Which AWS service helps protect against DDoS attacks?

A. AWS Shield

B. Amazon Inspector

C. Amazon GuardDuty

D. Amazon Detective

In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.)

A. AWS replaces upfront capital expenditures with pay-as-you-go costs.

B. AWS is designed for high availability, which eliminates user downtime.

C. AWS eliminates the need for on-premises IT staff.

D. AWS uses economies of scale to continually reduce prices.

E. AWS offers a single pricing model for Amazon EC2 instances.

Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co- location environments, or on-premises facilities?

A. AWS Snowmobile

B. AWS Local Zones

C. AWS Outposts

D. AWS Fargate

A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month.
Which AWS tool should the company use to meet these requirements?

A. Reserved Instance utilization and coverage reports

B. Savings Plans utilization reports

C. AWS Budgets reports

D. AWS Cost and Usage Reports

A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted.
Which S3 feature should the company turn on to meet this requirement?

A. Server access logging

B. S3 Versioning

C. S3 Lifecycle rules

D. Encryption in transit and at rest

Which of the following are included in AWS Enterprise Support? (Choose two.)

A. AWS technical account manager (TAM)

B. AWS partner-led support

C. AWS Professional Services

D. Support of third-party software integration to AWS

E. 5-minute response time for critical issues

A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances.
Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased.
The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances.
Which AWS service or tool should the company use to meet these requirements?

A. AWS Systems Manager

B. Cost Explorer

C. AWS Trusted Advisor

D. AWS Organizations

A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.
Which AWS solution should the company use to meet this requirement?

A. AWS Config

B. AWS software development kits (SDKs)

C. AWS Service Catalog

D. AWS AppSync

A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.
Which Amazon EC2 purchasing option will be MOST cost-effective?

A. All Upfront Reserved Instances

B. Partial Upfront Reserved Instances

C. Dedicated Instances

D. On-Demand Instances

Which AWS service can be used to turn text into lifelike speech?

A. Amazon Polly

B. Amazon Kendra

C. Amazon Rekognition

D. Amazon Connect

Which AWS service or tool should a company use to centrally request and track service limit increases?

A. AWS Config

B. Service Quotas

C. AWS Service Catalog

D. AWS Budgets

Which documentation does AWS Artifact provide?

A. Amazon EC2 terms and conditions

B. AWS ISO certifications

C. A history of a company’s AWS spending

D. A list of previous-generation Amazon EC2 instance types

According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?

A. Manage connections to the database

B. Install Microsoft SQL Server

C. Design encryption-at-rest strategies

D. Apply minor database patches

Which AWS service or feature allows users to connect with and deploy AWS services programmatically?

A. AWS Management Console

B. AWS Cloud9

C. AWS CodePipeline

D. AWS software development kits (SDKs)

A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes.
Which pillar of the AWS Well-Architected Framework does this scenario represent?

A. Security

B. Performance efficiency

C. Cost optimization

D. Operational excellence

A company wants to improve the overall availability and performance of its applications that are hosted on AWS.
Which AWS service should the company use?

A. Amazon Connect

B. Amazon Lightsail

C. AWS Global Accelerator

D. AWS Storage Gateway

Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)

A. ׀•׀¡2 Reserved Instances

B. EC2 Amazon Machine Images (AMIs)

C. Amazon Elastic Block Store (Amazon EBS) snapshots

D. AWS Shield

E. Amazon GuardDuty

A company plans to create a data lake that uses Amazon S3.
Which factor will have the MOST effect on cost?

A. The selection of S3 storage tiers

B. Charges to transfer existing data into Amazon S3

C. The addition of S3 bucket policies

D. S3 ingest fees for each request

A company needs to simultaneously process hundreds of requests from different users.
Which combination of AWS services should the company use to build an operationally efficient solution?

A. Amazon Simple Queue Service (Amazon SQS) and AWS Lambda

B. AWS Data Pipeline and Amazon EC2

C. Amazon Kinesis and Amazon Athena

D. AWS Amplify and AWS AppSync

A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days.
Which AWS service should the company use to accomplish this migration?

A. Amazon S3 Glacier

B. AWS Database Migration Service (AWS DMS)

C. AWS Snowball

D. AWS Direct Connect

What does the AWS Concierge Support team provide?

A. A technical expert dedicated to the user

B. A primary point of contact for AWS Billing and AWS Support

C. A partner to help provide scaling guidance for an event launch

D. A dedicated AWS staff member who reviews the user’s application architecture

A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations.
What should the user do to meet this requirement?

A. Use AWS Secrets Manager.

B. Tag the objects in the S3 bucket.

C. Use security groups.

D. Use network ACLs.

A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.
Which AWS service should the company use to meet these requirements?

A. AWS IoT Greengrass

B. AWS Lambda

C. AWS Outposts

D. AWS Snowball Edge

A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs.
Which AWS Billing and Cost Management tool provides this data in a graphical format?

A. AWS Bills

B. Cost Explorer

C. AWS Cost and Usage Report

D. AWS Budgets

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

A. EC2 key pairs

B. AWS Systems Manager Session Manager

C. AWS Identity and Access Management (IAM)

D. Network ACLs

A company is developing a mobile app that needs a high-performance NoSQL database.
Which AWS services could the company use for this database? (Choose two.)

A. Amazon Aurora

B. Amazon RDS

C. Amazon Redshift

D. Amazon DocumentDB (with MongoDB compatibility)

E. Amazon DynamoDB

What type of database is Amazon DynamoDB?

A. In-memory

B. Relational

C. Key-value

D. Graph

A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application.
Which AWS solution should the company use to meet these requirements?

A. Amazon EC2 On-Demand Instances

B. AWS Lambda

C. Amazon EC2 Reserved Instances

D. Amazon EC2 Spot Instances

Which duties are the responsibility of a company that is using AWS Lambda? (Choose two.)

A. Security inside of code

B. Selection of CPU resources

C. Patching of operating system

D. Writing and updating of code

E. Security of underlying infrastructure

Which of the following are benefits of migrating to the AWS Cloud? (Choose two.)

A. Operational resilience

B. Discounts for products on Amazon.com

C. Business agility

D. Business excellence

E. Increased staff retention

A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users. The company must ensure that all users can view these videos with low latency.
Which AWS service should the company use to meet this requirement?

A. AWS Auto Scaling

B. Amazon Kinesis Video Streams

C. Elastic Load Balancing

D. Amazon CloudFront

What is the total amount of storage offered by Amazon S3?

A. 100MB

B. 5 GB

C. 5 TB

D. Unlimited

Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?

A. Both AWS and the customer

B. The customer only

C. The EC2 hardware manufacturer

D. AWS only

Which of the following is a characteristic of the AWS account root user?

A. The root user is the only user that can be configured with multi-factor authentication (MFA).

B. The root user is the only user that can access the AWS Management Console.

C. The root user is the first sign-in identity that is available when an AWS account is created.

D. The root user has a password that cannot be changed.

Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?

A. Security

B. Operational excellence

C. Performance efficiency

D. Cost optimization

Which AWS service is always provided at no charge?

A. Amazon S3

B. AWS Identity and Access Management (IAM)

C. Elastic Load Balancers

D. AWS WAF

Which task requires using AWS account root user credentials?

A. Viewing billing information

B. Changing the AWS Support plan

C. Starting and stopping Amazon EC2 instances

D. Opening an AWS Support case

Which of the following acts as an instance-level firewall to control inbound and outbound access?

A. Network access control list

B. Security groups

C. AWS Trusted Advisor

D. Virtual private gateways

Which AWS service or feature acts as a firewall for Amazon EC2 instances?

A. Network ACL

B. Elastic network interface

C. Amazon VPC

D. Security group

Which AWS services should a company use to read and write data that changes frequently? (Choose two.)

A. Amazon S3 Glacier

B. Amazon RDS

C. AWS Snowball

D. Amazon Redshift

E. Amazon Elastic File System (Amazon EFS)

A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month.
How can the user see if a change was made?

A. Use Amazon EC2 to see if the security group was changed.

B. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group.

C. Use AWS CloudTrail to see if the security group was changed.

D. Use Amazon CloudWatch to see if the security group was changed.

Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

A. VPC Flow Logs

B. Amazon Inspector

C. VPC endpoint services

D. NAT gateway

A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.
Which AWS service or feature will help the company with its migration?

A. AWS Trusted Advisor

B. AWS Consulting Partners

C. AWS Artifacts

D. AWS Managed Services

Service control policies (SCPs) manage permissions for which of the following?

A. Availability Zones

B. AWS Regions

C. AWS Organizations

D. Edge locations

Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?

A. Cost allocation tags

B. Key pairs

C. Amazon Inspector

D. AWS Trusted Advisor

A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.
Which purchase option meets these requirements MOST cost-effectively?

A. Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load.

B. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances.

C. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate.

D. Buy Reserved Instances to cover all potential usage that results from the seasonal usage.

A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next
12 months.
What is the MOST cost-effective instance purchasing option that meets these requirements?

A. Spot Instances

B. Savings Plans

C. Dedicated Hosts

D. On-Demand Instances

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

A. AWS Service Catalog

B. AWS Systems Manager

C. AWS IAM Access Analyzer

D. AWS Organizations

AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users.
This describes which advantage of the AWS Cloud?

A. Launch globally in minutes

B. Increase speed and agility

C. High economies of scale

D. No guessing about compute capacity

An online company was running a workload on premises and was struggling to launch new products and features. After migrating the workload to AWS, the company can quickly launch products and features and can scale its infrastructure as required.
Which AWS Cloud value proposition does this scenario describe?

A. Business agility

B. High availability

C. Security

D. Centralized auditing