Page 3 of 36 · 719 total questions.
Which service enables customers to audit API calls in their AWS accounts?
The correct answer is A. Option A: AWS CloudTrail
Explanation
AWS CloudTrail records API activity for auditing and governance.
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
The correct answer is A. Option A: Managing the code within the Lambda function
Explanation
AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.
A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis. Which AWS service should the company use to run these queries in the MOST cost-effective manner?
The correct answer is B. Option B: Amazon Athena
Explanation
Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. This option delivers the requirement at the lowest cost.
Which AWS service can be used at no additional cost?
The correct answer is C. Option C: AWS Organizations
Explanation
AWS Organizations centrally governs and secures multiple AWS accounts.
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
The correct answer is C. Option C: Cloud fluency.
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost. Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
The correct answer is C, D. Option C: Reserved Instances Option D: Savings Plans
Explanation
Reserved Instances lower cost for steady-state, predictable long-running workloads. Savings Plans reduce cost for consistent compute usage in exchange for a usage commitment. This option delivers the requirement at the lowest cost.
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible. Which AWS service or resource should the company use to select its Amazon RDS deployment area?
The correct answer is C. Option C: AWS Regions.
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned. Which AWS service or feature can be used to estimate costs before deployment?
The correct answer is B. Option B: AWS Pricing Calculator.
A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?
The correct answer is A. Option A: Deliver the content through Amazon CloudFront.
Explanation
Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option delivers the requirement at the lowest cost.
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
The correct answer is C. Option C: Lower variable costs over fixed costs.
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?
The correct answer is C. Option C: AWS Cloud Development Kit (AWS CDK)
Explanation
The AWS CDK defines cloud infrastructure as code using familiar programming languages.
A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs. Which AWS service or feature should the company use to meet these authentication requirements?
The correct answer is C. Option C: AWS Security Token Service (AWS STS).
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?
The correct answer is A. Option A: AWS Security Hub
Explanation
AWS Security Hub centralizes security findings and compliance checks.
Which AWS service is always provided at no charge?
The correct answer is B. Option B: AWS Identity and Access Management (IAM)
Explanation
AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.
To reduce costs, a company is planning to migrate a NoSQL database to AWS. Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
The correct answer is C. Option C: Amazon DynamoDB
Explanation
Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. This option delivers the requirement at the lowest cost.
A company is using Amazon DynamoDB. Which task is the company’s responsibility, according to the AWS shared responsibility model?
The correct answer is C. Option C: Manage database access permissions.
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously. Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
The correct answer is C. Option C: Spot Instances
Explanation
Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. This option delivers the requirement at the lowest cost.
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
The correct answer is A. Option A: Amazon Macie
Explanation
Amazon Macie discovers and protects sensitive data such as PII in S3.
Which of the following services can be used to block network traffic to an instance? (Choose two.)
The correct answer is A, C. Option A: Security groups Option C: Network ACLs.
Which AWS service can identify when an Amazon EC2 instance was terminated?
The correct answer is B. Option B: AWS CloudTrail
Explanation
AWS CloudTrail records API activity for auditing and governance.
Showing questions 41–60 of 719 · Page 3 of 36