Summer Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

AWS Certified Cloud Practitioner Question and Answers

AWS Certified Cloud Practitioner

Last Update Aug 26, 2026
Total Questions : 923

We are offering FREE CLF-C02 Amazon Web Services exam questions. All you do is to just go and sign up. Give your details, prepare CLF-C02 free exam questions and then go for complete pool of AWS Certified Cloud Practitioner test questions that will help you more.

CLF-C02 pdf

CLF-C02 PDF

$36.75  $104.99
CLF-C02 Engine

CLF-C02 Testing Engine

$43.75  $124.99
CLF-C02 PDF + Engine

CLF-C02 PDF + Testing Engine

$57.75  $164.99
Questions 1

Which AWS service is deployed to VPCs and provides protection from common network threats?

Options:

A.  

AWSShield

B.  

AWSWAF

C.  

AWS Network Firewall

D.  

AWS FirewallManager

Discussion 0
Questions 2

A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.

Which pricing options meet these requirements with the LOWEST cost? (Select TWO.)

Options:

A.  

Spot Instances

B.  

On-Demand Instances

C.  

Reserved Instances

D.  

Savings Plans

E.  

Dedicated Hosts

Discussion 0
Questions 3

Which AWS services are connectivity services for a VPC? (Select TWO.)

Options:

A.  

AWS Site-to-Site VPN

B.  

AWS Direct Connect

C.  

Amazon Connect

D.  

AWS Key Management Service (AWS KMS)

E.  

AWS Identity and Access Management (IAM)

Discussion 0
Questions 4

A company uses a third-party identity provider (IdP). The company wants to provide its employees with access to AWS accounts and services without requiring another set of login credentials.

Which AWS service will meet this requirement?

Options:

A.  

AWS Directory Service

B.  

Amazon Cognito

C.  

AWS IAM Identity Center

D.  

AWS Resource Access Manager (AWS RAM)

Discussion 0
Questions 5

Which of the following are user authentication services managed by AWS? (Select TWO.)

Options:

A.  

Amazon Cognito

B.  

AWS Lambda

C.  

AWS License Manager

D.  

AWS Identity and Access Management (IAM)

E.  

AWS CodeStar

Discussion 0
Questions 6

Which AWS service or feature provides information for governance monitoring and risk auditing of AWS accounts?

Options:

A.  

AWS CloudTrail

B.  

VPC Flow Logs

C.  

Amazon CloudWatch

D.  

AWS Trusted Advisor

Discussion 0
Questions 7

Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?

Options:

A.  

Security group

B.  

AWS WAF

C.  

AWS Firewall Manager

D.  

Network ACL

Discussion 0
Questions 8

A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts.

Which AWS service or resource will meet this requirement?

Options:

A.  

AWS Cost and Usage Report

B.  

IAM credential reports

C.  

AWS Artifact

D.  

Amazon CloudFront reports

Discussion 0
Questions 9

A company has deployed an application in the AWS Cloud. The company wants to ensure that the application is highly resilient.

Which component of AWS infrastructure can the company use to meet this requirement?

Options:

A.  

Content delivery network (CDN)

B.  

Edge locations

C.  

Wavelength Zones

D.  

Availability Zones

Discussion 0
Questions 10

A company is assessing its AWS Business Support plan to determine if the plan still meets the company ' s needs. The company is considering switching to

AWS Enterprise Support.

Which additional benefit will the company receive with AWS Enterprise Support?

Options:

A.  

A full set of AWS Trusted Advisor checks

B.  

Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week

C.  

A designated technical account manager (TAM) to assist in monitoring and optimization

D.  

A consultative review and architecture guidance for the company ' s applications

Discussion 0
Questions 11

A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?

Options:

A.  

Security groups

B.  

AWS Firewall Manager

C.  

IAM roles

D.  

IAM user SSH keys

Discussion 0
Questions 12

A company has an application that produces unstructured data continuously. The company needs to store the data so that the data is durable and easy to query.

Which AWS service can the company use to meet these requirements?

Options:

A.  

Amazon RDS

B.  

Amazon Aurora

C.  

Amazon QuickSight

D.  

Amazon DynamoDB

Discussion 0
Questions 13

Which AWS service or tool offers consolidated billing?

Options:

A.  

AWS Artifact

B.  

AWS Budgets

C.  

AWS Organizations

D.  

AWS Trusted AdvisorA company wants to limit its employees ' AWS access to a portfolio of predefined AWS resources.

Discussion 0
Questions 14

A company wants to move its data warehouse application to the AWS Cloud. The company wants to run and scale its analytics services without needing to provision and manage data warehouse clusters.

Which AWS service will meet these requirements?

Options:

A.  

Amazon Redshift provisioned data warehouse

B.  

Amazon Redshift Serverless

C.  

Amazon Athena

D.  

Amazon S3

Discussion 0
Questions 15

Which AWS service converts text to lifelike voices?

Options:

A.  

Amazon Transcribe

B.  

Amazon Rekognition

C.  

Amazon Polly

D.  

Amazon Textract

Discussion 0
Questions 16

What are some advantages of using Amazon EC2 instances lo host applications in the AWS Cloud instead of on premises? (Select TWO.)

Options:

A.  

EC2 includes operating system patch management

B.  

EC2 integrates with Amazon VPC. AWS CloudTrail, and AWS Identity and Access Management (IAM)

C.  

EC2 has a 100% service level agreement (SLA).

D.  

EC2 has a flexible, pay-as-you-go pricing model.

E.  

EC2 has automatic storage cost optimization.

Discussion 0
Questions 17

Which of the following is a fully managed MySQL-compatible database?

Options:

A.  

Amazon S3

B.  

Amazon DynamoDB

C.  

Amazon Redshift

D.  

Amazon Aurora

Discussion 0
Questions 18

Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

Options:

A.  

AWS Cost and Usage Report

B.  

AWS Organizations

C.  

Cost Explorer

D.  

AWS Budgets

Discussion 0
Questions 19

A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases.

Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

Options:

A.  

Elastic Load Balancing

B.  

Amazon EC2 Auto Scaling

C.  

AWS App2Container (A2C)

D.  

AWS Systems Manager

Discussion 0
Questions 20

A company wants to integrate its online shopping website with social media login credentials.

Which AWS service can the company use to make this integration?

Options:

A.  

AWS Directory Service

B.  

AWS Identity and Access Management (IAM)

C.  

Amazon Cognito

D.  

AWS IAM Identity Center (AWS Single Sign-On)

Discussion 0
Questions 21

A company hosts its website on Amazon EC2 instances. The company needs to ensure that the website reaches a global audience and provides minimum latency to users.

Which AWS service should the company use to meet these requirements?

Options:

A.  

Amazon Route 53

B.  

Amazon CloudFront

C.  

Elastic Load Balancing

D.  

AWS Lambda

Discussion 0
Questions 22

Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?

Options:

A.  

Create annotated documentation.

B.  

Anticipate failure.

C.  

Ensure performance efficiency.

D.  

Optimize costs.

Discussion 0
Questions 23

Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Physical and environmental controls

B.  

Patch management

C.  

Configuration management

D.  

Account structures

E.  

Choice of the AWS Region where data is stored

Discussion 0
Questions 24

A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal

communication latency between the data centers.

How can the company meet this requirement?

Options:

A.  

Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.

B.  

Place the EC2 instances in two separate Availability Zones within the same AWS Region.

C.  

Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using anAWS VPN connection.

D.  

Place both EC2 instances in a placement group for dedicated bandwidth.

Discussion 0
Questions 25

Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

Options:

A.  

Sustainability

B.  

Cost optimization

C.  

Operational excellence

D.  

Reliability

Discussion 0
Questions 26

Which best practice for cost governance does this example show?

Options:

A.  

Resource controls

B.  

Cost allocation

C.  

Architecture optimization

D.  

Tagging enforcement

Discussion 0
Questions 27

Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Config

C.  

AWS Security Hub

D.  

AWS Systems Manager

Discussion 0
Questions 28

Which benefit does Amazon Rekognition provide?

Options:

A.  

The ability to place watermarks on images

B.  

The ability to detect objects that appear in pictures

C.  

The ability to resize millions of images automatically

D.  

The ability to bid on object detection jobs

Discussion 0
Questions 29

A company needs to host a highly available application in the AWS Cloud. The application runs infrequently for short periods of time.

Which AWS service will meet these requirements with the LEAST amount of operational overhead?

Options:

A.  

Amazon EC2

B.  

AWS Fargate

C.  

AWS Lambda

D.  

Amazon Aurora

Discussion 0
Questions 30

A company is building a mobile app to provide shopping recommendations to its customers. The company wants to use a graph database as part of the shopping recommendation engine.

Which AWS database service should the company choose?

Options:

A.  

Amazon DynamoDB

B.  

Amazon Aurora

C.  

Amazon Neptune

D.  

Amazon DocumentDB (with MongoDB compatibility)

Discussion 0
Questions 31

A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.

For how much time will the customer be billed?

Options:

A.  

3 hours, 5 minutes

B.  

3 hours, 5 minutes, and 6 seconds

C.  

3 hours, 6 minutes

D.  

4 hours

Discussion 0
Questions 32

A company is moving to the AWS Cloud to reduce operational overhead for its application infrastructure.

Which IT operation will the company still be responsible for after the migration to AWS?

Options:

A.  

Security patching of AWS Elastic Beanstalk

B.  

Backups of data that is stored in Amazon Aurora

C.  

Termination of Amazon EC2 instances that are managed by AWS Auto Scaling

D.  

Configuration of IAM access controls

Discussion 0
Questions 33

A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances.

Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?

Options:

A.  

Security groups

B.  

AWS WAF

C.  

Network ACLs

D.  

AWS Shield

Discussion 0
Questions 34

Which of the following are general AWS Cloud design principles described in the AWS Well-Architected Framework?

Options:

A.  

Consolidate key components into monolithic architectures.

B.  

Test systems at production scale.

C.  

Provision more capacity than a workload is expected to need.

D.  

Drive architecture design based on data collected about the workload behavior and requirements.

E.  

Make AWS Cloud architectural decisions static, one-time events.

Discussion 0
Questions 35

A developer has been hired by a large company and needs AWS credentials.

Which are security best practices that should be followed? (Select TWO.)

Options:

A.  

Grant the developer access to only the AWS resources needed to perform the job.

B.  

Share the AWS account root user credentials with the developer.

C.  

Add the developer to the administrator ' s group in AWS IAM.

D.  

Configure a password policy that ensures the developer ' s password cannot be changed.

E.  

Ensure the account password policy requires a minimum length.

Discussion 0
Questions 36

A company wants to build a new web application by using AWS services. The application must meet the on-demand load for periods of heavy activity.

Which AWS services or resources provide the necessary workload adjustments to meet these requirements? (Select TWO.)

Options:

A.  

Amazon Machine Image (AMI)

B.  

Amazon EC2 Auto Scaling

C.  

Amazon EC2 instance

D.  

AWS Lambda

E.  

EC2 Image Builder

Discussion 0
Questions 37

A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.

Which combination of AWS services should the company use to meet these requirements? (Select TWO.)

Options:

A.  

AWS Glue

B.  

Amazon Elastic File System (Amazon EFS)

C.  

Amazon Redshift

D.  

Amazon QuickSight

E.  

Amazon Quantum Ledger Database (Amazon QLDB)

Discussion 0
Questions 38

What is an AWS responsibility under the AWS shared responsibility model?

Options:

A.  

Configure the security group rules that determine which ports are open on an Amazon EC2 Linux instance.

B.  

Ensure the security of the internal network in the AWS data centers.

C.  

Patch the guest operating system with the latest security patches on Amazon EC2.

D.  

Turn on server-side encryption for Amazon S3 buckets.A company wants to deploy its critical application on AWS and maintain high availability.

Discussion 0
Questions 39

A company wants to migrate a database from an on-premises environment to Amazon RDS.

After the migration is complete, which management task will the company still be responsible for?

Options:

A.  

Hardware lifecycle management

B.  

Application optimization

C.  

Server maintenance

D.  

Power, network, and cooling provisioning

Discussion 0
Questions 40

A company is running a workload in the AWS Cloud.

Which AWS best practice ensures the MOST cost-effective architecture for the workload?

Options:

A.  

Loose coupling

B.  

Rightsizing

C.  

Caching

D.  

Redundancy

Discussion 0
Questions 41

A company wants to run its production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week.

Which AWS Support plan will meet these requirements?

Options:

A.  

AWS Basic Support

B.  

AWS Enterprise Support

C.  

AWS Business Support

D.  

AWS Developer Support

Discussion 0
Questions 42

In which categories does AWS Trusted Advisor provide recommended actions? (Select TWO.)

Options:

A.  

Operating system patches

B.  

Cost optimization

C.  

Repetitive tasks

D.  

Service quotas

E.  

Account activity records

Discussion 0
Questions 43

Which Amazon S3 storage class is the MOST cost-effective for long-term storage?

Options:

A.  

S3 Glacier Deep Archive

B.  

S3 Standard

C.  

S3 Standard-Infrequent Access (S3 Standard-IA)

D.  

S3 One Zone-Infrequent Access (S3 One Zone-IA)

Discussion 0
Questions 44

A company is running an application on AWS. The company wants to identify and prevent the accidental

Which AWS service or feature will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

Network ACL

C.  

AWS WAF

D.  

AWS Network Firewall

Discussion 0
Questions 45

Which AWS service helps developers use loose coupling and reliable messaging between microservices?

Options:

A.  

Elastic Load Balancing

B.  

Amazon Simple Notification Service (Amazon SNS)

C.  

Amazon CloudFront

D.  

Amazon Simple Queue Service (Amazon SQS)

Discussion 0
Questions 46

Which AWS service or tool helps companies measure the environmental impact of their AWS usage?

Options:

A.  

AWS customer carbon footprint tool

B.  

AWS Compute Optimizer

C.  

Sustainability pillar

D.  

OS-Climate (Open Source Climate Data Commons)

Discussion 0
Questions 47

A company has set up a VPC on AWS. The company needs a dedicated connection between the VPC and the company’s on-premises network.

Which action should the company take to meet this requirement?

Options:

A.  

Establish a VPN connection between the VPC and the company ' s on-premises network.

B.  

Establish an AWS Direct Connect connection between the VPC and the company ' s on-premisesnetwork.

C.  

Attach an internet gateway to the VP

C.  

Use the AWS public endpoints for connectivity.

D.  

Configure Amazon Connect to provide connectivity between the VPC and the company ' s on-premisesnetwork.

Discussion 0
Questions 48

How does the AWS Enterprise Support Concierge team help users?

Options:

A.  

Supporting application development

B.  

Providing architecture guidance

C.  

Answering billing and account inquiries

D.  

Answering questions regarding technical support cases

Discussion 0
Questions 49

A user has a stateful workload that will run on Amazon EC2 for the next 3 years.

What is the MOST cost-effective pricing model for this workload?

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Dedicated Instances

D.  

Spot Instances

Discussion 0
Questions 50

A company needs to store data from a recommendation engine in a database.

Which AWS service provides this functionality with the LEAST operational overhead?

Options:

A.  

Amazon RDS for PostgreSQL

B.  

Amazon DynamoDB

C.  

Amazon Neptune

D.  

Amazon Aurora

Discussion 0
Questions 51

Which AWS service uses AWS Compute Optimizer to provide sizing recommendations based on workload metrics?

Options:

A.  

Amazon EC2

B.  

Amazon RDS

C.  

Amazon Lightsail

D.  

AWS Step Functions

Discussion 0
Questions 52

A company needs to categorize and track AWS usage cost based on business categories.

Which AWS service or feature should the company use to meet these requirements?

Options:

A.  

Cost allocation tags

B.  

AWS Organizations

C.  

AWS Security Hub

D.  

AWS Cost and Usage Report

Discussion 0
Questions 53

A company wants to monitor its workload performance. The company wants to ensure that the cloud services are delivered at a level that meets its business needs.

Which AWS Cloud Adoption Framework (AWS CAF) perspective will meet these requirements?

Options:

A.  

Business

B.  

Governance

C.  

Platform

D.  

Operations

Discussion 0
Questions 54

Which benefit does AWS offer exclusively to users who have an AWS Enterprise Support plan?

Options:

A.  

Access to a technical project manager

B.  

Access to a technical account manager (TAM)

C.  

Access to a cloud support engineer

D.  

Access to a solutions architectA company wants to automatically set up and govern a multi-account AWS environment.

Discussion 0
Questions 55

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

Options:

A.  

AWS CLI

B.  

AWS Developer Center

C.  

AWS Cloud Development Kit (AWS CDK)

D.  

AWS CodeStar

Discussion 0
Questions 56

A company wants to define a central data protection policy that works across AWS services for compute, storage, and database resources.

Which AWS service will meet this requirement?

Options:

A.  

AWS Batch

B.  

AWS Elastic Disaster Recovery

C.  

AWS Backup

D.  

Amazon FSx

Discussion 0
Questions 57

A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address.

Which AWS service will meet these requirements?

Options:

A.  

AWS DataSync

B.  

AWS Application Migration Service

C.  

AWS Application Discovery Service

D.  

AWS Database Migration Service (AWS DMS)

Discussion 0
Questions 58

A company is running an application that is hosted on Amazon EC2 instances. The usage of the EC2 instances is higher during daytime hours than nighttime hours. The company wants to optimize the number of EC2 instances based on this usage pattern.

Which AWS service or instance purchasing option should the company use to meet these requirements?

Options:

A.  

Spot Instances

B.  

Reserved Instances

C.  

AWS CloudFormation

D.  

AWS Auto Scaling

Discussion 0
Questions 59

A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure are operating normally.

Which combination of AWS services can the company use to gather the required information? (Select TWO.)

Options:

A.  

AWS Personal Health Dashboard

B.  

AWS Systems Manager

C.  

AWS Trusted Advisor

D.  

AWS Service Health Dashboard

E.  

AWS Service Catalog

Discussion 0
Questions 60

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.

Which S3 feature should the company use to meet these requirements?

Options:

A.  

S3 Lifecycle rules

B.  

S3 Versioning

C.  

S3 bucket policies

D.  

S3 server-side encryption

Discussion 0
Questions 61

Which AWS service provides a highly accurate enterprise search capability that is powered by machine learning?

Options:

A.  

Amazon Augmented AI (Amazon A2I)

B.  

Amazon Rekognition

C.  

Amazon Kendra

D.  

Amazon Polly

Discussion 0
Questions 62

Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Knowledge Center

C.  

AWS Support Center

D.  

AWS Artifact

Discussion 0
Questions 63

A company needs to apply security rules to specific Amazon EC2 instances.

Which AWS service or feature provides this functionality?

Options:

A.  

AWS Shield

B.  

Network ACLs

C.  

Security groups

D.  

AWS Firewall Manager

Discussion 0
Questions 64

An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console.

Which AWS service should be used to determine what action made this EC2 instance inaccessible?

Options:

A.  

Amazon CloudWatch Logs

B.  

AWS Security Hub

C.  

Amazon Inspector

D.  

AWS CloudTrail

Discussion 0
Questions 65

A company seeks cost savings in exchange for a commitment to use a specific amount of an AWS service or category ofAWS services for 1 year or 3 years.

Which AWS pricing model or offering will meet these requirements?

Options:

A.  

Pay-as-you-go pricing

B.  

Savings Plans

C.  

AWS Free Tier

D.  

Volume discounts

Discussion 0
Questions 66

An ecommerce company wants to provide relevant product recommendations to its customers. The recommendations will include products that are frequently purchased with other products that the customer already purchased. The recommendations also will include

products of a specific color and products from the customer’s favorite brand.

Which AWS service or feature should the company use to meet these requirements with the LEAST development effort?

Options:

A.  

Amazon Comprehend

B.  

Amazon Forecast

C.  

Amazon Personalize

D.  

Amazon SageMaker Studio

Discussion 0
Questions 67

A company is building an application in the AWS Cloud. The company wants to use temporary credentials for the application to access other AWS resources.

Which AWS service will meet these requirements?

Options:

A.  

AWS Key Management Service (Aws KMS)

B.  

AWS CloudHSM

C.  

Amazon Cognito

D.  

AWS Security Token Service (Aws STS)

Discussion 0
Questions 68

A company plans to migrate to the AWS Cloud. The company wants to gather information about its on-premises data center.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Application Discovery Service

B.  

AWS DataSync

C.  

AWS Storage Gateway

D.  

AWS Database Migration Service (AWS DMS)

Discussion 0
Questions 69

A company needs to store infrequently used data for data archives and long-term backups.

Which AWS service or storage class will meet these requirements MOST cost-effectively?

Options:

A.  

Amazon FSx for Lustre

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon Elastic File System (Amazon EFS)

D.  

Amazon S3 Glacier Flexible Retrieval

Discussion 0
Questions 70

Which AWS service helps assess the security and compliance of applications that are deployed on Amazon EC2 instances?

Options:

A.  

AWS Security Hub

B.  

Amazon Inspector

C.  

Amazon GuardDuty

D.  

AWS Shield

Discussion 0
Questions 71

What is a benefit of using an Elastic Load Balancing (ELB) load balancer with applications running in the AWS Cloud?

Options:

A.  

An ELB will automatically scale resources to meet capacity needs.

B.  

An ELB can balance traffic across multiple compute resources.

C.  

An ELB can span multiple AWS Regions.

D.  

An ELB can balance traffic between multiple internet gateways.

Discussion 0
Questions 72

A company needs a graph database service that is scalable and highly available.

Which AWS service meets these requirements?

Options:

A.  

Amazon Aurora

B.  

Amazon Redshift

C.  

Amazon DynamoDB

D.  

Amazon Neptune

Discussion 0
Questions 73

A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible.

Which AWS service or resource should the company use to select its Amazon RDS deployment area?

Options:

A.  

Amazon Connect

B.  

AWS Wavelength

C.  

AWS Regions

D.  

AWS Direct Connect

Discussion 0
Questions 74

A company is developing a web application that uses containers. The company needs a repository to store and control access to container images.

Options:

A.  

Amazon Elastic Container Registry (Amazon ECR)

B.  

Amazon Elastic Kubernetes Service (Amazon EKS)

C.  

Amazon Elastic Container Service (Amazon ECS)

D.  

Amazon EC2

Discussion 0
Questions 75

A company needs to reserve a certain amount of Amazon EC2 compute resources in a specific Availability Zone within an AWS Region. Which purchasing option should the company use to meet this requirement?

Options:

A.  

EC2 Instance Savings Plans

B.  

Compute Savings Plans

C.  

Regional Reserved Instances

D.  

Zonal Reserved Instances

Discussion 0
Questions 76

Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?

Options:

A.  

Data architecture

B.  

Event management

C.  

Cloud fluency

D.  

Strategic partnership

Discussion 0
Questions 77

A developer needs to interact with AWS by using the AWS CLI.

Which security feature or AWS service must be provisioned in the developer ' s account to meet this requirement?

Options:

A.  

User name and password

B.  

AWS Systems Manager

C.  

Root password access

D.  

AWS access key

Discussion 0
Questions 78

Which task is a responsibility of AWS, according to the AWS shared responsibility model?

Options:

A.  

Encryption of application data

B.  

Authentication of application users

C.  

Protection of physical network infrastructure

D.  

Configuration of firewalls

Discussion 0
Questions 79

A company simulates workflows to review and validate that all processes are effective and that staff are familiar with the processes.

Which design principle of the AWS Well-Architected Framework is the company following with this practice?

Options:

A.  

Perform operations as code.

B.  

Refine operation procedures frequently.

C.  

Make frequent, small, reversible changes.

D.  

Structure the company to support business outcomes.

Discussion 0
Questions 80

A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data dally.

Which S3 storage class will meet these requirements MOST cost-effectively?

Options:

A.  

S3 Standard

B.  

S3 Glacier Deep Archive

C.  

S3 One Zone-Infrequent Access (S3 One Zone-IA)

D.  

S3 Intelligent-Tiering

Discussion 0
Questions 81

A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available. Which solution meets these requirements?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use EC2 instances in multiple edge locations.

C.  

Use EC2 instances in the same Availability Zone but in different AWS Regions.

D.  

Use EC2 instances in the same edge location and the same AWS Region.

Discussion 0
Questions 82

Which AWS service gives users the ability to deploy highly repeatable infrastructure configurations?

Options:

A.  

AWS CloudFormation

B.  

AWS CodeDeploy

C.  

AWS CodeBuild

D.  

AWS Systems Manager

Discussion 0
Questions 83

A company wants to protect data stored in Amazon S3 from accidental deletion.

According to the AWS shared responsibility model, which task is the company’s responsibility?

Options:

A.  

Maintaining the physical storage devices in AWS data centers

B.  

Ensuring the durability of objects stored in Amazon S3

C.  

Patching the underlying S3 storage platform

D.  

Enabling S3 Versioning for the S3 buckets

Discussion 0
Questions 84

A company runs Amazon EC2 instances in a research lab. The instances run for 3 hours each week and cannot be interrupted.

Options:

A.  

Compute Savings Plan

B.  

On-Demand Instances

C.  

Convertible Reserved Instances

D.  

Spot Instances

Discussion 0
Questions 85

A company wants to log in securely to Linux Amazon EC2 instances.

How can the company accomplish this goal?

Options:

A.  

Use SSH keys.

B.  

Use a VPN.

C.  

Use end-to-end encryption.

D.  

Use Amazon Route 53.

Discussion 0
Questions 86

A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS.

Which AWS service should the company use to meet this requirement?

Options:

A.  

AWS Lambda

B.  

Amazon Route 53

C.  

Amazon CloudFront

D.  

AWS Direct Connect

Discussion 0
Questions 87

Which option is the default pricing model for Amazon EC2 instances?

Options:

A.  

On-Demand Instances

B.  

Savings Plans

C.  

Spot Instances

D.  

Reserved Instances

Discussion 0
Questions 88

A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources. Which actions will meet these requirements? (Select TWO.)

Options:

A.  

Use AWS Service Catalog to identify a list of on-premises resources that can be migrated.

B.  

Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.

C.  

Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources

D.  

Set up an AWS Direct Connect connection between the on-premises data center and AWS.

E.  

Use Amazon CloudFront to restrict access to static web content provided through the on-premises web servers.

Discussion 0
Questions 89

A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?

Options:

A.  

AWS CloudFormation

B.  

AWS Directory Service

C.  

Amazon Lightsail

D.  

AWS CodeDeploy

Discussion 0
Questions 90

A company needs to create a portfolio that provides central management of approved IT services. Which AWS service offers this functionality?

Options:

A.  

AWS Service Catalog

B.  

AWS Control Tower

C.  

AWS Cloud Map

D.  

AWS Clean Rooms

Discussion 0
Questions 91

A company wants to rightsize its Amazon EC2 instances.

Which configuration change will meet this requirement with the LEAST operational overhead?

Options:

A.  

Add EC2 instances in another Availability Zone.

B.  

Change the size and type of the EC2 instances based on utilization.

C.  

Convert the payment method from On-Demand to Savings Plans.

D.  

Reprovision the EC2 instances with a larger instance type.

Discussion 0
Questions 92

A company that uses AWS needs to transfer 2 TB of data.

Which type of transfer of that data would result in no cost for the company?

Options:

A.  

Inbound data transfer from the internet

B.  

Outbound data transfer to the internet

C.  

Data transfer between AWS Regions

D.  

Data transfer between Availability Zones

Discussion 0
Questions 93

A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company ' s AWS account use.

Which AWS feature or service will meet this requirement?

Options:

A.  

AWS Cost and Usage Reports

B.  

IAM credential reports

C.  

Detailed Billing Reports

D.  

AWS Cost Explorer reports

Discussion 0
Questions 94

Which cloud concept is demonstrated by using AWS Cost Explorer?

Options:

A.  

Rightsizing

B.  

Reliability

C.  

Resilience

D.  

Modernization

Discussion 0
Questions 95

A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.

Which AWS service can the company use to meet this goal?

Options:

A.  

AWS WAF

B.  

AWS Shield

C.  

Amazon VPC

D.  

AWS Certificate Manager (ACM)

Discussion 0
Questions 96

A company stores data in Amazon S3.

According to the AWS shared responsibility model, which task is the company’s responsibility?

Options:

A.  

Maintaining the physical storage infrastructure in AWS data centers

B.  

Securing the network infrastructure between AWS Regions

C.  

Configuring bucket policies to control access to S3 objects

D.  

Patching the underlying S3 service platform

Discussion 0
Questions 97

Which AWS service or feature should a company use between two microservices to ensure that messages are sent and received in exact order?

Options:

A.  

Amazon Simple Email Service (Amazon SES)

B.  

Amazon Simple Notification Service (Amazon SNS)

C.  

Amazon S3 Event Notifications

D.  

Amazon Simple Queue Service (Amazon SQS) FIFO queues

Discussion 0
Questions 98

Which task can a user complete by using AWS Identity and Access Management (IAM)?

Options:

A.  

Validate JSON syntax from an application configuration file.

B.  

Analyze logs from an Amazon API Gateway call.

C.  

Filter traffic to or from an Amazon EC2 instance.

D.  

Grant permissions to applications that run on Amazon EC2 instances.

Discussion 0
Questions 99

A company migrated to the AWS Cloud. Now the company pays for services on an as-needed basis.

Which advantage of cloud computing is the company benefiting from?

Options:

A.  

Stop spending money running and maintaining data centers

B.  

Increase speed and agility

C.  

Go global in minutes

D.  

Trade fixed expense for variable expense

Discussion 0
Questions 100

Where can users find examples of AWS Cloud solution designs?

Options:

A.  

AWS Marketplace

B.  

AWS Service Catalog

C.  

AWS Architecture Center

D.  

AWS Trusted Advisor

Discussion 0
Questions 101

Which AWS service helps users plan and track their server and application inventory migration data to AWS?

Options:

A.  

Amazon CloudWatch

B.  

AWS DataSync

C.  

AWS Migration Hub

D.  

AWS Application Migration Service

Discussion 0
Questions 102

A company wants to enhance security by launching a third-party ISP intrusion detection system from its AWS account.

Which AWS service or resource should the company use to meet this requirement?

Options:

A.  

AWS Security Hub

B.  

AWS Marketplace

C.  

AWS Quick Starts

D.  

AWS Security Center

Discussion 0
Questions 103

A company has a MariaDB database on premises. The company wants to move the data to the AWS Cloud. Which AWS service will host this database with the LEAST amount of operational overhead?

Options:

A.  

Amazon RDS

B.  

Amazon Neptune

C.  

Amazon S3

D.  

Amazon DynamoDB

Discussion 0
Questions 104

Which AWS service can generate information that can be used by external auditors?

Options:

A.  

Amazon Cognito

B.  

Amazon FSx

C.  

AWS Config

D.  

Amazon Inspector

Discussion 0
Questions 105

Which task is the shared responsibility of the customer and AWS under the AWS shared responsibility model?

Options:

A.  

Installing hardware infrastructure

B.  

Managing security

C.  

Managing guest operating systems

D.  

Protecting the physical infrastructure that runs all services

Discussion 0
Questions 106

Which AWS service can a company use to manage encryption keys in the cloud?

Options:

A.  

AWS License Manager

B.  

AWS Certificate Manager (ACM)

C.  

AWS CloudHSM

D.  

AWS Directory Service

Discussion 0
Questions 107

Which AWS service provides the ability to manage infrastructure as code?

Options:

A.  

AWS CodePipeline

B.  

AWS CodeDeploy

C.  

AWS Direct Connect

D.  

AWS CloudFormation

Discussion 0
Questions 108

Which AWS service or feature is used to send both text and email messages from distributed applications?

Options:

A.  

Amazon Simple Notification Service (Amazon SNS)

B.  

Amazon Simple Email Service (Amazon SES)

C.  

Amazon CloudWatch alerts

D.  

Amazon Simple Queue Service (Amazon SQS)

Discussion 0
Questions 109

A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility.

How does AWS provide agility for users?

Options:

A.  

The ability the ensure high availability by deploying workloads to multiple regions.

B.  

A pay-as-you-go model for many services and resources

C.  

The ability to transfer infrastructure management to the AWS Cloud

D.  

The ability to provision and deprovision resources quickly with minimal effort

Discussion 0
Questions 110

Which task is a responsibility of AWS, according to the AWS shared responsibility model?

Options:

A.  

Configure identity and access management for applications.

B.  

Manage encryption options for data that is stored on AWS.

C.  

Configure security groups for Amazon EC2 instances.

D.  

Maintain the physical hardware of the infrastructure.

Discussion 0
Questions 111

A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running costs in the AWS Cloud.

Which AWS service or tool will meet these requirements?

Options:

A.  

AWS Trusted Advisor

B.  

Amazon Inspector

C.  

AWS Control Tower

D.  

Migration Evaluator

Discussion 0
Questions 112

A company has set up a VPC in its AWS account and has created a subnet in the VPC. The company wants to make the subnet public.

Which AWS features should the company use to meet this requirement? (Select TWO.)

Options:

A.  

Amazon VPC internet gateway

B.  

Amazon VPC NAT gateway

C.  

Amazon VPC route tables

D.  

Amazon VPC network ACL

E.  

Amazon EC2 security groups

Discussion 0
Questions 113

A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS).

Where can the company find this documentation?

Options:

A.  

AWS Artifact

B.  

AWS Organizations

C.  

AWS Trusted Advisor

D.  

AWS Support Center

Discussion 0
Questions 114

A company is building a business intelligence solution that uses Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it.

Which service should the company use?

Options:

A.  

Amazon CloudWatch

B.  

AWS Health Dashboard

C.  

AWS Service Catalog

D.  

Amazon QuickSight

Discussion 0
Questions 115

A company needs to list all users in an account. The company must report on the status of specific account details. The account details include passwords, access keys, and multi-factor authentication (MFA) devices.

Which AWS service or tool will meet these requirements?

Options:

A.  

AWS Shield

B.  

AWS Trusted Advisor

C.  

Amazon Inspector

D.  

IAM credential report

Discussion 0
Questions 116

A company ' s IT administrator needs to configure the AWS CLI for programmatic access to AWS services for the company ' s employees. Which combination of credential components must the IT administrator use to meet this requirement? (Select TWO.)

Options:

A.  

A public key

B.  

A secret access key

C.  

An IAM role

D.  

An access key ID

E.  

A private key

Discussion 0
Questions 117

A company needs to replicate existing AWS resources by using templates.

Which AWS service provides this functionality?

Options:

A.  

AWS CloudFormation

B.  

AWS Step Functions

C.  

Amazon CloudFront

D.  

AWS CloudTrail

Discussion 0
Questions 118

What is the total volume of data that can be stored in Amazon S3?

Options:

A.  

10 PB

B.  

50 PB

C.  

100 PB

D.  

Virtually unlimited

Discussion 0
Questions 119

A company wants to migrate its on-premises NoSQL workload to Amazon DynamoDB. Which AWS service will meet this requirement?

Options:

A.  

AWS Migration Hub

B.  

AWS Database Migration Service (AWS DMS)

C.  

Migration Evaluator

D.  

AWS Application Migration Service

Discussion 0
Questions 120

A company needs a hybrid cloud storage service to connect its on-premises environment to scalable AWS Cloud storage. Which AWS service will meet these requirements?

Options:

A.  

Amazon S3

B.  

Amazon FSx

C.  

AWS Storage Gateway

D.  

AWS Fargate

Discussion 0
Questions 121

Which AWS service or tool inspects a user ' s AWS environment and makes recommendations for cost savings and system performance improvements?

Options:

A.  

Cost Explorer

B.  

AWS Trusted Advisor

C.  

Amazon Inspector

D.  

AWS Budgets

Discussion 0
Questions 122

A developer who has no AWS Cloud experience wants to use AWS technology to build a web application.

Which AWS service should the developer use to start building the application?

Options:

A.  

Amazon SageMaker

B.  

AWS Lambda

C.  

Amazon Lightsail

D.  

Amazon Elastic Container Service (Amazon ECS)

Discussion 0
Questions 123

Which AWS feature or resource grants temporary access to specific AWS resources?

Options:

A.  

AWS Identity and Access Management Access Analyzer

B.  

Service control policies (SCPs)

C.  

Access control lists (ACLs)

D.  

IAM roles

Discussion 0
Questions 124

Which AWS service or feature will search for and identify AWS resources that are shared externally?

Options:

A.  

Amazon OpenSearch Service

B.  

AWS Control Tower

C.  

AWS IAM Access Analyzer

D.  

AWS Fargate

Discussion 0
Questions 125

A company is moving some of its on-premises IT services to the AWS Cloud. The finance department wants to see the entire bill so it can forecast spending limits.

Which AWS service can the company use to set spending limits and receive notifications if those limits are exceeded?

Options:

A.  

AWS Cost and Usage Reports

B.  

AWS Budgets

C.  

AWS Organizations consolidated billing

D.  

Cost Explorer

Discussion 0
Questions 126

Which actions are best practices for an AWS account root user? (Select TWO.)

Options:

A.  

Share root user credentials with team members.

B.  

Create multiple root users for the account, separated by environment.

C.  

Enable multi-factor authentication (MFA) on the root user.

D.  

Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.

E.  

Use programmatic access instead of the root user and password.

Discussion 0
Questions 127

A company wants to securely rehost databases to AWS with minimal downtime. Which AWS service will meet these requirements?

Options:

A.  

AWS Database Migration Service (AWS DMS)

B.  

AWS Snow Family

C.  

AWSDataSync

D.  

AWS Mainframe Modernization

Discussion 0
Questions 128

A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads.

Which benefit of the AWS Cloud does this scenario describe?

Options:

A.  

Global deployment in minutes

B.  

Cost savings

C.  

Agility

D.  

Elasticity

Discussion 0
Questions 129

A company runs its workloads on premises. The company wants to compare the cost of running its workloads on premises with the cost of running the workloads on AWS.

Which AWS service will meet this requirement?

Options:

A.  

AWS Cost Explorer

B.  

AWS Budgets

C.  

AWS Pricing Calculator

D.  

AWS Trusted Advisor

Discussion 0
Questions 130

Which AWS service can help provide low-latency application experiences by running workloads on premises?

Options:

A.  

AWS Outposts

B.  

Amazon Connect

C.  

Amazon Lightsail

D.  

AWS Direct Connect

Discussion 0
Questions 131

A company wants to test a new application.

Which AWS principle will help the company test the application?

Options:

A.  

Make long-term commitments in exchange for a cost discount.

B.  

Scale up and down when needed without any long-term commitments.

C.  

Have total control over the application infrastructure.

D.  

Manage all of the maintenance tasks associated with the cloud.

Discussion 0
Questions 132

Which AWS service helps users audit API activity across their AWS account?

Options:

A.  

AWS CloudTrail

B.  

Amazon Inspector

C.  

AWS WAF

D.  

AWS Config

Discussion 0
Questions 133

Which AWS service provides storage-optimized and compute-optimized device configurations?

Options:

A.  

AWS Snowcone

B.  

AWS Storage Gateway

C.  

AWS Snowball Edge

D.  

AWS DataSync

Discussion 0
Questions 134

A company has multiple AWS accounts. The company needs to receive a consolidated bill from AWS and must centrally manage security and compliance. Which AWS service or feature should the company use to meet these requirements?

Options:

A.  

AWS Cost and Usage Report

B.  

AWS Organizations

C.  

AWS Config

D.  

AWS Security Hub

Discussion 0
Questions 135

Which AWS service can be used to encrypt data at rest?

Options:

A.  

Amazon GuardDuty

B.  

AWS Shield

C.  

AWS Security Hub

D.  

AWS Key Management Service (AWS KMS)

Discussion 0
Questions 136

Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

Options:

A.  

The ability to turn over the responsibility for all security to AWS.

B.  

The ability to use the pay-as-you-go model.

C.  

The ability to have full control over the physical infrastructure.

D.  

No longer having to guess what capacity will be required.

E.  

No longer worrying about users access controls.

Discussion 0
Questions 137

A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.

Which AWS service or tool will meet these requirements?

Options:

A.  

AWS Auto Scaling

B.  

AWS Compute Optimizer

C.  

AWS Cost Explorer

D.  

AWS Well-Architected Framework

Discussion 0
Questions 138

A company uploads audio and video files to a centralized Amazon S3 bucket from different geographic locations. Which AWS solution will optimize transfer speeds for these files?

Options:

A.  

AWS Global Accelerator

B.  

S3 Transfer Acceleration

C.  

AWS Direct Connect

D.  

Amazon CloudFront

Discussion 0
Questions 139

A company is running workloads for multiple departments within a single VPC. The company needs to be able to bill each department for its resource usage.

Which action should the company take to accomplish this goal with the LEAST operational overhead?

Options:

A.  

Add a department tag to each resource and configure cost allocation tags.

B.  

Move each department resource to its own VPC.

C.  

Move each department resource to its own AWS account.

D.  

Use AWS Organizations to get a billing report for each department.

Discussion 0
Questions 140

Which AWS service should a cloud engineer use to view API calls to AWS services?

Options:

A.  

Amazon CloudWatch

B.  

AWS CloudTrail

C.  

AWS Config

D.  

AWS Artifact

Discussion 0
Questions 141

A company needs a database that can quickly read and write large amounts of unstructured data.

Which AWS service meets these requirements with the MOST scalability?

Options:

A.  

Amazon RDS

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon DynamoDB

D.  

Amazon Lightsail

Discussion 0
Questions 142

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

Options:

A.  

Ensuring network connectivity from AWS to the internet

B.  

Patching and fixing flaws within the AWS Cloud infrastructure

C.  

Ensuring the physical security of cloud data centers

D.  

Ensuring Amazon EBS volumes are backed up

Discussion 0
Questions 143

A developer needs to build an application for a retail company. The application must provide real-time product recommendations that are based on machine learning.

Which AWS service should the developer use to meet this requirement?

Options:

A.  

AWS Health Dashboard

B.  

Amazon Personalize

C.  

Amazon Forecast

D.  

Amazon Transcribe

Discussion 0
Questions 144

A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances. The suspicious activity is coming from a single IP address.

Which AWS service should the company use to block access from this IP address?

Options:

A.  

AWS Shield

B.  

AWS Config

C.  

Amazon GuardDuty

D.  

AWS WAF

Discussion 0
Questions 145

A company wants to use a template to reliably provision, manage, and update its infrastructure in the AWS Cloud.

Options:

A.  

AWS Lambda

B.  

AWS CloudFormation

C.  

AWS Fargate

D.  

AWS CodeDeploy

Discussion 0
Questions 146

A company plans to host its data warehouse application on AWS. The company has a machine learning (ML) model and wants to use that model within its data warehouse for data forecasting.

Options:

A.  

Amazon DynamoDB

B.  

Amazon Redshift ML

C.  

Amazon Aurora ML

D.  

Amazon MemoryDB

Discussion 0
Questions 147

An international company needs to keep its Amazon DynamoDB tables synchronized across AWS Regions.

Which AWS service or feature will meet this requirement?

Options:

A.  

DynamoDB global tables

B.  

DynamoDB Accelerator (DAX)

C.  

DynamoDB global secondary index (GSI)

D.  

Service-linked IAM roles for DynamoDB

Discussion 0
Questions 148

Treating infrastructure as code in the AWS Cloud allows users to:

Options:

A.  

automate migration of on-premises hardware to AWS data centers.

B.  

let a third party automate an audit of the AWS infrastructure.

C.  

turn over application code to AWS so it can run on the AWS infrastructure.

D.  

automate the infrastructure provisioning process.

Discussion 0
Questions 149

Which AWS services can a company use to host and run a MySQL database? (Select TWO.)

Options:

A.  

Amazon RDS

B.  

Amazon DynamoDB

C.  

Amazon S3

D.  

Amazon EC2

E.  

Amazon MQ

Discussion 0
Questions 150

Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

Options:

A.  

Third-party vendors

B.  

Customers

C.  

Reseller partners

D.  

Internet providers

Discussion 0
Questions 151

Which AWS service or feature is available only to users who have an AWS Enterprise Support plan?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Support case

C.  

AWS Concierge Support team

D.  

Amazon Connect

Discussion 0
Questions 152

When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

Options:

A.  

Spot Instances

B.  

Dedicated Instances

C.  

Dedicated Hosts

D.  

Reserved Instances

Discussion 0
Questions 153

An application is running on multiple Amazon EC2 instances. The company wants to make the application highly available by configuring a load balancer with requests forwarded to the EC2 instances based on URL paths.

Which AWS load balancer will meet these requirements and take the LEAST amount of effort to deploy?

Options:

A.  

Network Load Balancer

B.  

Application Load Balancer

C.  

AWS OpsWorks Load Balancer

D.  

Custom Load Balancer on Amazon EC2

Discussion 0
Questions 154

A company needs to request temporary, limited-privilege credentials for IAM users and for the federated users that the company authenticates.

Which AWS service will provide these credentials?

Options:

A.  

Amazon GuardDuty

B.  

AWS Key Management Service (AWS KMS)

C.  

AWS Security Token Service (AWS STS)

D.  

AWS Identity and Access Management Access Analyzer

Discussion 0
Questions 155

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

Options:

A.  

Set up multi-factor authentication (MFA) for each Workspaces user account.

B.  

Ensure the environmental safety and security of the AWS infrastructure that hosts Workspaces.

C.  

Provide security for Workspaces user accounts through AWS Identity and Access Management(IAM).

D.  

Configure AWS CloudTrail to log API calls and user activity.A company stores data in an Amazon S3 bucket. The company must control who has permission to read, write,or delete objects that the company stores in the S3 bucket.

Discussion 0
Questions 156

Which AWS service or tool should a company use to forecast AWS spending?

Options:

A.  

Amazon DevPay

B.  

AWS Organizations

C.  

AWS Trusted Advisor

D.  

Cost Explorer

Discussion 0
Questions 157

A company needs to host a web server on Amazon EC2 instances for at least 1 year. The web server cannot tolerate interruption.

Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

Options:

A.  

On-Demand Instances

B.  

Partial Upfront Reserved Instances

C.  

Spot Instances

D.  

No Upfront Reserved Instances

Discussion 0
Questions 158

Which benefit of AWS Cloud computing provides lower latency between users and applications?

Options:

A.  

Agility

B.  

Economies of scale

C.  

Global reach

D.  

Pay-as-you-go pricing

Discussion 0
Questions 159

Which of the following are AWS Cloud design principles? (Select TWO.)

Options:

A.  

Pay for compute resources in advance.

B.  

Make data-driven decisions to determine cloud architectural design.

C.  

Emphasize manual processes to allow for changes.

D.  

Test systems at production scale.

E.  

Refine operational procedures infrequently.

Discussion 0
Questions 160

A company wants its Amazon EC2 instances to share the same geographic area but use redundant underlying power sources.

Which solution will meet these requirements?

Options:

A.  

Use EC2 instances across multiple Availability Zones in the same AWS Region.

B.  

Use Amazon CloudFront as the database for the EC2 instances.

C.  

Use EC2 instances in the same edge location and the same Availability Zone.

D.  

Use EC2 instances in AWS OpsWorks stacks in different AWS Regions.

Discussion 0
Questions 161

A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the least possible operational overhead.

Which AWS service or resource should the company use to meet these requirements?

Options:

A.  

AWS Snowmobile

B.  

AWS Snowball Edge

C.  

AWS Data Exchange

D.  

AWS Database Migration Service (AWS DMS)

Discussion 0
Questions 162

What is the recommended use case for Amazon EC2 On-Demand Instances?

Options:

A.  

A steady-state workload that requires a particular EC2 instance configuration for a long period of time

B.  

A workload that can be interrupted for a project that requires the lowest possible cost

C.  

An unpredictable workload that does not require a long-term commitment

D.  

A workload that is expected to run for longer than 1 year

Discussion 0
Questions 163

A company has multiple SQL-based databases located in a data center. The company needs to migrate all database servers to the AWS Cloud to reduce the cost of operating physical servers.

Which AWS service or resource will meet these requirements with the LEAST operational overhead?

Options:

A.  

Amazon EC2 instances

B.  

Amazon RDS

C.  

Amazon DynamoDB

D.  

OpenSearch

Discussion 0
Questions 164

Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?

Options:

A.  

Amazon DynamoDB

B.  

Amazon Aurora

C.  

Amazon DocumentDB (with MongoDB compatibility)

D.  

Amazon Neptune

Discussion 0
Questions 165

A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a

natural disaster in a particular geographic area.

Which solution achieves this goal?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use EC2 instances in multiple AWS Regions.

C.  

Use EC2 instances in multiple edge locations.

D.  

Use Amazon CloudFront with the EC2 instances configured as the source.

Discussion 0
Questions 166

Which AWS service can report how AWS resource configurations have changed over time?

Options:

A.  

AWS CloudTrail

B.  

Amazon CloudWatch

C.  

AWS Config

D.  

Amazon Inspector

Discussion 0
Questions 167

Which task is the responsibility of a company that is using Amazon RDS?

Options:

A.  

Provision the underlying infrastructure.

B.  

Create IAM policies to control administrative access to the service.

C.  

Install the cables to connect the hardware for compute and storage.

D.  

Install and patch the RDS operating system.

Discussion 0
Questions 168

A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.

Which AWS services can provide this information to the company? {Select TWO.)

Options:

A.  

AWS Auto Scaling

B.  

AWS Control Tower

C.  

AWS Trusted Advisor

D.  

AWS Compute Optimizer

E.  

Amazon Forecast

Discussion 0
Questions 169

A large company wants to track the combined AWS usage costs of all of its linked accounts.

How can this be accomplished?

Options:

A.  

Use AWS Trusted Advisor to generate customized summary reports.

B.  

Use AWS Organizations to generate consolidated billing reports.

C.  

Use AWS Budgets to set utilization targets and receive summary reports.

D.  

Use the AWS Control Tower dashboard to get a summary report of all linked account costs.

Discussion 0
Questions 170

A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive data.

Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?

Options:

A.  

Security groups

B.  

Amazon CloudWatch

C.  

AWS CloudTrail

D.  

ACLs

Discussion 0
Questions 171

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.

Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

Options:

A.  

AWS Shield

B.  

AWS Config

C.  

AWS IAM

D.  

Amazon Inspector

Discussion 0
Questions 172

Which perspective of the AWS Cloud Adoption Framework (AWS CAF) connects technology and business?

Options:

A.  

Operations

B.  

People

C.  

Security

D.  

Governance

Discussion 0
Questions 173

A company wants to host its relational databases on AWS. The databases have predefined schemas that the company needs to replicate on AWS.

Which AWS services could the company use for the databases? (Select TWO.)

Options:

A.  

Amazon Aurora

B.  

Amazon RDS

C.  

Amazon DocumentDB (with MongoDB compatibility)

D.  

Amazon Neptune

E.  

Amazon DynamoDB

Discussion 0
Questions 174

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do to meet this requirement?

Options:

A.  

Use AWS Key Management Service (AWS KMS).

B.  

Use multiple AWS accounts and consolidated billing.

C.  

Use AWS CloudFormation to deploy the infrastructure.

D.  

Rightsized all the EC2 instances that are used in the deployment.

Discussion 0
Questions 175

What is a benefit of moving to the AWS Cloud in terms of improving time to market?

Options:

A.  

Decreased deployment speed

B.  

Increased application security

C.  

Increased business agility

D.  

Increased backup capabilities

Discussion 0
Questions 176

A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting.

Which AWS service should the company use?

Options:

A.  

Amazon GuardDuty

B.  

AWS WAF

C.  

AWS Trusted Advisor

D.  

Amazon Inspector

Discussion 0
Questions 177

A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.

Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

Options:

A.  

Amazon S3 Select

B.  

Amazon Athena

C.  

Amazon Redshift

D.  

Amazon EC2

Discussion 0
Questions 178

A company has an online shopping website and wants to store customers ' credit card data. The company must meet Payment Card Industry (PCI) standards.

Which service can the company use to access AWS compliance documentation?

Options:

A.  

Amazon Cloud Directory

B.  

AWS Artifact

C.  

AWS Trusted Advisor

D.  

Amazon Inspector

Discussion 0
Questions 179

Which AWS features will meet these requirements? (Select TWO.)

Options:

A.  

Security groups

B.  

Network ACLs

C.  

S3 bucket policies

D.  

IAM user policies

E.  

S3 bucket versioning

Discussion 0
Questions 180

Which of the following is a characteristic of the AWS account root user?

Options:

A.  

The root user is the only user that can be configured with multi-factor authentication (MFA).

B.  

The root user is the only user that can access the AWS Management Console.

C.  

The root user is the first sign-in identity that is available when an AWS account is created.

D.  

The root user has a password that cannot be changed.

Discussion 0
Questions 181

A company wants to use a managed service to simplify the setup, operation, and scaling of its MySQL database in the AWS Cloud.

Which AWS service will meet these requirements?

Options:

A.  

Amazon EMR

B.  

Amazon RDS

C.  

Amazon Redshift

D.  

Amazon DynamoDB

Discussion 0
Questions 182

Which AWS service or feature can be used to estimate costs before deployment?

Options:

A.  

AWS Free Tier

B.  

AWS Pricing Calculator

C.  

AWS Billing and Cost Management

D.  

AWS Cost and Usage Report

Discussion 0
Questions 183

Which AWS service provides a single location to track the progress of application migrations?

Options:

A.  

AWS Application Discovery Service

B.  

AWS Application Migration Service

C.  

AWS Service Catalog

D.  

AWS Migration Hub

Discussion 0
Questions 184

Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

Options:

A.  

Amazon Aurora

B.  

Amazon DynamoDB

C.  

Amazon RDS

D.  

Amazon Redshift

Discussion 0
Questions 185

A company is migrating a relational database server to the AWS Cloud. The company wants to minimize

administrative overhead of database maintenance tasks.

Which AWS service will meet these requirements?

Options:

A.  

Amazon DynamoDB

B.  

Amazon EC2

C.  

Amazon Redshift

D.  

Amazon RDS

Discussion 0
Questions 186

Which AWS service can a company use to perform complex analytical queries?

Options:

A.  

Amazon RDS

B.  

Amazon DynamoDB

C.  

Amazon Redshift

D.  

Amazon ElastiCache

Discussion 0
Questions 187

A company has an application that uses AWS services. During scaling events, the company wants to keep

application usage within AWS service quotas.

Which AWS services or tools can report on the quotas so that the company can improve the reliability of the application? (Select TWO.)

Options:

A.  

Service Quotas console

B.  

AWS Trusted Advisor

C.  

AWS Systems Manager

D.  

AWS Shield

E.  

AWS Cost Explorer

Discussion 0
Questions 188

A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances. Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased.

The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances.

Which AWS service or tool should the company use to meet these requirements?

Options:

A.  

AWS Systems Manager

B.  

Cost Explorer

C.  

AWS Trusted Advisor

D.  

AWS Organizations

Discussion 0
Questions 189

Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

Options:

A.  

AWS Pricing Calculator

B.  

AWS Compute Optimizer

C.  

AWS App Runner

D.  

AWS Systems Manager

Discussion 0
Questions 190

Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

Options:

A.  

Amazon DynamoDB

B.  

AWS CodePipeline

C.  

AWS Batch

D.  

AWS Step Functions

Discussion 0
Questions 191

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.

Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility

model?

Options:

A.  

AWS

B.  

The company

C.  

AWS Marketplace partners

D.  

Third-party partners

Discussion 0
Questions 192

A company needs Amazon EC2 instances for a workload that can tolerate interruptions.

Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

Options:

A.  

Spot Instances

B.  

Convertible Reserved Instances

C.  

Standard Reserved Instances

D.  

Dedicated Hosts

Discussion 0
Questions 193

Which task is a customer ' s responsibility, according to the AWS shared responsibility model?

Options:

A.  

Management of the guest operating systems

B.  

Maintenance of the configuration of infrastructure devices

C.  

Management of the host operating systems and virtualization

D.  

Maintenance of the software that powers Availability ZonesA company has refined its workload to use specific AWS services to improve efficiency and reduce cost.

Discussion 0
Questions 194

Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?

Options:

A.  

Customer

B.  

AWS

C.  

Account creator

D.  

Auditing team

Discussion 0
Questions 195

A company wants to centrally manage security policies and billing services within a multi-account AWS environment. Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

AWS Organizations

C.  

AWS Resource Access Manager (AWS RAM)

D.  

AWS Config

Discussion 0
Questions 196

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.

Where can the company purchase the security solution?

Options:

A.  

AWS Partner Solutions Finder

B.  

AWS Support Center

C.  

AWS Management Console

D.  

AWS Marketplace

Discussion 0
Questions 197

Which statements represent the cost-effectiveness of the AWS Cloud? (Select TWO.)

Options:

A.  

Users can trade fixed expenses for variable expenses.

B.  

Users can deploy all over the world in minutes.

C.  

AWS offers increased speed and agility.

D.  

AWS is responsible for patching the infrastructure.

E.  

Users benefit from economies of scale.

Discussion 0
Questions 198

A company wants its workload to perform consistently and correctly.

Which benefit of AWS Cloud computing does this goal represent?

Options:

A.  

Security

B.  

Elasticity

C.  

Pay-as-you-go pricing

D.  

Reliability

Discussion 0
Questions 199

A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.

Which AWS service or resource will meet these requirements with the LEAST management overhead?

Options:

A.  

PostgreSQL on Amazon EC2

B.  

Amazon RDS for PostgreSQL

C.  

Amazon Aurora PostgreSQL-Compatible Edition

D.  

Amazon Aurora Serverless

Discussion 0
Questions 200

A systems administrator created a new 1AM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?

Options:

A.  

To access the AWS account as the AWS account root user

B.  

To access the AWS account through the AWS Management Console

C.  

To access the AWS account through a CLI

D.  

To access all of a company ' s AWS accounts

Discussion 0
Questions 201

A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application.

To which AWS service could the company migrate the database?

Options:

A.  

Amazon Athena

B.  

Amazon DynamoDB®C. Amazon RDS

C.  

Amazon DocumentDB (with MongoDB compatibility)

Discussion 0
Questions 202

A company needs to use standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake.

Which AWS service meets these requirements?

Options:

A.  

Amazon DynamoDB

B.  

Amazon Aurora

C.  

Amazon Athena

D.  

Amazon Redshift

Discussion 0
Questions 203

Which AWS compute service gives users the ability to securely and reliably run containers at scale?

Options:

A.  

Amazon Elastic Container Service (Amazon ECS)

B.  

Amazon Aurora

C.  

Amazon Athena

D.  

Amazon Polly

Discussion 0
Questions 204

Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?

Options:

A.  

VPC Flow Logs

B.  

Amazon Inspector

C.  

VPC route tables

D.  

AWS CloudTrail

Discussion 0
Questions 205

Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries?

Options:

A.  

Pay-as-you-go pricing

B.  

Capacity forecasting

C.  

Economies of scale

D.  

Global reach

Discussion 0
Questions 206

Which AWS Support plan provides the full set to AWS Trusted Advisor checks at the LOWEST cost?

Options:

A.  

AWS Developer Support

B.  

AWS Business Support

C.  

AWS Enterprise On-Ramp Support

D.  

AWS Enterprise Support

Discussion 0
Questions 207

An ecommerce company has deployed a new web application on Amazon EC2 Instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.

Which AWS service or resource will meet this requirement?

Options:

A.  

Amazon EC2 Auto Scaling

B.  

Application Load Balancer

C.  

Gateway Load Balancer

D.  

Network Load Balancer

Discussion 0
Questions 208

A company runs an uninterruptible Amazon EC2 workload on AWS 24 hours a day. 7 days a week. The company will require the same instance family and instance type to run the workload for the next 12 months.

Which combination of purchasing options should the company choose to MOST optimize costs? (Select TWO.)

Options:

A.  

Standard Reserved Instance

B.  

Convertible Reserved Instance

C.  

Compute Savings Plan

D.  

Spot Instance

E.  

All Upfront payment

Discussion 0
Questions 209

A company ' s application is running on Amazon EC2 instances. The company is planning a partial migration to a serverless architecture in the next year and wants to pay for resources up front.

Which AWS purchasing option will optimize the company ' s costs?

Options:

A.  

Convertible Reserved Instances

B.  

Spot Instances

C.  

EC2 Instance Savings Plans

D.  

Compute Savings Plan

Discussion 0
Questions 210

Which service is an AWS in-memory data store service?

Options:

A.  

Amazon Aurora

B.  

Amazon RDS

C.  

Amazon DynamoDB

D.  

Amazon ElastiCache

Discussion 0
Questions 211

Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

Options:

A.  

AWS Budgets

B.  

AWS Cost Explorer

C.  

AWS Cost Allocation Tags

D.  

AWS Organizations

Discussion 0
Questions 212

A company migrated its systems to the AWS Cloud. The systems are rightsized, and a security review did not reveal any issues. The company must ensure that additional developments, integrations, changes, and system usage growth do not jeopardize this optimized AWS infrastructure.

Which AWS service should the company use to report ongoing optimization and security?

Options:

A.  

AWS Trusted Advisor

B.  

AWS Health Dashboard

C.  

Amazon Connect

D.  

AWS Systems Manager

Discussion 0
Questions 213

A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management. Which AWS service will meet these requirements?

Options:

A.  

Amazon DocumentDB (with MongoDB compatibility)

B.  

Amazon Redshift

C.  

Amazon Neptune

D.  

Amazon ElastiCache

Discussion 0
Questions 214

Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

Options:

A.  

Users can implement all AWS services in seconds.

B.  

AWS assumes all responsibility for the security of infrastructure and applications.

C.  

Users experience increased speed and agility.

D.  

Users benefit from massive economies of scale.

E.  

Users can move hardware from their data center to the AWS Cloud.

Discussion 0
Questions 215

A company uses AWS Organizations. The company wants to apply security best practices from the AWS Well-Architected Framework to all of its AWS accounts.

Which AWS service will meet these requirements?

Options:

A.  

Amazon Macie

B.  

Amazon Detective

C.  

AWS Control Tower

D.  

AWS Secrets Manager

Discussion 0
Questions 216

A company wants an in-memory data store that is compatible with open source in the cloud.

Which AWS service should the company use?

Options:

A.  

Amazon DynamoDB

B.  

Amazon ElastiCache

C.  

Amazon Elastic Block Store (Amazon EBS)

D.  

Amazon Redshift

Discussion 0
Questions 217

A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting. Which AWS service will meet these requirements?

Options:

A.  

Amazon Inspector

B.  

AWS WAF

C.  

Amazon GuardDuty

D.  

Amazon CloudWatch

Discussion 0
Questions 218

Which benefits can customers gain by using AWS Marketplace? (Select TWO.)

Options:

A.  

Speed of business

B.  

Fewer legal objections

C.  

Ability to pay with credit cards

D.  

No requirement for product licenses for any products

E.  

Free use of all services for the first hour

Discussion 0
Questions 219

Which AWS Cloud deployment model uses AWS Outposts as part of the application deployment infrastructure?

Options:

A.  

On-premises

B.  

Serverless

C.  

Cloud-native

D.  

Hybrid

Discussion 0
Questions 220

A company wants to discover, prepare, move, and integrate data from multiple sources for data analytics and machine learning.

Which AWS serverless data integration service should the company use to meet these requirements?

Options:

A.  

AWS Glue

B.  

AWS Data Exchange

C.  

Amazon Athena

D.  

Amazon EMR

Discussion 0
Questions 221

A company wants to add a conversational chatbot to its website.

Which AWS service can the company use to meet this requirement?

Options:

A.  

Amazon Textract

B.  

Amazon Lex

C.  

AWS Glue

D.  

Amazon Rekognition

Discussion 0
Questions 222

Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

Options:

A.  

restricted access.

B.  

as-needed access.

C.  

least privilege access.

D.  

token access.

Discussion 0
Questions 223

Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?

Options:

A.  

S3 Standard

B.  

S3 Standard-Infrequent Access (S3 Standard-IA)

C.  

S3 One Zone-Infrequent Access (S3 One Zone-IA)

D.  

S3 Intelligent-Tiering

Discussion 0
Questions 224

A company wants to implement detailed tracking of its cloud costs by department and project.

Which AWS feature or service should the company use?

Options:

A.  

Consolidated billing

B.  

Cost allocation tags

C.  

AWS Marketplace

D.  

AWS Budgets

Discussion 0
Questions 225

A company is using multiple AWS accounts for different business teams. The finance team wants to receive one bill for all of the company ' s accounts.

Which AWS service or tool should the finance team use to meet this requirement?

Options:

A.  

AWS Organizations

B.  

AWS Trusted Advisor

C.  

Cost Explorer

D.  

AWS Budgets

Discussion 0
Questions 226

A company ' s application has high customer usage during certain times of the day. The company wants to reduce the number of Amazon EC2 instances that run when application usage is low.

Which AWS service or instance purchasing option should the company use to meet this requirement?

Options:

A.  

EC2 Instance Savings Plans

B.  

Spot Instances

C.  

Reserved Instances

D.  

Amazon EC2 Auto Scaling

Discussion 0
Questions 227

An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.

Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?

Options:

A.  

Amazon Simple Queue Service (Amazon SQS)

B.  

Amazon Simple Notification Service (Amazon SNS)

C.  

AWS Systems Manager

D.  

Amazon CloudWatch alarm

Discussion 0
Questions 228

A company has deployed an Amazon EC2 instance.

Which option is an AWS responsibility under the AWS shared responsibility model?

Options:

A.  

Managing and encrypting application data

B.  

Installing updates and security patches of guest operating system

C.  

Configuration of infrastructure devices

D.  

Configuration of security groups on each instance

Discussion 0
Questions 229

A company wants to establish a private network connection between AWS and its corporate network.

Which AWS service or feature will meet this requirement?

Options:

A.  

Amazon Connect

B.  

Amazon Route 53

C.  

AWS Direct Connect

D.  

VPC peering

Discussion 0
Questions 230

Which AWS services make use of global edge locations ' ? (Select TWO.)

Options:

A.  

AWS Fargate

B.  

Amazon CloudFront

C.  

AWS Global Accelerator

D.  

AWS Wavelength

E.  

Amazon VPC

Discussion 0
Questions 231

Which service enables customers to audit API calls in their AWS accounts ' ?

Options:

A.  

AWS CloudTrail

B.  

AWS Trusted Advisor

C.  

Amazon Inspector

D.  

AWS X-Ray

Discussion 0
Questions 232

A user has been granted permission to change their own IAM user password.

Which AWS services can the user use to change the password? (Select TWO.)

Options:

A.  

AWS Command Line Interface (AWS CLI)

B.  

AWS Key Management Service (AWS KMS)

C.  

AWS Management Console

D.  

AWS Resource Access Manager (AWS RAM)

E.  

AWS Secrets Manager

Discussion 0
Questions 233

Which benefit is always free of charge with AWS, regardless of a user ' s AWS Support plan?

Options:

A.  

AWS Developer Support

B.  

AWS Developer Forums

C.  

Programmatic case management

D.  

AWS technical account manager (TAM)

Discussion 0
Questions 234

Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?

Options:

A.  

Physical security of DynamoDB

B.  

Patching of DynamoDB

C.  

Access to DynamoDB tables

D.  

Encryption of data at rest in DynamoDB

Discussion 0
Questions 235

Which AWS service or feature gives users the ability to connect VPCs and on-premises networks to a central hub?

Options:

A.  

Virtual private gateway

B.  

AWS Transit Gateway

C.  

Internet gateway

D.  

Customer gateway

Discussion 0
Questions 236

A company wants to quickly implement a continuous integration/continuous delivery (CI/CD) pipeline.

Which AWS service will meet this requirement?

Options:

A.  

AWS Config

B.  

Amazon Cognito

C.  

AWS DataSync

D.  

AWS CodeStar

Discussion 0
Questions 237

A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations.

Which AWS service will meet these requirements ' ?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

Amazon CloudWatch

C.  

Amazon Macie

D.  

Amazon GuardDuty

Discussion 0
Questions 238

A company wants to manage its cloud resources by using infrastructure as code (laC) template…..

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Artifact

B.  

AWS Resource Explorer

C.  

AWS License Manager

D.  

AWS Service Catalog

Discussion 0
Questions 239

Which AWS service or feature provides a firewall at the subnet level within a VPC?

Options:

A.  

Security group

B.  

Network ACL

C.  

Elastic network interface

D.  

AWS WAF

Discussion 0
Questions 240

A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Lambda

B.  

Amazon Cognito

C.  

Amazon Athena

D.  

Amazon EC2

Discussion 0
Questions 241

A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS. Which pricing model will meet these requirements?

Options:

A.  

Use Savings Plans for a 3-year term.

B.  

Use Dedicated Hosts.

C.  

Buy Reserved Instances.

D.  

Use On-Demand Instances.

Discussion 0
Questions 242

A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Config

B.  

Amazon Rekognition

C.  

AWS CloudTrail

D.  

Amazon Simple Notification Service (Amazon SNS)

Discussion 0
Questions 243

A company wants to migrate its on-premises infrastructure to the AWS Cloud.

Which advantage of cloud computing will help the company reduce upfront costs?

Options:

A.  

Go global in minutes

B.  

Increase speed and agility

C.  

Benefit from massive economies of scale

D.  

Trade fixed expense for variable expense

Discussion 0
Questions 244

According to the AWS shared responsibility model, who is responsible for the virtualization layer down to the

physical security of the facilities in which AWS services operate?

Options:

A.  

It is the sole responsibility of the customer.

B.  

It is the sole responsibility of AWS.

C.  

It is a shared responsibility between AWS and the customer.

D.  

The customer ' s AWS Support plan tier determines who manages the configuration.

Discussion 0
Questions 245

Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO)

Options:

A.  

High availability

B.  

Performance efficiency

C.  

Cost optimization

D.  

Going global in minutes

E.  

Continuous development

Discussion 0
Questions 246

A company needs a managed NFS file system that the company can use with its AWS compute....

Which AWS service or feature will meet these requirements?

Options:

A.  

Amazon Elastic Block Store (Amazon EBS)

B.  

AWS Storage Gateway Tape Gateway

C.  

Amazon S3 Glacier Flexible Retrieval

D.  

Amazon Elastic Pile System (Amazon EFS)

Discussion 0
Questions 247

A company wants to run its application on Amazon EC2 instances. The company needs to keep the application on-premises to meet a compliance requirement. Which AWS offering will meet these requirements?

Options:

A.  

Dedicated Instances

B.  

Amazon CloudFront

C.  

AWS Fargate

D.  

AWS Outposts

Discussion 0
Questions 248

What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

Options:

A.  

AWS Certificate Manager

B.  

AWS Systems Manager

C.  

AWS Artifact

D.  

Amazon Inspector

Discussion 0
Questions 249

Which AWS service is designed to help users build conversational interfaces into applications using voice and text?

Options:

A.  

Amazon Lex

B.  

Amazon Transcribe

C.  

Amazon Comprehend

D.  

Amazon Timestream

Discussion 0
Questions 250

Which AWS service is an in-memory data store service?

Options:

A.  

Amazon Aurora

B.  

Amazon RDS

C.  

Amazon DynamoDB

D.  

Amazon ElastiCache

Discussion 0
Questions 251

A company wants its Amazon EC2 instances to share the same geographic area but use multiple independent underlying power sources.

Which solution achieves this goal?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use EC2 instances in multiple AWS Regions.

C.  

Use EC2 instances in multiple Availability Zones in the same AWS Region.

D.  

Use EC2 instances in the same edge location and the same AWS Region.

Discussion 0
Questions 252

A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS.

Which AWS service should the company use?

Options:

A.  

Amazon GuardDuty

B.  

Amazon Inspector

C.  

AWS Shield Advanced

D.  

Amazon Macie

Discussion 0
Questions 253

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.

What is the MOST operationally efficient AWS solution for this scenario?

Options:

A.  

Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.

B.  

Configure and deploy an AWS Storage Gateway file gateway. Connect each user ' s workstation to the file gateway.

C.  

Move each user ' s working environment to Amazon Workspaces. Set up an Amazon WorkDocs account for each user.

D.  

Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.

Discussion 0
Questions 254

Which of the following is a benefit of using an AWS managed service?

Options:

A.  

Reduced operational overhead for a company ' s IT staff

B.  

Increased fixed costs that can be predicted by a finance team

C.  

Removal of the need to have a backup strategy

D.  

Removal of the need to follow compliance standards

Discussion 0
Questions 255

A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS loT Greengrass

B.  

AWS Lambda

C.  

AWS Outposts

D.  

AWS Snowball Edge

Discussion 0
Questions 256

A company wants to establish a schedule for rotating database user credentials.

Which AWS service will support this requirement with the LEAST amount of operational overhead?

Options:

A.  

AWS Systems Manager

B.  

AWS Secrets Manager

C.  

AWS License Manager

D.  

AWS Managed Services

Discussion 0
Questions 257

A company runs an application on AWS that performs batch jobs. The application is fault-tolerant and can handle interruptions. The company wants to optimize the cost to run the application.

Which AWS offering will meet these requirements?

Options:

A.  

Amazon Macie

B.  

Amazon Neptune

C.  

Amazon EC2 Spot Instances

D.  

Amazon EC2 On-Demand Instances

Discussion 0
Questions 258

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

Options:

A.  

AWS Security Hub

B.  

AWS Trusted Advisor

C.  

Amazon EventBndge

D.  

Amazon GuardDuty

Discussion 0
Questions 259

An administrator observed that multiple AWS resources were deleted yesterday.

Which AWS service will help identify the cause and determine which user deleted the resources?

Options:

A.  

AWS CtoudTrail

B.  

Amazon Inspector

C.  

Amazon GuardDuty

D.  

AWS Trusted Advisor

Discussion 0
Questions 260

A company has deployed a web application to Amazon EC2 instances. The EC2 instances have low usage. Which AWS service or feature should lite company use in rightsized the FC? instances?

Options:

A.  

AWS Config

B.  

AWS Cost Anomaly Detection

C.  

AWS Budgets

D.  

AWS Compute Optimizer

Discussion 0
Questions 261

Which AWS services or features give users the ability to create a network connection between two VPCs? (Select TWO.)

Options:

A.  

VPC endpoints

B.  

Amazon Route 53

C.  

VPC peering

D.  

AWS Direct Connect

E.  

AWS Transit Gateway

Discussion 0
Questions 262

Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

Options:

A.  

Route table

B.  

AWS Transit Gateway

C.  

AWS Global Accelerator

D.  

Amazon VPC

Discussion 0
Questions 263

What is the MOST secure way to store passwords on AWS?

Options:

A.  

Store passwords in an Amazon S3 bucket.

B.  

Store passwords as AWS CloudFormation parameters

C.  

Store passwords in AWS Storage Gateway.

D.  

Store passwords in AWS Secrets Manager.

Discussion 0
Questions 264

Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?

Options:

A.  

Go global in minutes

B.  

Make frequent, small, reversible changes

C.  

Implement a strong foundation of identity and access management

D.  

Stop spending money on hardware infrastructure for data center operations

Discussion 0
Questions 265

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

Options:

A.  

Database backups

B.  

Database software patches

C.  

Operating system patches

D.  

Operating system installations

Discussion 0
Questions 266

A company is planning to migrate to the AWS Cloud. The company is conducting organizational transformation and wants to become more responsive to customer inquiries and feedback.

Which tasks should the company perform to meet these requirements, according to the AWS Cloud Adoption

Framework (AWS CAF)? (Select TWO.)

Options:

A.  

Realign teams to focus on products and value streams.

B.  

Create new value propositions with new products and services.

C.  

Use agile methods to rapidly iterate and evolve.

D.  

Use a new data and analytics platform to create actionable insights.

E.  

Migrate and modernize legacy infrastructure.

Discussion 0
Questions 267

A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached.

Which AWS service meets these requirements?

Options:

A.  

AWS Storage Gateway

B.  

AWS Snowcone

C.  

AWS Backup

D.  

Amazon Elastic File System (Amazon EFS)

Discussion 0
Questions 268

Which AWS feature provides a no-cost platform for AWS users to join community groups, ask questions, find answers, and read community-generated articles about best practices?

Options:

A.  

AWS Knowledge Center

B.  

AWS re:Post

C.  

AWS 10

D.  

AWS Enterprise Support

Discussion 0
Questions 269

Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Select TWO.)

Options:

A.  

Observability

B.  

Incident and problem management

C.  

Incident response

D.  

Infrastructure protection

E.  

Availability and continuity

Discussion 0
Questions 270

Which option is a benefit of the economies of scale based on the advantages of cloud computing?

Options:

A.  

The ability to trade variable expense for fixed expense

B.  

Increased speed and agility

C.  

Lower variable costs over fixed costs

D.  

Increased operational costs across data centers

Discussion 0
Questions 271

In which situations should a company create an 1AM user instead of an 1AM role? (Select TWO.)

Options:

A.  

When an application that runs on Amazon EC2 instances requires access to other AWS services

B.  

When the company creates AWS access credentials for individuals

C.  

When the company creates an application that runs on a mobile phone that makes requests to AWS

D.  

When the company needs to add users to 1AM groups

E.  

When users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time

Discussion 0
Questions 272

A company stores data in an Amazon S3 bucket.

Which task is the responsibility of AWS?

Options:

A.  

Configure an S3 Lifecycle policy.

B.  

Activate S3 Versioning.

C.  

Configure S3 bucket policies.

D.  

Protect the infrastructure that supports S3 storage.

Discussion 0
Questions 273

A company is using AWS for all its IT Infrastructure. The company ' s developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves.

Which AWS service should the developers use to meet these requirements?

Options:

A.  

AWS Cloud Formation

B.  

AWS CodeBuild

C.  

AWS Elastic Beanstalk

D.  

AWS CodeDeploy

Discussion 0
Questions 274

A company is planning to migrate applications to the AWS Cloud. During a system audit, the company finds that its content management system (CMS) application is incompatible with cloud environments.

Which migration strategies will help the company to migrate the CMS application with the LEAST effort? (Select TWO.)

Options:

A.  

Retire

B.  

Rehost

C.  

Repurchase

D.  

Replatform

E.  

Refactor

Discussion 0
Questions 275

Which AWS service or feature requires an Internet service provider (ISP) and a colocation facility to be Implemented?

Options:

A.  

AWS VPN

B.  

Amazon Conned

C.  

AWS Direct Connect

D.  

Internet gateway

Discussion 0
Questions 276

Which AWS service or feature allows a user to establish a dedicated network connection between a company ' s on-premises data center and the AWS Cloud?

Options:

A.  

AWS Direct Connect

B.  

VPC peering

C.  

AWS VPN

D.  

Amazon Route 53

Discussion 0