11. Accompany is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users. The company must ensure that all users can view these Videos with low latency Which AWS service should the company use to meet this requirement? “A. AWS Auto Scaling +B. Amazon Kinesis Video Streams *C. Elastic Load Balancing mmm“, Anazon oan correct newer: ‘Amazon CloudFront can speed up the delivery of your static content (eg, images, style sheets, JavaScript, etc.) ‘to viewers across the globe. 2. Which pillar of the AWS Well Architected Framework refers tothe ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand? . Performance efficiency +D. Cost optimization Correct Answer: 8 Reliability requires that your workload be aware of failures as they occur and take action to avoid impact on availabilty. Workloads must be able to both withstand failures and automatically repair issues.'3, Which ofthe following are benefits of migrating to the AWS Cloud? (Choose two.) +A Operational resilience +8. Discounts for products on Amazon.com mmm ©. Business aity +0. Business excellence *E-norased staff retention Reference https://wwnw.easydeploy.io/blog/benefits-of-aws-migration/ 4, A company is planning to replace its physical on-premises compute servers with AWS serverless ‘compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration, Which pillar of the AWS Well-Architected Framework does this plan represent? “A. Security mmm) +8. Performance efficiency *C. Operational excellence sD. Reliability Correct Answer: B Evaluating performance efficiency of your architecture sing serverless architecture.5. Alarge company has multiple departments. Each department has its own AWS account, Each department has purchased Amazon EC2 Reserved Instances Some departments donot use all the Reserved Instances that they purchased, and other departments need ‘more Reserved Instances than they purchased The company needs to manage the AWS accounts fo allthe departments so thatthe departments can share the Reserved Instances, Which AWS service of ool should the company use to meet these requirements? “A. AWS Systems Manager *B. Cost Explorer CANS Trusted Advisor mm) “ANS Cosine Correct Answer: ‘with AWS Organizations you can reduce duplication of resources by sharing ctieal resources in your ‘organization using AWS Resource Access Manager (RAM). In addition, Organizations helps you comply With oftware leense agreements with AWS Lcense Manager and maintain 8 catalog of T Serves and custom products using AWS Service Catalog. 6. Which component ofthe AWS global infrastructure is made up af one or more disrete data centers that have redundant power, networking and connectivity? +A. AWS Region ==> +B. Availabilty Zone sC. Bdge location 0. AWS Outposts Correct Answer: 8 +n Availablity Zone (AZ) is one or more discrete data centers with redundant power, networking, and connectivity in an AWS Region. AZs give customers the ability to ‘operate production applications and databases that are more highly availabe, fault tolerant, and scalable than would be possible from a single data center.7. Which duties are the responsibilty of a company that is using AWS Lambda? (Choose two.) mm +A, Security inside of code “B.Selection of CPU resources *C, Patching of operating system ‘ED +0. Virting and updating of code +E. Secutity of underlying infrastructure Correct Answer: AD Lambda runs your code on high availability compute infrastructure and performs all the administration of your compute resources. This includes server and operating system ‘maintenance, capacity provisioning and automatic scaling, code and security patch deployment, and code monitoring and logging. All you need to do is supply the code, 8, Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.) A Reserved Instances +B. EC2 Amazon Machine Images (AMIs) *€. Amazon Clastic Dlock Store (Amazon CDS) snapshots “8, There are no infrastructure operating costs *C. There are no upfront cost commitments “D. There are no software licensing costs 31. A.company has 2 single Amazon EC? instance. The company wants to adopt 2 highly available architecture. ‘What can the company do to meet this requirement? “A. Scale vertically toa larger EC2 instance size. +B. Scale horizontally across multiple Avaliabilty Zones. “0, Purchase an EC2 Dedicated Instance “D. Change the EC2 instance family to a compute optimized instance.32. A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days. Which benefit has this company experienced by moving to the AWS Cloud? +A. Elasticity °8. Flext y mp «C. Agility +D. Resilience Correct Answer: C Elasticity -auto-saling capability Aalitycapabiliy to obtain new resources in a reduced time 33, Which of the following are included in AWS Enterprise Support? (Choose two.) +A. AWS technical account manager (TAM) +B. AWS partner-led support *C. AWS Professional Services +D. Support of third-party software integration to AWS. +E, S-minute response time for critical issues Correct Answer: AD34. A global media company uses AWS Organizations to manage multiple AWS accounts. Which AWS service or feature can the company use to limit the access to AWS services for member accounts? *A. AWS Identity and Access Management (IAM) ===} “8. Service control policies (SCPs) *C. Organizational units (0Us) +D. Access control ists (ACLs) Correct Answer: B AWS Organizations, you can centrally control permissions for the accounts in your ‘organization by using service control policies (SCPs). SCPs enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access. 35. A company wants to limit its employees’ AWS access to a portfolio of predefined AWS resources. Which AWS solution should the company use to meet this requirement? +A. AWS Config +B. AWS software development kits (SOKs) mm) -C. AWS Service Catalog =D. AWS AppSync ect Answ AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS, These IT services can include everything from virtual machine images, servers, software, and databases to complete multi- tier application architectures.36. An online company was running a workload on premises and was struggling to launch new products ‘and features. After migrating the workload to AWS, the company can quickly launch produets and features and can scale its infrastructure as required. Which AWS Cloud value proposition does this scenario describe? mm “A. Business agility “B. High availability “6. Security *D. Centralized auditing Correct Answé AWS Agility in AWS is the capability to quickly develop, test, and launching the application that inten helps you to boost your business. Accelerating Agility is one of the key advantages of AWS. 137. Which of the following are advantages ofthe AWS Cloud? (Choose two.) “A. AWS management of user-owned infrastructure B. Ability to quickly change required capacity +€. High economies of scale +D. Increased deployment time to market +E. Increased fixed expenses Correct Answ Advantages of the AWS Cloud + Trade fied expense for variable expense + Benefit from massive economies of scale + Stop guessing capacity + Increase speed and agility + Stop spending money running and maintaining data centers + Goglobal in minutes38. AWS has the ability to achieve lower pay-as-you-go pri thousands of users. This desoribes which advantage of the AWS Cloud? ing by aggregating usage across hundreds of *A. Launch globally in minutes B. Increase speed and agility EEE -C. High economies of scale . No quessing about compute capacity Correct Answer: C By using cloud computing, you can achieve a lower variable cost than you can get on your own. Because usage from hundreds of thousands of customers is aggregated in the cloud, providers ‘such as AWS can achieve higher economies of scale, which translates into lower pay as-you-go prices. 39, A company has a database server that is always running, The company hosts the server on ‘Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year. ‘Which EC2 instance purchasing option will meet these requirements MOST cost-effectively? “A, Standard Reserved Instances +B. On-Demand Instances *C. Spot Instances “D. Convertible Reserved Inetances Correct Answer: A ‘Amazon EC2 Reserved Instances (Rl) provide a significant discount (up to 72%) compared to (On-Demand pricing and provide a capacity reservation when used in a specific Availability Zone.40. A company is developing a mobile app that needs a high-performance NoSQL database. ‘Which AWS services could the company use for this database? (Choose two.) “A. Amazon Aurora +8. Amazon RDS +C. Amazon Redshift => 0. Amazon DocumentD8 (with MongoD8 compatibilty) => £ Amazon dynamoo8 RDS is a SQL based DB. Dynamo DB and Document DB. are the only No-SQL options. 41. Which tasks ate the responsibility of AWS, according tothe AWS shared responsibilty model? (Choose two.) “A, Patch the Amazon EC2 guest operating system, ‘mE B. Upgrade the firmware ofthe network infrastructure. “C. Apply password rotation for IAM users. “D. Maintain the physical security of edge locations. +E. Maintain least privilege access to the root user account.42. veh ofthe following ae features of network ACL a they ar used inthe AWS Cloud? (Choose two.) ma “A Tey resales “BT ere sttt 5. The eve al es before alloing tie ‘mp. They process esin restarting wh he lowest umber, when deing whether alow va ‘eine oper entre ee Correct Anewer: AD [Network ACLS are stateless, which means that responses to allowed inbound traffic are subject to the rules for outbound traffic (and vice versa) Rules are evaluated starting with the lowest numbered rule. As soon as a rule ‘matches trafic t's applied regardless of any higher-numbered rule that might contradict I. 43. Accompany has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes. Which pillar of the AWS WellArchitected Framework does this scenario represent? “A. Security +B. Performance efficiency +C. Cost optimization ==> +0. Operational excellence Correct Answer: D The Operational Excellence pillar includes the ability to support development and run workloads effectively, gain insight into their operations, and to continuously improve supporting ..44, Which AWS service or feature can be used to create a private connection between an on- premises workload and an AWS Cloud workload? “A. Amazon Route 53 “B. Amazon Macie *C. AWS Direct Connect Mmmm -D. AWS PrivateLink Correct Answer: D The keyword here is ‘workload’ which implies the application level of the OSI model. PrivateLink works at the application level and Direct Connect works at the network level 45, A company needs to graphically visualize AWS billing and usage over time. The company also needs Information about its AWS monthly costs. Which AWS Bling and Cost Management tool provides this data ina graphical format? A, AWS Bills mE -B. Cost Explorer *C. AWS Cost and Usage Report +0. AWS Budgets Correct Answer: B [AWS Cost Explorer includes a default report that helps you visualize the costs and usage associated with your top five cost-accruing AWS services, and gives you a detailed breakdown on all services in the table view. The reports let you adjust the time range to view historical data ‘going back up to twelve months to gain an understanding of your cost trends with graphical Tormat.46. A company wants to run production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week, ‘Which AWS Support plan will meet these requirements? *A. AWS Basie Support ‘AWS Enterprise Support +C. AWS Business Support +D. AWS Developer Support — Correct Answer: 8 With Enterprise Support, you get 24x7 technical support from high-quality engineers, tools and technology to automatically manage health of your environment, consultative architectural guidance delivered in the context of your applications and use-cases, and a designated Technical Account Manager (TAM) to coordinate access to proactive / preventative programs and AWS subject matter experts. AWS Enterprise Support is recommended if you have business and/or mission critical workloads in AWS, 47. Which architecture design principle describes the need to isolate failures between dependent ‘components in the AWS Cloud? “A. Use a monolithic design, “B. Design for automation. 45, Patch management = -c. Cloud awareness and training 1D. Zone security +E. Application data encryption Correct Answer: 2¢ ‘Shared Controls - Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide thelr own control implementation within thelr use of AWS services. Examples include: Patch Management - AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their quest OS and applications. Configuration Management - AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring thelr own guest operating systems, databases, and applications. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.63, A company is launching an application inthe AWS Cloud, The application will se Amazon $3 storage. A large team of researchers will have shared access tothe data. The company must be able to recover data that is accidentally overmiten or deleted \Wihich 83 feature should the company turn on to meet this requirement? +A. Server access logging EEE 8. $3 Versioning +. $3 Lifecycle rules +D- Encryption in transit and at rest Correct Answer: 8 Versioning-enabied buckets can help you recover objects from accidental deletion or overwrite. For example, ifyou delete an object, Amazon $3 Inserts a delete marker instead of removing the ‘object permanently. The delete marker becomes the current object version. Ifyou overwrite an ‘object, it results ina new object version in the bucket, You can always restore the previous version 64. A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency. Which AWS service or feature should the company use to meet these requirements? “A. Availability Zones ==> «3. AWS Local Zones *C. AWS Wavelength +D. AWS Outposts Correct Answer: 2 ‘AWS Local Zones are a type of AWS infrastructure deployment that place compute, storage, database, and other select services closer to large population, industry, and IT centers, enabling you to deliver applications that require single- digit millisecond latency to end-users.665. A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will ned to access on-premises resources. Which actions will meet these requirements? (Choose two.) “A. Use AWS Service Catalog to identify alist of on-premises resources that can be migrated +B. Create a VPN connection between an on-premises device and a virtual private gateway inthe VPC. *€. Use an Amazon CloudFront istribution and configure it to accelerate content delivery close tothe on- premises resources. “=D. Set up an AWS Direct Connect connection between the on-premises data center and AWS. +E. Use Amazon CloudFront to restrict access to static web content provided through the on-premises web seners, 66. A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment. ‘Which AWS service should the company use to meet this requirement? “A. Amazon $3 B. Amazon AppStream 2.0 *C. AWS AppSyne D. AWS Outposts Correct Answer: B AppStream 2.0 is a fully managed, secure application streaming service that allows you to stream desktop applications from AWS to an HTML 5 compatible web browser, without rewriting them.67. Accompany wants to implement threat detection on its AWS infrastructure. However, the company does ‘not want to deploy additional software. Which AWS service should the company use to meet these requirements? *A. Amazon VPC B. Amazon EC2 -C. Amazon GuardDuty “D. AWS Direct Connect Correct Answer: C ‘Amazon GuardDuty isa continuous security monitoring service that analyzes and processes data sources, such as AWS CloudTrall data events for Amazon $3 logs, CloudTrail management event logs, DNS logs, ‘Amazon EBS volume data, Kubernetes audit logs, and Amazon VPC flow logs. It uses threat intelligence feeds, such as lsts of malicious P addresses and domains, and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your AWS environment.68. Which AWS service uses edge locations? A. Amazon Aurora mmm) +8. AWS Global Accelerator *C. Amazon Connect *D. AWS Outposts Correct Answer: 8 AWS Global Accelerator combines advanced networking features with the dedicated AWS Global Network to improve your application network performance by up to 60%. TCP connections are terminated at the AWS Edge location closest to your users, instead of at your endpoint, accelerating data transfers globally. 69. A company needs to install an application in a Docker container. Which AWS service eliminates the need to provision and manage the container hosts? “A. AWS Fargate *B. Amazon FSx for Windows File Server C. Amazon Elastic Container Service (Amazon ECS) D. Amazon EC2 => Correct Answer: C ‘Amazon Elastic Container Service (Amazon ECS) is a highly scalable and fast container management service. You can use it to run, stop, and manage containers on a cluster. With Amazon ECS, your containers are defined in a task definition that you use to run an individual task or task within a service.70. Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies? “A. AWS Systems Manager ‘B. AWS IAM Access Analyzer *C. AWS Trusted Advisor -D. Amazon GuardDuty Correct Answer: B For some AWS services, such as Amazon EC2, IAM Access Analyzer can identify the actions found in your CloudTrail events and lists the actions used in the policy it generates. 71. A.company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, here there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later. Which AWS service should the company use to meet these requirements? *A.AWS loT Core +B. Amazon Lightsail lp °C. AWS Storage Gateway +0. AWS Snowball Edge Correct Answer: C [AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to Virtually unlimited cloud storage. You can use Storage Gateway to simplify storage management and reduce costs for key hybrid cloud storage use cases. These include moving. backups to the cloud, using on-premises file shares backed by cloud storage, and providing low-latency access to data in AWS for on-premises applications72. Aretail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones. Which AWS services should the company use to meet this requirement? (Choose two.) “A. Amazon EC2 “B, Amazon Elastic Block Store (Amazon EBS) *+€. Amazon Aurora “D. Amazon DynamoDB SE Amazon Redshift Correct Answer: AB ‘Amazon EBS volumes are placed in a specific Availability Zone where they are automatically replicated to protect you from the failure of a single component. All EBS volume types offer durable snapshot capabilities and are designed for 99.99% availability. 174, Service contra policies (SCPs) manage permissions fr which of the following? +A Avalabilty Zones +B. AWS Regions me. AS Organs 0. Ege locations Correct Answer: © ‘Ps and tag polices will be used to prevent users in AWS Organizations member accounts fom creating resources73. Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity? +A. Agility B. Elasticity C. Reliability +D. Durability Correct Answer: B the process of getting the resources dynamically when you actually require them and then release the resources when you are done and do not need them is known as elasticity. In another way, growing or shrinking the resources dynamically when needed75, Which AWS service can be used to encrypt date at rest? +A. Amazon GuardDuty +B. AWS Shield 0. AS Security Hub SEP «0. 2113 Key Management Service (AWS KMS) ‘AWS Key Management Service (KMS) ~AWS KMS i a managed sence that enables easy creation and control of encryption keys used to encrypt data KMS uses envelope encryption n which data Isencrypted using a data key thats then encrypted using 2 master. Master keys can also be used to encrypt and decrypt up to4klobytes of data. nour solution, luse KMS encryptidecryot APs to encrypt the encrypted filesystems password, See more information about envelope encryption 76. Which characteristics are advantages of using the AWS Cloud? (Choose two.) “A.A 100% service level agreement (SLA) for all AWS services mm +B. Compute capacity that is adjusted on demand +C. Availablity of AWS Support for code development mE} +). Enhanced security +E. Increases in cost and complexity Correct Answer: BD ‘Top 7 AWS Benefits and Advantages + User-friendly * Blexible + Secure * Cost-effective + Reliable Scalable and Elastic Highly Performant77. Kuseris storing objects in Amazon $3. The user needs to restrict access to the objects to meet compliance obligations. ‘What should the user do to meet this requirement? “A. Use AWS Secrets Manager. +B. Tag the objects in the $3 bucket sC. Use security groups. Him -0. Use network ACLs. Correct Answer: D Anetwork access control list (NACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets, 78. A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers. Which AWS service will meet these requirements? = -A. Amazon Elastic Transcoder 8. Amazon Comprehend *C. AWS Glue +D. Amazon Rekognition Correct Answer: A ‘Amazon Elastic Transcoder lets you convert media files, that you have stored in Amazon Simple Storage Service (Amazon $3) into media files in the formats required by consumer playback devices.79. Which of the following are benefits of Amazon EC2 Auto Scaling? (Choose two.) “A Improved health and availabilty of applications “+B. Reduced network latency *C. Optimized performance and costs *D. Automated snapshots of data +E. Cross-Region Replication Correct Answer: AC 80. A company has several departments. Each department has its own AWS accounts fo its applications. The company wants all AWS costs ona single invoice to simplify payment, but the company wants to know the costs that each department is incurring. Which AWS tool or feature wll provide this functionality? “A. AWS Cost and Usage Reports mp “5. Consolidated biling “C. Savings Pins “D. AWS Budgets Correct Answer: 8 AWS Organizations provides consolidated biling so that you can track the combined costs of all the member accounts in your organization.82. A company wants to eliminate the need to guess infrastructure capacity before deployments. The Company also wants to spend Its budget on cloud resources only asthe company uses the resources, Which advantage of the AWS Cloud matches the companys requirements? *A Reliability +8. Global reach Economies af scale SE +0. Payas-yougo pricing Correct Answer: 0£83, Which AWS service supports a hybrid architecture that gives users the ability to extend AWS Infrastructure, AWS services, APs, and tools to data centers o- location environments, or on premises foclties? “A. AMIS Snowmobile *B. AWS Local Zones mp 0. AUS Outposts +0. AWS Fargate Correct Answer: C [AWS Outposts is 2 family of fully managed solutions delivering AWS infrastructure and ‘services to vitally any on-premises or edge location for a truly consistent hybrid ‘experience. Outposts solutions allow you to extend and run native AWS services on premises, ‘andi available in a variety of form factors, from 1U and 2U Outposts servers to 42U Outposts ck, and multiple rack deployments 81. A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS, Which AWS service or tool can the company use to obtain this information? “A. AWS Pricing Caleulator +B. ANS Budgets *C. AWS Trusted Advisor +0. Cost Explorer ‘correct Anewer: D Cost Explorers cost forecast capabilities use machine learning to learn each ‘customers historical spend patterns, and use that information to forecast expected costs. You can generate your cost and usage forecasts via Cost Explorer's user interface, or explore your cost and usage data programmatically via the AWS Cost Explorer API,£84, A company has a physical tape library to store data backups. The tape library is running out of space ‘The company needs to extend the tape library's capacity to the AWS Cloud, Which AWS service should the company se to meet tis requirement? “A. Amazon Elastic Block Store (Amazon EBS) +B, Amazon 83 *C- Amazon Elastic File System (Amazon EFS) me +0. AWS Storage Gateway Correct Answer: D AWS Storage Gateway is a set of hybrid cloud storage services that provide on-premises access (0 virtually unlimited cloud storage. 85. An onlin retail company has seasonal sales spikes several times 2 yer, primarily eround holidays. Demands lower at othe times. The company fins it dificult to predic the increasing infrastructure demand for each season. ‘Wihich advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.) +A. Global footprint => 5. Elasticity *C- AWS service quotas +0: AWS shared responsibilty model EEE Pay asyougo pricing Correct Answer: BE Six advantages of cloud computing ‘Trade fired expense for variable expense ‘Benefit rom massive economies of scale Stop guessing capacity Increase speed and agility ‘Stop spending money running and maintaining data centers Go global in minutes86, Which AWS service canbe used totum text into lifelike speech? = ‘A. Amazon Polly *B. Amazon Kendra *C: Amazon Rekognition +0. Amazon Connect Correct Answer: ‘Amazon Polly uses deep learning technologies to synthesize natural-sounding human speech so you ‘an convert articles to speech. With dozens of elke voices across abroad Set of languages, use ‘Amazon Polly to build speech-acivate applications. 87, Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC? *A.VPC Flow Logs +8, Amazon Inspector +. VPC endpoint services +0. NAT gateway \VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC.£88, A company wants to ensure that two Amazon EC2 instances ae in separate data centers with minimal communication latency between the data centers. How can the company meet this requirement? “A. Place the EC2 instances in two separate AWS Regions connected with a YPC peeting conection, 8, Place the EC2 instances in two separate Availabilty Zones within the ‘same AWS Region. 10. Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection. “D.Place both EC2 instances ina placement group for dedicated bandwidth £89, nwhich situations should a company create an IAM user instead ofan AM role? (Choose two) “A. When an application that runs on Amazon EC? instances requires access to other AWS services| SEED 0. When the company creates AWS access credentials for individuals {C- When the company creates an application that runs on a mobile phone that makes requests to AWS =P -0. When the company needs to add users to|AM groups “E When users are authenticated in the corporate network and want to be able to use AWS without having to signin @ second time90. Which AWS services shoulda company use to read and write data that changes frequently? (Choose two) +A, Amazon $2 Glacier +8, Amazon RDS *C, AWS Snowball +0, Amazon Redshift +. Amazon Elastic File System (Amazon FS) Correct Answer: 8D 51. Which AWS service is used to provide encryption for Amazon EBS? “A. AWS Certificate Manager +B. AWS Systems Manager AWS KMS +0. AWS Config Correct Answer: C [AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic Keys and control their use across a wide range of AWS services and in your applications. AWS KMS Is a secure and resilient service that uses hardware security ‘modules that have been validated under FIPS 140-2, or are in the pracess of being validated, to protect your keys. AWS KMS is integrated with AWS CloudTrail to provide {you with lags af al key usage to help meet your regulatory and compliance needs.92. Which AWS services make use of global edge locations? (Choose two.) A. AWS Fargate se “8. Amazon CloudFront ‘mmm °C. AVIS Global Accelerator +D- AWS Wavelength +E Amazon VPC Correct Answs C ‘Amazon CloudFrant sa web service that speeds up distribution of your static and dynamic web conten, such astm .s5, Js, and image files, to your users. CloudFront devrs your content ‘through a worldwide network of datacenter called edge locations [AWS Global Accelerator is # networking service that improves the performance of your users'traffic by up to 60% using Amazon Web Services’ global network infrastructure. ‘When the internet is congested, AWS Global Accelerator optimizes the path to your application to keep packet loss, jitter, and latency consistently low. 93, A company is operating several factories whee it builds products, The company needs the ability to process dat, store data, and un applications wih local system interdependencies that require low latency. Which AWS service should the company use to meet these requitements? +A. AWS 1oT Greengrass mm) +8. AWS Lambda “0. AWS Outposts +0. AWS Snowball Edge Correct Answer: Lambda is @ compute service that lets you run code without provisioning or managing servers. Lambda runs your code on a high-availability compute infrastructure and performs all of the administration of the compute resources, including server and ‘operating system maintenance, capacity provisioning and automatic scaling, and logging, With Lambda, you can run code for virtually any type of application or backend service94, Which ofthe fllowing is a recommended design principle fr AWS Cloud architecture? “A. Design tightly coupled components “+B. Buld a single application component that can handle al the application furctonaiy, SD -C. Make large changes on fewer iterations to reduce chances o flue +D. Avoid monolithic architecture by segmenting workloads. ‘correct Answer: 98. A company is designing its AWS workloads so that components canbe updated regularly and so that changes can be made in small reversible increments. Which pillar of the AWS WelkArchitected Framework does this design support? “A. Security +B. Performance efficiency = -C. Operational excellence +D. Reliability Correct Answer: © Design principles for operational excellence in the cloud include performing operations. as code, annotating documentation, anticipating failure, and frequently making small, reversible changes.96, Which ofthe following acts as an nstance-level firewall to control inbound and outbound access? “+A. Network access conttl it “B.Secutty groups 0 AWS Trusted Advisor “sD. Virtual private gateways Correct Answer: 8 Security group Operates at the instance level, while Network ACL Operates at the subnet level 97. A company has workload that will run continuously for 1 year. The workload cannot tolerate sevice Interuptons. ‘Which Amazon EC2 purchasing option willbe MOST costeectve? EEE «A. Al Upfront Reserved instances +8. Partial Uptron Reserved Instances ‘Dedicated instances *D. ODenand stances Correct Answer:98. Which AWS service helps protect against DDoS attacks? EEE) «A, AWS Shield “8. Amazon Inspector *C. Amazon GuardDuty +0. Amazon Detective Correct Answer: [AWS Shield Standard and AWS Shield Advanced provide protections against Distributed Derial of Service (DDoS) attacks for AWS resources at the network and transport layers (layer 3 and 4) and the application layer (layer 7). DD0S attack is an attack in Which multiple compromised systems try to flood a target with trafic. ADDOS attack can prevent legitimate end users from accessing the target services and can cause the target to crash due to overwhelming traffic volume, 98. Using AWS Config to record, aut and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Arhiteced Framework pla? mm “A. Secu +B. Operational excellence +C: Performance efficiency +D. Cost optimization Correct Answer: A100. Which AWS too or feature ats asa VPC firewall tthe subnet level? “A, Security group EE +B, Network ACL +. Traffic Mroring +0: Internet gateway Correct Answer: 101. Which AWS service can be used to decouple applications? “A, AWS Contig ‘mmm +2. Amazon Simple Queue Service (Amazon S08) AWS Batch +0. Amazon Simple Emall Service (Amazon SES) Correct Answer: 8 ‘AWS SQS As one ofthe oldest services at AWS, SS has a track record of providing ‘an extremely simple and effective decoupling mechanism: The entire service is. based on sending messages to the queue and allowing for applications (ex. ECS ‘containers, Lambda functions) to poll for messages and process them.102. Which disaster recovery option isthe LEAST expensive? *A. Warm standby +8: Multisite Ep 0. Backup and restore +. Pilot ight. Correct Answer: C 103. Which type of AWS storage Is ephemeral ands deleted when an Amazon EC2 Instance is stopped or terminated? ‘A, Amazon Elastic Block Store (Amazon EBS) mp +8, Amazon EC2 instance store +. Amazon Elastic File System (Amazon EFS) +0, Amazon $3, ‘correct Answer: 8104. Which of the following is a characteristic ofthe AWS account root user? “A. The rot users the only user that canbe configured with multifactor Authentication (MFA), “B. The rot user is the only user that can access the AWS Management Console. ‘C. The rot user is the frst signin identity that i available when an AWS accounts created. +0. The root userhas a password that cannot be changed, 105. Acompany hosts an application on an Amazon EC? instance. The EC2 instance needs to access several ANS resources, including Amazon S3 and Amazon Dynamoo8, What is the MOST operationally efficient soltion to delegate permissions? ‘mp A. Create an IAM coe wth he requied permissions. Attach the Fole to the C2 instance +8, Create an AM user and use its access key and secret access key inthe application, =. Create an IAM user and use its access key and secret access key to create a CLI profilin the EC2 instance 1. Create an IAM roe wth the required permission. Attach the role to the administrative IAM user106. Which of the following isa component ofthe AWS Global Infrastructure? ‘A. Amazon Alexa me BAW Regions *C, Amazon Lightsail_ +. AWS Organizations 107., What isthe purpose of having an internet gateway within a VPO? *A.To create a VPN connection to the VPC +8. To allow communication between the VPC and the internet 0. To impose bandwidth constraints on internet traffic +. To load balance traffic from the intemet across Amazon EC2 instances Correct Answer: 8108, Which AWS senice allows users te download security and compliance reports about the AWS infrastructure on demand? A. Amazon GuardDuty 8, AWS Security Hub 0. AWS Artifact +0. AWS Shield Correct Answer: AWS Artfact your goto, central resource for compliance-elated information that matters to you. It provides on-demand access to AWS’ security and compliance reports and select online agreements Reports available in AWS Artifact include our Service Organization Control SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. ‘Agreements available in AWS Artfact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA 109. A pharmaceutical company operates it infrastructure ina single ANS Region, The company has thousands of VPCs in a various AWS accounts that it wants to interconnect. Wihich AWS service or feature should the company use to help simplify management and reduce operational costs? *A.VPC endpoint *B. AWS Direct Connect mm -C. AWS Transit Gateway “D. VPC peering ‘correct Answer: ¢110. A company i planning an infastrutute deployment tothe AWS Cloud. Before the eployment, the company wants a cost estimate for running the infastucture Wich AWS service or festure can provide this information? *A.Cost Explorer +8. AWS Trusted Advisor C. AWS Gost and Usage Report mm «0. AWS Pricin Calculator Correct Answer: ‘The AWS Pricing Calculators an estimation too! that provides an approximate cost of using AWS services based onthe usage parameters that you specify. The AWS Pricing Calculators not a quote tool, and does not guarantee the cost for your actual use of AWS services. The cost estimated by the AWS Pricing Caleulator may vary from your actual cost for a umber of reasons, 111. Which AWS service of to! helps to centrally manage bling and allow controlled access to resources across AWS accounts? ‘A. AWS Identity and Access Management (IAM) ‘me +B, AVS Organizations 0. Cost Explorer +. AWS Budgets Correct Answer: 8 AWS Organizations helps you to centrally manege bling, «control access, complanee, security, and share resources across Your AWS accounts. tis very easy setup and avaliable to all. AWS customers at no adltiona charge.112, Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources? *A Objects; access conto lists (ACL) ==> -B.Subnets;ntemet gateways *C. Access polices; buckets +. Groups; roles (Correct Answer: 8 Each VPC defines what your AWS resources need, Including: “IP addresses *Subnete “Routing Security “Networking functionality 113. Acompany needs to identity the last time that a specific user accessed the ANS Management Console. Which AWS service wil provide this information? A. Amazon Cognito ‘AWS CloudTrail *C- Amazon Inspector +D- Amazon GuardDuty — Correct Answer: ‘louarrall i enabled on your AWS account when you create it. When activity occurs in Your AWS account, that activity i recorded in 3 CloudTrall event. You can easily View Fecent events inthe CloudTrall console by going to Event history.1114. Acompany launched an Amazon EC? instance with the atest Amazon Linux 2 Amazon Machine {mage (AM). Which ations can a system administrator take to connect tothe EC2 instance? (Choose two.) EEE «A, Use Amazon EC? Instance Connect. +8, Use @ Remote Desktop Protocol (RDP) connection. Use AWS Batch (mE +0. Use AWS Systems Manager Session Manager. *E-Use Amazon Connect Correct Answer: AD 1115. Acompany wants to perform sentiment analysis on customer service email messages that it receives. The company wants to identify whether the customer service engagement was postive ornegative Which AWS service should the company use to perform ths analysis? “+A. Amazon Textact +B. Amazon Translate mp -C. Amazon Comprehend 1D. Amazon Rekogntion Correct Answer: ‘Amazon Comprehend uses natural language processing (NLP) to extract insights about the content of documents116, What the total amount of storage offered by Amazon $3? A. 100MB “056 “0.578 ==) +0. Unimites (Correct Answer: 0 ‘83 storage capacity: Unlimited (figuratively) $3 object size: Minimum of bytes to a maximum of § 78 117. A company is migrating to Amazon $3. The company needs to transfer 60 TB of data from an ‘ompremises data center to AWS within 10 days, Which AWS service should the company use to accomplish tis migration? “A. Amazon $3 Glaler “B. AWS Database Migration Service (AWS DMS) ‘AWS Snowball “0. AWS Direct Connect Correct Answer: C Snowballs a petabyte-scale data transport solution that uses devices designed to be ‘secure to transfer large amounts of data into and out of the AWS Cloud. Using Snowball ‘addresses common challenges with argerscale data transfers including high network costs, long transfer times, and security concerns.118 What type of database Is Amazon DynamoDB? A Inmemory 8 Relational (Correct Answer: C ‘Amazon DynamoDB is a fully managed, serveriess, key- value NoSQl database designed to run high-performance applications at any scale. 119, Alarge organization has a single AWS account What ae the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two) EEE 1 slows fr ainsi itlaton betwen iterent wants, “Esau can beep one quate bass subritingcses he AWS Management Gono *C Tantei Amazon 83 a Aaron S lace spurte AWS cecum wilbe les pense ‘D-navgmulpeaccorteduces ths associated wih alos actty ingeled ats se ercou “Eaton Gli afer aces a cost ol that poe pletion pete ‘ecommendatone fr enoners unig uli scm Correct Answer: AD120. A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected ftom SOL injection attacks. The website uses an Application Lad Balancer to distribute traffic to multiple Amazon EC2 instances. Which AWS service or feature canbe used to create a custom rule that blacks SQL injection attacks? “A, Security groups ‘mp 3. AWS WAF Network ACL +. AWS Shield Correct Answer: 8 AWS WAF uses log files to analyze application activity t generates attack patterns that you can use to keep track ofthe ongoing security threats and their impact on your AWS ‘account. When AWNS WAF launches, it analyzes your app's logs for attack patterns and blocks malicious requests before they reach your servers. 121. Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources? A, AWS ClouaTeall +B, AWS Personal Health Dashboard *C, AWS Trusted Advisor HB 0. Amazon Cloudivatch Correct Answer: You can proactively manage your quotas by configuring Amazon CloudWatch alarms that monitor Usage and alert you to approaching quotas. Service Quotas also integrates with AWS Organizations to help you easily set up quotas in new accounts.122. Which of the following i an advantage that users experience when they move on-premises workloads tothe AWS Cloud? REED 4. :iiston of expenses fring and minting ata centers “2 Pc locas tet ere eral acon tom heer povies “© Detbton of a opertonal ont t AS ‘D-Elmnaton of operon expences, 128, Which design principle is included inthe operational excellence pil ofthe AWS WelHArchitected Framework? “A Create anotated documentation. mm 2, Anticiat are “©. Ensure performance eceny. “0. Optimize cost. Correct Answer: Design principles for operational excellence in the cloud include pperforming operations as code, annotating documentation, anticipating failure, and frequently making small, reversible changes,124. Which AWS services offer gateway VPC endpoints that canbe used to avoid sending tuffic ovr the internet? (Choose two.) “A. Amazon Simple Noifiction Serie (Amazon SNS) +B. Amazon Simple Queve Service (Amazon $08) C. AMS Coded mm 0. Amazon $3 ‘mmm +E. Amazon DynamoDB Correct Answer: DE VPC Endpoints + Endpoint allow you to connect to [AWS Services using a private network instead of the public wow network “This ges you enhanced Security and lower latency to access AWS services * VPC Endpoint Gateway: 53 & DynamoD8 «VPC Endpoint Interface: the vest 125, Which of the following isthe customer responsible for updating and patching, according tothe AWS shared responsiblity model? “A. Amazon FSx for Windows File Server ‘mmm 5, Amazon WorkSpaces virtual Windows desktop ‘sC. AWS Director Service for Microsoft Active Directory 0. Amazon ROS for Microsoft SQL Server Correct Answer: 8 Itis recommend that you regularly patch, update, and secure the ‘operating system and applications on your WorkSpaces.126. Who has the responsibility o patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model? *A.Both AWS and the customer +8. The customer only *C. The EC2 hardware manufacturer mp 0.5 ni Correct Answer: D This shared mode! can help relieve the customer's operational burden as AWS. ‘operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilites in which the service operates. 127. Acompany is using an Amazon RDS DB instance fr an application that is deployed inthe AWS Cloud, The company needs regular patching of the operating system ofthe server where the DB instance run, What isthe companys responsibilty inthis situation, according tothe AWS shared responsibilty model? ‘A. Open a support case to obtain administrative acess to the server so thatthe company can patch the DB instance operating system, ‘mmm “2. Open a support case and request that AWS patch the DB instance operating system. C-Use administrative access 1 the server, and apply the operating system patches during the regular maintenance window that is defined forthe OB instance. +. Establish aregulat maintenance window tha els AWS when to patch the DB instance operating system, Correct Answer: 8128, Why isan AWS Well-Architected review a rtcal part ofthe cloud design process? ‘A. AWelkArchitected review is mandatory before a workload can run on AWS. B.A WellArchitected review heps identify design gaps and helps evaluate design decisions and elated documents. C. AWelFArchitected review isan audit mechanism thet is pat of requirements for service level agreements, -D-AWellctectd review eliminates te ned for onan audtn and compliance tests Correct Answer: 129, Acompany implements an Amazon EC? Auto Sealing policy alongwith an Application Load Balancer to automaticaly recover unhealthy applications that run on ‘Amazon EC2 instances. Which pillar of the AWS Wel-Archtected Framework does this action cover? “A Secutty +B. Performance efficiency +C. Operational excellence 0. Reliability (Correct Answer: 0 The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions130. Which AWS Cloud benefit is shown by an architecture's ability to withstand failure with rmiimal downtime? A. Aty +B Elasticity s€. Scalability ED «0. High as ‘correct Answer: 0 131. Under the AWS shared responsibilty model, which task is the customer's responsibilty when ‘managing AWS Lambe functions? ‘A. Creating versions of Lambda functions *B. Maintaining server and operating systems *C:Scaling Lambda resources according to demand +D. Updating the Lambda runtime environment182, What does the AWS Concierge Support team provide? “+A Atechnical expert dedicated tothe user ‘mmsp +8. A primary point of contact for AWS Bling and AWS Support SC. partne to help provide scaling quidance for an event launch “D.A dedicated AWS staf member who reviews the user's pplication architecture Corect Answer: B [AWS Support Concierge Included as part ofthe Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize In working with enterprise accounts, 133. Acompany needs to generate reports that can break down cloud costs by produc, by ‘company-defined tas, and by hour, day, and month ‘Which AWS tool should the company use to meet these requirements? ‘A. Reserved Instance ullization and coverage reports +8. Savings Plan ullizaton reports 0. AWS Budgets reports > “0. AWS Cost and Usage Reports (Correct Answer: 0 With AWS Cost and Usage Reports (CUR), you can review, itemize, and organize the most Comprehensive cost and usage data for your account.134. A company has a serveriess aplication that includes an Amazon API Gateway AP, ‘an ANS Lambda function, and an Amazon Oynamo0B database. Which AWS service can the company use to race user requests as they move through the application's components? *A. AWS ClousTrail +B. Amazon CloudWatch C. Amazon Inspector mmmp 1D. AS Xo ‘correct Answer: 0 AWS X-Ray provides a complete view of requests as they travel ‘through your application and fiers vsual data across payloads, Tunetions, traces, services, APs, and more with no-code and low-code motions 135. A company needs to set up a petabyte-scale data warehouse inthe AWS Cloud Which AWS service wll meet this requirement? ‘A Amazon DynameDB +B. Amazon ROS 1, Amazon Redshift ‘0. Amazon ElatiCache ‘Amazon Redshift isa fas, fully managed, petabyte-scale data warehouse ‘service that makes it simple and cost-effective to efficiently analyze all your data using your existing business intelligence tools.136, Which AWS services always provided at no charge? +A. Amazon $3 =P +8. AWS identity and Access Management (IAM) +, Elastic Load Balancers +, AWS WAF 137. A company needs to design an AWS disaster recavery plan to cover multiple geographic areas Which action wil meet ths requirement? ‘A. Configure multiple AWS accounts, 8. Configure the architecture across multiple Avalabilty Zones inan AWS Region, ‘==> «C. Configure the architecture across multiple AWS Regions. +D- Configure the architecture among many edge location.138. Which of the following is & benefit of moving from an on-premises date center to the AWS Cloud? mmm) +A, Compute instances canbe launched and terminated as needed to optimize costs. +8, Compute costs canbe viewed inthe AWS Bling and Cost. Management console 0. Users retain ful administrative access to their compute instances. +. Users can optimize cost by permanently running enough instances at peak load Correct Answer: A 129. In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.) EEE 21/5 replaces upfront capital expenditures with pay-as-yougo costs. *B. AWS is designed for high availabilty, which eliminates user downtime. *C, AWS eliminates the need for on-premises I staf. +0. AWS uses economies of scale to continually reduce prices. +E. AWS offers a single pricing mode for Amazon EC? instances. Correct Answer: AC“40. Which AWS service monitors AWS accounts for security threats? mp4. Amazon Guardduty “B. AWS Secrets Manager *€. Amazon Cognito “0. AWS Cerificate Manager (ACM) Correct Answer: ‘Amazon GuardDuty isa threat detection service that, continuously monitors your AWS accounts and ‘workloads for malicious activity and delivers detailed ‘security findings for visibility and remediation 141. Which benefits included with an AWS Enterprise Support plan? “A. AWS Partner Network (APN) support a no cost. Designated support from an AWS technical account manager 0) Onsite support from AWS engineers 0. AWS managed compliance as code with AWS Config \with Enterprise Support, you get 247 technical support from high-quality engineers tools and technology to automatically manage health of your envionment, consultative architectural {guidance delivered in the context of your applications and use-cases, and a designated Technical ‘Account Manager (TAM) to coordinate acces to proactive / preventative programs and AWS subject matter experts. AWS Enterprise Supporti recommended if you have business and/or risioncrtcal warkloads in AWS,“V2. Which task does AWS perform automaticaly? ‘A Encrypt data that is stored in Amazon DynamoDB. +B. Patch Amazon EC2 instances. C. Encrypt user network trafic +D. Create TLS certificates for users websites. Correct Answer: Eneryption in DynamoDB tables is by default. “143. Which AWS service or tool can a company use to visualize, understand, and ‘manage AWS spending and usage overtime? *A.AWS Trusted Advisor +8. Amazon CloudWatch mp <0 Cost ore +. AWS Budgets“44. Acompany wants to deploy some ofits resources inthe AWS Cloud. To meet regulatory requirements the data must remain local and on premises. There must be low latency between ‘AWS andthe company resources. Which AWS service or feature canbe used to meet these requirements? med *A, AVIS Local Zones 8 Avalality Zones 0. AWE Outpoots +D. AWS Wavelength Zones. [AWS Local Zone : Run low-latency applications at the edge Bulld and deploy ‘applications close to end users to enable real-time gaming, live streamin. ‘augmented and virtual reality (AR/VR), virtual workstations, and more, Simplify hybrid cloud migrations Migrate your applications to a nearby AWS Local Zone, while stl meeting the low-latency requirements of hybrid deployment, 145, & company requires an isolated environment within AWS for security purposes. Which action can be taken to accomplish this? “A Create separate Aralabilty Zonet host the resources smmmap “3. reste separate VPC to host the resources. “C. este a placement group to host the resources. “>. eat an ANS Diet Connect connection between the Company and AWS. Correct Answer: 8 ‘virtual private cloud (VPC) sa virtual networkin your own logiealy isolated area in the AWS Cloud, Use separate VPCS to isolate infrastructure by workload or organizational entity.ri retro rotons ning soy nena tare vat etn en gh ak rt ‘peyrnt pecan en aN? amecntaner ie explanation: + cgtenaisneegEc ini cocci acer elparecb/masirlery that pov set aconminsetr er npn cth hy eet ‘rorecemi mt epost + cptonsisnCOMEC AN coat y mongadconchtagtin sth corer cc ne padre kes 294 + egtoneuIcomEc i coset trang aac srs mats uy arctan toss are ‘SSteoeponogerinesnter star sate ete + geno comer ns can raya ob an apy apn nN sl AE Castro aad rn eng yes ‘neogeyarscheoe doce sterner pee ach