Under the shared responsibility model, which of the following is the customer responsible for?
AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes
The use of what AWS feature or service allows companies to track and categorize spending on a detailed level?
Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities?
What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas?
A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house.Which of the following AWS programs can a customer take advantage of to achieve that outcome?
Distributing workloads across multiple Availability Zones supports which cloud architecture design principle?
Which AWS services can host a Microsoft SQL Server database? (Choose two.)
Which of the following inspects AWS environments to find opportunities that can save money for users and also improve system performance?
Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses?
Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Choose two.)
Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWSSDKs?
Which of the following are characteristics of Amazon S3? (Choose two.)
Which services can be used across hybrid AWS Cloud architectures? (Choose two.)
What costs are included when comparing AWS Total Cost of Ownership (TCO) with on-premises TCO?
A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes.Which service should the company use?
Which of the following is a correct relationship between regions, Availability Zones, and edge locations?
Which AWS tools assist with estimating costs? (Choose three.)
Which of the following are advantages of AWS consolidated billing? (Choose two.)
Which of the following Reserved Instance (RI) pricing models provides the highest average savings compared to On-Demand pricing?
Compared with costs in traditional and virtualized data centers, AWS has:
A characteristic of edge locations is that they:
Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users?
Which of the following security-related actions are available at no cost?
Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value?
Which AWS feature will reduce the customer's total cost of ownership (TCO)?
Which of the following services will automatically scale with an expected increase in web traffic?
Where are AWS compliance documents, such as an SOC 1 report, located?
Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Choose two.)
Which is a recommended pattern for designing a highly available architecture on AWS?
According to best practices, how should an application be designed to run in the AWS Cloud?
AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.)
Which AWS services should be used for read/write of constantly changing data? (Choose two.)
What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)?
A customer needs to run a MySQL database that easily scales.Which AWS service should they use?
Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links?
Which of the following is a shared control between the customer and AWS?
How many Availability Zones should compute resources be provisioned across to achieve high availability?
One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is:
What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval?
Which AWS IAM feature allows developers to access AWS services through the AWS CLI?
Which of the following is a fast and reliable NoSQL database service?
What is an example of agility in the AWS Cloud?
Which service should a customer use to consolidate and centrally manage multiple AWS accounts?
What approach to transcoding a large number of individual video files adheres to AWS architecture principles?
For which auditing process does AWS have sole responsibility?
Which feature of the AWS Cloud will support an international company's requirement for low latency to all of its customers?
Which of the following is the customer's responsibility under the AWS shared responsibility model?
A customer is using multiple AWS accounts with separate billing.How can the customer take advantage of volume discounts with minimal impact to the AWS resources?
Which of the following are features of Amazon CloudWatch Logs? (Choose two.)
Which of the following is an AWS managed Domain Name System (DNS) web service?
A customer is deploying a new application and needs to choose an AWS Region.Which of the following factors could influence the customer's decision? (Choose two.)
Which storage service can be used as a low-cost option for hosting static websites?
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
What is the AWS customer responsible for according to the AWS shared responsibility model?
Which of the following AWS Cloud services can be used to run a customer-managed relational database?
A company is looking for a scalable data warehouse solution.Which of the following AWS solutions would meet the company's needs?
Which statement best describes Elastic Load Balancing?
Which of the following are valid ways for a customer to interact with AWS services? (Choose two.)
The AWS Cloud's multiple Regions are an example of:
Which of the following AWS services can be used to serve large amounts of online video content with the lowest possible latency? (Choose two.)
Web servers running on Amazon EC2 access a legacy application running in a corporate data center.What term would describe this model?
What is the benefit of using AWS managed services, such as Amazon ElastiCache and Amazon Relational Database Service (Amazon RDS)?
Which service provides a virtually unlimited amount of online highly durable object storage?
Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS CommandLine Interface (AWS CLI)?
Which of the following security-related services does AWS offer? (Choose two.)
Which AWS managed service is used to host databases?
Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers?
Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources. It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files, eliminating the need to provision and manage capacity to accommodate growth.Amazon EFS is designed to provide the throughput, IOPS, and low latency needed for Linux workloads. Throughput and IOPS scale as a file system grows and can burst to higher throughput levels for short periods of time to support the unpredictable performance needs of file workloads. For the most demanding workloads, Amazon EFS can support performance over 10 GB/sec and up to 500,000 IOPS.
When architecting cloud applications, which of the following are a key design principle?
Which AWS service should be used for long-term, low-cost storage of data backups?
Under the shared responsibility model, which of the following is a shared control between a customer and AWS?
Which AWS service allows companies to connect an Amazon VPC to an on-premises data center?
A company wants to reduce the physical compute footprint that developers use to run code.Which service would meet that need by enabling serverless architectures?
Which AWS service provides alerts when an AWS event may impact a company's AWS resources?
Which of the following are categories of AWS Trusted Advisor? (Choose two.)
Like your customized cloud expert, AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations in five categories: cost optimization, performance, security, fault tolerance and service limits.https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
Which task is AWS responsible for in the shared responsibility model for security and compliance?
AWS Compliance enables customers to establish and operate in an AWS security control environment
The shared responsibility model is part of AWS Compliance program
The Security of the cloud is managed by Amazon AWS provider
The Security in the cloud is responsibility of the customer
The customer is responsible for their information and data, their secure transmission, integrity, and encryption
Also, the customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2
AWS customers retain control and ownership of their data
The AWS network provides significant protection against traditional network security issues and the customer can implement further protection
Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS?
AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on AWS.https://aws.amazon.com
Which of the following is a benefit of using the AWS Cloud?
When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)?
Which AWS service provides the ability to manage infrastructure as code?
If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use?
What is Amazon CloudWatch?
Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts?
Which of the following services could be used to deploy an application to servers running on-premises? (Choose two.)
Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?
Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Choose two.)
Which is the MINIMUM AWS Support plan that allows for one-hour target response time for support cases?
Where can AWS compliance and certification reports be downloaded?
Which AWS service provides a customized view of the health of specific AWS services that power a customer's workloads running on AWS?
Which of the following is an advantage of consolidated billing on AWS?
Which of the following steps should be taken by a customer when conducting penetration testing on AWS?
Which of the following AWS features enables a user to launch a pre-configured Amazon Elastic Compute Cloud (Amazon EC2) instance?
To use Amazon EC2, you simply:
Select a pre-configured, templated Amazon Machine Image (AMI) to get up and running immediately. Or create an AMI containing your applications, libraries, data, and associated configuration settings.
Configure security and network access on your Amazon EC2 instance.
Choose which instance type(s) you want, then start, terminate, and monitor as many instances of your AMI as needed, using the web service APIs or the variety of management tools provided.
Determine whether you want to run in multiple locations, utilize static IP endpoints, or attach persistent block storage to your instances.
Pay only for the resources that you actually consume, like instance-hours or data transfer.https://aws.amazon.com/ec2/features/
How would an AWS customer easily apply common access controls to a large set of users?
What technology enables compute capacity to adjust as loads change?
Which AWS services are defined as global instead of regional? (Choose two.)
Which AWS service would you use to obtain compliance reports and certificates?
Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Choose two.)
Which AWS service can be used to manually launch instances based on resource requirements?
A company is migrating an application that is running non-interruptible workloads for a three-year time frame.Which pricing construct would provide the MOST cost-effective solution?
The financial benefits of using AWS are: (Choose two.)
Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?
Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster? (Choose two.)
Which of the following is an AWS Cloud architecture design principle?
Loose coupling between services can also be done through asynchronous integration. It involves one component that generates events and another that consumes them. The two components do not integrate through direct point-to-point interaction, but usually through an intermediate durable storage layer. This approach decouples the two components and introduces additional resiliency. So, for example, if a process that is reading messages from the queue fails, messages can still be added to the queue to be processed when the system recovers.
Which of the following security measures protect access to an AWS account? (Choose two.)
If you decided to create service accounts (that is, accounts used for programmatic access by applications running outside of the AWS environment) and generate access keys for them, you should create a dedicated service account for each use case. This will allow you to restrict the associated policy to only the permissions needed for the particular use case, limiting the blast radius if the credentials are compromised. For example, if a monitoring tool and a release management tool both require access to your AWS environment, create two separate service accounts with two separate policies that define the minimum set of permissions for each tool.
Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?
Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?
Which of the following is an important architectural design principle when designing cloud applications?
Which AWS support plan includes a dedicated Technical Account Manager?
Amazon Relational Database Service (Amazon RDS) offers which of the following benefits over traditional database management?
Which service is best for storing common database query results, which helps to alleviate database access load?
Which of the following is a component of the shared responsibility model managed entirely by AWS?
Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.)
Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Choose two.)
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. You have complete control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways. You can use both IPv4 and IPv6 in your VPC for secure and easy access to resources and applications.You can easily customize the network configuration for your Amazon VPC. For example, you can create a public-facing subnet for your web servers that has access to the Internet, and place your backend systems such as databases or application servers in a private-facing subnet with no Internet access. You can leverage multiple layers of security, including security groups and network access control lists, to help control access to Amazon EC2 instances in each subnet.
If each department within a company has its own AWS account, what is one way to enable consolidated billing?
How do customers benefit from Amazon's massive economies of scale?
Which AWS services can be used to gather information about AWS account activity? (Choose two.)
AWS offers a solution that uses AWS CloudTrail to log account activity, Amazon Kinesis to compute and stream metrics in real-time, and Amazon DynamoDB to durably store the computed data. Metrics are calculated for create, modify, and delete API calls for more than 60 supported AWS services. The solution also features a dashboard that visualizes your account activity in real-time.
Which of the following common IT tasks can AWS cover to free up company IT resources? (Choose two.)
In which scenario should Amazon EC2 Spot Instances be used?
Which AWS feature should a customer leverage to achieve high availability of an application?
This is to achieve High Availability for any web application (in this case SwiftCode) deployed in AWS. The following features will be present:
High availability across multiple instances/multiple availability zones.
Auto Scaling of instances (scale up and scale down) based on number of requests coming in
Additional Security to the instances/database that are in production
No impact to end users during newer version of code deployment
No Impact during patching the instance
Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs?
Which AWS service can serve a static website?
How does AWS shorten the time to provision IT resources?
What can AWS edge locations be used for? (Choose two.)
CloudFront delivers your content through a worldwide network of data centers called edge locations. When a user requests content that you're serving withCloudFront, the user is routed to the edge location that provides the lowest latency (time delay), so that content is delivered with the best possible performance.
Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?
A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle?
A company will be moving from an on-premises data center to the AWS Cloud.What would be one financial difference after the move?
How should a customer forecast the future costs for running a new web application?
Which is the MINIMUM AWS Support plan that provides technical support through phone calls?
Which of the following tasks is the responsibility of AWS?
One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is:
An administrator needs to rapidly deploy a popular IT solution and start using it immediately.Where can the administrator find assistance?
Which of the following services is in the category of AWS serverless platform?
Which services are parts of the AWS serverless platform?
According to the AWS shared responsibility model, what is the sole responsibility of AWS?
Which AWS IAM feature is used to associate a set of permissions with multiple users?
Which of the following are benefits of the AWS Cloud? (Choose two.)
Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?
What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called?
Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.)
Which of the following services provides on-demand access to AWS compliance reports?
As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?
When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.)
Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.)
The hardware related jobs is the prime responsibility of AWS. VPC network access control lists is something a customer has to do himself to secure the applications. Encrypting data in transit and at rest is a shared responsibility in which AWS plays a part. All hardware related jobs have nothing to do with the customer.https://dzone.com/articles/aws-shared-responsibility-model-cloud-security
Which scenarios represent the concept of elasticity on AWS? (Choose two.)
When is it beneficial for a company to use a Spot Instance?
A company is considering moving its on-premises data center to AWS.What factors should be included in doing a Total Cost of Ownership (TCO) analysis? (Choose two.)
How does AWS charge for AWS Lambda?
What function do security groups serve related Amazon Elastic Compute Cloud (Amazon EC2) instance security?
Which disaster recovery scenario offers the lowest probability of down time?
Backup and Restore: a simple, straightforward, cost-effective method that backs up and restores data as needed. Keep in mind that because none of your data is on standby, this method, while cheap, can be quite time-consuming.
Pilot Light: This method keeps critical applications and data at the ready so that it can be quickly retrieved if needed.
Warm Standby: This method keeps a duplicate version of your business' core elements running on standby at all times, which makes for a little downtime and an almost seamless transition.
Multi-Site Solution: Also known as a Hot Standby, this method fully replicates your company's data/applications between two or more active locations and splits your traffic/usage between them. If a disaster strikes, everything is simply rerouted to the unaffected area, which means you'll suffer almost zero downtime. However, by running two separate environments simultaneously, you will obviously incur much higher costs.
What will help a company perform a cost benefit analysis of migrating to the AWS Cloud?
Which of the following provides the ability to share the cost benefits of Reserved Instances across AWS accounts?
A company has multiple AWS accounts and wants to simplify and consolidate its billing process.Which AWS service will achieve this?
A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data.Which of the following services will help fulfill this requirement?
Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?
How is asset management on AWS easier than asset management in a physical data center?
What feature of Amazon RDS helps to create globally redundant databases?
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
Which methods can be used to identify AWS costs by departments? (Choose two.)
Tags are key-value pairs that allow you to organize your AWS resources into groups. You can use tags to:
Visualize information about tagged resources in one place, in conjunction with Resource Groups.
View billing information using Cost Explorer and the AWS Cost and Usage report.Send notifications about spending limits using AWS Budgets.Use logical groupings of your resources that make sense for your infrastructure or business. For example, you could organize your resources by:
Project
Cost center
Development environment
Application
Department
Under the AWS shared responsibility model, customer responsibilities include which one of the following?
Which managed AWS service provides real-time guidance on AWS security best practices?
Which feature adds elasticity to Amazon EC2 instances to handle the changing demand for workloads?
Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.)
With the basic Cloud infrastructure secured and maintained by AWS, the responsibility for what goes into the cloud falls on you. This covers both client and server side encryption and network traffic protection, security of the operating system, network, and firewall configuration, followed by application security and identity and access management.Firewall configuration remains the responsibility of the end user, which integrates at the platform and application management level. For example, RDS utilizes security groups, which you would be responsible for configuring and implementing.
Which AWS hybrid storage service enables on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?
What is a responsibility of AWS in the shared responsibility model?
Which architectural principle is used when deploying an Amazon Relational Database Service (Amazon RDS) instance in Multiple Availability Zone mode?
What does it mean to grant least privilege to AWS IAM users?
What is a benefit of loose coupling as a principle of cloud architecture design?
A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet.Which service will facilitate private hybrid connectivity?
A company's web application currently has tight dependencies on underlying components, so when one component fails the entire web application fails.Applying which AWS Cloud design principle will address the current design issue?
How can a customer increase security to AWS account logons? (Choose two.)
Your root account should always be protected by Multi-Factor Authentication (MFA). This additional layer of security helps protect against unauthorized logins to your account by requiring two factors: something you know (a password) and something you have (for example, an MFA device). AWS supports virtual and hardware MFA devices and U2F security keys.Cognito can be used as an Identity Provider (IdP), where it stores and maintains users and credentials securely for your applications, or it can be integrated withOpenID Connect, SAML, and other popular web identity providers like Amazon.com.Using Amazon Cognito, you can generate temporary access credentials for your clients to access AWS services, eliminating the need to store long-term credentials in client applications.
What AWS service would be used to centrally manage AWS access across multiple accounts?
Which AWS service can a customer use to set up an alert notification when the account is approaching a particular dollar amount?
What can users access from AWS Artifact?