Big 11.11 Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

AWS Certified Cloud Practitioner Question and Answers

AWS Certified Cloud Practitioner

Last Update Nov 8, 2025
Total Questions : 877

We are offering FREE CLF-C02 Amazon Web Services exam questions. All you do is to just go and sign up. Give your details, prepare CLF-C02 free exam questions and then go for complete pool of AWS Certified Cloud Practitioner test questions that will help you more.

CLF-C02 pdf

CLF-C02 PDF

$36.75  $104.99
CLF-C02 Engine

CLF-C02 Testing Engine

$43.75  $124.99
CLF-C02 PDF + Engine

CLF-C02 PDF + Testing Engine

$57.75  $164.99
Questions 1

Which of the following is a fully managed graph database service on AWS?

Options:

A.  

Amazon Aurora

B.  

Amazon FSx

C.  

Amazon DynamoDB

D.  

Amazon Neptune

Discussion 0
Questions 2

Which AWS service can be used at no additional cost?

Options:

A.  

Amazon SageMaker

B.  

AWS Config

C.  

AWS Organizations

D.  

Amazon CloudWatch

Discussion 0
Questions 3

A systems administrator created a new 1AM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?

Options:

A.  

To access the AWS account as the AWS account root user

B.  

To access the AWS account through the AWS Management Console

C.  

To access the AWS account through a CLI

D.  

To access all of a company's AWS accounts

Discussion 0
Questions 4

A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.

Which AWS services can provide this information to the company? {Select TWO.)

Options:

A.  

AWS Auto Scaling

B.  

AWS Control Tower

C.  

AWS Trusted Advisor

D.  

AWS Compute Optimizer

E.  

Amazon Forecast

Discussion 0
Questions 5

Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Physical and environmental controls

B.  

Patch management

C.  

Configuration management

D.  

Account structures

E.  

Choice of the AWS Region where data is stored

Discussion 0
Questions 6

Which AWS service or feature requires an Internet service provider (ISP) and a colocation facility to be Implemented?

Options:

A.  

AWS VPN

B.  

Amazon Conned

C.  

AWS Direct Connect

D.  

Internet gateway

Discussion 0
Questions 7

How can an AWS user conduct security assessments of Amazon EC2 instances, NAT gateways, and Elastic

Load Balancers in a way that is approved by AWS?

Options:

A.  

Flood a target with requests.

B.  

Use Amazon Inspector.

C.  

Perform penetration testing.

D.  

Use the AWS Service Health Dashboard.

Discussion 0
Questions 8

Which tasks are the responsibility of the customer, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Patch the Amazon RDS operating system.

B.  

Upgrade the firmware of the network infrastructure.

C.  

Manage data encryption.

D.  

Maintain physical access control in an AWS Region.

E.  

Grant least privilege access to IAM users.

Discussion 0
Questions 9

Which AWS service or feature enables users to encrypt data at rest in Amazon S3?

Options:

A.  

IAM policies

B.  

Server-side encryption

C.  

Amazon GuardDuty

D.  

Client-side encryption

Discussion 0
Questions 10

A company wants to receive a notification when a specific AWS cost threshold is reached.

Which AWS services or tools can the company use to meet this requirement? (Select TWO.)

Options:

A.  

Amazon Simple Queue Service (Amazon SQS)

B.  

AWS Budgets

C.  

Cost Explorer

D.  

Amazon CloudWatch

E.  

AWS Cost and Usage Report

Discussion 0
Questions 11

A company wants to migrate its on-premises infrastructure to the AWS Cloud.

Which advantage of cloud computing will help the company reduce upfront costs?

Options:

A.  

Go global in minutes

B.  

Increase speed and agility

C.  

Benefit from massive economies of scale

D.  

Trade fixed expense for variable expense

Discussion 0
Questions 12

Which AWS service or feature provides a firewall at the subnet level within a VPC?

Options:

A.  

Security group

B.  

Network ACL

C.  

Elastic network interface

D.  

AWS WAF

Discussion 0
Questions 13

Which AWS service is used to temporarily provide federated security credentials to a

Options:

A.  

Amazon GuardDuty

B.  

AWS Simple Token Service (AWS STS)

C.  

AWS Secrets Manager

D.  

AWS Certificate Manager

Discussion 0
Questions 14

A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform.

Which AWS service will meet these requirements?

Options:

A.  

Amazon EC2

B.  

Amazon VPC

C.  

Amazon Route 53

D.  

Amazon RDS

Discussion 0
Questions 15

A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached.

Which AWS service meets these requirements?

Options:

A.  

AWS Storage Gateway

B.  

AWS Snowcone

C.  

AWS Backup

D.  

Amazon Elastic File System (Amazon EFS)

Discussion 0
Questions 16

Which of the following is an advantage that the AWS Cloud provides to users?

Options:

A.  

Users eliminate the need to guess about infrastructure capacity requirements.

B.  

Users decrease their variable costs by maintaining sole ownership of IT hardware.

C.  

Users maintain control of underlying IT infrastructure hardware.

D.  

Users maintain control of operating systems for managed services.

Discussion 0
Questions 17

Which of the following is a characteristic of the AWS account root user?

Options:

A.  

The root user is the only user that can be configured with multi-factor authentication (MFA).

B.  

The root user is the only user that can access the AWS Management Console.

C.  

The root user is the first sign-in identity that is available when an AWS account is created.

D.  

The root user has a password that cannot be changed.

Discussion 0
Questions 18

Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

Options:

A.  

Elasticity

B.  

Cost savings

C.  

Agility

D.  

Reliability

Discussion 0
Questions 19

Which AWS service requires the customer to patch the guest operating system?

Options:

A.  

AWS Lambda

B.  

Amazon OpenSearch Service

C.  

Amazon EC2

D.  

Amazon ElastiCache

Discussion 0
Questions 20

A company wants to manage its AWS Cloud resources through a web interface.

Which AWS service will meet this requirement?

Options:

A.  

AWS Management Console

B.  

AWS CLI

C.  

AWS SDK

D.  

AWS Cloud

Discussion 0
Questions 21

A company wants to generate a list of IAM users. The company also wants to view the status of various credentials that are associated with the users, such as password, access keys: and multi-factor authentication (MFA) devices

Which AWS service or feature will meet these requirements?

Options:

A.  

IAM credential report

B.  

AWS IAM Identity Center (AWS Single Sign-On)

C.  

AWS Identity and Access Management Access Analyzer

D.  

AWS Cost and Usage Report

Discussion 0
Questions 22

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do to meet this requirement?

Options:

A.  

Use AWS Key Management Service (AWS KMS).

B.  

Use multiple AWS accounts and consolidated billing.

C.  

Use AWS CloudFormation to deploy the infrastructure.

D.  

Rightsized all the EC2 instances that are used in the deployment.

Discussion 0
Questions 23

A company wants to implement detailed tracking of its cloud costs by department and project.

Which AWS feature or service should the company use?

Options:

A.  

Consolidated billing

B.  

Cost allocation tags

C.  

AWS Marketplace

D.  

AWS Budgets

Discussion 0
Questions 24

Which option is an environment that consists of one or more data centers?

Options:

A.  

Amazon CloudFront

B.  

Availability Zone

C.  

VPC

D.  

AWS Outposts

Discussion 0
Questions 25

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

Options:

A.  

AWS Security Hub

B.  

AWS Trusted Advisor

C.  

Amazon EventBndge

D.  

Amazon GuardDuty

Discussion 0
Questions 26

Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?

Options:

A.  

Enable S3 Cross-Region Replication (CRR) on the S3 bucket.

B.  

Use IAM roles for applications that require access to the S3 bucket.

C.  

Configure AWS WAF to prevent unauthorized access to the S3 bucket.

D.  

Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.

Discussion 0
Questions 27

A company needs stateless network filtering for its VPC.

Which AWS service, tool, or feature will meet this requirement?

Options:

A.  

AWS PrivateLink

B.  

Security group

C.  

Network access control list (ACL)

D.  

AWS WAF

Discussion 0
Questions 28

Which AWS Support plans provide access to an AWS technical account manager (TAM)? (Select)

Options:

A.  

AWS Basic Support

B.  

AWS Developer Support

C.  

AWS Business Support

D.  

AWS Enterprise On-Ramp Support

E.  

AWS Enterprise Support

Discussion 0
Questions 29

A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.

Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

Options:

A.  

VPC endpoints

B.  

AWS Transit Gateway

C.  

Amazon Route 53

D.  

AWS Secrets Manager

Discussion 0
Questions 30

Elasticity in the AWS Cloud refers to which of the following? (Select TWO.)

Options:

A.  

How quickly an Amazon EC2 instance can be restarted

B.  

The ability to rightsized resources as demand shifts

C.  

The maximum amount of RAM an Amazon EC2 instance can use

D.  

The pay-as-you-go billing model

E.  

How easily resources can be procured when they are needed

Discussion 0
Questions 31

Which tool should a developer use lo integrate AWS service features directly into an application?

Options:

A.  

AWS Software Development Kit

B.  

AWS CodeDeploy

C.  

AWS Lambda

D.  

AWS Batch

Discussion 0
Questions 32

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.

Where can the company purchase the security solution?

Options:

A.  

AWS Partner Solutions Finder

B.  

AWS Support Center

C.  

AWS Management Console

D.  

AWS Marketplace

Discussion 0
Questions 33

A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically.

Which service or feature will meet these requirements?

Options:

A.  

Amazon DynamoDB

B.  

Amazon EC2 Spot Instances

C.  

AWS Snow Family

D.  

Amazon EC2 Auto Scaling

Discussion 0
Questions 34

A user has been granted permission to change their own IAM user password.

Which AWS services can the user use to change the password? (Select TWO.)

Options:

A.  

AWS Command Line Interface (AWS CLI)

B.  

AWS Key Management Service (AWS KMS)

C.  

AWS Management Console

D.  

AWS Resource Access Manager (AWS RAM)

E.  

AWS Secrets Manager

Discussion 0
Questions 35

A company runs an uninterruptible Amazon EC2 workload on AWS 24 hours a day. 7 days a week. The company will require the same instance family and instance type to run the workload for the next 12 months.

Which combination of purchasing options should the company choose to MOST optimize costs? (Select TWO.)

Options:

A.  

Standard Reserved Instance

B.  

Convertible Reserved Instance

C.  

Compute Savings Plan

D.  

Spot Instance

E.  

All Upfront payment

Discussion 0
Questions 36

A company needs a bridge between technology and business to help evolve to a culture of continuous growth and learning.

Which perspective in the AWS Cloud Adoption Framework (AWS CAF) serves as this bridge?

Options:

A.  

People

B.  

Governance

C.  

Operations

D.  

Security

Discussion 0
Questions 37

Which of the following can be components of a VPC in the AWS Cloud? (Select TWO.)

Options:

A.  

Amazon API Gateway

B.  

Amazon S3 buckets and objects

C.  

AWS Storage Gateway

D.  

Internet gateway

E.  

Subnet

Discussion 0
Questions 38

Which AWS service or resource provides answers to the most frequently askedsecurity-related questions that AWS receives from its users'?

Options:

A.  

AWS Artifact

B.  

Amazon Connect

C.  

AWS Chatbot

D.  

AWS Knowledge Center

Discussion 0
Questions 39

A company wants to move its on-premises databases to managed cloud database services by using a simplified migration process. Which AWS service or tool can help the company meet this requirement?

Options:

A.  

AWS Storage Gateway

B.  

AWS Application Migration Service

C.  

AWS DataSync

D.  

AWS Database Migration Service (AWS DMS)

Discussion 0
Questions 40

Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Spot Instances

D.  

Dedicated Instances

Discussion 0
Questions 41

A development team wants to deploy multiple test environments for an application in a fast repeatable manner.

Which AWS service should the team use?

Options:

A.  

Amazon EC2

B.  

AWS CloudFormation

C.  

Amazon QuickSight

D.  

Amazon Elastic Container Service (Amazon ECS)

Discussion 0
Questions 42

A company needs to block SQL injection attacks.

Which AWS service or feature can meet this requirement?

Options:

A.  

AWS WAF

B.  

AWS Shield

C.  

Network ACLs

D.  

Security groups

Discussion 0
Questions 43

Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Select TWO.)

Options:

A.  

AWS Trusted Advisor

B.  

AWS Online Tech Talks

C.  

AWS Blog

D.  

AWS Forums

E.  

AWS Classroom Training

Discussion 0
Questions 44

A company wants to migrate critical on-premises production systems to Amazon EC2 instances. The production instances will be used for at least 3 years. The company wants a pricing option that will minimize cost.

Which solution will meet these requirements?

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Spot Instances

D.  

AWS Free Tier

Discussion 0
Questions 45

Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?

Options:

A.  

Amazon Macie

B.  

Amazon Detective

C.  

Amazon GuardDuty

D.  

AWS I AM Access Analyzer

Discussion 0
Questions 46

A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be interrupted.

Which EC2 instance type will meet these requirements?

Options:

A.  

Spot Instances

B.  

On-Demand Instances

C.  

Reserved Instances

D.  

Dedicated Instances

Discussion 0
Questions 47

Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?

Options:

A.  

VPC Flow Logs

B.  

Amazon Inspector

C.  

VPC route tables

D.  

AWS CloudTrail

Discussion 0
Questions 48

A company has multiple SQL-based databases located in a data center. The company needs to migrate all database servers to the AWS Cloud to reduce the cost of operating physical servers.

Which AWS service or resource will meet these requirements with the LEAST operational overhead?

Options:

A.  

Amazon EC2 instances

B.  

Amazon RDS

C.  

Amazon DynamoDB

D.  

OpenSearch

Discussion 0
Questions 49

Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)?

Options:

A.  

AWS Basic Support

B.  

AWS Developer Support

C.  

AWS Business Support

D.  

AWS Enterprise Support

Discussion 0
Questions 50

Which AWS Well-Architected Framework pillar focuses on structured and streamlined allocation of computing resources?

Options:

A.  

Reliability

B.  

Operational excellence

C.  

Performance efficiency

D.  

Sustainability

Discussion 0
Questions 51

A company wants durable storage for static content and infinitely scalable data storage infrastructure at the lowest cost.

Which AWS service should the company choose?

Options:

A.  

Amazon Elastic Block Store (Amazon EBS)

B.  

Amazon S3

C.  

AWS Storage Gateway

D.  

Amazon Elastic File System (Amazon EFS)

Discussion 0
Questions 52

A company's application is running on Amazon EC2 instances. The company is planning a partial migration to a serverless architecture in the next year and wants to pay for resources up front.

Which AWS purchasing option will optimize the company's costs?

Options:

A.  

Convertible Reserved Instances

B.  

Spot Instances

C.  

EC2 Instance Savings Plans

D.  

Compute Savings Plan

Discussion 0
Questions 53

A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations.

Which AWS service will meet these requirements'?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

Amazon CloudWatch

C.  

Amazon Macie

D.  

Amazon GuardDuty

Discussion 0
Questions 54

A company needs to create and publish interactive business intelligence dashboards. The dashboards require insights that are powered by machine learning.

Which AWS service or tool will meet these requirements?

Options:

A.  

AWS Glue Studio

B.  

Amazon QuickSight

C.  

Amazon Redshift

D.  

Amazon Athena

Discussion 0
Questions 55

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC? images?

Options:

A.  

EC2 Image Builder

B.  

Amazon Machine Image (AMI)

C.  

AWS Launch Wizard

D.  

AWS Elastic Beanstalk

Discussion 0
Questions 56

Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

Options:

A.  

AWS Budgets

B.  

AWS Cost Explorer

C.  

AWS Cost Allocation Tags

D.  

AWS Organizations

Discussion 0
Questions 57

A company wants to migrate its on_premises workloads to the AWS Cloud. The company wants to separate workloads for chargeback to different departments.

Which AWS services or features will meet these requirements? (Select TWO.)

Options:

A.  

Placement groups

B.  

Consolidated billing

C.  

Edge locations

D.  

AWS Config

E.  

Multiple AWS accounts

Discussion 0
Questions 58

A company hosts its website on Amazon EC2 instances. The company needs to ensure that the website reaches a global audience and provides minimum latency to users.

Which AWS service should the company use to meet these requirements?

Options:

A.  

Amazon Route 53

B.  

Amazon CloudFront

C.  

Elastic Load Balancing

D.  

AWS Lambda

Discussion 0
Questions 59

Which AWS service or tool gives users the ability to connect with AWS and deploy resources programmatically?

Options:

A.  

Amazon quickSight

B.  

AWS PrivateLink

C.  

AWS Direct Connect

D.  

AWS SDKs

Discussion 0
Questions 60

Which benefit is always free of charge with AWS, regardless of a user's AWS Support plan?

Options:

A.  

AWS Developer Support

B.  

AWS Developer Forums

C.  

Programmatic case management

D.  

AWS technical account manager (TAM)

Discussion 0
Questions 61

A company has a compute workload that is steady, predictable, and uninterruptible.

Which Amazon EC2 instance purchasing options meet these requirements MOST cost-effectively? (Select TWO.)

Options:

A.  

On-Demand Instances

B.  

Reserved Instances

C.  

Spot Instances

D.  

Saving Plans

E.  

Dedicated Hosts

Discussion 0
Questions 62

A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials.

Which AWS service or resource will meet this requirement?

Options:

A.  

AWS Organizations

B.  

IAM user

C.  

AWS IAM Identity Center (AWS Single Sign-On)

D.  

AWS Control Tower

Discussion 0
Questions 63

A company wants to manage its cloud resources by using infrastructure as code (laC) template…..

Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Artifact

B.  

AWS Resource Explorer

C.  

AWS License Manager

D.  

AWS Service Catalog

Discussion 0
Questions 64

Which AWS service or feature gives users the ability to connect VPCs and on-premises networks to a central hub?

Options:

A.  

Virtual private gateway

B.  

AWS Transit Gateway

C.  

Internet gateway

D.  

Customer gateway

Discussion 0
Questions 65

Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?

Options:

A.  

Configuration of Amazon EC2 instance operating systems

B.  

Application file system server-side encryption

C.  

Patch management

D.  

Security of the physical infrastructure

Discussion 0
Questions 66

A company needs to request temporary, limited-privilege credentials for IAM users and for the federated users that the company authenticates.

Which AWS service will provide these credentials?

Options:

A.  

Amazon GuardDuty

B.  

AWS Key Management Service (AWS KMS)

C.  

AWS Security Token Service (AWS STS)

D.  

AWS Identity and Access Management Access Analyzer

Discussion 0
Questions 67

A company needs a database that can quickly read and write large amounts of unstructured data.

Which AWS service meets these requirements with the MOST scalability?

Options:

A.  

Amazon RDS

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon DynamoDB

D.  

Amazon Lightsail

Discussion 0
Questions 68

Which guidelines are best practices for using AWS Identity and Access Management (1AM)? (Select TWO.)

Options:

A.  

Share access keys.

B.  

Create individual 1AM users.

C.  

Use inline policies instead of customer managed policies.

D.  

Grant maximum privileges to 1AM users.

E.  

Use groups to assign permissions to 1AM users.

Discussion 0
Questions 69

A company is planning to migrate a monolithic application to AWS. The company wants to modernize the application by splitting it into microservices. The company will deploy the microservices on AWS.

Which migration strategy should the company use?

Options:

A.  

Rehost

B.  

Repurchase

C.  

Replatform

D.  

Refactor

Discussion 0
Questions 70

A company needs to mount a file share across multiple Amazon EC2 instances as a mapped drive by using the SMB protocol. Which AWS service will meet these requirements?

Options:

A.  

Amazon FSx for Windows File Server

B.  

Amazon Elastic File System (Amazon EFS)

C.  

Amazon S3

D.  

AWS DataSync

Discussion 0
Questions 71

A company wants to automatically run operating system command scripts on Amazon EC2 instances. Which AWS service will meet these requirements in the MOST operationally efficient way?

Options:

A.  

AWS Organizations

B.  

AWS Control Tower

C.  

AWS Lambda

D.  

AWS Systems Manager

Discussion 0
Questions 72

Which AWS service or tool can a company use to set up consolidated billing?

Options:

A.  

AWS Billing and Cost Management console

B.  

AWS Organizations

C.  

AWS Cost and Usage Report

D.  

AWS Systems Manager

Discussion 0
Questions 73

Which AWS service provides a cloud-based customer contact center?

Options:

A.  

AWS CloudFormation

B.  

Amazon CloudWatch

C.  

Amazon Connect

D.  

AWS Direct Connect

Discussion 0
Questions 74

A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLl and AWS software development kits (SDKs).

Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Select TWO)

Options:

A.  

Create an 1AM user and provide AWS Management Console access only.

B.  

Create an 1AM user and provide programmatic access only.

C.  

Create an 1AM role and provide AWS Management Console access only.

D.  

Create an 1AM policy with administrator access and attach it to the 1AM user.

E.  

Create an 1AM policy with Amazon RDS access and attach it to the 1AM user.

Discussion 0
Questions 75

What is the total volume of data that can be stored in Amazon S3?

Options:

A.  

10 PB

B.  

50 PB

C.  

100 PB

D.  

Virtually unlimited

Discussion 0
Questions 76

Which design principle aligns with the performance efficiency pillar of the AWS Well-Architected Framework?

Options:

A.  

Enable traceability

B.  

Measure the cost of workloads

C.  

Scale vertically

D.  

Use serverless architectures

Discussion 0
Questions 77

A company's workload can recover with minimal downtime when failures occur. Which AWS Cloud benefit does this scenario represent?

Options:

A.  

Agility

B.  

Elasticity

C.  

Resiliency

D.  

Scalability

Discussion 0
Questions 78

Which AWS service provides access to AWS security and compliance reports for audits?

Options:

A.  

Amazon Inspector

B.  

Amazon GuardDuty

C.  

AWS Artifact

D.  

Amazon Detective

Discussion 0
Questions 79

Which AWS service or feature can a company use to create a private, secured, and scalable network environment in the AWS Cloud?

Options:

A.  

Amazon Elastic Container Service (Amazon ECS)

B.  

Amazon S3

C.  

Amazon VPC

D.  

Route tables

Discussion 0
Questions 80

Which AWS service allows users to model and provision AWS resources using common programming languages?

Options:

A.  

AWS CloudFormation

B.  

AWS CodePipeline

C.  

AWS Cloud Development Kit (AWS CDK)

D.  

AWS Systems Manager

Discussion 0
Questions 81

A company plans to host its data warehouse application on AWS. The company has a machine learning (ML) model and wants to use that model within its data warehouse for data forecasting.

Options:

A.  

Amazon DynamoDB

B.  

Amazon Redshift ML

C.  

Amazon Aurora ML

D.  

Amazon MemoryDB

Discussion 0
Questions 82

An online gaming company hosts its gaming application on AWS. The company needs to decrease latency by sending internet traffic to the application through AWS infrastructure.

Options:

A.  

Amazon Route 53

B.  

AWS VPN

C.  

AWS Direct Connect

D.  

AWS Global Accelerator

Discussion 0
Questions 83

A company wants to migrate its on-premises NoSQL workload to Amazon DynamoDB. Which AWS service will meet this requirement?

Options:

A.  

AWS Migration Hub

B.  

AWS Database Migration Service (AWS DMS)

C.  

Migration Evaluator

D.  

AWS Application Migration Service

Discussion 0
Questions 84

Which AWS service provides storage-optimized and compute-optimized device configurations?

Options:

A.  

AWS Snowcone

B.  

AWS Storage Gateway

C.  

AWS Snowball Edge

D.  

AWS DataSync

Discussion 0
Questions 85

Which cloud concept is demonstrated by using AWS Cost Explorer?

Options:

A.  

Rightsizing

B.  

Reliability

C.  

Resilience

D.  

Modernization

Discussion 0
Questions 86

A company wants to develop applications that run on AWS. The company's developers need a set of libraries and development tools that are available in multiple programming languages.

Which AWS solution provides these libraries and tools?

Options:

A.  

AWS CodePipeline

B.  

AWS SDKs

C.  

Amazon CloudWatch

D.  

AWS CodeDeploy

Discussion 0
Questions 87

Which AWS service should a company use to organize characterize, and search large numbers of images?

Options:

A.  

Amazon Transcribe

B.  

Amazon Rekognition

C.  

Amazon Aurora

D.  

Amazon QuickSight

Discussion 0
Questions 88

A company is moving its on-premises IT services to the AWS Cloud. The company wants to set spending limits and to receive notifications if the limits are exceeded.

Which AWS service or resource will meet these requirements?

Options:

A.  

AWS Budgets

B.  

AWS Cost and Usage Reports

C.  

AWS Cost Explorer

D.  

AWS Organizations consolidated billing

Discussion 0
Questions 89

Which AWS service or resource can provide discounts on some AWS service costs in exchange for a spending commitment?

Options:

A.  

Amazon Detective

B.  

AWS Pricing

C.  

Savings Plans

D.  

Basic Support

Discussion 0
Questions 90

A company is using Amazon EC2 instances.

Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Maintain the network infrastructure.

B.  

Patch the guest operating system.

C.  

Configure a security group on deployed EC2 instances.

D.  

Provide physical security for the underlying hardware of the EC2 instances.

E.  

Manage the underlying hypervisor.

Discussion 0
Questions 91

Which AWS services are serverless? (Select TWO.)

Options:

A.  

AWS Fargate

B.  

Amazon Managed Streaming for Apache Kafka

C.  

Amazon EMR

D.  

Amazon S3

E.  

Amazon EC2

Discussion 0
Questions 92

A company is developing a web application that uses containers. The company needs a repository to store and control access to container images.

Options:

A.  

Amazon Elastic Container Registry (Amazon ECR)

B.  

Amazon Elastic Kubernetes Service (Amazon EKS)

C.  

Amazon Elastic Container Service (Amazon ECS)

D.  

Amazon EC2

Discussion 0
Questions 93

A company is designing AWS architecture that will add compute resources when the company needs them. The architecture also includes a disaster recovery plan with automatic failover.

Options:

A.  

Reliability

B.  

Operational excellence

C.  

Security

D.  

Performance efficiency

Discussion 0
Questions 94

Which AWS design principle emphasizes the reduction of interdependencies between components of an application?

Options:

A.  

Scalability

B.  

Loose coupling

C.  

Automation

D.  

Caching

Discussion 0
Questions 95

A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility.

How does AWS provide agility for users?

Options:

A.  

The ability the ensure high availability by deploying workloads to multiple regions.

B.  

A pay-as-you-go model for many services and resources

C.  

The ability to transfer infrastructure management to the AWS Cloud

D.  

The ability to provision and deprovision resources quickly with minimal effort

Discussion 0
Questions 96

Which AWS service can a company use to build conversational chatbots for customer service?

Options:

A.  

Amazon Lex

B.  

AWS Amplify

C.  

Amazon Comprehend

D.  

Amazon Polly

Discussion 0
Questions 97

Which AWS service gives users on-demand, sell-service access to AWS compliance control reports?

Options:

A.  

AWS Config

B.  

Amazon GuardDuty

C.  

AWS Trusted Advisor

D.  

AWS Artifact

Discussion 0
Questions 98

Which AWS tool or feature acts as a VPC firewall at the subnet level?

Options:

A.  

Security group

B.  

Network ACL

C.  

Traffic Mirroring

D.  

Internet gateway

Discussion 0
Questions 99

A company wants to migrate its on-premises SQL Server database to the AWS Cloud. The company wants AWS to handle the day-to-day administration of the database. Which AWS service will meet the company's requirements?

Options:

A.  

Amazon EC2 foe Microsoft SQL Server

B.  

Amazon DynamoDB

C.  

Amazon RDS

D.  

Amazon Aurora

Discussion 0
Questions 100

Which task can a user complete by using AWS Identity and Access Management (IAM)?

Options:

A.  

Validate JSON syntax from an application configuration file.

B.  

Analyze logs from an Amazon API Gateway call.

C.  

Filter traffic to or from an Amazon EC2 instance.

D.  

Grant permissions to applications that run on Amazon EC2 instances.

Discussion 0
Questions 101

A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads.

Which benefit of the AWS Cloud does this scenario describe?

Options:

A.  

Global deployment in minutes

B.  

Cost savings

C.  

Agility

D.  

Elasticity

Discussion 0
Questions 102

Which AWS service is a fully managed service for machine learning?

Options:

A.  

AWS Lambda

B.  

Amazon Kinesis

C.  

Amazon Athena

D.  

Amazon SageMaker

Discussion 0
Questions 103

A company is running a key-value NoSQL workload on Amazon EC2 instances. The company needs the workload to have scalability, failover protection, and backup capabilities.

What is the MOST operationally efficient way to meet these requirements?

Options:

A.  

Add additional EC2 instances to the database cluster.

B.  

Run an identical copy of the database in a second Availability Zone.

C.  

Migrate the database to Amazon DynamoDB.

D.  

Migrate the database to a relational database.

Discussion 0
Questions 104

Which AWS service supports the deployment and management of applications in the AWS Cloud?

Options:

A.  

Amazon CodeGuru

B.  

AWS Fargate

C.  

AWS CodeCommit

D.  

AWS Elastic Beanstalk

Discussion 0
Questions 105

Which AWS service or resource can a company use to deploy AWS WAF rules?

Options:

A.  

Amazon EC2

B.  

Application Load Balancer

C.  

AWS Trusted Advisor

D.  

Network Load Balancer

Discussion 0
Questions 106

A company needs to establish a dedicated network connection from on premises to AWS. The connection must provide consistent, low-latency network performance.

Which AWS service should the company use to meet this requirement?

Options:

A.  

AWS Direct Connect

B.  

AWS Site-to-Site VPN

C.  

AWS Directory Service

D.  

AWS Transit Gateway

Discussion 0
Questions 107

A company is releasing a business-critical application. Before the release, the company needs strategic planning assistance from AWS. During the release, the company needs AWS infrastructure event management and real-time support.

What should the company do to meet these requirement?

Options:

A.  

Access AWS Trusted Advisor.

B.  

Contact the AWS Partner Network (APN).

C.  

Sign up for AWS Enterprise Support.

D.  

Contact AWS Professional Services.

Discussion 0
Questions 108

A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports.

Options:

A.  

AWS Abuse team

B.  

AWS Artifact

C.  

AWS Support

D.  

AWS Config

Discussion 0
Questions 109

A company needs to store infrequently used data for data archives and long-term backups.

Which AWS service or storage class will meet these requirements MOST cost-effectively?

Options:

A.  

Amazon FSx for Lustre

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon Elastic File System (Amazon EFS)

D.  

Amazon S3 Glacier Flexible Retrieval

Discussion 0
Questions 110

A company is learning about its responsibilities that are related to the management of Amazon EC2 instances.

Which tasks for EC2 instances are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Install and patch the machine hypervisor.

B.  

Patch the guest operating system.

C.  

Encrypt data at rest on associated storage.

D.  

Install the physical hardware and cabling.

E.  

Provide physical security for the EC2 instances.

Discussion 0
Questions 111

A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources. Which actions will meet these requirements? (Select TWO.)

Options:

A.  

Use AWS Service Catalog to identify a list of on-premises resources that can be migrated.

B.  

Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.

C.  

Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources

D.  

Set up an AWS Direct Connect connection between the on-premises data center and AWS.

E.  

Use Amazon CloudFront to restrict access to static web content provided through the on-premises web servers.

Discussion 0
Questions 112

A company that has an AWS Enterprise Support plan needs to protect its applications from DDoS attacks. The company requires access to the AWS DDoS Response Team (DRT) 24 hours a day. 7 days a week.

Which AWS service will meet these requirements?

Options:

A.  

AWS Shield Standard

B.  

AWS Shield Advanced

C.  

AWS Firewall Manager

D.  

AWS WAF

Discussion 0
Questions 113

Which options are benefits of using third-party software from AWS Marketplace? (Select TWO.)

Options:

A.  

The software's data encryption is managed by a third-party vendor.

B.  

The software has been evaluated by vendors to ensure that it will run on AWS.

C.  

Users do not need to upgrade to newer software versions.

D.  

Users do not need to conduct security testing on the software.

E.  

Users can launch preconfigured software in only a few steps.

Discussion 0
Questions 114

A company wants phone, email, and chat access to AWS support engineers. The company also wants the ability to get support for business-critical systems within 15 minutes.

Which AWS Support plan meets these requirements?

Options:

A.  

AWS Developer Support

B.  

AWS Business Support

C.  

AWS Enterprise Support

D.  

AWS Basic Support

Discussion 0
Questions 115

A developer needs to use a standardized template to create copies of a company's AWS architecture for development test, and production environments. Which AWS service should the developer use to meet this requirement?

Options:

A.  

AWS Cloud Map

B.  

AWS Cloud Formation

C.  

Amazon CloudFront

D.  

AWS CloudTrail

Discussion 0
Questions 116

A company wants its Amazon EC2 instances to be in different locations but share the same geographic area. The company also wants to use multiple power grids and independent networking connectivity for the EC2 instances.

Which solution meets these requirements?

Options:

A.  

Use EC2 instances in multiple edge locations in the same AWS Region.

B.  

Use EC2 instances in multiple Availability Zones in the same AWS Region.

C.  

Use EC2 instances in multiple Amazon Connect locations in the same AWS Region

D.  

Use EC2 instances in multiple AWS Artifact locations in the same AWS Region.

Discussion 0
Questions 117

A company plans to perform a one-time migration of a large dataset with millions of files from its on-premises data center to the AWS Cloud.

Which AWS service should the company use for the migration?

Options:

A.  

AWS Database Migration Service (AWS DMS)

B.  

AWS DataSync

C.  

AWS Migration Hub

D.  

AWS Application Migration Service

Discussion 0
Questions 118

A company uses AWS and has a VPC that includes two public subnets. The company needs to allow and deny specific inbound and outbound traffic for each public subnet.

Which AWS service or tool can the company use to meet this requirement?

Options:

A.  

Network ACL

B.  

AWSWAF

C.  

VPC route table entry

D.  

Security group

Discussion 0
Questions 119

A developer needs to interact with AWS by using the AWS CLI.

Which security feature or AWS service must be provisioned in the developer's account to meet this requirement?

Options:

A.  

User name and password

B.  

AWS Systems Manager

C.  

Root password access

D.  

AWS access key

Discussion 0
Questions 120

Which AWS service uses edge locations to cache content?

Options:

A.  

Amazon Kinesis

B.  

Amazon Simple Queue Service (Amazon SQS)

C.  

Amazon CloudFront

D.  

Amazon Route 53

Discussion 0
Questions 121

A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available. Which solution meets these requirements?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use EC2 instances in multiple edge locations.

C.  

Use EC2 instances in the same Availability Zone but in different AWS Regions.

D.  

Use EC2 instances in the same edge location and the same AWS Region.

Discussion 0
Questions 122

Which AWS service or feature should a company use between two microservices to ensure that messages are sent and received in exact order?

Options:

A.  

Amazon Simple Email Service (Amazon SES)

B.  

Amazon Simple Notification Service (Amazon SNS)

C.  

Amazon S3 Event Notifications

D.  

Amazon Simple Queue Service (Amazon SQS) FIFO queues

Discussion 0
Questions 123

Which of the following AWS services are serverless? (Select TWO.)

Options:

A.  

AWS Outposts

B.  

Amazon EC2

C.  

Amazon Elastic Kubernetes Service (Amazon EKS)

D.  

AWS Fargate

E.  

AWS Lambda

Discussion 0
Questions 124

What is a benefit of using an Elastic Load Balancing (ELB) load balancer with applications running in the AWS Cloud?

Options:

A.  

An ELB will automatically scale resources to meet capacity needs.

B.  

An ELB can balance traffic across multiple compute resources.

C.  

An ELB can span multiple AWS Regions.

D.  

An ELB can balance traffic between multiple internet gateways.

Discussion 0
Questions 125

What can a user accomplish using AWS CloudTrail?

Options:

A.  

Generate an IAM user credentials report.

B.  

Record API calls made to AWS services.

C.  

Assess the compliance of AWS resource configurations with policies and guidelines.

D.  

Ensure that Amazon EC2 instances are patched with the latest security updates.A company uses Amazon Workspaces.

Discussion 0
Questions 126

Which task requires the use of AWS account root user credentials?

Options:

A.  

The deletion of IAM users

B.  

The change to a different AWS Support plan

C.  

The creation of an organization in AWS Organizations

D.  

The deletion of Amazon EC2 instances

Discussion 0
Questions 127

A company's application stores data in an Amazon S3 bucket. The company has an AWS Lambda function that processes data in the S3

bucket. The company needs to invoke the function once a day at a specific time.

Which AWS service should the company use to meet this requirement?

Options:

A.  

AWS Managed Services (AMS)

B.  

AWS CodeStar

C.  

Amazon EventBridge

D.  

AWS Step Functions

Discussion 0
Questions 128

A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.

Which AWS service or tool can the company use to meet these requirements?

Options:

A.  

AWS Pricing Calculator

B.  

Amazon CloudWatch

C.  

AWS Cost Explorer

D.  

AWS Budgets

Discussion 0
Questions 129

Which AWS network services or features allow Cl DR block notation when providing an IP address range?

(Select TWO.)

Options:

A.  

Security groups

B.  

Amazon Machine Image (AMI)

C.  

Network access control list (network ACL)

D.  

AWS Budgets

E.  

Amazon Elastic Block Store (Amazon EBS)

Discussion 0
Questions 130

Which AWS service or tool should a company use to forecast AWS spending?

Options:

A.  

Amazon DevPay

B.  

AWS Organizations

C.  

AWS Trusted Advisor

D.  

Cost Explorer

Discussion 0
Questions 131

A company needs to provide users with a list of company-generated products that are based on AWS services. The company also needs to control access to these products by provisioning a personalized portal for specific users.

Which AWS service will meet these requirements?

Options:

A.  

AWS AppSync

B.  

Amazon Connect

C.  

AWS Organizations

D.  

AWS Service Catalog

Discussion 0
Questions 132

A company wants an in-memory data store that is compatible with open source in the cloud.

Which AWS service should the company use?

Options:

A.  

Amazon DynamoDB

B.  

Amazon ElastiCache

C.  

Amazon Elastic Block Store (Amazon EBS)

D.  

Amazon Redshift

Discussion 0
Questions 133

Which AWS Support plan assigns an AWS concierge agent to a company's account?

Options:

A.  

AWS Basic Support

B.  

AWS Developer Support

C.  

AWS Business Support

D.  

AWS Enterprise Support

Discussion 0
Questions 134

Which AWS service is a fully managed service and allows access to applications through a virtual interface (VIF)?

Options:

A.  

Amazon AppStream 2.0

B.  

Amazon EC2

C.  

AWS Elastic Beanstalk

D.  

AWS Lambda

Discussion 0
Questions 135

A company that uses AWS needs to transfer 2 TB of data.

Which type of transfer of that data would result in no cost for the company?

Options:

A.  

Inbound data transfer from the internet

B.  

Outbound data transfer to the internet

C.  

Data transfer between AWS Regions

D.  

Data transfer between Availability Zones

Discussion 0
Questions 136

A company needs help managing multiple AWS linked accounts that are reported on a consolidated bill.

Which AWS Support plan includes an AWS concierge whom the company can ask for assistance?

Options:

A.  

AWS Developer Support

B.  

AWS Enterprise Support

C.  

AWS Business Support

D.  

AWS Basic Support

Discussion 0
Questions 137

A company is building a web application using AWS.

Which AWS service will help prevent network layer DDoS attacks against the web application?

Options:

A.  

AWS WAF

B.  

AWS Firewall Manager

C.  

Amazon GuardDuty

D.  

AWS Shield

Discussion 0
Questions 138

Which AWS service provides a scalable data warehouse solution?

Options:

A.  

Amazon S3

B.  

Amazon DynamoDB

C.  

Amazon Kinesis Data Streams

D.  

Amazon Redshift

Discussion 0
Questions 139

Which task is the responsibility of AWS when using AWS services?

Options:

A.  

Management of IAM user permissions

B.  

Creation of security group rules for outbound access

C.  

Maintenance of physical and environmental controls

D.  

Application of Amazon EC2 operating system patches

Discussion 0
Questions 140

company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.

Which pillar of the AWS Well-Architected Framework is supported by these goals?

Options:

A.  

Reliability

B.  

Security

C.  

Operational excellence

D.  

Performance efficiency

Discussion 0
Questions 141

A company wants to centrally manage security policies and billing services within a multi-account AWS environment. Which AWS service should the company use to meet these requirements?

Options:

A.  

AWS Identity and Access Management (IAM)

B.  

AWS Organizations

C.  

AWS Resource Access Manager (AWS RAM)

D.  

AWS Config

Discussion 0
Questions 142

Which benefit is included with an AWS Enterprise Support plan?

Options:

A.  

AWS Partner Network (APN) support at no cost

B.  

Designated support from an AWS technical account manager (TAM)

C.  

On-site support from AWS engineers

D.  

AWS managed compliance as code with AWS Config

Discussion 0
Questions 143

A company wants to rightsize its Amazon EC2 instances.

Which configuration change will meet this requirement with the LEAST operational overhead?

Options:

A.  

Add EC2 instances in another Availability Zone.

B.  

Change the size and type of the EC2 instances based on utilization.

C.  

Convert the payment method from On-Demand to Savings Plans.

D.  

Reprovision the EC2 instances with a larger instance type.

Discussion 0
Questions 144

Which AWS service meets this requirement?

Options:

A.  

AWS CloudFormation

B.  

AWS Elastic Beanstalk

C.  

AWS Cloud9

D.  

AWS CloudShell

Discussion 0
Questions 145

Which action should a company take to improve security in its AWS account?

Options:

A.  

Require multi-factor authentication (MFA) for privileged users.

B.  

Remove the root user account.

C.  

Create an access key for the AWS account root user.

D.  

Create an access key for each privileged user.

Discussion 0
Questions 146

Which statement describes a characteristic of the AWS global infrastructure?

Options:

A.  

Edge locations contain multiple AWS Regions.

B.  

AWS Regions contain multiple Regional edge caches.

C.  

Availability Zones contain multiple data centers.

D.  

Each data center contains multiple edge locations.

Discussion 0
Questions 147

Which AWS service gives users the ability to provision a dedicated and private network connection from their internal

network to AWS?

Options:

A.  

AWS CloudHSM

B.  

AWS Direct Connect

C.  

AWS VPN

D.  

Amazon Connect

Discussion 0
Questions 148

Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

Options:

A.  

Perform operations as code.

B.  

Enable traceability.

C.  

Automatically scale to meet demand.

D.  

Deploy resources globally to improve response time.

E.  

Automatically recover from failure.

Discussion 0
Questions 149

Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)

Options:

A.  

Patch AWS network devices.

B.  

Set user password rules.

C.  

Provide physical security for compute resources.

D.  

Configure security groups.

E.  

Patch the operating system of an Amazon EC2 instance.

Discussion 0
Questions 150

A company is using Amazon RDS.

A company is launching a critical business application in an AWS Region.

How can the company increase resilience for this application?

Options:

A.  

Deploy a copy of the application in another AWS account.

B.  

Deploy the application by using multiple VPCs.

C.  

Deploy the application by using multiple subnets.

D.  

Deploy the application by using multiple Availability Zones.

Discussion 0
Questions 151

Which feature of the AWS Cloud gives users the ability to pay based on current needs rather than forecasted needs?

Options:

A.  

AWS Budgets

B.  

Pay-as-you-go pricing

C.  

Volume discounts

D.  

Savings Plans

Discussion 0
Questions 152

Which task is a customer's responsibility, according to the AWS shared responsibility model?

Options:

A.  

Management of the guest operating systems

B.  

Maintenance of the configuration of infrastructure devices

C.  

Management of the host operating systems and virtualization

D.  

Maintenance of the software that powers Availability ZonesA company has refined its workload to use specific AWS services to improve efficiency and reduce cost.

Discussion 0
Questions 153

An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks.

Which AWS service will provide this information?

Options:

A.  

AWS Artifact

B.  

AWS Trusted Advisor

C.  

Amazon GuardDuty

D.  

AWS Certificate Manager (ACM)

Discussion 0
Questions 154

Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

Options:

A.  

Sustainability

B.  

Cost optimization

C.  

Operational excellence

D.  

Reliability

Discussion 0
Questions 155

A company wants its workload to perform consistently and correctly.

Which benefit of AWS Cloud computing does this goal represent?

Options:

A.  

Security

B.  

Elasticity

C.  

Pay-as-you-go pricing

D.  

Reliability

Discussion 0
Questions 156

A company has two AWS accounts in an organization in AWS Organizations for consolidated billing. All of the company's AWS resources are hosted in one AWS Region.

Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances

running. Account B has not purchased any RIs and also has four EC2 instances running.

Which statement is true regarding pricing for these eight instances?

Options:

A.  

The eight instances will be charged as regular instances.

B.  

Four instances will be charged as RIs, and four will be charged as regular instances.

C.  

Five instances will be charged as RIs, and three will be charged as regular instances.

D.  

The eight instances will be charged as RIs.

Discussion 0
Questions 157

A company's user base needs to remotely access virtual desktop computers from the internet Which AWS service provides this functionality?

Options:

A.  

Amazon Connect

B.  

Amazon Cognito

C.  

Amazon Workspaces

D.  

Amazon Upstream 2.0

Discussion 0
Questions 158

A company wants to migrate to the AWS Cloud. The company needs the ability to acquire resources when the resources are necessary.

The company also needs the ability to release those resources when the resources are no longer necessary.

Which architecture concept of the AWS Cloud meets these requirements?

Options:

A.  

Elasticity

B.  

Availability

C.  

Reliability

D.  

Durability

Discussion 0
Questions 159

Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

Options:

A.  

Elimination of expenses for running and maintaining data centers

B.  

Price discounts that are identical to discounts from hardware providers

C.  

Distribution of all operational controls to AWS

D.  

Elimination of operational expenses

Discussion 0
Questions 160

A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.

Which AWS service or tool will meet these requirements?

Options:

A.  

AWS Auto Scaling

B.  

AWS Compute Optimizer

C.  

AWS Cost Explorer

D.  

AWS Well-Architected Framework

Discussion 0
Questions 161

A company wants to migrate its on-premises data warehouse to AWS. The information in the data warehouse is

used to populate analytics dashboards.

Which AWS service should the company use for the data warehouse?

Options:

A.  

Amazon ElastiCache

B.  

Amazon Aurora

C.  

Amazon RDS

D.  

Amazon Redshift

Discussion 0
Questions 162

Which credential allows programmatic access to AWS resources for use from the AWS CLI or the AWS API?

Options:

A.  

User name and password

B.  

Access keys

C.  

SSH public keys

D.  

AWS Key Management Service (AWS KMS) keys

Discussion 0
Questions 163

A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks.

Which benefit of the AWS Cloud does this scenario demonstrate?

Options:

A.  

Cost savings

B.  

Improved operational resilience

C.  

Increased business agility

D.  

Enhanced security

Discussion 0
Questions 164

A company stores data in an Amazon S3 bucket.

Which task is the responsibility of AWS?

Options:

A.  

Configure an S3 Lifecycle policy.

B.  

Activate S3 Versioning.

C.  

Configure S3 bucket policies.

D.  

Protect the infrastructure that supports S3 storage.

Discussion 0
Questions 165

A newly created IAM user has no IAM policy attached.

What will happen when the user logs in and attempts to view the AWS resources in the account?

Options:

A.  

All AWS services will be read-only access by default.

B.  

Access to all AWS resources will be denied.

C.  

Access to the AWS billing services will be allowed.

D.  

Access to AWS resources will be allowed through the AWS CLL

Discussion 0
Questions 166

A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.

Which AWS service will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

AWSWAF

C.  

Amazon Macie

D.  

AWS Shield

Discussion 0
Questions 167

Which AWS service or feature captures information about the network traffic to and from an Amazon EC2 instance?

Options:

A.  

VPC Reachability Analyzer

B.  

Amazon Athena

C.  

VPC Flow Logs

D.  

AWS X-Ray

Discussion 0
Questions 168

Which AWS services or features can control VPC traffic? (Select TWO.)

Options:

A.  

Security groups

B.  

AWS Direct Connect

C.  

Amazon GuardDuty

D.  

Network ACLs

E.  

Amazon Connect

Discussion 0
Questions 169

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

Options:

A.  

Sustainability

B.  

Operations

C.  

Performance efficiency

D.  

Reliability

Discussion 0
Questions 170

Which database engines does Amazon Aurora support? (Select TWO.)

Options:

A.  

Oracle

B.  

Microsoft SQL Server

C.  

MySQL

D.  

PostgreSQL

E.  

MongoDB

Discussion 0
Questions 171

A company needs to design a solution for the efficient use of compute resources for an enterprise workload. The company needs to make informed decisions as its technology needs evolve.

Which pillar of the AWS Well-Architected Framework do these requirements represent?

Options:

A.  

Operational excellence

B.  

Performance efficiency

C.  

Cost optimization

D.  

Reliability

Discussion 0
Questions 172

A company needs to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively.

The workloads can recover from interruptions easily.

Which pricing model should the company use?

Options:

A.  

Reserved Instances

B.  

On-Demand Instances

C.  

Spot Instances

D.  

Dedicated Hosts

Discussion 0
Questions 173

What is the total amount of storage offered by Amazon S3?

Options:

A.  

WOMB

B.  

5 GB

C.  

5 TB

D.  

Unlimited

Discussion 0
Questions 174

Which AWS service or feature is used to send both text and email messages from distributed applications?

Options:

A.  

Amazon Simple Notification Service (Amazon SNS)

B.  

Amazon Simple Email Service (Amazon SES)

C.  

Amazon CloudWatch alerts

D.  

Amazon Simple Queue Service (Amazon SQS)

Discussion 0
Questions 175

Which AWS service or tool helps companies measure the environmental impact of their AWS usage?

Options:

A.  

AWS customer carbon footprint tool

B.  

AWS Compute Optimizer

C.  

Sustainability pillar

D.  

OS-Climate (Open Source Climate Data Commons)

Discussion 0
Questions 176

Which design principle should be considered when architecting in the AWS Cloud?

Options:

A.  

Think of servers as non-disposable resources.

B.  

Use synchronous integration of services.

C.  

Design loosely coupled components.

D.  

Implement the least permissive rules for security groups.

Discussion 0
Questions 177

Which AWS service is a highly available and scalable DNS web service?

Options:

A.  

Amazon VPC

B.  

Amazon CloudFront

C.  

Amazon Route 53

D.  

Amazon Connect

Discussion 0
Questions 178

A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket.

Which AWS service will integrate directly with the event notification?

Options:

A.  

AWS Lambda

B.  

Amazon EC2

C.  

Amazon Elastic Container Registry (Amazon ECR)

D.  

AWS Elastic Beanstalk

Discussion 0
Questions 179

Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?

Options:

A.  

AWS Security Hub

B.  

Security groups

C.  

Network ACL

D.  

AWSWAF

Discussion 0
Questions 180

Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

Options:

A.  

Amazon DynamoDB

B.  

AWS CodePipeline

C.  

AWS Batch

D.  

AWS Step Functions

Discussion 0
Questions 181

A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive data.

Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?

Options:

A.  

Security groups

B.  

Amazon CloudWatch

C.  

AWS CloudTrail

D.  

ACLs

Discussion 0
Questions 182

A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a

natural disaster in a particular geographic area.

Which solution achieves this goal?

Options:

A.  

Use EC2 instances in a single Availability Zone.

B.  

Use EC2 instances in multiple AWS Regions.

C.  

Use EC2 instances in multiple edge locations.

D.  

Use Amazon CloudFront with the EC2 instances configured as the source.

Discussion 0
Questions 183

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.

Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

Options:

A.  

AWS Shield

B.  

AWS Config

C.  

AWS IAM

D.  

Amazon Inspector

Discussion 0
Questions 184

Which AWS service or tool does AWS Control Tower use to create resources?

Options:

A.  

AWS CloudFormation

B.  

AWS Trusted Advisor

C.  

AWS Directory Service

D.  

AWS Cost Explorer

Discussion 0
Questions 185

What does the Amazon S3 Intelligent-Tiering storage class offer?

Options:

A.  

Payment flexibility by reserving storage capacity

B.  

Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (AmazonEBS) volume

C.  

Automatic cost savings by moving objects between tiers based on access pattern changes

D.  

Secure, durable, and lowest cost storage for data archival

Discussion 0
Questions 186

A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB.

What is the MOST operationally efficient solution to delegate permissions?

Options:

A.  

Create an IAM role with the required permissions. Attach the role to the EC2 instance.

B.  

Create an IAM user and use its access key and secret access key in the application.

C.  

Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance.

D.  

Create an IAM role with the required permissions. Attach the role to the administrativeIAM user.

Discussion 0
Questions 187

A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal

communication latency between the data centers.

How can the company meet this requirement?

Options:

A.  

Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.

B.  

Place the EC2 instances in two separate Availability Zones within the same AWS Region.

C.  

Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using anAWS VPN connection.

D.  

Place both EC2 instances in a placement group for dedicated bandwidth.

Discussion 0
Questions 188

According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Select TWO.)

Options:

A.  

Network infrastructure and virtualization of infrastructure

B.  

Security of application data

C.  

Guest operating systems

D.  

Physical security of hardware

E.  

Credentials and policies

Discussion 0
Questions 189

A company wants to set AWS spending targets and track costs against those targets.

Which AWS tool or feature should the company use to meet these requirements?

Options:

A.  

AWS Cost Explorer

B.  

AWS Budgets

C.  

AWS Cost and Usage Report

D.  

Savings Plans

Discussion 0
Questions 190

A company wants its Amazon EC2 instances to share the same geographic area but use redundant underlying power sources.

Which solution will meet these requirements?

Options:

A.  

Use EC2 instances across multiple Availability Zones in the same AWS Region.

B.  

Use Amazon CloudFront as the database for the EC2 instances.

C.  

Use EC2 instances in the same edge location and the same Availability Zone.

D.  

Use EC2 instances in AWS OpsWorks stacks in different AWS Regions.

Discussion 0
Questions 191

For which AWS service is the customer responsible for maintaining the underlying operating system?

Options:

A.  

Amazon DynamoDB

B.  

Amazon S3

C.  

Amazon EC2

D.  

AWS Lambda

Discussion 0
Questions 192

Which AWS service offers object storage?

Options:

A.  

Amazon RDS

B.  

Amazon Elastic File System (Amazon EFS)

C.  

Amazon S3

D.  

Amazon DynamoDB

Discussion 0
Questions 193

A company uses AWS for its web application. The company wants to minimize latency and perform compute operations for the application as close to end users as possible.

Which AWS service or infrastructure component will provide this functionality?

Options:

A.  

AWS Regions

B.  

Availability Zones

C.  

Edge locations

D.  

AWS Direct Connect

Discussion 0
Questions 194

A company wants to set up a high-speed connection between its data center and its applications that run on AWS. The company must not transfer data over the internet.

Which action should the company take to meet these requirements?

Options:

A.  

Transfer data to AWS by using AWS Snowball.

B.  

Transfer data to AWS by using AWS Storage Gateway.

C.  

Set up a VPN connection between the data center and an AWS Region.

D.  

Set up an AWS Direct Connect connection between the company network and AWS.

Discussion 0
Questions 195

A company runs a MySQL database in its on-premises data center. The company wants to run a copy of this database in the AWS

Cloud.

Which AWS service would support this workload?

Options:

A.  

Amazon RDS

B.  

Amazon Neptune

C.  

Amazon ElastiCache for Redis

D.  

Amazon Quantum Ledger Database (Amazon QLDB)

Discussion 0
Questions 196

A company wants to ensure that all of its Amazon EC2 instances have compliant operating system patches.

Which AWS service will meet these requirements?

Options:

A.  

AWS Compute Optimizer

B.  

AWS Elastic Beanstalk

C.  

AWS AppSync

D.  

AWS Systems Manager

Discussion 0
Questions 197

Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

Options:

A.  

Amazon VPC

B.  

AWS Shield

C.  

AWS Audit Manager

D.  

AWS Config

Discussion 0
Questions 198

A company website is experiencing DDoS attacks.

Which AWS service can help protect the company website against these attacks?

Options:

A.  

AWS Resource Access Manager

B.  

AWS Amplify

C.  

AWS Shield

D.  

Amazon GuardDuty

Discussion 0
Questions 199

A company runs thousands of simultaneous simul-ations using AWS Batch. Each simul-ation is stateless, is fault tolerant, and runs for up to 3 hours.

Which pricing model enables the company to optimize costs and meet these requirements?

Options:

A.  

Reserved Instances

B.  

Spot Instances

C.  

On-Demand Instances

D.  

Dedicated Instances

Discussion 0
Questions 200

Which AWS service can provide a dedicated network connection with consistent low latency from on premises to the AWS Cloud?

Options:

A.  

Amazon VPC

B.  

Amazon Kinesis Data Streams

C.  

AWS Direct Connect

D.  

Amazon OpenSearch Service

Discussion 0
Questions 201

Which option is an AWS Cloud Adoption Framework (AWS CAF) foundational capability for the operations perspective?

Options:

A.  

Performance and capacity management

B.  

Application portfolio management

C.  

Identity and access management

D.  

Product management

Discussion 0
Questions 202

A company wants to migrate a database from an on-premises environment to Amazon RDS.

After the migration is complete, which management task will the company still be responsible for?

Options:

A.  

Hardware lifecycle management

B.  

Application optimization

C.  

Server maintenance

D.  

Power, network, and cooling provisioning

Discussion 0
Questions 203

A company is building an application in the AWS Cloud. The company wants to use temporary credentials for the application to access other AWS resources.

Which AWS service will meet these requirements?

Options:

A.  

AWS Key Management Service (Aws KMS)

B.  

AWS CloudHSM

C.  

Amazon Cognito

D.  

AWS Security Token Service (Aws STS)

Discussion 0
Questions 204

Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?

Options:

A.  

Data architecture

B.  

Event management

C.  

Cloud fluency

D.  

Strategic partnership

Discussion 0
Questions 205

What is the purpose of having an internet gateway within a VPC?

Options:

A.  

To create a VPN connection to the VPC

B.  

To allow communication between the VPC and the internet

C.  

To impose bandwidth constraints on internet traffic

D.  

To load balance traffic from the internet across Amazon EC2 instances

Discussion 0
Questions 206

A company is building an application that needs to deliver images and videos globally with minimal latency.

Which approach can the company use to accomplish this in a cost effective manner?

Options:

A.  

Deliver the content through Amazon CloudFront.

B.  

Store the content on Amazon S3 and enable S3 cross-region replication.

C.  

Implement a VPN across multiple AWS Regions.

D.  

Deliver the content through AWS PrivateLink.

Discussion 0
Questions 207

A company wants an AWS service to provide product recommendations based on its customer data.

Which AWS service will meet this requirement?

Options:

A.  

Amazon Polly

B.  

Amazon Personalize

C.  

Amazon Comprehend

D.  

Amazon Rekognition

Discussion 0
Questions 208

A company wants to receive alerts to monitor its overall operating costs for its AWS public cloud infrastructure.

Which AWS offering will meet these requirements?

Options:

A.  

Amazon EventBridge

B.  

Compute Savings Plans

C.  

AWS Budgets

D.  

Migration Evaluator

Discussion 0
Questions 209

Which of the following is a benefit of using an AWS managed service?

Options:

A.  

Reduced operational overhead for a company's IT staff

B.  

Increased fixed costs that can be predicted by a finance team

C.  

Removal of the need to have a backup strategy

D.  

Removal of the need to follow compliance standards

Discussion 0
Questions 210

A company wants to migrate its high-performance computing (HPC) application to Amazon EC2 instances. The application has multiple components. The application must have fault tolerance and must have the ability to fail over automatically.

Which AWS infrastructure solution will meet these requirements with the LEAST latency between components?

Options:

A.  

Multiple AWS Regions

B.  

Multiple edge locations

C.  

Multiple Availability Zones

D.  

Regional edge caches

Discussion 0
Questions 211

A developer has been hired by a large company and needs AWS credentials.

Which are security best practices that should be followed? (Select TWO.)

Options:

A.  

Grant the developer access to only the AWS resources needed to perform the job.

B.  

Share the AWS account root user credentials with the developer.

C.  

Add the developer to the administrator's group in AWS IAM.

D.  

Configure a password policy that ensures the developer's password cannot be changed.

E.  

Ensure the account password policy requires a minimum length.

Discussion 0
Questions 212

Which task must a user perform by using the AWS account root user credentials?

Options:

A.  

Make changes to AWS production resources.

B.  

Change AWS Support plans.

C.  

Access AWS Cost and Usage Reports.

D.  

Grant auditors’ access to an AWS account for a compliance audit.

Discussion 0
Questions 213

A user is moving a workload from a local data center to an architecture that is distributed between the local data center and the AWS Cloud.

Which type of migration is this?

Options:

A.  

On-premises to cloud native

B.  

Hybrid to cloud native

C.  

On-premises to hybrid

D.  

Cloud native to hybrid

Discussion 0
Questions 214

A company wants to run its production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week.

Which AWS Support plan will meet these requirements?

Options:

A.  

AWS Basic Support

B.  

AWS Enterprise Support

C.  

AWS Business Support

D.  

AWS Developer Support

Discussion 0
Questions 215

Which AWS service or feature is an example of a relational database management system?

Options:

A.  

Amazon Athena

B.  

Amazon Redshift

C.  

Amazon S3 Select

D.  

Amazon Kinesis Data Streams

Discussion 0
Questions 216

In the AWS shared responsibility model, which tasks are the responsibility of AWS? (Select TWO.)

Options:

A.  

Patch an Amazon EC2 instance operating system.

B.  

Configure a security group.

C.  

Monitor the health of an Availability Zone.

D.  

Protect the infrastructure that runs Amazon EC2 instances.

E.  

Manage access to the data in an Amazon S3 bucket

Discussion 0
Questions 217

Which AWS service is a continuous delivery and deployment solution?

Options:

A.  

AWSAppSync

B.  

AWS CodePipeline

C.  

AWS Cloud9

D.  

AWS CodeCommit

Discussion 0
Questions 218

Which actions are best practices for an AWS account root user? (Select TWO.)

Options:

A.  

Share root user credentials with team members.

B.  

Create multiple root users for the account, separated by environment.

C.  

Enable multi-factor authentication (MFA) on the root user.

D.  

Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.

E.  

Use programmatic access instead of the root user and password.

Discussion 0
Questions 219

What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

Options:

A.  

AWS Certificate Manager

B.  

AWS Systems Manager

C.  

AWS Artifact

D.  

Amazon Inspector

Discussion 0
Questions 220

A company needs to categorize and track AWS usage cost based on business categories.

Which AWS service or feature should the company use to meet these requirements?

Options:

A.  

Cost allocation tags

B.  

AWS Organizations

C.  

AWS Security Hub

D.  

AWS Cost and Usage Report

Discussion 0
Questions 221

A company provides a web-based ecommerce service that runs in two Availability Zones within a single AWS Region. The web service distributes content that is stored in the Amazon S3 Standard storage class. The company wants to improve the web service's performance globally.

What should the company do to meet this requirement?

Options:

A.  

Change the S3 storage class to S3 Intelligent-Tiering.

B.  

Deploy an Amazon CloudFront distribution to cache web server content in edge locations.

C.  

Use Amazon API Gateway for the web service.

D.  

Migrate the website ecommerce servers to Amazon EC2 with enhanced networking.

Discussion 0
Questions 222

A company is collecting user behavior patterns to identify how to meet goals for sustainability impact.

Which guidelines are best practices for the company to implement to meet these goals? (Select TWO.)

Options:

A.  

Scale infrastructure with user load.

B.  

Maximize the geographic distance between workloads and user locations.

C.  

Eliminate creation and maintenance of unused assets.

D.  

Scale resources with excess capacity and remove auto scaling.

E.  

Scale infrastructure based on the number of users.

Discussion 0
Questions 223

Which AWS service will help protect applications running on AWS from DDoS attacks?

Options:

A.  

Amazon GuardDuty

B.  

AWS WAF

C.  

AWS Shield

D.  

Amazon Inspector

Discussion 0
Questions 224

A company is running its application in the AWS Cloud and wants to protect against a DDoS attack. The company's security team wants near real-time visibility into DDoS attacks.

Which AWS service or traffic filter will meet these requirements with the MOST features for DDoS protection?

Options:

A.  

AWS Shield Advanced

B.  

AWS Shield

C.  

Amazon GuardDuty

D.  

Network ACLs

Discussion 0
Questions 225

A company is running an Amazon EC2 instance in a VPC.

An ecommerce company is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2.

This architecture follows which AWS Well-Architected Framework best practice?

Options:

A.  

Secure the workload

B.  

Decouple infrastructure components

C.  

Design for failure

D.  

Think parallel

Discussion 0
Questions 226

Which AWS service is designed to help users handle large amounts of data in a data warehouse environment?

Options:

A.  

Amazon RDS

B.  

Amazon DynamoDB

C.  

Amazon Redshift

D.  

Amazon Aurora

Discussion 0
Questions 227

A company wants to migrate its server-based applications to the AWS Cloud. The company wants to determine the total cost of ownership for its compute resources that will be hosted on the AWS Cloud.

Which combination of AWS services or tools will meet these requirements?

Options:

A.  

AWS Pricing Calculator

B.  

Migration Evaluator

C.  

AWS Support Center

D.  

AWS Application Discovery Service

E.  

AWS Database Migration Service (AWS DMS)

Discussion 0
Questions 228

A company is migrating its data center to AWS. The company needs an AWS Support plan that provides chat access to a cloud sup engineer 24 hours a day, 7 days a week. The company does not require access to infrastructure event management.

What is the MOST cost-effective AWS Support plan that meets these requirements?

Options:

A.  

AWS Enterprise Support

B.  

AWS Business Support

C.  

AWS Developer Support

D.  

AWS Basic Support

Discussion 0
Questions 229

A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely.

Which AWS service or framework should the company use for operational support?

Options:

A.  

AWS Support

B.  

AWS Cloud Adoption Framework (AWS CAF)

C.  

AWS Managed Services (AMS)

D.  

AWS Well-Architected Framework

Discussion 0
Questions 230

How should the company deploy the application to meet these requirements?

Options:

A.  

Ina single Availability Zone

B.  

On AWS Direct Connect

C.  

On Reserved Instances

D.  

In multiple Availability Zones

Discussion 0
Questions 231

A company needs to identify who accessed an AWS service and what action was performed for a given time period.

Which AWS service should the company use to meet this requirement?

Options:

A.  

Amazon CloudWatch

B.  

AWS CloudTrail

C.  

AWS Security Hub

D.  

Amazon Inspector

Discussion 0
Questions 232

A company wants to create a set of custom dashboards to collect metrics to monitor its applications.

Which AWS service will meet these requirements?

Options:

A.  

Amazon CloudWatch

B.  

AWS X-Ray

C.  

AWS Systems Manager

D.  

AWS CloudTrail

Discussion 0
Questions 233

A company has all of its servers in the us-east-1 Region. The company is considering the deployment of additional servers different Region.

Which AWS tool should the company use to find pricing information for other Regions?

Options:

A.  

Cost Explorer

B.  

AWS Budgets

C.  

AWS Purchase Order Management

D.  

AWS Pricing Calculator

Discussion 0
Questions 234

A company needs an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities.

Which AWS service will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

Amazon Inspector

C.  

AWS Security Hub

D.  

AWS Shield

Discussion 0
Questions 235

Which AWS Cloud benefit describes the ability to acquire resources as they are needed and release resources when they are no longer needed?

Options:

A.  

Economies of scale

B.  

Elasticity

C.  

Agility

D.  

Security

Discussion 0
Questions 236

Which AWS services allow users to monitor and retain records of account activities that include governance, compliance, and auditing?

(Select TWO.)

Options:

A.  

Amazon CloudWatch

B.  

AWS CloudTrail

C.  

Amazon GuardDuty

D.  

AWS Shield

E.  

AWS WAF

Discussion 0
Questions 237

A company wants to migrate its application to AWS. The company wants to replace upfront expenses with variable payment that is based on usage.

What should the company do to meet these requirements?

Options:

A.  

Use pay-as-you-go pricing.

B.  

Purchase Reserved Instances.

C.  

Pay less by using more.

D.  

Rightsize instances.

Discussion 0
Questions 238

Which options are AWS Cloud Adoption Framework (AWS CAF) people perspective capabilities? (Select TWO.)

Options:

A.  

Organizational alignment

B.  

Portfolio management

C.  

Organization design

D.  

Risk management

E.  

Modern application development

Discussion 0
Questions 239

How does the AWS Enterprise Support Concierge team help users?

Options:

A.  

Supporting application development

B.  

Providing architecture guidance

C.  

Answering billing and account inquiries

D.  

Answering questions regarding technical support cases

Discussion 0
Questions 240

A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.

Which AWS service will meet these requirements?

Options:

A.  

Amazon GuardDuty

B.  

Amazon Inspector

C.  

Amazon Detective

D.  

Amazon Cognito

Discussion 0
Questions 241

What does the concept of agility mean in AWS Cloud computing? (Select TWO.)

Options:

A.  

The speed at which AWS resources are implemented

B.  

The speed at which AWS creates new AWS Regions

C.  

The ability to experiment quickly

D.  

The elimination of wasted capacity

E.  

The low cost of entry into cloud computing

Discussion 0
Questions 242

A company is assessing its AWS Business Support plan to determine if the plan still meets the company's needs. The company is considering switching to

AWS Enterprise Support.

Which additional benefit will the company receive with AWS Enterprise Support?

Options:

A.  

A full set of AWS Trusted Advisor checks

B.  

Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week

C.  

A designated technical account manager (TAM) to assist in monitoring and optimization

D.  

A consultative review and architecture guidance for the company's applications

Discussion 0
Questions 243

A company has an Amazon S3 bucket containing images of scanned financial invoices. The company is building an artificial intelligence (Al)-based application on AWS. The company wants the application to identify and read total balance amounts on the invoices.

Which AWS service will meet these requirements?

Options:

A.  

Amazon Forecast

B.  

Amazon Textract

C.  

Amazon Rekognition

D.  

Amazon Lex

Discussion 0
Questions 244

A company needs to set a maximum spending limit on AWS services each month. The company also needs to set up alerts for when the company reaches its spending limit.

Which AWS service or tool should the company use to meet these requirements?

Options:

A.  

Cost Explorer

B.  

AWS Trusted Advisor

C.  

Service Quotas

D.  

AWS Budgets

Discussion 0
Questions 245

A company needs a graph database service that is scalable and highly available.

Which AWS service meets these requirements?

Options:

A.  

Amazon Aurora

B.  

Amazon Redshift

C.  

Amazon DynamoDB

D.  

Amazon Neptune

Discussion 0
Questions 246

Which task can only an AWS account root user perform?

Options:

A.  

Changing the AWS Support plan

B.  

Deleting AWS resources

C.  

Creating an Amazon EC2 instance key pair

D.  

Configuring AWS WAF

Discussion 0
Questions 247

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

Options:

A.  

Hard code an IAM user's secret key and access key directly in the application, and upload the file.

B.  

Store the IAM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.

C.  

Have the EC2 instance assume a role to obtain the privileges to upload the file.

D.  

Modify the S3 bucket policy so that any service can upload to it at any time.

Discussion 0
Questions 248

Which VPC component provides a layer of security at the subnet level?

Options:

A.  

Security groups

B.  

Network ACLs

C.  

NAT gateways

D.  

Route tables

Discussion 0
Questions 249

Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Select TWO.)

Options:

A.  

Performance and capacity management

B.  

Data engineering

C.  

Continuous integration and continuous delivery (CI/CD)

D.  

Infrastructure protection

E.  

Change and release management

Discussion 0
Questions 250

A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimize cost and maximize flexibility.

A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service

must support standard SQL.

Which AWS service will meet these requirements?

Options:

A.  

Amazon Redshift

B.  

AWS Glue

C.  

Amazon Athena

D.  

Amazon Kinesis Data Streams

Discussion 0
Questions 251

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Select TWO.)

Options:

A.  

Control access to AWS service APIs and to other specific resources.

B.  

Provide intelligent threat detection and continuous monitoring.

C.  

Protect the AWS environment using multi-factor authentication (MFA).

D.  

Grant users access to AWS data centers.

E.  

Provide firewall protection for applications from common web attacks.

Discussion 0
Questions 252

What is a characteristic of Convertible Reserved Instances (RIs)?

Options:

A.  

Users can exchange Convertible RIs for other Convertible RIs from a different instance family.

B.  

Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions.

C.  

Users can sell and buy Convertible RIs on the AWS Marketplace.

D.  

Users can shorten the term of their Convertible RIs by merging them with other Convertible RIs.

Discussion 0
Questions 253

A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS.

Which AWS service should the company use?

Options:

A.  

Amazon GuardDuty

B.  

Amazon Inspector

C.  

AWS Shield Advanced

D.  

Amazon Macie

Discussion 0
Questions 254

A company wants to migrate its applications to the AWS Cloud. The company plans to identity and prioritize any business transformation opportunities and evaluate its AWS Cloud readiness. Which AWS service or tool should the company use to meet these requirements?

Options:

A.  

AWS Cloud Adoption Framework (AWS CAF)

B.  

AWS Managed Services (AMS)

C.  

AWS Well-Architected Framework

D.  

AWS Migration Hub

Discussion 0
Questions 255

Which AWS Cloud deployment model uses AWS Outposts as part of the application deployment infrastructure?

Options:

A.  

On-premises

B.  

Serverless

C.  

Cloud-native

D.  

Hybrid

Discussion 0
Questions 256

A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?

Options:

A.  

AWS Lambda

B.  

Amazon EC2

C.  

AWS CodeDeploy

D.  

AWS Wavelength

Discussion 0
Questions 257

An ecommerce company has deployed a new web application on Amazon EC2 Instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.

Which AWS service or resource will meet this requirement?

Options:

A.  

Amazon EC2 Auto Scaling

B.  

Application Load Balancer

C.  

Gateway Load Balancer

D.  

Network Load Balancer

Discussion 0
Questions 258

Which complimentary AWS service or tool creates data-driven business cases for cloud planning?

Options:

A.  

Migration Evaluator

B.  

AWS Billing Conductor

C.  

AWS Billing Console

D.  

Amazon Forecast

Discussion 0
Questions 259

Which service enables customers to audit API calls in their AWS accounts'?

Options:

A.  

AWS CloudTrail

B.  

AWS Trusted Advisor

C.  

Amazon Inspector

D.  

AWS X-Ray

Discussion 0
Questions 260

Which AWS services or features give users the ability to create a network connection between two VPCs? (Select TWO.)

Options:

A.  

VPC endpoints

B.  

Amazon Route 53

C.  

VPC peering

D.  

AWS Direct Connect

E.  

AWS Transit Gateway

Discussion 0
Questions 261

A company wants to store its files in the AWS Cloud. Users need to be able to download these files directly using a public URL.

Which AWS service or feature will meet this requirement?

Options:

A.  

Amazon Redshift

B.  

Amazon Elastic Block Store (Amazon EBS)

C.  

Amazon Elastic File System (Amazon EFS)

D.  

Amazon S3

Discussion 0
Questions 262

A company wants to add a conversational chatbot to its website.

Which AWS service can the company use to meet this requirement?

Options:

A.  

Amazon Textract

B.  

Amazon Lex

C.  

AWS Glue

D.  

Amazon Rekognition

Discussion 0
Questions 263

A company has a set of ecommerce applications. The applications need to be able to send messages to each other. Which AWS service meets this requirement?

Options:

A.  

AWS Auto Scaling

B.  

Elastic Load Balancing

C.  

Amazon Simple Queue Service (Amazon SOS)

D.  

Amazon Kinesis Data Streams

Discussion 0