times

To locate unintended resource access and vulnerabilities, you need to choose Option D.
From: https://www.linkedin.com/pulse/aws-trusted-advisor-vs-inspector-what-difference-netcom-learning?trk=organization-update-
content_share-article
AWS Inspector is a vulnerability management tool that automatically analyzes AWS workloads to find accidental network exposure and software
vulnerabilities. It provides a detailed list of security issues and recommendations to fix them. AWS Inspector helps users unite their vulnerability
management services for Amazon EC2 and ECR into a single managed solution. Users are also provided with an accurate Inspector risk score
helping them prioritize their vulnerable resources.
upvoted 2 times
A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database.
Data must be accessible from the AWS Region that is closest to the user.
What should the company do to meet these data storage requirements with the LEAST amount of operational overhead?
A. Use Amazon EC2 in multiple Regions to host separate databases
B. Use Amazon RDS cross-Region replication
C. Use Amazon DynamoDB global tables
D. Use AWS Database Migration Service (AWS DMS)
Correct Answer: C

C (100%)
  EricSono Highly Voted  1 year, 1 month ago

C is ok
https://aws.amazon.com/tw/dynamodb/global-tables/
upvoted 6 times
  pub Highly Voted  1 year, 2 months ago

IMO, the answer is B
upvoted 5 times
  weihong_gasiapac 1 year ago

B is wrong because RDS replication is applied when there is too many read and write request that will affect the performance of the RDS. We
can use the replicated RDS for read purpose.
upvoted 8 times

C. DynamoDB:
Global tables build on global Amazon DynamoDB footprint to provide you with fully managed, multi-region, multi-active database . Global tables
replicate your DynamoDB tables automatically across your choice of AWS regions
upvoted 3 times

Selected Answer: C
From: https://aws.amazon.com/dynamodb/global-tables/
Global tables build on the global Amazon DynamoDB footprint to provide you with a fully managed, multi-Region, and multi-active database that
delivers fast, local, read and write performance for massively scaled, global applications. Global tables replicate your DynamoDB tables
automatically across your choice of AWS Regions.
upvoted 2 times
  Cyoung82 1 month, 2 weeks ago

C. I think the key word or words in this question are global and globally. That indicates to me DynamoDB Global Tables.
upvoted 2 times

Selected Answer: C
C is correct
upvoted 4 times
Which of the following are economic advantages of the AWS Cloud? (Choose two.)
A. Increased workforce productivity
B. Decreased need to encrypt user data
C. Manual compliance audits
D. Simplified total cost of ownership (TCO) accounting
E. Faster product launches
Correct Answer: DE

AE (58%) AD (42%)

Selected Answer: AE
A&E
D is incorrect because it uses the word "Simplified" instead of the word "Reduced".
https://aws.amazon.com/economics/
upvoted 1 times

Selected Answer: AE
D is wrong
upvoted 1 times

Selected Answer: AE
An economic advantage is a benefit that can be quantified, so D is wrong
A & E are quantifiable
upvoted 1 times
  IuriiUA 1 month ago

Selected Answer: AE
A and E
E: Business Agility: Deploying new features/ applications faster and reducing errors
Example: Launch of new products 75% faster.
upvoted 4 times
  Blimpy 1 week ago

After some thought I agree with AE. There is no option to mention TCO reduction (which would have been right)
upvoted 1 times

An economic advantage is a benefit that can be quantified, so D is wrong
upvoted 1 times

A, E
The value of cloud extends beyond Total Cost of Ownership (TCO) reduction. AWS customers also see significant improvements in other areas,
including staff productivity, operational resilience and business agility.
upvoted 1 times

A and D, typo
upvoted 1 times
  Ish_96 1 month, 2 weeks ago

Personally I would say A and E
upvoted 1 times

I belive A, D, E all three are correct. Apart from what my peers mentioned, E represents Business Agility which is also mentioned in the website
upvoted 2 times
  jg_85 2 months ago

Selected Answer: AD
based on https://aws.amazon.com/economics/ it must be A and D
upvoted 1 times

According to the link provided above A, D and E (business agility) are all correct
upvoted 1 times

Selected Answer: AD
AD is correcte
upvoted 2 times

IMO it's AD. Word for Word TCO & staff productivity..
upvoted 2 times

Same link specifies business agility so E is also correct
Deploying new features/ applications faster

upvoted 1 times
  Multi_Cloud 2 months, 3 weeks ago

A simple google search would let you know the answer is A&E
upvoted 2 times

Selected Answer: AD
a and d
upvoted 2 times
Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?
A. Patch management controls
B. Awareness and training controls
C. Physical and environmental controls
D. Configuration management controls
Correct Answer: A

C (93%) 7%
  Nag1900 Highly Voted  5 months, 1 week ago

This is testing your English reading
upvoted 27 times
  doctorreaper Highly Voted  1 year, 1 month ago

It's C, however it's worded very strangely. It's basically saying "AWS will take care of physical and environmental controls for you and you inherit
this right".
upvoted 12 times

Inherited Controls – Controls which a customer fully inherits from AWS.
Physical and Environmental controls

upvoted 1 times

upvoted 1 times
  jpush 1 month ago

There are too many wrong answers. C is clearly the correct answer, which makes me wonder why the handler picked A, which is clearly a shared
control, but not inherit.
upvoted 1 times

C. AWS responsibility
upvoted 1 times
  HarishRao 1 month, 1 week ago

Selected Answer: C
Check out: https://aws.amazon.com/compliance/shared-responsibility-model/ ("Inherited Controls" section)
* Physical and Environmental controls
upvoted 4 times
  marcshj 2 months ago

Selected Answer: C
From a similar question also in ExamTopics:
Which of the following operational controls do users completely inherit from AWS as part of the AWS shared responsibility model?
A. Security management of data center
B. Patch management
C. Configuration management
D. User and access management
The ExamTopics Answer is "A. Security management of data center".
upvoted 3 times

Selected Answer: C
C is correct
upvoted 1 times

Selected Answer: C
c is right
upvoted 1 times
This is a very strange question, I can see why people are baffled. I honestly don't think this would be in the exam worded this way. They shouldn't
be trying to trick out with word play, It's a test of knowledge not riddles.
upvoted 8 times

Selected Answer: C
C is right
upvoted 1 times

Selected Answer: C
Physical and Environmental controls
model/#:~:text=Inherited%20Controls%20%E2%80%93%20Controls%20which%20a%20customer%20fully%20inherits%20from%20AWS.&text=Sha
red%20Controls%20%E2%80%93%20Controls%20which%20apply,completely%20separate%20contexts%20or%20perspectives.
upvoted 3 times
  fabiand17 7 months, 1 week ago

Selected Answer: D
D is the right option. (AWS transfer to customer)
must be C only if say "Customer inherts from AWS." Is not the same
upvoted 1 times
  Venkat_uth 7 months, 3 weeks ago

Should be D
upvoted 1 times
  Jeetesh 10 months, 1 week ago

english is a main problem in these questions
upvoted 4 times
  MK474 11 months, 1 week ago

apply the logic of exclusion, so C is correct
upvoted 1 times

C is correct
upvoted 1 times
Which task is a customer's responsibility, according to the AWS shared responsibility model?
A. Management of the guest operating systems
B. Maintenance of the configuration of infrastructure devices
C. Management of the host operating systems and virtualization
D. Maintenance of the software that powers Availability Zones
Correct Answer: A

A (100%)

A.keyword
guest
upvoted 1 times

Selected Answer: A
its the guest operationg system that is controlled and maintained by the user
upvoted 1 times
A company needs to deliver new website features quickly in an iterative manner to minimize the time to market.
Which AWS Cloud concept does this requirement represent?
A. Reliability
B. Elasticity
C. Agility
Correct Answer: C

C (100%)

Speed = agility= quickly
upvoted 1 times

Selected Answer: C
quickly and iteratively = Agility
upvoted 3 times
A company wants to increase its ability to recover its infrastructure in the case of a natural disaster.
Which pillar of the AWS Well-Architected Framework does this ability represent?
C. Reliability
D. Security
Correct Answer: C

C (100%)
  satnandi Highly Voted  11 months, 2 weeks ago

C : The ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and
mitigate disruptions such as misconfigurations or transient network issues.
upvoted 5 times

Selected Answer: C
keyword - recover
upvoted 1 times

C. reliability
upvoted 1 times

Selected Answer: C
Recover from disaster = reliable system
upvoted 3 times
Which AWS service tracks API calls and user activity?
B. AWS Config
D. AWS CloudTrail
Correct Answer: D

D (100%)

Selected Answer: D
https://aws.amazon.com/cloudtrail/faqs/
upvoted 1 times

D. CloudTrail
upvoted 2 times
  Nguyen25183 1 month, 1 week ago

Its D. AWS CloudTrail. With AWS Cloudtrail you can tracks API Call and user activities.
upvoted 1 times
Which AWS service, feature, or tool uses machine learning to continuously monitor cost and usage for unusual cloud spending?
A. Amazon Lookout for Metrics
B. AWS Budgets
D. AWS Cost Anomaly Detection
Correct Answer: D

D (100%)

Selected Answer: D
D " AWS Cost Anomaly Detection is an AWS cost management feature that uses machine learning to continually monitor your cost and usage to
detect unusual spends."
ref
https://docs.aws.amazon.com/wellarchitected/latest/management-and-governance-guide/aws-cloud-financial-management-services-and-
tools.html
upvoted 2 times

D. AWS cost anomaly detection
--> detect and alert on any abnormal or sudden spend increases in your AWS account.
upvoted 1 times

Selected Answer: D
agreed
upvoted 1 times

Selected Answer: D
https://aws.amazon.com/aws-cost-management/aws-cost-anomaly-detection/faqs/
upvoted 1 times

Selected Answer: D
Correct answer. https://aws.amazon.com/aws-cost-management/aws-cost-anomaly-detection/
upvoted 2 times
A company deployed an application on an Amazon EC2 instance. The application ran as expected for 6 months in the past week, users have
reported latency issues. A system administrator found that the CPU utilization was at 100% during business hours. The company wants a scalable
solution to meet demand.
Which AWS service or feature should the company use to handle the load for its application during periods of high demand?
A. Auto Scaling groups
C. Amazon Route 53
D. An Elastic IP address
Correct Answer: C

A (100%)
  SH_Train Highly Voted  3 months ago

Selected Answer: A
AWS Auto Scaling monitors your application and automatically adds or removes capacity from your resource groups in real-time as demands
change.
upvoted 6 times

Selected Answer: A
I think its A
upvoted 1 times

Selected Answer: A
Reason for response is found in these two phrases:
"...the company wants a scalable solution to meet demand."
"...handle the load for its application during periods of high demand"
upvoted 2 times

AWS auto scaling --> verticle scaling: CPU, RAM
upvoted 1 times
  mightyemay 1 month, 2 weeks ago

Selected Answer: A
Ofc A.
upvoted 1 times

Selected Answer: A
It is scaling groups. Route 53 is dns..
upvoted 3 times

Selected Answer: A
it is definitely A
upvoted 2 times

Selected Answer: A
Indeed
upvoted 1 times
  pekalyok 2 months, 1 week ago

Selected Answer: A
I dont see any reason for C to be the answer as Auto Scaling is the solution for the mentioned problem in the question.
upvoted 2 times
Selected Answer: A
option a - ASG
upvoted 2 times
A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security
software as a service on AWS.
Where can the company purchase the security solution?
A. AWS Partner Solutions Finder
B. AWS Support Center
C. AWS Management Console
D. AWS Marketplace
Correct Answer: D

D (100%)
  ksiazezbajki 1 year ago

Selected Answer: D
D. AWS Marketplace
upvoted 4 times

D is correct
upvoted 4 times
A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for
processing. These transfers must occur daily over a dedicated connection.
A. AWS Backup
B. AWS DataSync
D. AWS Snowball
Correct Answer: B

C (57%) B (43%)

Selected Answer: C
DataSync doesn't offer a dedicated connection capability
upvoted 1 times

Selected Answer: C
C should be the answer.
AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS
upvoted 1 times

Selected Answer: C
Im slightly inclined towards C because it says "dedicated connection"
upvoted 2 times
  Asad_Elahi 1 month ago

Selected Answer: B
upvoted 1 times

C. AWS direct connection
keyword: dedicated connection
AWS Direct Connect enables you to establish a dedicated network connection between your network and one of the AWS Direct Connect locations.
upvoted 2 times
  Emiley 1 month, 1 week ago

Selected Answer: C
The answer is C because Data sync is a secure, online service that automates and accelerates moving data between on premises and AWS Storage
services. whereas Direct connect is a network service that provides an alternative to using the Internet to utilize AWS cloud services. In this scenario
the company wants to transfer the file for processing not storing C is the correct answer.
upvoted 4 times

Selected Answer: B
I am more inclined to choose B for the following reason:
AWS DataSync is a secure, online service that automates and accelerates moving data between on premises and AWS Storage services. DataSync
can copy data between Network File System (NFS) shares, Server Message Block (SMB) shares, Hadoop Distributed File Systems (HDFS), self-
managed object storage, AWS Snowcone, Amazon Simple Storage Service (Amazon S3) buckets, Amazon Elastic File System (Amazon EFS) file
systems, Amazon FSx for Windows File Server file systems, Amazon FSx for Lustre file systems, Amazon FSz for OpenZFS file systems, and Amazon
FSx for NetApp ONTAP file systems.
https://aws.amazon.com/datasync/
upvoted 1 times

Key Phrase: The company needs to securely transfer the data to AWS for processing
upvoted 2 times
  vadiminski_a 1 month, 1 week ago

Selected Answer: C
Direct Connect: Dedicated Connection from on prem to VPCs that are in the same region
upvoted 2 times
  Chooni 1 month, 2 weeks ago

C- Direct Connect is the correct answer
https://aws.amazon.com/getting-started/hands-on/connect-data-center-to-aws/faq/
upvoted 3 times

Q. Why should I connect my on-premises environment to AWS using Direct Connect?
AWS Direct Connect is a network service that provides an alternative to using the Internet to utilize AWS cloud services. AWS Direct Connect
enables customers to have low latency, secure and private connections to AWS for workloads which require higher speed or lower latency than
the internet.
upvoted 1 times
  DataEngineer_WideOps 1 month, 3 weeks ago

Selected Answer: B
I would choose AWS DataSync since Dedicated connection are not secured in transit, they asking for moving critical data securely.
upvoted 3 times

Selected Answer: B
B is correct. Key word is transfer data
C - connection from on prem.
upvoted 2 times

Selected Answer: B
Direct Connect part of DataSync. Check How It Works section. https://aws.amazon.com/datasync/
upvoted 2 times
  The_Cooler_King 2 months, 1 week ago

Selected Answer: B
AWS Data Sync sends critical data from on-prem to the cloud securely and quickly.
upvoted 2 times

Selected Answer: C
C. Keyword is "dedicated connection".
upvoted 1 times

B makes the most sense to me based on : https://aws.amazon.com/datasync/
upvoted 1 times
  bukkykenny2 2 months, 3 weeks ago

It is definitely B for transfers, because AWs direct connect provides an alternative to using the internet to utilize AWS cloud services.
upvoted 1 times

Selected Answer: C
C
For datasync to work, there must be a dedicated direct connect configuration btw your dc and aws.
upvoted 2 times
A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a
week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a
strong IT support team and does not need concierge support.
Which AWS Support plan will meet these requirements at the LOWEST cost?
B. AWS Developer Support
Correct Answer: D

C (100%)
  zoeyaj Highly Voted  3 months ago

Selected Answer: C
24/7 technical engineer, AWS Health, Contextual Guidance, Company had strong IT and doesn't need Concierge
upvoted 6 times
  Arvina Highly Voted  2 months, 4 weeks ago

Selected Answer: C
The answer should be C . 2 reasons
1. for Contextual review Business is required not enterprise
2. Also it doesn't need concierge which is mentioned in the question which straight away cancelled enterprise and the answer will be business
upvoted 5 times
  fviero Most Recent  6 days, 3 hours ago

Selected Answer: C
Who's providing "correct"answers dear lord. This is clearly C.
upvoted 2 times

B. business support (24/7 phone, web, chat)
upvoted 1 times

Selected Answer: C
Agreed
upvoted 1 times

Selected Answer: C
"does not need concierge support"
upvoted 1 times

Clearly C : https://aws.amazon.com/premiumsupport/plans/
upvoted 4 times

Selected Answer: C
C is right! does not need concierge support.!!!
upvoted 4 times

24/7 technical engineer, AWS Health, Contextual Guidance, Company had strong IT and doesn't need Concierge
upvoted 3 times
  Mikami88 3 months ago

The answer should be C. The question states concierge support is not required and that they only need contextual guidance.
aws.amazon.com/premiumsupport/plans/
upvoted 5 times
Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?
A. Amazon Athena
B. AWS Glue
C. Amazon S3
Correct Answer: B

B (100%)

Selected Answer: B
AWS Glue is another offering from AWS and is a serverless ETL (Extract, Transform, and Load) service on the cloud. It is fully managed, cost-effective
service to categorize your data, clean and enrich it and finally move it from source systems to target systems.
upvoted 1 times

Selected Answer: B
Aws Glue
as per doc " AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easier to discover, prepare, and combine data for
analytics, machine learning (ML), and application development."
Ref: https://aws.amazon.com/it/what-is/etl/#:~:text=AWS%20Glue%20is%20a%20fully,ML)%2C%20and%20application%20development.
upvoted 1 times

B. Glue == stick 3 things together: Extract, transform, load (ETL)
upvoted 2 times

Selected Answer: B
https://ahana.io/answers/the-differences-between-aws-athena-and-aws-glue-ahana/
AWS Glue is also serverless, but more of an ecosystem of tools to allow you to easily do schema discovery and ETL with auto-generated scripts that
can be modified either visually or via editing the script. The most commonly known components of Glue are Glue Metastore and Glue ETL. Glue
Metastore is a serverless hive compatible metastore which can be used in lieu of your own managed Hive. Glue ETL on the other hand is a Spark
service which allows customers to run Spark jobs without worrying about the configuration, manageability and operationalization of the underlying
Spark infrastructure. There are other services such as Glue Data Wrangler which we will keep outside the scope of this discussion.
upvoted 1 times

Selected Answer: B
AWS glue provides serverless ETL
upvoted 1 times
  akosigengen 3 months ago

B. AWS Glue provides both visual and code-based interfaces to make data integration easier. Users can easily find and access data using the AWS
Glue Data Catalog. Data engineers and ETL (extract, transform, and load) developers can visually create, run, and monitor ETL workflows with a few
clicks in AWS Glue Studio.
upvoted 1 times
Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
A. Control access to AWS service APIs and to other specific resources.
B. Provide intelligent threat detection and continuous monitoring.
C. Protect the AWS environment using multi-factor authentication (MFA).
D. Grant users access to AWS data centers.
E. Provide firewall protection for applications from common web attacks.
Correct Answer: AC

AC (67%) AE (33%)
  Agil09 1 day, 7 hours ago

Selected Answer: AC
nothing to to here with web prottection
upvoted 1 times

why D is not answer
upvoted 1 times
  SUPERHEROGEEK 1 day, 10 hours ago

Because only AWS has access to the physical data centers
upvoted 1 times
  N30Force 2 weeks ago

Answer is AD
upvoted 1 times
  SUPERHEROGEEK 1 day, 10 hours ago

Can't be D because the customer using IAM can't have access to the data center since only AWS has access to it
upvoted 1 times

Selected Answer: AC
agree with the answer
upvoted 1 times

Selected Answer: AC
agreed
upvoted 2 times
  DiDivision 3 weeks ago

Selected Answer: AE
The three others have nothing to do with IAMs
upvoted 2 times

Firewall has nothing to do with AWS IAM.
upvoted 1 times
Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose
two.)
A. Resource configuration management
B. Network data integrity
C. Employee awareness and training
D. Physical and environmental security
E. Replacement and disposal of disk drives
Correct Answer: AC

AC (100%)

Selected Answer: AC
Refer to: https://aws.amazon.com/compliance/shared-responsibility-model/
1. Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their
2. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their
own guest operating systems, databases, and applications.
3.
upvoted 2 times
What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)
A. The date and time when an IAM user's password was last used to sign in to the AWS Management Console.
B. The type of multi-factor authentication (MFA) device assigned to an IAM user.
C. The User-Agent browser identifier for each IAM user currently logged in.
D. Whether multi-factor authentication (MFA) has been enabled for an IAM user.
E. The number of incorrect login attempts by each IAM user in the previous 30 days.
Correct Answer: AC

AD (92%) 8%

Selected Answer: AD
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html#id_credentials_understanding_the_report_format
upvoted 2 times

Selected Answer: AD
Checked it by myself, A and D only
upvoted 1 times

Selected Answer: AD
Clearly the answers are A and D https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
upvoted 2 times
  bergermn 2 months, 2 weeks ago

AD correct. This page says nothing about "User-Agent browser" https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-
report.html
upvoted 1 times

Selected Answer: AD
AD is correct
upvoted 1 times

AD is correct
upvoted 1 times

Selected Answer: AD
AD is correct
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_iam-credential-report.html
upvoted 1 times

Selected Answer: AD
AD is correct
upvoted 1 times
  WANGJENNY 3 months ago

Selected Answer: AD
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html#id_credentials_understanding_the_report_format
upvoted 1 times

Selected Answer: AD
A & D. check list of IAM Credential report
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
upvoted 2 times

Selected Answer: AB
upvoted 1 times

IAM Credential report includes status of the users' credentials, including passwords, access keys, MFA devices, and signing certificates.
upvoted 3 times
What is the LEAST expensive AWS Support plan that contains a full set of AWS Trusted Advisor best practice checks?
A. AWS Enterprise Support
B. AWS Business Support
C. AWS Developer Support
D. AWS Basic Support
Correct Answer: B

B (100%)

Selected Answer: B
agreed, check out: https://www.amazonaws.cn/en/support/compare-plans/
upvoted 2 times
  Fer200 1 month, 2 weeks ago

Selected Answer: B
AWS Basic Support and AWS Developer Support customers can access core security checks and checks for service quotas. AWS Business Support
and AWS Enterprise Support customers can access all checks, including cost optimization, security, fault tolerance, performance, and service quotas.
upvoted 1 times
Which AWS service provides domain registration, DNS routing, and service health checks?
B. Amazon Route 53
D. Amazon API Gateway
Correct Answer: B

B (100%)

Selected Answer: B
https://aws.amazon.com/route53/faqs/
upvoted 1 times

B. Route 53 --> DNS
upvoted 2 times
A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time
they are requested.
Which AWS service will provide a secure and cost-effective solution for retaining these files?
A. Amazon DynamoDB
B. Amazon S3 Glacier
C. Amazon Connect
Correct Answer: C

B (100%)
  lizliz Highly Voted  1 year, 2 months ago

I think its B
upvoted 37 times
  bratpyt Highly Voted  1 year, 2 months ago

Someone answered AWS Connect because it's related to call centers, but actually, this question is more about data so B.
upvoted 16 times

Selected Answer: B
I think its B
upvoted 2 times
  Oluniyi 2 weeks, 6 days ago

B is he answer. Amazon connect does no retain files
upvoted 2 times

Selected Answer: B
Amazon S3 Glacier
upvoted 2 times
  zinabu 2 months, 3 weeks ago

glacier is, for retrieving data within 12 hours not 48hr , so the question is about a customer service call center so "C'' is the correct answer
upvoted 1 times
  Inytt 1 month, 1 week ago

Retrieving a data from Glacier can take up to 12 hours, Bank needs their data in 48 hours after the request, so Glacier is the right choice.
upvoted 3 times
  Sugarbear_01 4 months, 1 week ago

Selected Answer: B
S3 Glacier
upvoted 1 times
  Sugarbear_01 4 months, 3 weeks ago

I think its B
upvoted 1 times
  princajen 8 months, 1 week ago

Selected Answer: B
S3 Glacier
upvoted 1 times
  deviszont 9 months, 2 weeks ago

Selected Answer: B
it's B
upvoted 2 times
  redx1 10 months, 4 weeks ago

Selected Answer: B
glacier is correct
upvoted 2 times
  fatoz 11 months, 1 week ago

The right answer is B
upvoted 1 times
  aabbccddee 11 months, 1 week ago

Is this site using AI to pick an answer? So it selected "Amazon Connect" because "contact center" is triggered in its KB?
upvoted 2 times
  dnjw 1 year ago

Selected Answer: B
Definitely B
upvoted 2 times
  Sumith4112 1 year ago

Amazon Connect could be a suite of call center related products. But the question is storage related and they have specified 'accessible within 48
hours'. It is to S3 knowledge and nothing to do with the call center. The answer is B.
upvoted 2 times
  flickreyes 1 year, 1 month ago

Does Examtopics use some AI algorithm to answer the questions? :)
It should be Glacier.
upvoted 2 times
  Ajay143 1 year, 1 month ago

B is correct
upvoted 1 times
Which AWS service should be used to migrate a company's on-premises MySQL database to Amazon RDS?
B. AWS Server Migration Service (AWS SMS)
C. AWS Database Migration Service (AWS DMS)
D. AWS Schema Conversion Tool (AWS SCT)
Correct Answer: C

C (100%)
  Wiss7 1 month, 2 weeks ago

Selected Answer: C
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/migrate-an-on-premises-mysql-database-to-amazon-rds-for-mysql.html
upvoted 2 times
Which benefits does a company gain when the company moves from on-premises IT architecture to the AWS Cloud? (Choose two.)
A. Reduced or eliminated tasks for hardware troubleshooting, capacity planning, and procurement
B. Elimination of the need for trained IT staff
C. Automatic security configuration of all applications that are migrated to the cloud
D. Elimination of the need for disaster recovery planning
E. Faster deployment of new features and applications
Correct Answer: AE

AE (100%)

Selected Answer: AE
agreed
upvoted 1 times
Which of the following is a benefit of decoupling an AWS Cloud architecture?
A. Reduced latency
B. Ability to upgrade components independently
C. Decreased costs
D. Fewer components to manage
Correct Answer: B

B (100%)

Selected Answer: B
https://www.cloudamqp.com/blog/why-is-application-decoupling-a-good-
thing.html#:~:text=A%20decoupled%20application%20architecture%20allows,and%20unaware%20of%20each%20other.
upvoted 2 times
Which task is the responsibility of the customer according to the AWS shared responsibility model?
A. Maintain the security of the hardware that runs Amazon EC2 instances.
B. Patch the guest operating system of Amazon EC2 instances.
C. Protect the security of the AWS global infrastructure.
D. Patch Amazon RDS software.
Correct Answer: B

B (100%)

Selected Answer: B
agreed
upvoted 2 times
Which AWS Organizations feature can be used to track charges across multiple accounts and report the combined cost?
A. Service control policies (SCPs)
B. Cost Explorer
C. Consolidated billing
D. AWS Identity and Access Management (IAM)
Correct Answer: C

C (100%)

Selected Answer: C
correct : C
upvoted 1 times

Selected Answer: C
sgreed
upvoted 1 times
Which of the following is a cloud benefit that AWS offers to its users?
A. The ability to configure AWS data center hypervisors
B. The ability to purchase hardware in advance of increased traffic
C. The ability to deploy to AWS on a global scale
D. Compliance audits for user IT environments
Correct Answer: C

C (100%)

Selected Answer: C
agreed
upvoted 1 times
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.
Which cost is the company's direct responsibility?
A. Cost of application software licenses
B. Cost of the hardware infrastructure on AWS
C. Cost of power for the AWS servers
D. Cost of physical security for the AWS data center
Correct Answer: A

A (100%)

Selected Answer: A
A is the answer
https://docs.aws.amazon.com/license-manager/latest/userguide/license-manager.html
As you build out your cloud infrastructure on AWS, you can save costs by using Bring Your Own License model (BYOL) opportunities. That is, you
can re-purpose your existing license inventory for use with your cloud resources.
upvoted 1 times
  Slitigenz 2 months, 2 weeks ago

Why is not B?
upvoted 1 times
  Craig92866 1 week, 6 days ago

This is a poorly worded question... I thought B, too, and I think it's not the answer because we're not purchasing network gear, PDU's, battery
backups and other infrastructure items that aren't servers and storage (Instance Stores, EC2 Dedicated Hosts, etc). But depending on the
product you buy from AWS, software licenses can be AWS's responsibility, too. Again, poorly worded...
upvoted 1 times

B is AWS responsibility
upvoted 4 times
What are the five pillars of the AWS Well-Architected Framework?
A. Encryption, documentation, speed, hybrid design, and cost optimization
B. Containerization, cost margins, globalization, marketplace, and developer operations
C. Network, compute, storage, security, and developer operations
D. Operational excellence, reliability, performance efficiency, security, and cost optimization
Correct Answer: D

D (100%)
  anagy11 Highly Voted  2 months, 2 weeks ago

Selected Answer: D
D is the correct, however, the question should be updated because now there are 6 pillars of WAF: Operational Excellence, Security, Reliability,
Sustainability, Performance Efficiency, Cost Optimization
upvoted 8 times
  noraroxette Most Recent  15 hours, 41 minutes ago

Selected Answer: D
Answer: D
upvoted 1 times
  sanyoc 2 days, 5 hours ago

Selected Answer: D
answer D
upvoted 1 times

Selected Answer: D
This is an easy one. D!
upvoted 2 times
A company accepts enrollment applications on handwritten paper forms. The company uses a manual process to enter the form data into its
backend systems.
The company wants to automate the process by scanning the forms and capturing the enrollment data from scanned PDF files.
Which AWS service should the company use to build this process?
A. Amazon Rekognition
B. Amazon Textract
C. Amazon Transcribe
D. Amazon Comprehend
Correct Answer: B

B (100%)

Selected Answer: B
agreed
upvoted 1 times

Selected Answer: B
agreed.
What is Amazon Textract?

Amazon Textract is a machine learning (ML) service that automatically extracts text, handwriting, and data from scanned documents. It goes
beyond simple optical character recognition (OCR) to identify, understand, and extract data from forms and tables.
upvoted 1 times

Selected Answer: B
upvoted 2 times
  rock2010 2 months, 2 weeks ago

C,
upvoted 1 times
  rock2010 2 months, 2 weeks ago

Typo its "B"
upvoted 1 times

C, https://aws.amazon.com/codecommit/#:~:text=AWS%20CodeCommit%20is%20a%20secure,in%20transit%20and%20at%20rest.
AWS CodeCommit is a secure, highly scalable, managed source control service that hosts private Git repositories. It makes it easy for teams to
securely collaborate on code with contributions encrypted in transit and at rest.
upvoted 1 times
Which AWS service should a company use to organize, characterize, and search large numbers of images?
A. Amazon Transcribe
B. Amazon Rekognition
C. Amazon Aurora
D. Amazon QuickSight
Correct Answer: B

B (100%)

Selected Answer: B
agreed
upvoted 1 times
An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.
Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?
A. Amazon Simple Queue Service (Amazon SQS)
B. Amazon Simple Notification Service (Amazon SNS)
C. AWS Systems Manager
D. Amazon CloudWatch alarm
Correct Answer: B

D (100%)

Selected Answer: D
Amazon CloudWatch alarms can be created on the Auto Scaling group as a whole, such as Average CPUUtilization. This is because alarms are used
to tell Auto Scaling when to add/remove instances and such decisions would be based upon the group as a whole.
upvoted 16 times
  HariModu Most Recent  2 weeks ago

It should be "A" as per below
https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-using-sqs-queue.html
upvoted 1 times
  Tuto13 3 weeks, 5 days ago

Selected Answer: D
Answer is D
upvoted 1 times

Selected Answer: D
Answer is D
upvoted 1 times
  marck0996 4 weeks, 1 day ago

"Based on cpu utilization" it's the hint
upvoted 1 times

Selected Answer: D
should be D
Amazon CloudWatch uses Amazon SNS to send email. First, create and subscribe to an SNS topic. When you create a CloudWatch alarm, you can
add this SNS topic to send an email notification when the alarm changes state. For more information, see the Amazon Simple Notification Service
Getting Started Guide.
Alternatively, if you plan to create your CloudWatch alarm using the AWS Management Console, you can skip this procedure because you can
create the topic when you create the alarm.
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/US_SetupSNS.html
upvoted 1 times

Selected Answer: D
Answer is D
upvoted 2 times
A company wants to host a private version control system for its application code in the AWS Cloud.
A. AWS CodePipeline
B. AWS CodeStar
C. AWS CodeCommit
D. AWS CodeDeploy
Correct Answer: C

C (100%)

Selected Answer: C
from: https://aws.amazon.com/devops/source-control/
Source Control with AWS
AWS CodeCommit is a managed source control system that hosts Git repositories and works with all Git-based tools.
AWS CodeCommit will store code, binaries, and metadata in a redundant fashion with high availability. You will be able to collaborate with local
and remote teams to edit, compare, sync, and revise your code.
Because AWS CodeCommit runs in the AWS Cloud, you no longer need to worry about hosting, scaling, or maintaining your own source code
control infrastructure. CodeCommit automatically encrypts your files and is integrated with AWS Identity and Access Management (IAM), allowing
you to assign user-specific permissions to your repositories. This ensures that your code remains secure and you can collaborate on projects across
your team in a secure manner.
upvoted 2 times

C, https://aws.amazon.com/codecommit/#:~:text=AWS%20CodeCommit%20is%20a%20secure,in%20transit%20and%20at%20rest.
AWS CodeCommit is a secure, highly scalable, managed source control service that hosts private Git repositories. It makes it easy for teams to
securely collaborate on code with contributions encrypted in transit and at rest.
upvoted 3 times
Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded?
A. AWS Budgets
C. AWS CloudTrail
D. AWS Support
Correct Answer: A

A (100%)

Selected Answer: A
correct answer A
upvoted 1 times

Selected Answer: A
"spending threshold"
upvoted 1 times
Which AWS service is used to host static websites?
A. Amazon S3
C. AWS CloudFormation
Correct Answer: A

A (100%)

Selected Answer: A
S3 = Secure, durable, and scalable object storage infrastructure. S3 can be used to host static websites to deliver HTML, JavaScript, images, and
video for sites that do not contain server-side scripting.
upvoted 1 times

A. Aws S3
Hosting a static website using Amazon S3
PDF
RSS
You can use Amazon S3 to host a static website. On a static website, individual webpages include static content. They might also contain client-side
scripts.
By contrast
upvoted 1 times
Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting?
A. AWS WAF
B. AWS Shield Advanced
C. Amazon GuardDuty
D. Amazon Detective
Correct Answer: A

A (80%) B (20%)

Selected Answer: A
AWS WAF helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based
on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.
upvoted 1 times

Selected Answer: A
Think A correct
"AWS WAF helps protects your website from common attack techniques like SQL injection and Cross-Site Scripting (XSS). In addition, you can
create rules that can block or rate-limit traffic from specific user-agents, from specific IP addresses, or that contain particular request headers."
https://aws.amazon.com/it/waf/faqs/#:~:text=AWS%20WAF%20helps%20protects%20your,that%20contain%20particular%20request%20headers.
upvoted 1 times

Selected Answer: A
https://docs.aws.amazon.com/de_de/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.html
[...] " SQL-Injection oder Cross-Site-Scripting." [...]
upvoted 1 times

Selected Answer: A
A is correct
upvoted 1 times

Answer is A. AWS WAF gives you control over how traffic reaches your applications by enabling you to create security rules that control bot traffic
and block common attack patterns, such as SQL injection or cross-site scripting.
upvoted 4 times
  Mikami88 3 months ago

The answer is correct as. It is A since a WAF protects against a variety of malicious activities including XSS and SQL injections.
upvoted 1 times

Selected Answer: B
Answer is B AWS Shield. It protects against DDoS attacks.
upvoted 1 times

incorrect.
upvoted 1 times
A company owns per-core software licenses.

Which Amazon EC2 instance purchasing option must the company use for this license type?
A. Reserved Instances
B. Dedicated Hosts
C. Spot Instances
D. Dedicated Instances
Correct Answer: A

B (77%) D (23%)
  shankarece Highly Voted  3 months, 1 week ago

B. Dedicated Hosts.
Dedicated Hosts – Pay for a physical host that is fully dedicated to running your instances, and bring your existing per-socket, per-core, or per-VM
software licenses to reduce costs.
upvoted 7 times
  sanyoc Most Recent  2 days, 5 hours ago

Selected Answer: B
voted b
upvoted 1 times

Selected Answer: B
keyword - percore
upvoted 1 times
  Eden 1 month ago

B dedicated host because of the word per-core
upvoted 3 times

Selected Answer: B
https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/dedicated-hosts-overview.html#dedicated-hosts-BYOL
upvoted 1 times

Selected Answer: B
B. Dedicated host
upvoted 1 times
  Belachin 1 month, 3 weeks ago

The answer is B, I agree!
upvoted 1 times

Selected Answer: B
The answer should be B - Dedicated host
upvoted 2 times

Selected Answer: B
B is right https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/dedicated-hosts-overview.html
upvoted 2 times
  Pratt24 3 months ago

Selected Answer: B
B is correct
upvoted 2 times
  Mubdir 3 months, 1 week ago
Selected Answer: D
"Dedicated Hosts allow you to use your existing per-socket, per-core, or per-VM software licenses"
upvoted 3 times
A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or
through a third- party provider.
A. AWS Single Sign-On
B. AWS Signer
C. Amazon Cognito
D. AWS Directory Service
Correct Answer: C

C (75%) D (25%)

Selected Answer: C
agreed, Amazon Cognito make more sense as it allows users to sign in directly with a user name and password, or through a third- party provider.
upvoted 1 times

Selected Answer: C
Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to
millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity
providers via SAML 2.0 and OpenID Connect.
upvoted 1 times

Selected Answer: C
Answer is exactly C
upvoted 1 times

C is the answer
https://aws.amazon.com/cognito/
Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to
millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity
providers via SAML 2.0 and OpenID Connect.
upvoted 1 times

Selected Answer: D
I think the answer should be D
It enables you to join Amazon EC2 instances to your domain easily and supports many AWS and third-party applications and services
upvoted 1 times

key phrase: Users must be able to sign in directly with a user name and password, or through a third- party provider.
this is why Amazon Cognito is more appropriate for this option.

upvoted 1 times
A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data
in the clusters.
The company wants to move this workload to AWS so that these tasks will be completed automatically.
What should the company do to meet these requirements?
A. Deploy MySQL database server clusters on Amazon EC2 instances.
B. Use Amazon RDS with a MySQL database.
C. Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.
D. Migrate all the MySQL database data to Amazon S3.
Correct Answer: B

B (100%)

Selected Answer: B
agreed
upvoted 1 times
What is the primary use case for Amazon GuardDuty?
A. Prevention of DDoS attacks
B. Protection against SQL injection attacks
C. Automatic monitoring for threats to AWS workloads
D. Automatic provisioning of AWS resources
Correct Answer: C

C (100%)

Selected Answer: C
C
"Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers
detailed security findings for visibility and remediation."
upvoted 1 times
  Nobody71 3 weeks, 5 days ago

Selected Answer: C
Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers
detailed security findings for visibility and remediation.
upvoted 1 times
  Fenix_Inc 1 month ago

Selected Answer: C
https://aws.amazon.com/guardduty/
upvoted 1 times
Which statements explain the business value of migration to the AWS Cloud? (Choose two.)
A. The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices.
B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.
C. Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery.
D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas.
E. Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all enterprise applications.
Correct Answer: CD

BD (100%)
  Pratt24 Highly Voted  3 months ago

Selected Answer: BD
BD is correct
upvoted 6 times
  Craig92866 Most Recent  6 days, 7 hours ago

Selected Answer: BD
Sometimes I think I have a better chance of getting the question right than the site.
upvoted 1 times
  Redes 2 weeks ago

Selected Answer: BD
B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.
D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas.
upvoted 1 times
  satishstechie 1 month, 1 week ago

Selected Answer: BD
C is not the answer. You have to plan & configure for HA using ASG & DR using different technology.
Answer - B & D. It helps to improve SLA & reduce risk and downtime. Better TCO.
upvoted 2 times

Selected Answer: BD
Option C should not be an option at all.
upvoted 2 times

Selected Answer: BD
You may still need to handle Disaster Recovery scenarios. C isn't the correct answer.
B and D.
upvoted 2 times

B and D
https://pages.awscloud.com/global-in-gc-500-business-value-of-migration-whitepaper-learn.html?trk=9b32e983-a2c8-4455-b3a1-
b385b54cba90&sc_channel=el
upvoted 3 times
  shankarece 3 months, 1 week ago

Selected Answer: BD
BD is the right answer
upvoted 3 times

agreed
upvoted 3 times
A company needs to identify personally identifiable information (PII), such as credit card numbers, from data that is stored in Amazon S3.
A. Amazon Inspector
B. AWS Shield
C. Amazon GuardDuty
D. Amazon Macie
Correct Answer: D
Reference:

D (100%)

Selected Answer: D
Macie automatically detects a large and growing list of sensitive data types, including personally identifiable information (PII) such as names,
addresses, and credit card numbers. It also gives you constant visibility of the data security and data privacy of your data stored in Amazon S3.
upvoted 3 times
Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Choose two.)
A. VPC endpoint
B. Virtual private gateway
C. AWS Shield Standard
D. AWS Config
E. AWS WAF
Correct Answer: C
Reference:
https://aws.amazon.com/waf/
https://aws.amazon.com/shield/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc

E (59%) C (41%)

Selected Answer: E
Ans: CE
AWS shield standard prevents DDoS attacks
AWS WAF for SQL injection protection.
They asking for two option to select.

upvoted 8 times
  Eden Most Recent  1 week, 6 days ago

CE should be the answer
upvoted 2 times

Selected Answer: C
Answer: CE
AWS shield standard prevents DDoS attacks
AWS WAF for SQL injection protection.
upvoted 1 times
  sn1988 2 weeks, 1 day ago

CE , choose two
upvoted 1 times
  Arshnel 3 weeks, 5 days ago

it did say on the question to select two answers. C and E
upvoted 1 times
  Yueee 1 month ago

Selected Answer: C
Should be CE.
upvoted 2 times
  Lechomaster 1 month ago

Selected Answer: C
C & E correct
upvoted 1 times
  Eden 1 month ago

CE are correct
upvoted 1 times

Selected Answer: E
You need both AWS WAF and Shield Standard for a realistic defence. Typo error in this question setup as we need to select more than 1 option.
upvoted 2 times

Selected Answer: C
C and E
WAF for SQL Injection whereas Shield from DDOS
upvoted 1 times

CE is correct
upvoted 3 times
  brushek 3 months ago

Selected Answer: C
can't choose E - also is correct.
upvoted 1 times

Selected Answer: C
CE is correct
upvoted 1 times
A company wants to forecast future costs and usage of AWS resources based on past consumption.
Which AWS service or tool will provide this forecast?
A. AWS Cost and Usage Report
B. Amazon Forecast
C. AWS Pricing Calculator
D. Cost Explorer
Correct Answer: D
Reference:

D (80%) C (20%)

Selected Answer: D
D " Cost Explorer"
Key word "based on past consumption"
upvoted 1 times

Selected Answer: D
D is correct answer in 2022
upvoted 1 times

A forecast is a prediction of how much you will use AWS services over the forecast time period that you selected. This forecast is based on your
past usage.
upvoted 1 times

Selected Answer: D
I think the given answer is correct, in the link it says
"A forecast is a prediction of how much you will use AWS services over the forecast time period that you selected. This forecast is based on your
past usage."
As we don't use past usage for pricing calculator
upvoted 2 times
  folkmusic99 3 weeks, 3 days ago

AWS Forecast is for timeseries work. Not for budget planning.
upvoted 1 times
  michopth 3 weeks, 3 days ago

Selected Answer: C
So it is C in my opinion
upvoted 1 times

Since it says forecast it is the AWS Pricing Calculator
upvoted 1 times

not so fast my friend, it says forecast BUT, it also said "...based on past consumption.." you can use pricing calculator based of what you going to
use based on amount of resources you going to need, not based on your past consumption. Actually have past consumption is a requirement
to Cost Explorer be able to forecast.https://docs.aws.amazon.com/cost-management/latest/userguide/ce-forecast.html
upvoted 1 times
  simonak 1 month ago

B is correct
upvoted 1 times
  Nguyen25183 4 weeks ago

the hide solution tells D. So B or D is right bro?
upvoted 1 times
Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.)
A. Amazon ElastiCache
B. Amazon RDS for Oracle
C. Amazon Neptune
D. Amazon DocumentDB (with MongoDB compatibility)
E. Amazon Redshift
Correct Answer: CD
Reference:
https://docs.aws.amazon.com/documentdb/latest/developerguide/replication.html
https://docs.aws.amazon.com/neptune/latest/userguide/feature-overview-storage.html

CD (50%) BE (50%)
  gabbani72 19 hours, 34 minutes ago

Selected Answer: CD
C,D
Neptune storage reliability and high availability
Amazon Neptune is designed to be reliable, durable, and fault tolerant.
The fact that six copies of your Neptune data are maintained across three availability zones (AZs) ensures that storage of the data is highly durable,
with very low likelihood of data loss. The data is replicated automatically across the availability zones regardless of whether there are DB instances
in them, and the amount of replication is independent of the number of DB instances in your cluster.
upvoted 1 times
  Zonci 5 days, 15 hours ago

IS THIS be???
upvoted 1 times
  dark_cherrymon 1 week ago

Selected Answer: BE
BEEEEEEEEEEEEEEEEEEEEE
upvoted 1 times
Which AWS services are serverless? (Choose two.)
A. AWS Fargate
B. Amazon Managed Streaming for Apache Kafka
C. Amazon EMR
D. Amazon S3
E. Amazon EC2
Correct Answer: AD
Reference:
https://aws.amazon.com/serverless/?nc2=h_ql_prod_serv_s

AD (75%) AC (25%)
  shankarece Highly Voted  3 months ago

AD are correct. AWS serverlers services are listed here. https://aws.amazon.com/serverless/
upvoted 5 times
  Redes Most Recent  2 weeks ago

Selected Answer: AD
A. AWS Fargate
D. Amazon S3
upvoted 1 times

Selected Answer: AD
C is incorrect because it says that Amazon EMR and Amazon EMR Serverless are two different things. "Amazon EMR Serverless is a new option in
Amazon EMR that makes it easy and cost-effective for data engineers and analysts"
https://aws.amazon.com/emr/
upvoted 2 times
  Fenix_Inc 1 month ago

Selected Answer: AD
AD correct
upvoted 1 times

Selected Answer: AD
AD are correct. AWS serverlers services are listed here. https://aws.amazon.com/serverless/
upvoted 1 times
  hakaakk 2 months, 1 week ago

Selected Answer: AD
A,D is correct answer
upvoted 1 times

Selected Answer: AC
Amazon EMR Serverless is a serverless option in Amazon EMR that makes it easy for data analysts and engineers to run open-source big data
analytics frameworks without configuring, managing, and scaling clusters or servers.
upvoted 2 times

Amazon EMR and Amazon EMR Serverless are different . Amazon EMR Serverless is a new option in Amazon EMR
upvoted 1 times
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
A. Apply guest operating system patches to Amazon EC2 instances.
B. Provide monitoring of human resources information management (HRIM) systems.
C. Perform automated backups of Amazon RDS instances.
D. Optimize the costs of running AWS services.
Correct Answer: C
Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.html

C (100%)
  JA2018 2 weeks, 1 day ago

Selected Answer: C
agreed s RDS is a AWS managed service
upvoted 1 times
A company needs to deploy a PostgreSQL database into Amazon RDS. The database must be highly available and fault tolerant.
Which AWS solution should the company use to meet these requirements?
A. Amazon RDS with a single Availability Zone
B. Amazon RDS snapshots
C. Amazon RDS with multiple Availability Zones
D. AWS Database Migration Service (AWS DMS)
Correct Answer: C
Reference:
https://aws.amazon.com/rds/features/multi-az/

C (100%)

Selected Answer: C
agreed
upvoted 1 times
A company wants to add facial identification to its user verification process on an application.
A. Amazon Polly
B. Amazon Transcribe
C. Amazon Lex
Correct Answer: D

D (100%)

Selected Answer: D
Polly and Transcribe related to speech only.
Rekognition for imaging.
C not relevant at all.
upvoted 2 times
  lmbalati 2 months, 2 weeks ago

What is the answer??
upvoted 1 times

answer is D
Amazon Rekognition enables your applications to confirm user identities by comparing their live image with a reference image. Amazon
Rekognition detects Personal Protective Equipment (PPE) such as face covers, head covers, and hand covers on persons in images.
upvoted 2 times
A company wants the ability to quickly upload its applications to the AWS Cloud without needing to provision underlying resources.
A. AWS CloudFormation
B. AWS Elastic Beanstalk
C. AWS CodeDeploy
D. AWS CodeCommit
Correct Answer: B
Reference:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/Welcome.html

B (100%)

Selected Answer: B
agreed
upvoted 1 times
  lokeshb 1 month ago

B is correct - With Elastic Beanstalk, you can *quickly* deploy and manage applications in the AWS Cloud without having to learn about the
infrastructure that runs those applications
upvoted 2 times
  kimmy12 1 month, 1 week ago

How about A - CloudFormation?
upvoted 1 times
  lvyyl 3 weeks, 5 days ago

CloudFormation is all about services as a code, you need to learn how to write it before hand
upvoted 2 times
Which AWS service monitors CPU utilization on Amazon EC2 instances?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS Config
Correct Answer: D
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch.html

D (100%)

Selected Answer: D
agreed
upvoted 1 times
A company needs to label its AWS resources so that the company can categorize and track costs.
What should the company do to meet this requirement?
A. Use cost allocation tags.
B. Use AWS Identity and Access Management (IAM).
C. Use AWS Organizations.
D. Use the AWS Cost Management coverage report.
Correct Answer: A
Reference:
https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html

A (100%)

Selected Answer: A
agreed
upvoted 1 times
A company wants its employees to have access to virtual desktop infrastructure to securely access company-provided desktops through the
employees' personal devices.
A. Amazon AppStream 2.0
B. AWS AppSync
C. Amazon FSx for Windows File Server
D. Amazon WorkSpaces
Correct Answer: D
Reference:
https://aws.amazon.com/workspaces/

D (63%) A (38%)

Selected Answer: D
D is anwser
https://www.cloudhesive.com/blog-posts/appstream-2-0-vs-workspaces-basics/
upvoted 1 times
  victorwtchan 2 weeks, 2 days ago

Selected Answer: D
"While the two AWS services are somewhat similar, it’s important to remember that Amazon AppStream 2.0 is focused on hosting individual
applications on AWS, while Amazon WorkSpaces creates virtual desktops that can be used to create entire working environments for you and your
team."
https://www.cloudhesive.com/blog-posts/appstream-2-0-vs-workspaces-basics/
upvoted 2 times

Vote for A - AppStream 2.0 is a fully managed application streaming service that provides users instant access to their desktop applications from
anywhere
upvoted 1 times

Selected Answer: D
Amazon AppStream 2.0 is focused on hosting individual applications on AWS, while Amazon WorkSpaces creates virtual desktops that can be used
to create entire working environments for you and your team.
The bottom line is that if you’re looking to move your existing legacy applications to AWS, you’ll want to look at Amazon AppStream 2.0 in more
detail, and if you’re just looking for a quick and easy way to deploy Windows virtual desktops for your users, Amazon WorkSpaces is most likely an
ideal solution
upvoted 2 times
  PoloQaz 2 months, 2 weeks ago

Amazon WorkSpaces - Secure, reliable, and scalable access to persistent desktops from any location.
Amazon AppStream 2.0 - Secure, reliable, and scalable access to applications and non-persistent desktops from any location.
I go with: D
upvoted 1 times
  coolcool_ll 2 months, 3 weeks ago

Selected Answer: A
I vote for A. This is the link: https://aws.amazon.com/appstream2/
upvoted 2 times

Selected Answer: A
A is similar with woekSpaces right?
upvoted 1 times
Which task can a company complete by using AWS Organizations?
A. Track application deployment statuses globally.
B. Remove unused and underutilized AWS resources across all accounts.
C. Activate DDoS protection across all accounts.
D. Share pre-purchased Amazon EC2 resources across accounts.
Correct Answer: D
Reference:
https://aws.amazon.com/organizations/
https://docs.aws.amazon.com/ram/latest/userguide/shareable.html

D (60%) B (40%)
  chris0975 2 days, 8 hours ago

Selected Answer: D
sharing > removing
upvoted 1 times

Selected Answer: D
https://docs.aws.amazon.com/ram/latest/userguide/getting-started-sharing.html#getting-started-sharing-orgs
upvoted 2 times
  Josh11211 1 week, 1 day ago

How is B better than D?
upvoted 1 times

https://docs.aws.amazon.com/ram/latest/userguide/getting-started-sharing.html#getting-started-sharing-orgs
upvoted 2 times
  Zonci 1 week, 4 days ago

Selected Answer: B
it should be B
upvoted 1 times

Selected Answer: B
B is the correct
upvoted 1 times

Answer is B
upvoted 2 times

Selected Answer: B
I would say B
upvoted 1 times

Selected Answer: D
Sharing
upvoted 1 times
  carlos0808 2 months, 1 week ago

Selected Answer: D
"In AWS Control Tower, Organizations helps centrally manage billing; control access, compliance, and security; and share resources across your
member AWS accounts."
upvoted 2 times

Selected Answer: B
I think the answer should be B
upvoted 1 times
A user has been granted permission to change their own IAM user password.
Which AWS services can the user use to change the password? (Choose two.)
A. AWS Command Line Interface (AWS CLI)
B. AWS Key Management Service (AWS KMS)
D. AWS Resource Access Manager (AWS RAM)
E. AWS Secrets Manager
Correct Answer: AC
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_user-change-own.html

AC (100%)

Selected Answer: AC
agreed, as shown in the URL shared
upvoted 1 times
A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an
instance purchasing option that requires no long-term commitment or upfront payment.
Which instance purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Spot Instances
C. Dedicated Hosts
D. Reserved Instances
Correct Answer: A
Reference:
https://aws.amazon.com/ec2/pricing/

D (50%) A (50%)

Selected Answer: D
reserved also can be no up-front payment
upvoted 1 times

Selected Answer: A
1. Cannot be interrupted.
2. No commitment/ upfront payment
upvoted 1 times

Selected Answer: A
on-demand has no interruption and no upfront payment
upvoted 1 times
  ShoobyDooby 2 months, 1 week ago

Selected Answer: D
why not D? reserved instances are cheaper than on demand
upvoted 2 times

RI can be purchased for 1 year or 3 years. This is long-term solution.
upvoted 1 times

The company needs an instance purchasing option that requires no long-term commitment or upfront payment. that's means no reserved
instance
upvoted 1 times

Selected Answer: A
A is correct.
About Spot Instances
Spot Instance interruption – Amazon EC2 terminates, stops, or hibernates your Spot Instance when Amazon EC2 needs the capacity back. Amazon
EC2 provides a Spot Instance interruption notice, which gives the instance a two-minute warning before it is interrupted.
upvoted 1 times
  lenog 2 months, 2 weeks ago

MOST cost-effectively, should be "b"
upvoted 1 times

Not correct - "The instances cannot be interrupted at any time."
upvoted 1 times
A company uses Amazon EC2 instances to run its web application. The company uses On-Demand Instances and Spot Instances. The company
needs to visualize its monthly spending on both types of instances.
Which AWS service or feature will meet this requirement?
A. AWS Cost Explorer
B. AWS Budgets
D. AWS Cost Categories
Correct Answer: A
Reference:

A (100%)

Selected Answer: A
agreed
upvoted 1 times
Which task can a user complete by using AWS Identity and Access Management (IAM)?
A. Validate JSON syntax from an application configuration file.
B. Analyze logs from an Amazon API Gateway call.
C. Filter traffic to or from an Amazon EC2 instance.
D. Grant permissions to applications that run on Amazon EC2 instances.
Correct Answer: D
Reference:
https://aws.amazon.com/iam/#:~:text=With%20AWS%20Identity%20and%20Access,to%20refine%20permissions%20across%20AWS
A company needs to generate reports for business intelligence and operational analytics on petabytes of semistructured and structured data.
These reports are produced from standard SQL queries on data that is in an Amazon S3 data lake.
Which AWS service provides the ability to analyze this data?
A. Amazon RDS
B. Amazon Neptune
C. Amazon DynamoDB
D. Amazon Redshift
Correct Answer: D
Reference:
https://aws.amazon.com/data-warehouse/

Selected Answer: D
D is correct.
https://aws.amazon.com/redshift/
upvoted 1 times

Selected Answer: D
semi-structure > Redshift
upvoted 2 times

"Petabytes" scale of data > Redshift
upvoted 1 times
A system automatically recovers from failure when a company launches its workload on the AWS Cloud services platform.
Which pillar of the AWS Well-Architected Framework does this situation demonstrate?
D. Reliability
Correct Answer: D
Reference:
https://wa.aws.amazon.com/wellarchitected/2020-07-02T19-33-23/wat.pillar.reliability.en.html

Selected Answer: D
correct one
upvoted 1 times

Selected Answer: D
agreed
upvoted 1 times
Which of the following describes AWS Local Zones?
A. A cluster of data centers in one geographic location
B. A site used by Amazon CloudFront to cache frequently accessed content
C. An extension of an AWS Region to more granular locations
D. One or more data centers with redundant power and networking
Correct Answer: C
Reference:
  Redes 2 weeks, 1 day ago

Selected Answer: C
Each AWS Local Zone location is an extension of an AWS Region where you can run your latency sensitive applications using AWS services such as
Amazon Elastic Compute Cloud, Amazon Virtual Private Cloud, Amazon Elastic Block Store, Amazon File Storage, and Amazon Elastic Load
Balancing in geographic proximity to end-users. AWS Local Zones provide a high-bandwidth, secure connection between local workloads and
those running in the AWS Region, allowing you to seamlessly connect to the full range of in-region services through the same APIs and tool sets.
upvoted 1 times

Selected Answer: C
Agreed.
AWS Local Zones allow you to use select AWS services, like compute and storage services, closer to more end-users, providing them very low
latency access to the applications running locally. AWS Local Zones are also connected to the parent region via Amazon’s redundant and very high
bandwidth private network, giving applications running in AWS Local Zones fast, secure, and seamless access to the rest of AWS services.
upvoted 1 times

Selected Answer: C
C is correct.
upvoted 1 times

Selected Answer: C
C is the answer
upvoted 1 times
  JGanesh 7 months, 1 week ago

C is the right answer
upvoted 1 times
  li988464 7 months, 3 weeks ago

Selected Answer: C
C IS CORRECT
upvoted 1 times
  somenick 11 months ago

Selected Answer: C
upvoted 4 times
  AdrianKaczmarczyk 11 months, 3 weeks ago

The FAQ (https://aws.amazon.com/about-aws/global-infrastructure/localzones/faqs/) does not state that explicitly, but Local Zones are extensions
of the parent Region for sure. Answer C seems most appropriate.
upvoted 2 times
  Rebecca619 11 months, 3 weeks ago

Seems to be C?
upvoted 1 times
A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.
Which costs will the company eliminate with this migration? (Choose two.)
A. Cost of data center operations
B. Cost of application licensing
C. Cost of marketing campaigns
D. Cost of physical server hardware
E. Cost of network management
Correct Answer: AD
Reference:
  Jeynie 1 week ago

Selected Answer: AD
seems correct
upvoted 1 times
  nder 1 week, 1 day ago

Selected Answer: DE
You won't be eliminating the cost of data centre expenses, because AWS is the cloud data centre...
upvoted 2 times
  gabbani72 2 weeks ago

Selected Answer: DE
D,E are correct!
in Cloud i pay for network management??????????????????
upvoted 2 times

Selected Answer: AD
I will go for A & D
upvoted 1 times

Selected Answer: AD
I go for AD
upvoted 1 times

Selected Answer: DE
Why A ? ; it is stated "IT infrastructure applications from on premises " so the apps are NOT in a DC.
upvoted 1 times

you still need to manage. your now virtual networks nbow running on AWS
upvoted 1 times

Onprem = DC ... right?
upvoted 1 times
  Aman1421 1 month ago

AD.As E is NW management so i exclude it .
upvoted 1 times

Selected Answer: AD
AD are fine but I think E is also a good option
upvoted 1 times
What is a benefit of moving to the AWS Cloud in terms of improving time to market?
A. Decreased deployment speed
B. Increased application security
C. Increased business agility
D. Increased backup capabilities
Correct Answer: C
Reference:
  Josh11211 1 week, 1 day ago

Why no??t A
upvoted 1 times

Selected Answer: C
Fully Agree ; Business agility
upvoted 1 times

Selected Answer: C
6 pillars:
Trade fixed expense for variable expense
Benefit from massive economies of scale
Increase speed and agility
Stop spending money running and maintaining data centers
upvoted 1 times
Which of the following are characteristics of a serverless application that runs in the AWS Cloud? (Choose two.)
A. Users must manually configure Amazon EC2 instances.
B. Users have a choice of operating systems.
C. The application has built-in fault tolerance.
D. Users can run Amazon EC2 Spot Instances.
E. The application can scale based on demand.
Correct Answer: CE
Reference:
https://aws.amazon.com/serverless/#:~:text=Serverless%20on%20AWS&text=AWS%20offers%20technologies%20for%20running,increase%20a
gility%20and%
20optimize%20costs

Selected Answer: CE
agreed
upvoted 1 times

Selected Answer: CE
CE is the correct ; serveless means NO EC2
upvoted 1 times
A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores.
How can the company meet this requirement in the AWS Cloud?
A. Launch an Amazon EC2 instance with default tenancy.
B. Launch an Amazon EC2 instance on a Dedicated Host.
C. Create an On-Demand Capacity Reservation.
D. Purchase Dedicated Reserved Instances.
Correct Answer: B
Reference:
https://aws.amazon.com/ec2/dedicated-hosts/
  Lexzy Highly Voted  1 year, 2 months ago

The ans is B
upvoted 15 times
  whoareyou Highly Voted  1 year, 1 month ago

It's B
upvoted 10 times
  Zonci Most Recent  1 week, 4 days ago

Selected Answer: B
"per core" - Dedicated host
upvoted 1 times
  Tonnie85 5 months ago

Selected Answer: B
Should be Dedicated Host; Answer B
upvoted 1 times
  nVizzz 6 months, 1 week ago

Selected Answer: B
No doubt correct is B
upvoted 1 times
  AharonQ 8 months ago

Hey admin, it should be B, Please conrrect or confirm!
upvoted 1 times
  papyce 9 months, 1 week ago

Answer = B
upvoted 1 times
  ostralo 9 months, 1 week ago

B : BYOL - dedicated host
upvoted 1 times
  fatoz 11 months ago

It should be B
upvoted 1 times
  umop_apisdn 11 months, 2 weeks ago

Selected Answer: B
Correct answer is B
upvoted 3 times
  abrakadabraaa 11 months, 2 weeks ago

Selected Answer: B
B is correct
upvoted 3 times
  Falcon12 11 months, 2 weeks ago

Answer- B. customer licenses can be installed on dedicated host only.
upvoted 3 times
  ruchik 11 months, 3 weeks ago
Selected Answer: B
B is the answer
upvoted 4 times
  LETSGETIT 1 year ago

B: To help facilitate the maximum benefit of a customer’s existing Microsoft licensing, AWS provides multiple options to utilize BYOL EC2 Dedicated
Hosts and Dedicated Instances expose the physical cores of the server to Windows and applications such as SQL Server while allowing licenses with
or without Software Assurance to be utilized. Bare Metal as well as VMware on AWS can minimize additional licensing costs.
upvoted 4 times
  Sumith4112 1 year ago

I think B as well
upvoted 1 times
  RaghavendraPrakash 1 year ago

Should be B
upvoted 4 times
  EricSono 1 year, 1 month ago

B. But why A is chosen.......
upvoted 2 times
A company has a complex AWS architecture. The company needs assistance from a dedicated technical professional who can suggest strategies
regarding incidents, trade-offs, support, and risk management.
Which AWS Support plan will provide the required support?
A. AWS Business Support
B. AWS Enterprise Support
Correct Answer: A
Reference:

Selected Answer: B
TAM is available for Enterprise only
upvoted 8 times

Selected Answer: B
TAM is keyowrd
upvoted 1 times

Selected Answer: B
Should be B
1. a complex AWS architecture.
2. needs assistance from a dedicated technical professional who can suggest strategies regarding incidents, trade-offs, support, and risk
management.
upvoted 1 times
  Cyoung82 1 month, 1 week ago

B - Enterprise
Access to AWS Managed Services (AMS) for an additional fee. AMS augments your existing teams with cloud advanced operations skills and
capacity. Includes baseline operations, a designated Cloud Service Delivery Manager (CSDM), Cloud Architect (CA), and access to the AMS security
team.
upvoted 1 times

Selected Answer: B
Enterprise Support has everything. Question does not mention anything about Price, just customer needs.
upvoted 1 times

Selected Answer: B
I would say B, question mentions "Dedicated"
upvoted 2 times

Selected Answer: A
A is correct. Minimum required. See reference answer.
upvoted 2 times

Concierge Support Team is available only for Enterprise so the correct answer is B
upvoted 1 times

Concierge support is mainly for billing and account-specific questions, not technical ones.
upvoted 4 times
Which of the following is an advantage that the AWS Cloud provides to users?
A. Users eliminate the need to guess about infrastructure capacity requirements.
B. Users decrease their variable costs by maintaining sole ownership of IT hardware.
C. Users maintain control of underlying IT infrastructure hardware.
D. Users maintain control of operating systems for managed services.
Correct Answer: A
Reference:
Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.)
A. Amazon Route 53
C. AWS Transfer Family
D. AWS Site-to-Site VPN
E. Amazon API Gateway
Correct Answer: BE
Reference:
https://aws.amazon.com/waf/faqs/#:~:text=AWS%20WAF%20can%20be%20deployed,content%20at%20the%20Edge%20locations

Selected Answer: BE
E. Amazon API Gateway
upvoted 1 times

Selected Answer: BE
agreed
https://aws.amazon.com/waf/faqs/#:~:text=What%20services%20does%20AWS%20WAF,content%20at%20the%20Edge%20locations.
What services does AWS WAF support?
AWS WAF can be deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API Gateway, and AWS AppSync. As part of
Amazon CloudFront it can be part of your Content Distribution Network (CDN) protecting your resources and content at the Edge locations. As
part of the Application Load Balancer it can protect your origin web servers running behind the ALBs. As part of Amazon API Gateway, it can help
secure and protect your REST APIs. As part of AWS AppSync, it can help secure and protect your GraphQL APIs.
upvoted 2 times

B, E.
You can deploy AWS WAF on Amazon CloudFront as part of your CDN solution, the Application Load Balancer that fronts your web servers or
origin servers running on EC2, Amazon API Gateway for your REST APIs, or AWS AppSync for your GraphQL APIs. With AWS WAF, you pay only for
what you use and the pricing is based on how many rules you deploy and how many web requests your application receives.
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html
upvoted 3 times
  fabiand17 7 months, 2 weeks ago

Selected Answer: BE
BE for sure.
upvoted 1 times
Which controls are shared under the AWS shared responsibility model? (Choose two.)
A. Awareness and training
B. Patching of Amazon RDS
D. Physical and environmental controls
E. Service and communications protection or security
Correct Answer: AC
Reference:
  asad12 Highly Voted  1 year, 2 months ago

correct - Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or
perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control
implementation within their use of AWS services. Examples include:
upvoted 13 times
  Tecatero2001 1 year, 2 months ago

So A & C a correct?
upvoted 3 times
  sandordini 1 year, 1 month ago

I think so :)
upvoted 1 times

Selected Answer: AC
A. Awareness and training
upvoted 1 times

Selected Answer: AC
agreed
upvoted 1 times
  jprat 4 months, 1 week ago

Selected Answer: AC
Definitely A & C
upvoted 1 times
  realyy 7 months ago

Selected Answer: AC
I choose A & C
upvoted 1 times

Selected Answer: AC
A & C are correct
upvoted 1 times
  theonlyhero 11 months ago

why not E?
upvoted 4 times
  Chuma1 11 months, 4 weeks ago
Selected Answer: AC
A and C correct Ref: https://aws.amazon.com/compliance/shared-responsibility-model/?nc1=h_ls
upvoted 3 times
  DavidSharl 1 year ago

C and E are correct!
upvoted 3 times
  Chief 1 year ago

upvoted 2 times
  Ajay143 1 year, 1 month ago

A and C is correct answer
upvoted 1 times
  fabulousethiopia 1 year, 1 month ago

A: Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.
C: Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their
own guest operating systems, databases, and applications.
upvoted 3 times
  Tintin_06 1 year, 1 month ago

A & C correct
upvoted 1 times
  anurag246 1 year, 1 month ago

A and C
model/#:~:text=This%20customer%2FAWS%20shared%20responsibility%20model%20also%20extends%20to,management%2C%20operation%20a
nd%20verification%20of%20IT%20controls%20shared.
upvoted 2 times
  wingt903_ 1 year, 1 month ago

i think b and d
upvoted 2 times
  MaheshS 1 year, 1 month ago

A & C is correct
upvoted 3 times
  Yvonne001 1 year, 1 month ago

E - customers
upvoted 1 times
A company manages global applications that require static IP addresses.

Which AWS service would enable the company to improve the availability and performance of its applications?
A. Amazon CloudFront
C. Amazon S3 Transfer Acceleration
D. Amazon API Gateway
Correct Answer: B
Reference:
https://aws.amazon.com/global-accelerator/faqs/#:~:text=A%3A%20AWS%20Global%20Accelerator%20provides,AWS%20Regions%2C%20to%
20improve%20redundancy

Selected Answer: B
keyword - static IP address
upvoted 1 times

Aws global, accelerator
How does AWS Global Accelerator help support multi-Region failover?
A: AWS Global Accelerator provides you with a set of static IP addresses that can map to multiple application endpoints across AWS Regions, to
improve redundancy. If your application experiences failure in a specific AWS Region, AWS Global Accelerator automatically detects the unhealthy
endpoints and redirects traffic to the next optimal AWS Region, ensuring high availability and disaster recovery.
upvoted 3 times

Selected Answer: B
AWS Global Accelerator provides static IP addresses that provide a fixed entry point to your applications and eliminate the complexity of managing
specific IP addresses for different AWS Regions and Availability Zones.
upvoted 3 times
Which of the following are AWS compute services? (Choose two.)
A. Amazon Lightsail
C. AWS CloudFormation
D. AWS Batch
E. Amazon Inspector
Correct Answer: AD
Reference:
https://aws.amazon.com/products/compute/
  JackFish Highly Voted  1 month, 3 weeks ago

Selected Answer: AD
List of all compute services:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html
upvoted 5 times

Selected Answer: AD
A. Amazon Lightsail
D. AWS Batch
upvoted 2 times

Selected Answer: AD
Agreed
upvoted 1 times

A and D
upvoted 1 times

A. Amazon Lightsail
D. AWS Batch
upvoted 1 times
A company needs to report on events that involve the specific AWS services that the company uses.
Which AWS service or resource can the company use with Amazon CloudWatch to meet this requirement?
A. Amazon Inspector
B. AWS Personal Health Dashboard
D. AWS CloudTrail logs
Correct Answer: D
Reference:
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-log-file-examples.html

Selected Answer: D
https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/EventTypes.html#events-for-services-not-listed
upvoted 2 times

Selected Answer: B
Why not B?
The question states: "the specific AWS services that the company uses."
And you can find the following here: https://aws.amazon.com/premiumsupport/technology/aws-health-dashboard/
"When you sign in to the AWS Health Dashboard, you have a personalized view of the AWS service status that powers your application. Use the
AWS Health Dashboard to learn about specific operational issues that affect your account. For example, if you receive an event for a lost Amazon
Elastic Block Store (EBS) volume associated with one of your Amazon EC2 instances, you can quickly view how your resources are impacted, helping
you to troubleshoot and remediate."
upvoted 1 times

Because the question asked: "service or resource that use with Amazon CloudWatch"
You can also use CloudWatch Events with services that do not emit events and are not listed on this page. AWS CloudTrail is a service that
automatically records events such as AWS API calls. You can create CloudWatch Events rules that trigger on the information captured by
CloudTrail. For more information about CloudTrail, see What is AWS CloudTrail?
https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/EventTypes.html#events-for-services-not-listed
upvoted 4 times
A company with AWS Enterprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices.
Which AWS tool or resource is available to accomplish these goals?
A. Resource tagging
B. AWS Concierge Support team
C. AWS Abuse team
D. AWS Support
Correct Answer: B
Reference:
  SophiaXu Highly Voted  1 year, 1 month ago

The Concierge team will quickly and efficiently assist you with your billing and account inquiries, and work with you to help implement billing and
account best practices so that you can focus on running your business.
upvoted 30 times
  avocado16 Highly Voted  1 year, 2 months ago

AWS concierge support team, customer can access them because they have enterprise support
upvoted 8 times

Selected Answer: B
AWS concierge support team
upvoted 1 times

B. Concierge team = Account Assistance= enterprise suppot
upvoted 1 times
  Bigbluee 1 month, 2 weeks ago

I thought it is D as ALWAYS managing group is easier than managing user access. it is same for Microsoft AD. Add user to security group and all
permissions are granted to group. Same for Azure AD
Same for IAM:
Use groups for IAM policies. While it is possible and sometimes necessary to apply policies to individual users, it's better to apply group policies
instead. For example, rather than managing policies for 10 individual HR staff members, put them into an HR group and apply a single HR policy to
the entire group. This is faster and causes fewer oversights that compromise security. Groups also make it easier to move users as their jobs
change.
upvoted 1 times
  VTI_Training 7 months, 2 weeks ago

Selected Answer: B
AWS concierge support team
upvoted 1 times
  Venkat_uth 7 months, 3 weeks ago

ANS is B
upvoted 1 times
  Jayii 8 months, 2 weeks ago

Selected Answer: B
Enterprise & billing = Concierge
upvoted 1 times
  Tyron1711 9 months, 2 weeks ago

Selected Answer: B
Enterprise Support = Concierge Support Team
upvoted 1 times
  davidkerr7 10 months, 1 week ago

Selected Answer: B
Enterprise Support = Concierge
upvoted 1 times
  somenick 11 months ago

Selected Answer: B
The Concierge team will quickly and efficiently assist you with your billing and account inquiries, and work with you to help implement billing and
account best practices so that you can focus on running your business
upvoted 1 times

B is correct
upvoted 1 times
  javijaldin 1 year, 1 month ago

D - Basic support
• Access to the top 7 Trusted Advisor checks
• Personalized answers to questions related to accounts and billing or service fees
• Checking the status of services (Personal Health Dashborad)
• Documentation, white papers, and best practice guides
• Support forums
upvoted 1 times
  Goromilwe 1 year, 1 month ago

B - enterprise support offers concierge team for them
upvoted 1 times
  MSGILL 1 year, 1 month ago

B is correct answer
upvoted 1 times
  sunq858 1 year, 1 month ago

B in the answer
upvoted 2 times
  k33 1 year, 1 month ago

B - Enterprise support.
upvoted 4 times
Which of the following is an AWS key-value database offering consistent single-digit millisecond performance at any scale?
A. Amazon RDS
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon Redshift
Correct Answer: C
Reference:
https://aws.amazon.com/dynamodb/

Selected Answer: C
C. Amazon DynamoDB
upvoted 1 times

Fast, flexible NoSQL database service for single-digit millisecond performance at any scale. Get Started with Amazon DynamoDB. Free 25 GB of
storage.
upvoted 1 times

Key value= noSql
Dynamodb
upvoted 1 times
A company is developing a new Node.js application. The application must have a scalable NoSQL database to meet increasing demand as the
popularity of the application grows.
Which AWS service will meet the requirements for the database?
A. Amazon Aurora Serverless
B. Amazon ElastiCache
C. Amazon DynamoDB
D. Amazon Redshift
Correct Answer: C
Reference:
https://aws.amazon.com/dynamodb/

Selected Answer: C
C. Amazon DynamoDB
upvoted 1 times

Selected Answer: C
agreed
upvoted 1 times
A company wants to set up an entire development and continuous delivery toolchain for coding, building, testing, and deploying code.
A. Amazon CodeGuru
B. AWS CodeStar
C. AWS CodeCommit
D. AWS CodeDeploy
Correct Answer: B

Selected Answer: B
AWS CodeStar lets you quickly develop, build, and deploy applications on AWS.
upvoted 1 times

Selected Answer: B
agreed, I just checked https://docs.aws.amazon.com/codestar/latest/userguide/welcome.html
upvoted 1 times

I think its D: AWS CodePipeline: continuous delivery services that automates your release pipelines. It automates the build, test and deploy phases
of the release process.
upvoted 1 times

My mistake, its not option D. But I think its not Codestar
upvoted 1 times

I think it's CodeStar, since in the question they asked for web / application, and in codestar documentation they mentioned AWS CodeStar
provides the tools you need to quickly develop, build, and deploy applications on AWS.
while CodeDeploy for instance is a service that automates application deployments to a variety of compute services including Amazon EC2,
AWS Fargate, AWS Lambda, and on-premises instances. So it's basically intended for AWS Services and not for your code.
upvoted 2 times

Thus I vote for CodeStar.
upvoted 2 times
  lmbalati 3 months ago

B,
https://docs.aws.amazon.com/codestar/latest/userguide/welcome.html
upvoted 3 times
Which service enables customers to audit API calls in their AWS accounts?
A. AWS CloudTrail
C. Amazon Inspector
D. AWS X-Ray
Correct Answer: A
Reference:
https://docs.aws.amazon.com/audit-manager/latest/userguide/logging-using-cloudtrail.html

Selected Answer: A
https://docs.aws.amazon.com/audit-manager/latest/userguide/logging-using-cloudtrail.html
upvoted 1 times

Selected Answer: A
With AWS CloudTrail, you can monitor your AWS deployments in the cloud by getting a history of AWS API calls for your account, including API
calls made by using the AWS Management Console, the AWS SDKs, the command line tools, and higher-level AWS services.
upvoted 1 times

Selected Answer: A
Well the header literally says "Logging AWS Audit Manager API calls with AWS CloudTrail"
upvoted 1 times

A. True. CloudTrail
upvoted 1 times

Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and
unintended network exposure.
upvoted 1 times

AWS X-Ray is a service that helps developers analyze and debug distributed applications. Customers use X-Ray to monitor application traces,
including the performance of calls to other downstream components or services, in either cloud-hosted applications or from their own machines
during development.
upvoted 1 times

upvoted 1 times
  borntolearn 2 months, 1 week ago

Selected Answer: A
You can use CloudTrail to audit API calls made by services that are integrated with ACM. For more information about using CloudTrail, see the AWS
CloudTrail User Guide. The following examples show the types of logs that can be generated depending on the AWS resources on which you
provision the ACM certificate.
https://docs.aws.amazon.com/acm/latest/userguide/ct-related.html
upvoted 1 times

Selected Answer: D
AWS X-Ray
upvoted 1 times

Selected Answer: D
D is correct
upvoted 1 times
  honey121 1 year, 1 month ago
A is the answer,Keyword here is API calls
upvoted 3 times

If the keyword is API calls then why wouldn't it be X-Ray?
upvoted 3 times

CloudTrail is a web service that records AWS API calls for your AWS account and delivers log files to an Amazon S3 bucket. From the word
"audit" it means they will check the logs/calls.
upvoted 1 times
A company is moving its office and must establish an encrypted connection to AWS.
Which AWS service will help meet this requirement?
A. AWS VPN
B. Amazon Route 53
C. Amazon API Gateway
D. Amazon Connect
Correct Answer: A
Reference:
https://aws.amazon.com/vpn/
  Nguyen25183 3 weeks, 6 days ago

Selected Answer: A
Secure connectivity - encrypt the traffic
AWS Client VPN uses the secure TLS VPN tunnel protocol to encrypt the traffic. A single VPN tunnel terminates at each Client VPN endpoint and
provides users access to all AWS and on-premises resources.
https://aws.amazon.com/vpn/features/
upvoted 1 times

Secure connectivity - encrypt the traffic
AWS Client VPN uses the secure TLS VPN tunnel protocol to encrypt the traffic. A single VPN tunnel terminates at each Client VPN endpoint and
provides users access to all AWS and on-premises resources.
https://aws.amazon.com/vpn/features/
upvoted 1 times

A. VPN connection
Use AWS encryption solutions, along with all default security controls within AWS services.
Use advanced managed security services such as Amazon Macie, which assists in discovering and securing personal data that is stored in Amazon
S3.
upvoted 1 times
  Lsartore 9 months ago

Selected Answer: A
A simple VPN connection can fulfill it
upvoted 3 times
  sionita 9 months, 3 weeks ago

A is the answer
upvoted 2 times
A company needs steady and predictable performance from its Amazon EC2 instances at the lowest possible cost. The company also needs the
ability to scale resources to ensure that it has the right resources available at the right time.
Which AWS service or resource will meet these requirements?
A. Amazon CloudWatch
B. Application Load Balancer
C. AWS Batch
D. Amazon EC2 Auto Scaling
Correct Answer: D
Reference:
https://aws.amazon.com/autoscaling/

Selected Answer: D
agreed
upvoted 1 times
Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory
standards?
A. Running Amazon GuardDuty
B. Using AWS Artifact
C. Creating an AWS Support ticket
D. Evaluating AWS CloudTrail logs
Correct Answer: B
Reference:
https://aws.amazon.com/artifact/

Selected Answer: B
B. Using AWS Artifact
upvoted 1 times

Selected Answer: B
Artifact
upvoted 1 times

B is correct
upvoted 1 times
  G_512 1 year, 2 months ago

Answer is B. ez
upvoted 2 times
A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be
interrupted.
Which EC2 instance type will meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Dedicated Instances
Correct Answer: A
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-purchasing-options.html
  kapt 2 weeks, 3 days ago

Selected Answer: A
correct
upvoted 1 times
A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS
Cloud.
Which of the following are benefits of building this app in the AWS Cloud? (Choose two.)
A. A large, upfront capital expense and low variable expenses
B. Increased speed for trying out new projects
C. Complete control over the physical security of the infrastructure
D. Flexibility to scale up in minutes as the application becomes popular
E. Ability to pick the specific data centers that will host the application servers
Correct Answer: BD
Reference:

BD sure
upvoted 1 times

B, D for sure.
upvoted 1 times
  TheMarineTech 6 months, 3 weeks ago

Selected Answer: BD
B & D. The whole selling point of AWS is saving money due to pay as you go.
upvoted 2 times
  eyadman 6 months, 3 weeks ago

Selected Answer: BD
B,D are the correct answers
upvoted 2 times

BD
you dont pay larges sums of money upfront
upvoted 2 times

Selected Answer: BD
It's BD
upvoted 1 times
  CenSua 6 months, 4 weeks ago

Selected Answer: BD
BD should be right
upvoted 1 times
  qwertyue 7 months, 1 week ago

BD for me
upvoted 1 times
  Mickder 7 months, 1 week ago

Selected Answer: BD
It is BD
upvoted 1 times
  mikoloakin 7 months, 1 week ago

CD for me
upvoted 1 times
  fabiand17 7 months, 2 weeks ago

Selected Answer: DE
DE for me
upvoted 2 times
A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories,
and version controls.
Which AWS service should the developer use?
A. AWS CodeStar
B. Amazon CodeGuru
C. AWS CodeCommit
D. AWS CodePipeline
Correct Answer: C
Reference:
https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html

Selected Answer: C
AWS CodeCommit is a secure, highly scalable, fully managed source control service that hosts private Git repositories.
https://aws.amazon.com/codecommit/
upvoted 2 times
What is an AWS Region?
A. A broad set of global, cloud-based products that include compute, storage, and databases
B. A physical location around the world where data centers are clustered
C. One or more discrete data centers with redundant power, networking, and connectivity
D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users
Correct Answer: B
Reference:
https://aws.amazon.com/about-aws/global-infrastructure/regions_az/

Selected Answer: B
https://aws.amazon.com/about-aws/global-infrastructure/regions_az/?nc1=h_ls
AWS has the concept of a Region, which is a physical location around the world where we cluster data centers.
upvoted 1 times

Selected Answer: B
agreed
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html
upvoted 1 times
Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic regions connected by a network with low
latency, high throughput, and redundancy?
A. Economies of scale
B. Security
C. Elasticity
D. Global reach
Correct Answer: D
Reference:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html

Selected Answer: D
made sense
upvoted 1 times
A company is considering a migration from on premises to the AWS Cloud. The company's IT team needs to offload support of the workload.
What should the IT team do to accomplish this goal?
A. Use AWS Managed Services to provision, run, and support the company infrastructure.
B. Build hardware refreshes into the operational calendar to ensure availability.
C. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances.
D. Overprovision compute capacity for seasonal events and traffic spikes to prevent downtime.
Correct Answer: A
Reference:
https://docs.aws.amazon.com/managedservices/latest/userguide/what-is-ams.html

Welcome to AWS Managed Services (AMS), infrastructure operations management for Amazon Web Services (AWS). AMS is an enterprise service
that provides ongoing management of your AWS infrastructure.
upvoted 3 times
What is a benefit of using AWS serverless computing?
A. Application deployment and management are not required.
B. Application security will be fully managed by AWS.
C. Monitoring and logging are not needed.
D. Management of infrastructure is offloaded to AWS.
Correct Answer: D
Reference:
https://aws.amazon.com/serverless/

D.
eliminate infrastructure management tasks like capacity provisioning and patching, so you can focus on writing code that serves your customers.
Serverless applications start with AWS Lambda, an event-driven compute service natively integrated with over 200 AWS services and software as a
service (SaaS) applications.
upvoted 2 times
A company plans to launch an application that will run in multiple locations within the United States. The company needs to identify the two AWS
Regions where the application can operate at the lowest price.
Which AWS service or feature should the company use to determine the Regions that offer the lowest price?
A. Cost Explorer
B. AWS Budgets
Correct Answer: D
The other three options help with post deployment in AWS cloud.
Reference:
https://calculator.aws/#/

Selected Answer: D
agreed
upvoted 1 times
Which approach will enhance a user's security on AWS?
A. Use Multi-AZ deployments with Amazon RDS.
B. Create a hybrid architecture by using AWS Direct Connect.
C. Monitor application-specific information with AWS X-Ray.
D. Encrypt data by using AWS Key Management Service (AWS KMS).
Correct Answer: D
Reference:
https://aws.amazon.com/kms/features/

Selected Answer: D
agreed
upvoted 1 times
Which AWS service or tool is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic?
A. AWS WAF
B. AWS Shield
C. Network access control list (ACL)
D. Security group
Correct Answer: D
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html

Shield -- DDoS
WAF -- httlps
Security group --EC2
Network ACLs --subnet
upvoted 2 times
A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon
EC2 instances to run this database.
Which of the following is the company responsible for managing, according to the AWS shared responsibility model?
A. EC2 hypervisor
B. Security patching of the guest operating system
C. Network connectivity of the host server
D. Uptime service level agreement (SLA) for the EC2 instances
Correct Answer: B
Reference:

Selected Answer: B
agreed, customers is responsible for managing the guest OS which sits above the hypervisor on the physical host (managed. by AWS)
upvoted 1 times
A developer wants to deploy an application on a container-based service. The service must automatically provision and manage the backend
instances. The service must provision only the necessary resources.
A. Amazon EC2
B. Amazon Lightsail
C. Amazon Elastic Kubernetes Service (Amazon EKS)
D. AWS Fargate
Correct Answer: D
Reference:
https://aws.amazon.com/fargate/

Selected Answer: C
https://aws.amazon.com/eks/
Fargate isn't container, and it doesn't require any provision.

upvoted 10 times
  koyelchatt 2 months, 2 weeks ago

Yes, C seems to be the answer
upvoted 2 times
  sanyoc Most Recent  2 days ago

Selected Answer: D
D is the correct answer
upvoted 1 times

Selected Answer: D
Its obviously fargate. serverless options for containers
upvoted 3 times

Selected Answer: D
Fargate sets up the servers required to host containers for you. Kubernetes does not.
upvoted 2 times

Selected Answer: D
D, keyword automatically
upvoted 2 times
  zedzag 2 months, 2 weeks ago

Selected Answer: D
Fargate removes the operational overhead of scaling, patching, securing, and managing servers. so it does auto provisioning.
upvoted 3 times
Which tasks require use of the AWS account root user? (Choose two.)
A. Changing an AWS Support plan
B. Modifying an Amazon EC2 instance type
C. Grouping resources in AWS Systems Manager
D. Running applications in Amazon Elastic Kubernetes Service (Amazon EKS)
E. Closing an AWS account
Correct Answer: AE
Reference:
https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.html

A, E true
upvoted 1 times
  Good22 11 months, 1 week ago

paying attention to these questions is very important ."root user" normal users can't perform the other functions as well. A&E is for sure .
upvoted 4 times
Which AWS service enables the decoupling and scaling of applications?
A. Amazon Simple Queue Service (Amazon SQS)
B. AWS Outposts
C. Amazon S3
D. Amazon Simple Email Service (Amazon SES)
Correct Answer: A
Reference:
https://aws.amazon.com/sqs/#:~:text=Amazon%20Simple%20Queue%20Service%20(SQS,distributed%20systems%2C%20and%20serverless%
20applications

A sure
upvoted 2 times
Which of the following describes some of the core functionality of Amazon S3?
A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.
Correct Answer: A

Selected Answer: B
Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and
performance. Customers of all sizes and industries can use Amazon S3 to store and protect any amount of data for a range of use cases, such as
data lakes, websites, mobile applications, backup and restore, archive, enterprise applications, IoT devices, and big data analytics.
upvoted 12 times
  Redes Most Recent  2 weeks, 1 day ago

Selected Answer: B
B object storage.
upvoted 1 times
  Yueee 1 month ago

Selected Answer: B
Object storage. B
upvoted 1 times

B. object storage service
upvoted 1 times

Selected Answer: B
S# is object-based, not block-based
upvoted 1 times

Selected Answer: B
B . OBJECT STORAGE.
upvoted 2 times
  gcerts 1 month, 3 weeks ago

Selected Answer: B
object storage
upvoted 2 times

Selected Answer: B
B object storage.
upvoted 2 times
  zinabu 2 months, 3 weeks ago

upvoted 3 times

Selected Answer: B
should be B
upvoted 4 times

A is wrong. It should be C
upvoted 1 times

agree, it is B
upvoted 2 times
How does consolidated billing help reduce costs for a company that has multiple AWS accounts?
A. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.
B. It offers an additional 5% discount on purchases of All Upfront Reserved Instances.
C. It provides a simplified billing invoice that the company can process more quickly than a standard invoice.
D. It gives AWS resellers the ability to bill their customers for usage.
Correct Answer: A
Reference:
https://aws.amazon.com/about-aws/whats-new/2010/02/09/announcing-consolidated-billing-for-aws-
accounts/#:~:text=Consolidated%20Billing%
20enables%20you%20to,associated%20with%20your%20paying%20account

Selected Answer: A
Combined usage
upvoted 1 times

A. sure
upvoted 1 times

Selected Answer: A
Correct answer is A. C is not correct because the question is not about simplicity of billing but about costs.
upvoted 3 times

Selected Answer: A
Combined usage – You can combine the usage across all accounts in the organization to share the volume pricing discounts, Reserved Instance
discounts, and Savings Plans. This can result in a lower charge for your project, department, or company than with individual standalone accounts.
Answer is A.
upvoted 2 times
  ExamUser55 4 months, 3 weeks ago

Answer is C
upvoted 1 times
  shshchch88 9 months, 2 weeks ago

A is correct.
upvoted 2 times
  BorgesQC 11 months, 2 weeks ago

A is correct
upvoted 2 times
  ashish0826 11 months, 2 weeks ago

The answer is C
upvoted 3 times
A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.
Which AWS service can the company use to meet this goal?
A. AWS WAF
B. AWS Shield
C. Amazon VPC
Correct Answer: D
Reference:
https://aws.amazon.com/certificate-manager/

Selected Answer: D
upvoted 2 times

Selected Answer: A
WAF for sure ... I have actually implemented this !
upvoted 2 times

AWS Certificate Manager (ACM) lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security
(SSL/TLS) certificates for use with Amazon Web Services (AWS) services and your internal connected resources.
upvoted 2 times

A. WAF
You use AWS published API calls to access AWS WAF through the network. Clients must support Transport Layer Security (TLS) 1.0 or later.
upvoted 4 times

Selected Answer: D
https://aws.amazon.com/certificate-
manager/#:~:text=Use%20AWS%20Certificate%20Manager%20(ACM,and%20your%20internal%20connected%20resources.
Use AWS Certificate Manager (ACM) to provision, manage, and deploy public and private SSL/TLS certificates for use with AWS services and your
internal connected resources. ACM removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates.
To use SSL/ TLS encryption, you need to setup and assign the SSL/ TLS certificates first.
upvoted 3 times

Selected Answer: A
WAF only
upvoted 1 times
  MinajC 1 month, 2 weeks ago

Selected Answer: A
A seems like a better choice What is AWS WAF?
AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or
monitor (count) web requests based on conditions that you define.
https://aws.amazon.com/waf/faqs/
upvoted 1 times

Selected Answer: A
With ACM load your certificates, but for filter traffic to TLS, use WAF
https://docs.aws.amazon.com/waf/latest/developerguide/infrastructure-security.html
upvoted 1 times
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. Users can implement all AWS services in seconds.
B. AWS assumes all responsibility for the security of infrastructure and applications.
C. Users experience increased speed and agility.
D. Users benefit from massive economies of scale.
E. Users can move hardware from their data center to the AWS Cloud.
Correct Answer: CD
Reference:
  kapt 2 weeks, 3 days ago

Selected Answer: CD
correct
upvoted 1 times
A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on
According to AWS security best practices, how should the company grant permissions to allow the applications for access the S3 bucket?
A. Use the AWS account root user access keys.
B. Use the AWS access key ID and the EC2 secret access key.
C. Use an IAM role with the necessary permissions.
D. Activate multi-factor authentication (MFA) and versioning on the S3 bucket.
Correct Answer: C
Reference:
  Zonci 1 week, 1 day ago

Selected Answer: C
"Use IAM roles for applications and AWS services that require Amazon S3 access
upvoted 1 times

Selected Answer: C
Use IAM roles for applications and AWS services that require Amazon S3 access
For applications on Amazon EC2 or other AWS services to access Amazon S3 resources, they must include valid AWS credentials in their AWS API
requests. You should not store AWS credentials directly in the application or Amazon EC2 instance. These are long-term credentials that are not
automatically rotated and could have a significant business impact if they are compromised.
Instead, you should use an IAM role to manage temporary credentials for applications or services that need to access Amazon S3. When you use a
role, you don't have to distribute long-term credentials (such as a user name and password or access keys) to an Amazon EC2 instance or AWS
service such as AWS Lambda. The role supplies temporary permissions that applications can use when they make calls to other AWS resources.
upvoted 1 times

Selected Answer: C
"Use IAM roles for applications and AWS services that require Amazon S3 access"
upvoted 1 times
A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the
ability to initiate automated actions against threats that are identified in the security findings.
Which service will meet these requirements?
B. Amazon Detective
C. Amazon Inspector
D. Amazon GuardDuty
Correct Answer: D
Reference:
https://aws.amazon.com/guardduty/faqs/

Selected Answer: D
https://medium.com/aws-architech/use-case-aws-inspector-vs-guardduty-3662bf80767a
upvoted 1 times
  Josh11211 1 week ago

: Can I take automated preventative actions using GuardDuty?
With GuardDuty, CloudWatch Events, and AWS Lambda, you have the flexibility to set up automated remediation actions based on a security
finding. For example, you can create a Lambda function to modify your AWS security group rules based on security findings. If you receive a
GuardDuty finding indicating one of your EC2 instances is being probed by a known malicious IP, you can address it through a CloudWatch Events
rule, initiating a Lambda function to automatically modify your security group rules and restrict access on that port.
upvoted 1 times
A company wants to analyze streaming user data and respond to customer queries in real time.
Which AWS service can meet these requirements?
A. Amazon QuickSight
B. Amazon Redshift
C. Amazon Kinesis Data Analytics
D. AWS Data Pipeline
Correct Answer: C
Reference:
https://aws.amazon.com/kinesis/data-analytics/

Amazon Kinesis Data Analytics is the easiest way to transform and analyze streaming data in real time using Apache Flink.
upvoted 3 times
Who can create and manage access keys for an AWS account root user?
A. The AWS account owner
B. An IAM user that has administrator permissions
C. IAM users within a designated group
D. An IAM user that has the required role
Correct Answer: A
Reference:

account owner
upvoted 1 times
Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?
B. Amazon GuardDuty
C. Amazon Route 53
Correct Answer: C
Reference:
https://aws.amazon.com/about-aws/whats-new/2013/02/11/announcing-dns-failover-for-route-53/
  asad12 Highly Voted  1 year, 2 months ago

C- "We are excited to announce the release of DNS Failover for Route 53, Amazon’s Domain Name System (DNS) web service. With DNS Failover,
Amazon Route 53 can help detect an outage of your website and redirect your end users to alternate locations where your application is operating
properly..." https://aws.amazon.com/about-aws/whats-new/2013/02/11/announcing-dns-failover-for-route-53/
upvoted 14 times
  CRO Highly Voted  1 year, 2 months ago

its "C"
upvoted 5 times
  Redes Most Recent  2 weeks, 2 days ago

Selected Answer: C
Route53
upvoted 1 times

The Answer is C.
Route53 has Global Health Checking Functionality. Apart from the Single-Value Mode, Route53 will always return records which are healthy.
upvoted 1 times
  AlinaHusanu 5 months, 1 week ago

Selected Answer: C
C is correct
upvoted 1 times
  Dhiva_ 1 year, 1 month ago

C is correct
upvoted 1 times
  fedeX 1 year, 2 months ago

I think it's CloudFront CDN
upvoted 3 times
  YaoiLova 1 year, 2 months ago

I think so too
upvoted 2 times

CloudFront helps to deliver the data and helps against DDoS attacks. It will not help with health/status checks.
https://aws.amazon.com/cloudfront/
C. Route 53 is the correct answer

upvoted 2 times
A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS.
Which security measures fall under the responsibility of AWS? (Choose two.)
A. Running a virus scan on EC2 instances
B. Protecting against IP spoofing and packet sniffing
C. Installing the latest security patches on the RDS instance
D. Encrypting communication between the EC2 instances and the Elastic Load Balancer
E. Configuring a security group and a network access control list (NACL) for EC2 instances
Correct Answer: BC
Reference:
https://docs.aws.amazon.com/acm/latest/userguide/data-protection.html https://aws.amazon.com/compliance/shared-responsibility-model/
  AnonymousJhb Highly Voted  1 year, 2 months ago

i think its B & C.
Encrypted comms between the elb \ WAF and ec2 will only occur when the application is using port 443 combined with a digicert. When using port
80, the traffic will not be encrypted to the backend target. This is setup \ dependent on the customers application \ port dependencies and is not
determined by AWS.
upvoted 19 times
  cathal Highly Voted  1 year, 1 month ago

B, C
RDS is managed database service, AWS will take care of security patches
• Virus scanning on EC2 is customers responsibility

• Encrypting communications between EC2 and ELB requires customer to apply certificates and also to configure the instances and ELB for
encryption
• Security group & NACL are customer’s responsibility to configure
By elimination I can determine that protection against IP spoofing and packet sniffing is their responsibility.
All of this agrees with the general AWS shared responsibility model. AWS has responsibility for managed services and network infrastructure in this
case.
upvoted 14 times
  Randall_19 1 year, 1 month ago

Hello all,
https://d1.awsstatic.com/whitepapers/Security/Networking_Security_Whitepaper.pdf
Amazon network security protect against IP spoofing and packet sniffing
so correct answers are B, D

upvoted 3 times
  Randall_19 1 year, 1 month ago

sorry typo.
Correct answer are C, D
upvoted 4 times
  examdummy22 1 year, 1 month ago

You mean B,C? Your first comment with link directs to B
upvoted 1 times
  hadjer 1 year, 1 month ago

are you serious?
upvoted 2 times

Too heavy for begineer
upvoted 1 times

It's B & C.
Communication between ELB and Ec2 is not always encrypted in flight, you can establish a connection over HTTP as well. Hence, it is our
responsibility to enable it if we want, but we can choose to disable it for whatever reason. Therefore, D cannot be a valid response.
upvoted 1 times
  ocbn3wby 10 months, 3 weeks ago

Selected Answer: BC
B, C. RDS - Managed service;
Through elimination - IP Spoofing protection comes into AWS responsibilities;
upvoted 1 times
  Nova077 11 months, 2 weeks ago

This question is bit confusing:
We know B is one answer.
But for others I have doubt:
For example C: Installing patches on RDS Instance. This is AWS's responsibility since its a fully managed service.
For D: Communication between EC2 and ELB needs to be encrypted and that is considered as security of data in transit. AWS recommendation is to
apply SSL / TLS1.2 or later
(https://docs.aws.amazon.com/acm/latest/userguide/data-protection.html) . Hence, This becomes a customer responsibility.
A is simply not the answer

( Read the forum: https://forums.aws.amazon.com/thread.jspa?threadID=94288)
E: Configuring a security group and a network access control list (NACL) for EC2 instances << this is obviously a customer responsibility.
So in summary : B and C
upvoted 1 times
  awsawsmaster 1 year, 1 month ago

B, D !
upvoted 1 times
  jealbave 1 year, 1 month ago

C&D are corrects
upvoted 5 times
  AhmedMI 1 year, 1 month ago

i dont understand .. why do we need encrypt the communication in between the ec2 to ELB even though its inside the aws network
upvoted 2 times
  som74 1 year, 2 months ago

It is B&C
upvoted 3 times
  som74 1 year, 2 months ago

B&C in my view
upvoted 3 times
  jealbave 1 year, 2 months ago

De acuerdo B&C
upvoted 3 times
Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?
A. Go global in minutes.
B. Make frequent, small, reversible changes.
C. Implement a strong foundation of identity and access management.
D. Stop spending money on hardware infrastructure for data center operations.
Correct Answer: B
Reference:

B true
upvoted 1 times
Which AWS service provides intelligent recommendations to improve code quality and identify an application's most expensive lines of code?
A. Amazon CodeGuru
B. AWS CodeStar
C. AWS CodeCommit
D. AWS CodeDeploy
Correct Answer: A
Reference:
https://aws.amazon.com/codeguru/#:~:text=Amazon%20CodeGuru%20is%20a%20developer,most%20expensive%20lines%20of%20code
A company wants to expand from one AWS Region into a second AWS Region.
What does the company need to do to expand into the second Region?
A. Contact an AWS account manager to sign a new contract.
B. Move an Availability Zone to the second Region.
C. Begin to deploy resources in the second Region.
D. Download the AWS Management Console for the second Region.
Correct Answer: C
Reference:
https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-region.html
Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances?
A. Amazon WorkSpaces
B. Amazon Elastic File System (Amazon EFS)
C. AWS Database Migration Service (AWS DMS)
Correct Answer: B
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Storage.html
A company needs to deploy applications in the AWS Cloud as quickly as possible. The company also needs to minimize the complexity that is
related to the management of AWS resources.
A. AWS Config
B. AWS Elastic Beanstalk
C. Amazon EC2
D. Amazon Personalize
Correct Answer: B
Reference:
https://docs.aws.amazon.com/elastic-beanstalk/index.html

Selected Answer: B
bbbbbbbbbbbb
upvoted 1 times
A company has a set of databases that are stored on premises. The company wants to bring its existing Microsoft SQL Server licenses when the
company moves the databases to run on Amazon EC2 instances.
Which EC2 instance purchasing option should the company use to meet these requirements?
A. Dedicated Instances
B. Reserved Instances
C. Dedicated Hosts
D. Spot Instances
Correct Answer: A
Reference:
https://aws.amazon.com/windows/resources/licensing/

Selected Answer: C
https://www.trek10.com/blog/dedicated-hosts-and-dedicated-instances/
While Dedicated Instances are extremely valuable from a compliance perspective, Dedicated Hosts also give you the visibility into the physical host
that is required for a Bring Your Own License (BYOL) model — i.e., if you want to use your own Windows Server, SQL Server, SUSE, or RHEL licenses
that are provided on a CPU core basis.
upvoted 8 times
  Josh11211 Most Recent  1 week ago

A. Dedicated instance is cheaper.
upvoted 1 times

I don't see why dedicated host is better than dedicated instance.
In the link from the site, it states that hosts are good. Shared tenancy is more complicated. Since dedicated hosts are cheaper than dedicated
instance, hosts is my answer.
upvoted 1 times
  re_333 2 weeks, 1 day ago

The answer is dedicated host.
https://aws.amazon.com/windows/resources/licensing/
upvoted 1 times

Selected Answer: C
Bring Your Own License (BYOL) model
upvoted 1 times

A us the answer
Amazon EC2 offers Dedicated Hosts, which allow you to access hardware that's fully dedicated for your use. You can use your own licensed
software on dedicated infrastructure, even without Software Assurance.
upvoted 1 times

C is the answer
upvoted 1 times

Selected Answer: C
Dedicated hosts is correct answer
upvoted 2 times
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?
A. Scale the number of EC2 instances in or out automatically, based on demand.
B. Use serverless EC2 instances.
C. Scale the size of EC2 instances up or down automatically, based on demand.
D. Transfer unused CPU resources between EC2 instances.
Correct Answer: A
Reference:
https://aws.amazon.com/ec2/autoscaling/faqs/

Selected Answer: A
Its in and out
upvoted 1 times

Selected Answer: A
Other sites refer to EC2 Autoscale as In/Out
ex: https://spot.io/resources/aws-autoscaling/ec2-autoscaling-the-basics-and-4-best-practices/#a6
upvoted 1 times

Selected Answer: A
A. scale in/out
upvoted 2 times

Selected Answer: A
All your explanation point to A as the answer. We increase the NUMBER of EC2 instances thus increasing the SIZE of the group
upvoted 1 times
  enoyl 1 month, 4 weeks ago

Selected Answer: C
From the reference:
You can use Amazon EC2 Auto Scaling to automatically increase the number of Amazon EC2 instances during demand spikes to maintain
performance and decrease capacity during lulls to reduce costs.
upvoted 1 times

Makes it A, not c. Scaling horizontally not vertically.
upvoted 1 times
  skbi570 2 months ago

Selected Answer: C
C is the correct answer.
upvoted 1 times
  face1 2 months ago

A is correct
https://docs.aws.amazon.com/autoscaling/ec2/userguide/what-is-amazon-ec2-auto-scaling.html
upvoted 1 times
  AC1984 2 months, 1 week ago

upvoted 1 times
  rock2010 2 months, 1 week ago

"C" is the Answer
upvoted 1 times
A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests
originated from a resource hosted on AWS.
Which AWS team should the company contact to report this issue?
A. AWS Customer Service team
B. AWS Sales team
C. AWS Abuse team
D. AWS Technical Support team
Correct Answer: C
Reference:
https://aws.amazon.com/premiumsupport/knowledge-center/report-aws-abuse/

it's called "AWS Trust & Safety team" and not "Abuse Team"
upvoted 2 times
Which of the following are aspects of the AWS shared responsibility model? (Choose two.)
A. Configuration management of infrastructure devices is the customer's responsibility.
B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.
C. AWS is responsible for protecting the physical cloud infrastructure.
D. AWS is responsible for training the customer's employees on AWS products and services.
E. For Amazon EC2, AWS is responsible for maintaining the guest operating system.
Correct Answer: BC
Reference:
model/#:~:text=AWS%20responsibility%20%E2%80%9CSecurity%20of%20the,that%20run
%20AWS%20Cloud%20services

Selected Answer: BC
B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.
C. AWS is responsible for protecting the physical cloud infrastructure.
upvoted 1 times
  gabbani72 2 weeks, 5 days ago

Selected Answer: BC
B, C
for B read:
"For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms,
and customers access the endpoints to store and retrieve data."
upvoted 1 times

AWS is not responsible for training the customer.
Answer should be B and C
upvoted 2 times

"aspects" of the share model, should be b and C i think, S3 mgmt is not aspects of the shared model.
upvoted 2 times

i meant C and D, taining and protection, are both aspects of the aws shared model
upvoted 1 times
  Multi_Cloud 2 months, 3 weeks ago

AWS trains it's own employees not the customer employees. Should be B&C
"Awareness & Training - AWS trains AWS employees, but a customer must train their own employees."
upvoted 1 times
A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps.
Which AWS service should the company use?
A. Amazon GuardDuty
D. AWS Systems Manager
Correct Answer: B

Selected Answer: B
agreed, check this out
upvoted 2 times
A company wants to organize its users so that the company can grant permissions to the users as a group.
Which AWS service or tool can the company use to meet this requirement?
A. Security groups
C. Resource groups
D. AWS Security Hub
Correct Answer: B
  Aasvogel 2 days, 4 hours ago

Selected Answer: B
Security groups are for instances.
upvoted 1 times

Selected Answer: A
aaaaaaaaaaa
upvoted 1 times
  SalesforceMaster 6 days, 20 hours ago

Selected Answer: A
A, is correct, IAM users are individual access credentials to the account.
upvoted 1 times

Selected Answer: B
agreed
upvoted 1 times
A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous
audit. If the AWS environment has changed, the auditors want to know how it has changed.
Which AWS services can provide this information? (Choose two.)
A. AWS Artifact
C. AWS Config
D. AWS CloudTrail
E. AWS Identity and Access Management (IAM)
Correct Answer: CD

Selected Answer: CD
agreed
AWS Config is a fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change
notifications to enable security and governance.
https://www.google.com/search?
q=+AWS+Elastic+Beanstalk+vs+aws+config&rlz=1C5CHFA_enSG1031SG1031&ei=RJR0Y6eiM8uSseMPhfOckAo&ved=0ahUKEwin1J3bmbL7AhVLS
WwGHYU5B6IQ4dUDCA8&uact=5&oq=+AWS+Elastic+Beanstalk+vs+aws+config&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQAzIECCEQFToECAAQQzoFCAA
QgAQ6BggAEBYQHjoFCAAQhgM6BQghEKABOggIIRAWEB4QHToKCCEQFhAeEA8QHToHCAAQHhCiBDoFCAAQogQ6BgghEA0QFUoECEEYAEoECEYY
AFAAWIxCYJZEaABwAXgAgAHpAYgBtAqSAQYxMC40LjGYAQCgAQKgAQHAAQE&sclient=gws-wiz-
serp#:~:text=AWS%20Config%20FAQs,%E2%80%BA%20config%20%E2%80%BA%20faq
upvoted 1 times
A company wants to use a template to reliably provision, manage, and update its infrastructure in the AWS Cloud.
A. AWS Lambda
C. AWS Fargate
D. AWS CodeDeploy
Correct Answer: B

Selected Answer: B
agreed
https://aws.amazon.com/cloudformation/resources/templates/
upvoted 1 times
A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs
to the costs of running infrastructure in the AWS Cloud.
How should the company make this comparison?
A. Review the AWS shared responsibility model.
B. Audit existing software and hardware licensing costs.
C. Analyze the AWS Well-Architected Framework.
D. Use Migration Evaluator.
Correct Answer: D

Selected Answer: D
https://aws.amazon.com/migration-evaluator/
upvoted 1 times
A company needs a low-code, visual workflow service that developers can use to build distributed applications.
Which AWS service is designed to meet these requirements?
A. AWS Step Functions
B. AWS Config
C. AWS Lambda
Correct Answer: A
  rezba1987 8 hours, 15 minutes ago

Selected Answer: A
AGREED
upvoted 1 times

Selected Answer: A
agreed
https://aws.amazon.com/step-functions/
upvoted 1 times
A company wants to accelerate migration from its data center to the AWS Cloud.
Which combination of AWS services should the company use to meet this requirement? (Choose two.)
A. Amazon Connect
C. AWS Server Migration Service (AWS SMS)
D. Amazon Route 53
E. AWS Organizations
Correct Answer: BC
  SLEON01 2 weeks, 4 days ago

Selected Answer: BC
BC Agreed
upvoted 1 times
What should a user do if the user loses an IAM secret access key?
A. Retrieve the secret access key by using the IAM console.
B. Create a new user with a new access key and a new secret access key.
C. Rotate the secret access key.
D. Request a new secret access key from AWS Support.
Correct Answer: B
  vsriga 2 weeks ago

Selected Answer: C
IAM user access keys – If you are an IAM user and you forget your access keys, you will need new access keys. If you have permission to create your
own access keys, you can find instructions for creating a new one at Managing access keys (console). If you do not have the required permissions,
you must ask your administrator to create new access keys. If you are still using your old keys, ask your administrator not to delete the old keys. To
learn how an administrator can manage your access keys, see Managing access keys for IAM users.
You should follow the AWS best practice of periodically changing your password and AWS access keys. In AWS, you change access keys by rotating
them. This means that you create a new one, configure your applications to use the new key, and then delete the old one. You are allowed to have
two access key pairs active at the same time for just this reason. For more information, see Rotating access keys.
upvoted 4 times
  Redes 2 weeks, 2 days ago

Selected Answer: B
IAM user access keys – If you are an IAM user and you forget your access keys, you will need new access keys. If you have permission to create your
own access keys, you can find instructions for creating a new one at Managing access keys (console). If you do not have the required permissions,
you must ask your administrator to create new access keys. If you are still using your old keys, ask your administrator not to delete the old keys. To
learn how an administrator can manage your access keys, see Managing access keys for IAM users.
upvoted 1 times

Correct option C, because lost keys can be used against the owner of the account.
Changing access keys (which consist of an access key ID and a secret access key) on a regular schedule is a well-known security best practice
because it shortens the period an access key is active and therefore reduces the business impact if they are compromised. Having an established
process that is run regularly also ensures the operational steps around key rotation are verified, so changing a key is never a scary step.
upvoted 3 times

Selected Answer: B
right, B
upvoted 2 times
A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers.
Which combination of AWS services should the company use to meet these requirements? (Choose two.)
A. Amazon EC2
B. Amazon EC2 Auto Scaling
C. AWS Elastic Beanstalk
D. Amazon CloudFront
E. AWS Fargate
Correct Answer: CE

Selected Answer: CE
Elastic Beanstalk and fargate
upvoted 1 times

Elastic Beanstalk supports the deployment of web applications from Docker containers. With Docker containers, you can define your own runtime
environment. You can also choose your own platform, programming language, and any application dependencies, such as package managers or
tools, which typically aren't supported by other platforms. Docker containers are self contained and include all the configuration information and
software that your web application requires to run. All environment variables that are defined in the Elastic Beanstalk console are passed to the
containers.
upvoted 1 times

CE are the only options which are serverless
upvoted 1 times
A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner.
Which of the following should the company use to meet these requirements?
A. AWS Snowball Edge device
D. Amazon S3
Correct Answer: A

Selected Answer: A
i think A
upvoted 1 times
A gaming company wants to move its on-premises environment to AWS. The company needs its resources to be highly available.
Which benefit does the AWS Cloud provide to meet this requirement?
A. Reliability
B. The AWS shared responsibility model
C. Security
D. Agility
Correct Answer: A
An ecommerce company has been monitoring usage of its online store that is hosted on a fleet of Amazon EC2 instances. Surges in traffic occur
every weekend day at the same time and last for approximately 4 hours.
Which AWS service should the company use to ensure that there are enough instances to meet the surges in demand?
A. AWS Lambda
B. Amazon EventBridge (Amazon CloudWatch Events)
C. Elastic Load Balancing (ELB)
D. Amazon EC2 Auto Scaling
Correct Answer: D
A company needs stateless network filtering for its VPC.

Which AWS service, tool, or feature will meet this requirement?
A. AWS PrivateLink
B. Security group
C. Network access control list (ACL)
D. AWS WAF
Correct Answer: C

Selected Answer: C
stateless = NACL
stateful = Security Group
upvoted 1 times
  FreddyBrainy 2 weeks, 4 days ago

Answer C. NSG Stateful, NACL Stateless.
upvoted 1 times

Selected Answer: C
stateless ACLs
stateful Security Group
upvoted 1 times
A company needs to audit its AWS resources. The company must document any changes that have been made to the resources.
A. AWS Artifact
B. AWS Config
C. Amazon Inspector
Correct Answer: B

Selected Answer: B
https://aws.amazon.com/about-aws/whats-new/2022/05/aws-config-supports-amazon-cloudwatch-metrics/
upvoted 1 times
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.
A. Amazon S3
C. Amazon FSx for Windows File Server
D. Amazon Elastic Block Store (Amazon EBS)
Correct Answer: C

Selected Answer: A
https://aws.amazon.com/about-aws/whats-new/2018/06/aws-storage-gateway-adds-smb-support-to-store-objects-in-amazon-s3/
upvoted 1 times

https://docs.aws.amazon.com/filegateway/latest/files3/CreatingAnSMBFileShare.html
upvoted 2 times

https://aws.amazon.com/about-aws/whats-new/2018/06/aws-storage-gateway-adds-smb-support-to-store-objects-in-amazon-s3/
upvoted 1 times
  Yuli1821 1 week ago

Selected Answer: C
According to Case Guide should be C (https://aws.amazon.com/solutions/case-studies/epiq/)
upvoted 1 times

Fsx for windows also supports smb, so are there two correct answers?
upvoted 1 times

Selected Answer: A
https://docs.aws.amazon.com/filegateway/latest/files3/CreatingAnSMBFileShare.html
upvoted 1 times
Which AWS service should a company use to create a NoSQL database?
A. Amazon Aurora
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Neptune
Correct Answer: B
A company is migrating to the AWS Cloud. The company requires consultative review and guidance for its applications during the migration. After
the migration is complete, the company requires a response within 30 minutes if business-critical systems go down.
Which AWS Support plans meet these requirements? (Choose two.)
A. AWS Enterprise Support
B. AWS Enterprise On-Ramp Support
E. AWS Business Support
Correct Answer: AB

Selected Answer: AB
agreed
upvoted 2 times
A company needs an AWS Support plan that provides programmatic case management through the AWS Support API.
Which support plan will meet this requirement MOST cost-effectively?
A. AWS Business Support
B. AWS Basic Support
Correct Answer: A

Selected Answer: A
agreed
upvoted 2 times
A company that operates in the AWS Cloud wants to test workloads and team responses to simulated events. The company will conduct an
exercise to identify potential issues that need to be addressed.
Which design principle of the AWS Well-Architected Framework does this exercise represent?
A. Anticipate failure.
B. Automatically recover from failure.
C. Measure overall cost efficiency.
D. Implement loosely coupled dependencies.
Correct Answer: A
Which AWS services provide high availability across multiple Availability Zones by default? (Choose two.)
A. Amazon EC2
D. Amazon Redshift
E. Amazon S3
Correct Answer: CE

EFS has the option of being created in one availability zone, or in multiple AZ.
upvoted 1 times
A company needs to perform queries and interactively search and analyze log data.
Which AWS service or feature will meet this requirement?
A. Amazon EventBridge (Amazon CloudWatch Events)
B. Amazon CloudWatch anomaly detection
C. Amazon CloudWatch Logs Insights
D. Amazon CloudWatch Logs streams
Correct Answer: C

Selected Answer: C
agreed
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html
upvoted 1 times
A company has an on-premises Oracle database. The company spends a significant amount of time on database administration activities. The
company is moving the database to AWS and needs to minimize the time that is required for those administration activities
A. Amazon ElastiCache
B. Amazon EC2
C. Amazon RDS
D. Amazon DynamoDB
Correct Answer: D

Selected Answer: C
DynamoDB is NoSQL
Oracle is Relational Database = RDB
upvoted 2 times

Selected Answer: C
agreed C
upvoted 1 times
  simonak 2 weeks, 5 days ago

Selected Answer: C
I think C
upvoted 1 times

Selected Answer: C
DynamoDB is NoSQL...key-value database, Oracle is Relational Database.
C is correct answer
upvoted 1 times
  rivasolver 2 weeks, 6 days ago

Selected Answer: C
C is correct
upvoted 1 times

Selected Answer: C
should be C.
question did not mention if customer plans to swap their existing Oracle setup
upvoted 1 times
  Jinyong 3 weeks ago

Correct Answer: C
upvoted 1 times
A company is running an Amazon EC2 instance in a VPC.
Which of the following can the company use to route and filter incoming network requests for the EC2 instance?
A. Route tables and web application firewalls
B. Security groups and route tables
C. Security groups and a network intrusion system
D. Route tables and AWS Shield
Correct Answer: B
A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the
applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity.
A. AWS Lambda
B. Amazon Cognito
C. Amazon Athena
D. Amazon EC2
Correct Answer: D

Selected Answer: D
https://aws.amazon.com/blogs/aws/choosing-the-right-ec2-instance-type-for-your-application/
upvoted 1 times
A company wants to set up a Domain Name System (DNS) record for its application with a failover routing policy that is based on health checks.
Which AWS service or resource should the company use to achieve this goal?
A. Amazon Connect
C. Amazon Route 53
D. AWS WAF
Correct Answer: C
Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Choose two.)
A. Use the AWS account root user tor daily access.
B. Use access keys and secret access keys on Amazon EC2.
C. Rotate credentials on a regular basis.
D. Create a shared set of access keys for system administrators.
E. Configure multi-factor authentication (MFA).
Correct Answer: BE
  Aliciuzza 1 day, 13 hours ago

Selected Answer: CE
vote for C - E
upvoted 1 times

Selected Answer: CE
Vote for C & E
upvoted 1 times

Selected Answer: CE
Rotate access keys regularly for use cases that require long-term credentials
upvoted 1 times

Selected Answer: CE
https://aws.amazon.com/es/iam/resources/best-practices/

upvoted 2 times
  andyto 2 weeks, 3 days ago

Selected Answer: CE
https://aws.amazon.com/iam/resources/best-practices/
Where possible, we recommend relying on temporary credentials instead of creating long-term credentials such as access keys.
upvoted 2 times

Selected Answer: CE
CE makes sense
upvoted 2 times

Isn't it CE?
upvoted 2 times

Selected Answer: BE
https://aws.amazon.com/iam/resources/best-practices/
upvoted 1 times
A company needs to store code in a version control system. The company also needs to continually deploy updated code through a series of
automated steps (build, test, package, and deploy).
Which combination of AWS services will meet these requirements? (Choose two.)
A. AWS CloudFormation
B. AWS CodeCommit
C. AWS Control Tower
D. AWS Elastic Beanstalk
E. AWS CodePipoline
Correct Answer: BE

B and E
Why E > https://aws.amazon.com/codepipeline/
upvoted 1 times

Selected Answer: BE
CodeCommit for Version control and Code Pipeline for Deployment
upvoted 1 times

Selected Answer: BD
beansttalk and code commit
upvoted 1 times

In case there an typo error BE, otherwise BD
upvoted 2 times

Selected Answer: BD
I do not know "CodePipoline" - so for me it should be BD
upvoted 1 times

could be a typo error for AWS CodePipeline
upvoted 2 times
An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic
evenly across all running instances.
Which AWS service or resource will meet this requirement?
A. Amazon EC2 Auto Scaling
C. Gateway Load Balancer
D. Network Load Balancer
Correct Answer: B

https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-load-balancer.html
upvoted 1 times
Which of the following are advantages of moving from on premises to the AWS Cloud? (Choose two.)
A. Trade variable expenses for capital expenses.
B. Eliminate costs related to running and maintaining data centers.
C. Benefit from massive economies of scale.
D. Eliminate the need to tram IT staff.
E. Gam the ability to reserve capacity for 7 years or more.
Correct Answer: CB

Selected Answer: BC
Answer: BC
upvoted 1 times

Selected Answer: BC
Agreed. Check this out:
upvoted 1 times
A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive.
Which AWS service can be used to improve the database performance?
A. Amazon DynamoDB Accelerator (DAX)
B. Amazon EMR
C. Amazon ElastiCache
D. Amazon Redshift
Correct Answer: C

Selected Answer: C
by elimination
upvoted 1 times

Answer C - Elasticache.
Link: https://aws.amazon.com/elasticache/faqs/
upvoted 1 times
Which AWS service provides automated backups of data by default?
A. Amazon S3
B. Amazon Aurora
C. Amazon ElastiCache for Memcached
Correct Answer: B

Selected Answer: B
https://aws.amazon.com/rds/aurora/
upvoted 1 times

https://aws.amazon.com/rds/aurora/
Automated backups are available

upvoted 1 times
Which AWS service is a fully hosted version control service?
A. AWS CodeCommit
B. AWS CodeBuild
C. AWS CodeDeploy
D. AWS CodeStar
Correct Answer: A
A company is using Amazon RDS.
Which task is the company's responsibility, according to the AWS shared responsibility model?
A. Apply encryption options for the database.
B. Manage the underlying server hardware on which Amazon RDS runs.
C. Apply patches to the underlying operating system.
D. Apply minor patches to the database.
Correct Answer: A

Selected Answer: A
making an educated guess that this question is referring to customers modifying the default RDS encryption options
https://aws.amazon.com/rds/features/security/
upvoted 1 times
A company recently created its first AWS account.
Which AWS services will require the use of a VPC? (Choose two.)
A. Amazon S3
C. Amazon Cognito
D. Amazon DynamoDB
E. Amazon EC2
Correct Answer: EB
A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption.
Which action should the user take?
A. Contact the dedicated AWS technical account manager (TAM).
B. Contact the dedicated AWS Concierge Support team.
C. Open a business-critical system down support case.
D. Open a production system down support case.
Correct Answer: D

Selected Answer: D
agreed. Check this out:
upvoted 1 times
A company is using Amazon EC2 instances.
Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
A. Maintain the network infrastructure.
B. Patch the guest operating system.
C. Configure a security group on deployed EC2 instances.
D. Provide physical security for the underlying hardware of the EC2 instances.
E. Manage the underlying hypervisor.
Correct Answer: BC
Which of the following does Amazon CloudFront use to distribute content to users around the world?
A. Amazon VPC
B. AWS Local Zones
C. Edge locations
D. Availability Zones
Correct Answer: C
Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?
B. Reliability
D. Operational excellence
Correct Answer: D
Which of the following consists of one or more isolated data centers in the same regional area that are interconnected through low-latency
networks?
A. Availability Zone
B. Edge location
C. AWS Region
D. Private networking
Correct Answer: A

I say C. It consists of one or more az, az are data centers. They provide inexpensive, low-latency network connectivity to other Availability Zones in
the same AWS Region.
upvoted 1 times

Selected Answer: A
keyword - isolated
upvoted 1 times
Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and caches the data locally for low-latency
access?
B. AWS Storage Gateway
C. Amazon S3
Correct Answer: B

Selected Answer: B
B because hybrid storage
upvoted 1 times

Selected Answer: B
Storage Gateway service enables hybrid cloud storage between on-premises environments and the AWS Cloud. It seamlessly
integrates on-premises enterprise applications and workflows with Amazon's block and object cloud storage services through industry
standard storage protocols. It provides low-latency performance by caching frequently accessed data on premises, while storing data securely
and durably in Amazon cloud storage services. It provides an optimized data transfer mechanism and bandwidth management, which tolerates
unreliable networks and minimizes the amount of data being transferred. I
upvoted 2 times
Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS accounts?
B. Cost Explorer
D. AWS Management Console
Correct Answer: A
A company has a global website with static content.
Which AWS service will deliver the static content with low latency?
A. AWS Lambda
C. Amazon EC2 Auto Scaling
D. AWS Compute Optimizer
Correct Answer: B
Which AWS service provides alerts when an AWS event may impact a company's AWS resources?
A. AWS Personal Health Dashboard
B. AWS Service Health Dashboard
D. AWS Infrastructure Event Management
Correct Answer: A

It's weird being called personal, in the dashboard there's only service, but it's personalized.
upvoted 1 times

Selected Answer: A
AWS Personal Health Dashboard provides alerts
Service Health Dashboard shows all regions and services health
upvoted 1 times

Correct answer B.
upvoted 1 times

Selected Answer: A
https://controltower.aws-management.tools/ops/health/
"AWS Personal Health Dashboard provides alerts and guidance for AWS events that might affect your environment. "
upvoted 1 times

Selected Answer: B
B seems correct
upvoted 1 times

No A is correct
While the Service Health Dashboard displays the general status of Amazon Web Services services, Personal Health Dashboard gives you a
personalized view into the performance and availability of the Amazon Web Services services underlying your Amazon Web Services resources.
Main part of question is your company
upvoted 1 times
A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a
solution that will reduce the administrative overhead of the database.
A. Amazon Redshift
B. Amazon ElastiCache
C. Amazon RDS
Correct Answer: C
Which AWS service can be used to provide an on-demand, cloud-based contact center?
B. Amazon Connect
C. AWS Support Center
D. AWS Managed Services
Correct Answer: A

Selected Answer: B
With Amazon Connect, you can set up a contact center in minutes that can scale to support millions of customers.
upvoted 3 times

B- https://aws.amazon.com/connect/
upvoted 2 times
  hihi2022 2 weeks, 6 days ago

voted for B
upvoted 1 times

Selected Answer: B
this should be the correct option
upvoted 1 times
  michaelbaro 3 weeks ago

Selected Answer: B
https://aws.amazon.com/connect/
upvoted 2 times
Which benefit of cloud computing gives a company the ability to deploy applications to users all over the world through a network of AWS Regions,
Availability Zones, and edge locations?
A. Economy of scale
B. Global reach
C. Agility
Correct Answer: D
  Aliciuzza 1 day, 12 hours ago

I think better B global reach
upvoted 1 times
  GoAWS 5 days, 11 hours ago

Selected Answer: B
agree on B
upvoted 1 times

key word - all over the world so B is correct
upvoted 1 times

Selected Answer: B
it should be B
upvoted 1 times

Selected Answer: B
global reach
upvoted 2 times

Selected Answer: B
B best option
upvoted 1 times

Selected Answer: B
OPTION B
upvoted 1 times

B - global reach
upvoted 1 times
  rivasolver 2 weeks, 6 days ago

B is correct
upvoted 2 times

Selected Answer: B
this should be the correct option
upvoted 1 times
Which AWS service is a relational database compatible with MySQL and PostgreSQL?
A. Amazon Redshift
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Neptune
Correct Answer: C
  chris0975 1 day, 7 hours ago

Selected Answer: C
"Easily migrate MySQL or PostgreSQL databases to and from Aurora using the standard tools, or run legacy SQL Server applications with Babelfish
for Aurora PostgreSQL with minimal code change.
upvoted 1 times
  Jacek92 6 days, 9 hours ago

Aurora is not a database
upvoted 1 times
A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the
database. The company wants to give users the ability to store personal information, but user access must be controlled in a more secure and
reliable way.
Which AWS service or feature will meet these requirements?
A. Security groups
B. Amazon GuardDuty
C. AWS Secrets Manager
D. Amazon Cognito
Correct Answer: D

Selected Answer: D
Using Amazon Cognito, you can generate temporary access credentials for your clients to access AWS services, eliminating the need to store
long-term credentials in client applications.
upvoted 1 times
A company is running multiple workloads in the AWS Cloud and recently began investigating ways to reduce costs. The company is already
running fault-tolerant workloads on Amazon EC2 that perform periodic checkpoints in case of an outage.
Which AWS service or pricing model can provide the GREATEST cost savings?
A. Capacity Reservations
B. Amazon Lightsail
C. Spot Instances
D. Dedicated Hosts
Correct Answer: A
  Jeynie 1 week, 2 days ago

Selected Answer: C
I definitely think it's C
upvoted 1 times

Selected Answer: C
it should be spot - "fault-tolerant workloads"
upvoted 1 times

Selected Answer: C
Vote for option C because the company supports fault-tolerant applications.
upvoted 1 times

Selected Answer: C
Option C, seems the best option, because the question states that the company is already running fault tolerant applications, So spot instances are
suitable for this requierment.
upvoted 1 times
A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services
that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents.
These documents include the System and Organization Control (SOC) reports.
Which AWS service or group can provide these documents?
A. AWS Abuse team
B. AWS Artifact
C. AWS Support
D. AWS Config
Correct Answer: B
Which of the following are design principles of the reliability pillar of the AWS Well-Architected Framework? (Choose two.)
A. Perform operations as code.
B. Stop guessing capacity.
C. Adopt serverless architecture whenever possible.
D. Use build and deployment management systems.
E. Make changes to infrastructure by using automation.
Correct Answer: BE

Selected Answer: BE
should be BE
upvoted 1 times

Selected Answer: BE
Listed here: https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/design-principles.html
upvoted 1 times

Selected Answer: BE
Answer: BE
upvoted 1 times

Selected Answer: BE
Stop guessing capacity: A common cause of failure in on-premises workloads is resource saturation, when the demands placed on a workload
exceed the capacity of that workload (this is often the objective of denial of service attacks). In the cloud, you can monitor demand and workload
utilization, and automate the addition or removal of resources to maintain the optimal level to satisfy demand without over- or under-provisioning.
There are still limits, but some quotas can be controlled and others can be managed (see Manage Service Quotas and Constraints).
Manage change in automation: Changes to your infrastructure should be made using automation. The changes that need to be managed include
changes to the automation, which then can be tracked and reviewed.
upvoted 2 times
A company needs to perform data processing once a week that typically takes about 5 hours to complete.
Which AWS service should the company use for this workload?
A. AWS Lambda
B. Amazon EC2
C. AWS CodeDeploy
D. AWS Wavelength
Correct Answer: A

Selected Answer: B
EC22222
upvoted 1 times

Selected Answer: B
To use Amazon EC2, you simply:
✑ Select a pre-configured, templated Amazon Machine Image (AMI) to get up and running immediately. Or create an AMI containing your
applications, libraries, data, and associated configuration settings.
✑ Configure security and network access on your Amazon EC2 instance.
✑ Choose which instance type(s) you want, then start, terminate, and monitor as many instances of your AMI as needed, using the web service
APIs or the variety of management tools provided.
✑ Determine whether you want to run in multiple locations, utilize static IP endpoints, or attach persistent block storage to your instances.
✑ Pay only for the resources that you actually consume, like instance-hours or data transfer.
upvoted 2 times

Selected Answer: B
Answer: B
upvoted 1 times

Selected Answer: B
runtime for lambda workloads cannot exceed 15 mins
upvoted 1 times

Selected Answer: A
Best option A. B is incorrect because Lambda has short running times.
upvoted 2 times

my bad, Option B is correct (EC2).
upvoted 1 times
A company is developing a new web application. The company must give users the ability to log in to the application through social identity
providers.
A. AWS Directory Service
B. Amazon Cognito
D. AWS Single Sign-On
Correct Answer: A
  gabbani72 1 week, 5 days ago

Selected Answer: B
right Cognito!!
upvoted 1 times

Selected Answer: B
Answer: B
upvoted 1 times

Selected Answer: B
B for sure
upvoted 2 times

Answer B -
Cognito for sure.
upvoted 1 times

Selected Answer: B
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-social-idp.html
upvoted 2 times
According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Choose two.)
A. Hardware maintenance
B. Amazon EC2 operating system patching
C. API access control for AWS resources
D. Configuration management of infrastructure devices
E. Maintenance of an Availability Zone
Correct Answer: BC

Why not D?
upvoted 1 times

Selected Answer: BC
Answer: BC
upvoted 1 times
Which service is an AWS in-memory data store service?
A. Amazon Aurora
B. Amazon RDS
C. Amazon DynamoDB
Correct Answer: D
Which duty is a responsibility of AWS under the AWS shared responsibility model?
A. Identity and access management
B. Server-side encryption (SSE)
C. Firewall configuration
D. Maintaining physical hardware
Correct Answer: D
Which guidelines are key AWS architectural design principles? (Choose two.)
A. Design for fixed resources.
B. Build scalable architectures.
C. Use tightly coupled components.
D. Use managed services when possible.
E. Design for human interaction.
Correct Answer: BD
A company is planning to build a workload in the AWS Cloud. The company needs to estimate the costs of the network, compute, storage, and
database for the workload.
Which AWS service or tool should the company use to generate this estimate?
A. AWS Budgets
C. Cost Explorer
Correct Answer: D

Selected Answer: D
As FreddyBrainy 3 says:
Key words to remember:

* Cost estimation = AWS pricing calculator
* Visualization: AWS cost explorer.
upvoted 2 times

Selected Answer: D
Agree, D
upvoted 1 times

Answer D.
Key words to remember:

Cost estimation = AWS pricing calculator
Visualization: AWS cost explorer.
upvoted 2 times
A user is a new AWS account owner who has no special access requirements.
What should this user do with the AWS account root user access keys?
A. Share the keys with all relevant internal users so that those users can programmatically access AWS services.
B. Post the keys on GitHub to provide development teams with access to AWS services.
C. Use the keys for access, but do not share the keys with anyone.
D. Delete the keys and create IAM users.
Correct Answer: B
  sanyoc 1 day ago

Selected Answer: D
"You use an access key (an access key ID and secret access key) to make programmatic requests to AWS. However, we strongly recommend that
you do not create an AWS account root user access key. The access key for your AWS account root user gives full access to all your resources for all
AWS services, including your billing information. You can't reduce the permissions associated with your AWS account root user access key".
upvoted 1 times

Selected Answer: C
you need the key for access so don't delete it.
upvoted 1 times
  yyees 3 days, 16 hours ago

Selected Answer: C
C sure
upvoted 1 times

Selected Answer: D
D is better
upvoted 2 times

Selected Answer: C
it should be C\
upvoted 1 times

Can't be C. Read the question, has no access requirements!
D.
upvoted 2 times
  simonak 1 week, 1 day ago

Selected Answer: D
Recommendation not to create access keys for root user
upvoted 1 times
  gabbani72 2 weeks, 1 day ago

Selected Answer: D
D is correct!
Instead, use the root user to create an administrative user in AWS IAM Identity Center (successor to AWS Single Sign-On) for daily administrative
tasks.
upvoted 3 times
  PalentiMuller 2 weeks, 1 day ago

Selected Answer: C
upvoted 1 times

Selected Answer: D
Answer: D
Create an administrative user in AWS IAM Identity
upvoted 3 times
Selected Answer: C
C best optin
upvoted 1 times

Selected Answer: C
make more sense
upvoted 1 times

Selected Answer: C
"We strongly recommend that you do not use the root user for your everyday tasks, even the administrative ones. Instead, adhere to the best
practice of using the root user only to create your first IAM user. Then securely lock away the root user credentials and use them to perform only a
few account and service management tasks"
upvoted 3 times
Which AWS service allows for file sharing between multiple Amazon EC2 instances?
B. AWS Snowball Edge
C. AWS Backup
Correct Answer: D
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage
cluster size, scheduling, and environment maintenance.
Which AWS service meets these requirements?
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
Correct Answer: C
Which databases are available on Amazon RDS? (Choose two.)
A. Sybase
B. Microsoft SQL Server
C. IBM Db2
D. MongoDB
E. PostgreSQL
Correct Answer: BE

Selected Answer: BE
Amazon RDS currently supports the following engines:
MariaDB
Microsoft SQL Server
MySQL
Oracle
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html
PostgreSQL
upvoted 1 times
Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon
S3?
A. S3 Cross-Region Replication
B. S3 Transfer Acceleration
C. S3 Event Notifications
D. S3 Standard-Infrequent Access (S3 Standard-IA)
Correct Answer: B

Selected Answer: B
https://docs.aws.amazon.com/AmazonS3/latest/userguide/transfer-acceleration.html
upvoted 1 times
Which design principles of the AWS Well-Architected Framework help increase reliability? (Choose two.)
A. Automatically recover from failure.
B. Enable traceability.
C. Scale horizontally to increase workload availability.
D. Automate security best practices.
E. Keep people away from data.
Correct Answer: AC
Management at a large company wants to avoid long-term contracts and is interested in AWS to move from fixed costs to variable costs.
What is the value proposition of AWS for this company?
A. Economy of scale
B. Pay-as-you-go pricing
C. Volume discounts
Correct Answer: B
Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?
B. Amazon Lightsail
C. Amazon Simple Queue Service (Amazon SQS)
Correct Answer: C
A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an
Amazon EC2 instance.
Which AWS service should the system administrator use to identify who made this change?
A. Amazon Inspector
B. Amazon Pinpoint
C. AWS CloudTrail
Correct Answer: C
Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and
multi-factor authentication (MFA) devices?
A. AWS Shield
C. Amazon Inspector
D. IAM credential report
Correct Answer: B
  Jeynie 6 days, 19 hours ago

Selected Answer: D
D is correct
upvoted 1 times
  PalentiMuller 2 weeks, 1 day ago

Selected Answer: D
You can generate and download a credential report that lists all users in your account and the status of their various credentials, including
passwords, access keys, and MFA devices. You can get a credential report from the AWS Management Console, the AWS SDKs and Command Line
Tools, or the IAM API.
You can use credential reports to assist in your auditing and compliance efforts. You can use the report to audit the effects of credential lifecycle
requirements, such as password and access key rotation. You can provide the report to an external auditor, or grant permissions to an auditor so
that he or she can download the report directly.
upvoted 1 times

Selected Answer: D
Answer: D
upvoted 1 times

Selected Answer: D
Answer D
upvoted 1 times

Answer D
upvoted 1 times
  hihi2022 2 weeks, 6 days ago

should be D
upvoted 1 times

Selected Answer: D
should be D. Check this out:
Getting credential reports for your AWS account
upvoted 1 times
  qwerty0911 3 weeks ago

Selected Answer: 디
why is not D?
upvoted 1 times

Selected Answer: D
"You can generate and download a credential report that lists all users in your account and the status of their various credentials, including
passwords, access keys, and MFA devices"
upvoted 2 times
  simonak 3 weeks ago
Obviously D
upvoted 1 times
Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts?
A. Amazon Macie
B. AWS Config
C. Amazon GuardDuty
D. Amazon Inspector
Correct Answer: C

Selected Answer: C
Answer: C
upvoted 1 times
A company needs to use Amazon S3 to store audio files that are each 5 megabytes in size. The company will rarely access the files, but the
company must be able to retrieve the files immediately.
Which S3 storage class will meet these requirements MOST cost-effectively?
A. S3 Standard
B. S3 Standard-Infrequent Access (S3 Standard-IA)
C. S3 Glacier Flexible Retrieval
D. S3 Glacier Deep Archive
Correct Answer: B
  sanyoc 1 day ago

Selected Answer: C
You can choose from three archive storage classes optimized for different access patterns and storage duration. For archive data that needs
immediate access, such as medical images, news media assets, or genomics data, choose the S3 Glacier Instant Retrieval storage class, an archive
storage class that delivers the lowest cost storage with milliseconds retrieval. For archive data that does not require immediate access but needs
the flexibility to retrieve large sets of data at no cost, such as backup or disaster recovery use cases, choose S3 Glacier Flexible Retrieval (formerly
S3 Glacier), with retrieval in minutes or free bulk retrievals in 5-12 hours. To save even more on long-lived archive storage such as compliance
archives and digital media preservation, choose S3 Glacier Deep Archive, the lowest cost storage in the cloud with data retrieval within twelve
hours.
upvoted 1 times

Selected Answer: C
cccccccccc
upvoted 1 times

Selected Answer: B
Keyword - immediately and cost effective
upvoted 1 times

Selected Answer: B
Answer: B
upvoted 1 times
A user wants to control AWS services by using the AWS CLI.
What are the MINIMUM security credentials that the user needs to achieve this goal?
A. AWS account user name and password
B. Multi-factor authentication (MFA)
C. Access keys
D. Key pairs
Correct Answer: D
  msarvi2000 1 week, 3 days ago

Selected Answer: D
https://docs.aws.amazon.com/cli/latest/userguide/cli-security-iam.html
Although an IAM user requires a password to access an AWS service's console, that same IAM user requires an access key pair to perform the same
operations using the AWS CLI.
upvoted 1 times

Selected Answer: C
should be C - access keys
upvoted 1 times

Selected Answer: C
Option C: Access Keys
https://docs.aws.amazon.com/cli/latest/userguide/getting-started-prereqs.html#getting-started-prereqs-keys
upvoted 2 times

Selected Answer: C
Option C: Access Keys
or general use, the aws configure command in your preferred terminal is the fastest way to set up your AWS CLI installation. When you enter this
command, the AWS CLI prompts you for four pieces of information:
Access key ID
Secret access key
AWS Region
Output format
The AWS CLI stores this information in a profile (a collection of settings) named default in the credentials file. By default, the information in this
profile is used when you run an AWS CLI command that doesn't explicitly specify a profile to use. For more information on the credentials file, see
Configuration and credential file settings
upvoted 2 times

Selected Answer: D
agreed
Identity and Access Management for the AWS CLI
https://docs.aws.amazon.com/cli/latest/userguide/cli-security-iam.html
upvoted 3 times
A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur.
What could be causing this? (Choose two.)
A. Amazon Elastic Block Store (Amazon EBS) storage charges
B. Operating system charges
C. Hardware charges
D. Elastic IP charges
E. Input/output (I/O) charges
Correct Answer: AC

Selected Answer: AD
AD ---------
upvoted 1 times

Selected Answer: AD
A and D.
upvoted 1 times

Selected Answer: AD
for me A & D
upvoted 1 times

Selected Answer: AD
A and D.
upvoted 2 times

Selected Answer: AD
should ve a and D.
https://aws.amazon.com/premiumsupport/knowledge-center/ec2-billing-terminated/
You terminated your instances, but you still have EC2 resources provisioned to your account
The Elastic Compute Cloud line item in your bill includes resources other than instances. EC2 instances are often used along with other EC2
resources, such as the following:
Elastic IP addresses
Amazon Elastic Block Store (Amazon EBS) volumes
upvoted 2 times
A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the
hour. The reports must be placed in an Amazon S3 bucket.
Which AWS tool will meet these requirements?
A. AWS Cost and Usage Reports
B. AWS Pricing Calculator
C. Cost Explorer
D. AWS Budgets
Correct Answer: D

Selected Answer: A
https://aws.amazon.com/aws-cost-management/aws-cost-and-usage-reporting/
upvoted 2 times

Selected Answer: A
best option A
upvoted 2 times

Selected Answer: A
should be A
Setting up an Amazon S3 bucket for Cost and Usage Reports
https://docs.aws.amazon.com/cur/latest/userguide/cur-s3.html
upvoted 1 times

Answer A
upvoted 1 times

Selected Answer: A
A for sure
upvoted 1 times
Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a
VPC?
A. Network ACLs
B. Security groups
D. AWS WAF
Correct Answer: A
What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?
A. Software licenses
B. Networking
C. Customer data
D. Encryption keys
Correct Answer: C
Which Reserved Instance (RI) provides the HIGHEST average cost savings compared to an On-Demand Instance?
A. 1-year, No Upfront, Standard RI
B. 1-year, All Upfront, Convertible RI
C. 3-year, All Upfront, Standard RI
D. 3-year, No Upfront, Convertible RI
Correct Answer: A

Selected Answer: C
for me C
upvoted 1 times
  sn1988 2 weeks, 1 day ago

C agreed with FreddyBrain
upvoted 1 times

Selected Answer: C
agreed with FreddyBrain
upvoted 1 times

Selected Answer: C
I think C
upvoted 1 times

Selected Answer: C
agreed with FreddyBrain, it is the only viable option for this question.
upvoted 1 times

Answer C - All up front will provide the highest cost saving in this case. Unless someone can prove me wrong.
1 year no upfront = 37% savings over on demand
3 year all up front= 67% savings over on demand
Link: https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/
upvoted 1 times

Selected Answer: C
why is not c?
upvoted 1 times
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
A. How quickly an Amazon EC2 instance can be restarted
B. The ability to rightsize resources as demand shifts
C. The maximum amount of RAM an Amazon EC2 instance can use
D. The pay-as-you-go billing model
E. How easily resources can be procured when they are needed
Correct Answer: BE

Selected Answer: BE
t Elasticity is for resources (like CPU)
upvoted 1 times
A company has a set of ecommerce applications. The applications need to be able to send messages to each other.
Which AWS service meets this requirement?
A. AWS Auto Scaling
B. Elastic Load Balancing
C. Amazon Simple Queue Service (Amazon SQS)
D. Amazon Kinesis Data Streams
Correct Answer: C
A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas.
A. AWS CloudTrail
C. AWS Config
D. Amazon Inspector
Correct Answer: B

Selected Answer: B
Service quotas are the maximum number of resources that you can create in an AWS account. AWS implements quotas to provide highly available
and reliable service to all customers, and protects you from unintentional spend. Trusted Advisor will notify you once you reach more than 80% of a
service quota. You can then follow recommendations to delete resources or request a quota increase.
upvoted 2 times
  mchernandes 1 week ago

https://aws.amazon.com/es/premiumsupport/knowledge-center/ebs-increase-active-volume-
limits/#:~:text=Trusted%20Advisor%20then%20alerts%20you,durability%20of%20your%20EBS%20volumes.
Trusted Advisor then alerts you if your account reaches more than 80% of a service quota in any Region.
upvoted 2 times

Selected Answer: A
CLOUDTRAIL
upvoted 1 times

Selected Answer: A
AWS Cloudtrail
upvoted 1 times

https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
upvoted 1 times
  DI_EN 2 weeks ago

Shouldnt be the answer A ?
upvoted 1 times

Why B?
upvoted 1 times
Which pillar of the AWS Well-Architected Framework is focused on the ability of a workload to perform its intended function correctly and
consistently at the expected time?
A. Performance efficiency
C. Reliability
D. Security
Correct Answer: C

Selected Answer: C
Answer C
upvoted 1 times

Answer C.
Link: https://docs.aws.amazon.com/wellarchitected/latest/framework/reliability.html
upvoted 2 times
Which AWS tool acts as a firewall to control traffic in and out of subnets within a VPC?
A. Security group
B. Route table
C. VPC endpoint
D. Network access control list (ACL)
Correct Answer: D
A company is running a standard PostgreSQL database on premises. The company is migrating the database to the AWS Cloud and does not want
to change the queries that access the database. The company must maximize the query performance.
A. Amazon RDS for PostgreSQL
B. Amazon Aurora PostgreSQL
C. Amazon DocumentDB (with MongoDB compatibility)
D. Amazon DynamoDB
Correct Answer: A
  AngloSoliman 2 days, 23 hours ago

Selected Answer: B
B) Amazon Aurora
upvoted 1 times

Selected Answer: B
B, maximize performance
upvoted 1 times

Selected Answer: C
Amazon Aurora is a MySQL and PostgreSQL-compatible relational database engine
upvoted 1 times
  sn1988 5 days, 19 hours ago

B Amazon Aurora
upvoted 1 times

Selected Answer: B
Amazon Aurora is a MySQL and PostgreSQL-compatible relational database engine that combines the speed and availability of high-end
commercial databases with the simplicity and cost-effectiveness of open source databases.
upvoted 1 times

Selected Answer: B
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.AuroraPostgreSQL.html
upvoted 2 times

Selected Answer: A
Option A is correct, with option B user has to change querys refering Aurora Database Endpoint for each query
upvoted 3 times

Selected Answer: B
I think answer is B
upvoted 1 times

https://aws.amazon.com/rds/aurora/features/
Up to 5X the throughput of MySQL and 3X the throughput of PostgreSQL
upvoted 1 times
A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud.
A. Amazon Inspector
B. Amazon Macie
C. Amazon GuardDuty
D. AWS Audit Manager
Correct Answer: B
A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote
customer service agents can use to create and manage voice and chat contact flows.
A. Amazon EventBridge (Amazon CloudWatch Events)
B. Amazon Connect
C. Amazon Cognito
Correct Answer: B
  sanyoc 23 hours, 59 minutes ago

Selected Answer: B
b correct one
upvoted 1 times

Answer B.
Link: https://aws.amazon.com/connect/pricing/
upvoted 1 times
A company has acquired several other companies. All the companies host their IT infrastructure in the AWS Cloud.
Which AWS service should the acquiring company use to centralize the account management?
C. AWS Security Hub
D. Amazon Workspaces
Correct Answer: B
A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers
want to deploy their applications without having to provision the infrastructure themselves.
Which AWS service should the developers use to meet these requirements?
A. AWS Cloud Formation
B. AWS CodeBuild
C. AWS Elastic Beanstalk
D. AWS CodeDeploy
Correct Answer: B
  dexdinh91 1 day, 15 hours ago

Selected Answer: C
C is correct
upvoted 1 times

C seems correct, option B and D are not suitable because they depend upon resources already created but how about new services with no
resources provisioned yet
upvoted 3 times

Selected Answer: B
should be CodeBuild
AWS CodeBuild is a fully managed build service that compiles source code, runs tests, and produces software packages that are ready to deploy.
With CodeBuild, you don’t need to provision, manage, and scale your own build servers; AWS CodeDeploy: Coordinate application deployments to
https://stackshare.io/stackups/aws-codebuild-vs-aws-
codedeploy#:~:text=AWS%20CodeBuild%20is%20a%20fully,deployments%20to%20Amazon%20EC2%20instances.
upvoted 1 times
  yeyc7 2 weeks, 5 days ago

Shouldn't it be CodeDeploy?
upvoted 2 times

Answer B.
Code build: CodeBuild eliminates the need to provision, manage, and scale your own build servers. Link
https://docs.aws.amazon.com/codebuild/latest/userguide/welcome.html
Code deploy is used to automates software deployment, eliminating the need for error-prone manual operations.
Link: https://aws.amazon.com/codedeploy/
upvoted 1 times
A company needs to analyze its AWS Cloud environment to determine whether the company is following security best practices. The company
wants recommendations about how to close security gaps.
Which AWS service should the company use to obtain these recommendations?
A. AWS WAF
D. AWS Shield
Correct Answer: C
A company is using AWS Identity and Access Management (IAM).
Who can manage the access keys of the AWS account root user?
A. IAM users in the same account that have been granted permission
B. IAM roles in any account that have been granted permission
C. IAM users and roles that have been granted permission
D. The AWS account owner
Correct Answer: D
A company needs a managed NFS file system that the company can use with its AWS compute resources.
Which AWS service or feature will meet these requirements?
B. AWS Storage Gateway Tape Gateway
C. Amazon S3 Glacier Flexible Retrieval
Correct Answer: D

Selected Answer: D
You can mount an Amazon EFS file system in your virtual private cloud (VPC), through the Network File System versions 4.0 and 4.1 (NFSv4)
protocol.
upvoted 1 times
What is the security best practice concerning sensitive data stored in Amazon S3?
A. Enable cross-Region replication on the S3 bucket.
B. Enable S3 server-side encryption on the S3 bucket.
C. Configure AWS WAF to prevent unauthorized access to the S3 bucket.
D. Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.
Correct Answer: D

Correct Answer B. Server side encryption.
Forgive my initial response. Thank you.
upvoted 2 times

Answer B
upvoted 2 times

Selected Answer: B
B os correct, yes
upvoted 2 times

Selected Answer: B
B, best option, that way owner has encryption keys
upvoted 1 times

Selected Answer: B
Should be B
Security Best Practices for Amazon S3
upvoted 2 times

Answer D is correct in my opinion.
upvoted 1 times

Selected Answer: A
A is correct
upvoted 1 times
An application requires a database that offers consistent performance and latency that can be measured in single-digit milliseconds.
A. Amazon DynamoDB
B. Amazon RDS
C. Amazon Redshift
D. Amazon EMR
Correct Answer: A

Answer A.
Link: https://www.amazonaws.cn/en/dynamodb/
upvoted 2 times
A company needs to block SQL injection attacks.
Which AWS service or feature provides this functionality?
A. AWS WAF
B. Network ACLs
C. Security groups
Correct Answer: A

Selected Answer: A
A, agree
upvoted 2 times

Selected Answer: A
agreed
upvoted 1 times

Answer A is correct.
upvoted 2 times
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular
geographic area.
Which solution achieves this goal?
A. Use EC2 instances in a single Availability Zone
B. Use EC2 instances in multiple AWS Regions
C. Use EC2 instances in multiple edge locations.
D. Use Amazon CloudFront with the EC2 instances configured as the source.
Correct Answer: B
Treating infrastructure as code in the AWS Cloud allows users to:
A. automate migration of on-premises hardware to AWS data centers.
B. let a third party automate an audit of the AWS infrastructure.
C. turn over application code to AWS so it can run on the AWS infrastructure.
D. automate the infrastructure provisioning process.
Correct Answer: D
A company needs to apply security rules to specific Amazon EC2 instances.
Which AWS service or feature provides this functionality?
A. AWS WAF
B. Network ACLs
C. Amazon VPC
D. Security groups
Correct Answer: C

Selected Answer: D
D, not C, c is traffic
upvoted 1 times
  OvaltineJenkins 2 weeks ago

Its D, you can create security groups and assign to EC2 instances without creating VPCs. The document you're linking is describing VPCs come with
a default security group and additonal SGs can be created within that VPC.
upvoted 1 times
  gabbani72 2 weeks ago

Selected Answer: D
D was right!
upvoted 2 times

Selected Answer: C
updated response, should be C.
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html
upvoted 1 times

Selected Answer: D
Answer: D
upvoted 2 times

Selected Answer: D
D, best option
upvoted 2 times

Selected Answer: D
Should be D.. SGs are stateful virtual FWs for assigned EC2 Instances
upvoted 2 times

Correction, should be C. You can refer to this:
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html
upvoted 1 times

Selected Answer: 디
why is not D?
upvoted 2 times
A company wants to run Amazon EC2 instances in locations that are near the company’s global users.
Which aspect of the AWS environment will support this requirement?
A. Availability Zone
B. Edge locations
C. AWS Regions
D. Regional edge caches
Correct Answer: A
  dexdinh91 1 day, 15 hours ago

Selected Answer: B
Edge Location should be the correct answer
upvoted 1 times
  Aasvogel 1 day, 20 hours ago

Selected Answer: A
You cannot run AWS EC2 instances directly in an edge location, right?
https://www.lastweekinaws.com/blog/what-is-an-edge-location-in-aws-a-simple-explanation/
upvoted 2 times

Problem with B is, that you are not running ec2 in the edge location, you need to use cloud front to leverage the edge locations. Local zones are
obviously missing, so the next best bet is regions, or az. But since az and regions are equally correct, it must be edge locations.
upvoted 1 times

Selected Answer: B
Edge locations are AWS data centers designed to deliver services with the lowest latency possible.
upvoted 1 times

Selected Answer: B
Answer: B
upvoted 1 times
  Eagle01 2 weeks, 4 days ago

The best answer could have been "Local Zones"
upvoted 1 times

Selected Answer: B
agreed with SLEON01's explanation
upvoted 1 times

Edge locations are AWS data centers designed to deliver services with the lowest latency possible. Amazon has dozens of these data centers spread
across the world. They’re closer to users than Regions or Availability Zones, often in major cities, so responses can be fast and snappy. A subset of
services for which latency really matters use edge locations, including:
CloudFront, which uses edge locations to cache copies of the content that it serves, so the content is closer to users and can be delivered to them
faster.
Route 53, which serves DNS responses from edge locations, so that DNS queries that originate nearby can resolve faster (and, contrary to what you
might think, is also Amazon’s premier database).
Web Application Firewall and AWS Shield, which filter traffic in edge locations to stop unwanted traffic as soon as possible.
upvoted 2 times

B, best option
upvoted 1 times
A company's project team needs to simultaneously mount a file system on multiple Amazon EC2 Linux instances. The file system also will be
shared across multiple Availability Zones.
A. Amazon Elastic File System (Amazon EFS)
B. Amazon S3
C. Amazon Elastic Block Store (Amazon EBS)
D. Amazon FSx for Windows File Server
Correct Answer: A
A large retail company wants to use an AWS service to process clickstream data from the company's ecommerce website. The company wants to
collect and analyze the streaming data in real time.
A. Amazon Kinesis
B. Amazon Athena
D. AWS Data Exchange
Correct Answer: A

Selected Answer: A
Amazon Kinesis is the company’s real-time streaming data analysis platform. It provides powerful insights on video, data, audio, and other streams.
upvoted 1 times

https://www.metricfire.com/integrations/amazon-cloudfront/amazon-kinesis/
upvoted 1 times
Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?
A. Sustainability
B. Cost optimization
D. Reliability
Correct Answer: C

Selected Answer: B
Answer: B
upvoted 3 times

Selected Answer: B
Cost Optimization
Design Principles
Analyze and attribute expenditure: The cloud makes it easier to accurately identify
the usage and cost of systems, which then allows transparent attribution of IT costs
to individual workload owners. This helps measure "return on investment (ROI)" and
gives workload owners an opportunity to optimize their resources and reduce costs.
upvoted 2 times

Selected Answer: B
Option B
upvoted 1 times

Selected Answer: B
should be B
https://wa.aws.amazon.com/wellarchitected/2020-07-02T19-33-23/wat.pillar.costOptimization.en.html
upvoted 2 times

Selected Answer: 나
why is not B?
upvoted 2 times
A company is developing an application that the company will host on Amazon EC2 instances. The application must be available 24 hours a day, 7
days a week. The company needs a scalable, highly available cloud architecture to support the application.
Which guidelines should the company apply in its design to meet these requirements? (Choose two.)
A. Use EC2 Spot Instances
B. Use Multi-AZ deployments.
C. Use Auto Scaling groups
D. Use AWS Backup.
E. Use EC2 Reserved Instances.
Correct Answer: BD

Selected Answer: BC
B. Use Multi-AZ deployments
C. Use Auto Scaling groups
upvoted 1 times

Selected Answer: BC
should be bc
upvoted 1 times

Selected Answer: BC
Answer: BC
upvoted 1 times

Selected Answer: BC
agreed BC best options
upvoted 2 times

Selected Answer: BC
should be B and C. The other options do not contribute to the HA requirements
upvoted 2 times
Which AWS service helps users audit API activity across their AWS account?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS WAF
D. AWS Config
Correct Answer: A
Which AWS service should a company use to create a serverless workflow?
A. Amazon Connect
B. AWS Lambda
C. AWS Step Functions
D. Amazon Elastic Block Store (Amazon EBS)
E. AWS CodeBuild
Correct Answer: B

Lambda is also serverless. Step works on top of lambda, and step doesn't make it more serverless than lambda. The idea of step is to combine
lambda functions.
upvoted 1 times

Selected Answer: C
C. AWS Step Functions
upvoted 1 times

Selected Answer: C
should be C
Step Functions is a serverless orchestration service that lets you easily coordinate multiple Lambda functions into flexible workflows that are easy to
debug and change. Step Functions will keep your Lambda functions free of additional logic by triggering and tracking each step of your application
for you.
https://aws.amazon.com/getting-started/hands-on/create-a-serverless-workflow-step-functions-
lambda/#:~:text=Step%20Functions%20is%20a%20serverless,of%20your%20application%20for%20you.
upvoted 1 times
  Morgothz 2 weeks, 4 days ago

Selected Answer: C
I think C
https://aws.amazon.com/getting-started/hands-on/create-a-serverless-workflow-step-functions-lambda/
upvoted 1 times

Selected Answer: C
AWS Step Functions is a fully managed service that makes it easy to coordinate the components of distributed applications and microservices using
visual workflows. Building applications from individual components that each perform a discrete function lets you scale easily and change
applications quickly.
upvoted 1 times
A company wants to build a data analytics application that uses Amazon Redshift. The company needs a cost estimate for its future Amazon
Redshift usage.
Which AWS tool will provide a high-level cost estimation?
A. AWS Budgets
B. AWS Pricing Calculator
C. AWS Cost Explorer
D. Saving Plans
Correct Answer: B
A company is using Amazon EC2 instances.
Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
A. Choose the initial root password of new Linux instances.
B. Identify which users can access the EC2 instances, and manage their permissions in the operating system.
C. Apply the updates of the hypervisor where the EC2 instances are running.
D. Choose between a Wi-Fi connection and an Ethernet connection for the global internet access.
E. Identify and manage the users who are allowed to create or delete EC2 instances.
Correct Answer: CE

Selected Answer: BE
Best answer: BE
upvoted 1 times

Selected Answer: BE
Answer: BE
upvoted 2 times
  Eagle01 2 weeks, 4 days ago

I think it is a big mistake to answer C - AWS is responsible of the hypervisor
upvoted 2 times

Selected Answer: BE
BE best options.
A not an option because initial passwords are randomly generated by AWS

upvoted 2 times

Selected Answer: BE
Managing the EC2 host's hypervisor is AWS' responsibility.
upvoted 1 times
  Jinyong 2 weeks, 6 days ago

B and E
upvoted 1 times
Which AWS service gives users the ability to run AWS services on premises?
B. AWS Outposts
D. Amazon VPC
Correct Answer: B
Which guideline is a well-architected design principle tor building cloud applications?
A. Keep static data closer to compute resources.
B. Provision resources for peak capacity.
C. Design for automated recovery from failure.
D. Use tightly coupled components.
Correct Answer: C
Which actions are examples of a company's effort to rightsize its AWS resources to control cloud costs? (Choose two.)
A. Switch from Amazon RDS to Amazon DynamoDB to accommodate NoSQL datasets.
B. Base the selection of Amazon EC2 instance types on past utilization patterns.
C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.
D. Use Multi-AZ deployments for Amazon RDS.
E. Replace existing Amazon EC2 instances with AWS Elastic Beanstalk.
Correct Answer: BC
Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?
B. AWS Knowledge Center
C. AWS Support Center
D. AWS Artifact
Correct Answer: D
  Zonci 1 week, 1 day ago

Selected Answer: B
definition of the knowledge center use
upvoted 1 times
  dasbom 1 week, 2 days ago

Selected Answer: B
definition of the knowledge center use
upvoted 1 times

Selected Answer: D
I am abit confused here...
https://aws.amazon.com/compliance/faq/
what should be the correct option?

upvoted 1 times

Hi Ja
Link: https://aws.amazon.com/premiumsupport/knowledge-center/
Click the link, scroll down to security then open any service and see for yourself. Cheers
upvoted 2 times

Thanks FreddyBrainy
upvoted 1 times
  yeyc7 2 weeks, 5 days ago

its B https://aws.amazon.com/premiumsupport/knowledge-center/
upvoted 2 times

Selected Answer: B
B best option
upvoted 2 times
Which AWS service or feature can a company use to estimate AWS costs before provisioning workloads?
A. AWS Pricing Calculator
B. AWS Cost and Usage Report
C. Cost Explorer
D. AWS Budgets
Correct Answer: C
  FreddyBrainy Highly Voted  2 weeks, 6 days ago

A for sure and for certain. Admin please make the adjustement here. Estimation is Pricing calculator and visualization is AWS explorer.
upvoted 6 times
  ChangWang Most Recent  1 week, 5 days ago

Selected Answer: A
Answer is A
upvoted 1 times
  gabbani72 1 week, 6 days ago

Selected Answer: A
Sure Pricing Calculator
upvoted 1 times
  Dempsey 2 weeks, 3 days ago

Pricing Calculator is the correct answer
upvoted 3 times
  Pindol 3 weeks ago

Selected Answer: A
A for me
upvoted 3 times
An application that is hosted on Amazon EC2 has a steady and consistent workload. The application will operate for at least 1 year.
What is the MOST cost-effective instance purchasing option to meet these requirements?
A. Spot Instances
B. Reserved Instances
C. On-Demand Instances
D. Dedicated Hosts
Correct Answer: C

Selected Answer: B
https://blogs.vmware.com/cloudhealth/aws-reserved-instances-vs-on-
demand/#:~:text=The%20difference%20between%20Reserved%20Instances%20and%20On%20Demand&text=The%20only%20difference%20betw
een%20the,of%20an%20On%20Demand%20instance.
upvoted 1 times
  Eagle01 2 weeks ago

I don't know how it workes but if my vote can help to fix this wrong answer then I vote for answer B too.
upvoted 1 times
  BerhanuA 2 weeks ago

The answer is B
upvoted 2 times

B is the answer, Reserved Instance
upvoted 2 times

Selected Answer: B
Also think it is B
upvoted 2 times

Selected Answer: B
should be B
upvoted 1 times

Selected Answer: B
should be B
upvoted 3 times

B reserved
upvoted 1 times

Answer B : Reserved instance.
upvoted 1 times
  naga1 3 weeks ago

B reserved instance
upvoted 2 times
A company needs to use dashboards and charts to analyze insights from business data.
Which AWS service will provide the dashboards and charts for these insights?
A. Amazon Macie
B. Amazon Aurora
C. Amazon QuickSight
D. AWS CloudTrail
Correct Answer: D
  PalentiMuller 1 week, 3 days ago

Selected Answer: C
https://aws.amazon.com/quicksight/
Amazon QuickSight allows everyone in your organization to understand your data by asking questions in natural language, exploring through
interactive dashboards, or automatically looking for patterns and outliers powered by machine learning.
upvoted 1 times

Selected Answer: C
it should be quicksight
upvoted 1 times
  ChangWang 1 week, 5 days ago

Selected Answer: C
Answer is C
upvoted 1 times
  HariModu 2 weeks, 1 day ago

It should be C as its about business data not AWS internal/resources related.
upvoted 2 times
  Nobody71 2 weeks, 5 days ago

Selected Answer: C
Answer is C
upvoted 2 times

Answer C - Quicksight.
upvoted 2 times

Selected Answer: C
should be C, CloudTrail is for auditing API calls made to AWS resources, not business data
upvoted 1 times

Answer is C Quick Sight
upvoted 1 times

Selected Answer: 씨
why is not C?
upvoted 2 times
Which of the following are security principles in the AWS Well-Architected Framework? (Choose two.)
A. Analyze and attribute expenditures.
B. Monitor, alert, and audit actions and changes to AWS resources.
C. Deploy globally in minutes.
D. Protect data in transit and at rest.
E. Perform operations as code.
Correct Answer: DE

Selected Answer: DE
D&E fo sure. ''1. Operational Excellence Pillar (Design Principles)
• Perform operations as code
• Make frequent, small, reversible changes
• Refine operations procedures frequently
• Anticipate failure
• Learn from all operational failures
upvoted 1 times

Selected Answer: BD
B. Monitor, alert, and audit actions and changes to AWS resources. Most Voted
D. Protect data in transit and at rest. Most Voted
upvoted 2 times

Selected Answer: BD
BD are correct.
upvoted 1 times

Perform operations as code is Operational Excellence, not Security
upvoted 2 times

Selected Answer: BD
only viable options for this question
upvoted 3 times

BD are correct.
upvoted 4 times

Selected Answer: BD
B and D
upvoted 4 times
A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances
whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks.
Which benefit of the AWS Cloud does this scenario demonstrate?
A. Cost savings
B. Improved operational resilience
C. Increased business agility
D. Enhanced security
Correct Answer: D

Selected Answer: C
Increased business agility
upvoted 1 times

Definitively C, The question is nothing about Security
upvoted 1 times
  HariModu 2 weeks, 1 day ago

Its C as you are able to provision it shorter time compared to on-premise
upvoted 2 times

Selected Answer: C
should be C
upvoted 2 times

Selected Answer: C
Business agility correct is correct
upvoted 3 times

Answer: C
The ability to launch in 2 days instead of 3 weeks shows increased business agility. Agility is related to time.
upvoted 2 times

Selected Answer: 씨
Why is not C?
upvoted 2 times
A company wants to design a reliable web application that is hosted on Amazon EC2.
Which approach will achieve this goal?
A. Launch large EC2 instances in the same Availability Zone
B. Spread EC2 instances across more than one security group
C. Spread EC2 instances across more than one Availability Zone.
D. Use an Amazon Machine Image (AMI) from AWS Marketplace.
Correct Answer: C

Selected Answer: C
answer C
upvoted 2 times
Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?
A. AWS Secrets Manager
B. Amazon Inspector
C. AWS CodeDeploy
Correct Answer: D

Answer D
upvoted 2 times
A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to
visit specific websites that are known to be malicious.
A. AWS Shield Advanced
B. Amazon Route 53
C. Amazon GuardDuty
D. AWS Network Firewall
Correct Answer: C

Selected Answer: D
correct one is D
upvoted 1 times

answer D
upvoted 3 times

Selected Answer: D
should be D
https://aws.amazon.com/blogs/desktop-and-application-streaming/filtering-internet-traffic-from-amazon-workspaces/
AWS Network Firewall extends protection beyond SG- and NACL-levels by protecting at the route level and offering stateless and stateful rules
from layers 3 through 7 in the OSI Model. It uses the certificate fully qualified domain name (FQDN) or Server Name Indication (SNI) to determine if
a website is allowed for HTTPS traffic. This is a commonly requested security requirement. Reviewing these design examples of AWS Network
Firewall will accelerate your migration to Amazon WorkSpaces. AWS Network Firewall is a managed service, with no infrastructure to manage or
patch you can simplify operational excellence. Native settings for advanced filtering (including domain name), and network traffic inspection can
alert and block traffic related to malware. It also has layer 7 intrusion prevent system (IPS) rules, and the ability to apply TLS fingerprinting to
prevent a spoofed IP or FQDN.
upvoted 4 times
A company wants to build an application that uses AWS Lambda to run Python code.
Under the AWS shared responsibility model, which tasks will be the company's responsibility? (Choose two.)
A. Management of the underlying infrastructure
B. Management of the operating system.
C. Writing the business logic code.
D. Installation of the computer language runtime.
E. Providing AWS Identity and Access Management (1AM) access to the Lambda service.
Correct Answer: AE
  SLEON01 Highly Voted  2 weeks, 4 days ago

Selected Answer: CE
CE best options. Lambda does not have underlying hardware, It is serverless
upvoted 5 times
  Eagle01 Most Recent  2 weeks ago

C and E
upvoted 2 times

Correction, correct answer is CE. Thank you
upvoted 3 times

Answer: CE
upvoted 3 times

Answer is BE.
Management of the operating system + Providing identity & access management. Here's why:
Under the shared responsibility model:
Customer is responsible for security in the cloud as such it is: Customer Data, Platform, applications, IDENTITY & ACCESS MANAGEMENT,
OPERATING SYSTEM , Network & firewall configuration including client side and server side.
AWS is responsible of security of the cloud and it is : the global infrastructure including regions, AZ, Edge location, as well as foundation services
including: compute, storages, database, network,
upvoted 2 times

Selected Answer: CE
AWS is responsible for the underlying infrastucture.
upvoted 2 times
Which of the following is one of the pillars of the AWS Well-Architected Framework?
A. Efficiency and redundancy
D. Business optimization
Correct Answer: C

Answer: C
upvoted 2 times
A company has multiple departments. The company must charge each department for its exact AWS Cloud usage, including data transfer costs.
How can the company determine these costs by department?
A. Use one AWS account for each department.
B. Use cost allocation tags on services that are used the most often.
C. Use AWS Trusted Advisor.
D. Use Savings Plans.
Correct Answer: B

Selected Answer: A
A. Exact cost
upvoted 2 times
  Josh11211 6 days, 17 hours ago

Can cost allocation tags be used for data transfer costs?
upvoted 1 times
  gabbani72 1 week ago

Selected Answer: A
A for me
upvoted 1 times
  dasbom 1 week, 2 days ago

Selected Answer: A
the exact cost, use separate accounts for each department
upvoted 1 times
An ecommerce company has Amazon EC2 instances running as web servers. There is a predictable pattern of peak traffic load that occurs two
times each day, always at the same time. The EC2 instances are idle for the remainder of the day.
What is the MOST cost-effective way to manage these resources while maintaining fault tolerance?
A. Use an Auto Scaling group to scale resources in and out based on demand.
B. Purchase Reserved Instances to ensure peak capacity at all times.
C. Write a cron job to stop the EC2 instances when the traffic demand is low.
D. Write a script to vertically scale the EC2 instances during peak traffic demand.
Correct Answer: A
A company wants to integrate its online shopping website with social media login credentials.
Which AWS service can the company use to make this integration?
A. AWS Directory Service
C. Amazon Cognito
D. AWS IAM Identity Center (AWS Single Sign-On)
Correct Answer: C
  AngloSoliman 2 weeks ago

i am a little bit confused here ,
should it be C or D ?
upvoted 1 times
  LPIT 1 week, 2 days ago

Login with user social credential is Cognito
upvoted 2 times
A company needs to create graphs that show historical and current costs for the company's AWS account.
Which AWS service or tool provides this functionality?
A. AWS Config
B. AWS Cost and Usage Report
C. AWS Budgets
D. AWS Cost Explorer
Correct Answer: D

This is a repeat question
upvoted 1 times

Selected Answer: D
sorry. I missed out the graph part, it should be D - AWS Cost Explorer
upvoted 1 times

Answer B is correct. Cheers
upvoted 1 times

This time I don't agree with you
upvoted 1 times

Yes Eagle01 you are correct - it seems like I made a mistake here - I didn’t pay attention to the the graph part which conveys to Cost
explorer. Apologies. So answer D it shall be.
upvoted 1 times

Answer: D
AWS Cost and Usage Reports is CVS not graphs

upvoted 1 times

Selected Answer: B
agreed with sleon01's explanation
upvoted 2 times

AWS Cost and Usage Reports tracks your AWS usage and provides estimated charges associated with your account. Each report contains line items
for each unique combination of AWS products, usage type, and operation that you use in your AWS account. You can customize the AWS Cost and
Usage Reports to aggregate the information either by the hour, day, or month.
upvoted 1 times

Selected Answer: B
B, best option
upvoted 1 times
A company acquired another corporation. The company now has two AWS accounts.
Which AWS service or tool can the company use to consolidate the billing for these two accounts?
C. AWS License Manager
D. Cost Explorer
Correct Answer: B

B is correct.
upvoted 1 times
Which AWS Support plans provide a complete set of AWS Trusted Advisor checks?
A. AWS Business Support and AWS Basic Support
B. AWS Enterprise Support and AWS Business Support
C. AWS Enterprise Support and AWS Developer Support
D. AWS Business Support and AWS Developer Support
Correct Answer: A
  sn1988 5 days, 18 hours ago

B is right answer
upvoted 1 times

Selected Answer: B
upvoted 1 times
  moms 2 weeks ago

upvoted 1 times

Answer is B.
Big mistake from the administrator.
This Test got a very good questions, you should check the answers
upvoted 3 times

His mistakes are embarrassing
upvoted 1 times

Answer B
upvoted 1 times

Selected Answer: B
B is correct
upvoted 3 times

Answer B. Cheers
upvoted 3 times

Selected Answer: B
should be B
upvoted 3 times

Selected Answer: B
Answer is B
https://www.amazonaws.cn/en/support/compare-plans/
upvoted 1 times
Which of the following is a method for building a highly available application on AWS?
A. Place an Independent copy of the application in two or more Availability Zones.
B. Place codependent components of the application in two or more Availability Zones
C. Run one version of the application in one Availability Zone and run an earlier version of the application in a second Availability Zone.
D. Deploy two copies of the application in a single Availability Zone.
Correct Answer: A
Which statement is an AWS Cloud best practice that focuses on the elasticity and agility of cloud computing?
A. Provision capacity based on past usage and theoretical peaks.
B. Dynamically scale to meet usage demands.
C. Build the application and infrastructure in a data center that grants physical access.
D. Break apart the application into loosely coupled components.
Correct Answer: B

Answer B
upvoted 2 times

Answer B. Agreed. Elasticity is based on the ability to autoscale or scale.
upvoted 2 times
Which AWS service could an administrator use to provide desktop environments for several employees?
B. AWS Fargate
C. AWS WAF
D. AWS Workspaces
Correct Answer: D

Answer D
upvoted 1 times

Answer D. Agreed
upvoted 2 times
A company simulates workflows to review and validate that all processes are effective and that staff are familiar with the processes.
Which design principle of the AWS Well-Architected Framework is the company following with this practice?
A. Perform operations as code.
B. Refine operation procedures frequently.
C. Make frequent, small, reversible changes.
D. Structure the company to support business outcomes.
Correct Answer: A
  jpush 1 week ago

Answer is B
https://wa.aws.amazon.com/wat.pillar.operationalExcellence.en.html
upvoted 1 times

Selected Answer: B
B. Refine operation procedures frequently.
upvoted 1 times

Selected Answer: B
I think it is B
upvoted 1 times

This time I think the administrator is right
https://wa.aws.amazon.com/wat.pillar.operationalExcellence.en.html#:~:text=Use%20operations%20as%20code%20in%20the%20cloud%20and,pro
duction%20environments%20with%20increasing%20levels%20of%20operations%20control.
upvoted 1 times

Selected Answer: B
should be B
upvoted 1 times

Selected Answer: B
should be B
upvoted 2 times
Which AWS services or resources can a company use directly on its on-premises servers? (Choose two.)
A. AWS OpsWorks
D. Application Load Balancer
E. Amazon Cognito
Correct Answer: AE

Selected Answer: CD
my choice
upvoted 1 times

AC is my choice.
upvoted 1 times

I don't think load balancer fits the bill. It's not used directly on premise server. Opsworks does.
upvoted 1 times

Selected Answer: CD
D. Application Load Balancer
upvoted 1 times
  moms 2 weeks, 1 day ago

CD correct one
upvoted 2 times

Selected Answer: CD
should be C and D
https://aws.amazon.com/elasticloadbalancing/application-load-
balancer/#:~:text=IP%20addresses%20as%20Targets,any%20interface%20on%20an%20instance.
You can load balance any application hosted in AWS or on-premises using IP addresses of the application backends as targets. This allows load
balancing to an application backend hosted on any IP address and any interface on an instance.
https://aws.amazon.com/storagegateway/features/
You can use Storage Gateway to simplify storage management and reduce costs for key hybrid cloud storage use cases. These include moving
backups to the cloud, using on-premises file shares backed by cloud storage, and providing low-latency access to data in AWS for on-premises
applications.
upvoted 2 times

Hi JA2018.
What you answered makes sense but what about AWS OpsWorks?
upvoted 1 times
According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of
the following?
A. Amazon DynamoDB
B. Amazon EC2 instances
C. Amazon RDS instances
D. Amazon S3
Correct Answer: B

B correct
upvoted 1 times
Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different
countries?
A. Pay-as-you-go pricing
B. Capacity forecasting
C. Economies of scale
D. Global reach
Correct Answer: D

D for real
upvoted 1 times

Answer D. Agreed
upvoted 1 times
Which option is an advantage of AWS Cloud computing that minimizes variable costs?
A. High availability
B. Economies of scale
C. Global reach
D. Agility
Correct Answer: A

Selected Answer: B
B - Economies of scale
upvoted 3 times

Does High Availability minimize variable Cost?
I don't think so
Answer is B - Economies of scale is an advantage of AWS Cloud computing minimizing costs
upvoted 1 times

It should be B
upvoted 3 times

Selected Answer: B
should be B
upvoted 4 times

Selected Answer: 나
Why is not B?
upvoted 4 times
Which action will help increase security in the AWS Cloud?
A. Enable programmatic access for all IAM users.
B. Use IAM users instead of IAM roles to delegate permissions.
C. Rotate access keys on a reoccurring basis.
D. Use inline policies instead of customer managed policies.
Correct Answer: B

Selected Answer: C
C. Rotate access keys on a reoccurring basis.
upvoted 3 times

I think it is C, actually, it is recommended to use Roles instead of users
upvoted 2 times

Selected Answer: C
should be C
Where possible, we recommend relying on temporary credentials instead of creating long-term credentials such as access keys. However, for
scenarios in which you need IAM users with programmatic access and long-term credentials, we recommend that you rotate access keys. Regularly
rotating long-term credentials helps you familiarize yourself with the process. This is useful in case you are ever in a situation where you must
rotate credentials, such as when an employee leaves your company. We recommend that you use IAM access last used information to rotate and
remove access keys safely.
upvoted 3 times
A user wants to transport data between AWS and an on-premises environment using a private network connection.
Which AWS service or feature can be used to meet these requirements?
A. NAT gateway
C. Amazon VPC
D. Internet gateway
Correct Answer: B

correct B
upvoted 2 times
Which AWS service can serve a static website?
A. Amazon S3
B. Amazon Route 53
C. Amazon QuickSight
D. AWS X-Ray
Correct Answer: B

Selected Answer: A
Amazon S3
upvoted 2 times

Answer is A
upvoted 1 times

Answer A.
Link: https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteHosting.html
upvoted 3 times

A - S3.
upvoted 2 times

Selected Answer: A
should be A
upvoted 1 times

Selected Answer: 답
Why is not A?
upvoted 2 times
Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Choose two.)
A. Minimize upfront design
B. Loose coupling
C. Disposable resources
D. Server design and concurrency
E. Minimal viable product
Correct Answer: BD

Selected Answer: BD
Disposable resources do not improve the operation of workloads.
upvoted 1 times
  marcshj 3 days, 9 hours ago

Selected Answer: BC
B and C
upvoted 1 times

All are true, however we need to apply the principal to something that helps operation, so it's BD
upvoted 1 times
  AF_1221 1 week, 5 days ago

B and C
upvoted 3 times

AWS Certified Cloud Practitioner Exam - Free Exam Q&as, Page 1 - ExamTopics

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

AWS Certified Cloud Practitioner Exam - Free Exam Q&as, Page 1 - ExamTopics

Uploaded by

Copyright:

Available Formats

12/7/22, 8:59 AM AWS Certified Cloud Practitioner Exam – Free Exam Q&As, Page 1 | ExamTopics

- Expert Verified, Online, Free.

 Custom View Settings

Topic 1 - Single Topic

A. AWS Auto Scaling

B. Amazon Kinesis Video Streams

C. Elastic Load Balancing

Community vote distribution

  Jlee7 2 days, 10 hours ago

  Abhiram2404 2 days, 17 hours ago

  Scylon 2 weeks, 6 days ago

  JYKL88 3 weeks, 1 day ago

  ZK1999 1 month ago

  SOLIU 1 month, 1 week ago

  ccpmad 1 month, 2 weeks ago

  ymbv 1 month, 2 weeks ago

  JA2018 1 month, 2 weeks ago

  zeighnab 1 month, 2 weeks ago

  SoloMehar 1 month, 3 weeks ago

  Suresh78 1 month, 3 weeks ago

  ooyanpaing 1 month, 4 weeks ago

  sri_ram 2 months ago

  MST5 2 months ago

  apchandana 2 months ago

Community vote distribution

  jackmuihk Highly Voted  3 months, 1 week ago

  jackmuihk 3 months, 1 week ago

  zomo2022 Most Recent  4 days, 16 hours ago

  picosola 1 week, 2 days ago

  bulla 2 weeks, 3 days ago

  sruet 2 weeks, 3 days ago

  ZK1999 1 month ago

  Kantene 1 month, 1 week ago

  newme 1 month, 3 weeks ago

  Suresh78 1 month, 3 weeks ago

  ooyanpaing 1 month, 4 weeks ago

  Makanhudo 2 months ago

  JuanAnTech 2 months, 1 week ago

  T_234 2 months, 1 week ago

  nitul 2 months, 2 weeks ago

  M5858 2 months, 2 weeks ago

  khulecal 2 months, 2 weeks ago

  sumanshu 2 months, 3 weeks ago

B. Discounts for products on Amazon.com

E. Increased staff retention

Community vote distribution

  Kayode Highly Voted  3 months ago

  ZK1999 Most Recent  1 month ago

  Kantene 1 month, 1 week ago

  ACLOUD_PRACTITIONER 1 month, 2 weeks ago

  newme 1 month, 3 weeks ago

  ooyanpaing 1 month, 4 weeks ago

  Nazdak 2 months ago

  JuanAnTech 2 months, 1 week ago

  T_234 2 months, 1 week ago

  Moedges 2 months, 1 week ago

  jrba0001 2 months, 3 weeks ago

  sumanshu 2 months, 3 weeks ago

  Julio_P 3 months ago

Community vote distribution

  MottaM 2 days, 21 hours ago

My answer would be B because of the following reason:

Perform operations as code