Page 2 of 36 · 719 total questions.
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
The correct answer is A. Option A: AWS Direct Connect
Explanation
AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS.
Which option is a physical location of the AWS global infrastructure?
The correct answer is B. Option B: AWS Region.
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks. Which pillar of the AWS Well-Architected Framework is supported by these goals?
The correct answer is B. Option B: Security.
What is the purpose of having an internet gateway within a VPC?
The correct answer is B. Option B: To allow communication between the VPC and the internet.
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices. Which best practice of the AWS Well-Architected Framework is the company following with this plan?
The correct answer is D. Option D: Implement loosely coupled dependencies.
A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. Which AWS service or tool will meet this requirement?
The correct answer is C. Option C: IAM credential report
Explanation
AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.
A company wants to receive a notification when a specific AWS cost threshold is reached. Which AWS services or tools can the company use to meet this requirement? (Choose two.)
The correct answer is B, D. Option B: AWS Budgets Option D: Amazon CloudWatch
Explanation
Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Budgets alerts on cost and usage thresholds.
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
The correct answer is D. Option D: AWS Knowledge Center.
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
The correct answer is A, B. Option A: Configure the AWS provided security group firewall. Option B: Classify company assets in the AWS Cloud.
Explanation
AWS Config tracks resource configuration changes and evaluates compliance.
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
The correct answer is B, E. Option B: Reliability Option E: Operational excellence.
Which AWS service or feature is used to send both text and email messages from distributed applications?
The correct answer is A. Option A: Amazon Simple Notification Service (Amazon SNS)
Explanation
Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.
A user needs programmatic access to AWS resources through the AWS CLI or the AWS API. Which option will provide the user with the appropriate access?
The correct answer is B. Option B: Access keys.
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours. Which pricing model enables the company to optimize costs and meet these requirements?
The correct answer is B. Option B: Spot Instances
Explanation
Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
The correct answer is A, C. Option A: The speed at which AWS resources are implemented Option C: The ability to experiment quickly.
A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement?
The correct answer is A. Option A: AWS WAF
Explanation
AWS WAF protects web applications from common exploits and malicious requests.
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
The correct answer is C. Option C: AWS IAM Access Analyzer
Explanation
AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?
The correct answer is B. Option B: Download the reports from AWS Artifact.
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company’s direct responsibility?
The correct answer is A. Option A: Cost of application software licenses.
A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?
The correct answer is C. Option C: Turn on multi-factor authentication (MFA) for added security during the login process.
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
The correct answer is B, E. Option B: The ability to rightsize resources as demand shifts Option E: How easily resources can be procured when they are needed.
Showing questions 21–40 of 719 · Page 2 of 36
