New Year Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

AWS Certified Cloud Practitioner Question and Answers

AWS Certified Cloud Practitioner

Last Update Jan 14, 2026
Total Questions : 877

We are offering FREE CLF-C02 Amazon Web Services exam questions. All you do is to just go and sign up. Give your details, prepare CLF-C02 free exam questions and then go for complete pool of AWS Certified Cloud Practitioner test questions that will help you more.

CLF-C02 pdf

CLF-C02 PDF

$36.75  $104.99
CLF-C02 Engine

CLF-C02 Testing Engine

$43.75  $124.99
CLF-C02 PDF + Engine

CLF-C02 PDF + Testing Engine

$57.75  $164.99
Questions 1

Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

Options:

A.  

Amazon DynamoDB

B.  

AWS CodePipeline

C.  

AWS Batch

D.  

AWS Step Functions

Discussion 0
Questions 2

A company needs to launch an Amazon EC2 instance.

Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

Options:

A.  

Amazon EC2 Auto Scaling

B.  

Amazon Data Lifecycle Manager (Amazon DLM)

C.  

Amazon Machine Image (AMI)

D.  

Amazon Elastic Block Store (Amazon EBS) volume

Discussion 0
Questions 3

A company wants to manage access and permissions for its third-party software as a service (SaaS)

applications. The company wants to use a portal where end users can access assigned AWS accounts and AWS Cloud applications.

Which AWS service should the company use to meet these requirements?

Options:

A.  

Amazon Cognito

B.  

AWS IAM Identity Center (AWS Single Sign-On)

C.  

AWS Identity and Access Management (IAM)

D.  

AWS Directory Service for Microsoft Active Directory

Discussion 0
Questions 4

In which situations should a company create an 1AM user instead of an 1AM role? (Select TWO.)

Options:

A.  

When an application that runs on Amazon EC2 instances requires access to other AWS services

B.  

When the company creates AWS access credentials for individuals

C.  

When the company creates an application that runs on a mobile phone that makes requests to AWS

D.  

When the company needs to add users to 1AM groups

E.  

When users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time

Discussion 0
Questions 5

A company wants to use the AWS Cloud as an offsite backup location for its on-premises infrastructure.

Which AWS service will meet this requirement MOST cost-effectively?

Options:

A.  

Amazon S3

B.  

Amazon Elastic File System (Amazon EFS)

C.  

Amazon FSx

D.  

Amazon Elastic Block Store (Amazon EBS)

Discussion 0
Questions 6

Which actions are examples of a company's effort to right size its AWS resources to control cloud costs? (Select TWO.)

Options:

A.  

Switch from Amazon RDS to Amazon DynamoDB to accommodate NoSQL datasets.Q B. Base the selection of Amazon EC2 instance types on past utilization patterns.

B.  

Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.

C.  

Use Multi-AZ deployments for Amazon RDS.

D.  

Replace existing Amazon EC2 instances with AWS Elastic Beanstalk.

Discussion 0
Questions 7

Which of the following acts as an instance-level firewall to control inbound and outbound access?

Options:

A.  

Network access control list

B.  

Security groups

C.  

AWS Trusted Advisor

D.  

Virtual private gateways

Discussion 0
Questions 8

Which AWS service provides highly durable object storage?

Options:

A.  

Amazon S3

B.  

Amazon Elastic File System (Amazon EFS)

C.  

Amazon Elastic Block Store (Amazon EBS)

D.  

Amazon FSx

Discussion 0
Questions 9

A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically.

Which service or feature will meet these requirements?

Options:

A.  

Amazon DynamoDB

B.  

Amazon EC2 Spot Instances

C.  

AWS Snow Family

D.  

Amazon EC2 Auto Scaling

Discussion 0
Questions 10

A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting.

Which AWS service should the company use?

Options:

A.  

Amazon GuardDuty

B.  

AWS WAF

C.  

AWS Trusted Advisor

D.  

Amazon Inspector

Discussion 0
Questions 11

A company is running an order processing system on Amazon EC2 instances. The company wants to migrate microservices-based application.

Which combination of AWS services can the application use to meet these requirements? (Select TWO.)

Options:

A.  

Amazon Simple Queue Service (Amazon SQS)

B.  

AWS Lambda

C.  

AWS Migration Hub

D.  

AWS AppSync

E.  

AWS Application Migration Service

Discussion 0
Questions 12

A company wants its Amazon EC2 instances to share the same geographic area but use redundant underlying power sources.

Which solution will meet these requirements?

Options:

A.  

Use EC2 instances across multiple Availability Zones in the same AWS Region.

B.  

Use Amazon CloudFront as the database for the EC2 instances.

C.  

Use EC2 instances in the same edge location and the same Availability Zone.

D.  

Use EC2 instances in AWS OpsWorks stacks in different AWS Regions.

Discussion 0
Questions 13

Which of the following is a benefit of decoupling an AWS Cloud architecture?

Options:

A.  

Reduced latency

B.  

Ability to upgrade components independently

C.  

Decreased costs

D.  

Fewer components to manage

Discussion 0
Questions 14

Which AWS service or tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

AWS Organizations

C.  

AWS Cost Explorer

D.  

AWS Budgets

Discussion 0
Questions 15

A cloud engineer wants to know the percentage of the allocated compute units that are in use for a specific Amazon EC2 instance.

Which AWS service can provide this information?

Options:

A.  

AWS CloudTrail

B.  

AWS Config

C.  

Amazon CloudWatch

D.  

AWS Artifact

Discussion 0
Questions 16

Which benefit does Amazon Rekognition provide?

Options:

A.  

The ability to place watermarks on images

B.  

The ability to detect objects that appear in pictures

C.  

The ability to resize millions of images automatically

D.  

The ability to bid on object detection jobs

Discussion 0
Questions 17

Which AWS service offers a global content delivery network (CDN) that helps companies securely deliver websites, videos, applications,

and APIs at high speeds with low latency?

Options:

A.  

Amazon EC2

B.  

Amazon CloudFront

C.  

Amazon CloudWatch

D.  

AWS CloudFormation

Discussion 0
Questions 18

Which AWS service can a company use to build conversational chatbots for customer service?

Options:

A.  

Amazon Lex

B.  

AWS Amplify

C.  

Amazon Comprehend

D.  

Amazon Polly

Discussion 0
Questions 19

A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available. Which solution meets these requirements?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use EC2 instances in multiple edge locations.

C.  

Use EC2 instances in the same Availability Zone but in different AWS Regions.

D.  

Use EC2 instances in the same edge location and the same AWS Region.

Discussion 0
Questions 20

Which AWS service can defend against DDoS attacks?

Options:

A.  

AWS Firewall Manager

B.  

AWS Shield Standard

C.  

AWS WAF

D.  

Amazon Inspector

Discussion 0
Questions 21

Which AWS service or feature is associated with a subnet in a VPC and is used to control inbound and outbound traffic?

Options:

A.  

Amazon Inspector

B.  

Network ACLs

C.  

AWS Shield

D.  

VPC Flow Logs

Discussion 0
Questions 22

Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Config

C.  

AWS Security Hub

D.  

AWS Systems Manager

Discussion 0
Questions 23

A company is running applications on Amazon EC2 instances in the same AWS account for several different projects. The company wants to track the infrastructure costs for each of the projects separately. The company must conduct this tracking with the least possible impact to the existing infrastructure and with no additional cost.

What should the company do to meet these requirements?

Options:

A.  

Use a different EC2 instance type for each project.

B.  

Publish project-specific custom Amazon CloudWatch metrics for each application.

C.  

Deploy EC2 instances for each project in a separate AWS account.

D.  

Use cost allocation tags with values that are specific to each project.

Discussion 0
Questions 24

A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket.

Which AWS service will integrate directly with the event notification?

Options:

A.  

AWS Lambda

B.  

Amazon EC2

C.  

Amazon Elastic Container Registry (Amazon ECR)

D.  

AWS Elastic Beanstalk

Discussion 0
Questions 25

A company is preparing to launch a redesigned website on AWS. Users from around the world will download digital handbooks from the website.

Which AWS solution should the company use to provide these static files securely?

Options:

A.  

Amazon Kinesis Data Streams

B.  

Amazon CloudFront with Amazon S3

C.  

Amazon EC2 instances with an Application Load Balancer

D.  

Amazon Elastic File System (Amazon EFS)

Discussion 0
Questions 26

A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.

Which AWS service or tool provides this functionality?

Options:

A.  

AWS Budgets

B.  

AWS Cost Explorer

C.  

Savings Plans

D.  

AWS Billing Conductor

Discussion 0
Questions 27

A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing

backup workflows.

Which AWS service should the company use to meet these requirements?

Options:

A.  

Amazon Elastic Block Store (Amazon EBS)

B.  

AWS Storage Gateway

C.  

Amazon Elastic Container Service (Amazon ECS)

D.  

AWS Lambda

Discussion 0
Questions 28

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.

Which costs will the company eliminate with this migration? (Select TWO.)

Options:

A.  

Cost of data center operations

B.  

Cost of application licensing

C.  

Cost of marketing campaigns

D.  

Cost of physical server hardware

E.  

Cost of network management

Discussion 0
Questions 29

A company wants to push VPC Flow Logs to an Amazon S3 bucket.

A company wants to optimize long-term compute costs of AWS Lambda functions and Amazon EC2 instances.

Which AWS purchasing option should the company choose to meet these requirements?

Options:

A.  

Dedicated Hosts

B.  

Compute Savings Plans

C.  

Reserved Instances

D.  

Spot Instances

Discussion 0
Questions 30

A company needs to configure rules to identify threats and protect applications from malicious network access.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

Amazon QuickSight

C.  

AWS WAF

D.  

Amazon Detective

Discussion 0
Questions 31

A company wants to migrate to the AWS Cloud. The company needs the ability to acquire resources when the resources are necessary.

The company also needs the ability to release those resources when the resources are no longer necessary.

Which architecture concept of the AWS Cloud meets these requirements?

Options:

A.  

Elasticity

B.  

Availability

C.  

Reliability

D.  

Durability

Discussion 0
Questions 32

Which AWS services can a company use to host and run a MySQL database? (Select TWO.)

Options:

A.  

Amazon RDS

B.  

Amazon DynamoDB

C.  

Amazon S3

D.  

Amazon EC2

E.  

Amazon MQ

Discussion 0
Questions 33

A company wants its workload to perform consistently and correctly.

Which benefit of AWS Cloud computing does this goal represent?

Options:

A.  

Security

B.  

Elasticity

C.  

Pay-as-you-go pricing

D.  

Reliability

Discussion 0
Questions 34

Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

Options:

A.  

Amazon Detective

B.  

Amazon Inspector

C.  

Amazon Macie

D.  

AWS Security Hub

Discussion 0
Questions 35

A company is designing a web application that will run on Amazon EC2 instances.

Which AWS services and features will improve availability and reduce the impact of failures for this application?

(Select TWO.)

Options:

A.  

Amazon EC2 Auto Scaling for the EC2 instances

B.  

VPC subnet ACLs to check the health of a service

C.  

Resources that are distributed across multiple Availability Zones

D.  

Configuration of AWS Server Migration Service (AWS SMS) to move the EC2 instances to a differentAWS Region

E.  

Resources that are distributed across multiple AWS points of presence

Discussion 0
Questions 36

Which of the following is a cloud benefit that AWS offers to its users?

Options:

A.  

The ability to configure AWS data center hypervisors

B.  

The ability to purchase hardware in advance of increased traffic

C.  

The ability to deploy to AWS on a global scale

D.  

Compliance audits for user IT environments

Discussion 0
Questions 37

Which options are common stakeholders for the AWS Cloud Adoption Framework (AWS CAF) platform perspective? (Select TWO.)

Options:

A.  

Chief financial officers (CFOs)

B.  

IT architects

C.  

Chief information officers (CIOs)

D.  

Chief data officers (CDOs)

E.  

Engineers

Discussion 0
Questions 38

Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

Options:

A.  

Elimination of expenses for running and maintaining data centers

B.  

Price discounts that are identical to discounts from hardware providers

C.  

Distribution of all operational controls to AWS

D.  

Elimination of operational expenses

Discussion 0
Questions 39

Which of the following are customer responsibilities under the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Physical security of AWS facilities

B.  

Configuration of security groupsQ C. Encryption of customer data on AWS

C.  

Management of AWS Lambda infrastructureQ E. Management of network throughput of each AWS Region

Discussion 0
Questions 40

A company that is planning to migrate to the AWS Cloud is based in an isolated area that has limited internet connectivity. The company needs to perform local data processing on premises. The company needs a solution that can operate without a stable internet connection.

Which AWS service will meet these requirements?

Options:

A.  

Amazon S3

B.  

AWS Snowball Edge

C.  

AWS StorageGateway

D.  

AWS Backup

Discussion 0
Questions 41

A company wants to implement controls (guardrails) in a newly created AWS Control Tower landing zone.

Which AWS services or features can the company use to create and define these controls (guardrails)? (Select TWO.)

Options:

A.  

AWS Config

B.  

Service control policies (SCPs)

C.  

Amazon GuardDuty

D.  

AWS Identity and Access Management (IAM)

E.  

Security groups

Discussion 0
Questions 42

What are some advantages of using Amazon EC2 instances lo host applications in the AWS Cloud instead of on premises? (Select TWO.)

Options:

A.  

EC2 includes operating system patch management

B.  

EC2 integrates with Amazon VPC. AWS CloudTrail, and AWS Identity and Access Management (IAM)

C.  

EC2 has a 100% service level agreement (SLA).

D.  

EC2 has a flexible, pay-as-you-go pricing model.

E.  

EC2 has automatic storage cost optimization.

Discussion 0
Questions 43

Which duties are the responsibility of a company that is using AWS Lambda? (Select TWO.)

Options:

A.  

Security inside of code

B.  

Selection of CPU resources

C.  

Patching of operating system

D.  

Writing and updating of code

E.  

Security of underlying infrastructure

Discussion 0
Questions 44

A company has a workload that requires data to be collected, analyzed, and stored on premises. The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.

Which AWS service meets this requirement?

Options:

A.  

AWS Outposts

B.  

AWS Storage Gateway

C.  

AWS Direct Connect

D.  

AWS Snowball

Discussion 0
Questions 45

Which benefit of AWS Cloud computing provides lower latency between users and applications?

Options:

A.  

Agility

B.  

Economies of scale

C.  

Global reach

D.  

Pay-as-you-go pricing

Discussion 0
Questions 46

A company has multiple AWS accounts that include compute workloads that cannot be interrupted. The company wants to obtain billing discounts that are based on the company's use of AWS services.

Which AWS feature or purchasing option will meet these requirements?

Options:

A.  

Resource tagging

B.  

Consolidated billing

C.  

Pay-as-you-go pricing

D.  

Spot Instances

Discussion 0
Questions 47

Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Select TWO.)

Options:

A.  

VPC endpoint

B.  

Virtual private gatewayQ C. AWS Shield Standard

C.  

AWS Config

D.  

AWS WAF

Discussion 0
Questions 48

Which of the following is an advantage of AWS Cloud computing?

Options:

A.  

Trade security for elasticity.

B.  

Trade operational excellence for agility.

C.  

Trade fixed expenses for variable expenses.

D.  

Trade elasticity for performance.

Discussion 0
Questions 49

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

Options:

A.  

Sustainability

B.  

Operations

C.  

Performance efficiency

D.  

Reliability

Discussion 0
Questions 50

Which factors affect costs in the AWS Cloud? (Select TWO.)

Options:

A.  

The number of unused AWS Lambda functions

B.  

The number of configured Amazon S3 buckets

C.  

Inbound data transfers without acceleration

D.  

Outbound data transfers without acceleration

E.  

Compute resources that are currently in use

Discussion 0
Questions 51

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do to meet this requirement?

Options:

A.  

Use AWS Key Management Service (AWS KMS).

B.  

Use multiple AWS accounts and consolidated billing.

C.  

Use AWS CloudFormation to deploy the infrastructure.

D.  

Rightsized all the EC2 instances that are used in the deployment.

Discussion 0
Questions 52

Which AWS Well-Architected Framework concept represents a system's ability to remain functional when the system encounters operational problems?

Options:

A.  

Consistency

B.  

Elasticity

C.  

Durability

D.  

Latency

Discussion 0
Questions 53

Which AWS service can a company use to securely store and encrypt passwords for a database?

Options:

A.  

AWS Shield

B.  

AWS Secrets Manager

C.  

AWS Identity and Access Management (IAM)

D.  

Amazon Cognito

Discussion 0
Questions 54

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

Options:

A.  

Set up multi-factor authentication (MFA) for each Workspaces user account.

B.  

Ensure the environmental safety and security of the AWS infrastructure that hosts Workspaces.

C.  

Provide security for Workspaces user accounts through AWS Identity and Access Management(IAM).

D.  

Configure AWS CloudTrail to log API calls and user activity.A company stores data in an Amazon S3 bucket. The company must control who has permission to read, write,or delete objects that the company stores in the S3 bucket.

Discussion 0
Questions 55

A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.

Which AWS service will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

AWSWAF

C.  

Amazon Macie

D.  

AWS Shield

Discussion 0
Questions 56

A company wants to migrate its application to AWS. The company wants to replace upfront expenses with variable payment that is based on usage.

What should the company do to meet these requirements?

Options:

A.  

Use pay-as-you-go pricing.

B.  

Purchase Reserved Instances.

C.  

Pay less by using more.

D.  

Rightsize instances.

Discussion 0
Questions 57

Which AWS services can limit manual errors by consistently provisioning AWS resources in multiple envirom

Options:

A.  

AWS Config

B.  

AWS CodeStar

C.  

AWS CloudFormation

D.  

AWS Cloud Development Kit (AWS CDK)

E.  

AWS CodeBuild

Discussion 0
Questions 58

A company needs to engage third-party consultants to help maintain and support its AWS environment and the company's business needs.

Which AWS service or resource will meet these requirements?

Options:

A.  

AWS Support

B.  

AWS Organizations

C.  

AWS Service Catalog

D.  

AWS Partner Network (APN)

Discussion 0
Questions 59

Which Amazon EC2 instan ce pricing model can provide discounts of up to 90%?

Options:

A.  

Reserved Instances

B.  

On-Demand

C.  

Dedicated Hosts

D.  

Spot Instances

Discussion 0
Questions 60

What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

Options:

A.  

AWS Certificate Manager

B.  

AWS Systems Manager

C.  

AWS Artifact

D.  

Amazon Inspector

Discussion 0
Questions 61

A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources.

Which AWS service should the company use?

Options:

A.  

AWS Config

B.  

AWS Secrets Manager

C.  

AWS CloudTrail

D.  

AWS Trusted Advisor

Discussion 0
Questions 62

A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available.

Which solution meets these requirements?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use Amazon CloudFront as the database for the EC2 instances.

C.  

Use EC2 instances in the same edge location and the same Availability Zone.

D.  

Use EC2 instances in the same edge location and the same AWS Region.

Discussion 0
Questions 63

A company needs to run some of its workloads on premises to comply with regulatory guidelines. The company wants to use the AWS Cloud to run workloads that are not required to be on premises. The company also wants to be able to use the same API calls for the on-premises workloads and the cloud workloads.

Which AWS service or feature should the company use to meet these requirements?

Options:

A.  

Dedicated Hosts

B.  

AWS Outposts

C.  

Availability Zones

D.  

AWS Wavelength

Discussion 0
Questions 64

Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?

Options:

A.  

AWS Security Hub

B.  

Security groups

C.  

Network ACL

D.  

AWSWAF

Discussion 0
Questions 65

A company wants to migrate a database from an on-premises environment to Amazon RDS.

After the migration is complete, which management task will the company still be responsible for?

Options:

A.  

Hardware lifecycle management

B.  

Application optimization

C.  

Server maintenance

D.  

Power, network, and cooling provisioning

Discussion 0
Questions 66

A company needs to categorize and track AWS usage cost based on business categories.

Which AWS service or feature should the company use to meet these requirements?

Options:

A.  

Cost allocation tags

B.  

AWS Organizations

C.  

AWS Security Hub

D.  

AWS Cost and Usage Report

Discussion 0
Questions 67

A company needs to search for text in documents that are stored in Amazon S3.

Which AWS service will meet these requirements?

Options:

A.  

Amazon Kendra

B.  

Amazon Rekognition

C.  

Amazon Polly

D.  

Amazon Lex

Discussion 0
Questions 68

Which option is AWS responsible for under the AWS shared responsibility model?

Options:

A.  

Network and firewall configuration

B.  

Client-side data encryption

C.  

Management of user permissions

D.  

Hardware and infrastructure

Discussion 0
Questions 69

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.

What is the MOST operationally efficient AWS solution for this scenario?

Options:

A.  

Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.

B.  

Configure and deploy an AWS Storage Gateway file gateway. Connect each user's workstation to the file gateway.

C.  

Move each user's working environment to Amazon Workspaces. Set up an Amazon WorkDocs account for each user.

D.  

Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.

Discussion 0
Questions 70

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

Options:

A.  

Cost of application software licenses

B.  

Cost of the hardware infrastructure on AWS

C.  

Cost of power for the AWS servers

D.  

Cost of physical security for the AWS data center

Discussion 0
Questions 71

What are the characteristics of Availability Zones? (Select TWO.)

Options:

A.  

All Availability Zones in an AWS Region are interconnected with high-bandwidth, low-latency networking

B.  

Availability Zones are physically separated by a minimum of distance of 150 km (100 miles).

C.  

All traffic between Availability Zones is encrypted.

D.  

Availability Zones within an AWS Region share redundant power, networking, and connectivity.

E.  

Every Availability Zone contains a single data center.

Discussion 0
Questions 72

Which AWS Support plan is the minimum recommended tier for users who have production workloads on AWS?

Options:

A.  

AWS Developer Support

B.  

AWS Enterprise Support

C.  

AWS Business Support

D.  

AWS Enterprise On-Ramp Support

Discussion 0
Questions 73

Which AWS services are supported by Savings Plans?(Select TWO.)

Options:

A.  

Amazon EC2

B.  

Amazon RDS

C.  

Amazon SageMaker

D.  

Amazon Redshift

E.  

Amazon DynamoDB

Discussion 0
Questions 74

A company is planning to migrate to the AWS Cloud. The company is conducting organizational transformation and wants to become more responsive to customer inquiries and feedback.

Which tasks should the company perform to meet these requirements, according to the AWS Cloud Adoption

Framework (AWS CAF)? (Select TWO.)

Options:

A.  

Realign teams to focus on products and value streams.

B.  

Create new value propositions with new products and services.

C.  

Use agile methods to rapidly iterate and evolve.

D.  

Use a new data and analytics platform to create actionable insights.

E.  

Migrate and modernize legacy infrastructure.

Discussion 0
Questions 75

A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts.

Which AWS service or resource will meet this requirement?

Options:

A.  

AWS Cost and Usage Report

B.  

IAM credential reports

C.  

AWS Artifact

D.  

Amazon CloudFront reports

Discussion 0
Questions 76

Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes a capability for well-designed data and analytics architecture?

Options:

A.  

Security

B.  

Governance

C.  

Operations

D.  

Platform

Discussion 0
Questions 77

Which AWS service or tool offers consolidated billing?

Options:

A.  

AWS Artifact

B.  

AWS Budgets

C.  

AWS Organizations

D.  

AWS Trusted AdvisorA company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.

Discussion 0
Questions 78

Which AWS Cloud benefit describes the ability to acquire resources as they are needed and release resources when they are no longer needed?

Options:

A.  

Economies of scale

B.  

Elasticity

C.  

Agility

D.  

Security

Discussion 0
Questions 79

A company needs an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities.

Which AWS service will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

Amazon Inspector

C.  

AWS Security Hub

D.  

AWS Shield

Discussion 0
Questions 80

A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.

Which AWS service will meet this requirement?

Options:

A.  

Amazon Cognito

B.  

AWS Security Hub

C.  

AWS Shield

D.  

AWS WAF

Discussion 0
Questions 81

A company wants to set up a high-speed connection between its data center and its applications that run on AWS. The company must not transfer data over the internet.

Which action should the company take to meet these requirements?

Options:

A.  

Transfer data to AWS by using AWS Snowball.

B.  

Transfer data to AWS by using AWS Storage Gateway.

C.  

Set up a VPN connection between the data center and an AWS Region.

D.  

Set up an AWS Direct Connect connection between the company network and AWS.

Discussion 0
Questions 82

A company wants to integrate natural language processing (NLP) into business intelligence (Bl) dashboards. The company wants to ask questions and receive answers with relevant visualizations.

Which AWS service or tool will meet these requirements?

Options:

A.  

Amazon Macie

B.  

Amazon Rekognition

C.  

Amazon QuickSight Q

D.  

Amazon Lex

Discussion 0
Questions 83

A company wants to design a reliable web application that is hosted on Amazon EC2.

Which approach will achieve this goal?

Options:

A.  

Launch large EC2 instances in the same Availability Zone.

B.  

Spread EC2 instances across more than one security group.

C.  

Spread EC2 instances across more than one Availability Zone.

D.  

Use an Amazon Machine Image (AMI) from AWS Marketplace.

Discussion 0
Questions 84

Which of the following is a pillar of the AWS Well-Architected Framework?

Options:

A.  

Redundancy

B.  

Operational excellence

C.  

Availability

D.  

Multi-Region

Discussion 0
Questions 85

A developer who has no AWS Cloud experience wants to use AWS technology to build a web application.

Which AWS service should the developer use to start building the application?

Options:

A.  

Amazon SageMaker

B.  

AWS Lambda

C.  

Amazon Lightsail

D.  

Amazon Elastic Container Service (Amazon ECS)

Discussion 0
Questions 86

A software engineer wants to launch a virtual machine (VM) and MySQL database on AWS.

Which AWS service will meet these requirements with the LEAST operational effort?

Options:

A.  

Amazon Elastic Container Service (Amazon ECS)

B.  

AWS Elastic Beanstalk

C.  

Amazon Lightsail

D.  

Amazon EC2

Discussion 0
Questions 87

A user has a stateful workload that will run on Amazon EC2 for the next 3 years.

What is the MOST cost-effective pricing model for this workload?

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Dedicated Instances

D.  

Spot Instances

Discussion 0
Questions 88

A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.

Which AWS service should the company use to build this capability?

Options:

A.  

Amazon SageMaker

B.  

Amazon Textract

C.  

Amazon Rekognition

D.  

Amazon Comprehend

Discussion 0
Questions 89

A company must be able to develop, test, and launch an application in the AWS Cloud quickly.

Which advantage of cloud computing will meet these requirements?

Options:

A.  

Stop guessing capacity

B.  

Trade fixed expense for variable expense

C.  

Achieve economies of scale

D.  

Increase speed and agility

Discussion 0
Questions 90

A company manages factory machines in real time. The company wants to use AWS technology to deploy its monitoring applications as close to the factory machines as possible.

Which AWS solution will meet these requirements with the LEAST latency?

Options:

A.  

AWS Outposts

B.  

Amazon EC2

C.  

AWS App Runner

D.  

AWS Batch

Discussion 0
Questions 91

A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.

Which AWS service will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

Amazon Inspector

C.  

Amazon Detective

D.  

Amazon Cognito

Discussion 0
Questions 92

A company wants to migrate its on-premises application to the AWS Cloud. The company is legally obligated to retain certain data in its onpremises data center.

Which AWS service or feature will support this requirement?

Options:

A.  

AWS Wavelength

B.  

AWS Local Zones

C.  

VMware Cloud on AWS

D.  

AWS Outposts

Discussion 0
Questions 93

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

Options:

A.  

AWS CLI

B.  

AWS Developer Center

C.  

AWS Cloud Development Kit (AWS CDK)

D.  

AWS CodeStar

Discussion 0
Questions 94

Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances?

Options:

A.  

Amazon Workspaces

B.  

Amazon Elastic File System (Amazon EFS)

C.  

AWS Database Migration Service (AWS DMS)

D.  

AWS Snowball Edge

Discussion 0
Questions 95

Which statements explain the business value of migration to the AWS Cloud? (Select TWO.)

Options:

A.  

The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices.S B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.

B.  

Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery.

C.  

Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in otherareas.

D.  

Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite allenterprise applications.

Discussion 0
Questions 96

Which VPC component provides a layer of security at the subnet level?

Options:

A.  

Security groups

B.  

Network ACLs

C.  

NAT gateways

D.  

Route tables

Discussion 0
Questions 97

What is an AWS responsibility under the AWS shared responsibility model?

Options:

A.  

Configure the security group rules that determine which ports are open on an Amazon EC2 Linux instance.

B.  

Ensure the security of the internal network in the AWS data centers.

C.  

Patch the guest operating system with the latest security patches on Amazon EC2.

D.  

Turn on server-side encryption for Amazon S3 buckets.A company wants to deploy its critical application on AWS and maintain high availability.

Discussion 0
Questions 98

To reduce costs, a company is planning to migrate a NoSQL database to AWS.

Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

Options:

A.  

Amazon Redshift

B.  

Amazon Aurora

C.  

Amazon DynamoDB

D.  

Amazon RDS

Discussion 0
Questions 99

A company wants a list of all users in its AWS account, the status of all of the users' access keys, and if multi-factor authentication (MFA) has been configured.

Which AWS service or feature will meet these requirements?

Options:

A.  

AWS Key Management Service (AWS KMS)

B.  

IAM Access Analyzer

C.  

IAM credential report

D.  

Amazon CloudWatch

Discussion 0
Questions 100

A company wants to set AWS spending targets and track costs against those targets.

Which AWS tool or feature should the company use to meet these requirements?

Options:

A.  

AWS Cost Explorer

B.  

AWS Budgets

C.  

AWS Cost and Usage Report

D.  

Savings Plans

Discussion 0
Questions 101

A company is looking for a managed machine learning (ML) service that can recommend products based on a customer's previous behaviors.

Which AWS service meets this requirement?

Options:

A.  

Amazon Personalize

B.  

Amazon SageMaker

C.  

Amazon Pinpoint

D.  

Amazon Comprehend

Discussion 0
Questions 102

Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

Options:

A.  

Amazon VPC

B.  

AWS Shield

C.  

AWS Audit Manager

D.  

AWS Config

Discussion 0
Questions 103

A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimize cost and maximize flexibility.

A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service

must support standard SQL.

Which AWS service will meet these requirements?

Options:

A.  

Amazon Redshift

B.  

AWS Glue

C.  

Amazon Athena

D.  

Amazon Kinesis Data Streams

Discussion 0
Questions 104

A user is moving a workload from a local data center to an architecture that is distributed between the local data center and the AWS Cloud.

Which type of migration is this?

Options:

A.  

On-premises to cloud native

B.  

Hybrid to cloud native

C.  

On-premises to hybrid

D.  

Cloud native to hybrid

Discussion 0
Questions 105

Which AWS service or feature can a company use to apply security rules to specific Amazon EC2 instances?

Options:

A.  

Network ACLs

B.  

Security groups

C.  

AWS Trusted Advisor

D.  

AWS WAF

Discussion 0
Questions 106

A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.

For how much time will the customer be billed?

Options:

A.  

3 hours, 5 minutes

B.  

3 hours, 5 minutes, and 6 seconds

C.  

3 hours, 6 minutes

D.  

4 hours

Discussion 0
Questions 107

A company needs to set a maximum spending limit on AWS services each month. The company also needs to set up alerts for when the company reaches its spending limit.

Which AWS service or tool should the company use to meet these requirements?

Options:

A.  

Cost Explorer

B.  

AWS Trusted Advisor

C.  

Service Quotas

D.  

AWS Budgets

Discussion 0
Questions 108

A company’s IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be completed automatically.

What should the company do to meet these requirements?

Options:

A.  

Deploy MySQL database server clusters on Amazon EC2 instances.

B.  

Use Amazon RDS with a MySQL database.

C.  

Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.

D.  

Migrate all the MySQL database data to Amazon S3.

Discussion 0
Questions 109

Which AWS service or feature can the company use to limit the access to AWS services for member accounts?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

Service control policies (SCPs)

C.  

Organizational units (OUs)

D.  

Access control lists (ACLs)

Discussion 0
Questions 110

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.

Which S3 feature should the company use to meet these requirements?

Options:

A.  

S3 Lifecycle rules

B.  

S3 Versioning

C.  

S3 bucket policies

D.  

S3 server-side encryption

Discussion 0
Questions 111

A company has set up a VPC in its AWS account and has created a subnet in the VPC. The company wants to make the subnet public.

Which AWS features should the company use to meet this requirement? (Select TWO.)

Options:

A.  

Amazon VPC internet gateway

B.  

Amazon VPC NAT gateway

C.  

Amazon VPC route tables

D.  

Amazon VPC network ACL

E.  

Amazon EC2 security groups

Discussion 0
Questions 112

A company simulates workflows to review and validate that all processes are effective and that staff are familiar with the processes.

Which design principle of the AWS Well-Architected Framework is the company following with this practice?

Options:

A.  

Perform operations as code.

B.  

Refine operation procedures frequently.

C.  

Make frequent, small, reversible changes.

D.  

Structure the company to support business outcomes.

Discussion 0
Questions 113

Which AWS service is a continuous delivery and deployment solution?

Options:

A.  

AWSAppSync

B.  

AWS CodePipeline

C.  

AWS Cloud9

D.  

AWS CodeCommit

Discussion 0
Questions 114

Which AWS service can provide a dedicated network connection with consistent low latency from on premises to the AWS Cloud?

Options:

A.  

Amazon VPC

B.  

Amazon Kinesis Data Streams

C.  

AWS Direct Connect

D.  

Amazon OpenSearch Service

Discussion 0
Questions 115

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

Options:

A.  

Hard code an IAM user's secret key and access key directly in the application, and upload the file.

B.  

Store the IAM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.

C.  

Have the EC2 instance assume a role to obtain the privileges to upload the file.

D.  

Modify the S3 bucket policy so that any service can upload to it at any time.

Discussion 0
Questions 116

A company wants to migrate its high-performance computing (HPC) application to Amazon EC2 instances. The application has multiple components. The application must have fault tolerance and must have the ability to fail over automatically.

Which AWS infrastructure solution will meet these requirements with the LEAST latency between components?

Options:

A.  

Multiple AWS Regions

B.  

Multiple edge locations

C.  

Multiple Availability Zones

D.  

Regional edge caches

Discussion 0
Questions 117

A company wants to move its iOS application development and build activities to AWS.

Which AWS service or resource should the company use for these activities?

Options:

A.  

AWS CodeCommit

B.  

Amazon EC2 M1 Mac instances

C.  

AWS Amplify

D.  

AWS App Runner

Discussion 0
Questions 118

A company plans to migrate to the AWS Cloud. The company wants to use the AWS Cloud Adoption Framework (AWS CAF) to define and track business outcomes as part of its cloud transformation journey.

Which AWS CAF governance perspective capability will meet these requirements?

Options:

A.  

Benefits management

B.  

Risk management

C.  

Application portfolio management

D.  

Cloud financial management

Discussion 0
Questions 119

Which AWS service can identify when an Amazon EC2 instance was terminated?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

AWS CloudTrail

C.  

AWS Compute Optimizer

D.  

Amazon EventBridge

Discussion 0
Questions 120

A company needs Amazon EC2 instances for a workload that can tolerate interruptions.

Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

Options:

A.  

Spot Instances

B.  

Convertible Reserved Instances

C.  

Standard Reserved Instances

D.  

Dedicated Hosts

Discussion 0
Questions 121

A company is building an application that needs to deliver images and videos globally with minimal latency.

Which approach can the company use to accomplish this in a cost effective manner?

Options:

A.  

Deliver the content through Amazon CloudFront.

B.  

Store the content on Amazon S3 and enable S3 cross-region replication.

C.  

Implement a VPN across multiple AWS Regions.

D.  

Deliver the content through AWS PrivateLink.

Discussion 0
Questions 122

A company needs to identify who accessed an AWS service and what action was performed for a given time period.

Which AWS service should the company use to meet this requirement?

Options:

A.  

Amazon CloudWatch

B.  

AWS CloudTrail

C.  

AWS Security Hub

D.  

Amazon Inspector

Discussion 0
Questions 123

A company needs to store data from a recommendation engine in a database.

Which AWS service provides this functionality with the LEAST operational overhead?

Options:

A.  

Amazon RDS for PostgreSQL

B.  

Amazon DynamoDB

C.  

Amazon Neptune

D.  

Amazon Aurora

Discussion 0
Questions 124

An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks.

Which AWS service will provide this information?

Options:

A.  

AWS Artifact

B.  

AWS Trusted Advisor

C.  

Amazon GuardDuty

D.  

AWS Certificate Manager (ACM)

Discussion 0
Questions 125

A company is using Amazon DynamoDB.

Which task is the company's responsibility, according to the AWS shared responsibility model?

Options:

A.  

Patch the operating system

B.  

Provision hosts

C.  

Manage database access permissions.

D.  

Secure the operating system

Discussion 0
Questions 126

A company is using AWS for all its IT Infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves.

Which AWS service should the developers use to meet these requirements?

Options:

A.  

AWS Cloud Formation

B.  

AWS CodeBuild

C.  

AWS Elastic Beanstalk

D.  

AWS CodeDeploy

Discussion 0
Questions 127

Under the AWS shared responsibility model, which of the following is a responsibility of the customer?

Options:

A.  

Shred disk drives before they leave a data center.

B.  

Prevent customers from gathering packets or collecting traffic at the hypervisor level.

C.  

Patch the guest operating system with the latest security patches.

D.  

Maintain security systems that provide physical monitoring of data centers.

Discussion 0
Questions 128

A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.

Which AWS service or resource will meet these requirements with the LEAST management overhead?

Options:

A.  

PostgreSQL on Amazon EC2

B.  

Amazon RDS for PostgreSQL

C.  

Amazon Aurora PostgreSQL-Compatible Edition

D.  

Amazon Aurora Serverless

Discussion 0
Questions 129

A company needs stateless network filtering for its VPC.

Which AWS service, tool, or feature will meet this requirement?

Options:

A.  

AWS PrivateLink

B.  

Security group

C.  

Network access control list (ACL)

D.  

AWS WAF

Discussion 0
Questions 130

A company runs an application on AWS that performs batch jobs. The application is fault-tolerant and can handle interruptions. The company wants to optimize the cost to run the application.

Which AWS offering will meet these requirements?

Options:

A.  

Amazon Macie

B.  

Amazon Neptune

C.  

Amazon EC2 Spot Instances

D.  

Amazon EC2 On-Demand Instances

Discussion 0
Questions 131

Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?

Options:

A.  

S3 Standard

B.  

S3 Standard-Infrequent Access (S3 Standard-IA)

C.  

S3 One Zone-Infrequent Access (S3 One Zone-IA)

D.  

S3 Intelligent-Tiering

Discussion 0
Questions 132

Which of the following can the AWS Pricing Calculator do?

Options:

A.  

Project monthly AWS costs.

B.  

Calculate historical AWS costs.

C.  

Provide in-depth information about AWS pricing strategies.

D.  

Provide users with access to their monthly bills.

Discussion 0
Questions 133

Which benefits does a company gain when the company moves from on-premises IT architecture to the AWS Cloud? (Select TWO.)

Options:

A.  

Reduced or eliminated tasks for hardware troubleshooting, capacity planning, and procurement

B.  

Elimination of the need for trained IT staff

C.  

Automatic security configuration of all applications that are migrated to the cloud

D.  

Elimination of the need for disaster recovery planning

E.  

Faster deployment of new features and applications

Discussion 0
Questions 134

Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity'?

Options:

A.  

Agility

B.  

Elasticity

C.  

Reliability

D.  

Durability

Discussion 0
Questions 135

Which statement describes a characteristic of the AWS global infrastructure?

Options:

A.  

Edge locations contain multiple AWS Regions.

B.  

AWS Regions contain multiple Regional edge caches.

C.  

Availability Zones contain multiple data centers.

D.  

Each data center contains multiple edge locations.

Discussion 0
Questions 136

A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management. Which AWS service will meet these requirements?

Options:

A.  

Amazon DocumentDB (with MongoDB compatibility)

B.  

Amazon Redshift

C.  

Amazon Neptune

D.  

Amazon ElastiCache

Discussion 0
Questions 137

At what support level do users receive access to a support concierge?

Options:

A.  

Basic Support

B.  

Developer Support

C.  

Business Support

D.  

Enterprise Support

Discussion 0
Questions 138

A company plans to launch an ecommerce website that contains many images for a product catalog. The company wants to keep the cost of running the website within a specific budget.

Which AWS service or tool should the company use to monitor the ongoing costs of the website?

Options:

A.  

AWS Cost Explorer

B.  

AWS SDKs

C.  

EC2 Image Builder

D.  

AWS CloudFormation

Discussion 0
Questions 139

Which AWS service or tool provides a visualization of historical AWS spending patterns and projections of future AWS costs?

Options:

A.  

AWS Cos! and Usage Report

B.  

AWS Budgets

C.  

Cost Explorer

D.  

Amazon CloudWatch

Discussion 0
Questions 140

Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

Options:

A.  

Elasticity

B.  

Cost savings

C.  

Agility

D.  

Reliability

Discussion 0
Questions 141

Which AWS service is designed to help users handle large amounts of data in a data warehouse environment?

Options:

A.  

Amazon RDS

B.  

Amazon DynamoDB

C.  

Amazon Redshift

D.  

Amazon Aurora

Discussion 0
Questions 142

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.

Where can the company purchase the security solution?

Options:

A.  

AWS Partner Solutions Finder

B.  

AWS Support Center

C.  

AWS Management Console

D.  

AWS Marketplace

Discussion 0
Questions 143

A company wants to store its files in the AWS Cloud. Users need to be able to download these files directly using a public URL.

Which AWS service or feature will meet this requirement?

Options:

A.  

Amazon Redshift

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon Elastic File System (Amazon EFS)

D.  

Amazon S3

Discussion 0
Questions 144

Which of the following can be components of a VPC in the AWS Cloud? (Select TWO.)

Options:

A.  

Amazon API Gateway

B.  

Amazon S3 buckets and objects

C.  

AWS Storage Gateway

D.  

Internet gateway

E.  

Subnet

Discussion 0
Questions 145

Which programming languages does AWS Cloud Development Kit (AWS CDK) currently support? (Select TWO.)

Options:

A.  

Python

B.  

Swift

C.  

TypeScript

D.  

Ruby

E.  

PHP

Discussion 0
Questions 146

A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Config

B.  

Amazon Rekognition

C.  

AWS CloudTrail

D.  

Amazon Simple Notification Service (Amazon SNS)

Discussion 0
Questions 147

A company is building a new application on AWS. The company needs the application to remain available if an individual application component fails.

Which design principle should the company use to meet this requirement?

Options:

A.  

Disposable resources

B.  

Automation

C.  

Rightsizing

D.  

Loose coupling

Discussion 0
Questions 148

What is the MOST secure way to store passwords on AWS?

Options:

A.  

Store passwords in an Amazon S3 bucket.

B.  

Store passwords as AWS CloudFormation parameters

C.  

Store passwords in AWS Storage Gateway.

D.  

Store passwords in AWS Secrets Manager.

Discussion 0
Questions 149

A company migrated its systems to the AWS Cloud. The systems are rightsized, and a security review did not reveal any issues. The company must ensure that additional developments, integrations, changes, and system usage growth do not jeopardize this optimized AWS infrastructure.

Which AWS service should the company use to report ongoing optimization and security?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Health Dashboard

C.  

Amazon Connect

D.  

AWS Systems Manager

Discussion 0
Questions 150

A company wants to migrate its database to a managed AWS service that is compatible with PostgreSQL.

Which AWS services will meet these requirements? (Select TWO)

Options:

A.  

Amazon Athena

B.  

Amazon RDS

C.  

Amazon EC2

D.  

Amazon DynamoDB

E.  

Amazon Aurora

Discussion 0
Questions 151

Which AWS Support plans provide access to an AWS technical account manager (TAM)? (Select)

Options:

A.  

AWS Basic Support

B.  

AWS Developer Support

C.  

AWS Business Support

D.  

AWS Enterprise On-Ramp Support

E.  

AWS Enterprise Support

Discussion 0
Questions 152

Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

Options:

A.  

AWS Budgets

B.  

AWS Cost Explorer

C.  

AWS Cost Allocation Tags

D.  

AWS Organizations

Discussion 0
Questions 153

A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.

Which AWS service or feature will meet this requirement?

Options:

A.  

Routing tables

B.  

Network access control lists (network ACLs)

C.  

Security groups

D.  

Amazon GuardDuty

Discussion 0
Questions 154

A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application.

To which AWS service could the company migrate the database?

Options:

A.  

Amazon Athena

B.  

Amazon DynamoDB®C. Amazon RDS

C.  

Amazon DocumentDB (with MongoDB compatibility)

Discussion 0
Questions 155

A company uses a third-party identity provider (IdP). The company wants to provide its employees with access to AWS accounts and services without requiring another set of login credentials.

Which AWS service will meet this requirement?

Options:

A.  

AWS Directory Service

B.  

Amazon Cognito

C.  

AWS IAM Identity Center

D.  

AWS Resource Access Manager (AWS RAM)

Discussion 0
Questions 156

Which AWS Support plan provides the full set to AWS Trusted Advisor checks at the LOWEST cost?

Options:

A.  

AWS Developer Support

B.  

AWS Business Support

C.  

AWS Enterprise On-Ramp Support

D.  

AWS Enterprise Support

Discussion 0
Questions 157

A company stores data in an Amazon S3 bucket.

Which task is the responsibility of AWS?

Options:

A.  

Configure an S3 Lifecycle policy.

B.  

Activate S3 Versioning.

C.  

Configure S3 bucket policies.

D.  

Protect the infrastructure that supports S3 storage.

Discussion 0
Questions 158

A company plans to use an Amazon Snowball Edge device la transfer files to the AWS Cloud.

Which activities related in a Snowball device are available to the company at no cost?

Options:

A.  

Use of the Snowball Edge appliance for a 10-day period

B.  

The transfer of data out of Amazon S3 and 10 the Snowball Edge appliance

C.  

The transfer of data from the Snowball Edge appliance into Amazon S3

D.  

Daily use of the Snowball Edge appliance after 10 days

Discussion 0
Questions 159

Which of the following services can be used to block network traffic to an instance? (Select TWO.)

Options:

A.  

Security groups

B.  

Amazon Virtual Private Cloud (Amazon VPC) flow logs

C.  

Network ACLs

D.  

Amazon CloudWatch

E.  

AWS CloudTrail

Discussion 0
Questions 160

A development team wants to deploy multiple test environments for an application in a fast repeatable manner.

Which AWS service should the team use?

Options:

A.  

Amazon EC2

B.  

AWS CloudFormation

C.  

Amazon QuickSight

D.  

Amazon Elastic Container Service (Amazon ECS)

Discussion 0
Questions 161

Which AWS service enables companies to deploy an application dose to end users?

Options:

A.  

Amazon CloudFront

B.  

AWS Auto Scaling

C.  

AWS AppSync

D.  

Amazon Route S3

Discussion 0
Questions 162

Which AWS service integrates with other AWS services to provide the ability to encrypt data at rest?

Options:

A.  

AWS Key Management Service (AWS KMS)

B.  

AWS Certificate Manager (ACM)

C.  

AWS Identity and Access Management (1AM)

D.  

AWS Security Hub

Discussion 0
Questions 163

Which AWS compute service gives users the ability to securely and reliably run containers at scale?

Options:

A.  

Amazon Elastic Container Service (Amazon ECS)

B.  

Amazon Aurora

C.  

Amazon Athena

D.  

Amazon Polly

Discussion 0
Questions 164

Which AWS service is used to provide encryption for Amazon EBS?

Options:

A.  

AWS Certificate Manager

B.  

AWS Systems Manager

C.  

AWS KMS

D.  

AWS Config

Discussion 0
Questions 165

Which task is the customer's responsibility, according to the AWS shared responsibility model?

Options:

A.  

Patch a guest operating system that is deployed on an Amazon EC2 instance.

B.  

Control physical access to an AWS data center

C.  

Control access to AWS underlying hardware.

D.  

Patch a host operating system that is deployed on Amazon S3.

Discussion 0
Questions 166

Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?

Options:

A.  

VPC Flow Logs

B.  

Amazon Inspector

C.  

VPC route tables

D.  

AWS CloudTrail

Discussion 0
Questions 167

What is a benefit of using AWS serverless computing?

Options:

A.  

Application deployment and management are not required

B.  

Application security will be fully managed by AWS

C.  

Monitoring and logging are not needed

D.  

Management of infrastructure is offloaded to AWS

Discussion 0
Questions 168

A company is using Amazon DynamoDB for its application database.

Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Classify data.

B.  

Configure access permissions.

C.  

Manage encryption options.

D.  

Provide public endpoints to store and retrieve data.

E.  

Manage the infrastructure layer and the operating system.

Discussion 0
Questions 169

A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.

Which Amazon EC2 purchasing option will be MOST cost-effective?

Options:

A.  

All Upfront Reserved Instances

B.  

Partial Upfront Reserved Instances

C.  

Dedicated Instances

D.  

On-Demand Instances

Discussion 0
Questions 170

A company has a compute workload that is steady, predictable, and uninterruptible.

Which Amazon EC2 instance purchasing options meet these requirements MOST cost-effectively? (Select TWO.)

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Spot Instances

D.  

Saving Plans

E.  

Dedicated Hosts

Discussion 0
Questions 171

A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations.

Which AWS service will meet these requirements'?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

Amazon CloudWatch

C.  

Amazon Macie

D.  

Amazon GuardDuty

Discussion 0
Questions 172

A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously.

Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?

Options:

A.  

AWS Graviton processor

B.  

Dedicated Hosts

C.  

EC2 Instance Savings Plans

D.  

Amazon EC2 Auto Scaling instances

Discussion 0
Questions 173

To assist companies with Payment Card Industry Data Security Standard (PCI DSS) compliance in the cloud. AWS provides:

Options:

A.  

physical inspections of data centers by appointment.

B.  

required PCI compliance certifications for any application running on AWS.

C.  

an AWS Attestation of Compliance (AOC) report for specific AWS services.

D.  

professional PCI compliance services.

Discussion 0
Questions 174

A company wants to manage its cloud resources by using infrastructure as code (laC) template…..

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Artifact

B.  

AWS Resource Explorer

C.  

AWS License Manager

D.  

AWS Service Catalog

Discussion 0
Questions 175

A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?

Options:

A.  

AWS Lambda

B.  

Amazon EC2

C.  

AWS CodeDeploy

D.  

AWS Wavelength

Discussion 0
Questions 176

Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Secure the virilization layer.

B.  

Encrypt data and maintain data integrity.

C.  

Patch the Amazon RDS operating system.

D.  

Maintain identity and access management controls.

E.  

Secure Availability Zones.

Discussion 0
Questions 177

A company wants to generate a list of IAM users. The company also wants to view the status of various credentials that are associated with the users, such as password, access keys: and multi-factor authentication (MFA) devices

Which AWS service or feature will meet these requirements?

Options:

A.  

IAM credential report

B.  

AWS IAM Identity Center (AWS Single Sign-On)

C.  

AWS Identity and Access Management Access Analyzer

D.  

AWS Cost and Usage Report

Discussion 0
Questions 178

A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS. Which pricing model will meet these requirements?

Options:

A.  

Use Savings Plans for a 3-year term.

B.  

Use Dedicated Hosts.

C.  

Buy Reserved Instances.

D.  

Use On-Demand Instances.

Discussion 0
Questions 179

A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

Options:

A.  

Amazon CloudWatch

B.  

Amazon Inspector

C.  

AWS CloudTrail

D.  

AWS IAM

Discussion 0
Questions 180

A company wants to establish a private network connection between AWS and its corporate network.

Which AWS service or feature will meet this requirement?

Options:

A.  

Amazon Connect

B.  

Amazon Route 53

C.  

AWS Direct Connect

D.  

VPC peering

Discussion 0
Questions 181

Which AWS service provides command line access to AWS tools and resources directly (torn a web browser?

Options:

A.  

AWS CIoudHSM

B.  

AWS CloudShell

C.  

Amazon Workspaces

D.  

AWS Cloud Map

Discussion 0
Questions 182

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC? images?

Options:

A.  

EC2 Image Builder

B.  

Amazon Machine Image (AMI)

C.  

AWS Launch Wizard

D.  

AWS Elastic Beanstalk

Discussion 0
Questions 183

Which AWS service could an administrator use to provide desktop environments for several employees?

Options:

A.  

AWS Organizations

B.  

AWS Fargate

C.  

AWS WAF

D.  

AWS Workspaces

Discussion 0
Questions 184

A systems administrator created a new 1AM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?

Options:

A.  

To access the AWS account as the AWS account root user

B.  

To access the AWS account through the AWS Management Console

C.  

To access the AWS account through a CLI

D.  

To access all of a company's AWS accounts

Discussion 0
Questions 185

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

Options:

A.  

Speed of innovation

B.  

Resource elasticity

C.  

Decoupled architecture

D.  

Global deployment

Discussion 0
Questions 186

Which AWS Support plan provides the full set of AWS Trusted Advisor checks at the LOWEST cost?

Options:

A.  

AWS Developer Support

B.  

AWS Business Support

C.  

AWS Enterprise On-Ramp Support

D.  

AWS Enterprise Support

Discussion 0
Questions 187

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.

Which of the following is an AWS best practice for using the AWS account root user credentials?

Options:

A.  

Allow only the manager to use the account root user credentials for normal activities.

B.  

Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.

C.  

Use the account root user credentials only when they alone must be used to perform a requiredfunction.

D.  

Use the account root user credentials only for the creation of private VPC subnets.

Discussion 0
Questions 188

Which task is the responsibility of the customer, according to the AWS shared responsibility model?

Options:

A.  

Patch the Amazon DynamoDB operating system.

B.  

Secure Amazon CloudFront edge locations by allowing physical access according to the principle of least privilege.

C.  

Protect the hardware that runs AWS services.

D.  

Use AWS Identity and Access Management (1AM) according to the principle of least privilege.

Discussion 0
Questions 189

Which AWS service is always provided at no charge?

Options:

A.  

Amazon S3

B.  

AWS Identity and Access Management (IAM)

C.  

Elastic Load Balancers

D.  

AWS WAF

Discussion 0
Questions 190

Which mechanism allows developers to access AWS services from application code?

Options:

A.  

AWS Software Development Kit

B.  

AWS Management Console

C.  

AWS CodePipeline

D.  

AWS Config

Discussion 0
Questions 191

Treating infrastructure as code in the AWS Cloud allows users to:

Options:

A.  

automate migration of on-premises hardware to AWS data centers.

B.  

let a third party automate an audit of the AWS infrastructure.

C.  

turn over application code to AWS so it can run on the AWS infrastructure.

D.  

automate the infrastructure provisioning process.

Discussion 0
Questions 192

A company has data lakes designed for high performance computing (HPC) workloads. Which Amazon EC2 instance type should the company use to meet these requirements?

Options:

A.  

General purpose instances

B.  

Compute optimized instances

C.  

Memory optimized instances

D.  

Storage optimized instances

Discussion 0
Questions 193

Which AWS service can create a private network connection from on premises to the AWS Cloud?

Options:

A.  

AWS Config

B.  

Virtual Private Cloud (Amazon VPC)

C.  

AWS Direct Connect

D.  

Amazon Route 53

Discussion 0
Questions 194

Which AWS service is a fully managed service and allows access to applications through a virtual interface (VIF)?

Options:

A.  

Amazon AppStream 2.0

B.  

Amazon EC2

C.  

AWS Elastic Beanstalk

D.  

AWS Lambda

Discussion 0
Questions 195

Which of the following is an advantage that the AWS Cloud provides to users?

Options:

A.  

Users eliminate the need to guess about infrastructure capacity requirements.

B.  

Users decrease their variable costs by maintaining sole ownership of IT hardware.

C.  

Users maintain control of underlying IT infrastructure hardware.

D.  

Users maintain control of operating systems for managed services.

Discussion 0
Questions 196

Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Knowledge Center

C.  

AWS Support Center

D.  

AWS Artifact

Discussion 0
Questions 197

Which AWS service gives users on-demand, sell-service access to AWS compliance control reports?

Options:

A.  

AWS Config

B.  

Amazon GuardDuty

C.  

AWS Trusted Advisor

D.  

AWS Artifact

Discussion 0
Questions 198

Which AWS service gives companies the ability to create graph applications that can analyze billions of relationships between data points in milliseconds?

Options:

A.  

Amazon Redshift

B.  

Amazon Neptune

C.  

Amazon DocumentDB (with MongoDB compatibility)

D.  

Amazon ElastiCache

Discussion 0
Questions 199

A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS.

Which AWS service should the company use to meet this requirement?

Options:

A.  

AWS Lambda

B.  

Amazon Route 53

C.  

Amazon CloudFront

D.  

AWS Direct Connect

Discussion 0
Questions 200

A company will run a predictable compute workload on Amazon EC2 Instances for the next 3 years. The workload is critical for the company. The company wants to optimize costs to run the workload.

Which solution will meet these requirements?

Options:

A.  

Spot Instances

B.  

Dedicated Hosts

C.  

Savings Plans

D.  

On-Demand Instances

Discussion 0
Questions 201

A company wants to push VPC Flow Logs to an Amazon S3 bucket.

Which action is the company's responsibility?

Options:

A.  

Managing the infrastructure that runs the S3 bucket

B.  

Managing the data in transit

C.  

Managing the encryption options on the S3 bucket

D.  

Managing the operating system updates on the S3 bucket

Discussion 0
Questions 202

A company wants to develop applications that run on AWS. The company's developers need a set of libraries and development tools that are available in multiple programming languages.

Which AWS solution provides these libraries and tools?

Options:

A.  

AWS CodePipeline

B.  

AWS SDKs

C.  

Amazon CloudWatch

D.  

AWS CodeDeploy

Discussion 0
Questions 203

A company needs to establish a dedicated network connection from on premises to AWS. The connection must provide consistent, low-latency network performance.

Which AWS service should the company use to meet this requirement?

Options:

A.  

AWS Direct Connect

B.  

AWS Site-to-Site VPN

C.  

AWS Directory Service

D.  

AWS Transit Gateway

Discussion 0
Questions 204

A company wants to enhance security by launching a third-party ISP intrusion detection system from its AWS account.

Which AWS service or resource should the company use to meet this requirement?

Options:

A.  

AWS Security Hub

B.  

AWS Marketplace

C.  

AWS Quick Starts

D.  

AWS Security Center

Discussion 0
Questions 205

Which AWS service supports the deployment and management of applications in the AWS Cloud?

Options:

A.  

Amazon CodeGuru

B.  

AWS Fargate

C.  

AWS CodeCommit

D.  

AWS Elastic Beanstalk

Discussion 0
Questions 206

Which AWS service provides on-premises applications with low-latency access to data that is stored in the AWS Cloud?

Options:

A.  

Amazon CloudFront

B.  

AWS Storage Gateway

C.  

AWS Backup

D.  

AWS DataSync

Discussion 0
Questions 207

A company has an on-premises application. The application has processing times of less than 5 minutes and is invoked only a few times each day. The company wants to move the application to the AWS Cloud.

Which AWS service will support this application MOST cost-effectively?

Options:

A.  

Amazon Elastic Container Service (Amazon ECS)

B.  

AWS Lambda

C.  

Amazon Elastic Kubernetes Service (Amazon EKS)

D.  

Amazon EC2

Discussion 0
Questions 208

An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console.

Which AWS service should be used to determine what action made this EC2 instance inaccessible?

Options:

A.  

Amazon CloudWatch Logs

B.  

AWS Security Hub

C.  

Amazon Inspector

D.  

AWS CloudTrail

Discussion 0
Questions 209

A company needs a hybrid cloud storage service to connect its on-premises environment to scalable AWS Cloud storage. Which AWS service will meet these requirements?

Options:

A.  

Amazon S3

B.  

Amazon FSx

C.  

AWS Storage Gateway

D.  

AWS Fargate

Discussion 0
Questions 210

A company needs to ensure that users around the world can access the company's application with low latency. Which advantage of the AWS Cloud will meet this requirement?

Options:

A.  

Avoid data center costs

B.  

Global infrastructure

C.  

Larger application leads to cost savings

D.  

Pay as-you-go pricing

Discussion 0
Questions 211

A company needs to store infrequently used data for data archives and long-term backups.

Which AWS service or storage class will meet these requirements MOST cost-effectively?

Options:

A.  

Amazon FSx for Lustre

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon Elastic File System (Amazon EFS)

D.  

Amazon S3 Glacier Flexible Retrieval

Discussion 0
Questions 212

Which task can an IAM user perform without AWS account root user credentials?

Options:

A.  

Change to a different AWS Support plan.

B.  

Close an AWS account.

C.  

View the AWS Billing console.

D.  

Activate access to the AWS Billing console.

Discussion 0
Questions 213

Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?

Options:

A.  

Configuration of Amazon EC2 instance operating systems

B.  

Application file system server-side encryption

C.  

Patch management

D.  

Security of the physical infrastructure

Discussion 0
Questions 214

Which AWS service provides storage-optimized and compute-optimized device configurations?

Options:

A.  

AWS Snowcone

B.  

AWS Storage Gateway

C.  

AWS Snowball Edge

D.  

AWS DataSync

Discussion 0
Questions 215

Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?

Options:

A.  

Cost allocation tags

B.  

Key pairs

C.  

Amazon Inspector

D.  

AWS Trusted Advisor

Discussion 0
Questions 216

A company is developing a web application that uses containers. The company needs a repository to store and control access to container images.

Options:

A.  

Amazon Elastic Container Registry (Amazon ECR)

B.  

Amazon Elastic Kubernetes Service (Amazon EKS)

C.  

Amazon Elastic Container Service (Amazon ECS)

D.  

Amazon EC2

Discussion 0
Questions 217

A company is building a business intelligence solution that uses Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it.

Which service should the company use?

Options:

A.  

Amazon CloudWatch

B.  

AWS Health Dashboard

C.  

AWS Service Catalog

D.  

Amazon QuickSight

Discussion 0
Questions 218

A company needs a database that can quickly read and write large amounts of unstructured data.

Which AWS service meets these requirements with the MOST scalability?

Options:

A.  

Amazon RDS

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon DynamoDB

D.  

Amazon Lightsail

Discussion 0
Questions 219

A company wants to migrate its on-premises SQL Server database to the AWS Cloud. The company wants AWS to handle the day-to-day administration of the database. Which AWS service will meet the company's requirements?

Options:

A.  

Amazon EC2 foe Microsoft SQL Server

B.  

Amazon DynamoDB

C.  

Amazon RDS

D.  

Amazon Aurora

Discussion 0
Questions 220

Which AWS service helps assess the security and compliance of applications that are deployed on Amazon EC2 instances?

Options:

A.  

AWS Security Hub

B.  

Amazon Inspector

C.  

Amazon GuardDuty

D.  

AWS Shield

Discussion 0
Questions 221

A company wants to run its application's code without having to provision and manage servers. Which AWS service will meet this requirement?

Options:

A.  

AWS Glue

B.  

AWS Lambda

C.  

AWS CodeDeploy

D.  

Amazon CodeGuru

Discussion 0
Questions 222

A company is moving Us development and test environments to AWS to increase agility and reduce cost. Because these are not production workloads and the servers are not fully utilized, occasional unavailability is acceptable.

What is the MOST cost-effective Amazon EC2 pricing model that will meet these requirements?

Options:

A.  

Reserved instances

B.  

On-Demand Instances

C.  

Spot Instances

D.  

Dedicated Hosts

Discussion 0
Questions 223

A company migrated to the AWS Cloud. Now the company pays for services on an as-needed basis.

Which advantage of cloud computing is the company benefiting from?

Options:

A.  

Stop spending money running and maintaining data centers

B.  

Increase speed and agility

C.  

Go global in minutes

D.  

Trade fixed expense for variable expense

Discussion 0
Questions 224

A company needs a file-sharing service that supports SMB protocol.

Options:

A.  

Amazon Aurora

B.  

AWS Config

C.  

AWS DataSync

D.  

Amazon FSx for Windows File Server

Discussion 0
Questions 225

A developer needs to use a standardized template to create copies of a company's AWS architecture for development test, and production environments. Which AWS service should the developer use to meet this requirement?

Options:

A.  

AWS Cloud Map

B.  

AWS Cloud Formation

C.  

Amazon CloudFront

D.  

AWS CloudTrail

Discussion 0
Questions 226

Which AWS design principle emphasizes the reduction of interdependencies between components of an application?

Options:

A.  

Scalability

B.  

Loose coupling

C.  

Automation

D.  

Caching

Discussion 0
Questions 227

A company wants to control the protection of its AWS resources. The company wants to block SQL injection attacks and cross-site scripting.

Which AWS service or feature meets these requirements?

Options:

A.  

Amazon GuardDuty

B.  

AWSWAF

C.  

Security groups

D.  

AWS Shield

Discussion 0
Questions 228

A company wants to migrate critical on-premises production systems to Amazon EC2 instances. The production instances will be used for at least 3 years. The company wants a pricing option that will minimize cost.

Which solution will meet these requirements?

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Spot Instances

D.  

AWS Free Tier

Discussion 0
Questions 229

A company runs a legacy workload in an on-premises data center. The company wants to migrate the workload to AWS. The company does not want to make any changes to the workload.

Which migration strategy should the company use?

Options:

A.  

Repurchase

B.  

Replatform

C.  

Rehost

D.  

Refactor

Discussion 0
Questions 230

A company plans to migrate to the AWS Cloud. The company wants to gather information about its on-premises data center.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Application Discovery Service

B.  

AWS DataSync

C.  

AWS Storage Gateway

D.  

AWS Database Migration Service (AWS DMS)

Discussion 0
Questions 231

Which perspective of the AWS Cloud Adoption Framework (AWS CAF) encourages the development of well-architected, cloud-focused applications?

Options:

A.  

Platform

B.  

Operations

C.  

Governance

D.  

Security

Discussion 0
Questions 232

A company is learning about its responsibilities that are related to the management of Amazon EC2 instances.

Which tasks for EC2 instances are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Install and patch the machine hypervisor.

B.  

Patch the guest operating system.

C.  

Encrypt data at rest on associated storage.

D.  

Install the physical hardware and cabling.

E.  

Provide physical security for the EC2 instances.

Discussion 0
Questions 233

A company is creating a web application that requires a relational database to store customer data. Which AWS service should the company use to host the database?

Options:

A.  

Amazon Aurora

B.  

Amazon DynamoDB

C.  

Amazon ElastiCache

D.  

Amazon Redshift

Discussion 0
Questions 234

Which AWS service allows users to model and provision AWS resources using common programming languages?

Options:

A.  

AWS CloudFormation

B.  

AWS CodePipeline

C.  

AWS Cloud Development Kit (AWS CDK)

D.  

AWS Systems Manager

Discussion 0
Questions 235

Which AWS service or tool inspects a user's AWS environment and makes recommendations for cost savings and system performance improvements?

Options:

A.  

Cost Explorer

B.  

AWS Trusted Advisor

C.  

Amazon Inspector

D.  

AWS Budgets

Discussion 0
Questions 236

A company wants to securely log in to Linux Amazon EC2 instances.

Options:

A.  

Use end-to-end encryption.

B.  

Use multi-factor authentication (MFA).

C.  

Use AWS Systems Manager Session Manager.

D.  

Use AWS Systems Manager State Manager.

Discussion 0
Questions 237

A company's IT administrator needs to configure the AWS CLI for programmatic access to AWS services for the company's employees. Which combination of credential components must the IT administrator use to meet this requirement? (Select TWO.)

Options:

A.  

A public key

B.  

A secret access key

C.  

An IAM role

D.  

An access key ID

E.  

A private key

Discussion 0
Questions 238

A company is in the process of finding correct Amazon EC2 instance types and sizes to meet its performance and capacity requirements. The company wants to find the lowest possible cost.

Which option accurately characterizes the company's actions?

Options:

A.  

Auto Scaling

B.  

Storage tiering

C.  

Rightsizing

D.  

Instance scheduling

Discussion 0
Questions 239

An ecommerce company plans to move its data center workload to the AWS Cloud to support highly dynamic usage patterns. Which benefits make the AWS Cloud cost-effective for the migration of this type of workload? (Select TWO.)

Options:

A.  

Reliability

B.  

Security

C.  

Elasticity

D.  

Pay-as-you-go resource pricing

E.  

High availability

Discussion 0
Questions 240

A company is designing AWS architecture that will add compute resources when the company needs them. The architecture also includes a disaster recovery plan with automatic failover.

Options:

A.  

Reliability

B.  

Operational excellence

C.  

Security

D.  

Performance efficiency

Discussion 0
Questions 241

A company wants to transport 100 TB of data from its data center to AWS without using internet.

Which AWS service will meet this requirement?

Options:

A.  

AWS Snowcone

B.  

AWS Snowball Edge

C.  

AWS Data Exchange

D.  

AWS DataSync

Discussion 0
Questions 242

A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLl and AWS software development kits (SDKs).

Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Select TWO)

Options:

A.  

Create an 1AM user and provide AWS Management Console access only.

B.  

Create an 1AM user and provide programmatic access only.

C.  

Create an 1AM role and provide AWS Management Console access only.

D.  

Create an 1AM policy with administrator access and attach it to the 1AM user.

E.  

Create an 1AM policy with Amazon RDS access and attach it to the 1AM user.

Discussion 0
Questions 243

Which AWS service provides machine learning capability to detect and analyze content in images and videos?

Options:

A.  

Amazon Connect

B.  

Amazon Lightsail

C.  

Amazon Personalize

D.  

Amazon Rekognition

Discussion 0
Questions 244

A company is releasing a business-critical application. Before the release, the company needs strategic planning assistance from AWS. During the release, the company needs AWS infrastructure event management and real-time support.

What should the company do to meet these requirement?

Options:

A.  

Access AWS Trusted Advisor.

B.  

Contact the AWS Partner Network (APN).

C.  

Sign up for AWS Enterprise Support.

D.  

Contact AWS Professional Services.

Discussion 0
Questions 245

A company is using Amazon EC2 instances.

Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Maintain the network infrastructure.

B.  

Patch the guest operating system.

C.  

Configure a security group on deployed EC2 instances.

D.  

Provide physical security for the underlying hardware of the EC2 instances.

E.  

Manage the underlying hypervisor.

Discussion 0
Questions 246

A company plans to host its data warehouse application on AWS. The company has a machine learning (ML) model and wants to use that model within its data warehouse for data forecasting.

Options:

A.  

Amazon DynamoDB

B.  

Amazon Redshift ML

C.  

Amazon Aurora ML

D.  

Amazon MemoryDB

Discussion 0
Questions 247

Which of the following describes AWS Local Zones?

Options:

A.  

A cluster of data centers in one geographic location

B.  

A site used by Amazon CloudFront to cache frequently accessed content

C.  

An extension of an AWS Region to more granular locations

D.  

One or more data centers with redundant power and networking

Discussion 0
Questions 248

An ecommerce company has been monitoring usage of its online store that is hosted on a fleet of Amazon EC2 instances. Surges in traffic occur every weekend day at the same time and last for approximately 4 hours.

Options:

A.  

AWS Lambda

B.  

Amazon EventBridge

C.  

Elastic Load Balancing (ELB)

D.  

Amazon EC2 Auto Scaling

Discussion 0
Questions 249

A company has multiple AWS accounts. The company needs to receive a consolidated bill from AWS and must centrally manage security and compliance. Which AWS service or feature should the company use to meet these requirements?

Options:

A.  

AWS Cost and Usage Report

B.  

AWS Organizations

C.  

AWS Config

D.  

AWS Security Hub

Discussion 0
Questions 250

A company runs Amazon EC2 instances in a research lab. The instances run for 3 hours each week and cannot be interrupted.

Options:

A.  

Compute Savings Plan

B.  

On-Demand Instances

C.  

Convertible Reserved Instances

D.  

Spot Instances

Discussion 0
Questions 251

Which actions are the responsibility of AWS. according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Securing the virtualization layer

B.  

Patching the operating system on Amazon EC2 instances

C.  

Enforcing a strict password policy for 1AM users

D.  

Patching the operating system on Amazon RDS instances

E.  

Configuring security groups and network ACLs

Discussion 0
Questions 252

A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?

Options:

A.  

AWS CloudFormation

B.  

AWS Directory Service

C.  

Amazon Lightsail

D.  

AWS CodeDeploy

Discussion 0
Questions 253

A company is building AWS architecture to deliver real-time data feeds from an on-premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency.

What should the company use to connect the application and the data center to meet these requirements?

Options:

A.  

AWS Direct Connect

B.  

Public internet

C.  

AWS VPN

D.  

Amazon Connect

Discussion 0
Questions 254

An online gaming company hosts its gaming application on AWS. The company needs to decrease latency by sending internet traffic to the application through AWS infrastructure.

Options:

A.  

Amazon Route 53

B.  

AWS VPN

C.  

AWS Direct Connect

D.  

AWS Global Accelerator

Discussion 0
Questions 255

A company is running Amazon EC2 instances in a private subnet in a VPC.

Which AWS service or feature can provide the EC2 instances with network connections to the internet?

Options:

A.  

Gateway endpoint

B.  

NAT gateway

C.  

Network Load Balancer

D.  

Amazon Route 53

Discussion 0
Questions 256

A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS).

Where can the company find this documentation?

Options:

A.  

AWS Artifact

B.  

AWS Organizations

C.  

AWS Trusted Advisor

D.  

AWS Support Center

Discussion 0
Questions 257

A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application. Which solution will meet these requirements'?

Options:

A.  

Access the AWS Cost Management console to organize resources set an AWS budget, and receive notifications of unintentional usage.

B.  

Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.

C.  

Create Amazon CloudWatch dashboards to visually organize and track costs individually.

D.  

Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.

Discussion 0
Questions 258

Which encryption types can be used to protect objects at rest in Amazon S3? (Select TWO.)

Options:

A.  

Server-side encryption with AmazonS3 managed encryption keys (SSE-S3)

B.  

Server-side encryption with AWS KMSmanaged keys (SSE-KMS)

C.  

TLS

D.  

SSL

E.  

Transparent Data Encryption (TDE)

Discussion 0
Questions 259

Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

Options:

A.  

AWS Cost and Usage Report

B.  

AWS Organizations

C.  

Cost Explorer

D.  

AWS Budgets

Discussion 0
Questions 260

Which AWS service will help protect applications running on AWS from DDoS attacks?

Options:

A.  

Amazon GuardDuty

B.  

AWS WAF

C.  

AWS Shield

D.  

Amazon Inspector

Discussion 0
Questions 261

A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal

communication latency between the data centers.

How can the company meet this requirement?

Options:

A.  

Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.

B.  

Place the EC2 instances in two separate Availability Zones within the same AWS Region.

C.  

Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using anAWS VPN connection.

D.  

Place both EC2 instances in a placement group for dedicated bandwidth.

Discussion 0
Questions 262

A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.

Which AWS service or feature can the company use to meet these requirements?

Options:

A.  

AWS Organizations

B.  

Resource groups

C.  

Resource tagging

D.  

AWS Identity and Access Management (IAM)

Discussion 0
Questions 263

A company wants to create multiple isolated networks in the same AWS account.

Which AWS service or component will provide this functionality?

Options:

A.  

AWS Transit Gateway

B.  

Internet gateway

C.  

Amazon VPC

D.  

Amazon EC2

Discussion 0