A. AWS Budgets
B. AWS Total Cost of Ownership (TCO) Calculator
C. Cost Explorer
D. AWS Well-Architected Tool
Correct Answer: B
A. Use multiple Availability Zones
B. Design for automated failure recovery
C. Test for moderate demand to ensure reliability
D. Manage changes via documented processes
E. Backup recovery to an on-premises environment
Correct Answer: BD
A. Remove MFA tokens.
B. Rotate passwords and access keys.
C. Move resources to a different AWS Region.
D. Contact AWS Support.
E. Delete AWS CloudTrail Resources.
Correct Answer: BD
A. Consulting AWS technical support at any time day or night
B. Making any AWS service available for use by paying on demand
C. Ensuring an application remains accessible, even if a resource fails
D. Deploying in any part of the world using AWS Regions
Correct Answer: C
A. Amazon Inspector
B. AWS Shield
C. AWS Web Application Firewall (AWS WAF)
D. Elastic Load Balancing (ELB)
Correct Answer: B
A. AWS CloudTrail
B. AWS Cost and Usage report
C. Amazon CloudWatch
D. Amazon Simple Notification Service (Amazon SNS)
Correct Answer: C
A. A group associated with an AWS resource
B. A user associated with an AWS resource
C. An entity that defines a set of permissions for use with an AWS resource
D. An authentication credential associated with a multi-factor authentication (MFA) token
Correct Answer: B
A. They provide access to additional instance types.
B. They provide a discount over on-demand pricing.
C. Customers can reserve capacity in an Availability Zone.
D. They provide additional networking capability.
E. Customers can upgrade instances as new types become available.
Correct Answer: BC
A. They automatically add more instances across multiple AWS Regions based on global demand of the application.
B. They enable the application’s static content to reside closer to end users.
C. They automatically add or replace instances across multiple Availability Zones when the application needs it.
D. They are able to distribute incoming requests across a tier of web server instances.
Correct Answer: C
A. By using Amazon EC2 Dedicated Instances
B. By using the AWS Cost Explorer tool
C. By using AWS Organizations consolidated billing
D. By using AWS Budgets
Correct Answer: C
A. 3 hours, 5 minutes
B. 4 hours
C. 3 hours, 5 minutes, and 6 seconds
D. 3 hours, 6 minutes
Correct Answer: B
A. AWS CodeDeploy
B. AWS Lambda
C. Amazon Glacier
D. AWS Organizations
E. Amazon Elastic Container Service (Amazon ECS)
Correct Answer: BE
A. Amazon GameLift
B. AWS Data Pipeline
C. AWS CloudFormation
D. AWS Glue
Correct Answer: C
A. AWS Direct Connect
B. AWS Storage Gateway
C. Amazon EBS
D. Amazon CloudFront
E. Amazon Connect
Correct Answer: AB
A. AWS CloudHSM
B. AWS VPN
C. AWS Direct Connect
D. Amazon Connect
Correct Answer:C
A. AWS Shield
B. Amazon CloudFront
C. Amazon RDS
D. Amazon EC2
E. Amazon ElastiCache
Correct Answer: BD
A. AWS Direct Connect
B. Amazon VPC
C. AWS Directory Service
D. Amazon API Gateway
Correct Answer: B
A. AWS Cost Explorer
B. AWS Budgets
C. AWS Total Cost of Ownership (TCO) Calculator
D. AWS Cost and Usage report
Correct Answer: C
A. AWS Marketplace data encryption is managed by a third-party vendor.
B. Users pay for software by the hour or month depending on licensing.
C. AWS Marketplace eliminates the need to upgrade to newer software versions.
D. AWS Marketplace enables the user to launch applications with 1-Click.
E. Users can deploy third-party software without testing.
Correct Answer: BD
A. Loosely coupled components.
B. Scale up, not out.
C. Build monolithic systems.
D. Use commercial database software.
Correct Answer: A
A. Firmware upgrades of network infrastructure
B. Patching of operating systems
C. Patching of the underlying hypervisor
D. Physical security of data centres
E. Configuration of the security group
Correct Answer:BE
A. AWS Config
B. AWS Trusted Advisor
C. Amazon GuardDuty
D. Amazon Inspector
Correct Answer: A
A. AWS CloudTrail
B. Amazon CloudWatch
C. AWS Trusted Advisor
D. Amazon Inspector
Correct Answer: C
A. It is solely the responsibility of the customer.
B. It is solely the responsibility of AWS.
C. It is not part of the AWS shared responsibility model.
D. It is shared between AWS and the customer.
Correct Answer: D
A. AWS CloudFormation
B. Amazon CloudFront
C. AWS Direct Connect
D. Amazon Pinpoint
Correct Answer: B
A. Security
B. Elasticity
C. Reliability
D. High availability
Correct Answer: B
A. AWS Technical Account Manager
B. AWS Solutions Architect
C. AWS Abuse team
D. AWS Premium Support
Correct Answer: C
A. There are no upfront commitments.
B. Users have access to free and unlimited storage.
C. Users have control over the physical infrastructure.
D. AWS manages all security in the cloud.
E. Users have the ability to provision resources on demand.
Correct Answer: DE
A. log in to the AWS Management Console.
B. log in to Amazon EC2 instances.
C. make programmatic calls to AWS from AWS APIs.
D. authenticate to AWS CodeCommit repositories.
Correct Answer: C
A. It is an online tool with a set of automated checks that provides recommendations on cost optimization,
B. It is an AWS staff member who provides recommendations and best practices on how to use AWS.
C. It is a network of AWS partners who provide recommendations and best practices on how to use AWS.
D. It is another name for AWS Technical Account Managers who provide recommendations on cost
optimization, performance, and security.
Correct Answer: A
A. AWS Budgets
B. AWS Organizations
C. Consolidated billing
D. AWS Cost Explorer
Correct Answer: D
A. AWS CloudTrail
B. AWS Health
C. AWS Artefact
D. Amazon CloudWatch
Correct Answer: C
A. Amazon CloudFront has multiple edge locations around the world to reduce latency.
B. Amazon Comprehend allows users to build applications that can respond to user requests in many languages.
C. Companies can deploy applications in multiple AWS Regions to reduce latency.
D. Amazon Translate automatically translates third-party website interfaces into multiple languages.
E. Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world,which reduces latency.
Correct Answer: AB
A. AWS Config
B. Amazon Route 53
C. AWS Elastic Beanstalk
D. Amazon CloudFront
Correct Answer: C
A. AWS IAM
B. Amazon VPC
C. Amazon Connect
D. Amazon API Gateway
Correct Answer: B
A. Coupling
B. Security
C. Durability
D. Availability
Correct Answer: D
A. requires payment up front for AWS services.
B. reduces capital expenditures.
C. is relevant only for Amazon EC2, Amazon S3, and Amazon RDS.
D. reduces operational expenditures.
Correct Answer: B
A. Lifecycle management of IAM credentials
B. Encryption of Amazon EBS volumes
C. Physical security of global infrastructure
D. Firewall configuration
Correct Answer: C
A. Amazon QuickSight
B. AWS Budgets
C. Amazon Forecast
D. AWS Organizations
Correct Answer: D
A. Managing edge locations
B. Firewall configuration
C. Physical security
D. Global infrastructure
Correct Answer: C
A. AWS Trusted Advisor
B. AWS Senior Support Engineers
C. AWS Technical Account Managers
D. AWS Discussion Forums
Correct Answer: A
A. Security
B. Multiple Availability Zones
C. Encryption usage
D. High availability
E. Performance efficiency
Correct Answer: AE
A. All upfront payment
B. No upfront payment
C. Hourly on-demand payment
D. Partial upfront payment
Correct Answer: A
A. There is a lower risk of service failure if a natural disaster causes a service disruption in a given AWS Region.
B. There will be better coverage as Availability Zones are geographically distant and can serve a wider area.
C. The application will have higher availability because it can withstand a service disruption in one Availability Zone.
D. There will be decreased application latency that will improve the user experience.
Correct Answer: C
A. Inform the user that AWS pricing allows for on-demand pricing.
B. Use Amazon QuickSight to analyse current spending on-premises.
C. Direct the user to the AWS Simple Monthly Calculator for an estimate.
D. Use Amazon AppStream 2.0 for real-time pricing analytics.
Correct Answer: B
A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated.
B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC.
C. Connect the company’s on-premises data centre to AWS using AWS Direct Connect.
D. Use Amazon Athena to query data from the on-premises database servers.
E. Leverage Amazon CloudFront to restrict access to static web content provided through the company’s
on-premises web servers.
Correct Answer: BC
A. AWS IAM
B. AWS WAF
C. Amazon GuardDuty
D. Amazon Simple Notification Service (Amazon SNS)
Correct Answer: B
A. automate migration of on-premises hardware to AWS data centres.
B. automate the infrastructure provisioning process.
C. let a third party automate an audit of the AWS infrastructure.
D. turn over application code to AWS so it can run on the AWS infrastructure.
Correct Answer: C
A. AWS VPN
B. Amazon API Gateway
C. AWS Direct Connect
D. Amazon Connect
Correct Answer: C
A. AWS Glue
B. Amazon Athena
C. AWS Data Pipeline
D. Amazon CloudSearch
Correct Answer: B
A. update application code.
B. set up data lakes.
C. model and provision resources.
D. create reports for billing.
Correct Answer: C
A. Amazon Elastic Block Store (Amazon EBS)
B. Amazon S3 Glacier
C. Amazon Redshift
D. AWS Snowball
Correct Answer: C
A. Run AWS Trusted Advisor and review the findings.
B. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0.
C. Open the AWS IAM console and check the inbound rule filters for open access.
D. In AWS Config, create a custom rule that invokes an AWS Lambda function to review rules for inbound access.
Correct Answer: B
A. AWS makes it easy to architect for high availability.
B. AWS can easily accommodate application demand changes.
C. AWS automatically distributes the data globally for higher durability.
D. AWS will take care of operating the application.
E. AWS takes care of application security patching.
Correct Answer: AB
A. EC2 security groups
B. Amazon Inspector
C. AWS Config
D. Amazon Macie
Correct Answer: B
A. Use different accounts for production and non-production expenses.
B. Create Identity and Access Management (IAM) roles for production and non-production workloads.
C. Use Amazon EC2 for non-production workloads and other services for production workloads.
D. Use Amazon CloudWatch to monitor the use of services.
Correct Answer: A
A. AWS Marketplace
B. AWS Service Catalog
C. AWS Quick Start
D. AWS CodeDeploy
Correct Answer: B
A. Amazon S3
B. Amazon S3 Glacier
C. AWS Snowball
D. Amazon Redshift
Correct Answer: B
A. Increased IT staff.
B. User control of infrastructure.
C. Capital expenses are replaced with variable expenses.
D. AWS holds responsibility for security in the cloud.
E. Increased agility.
Correct Answer: CE
A. Amazon GuardDuty
B. Amazon Inspector
C. Amazon Macie
D. AWS Shield
Correct Answer: C
A. It ensures on-premises data storage is 99.999999999% durable.
B. It connects on-premises data storage to the AWS Cloud.
C. It transports petabytes of data to and from AWS.
D. It connects to multiple Amazon EC2 instances.
Correct Answer: B
A. Install the application using multiple internet gateways.
B. Deploy the application to an Amazon VPC.
C. Configure the application using multiple NAT gateways.
D. Deploy the application to multiple AWS Regions.
Correct Answer: D
A. Elasticity
B. Scalability
C. High Availability
D. Agility
Correct Answer: C
A. AWS VPN
B. AWS Direct Connect
C. Amazon Connect
D. AWS Data Pipeline
Correct Answer: B
A. AWS and the customer share responsibility.
B. The customer is responsible.
C. AWS is responsible.
D. AWS shares responsibility with the relevant governing body.
Correct Answer: A
Correct Answer: D
A. AWS Certificate Manager
B. AWS KMS
C. AWS Systems Manager
D. AWS Config
Correct Answer: B
A. By the number of requests made for a given Lambda function.
B. By the total number of Lambda functions in an AWS account.
C. By the time it takes for the Lambda function to execute.
D. By the number of versions of a specific Lambda function.
E. By the programming language that is used for the Lambda function.
Correct Answer: AB
A. There are more AWS Regions than Availability Zones.
B. An edge location is an Availability Zone.
C. There are more edge locations than AWS Regions.
D. There are more Availability Zones than AWS Regions
E. There are more AWS Regions than edge locations.
.Correct Answer: CD
A. WAF rules
B. Identity and Access Management (IAM) permissions and access to resources
C. DDoS protection
D. Data encryption
Correct Answer: C
A. The cost of writing custom-built Java or Node .js code
B. Penetration testing for security
D. Writing specific test cases for third-party applications.
C. hardware required to support new applications
Correct Answer: D
A. Sell unused Amazon EC2 Spot Instances.
B. Purchase AWS security and compliance documents.
C. Sell solutions to other AWS users.
D. Buy third-party software that runs on AWS.
E. Order AWS Snowball.
Correct Answer: CD
A. All resources run using on-premises infrastructure.
B. Some resources run on-premises and some run in the AWS Cloud.
C. Some resources run on-premises and some run in a colocation center.
D. All resources run in the AWS Cloud.
Correct Answer: B
A. Amazon Inspector
B. AWS Service Catalog
C. AWS Config
D. AWS IAM
Correct Answer: C
A. By having no responsibility for third-party licence costs
B. By having no operational expenditures
C. By minimising large capital expenditures
D. By having AWS manage applications
Correct Answer: C
A. Ensuring Amazon EBS volumes are backed up
B. Ensuring network connectivity from AWS to the internet
C. Patching and fixing flaws within the AWS Cloud infrastructure
D. Ensuring the physical security of cloud data centres
Correct Answer: A
A. Fixed rate monthly cost
B. Increased upfront capital expenditure
C. No need to guess capacity requirements
D. Increased speed to market
E. Physical access to cloud data centres
Correct Answer: CD
A. The cost of purchasing and installing server hardware in the on-premises data.
B. The cost of administering the infrastructure, including operating system and software installations,patches, backups, and recovering from failures.
C. The credit card processing fees for application transactions in the cloud.
D. The costs of third-party penetration testing.
E. The advertising costs associated with an ongoing enterprise-wide campaign.
Correct Answer: AB
A. Service control policies (SCPs)
B. All Upfront Reserved Instances
C. Consolidated billing
D. AWS Cost Explorer
Correct Answer: C
A. Virtualization infrastructure
B. Network infrastructure
C. Physical security of hardware
D. Application security
Correct Answer: D
A. Using a second Availability Zone in the AWS Region that is using used
B. Using an AWS Region that is central to all users
C. Enabling caching in the AWS Region that is being used
D. Using edge locations to put content closer to all users
Correct Answer: B
A. The AWS Cloud infrastructure is much faster than an on-premises data centre infrastructure.
B. AWS takes over application configuration management on behalf of users.
C. Users do not have to wait for infrastructure provisioning.
D. Users do not need to address security and compliance issues.
Correct Answer: C
A. AWS Organizations
B. AWS QuickSight
C. Amazon Lightsail
D. Amazon Connect
Correct Answer: A
A. Amazon Reserved Instances
B. Provisioned IOPS storage
C. Multiple Availability Zones
D. Enhanced monitoring
Correct Answer: C
A. AWS Shield
B. AWS Abuse team
C. AWS Support
D. AWS Developer Forums
Correct Answer: B
A. Amazon Simple Notification Service (Amazon SNS)
B. AWS CloudTrail
C. VPC Flow Logs
D. AWS CloudHSM
Correct Answer: B
A. Tight coupling of components
B. Single point of failure
C. Over Provisioning of resources
D. High availability
Correct Answer: D
A. By replacing large variable costs with lower capital investments
B. By allowing the provisioning of compute and storage at a fixed level to meet peak demand
C. By replacing large capital investments with lower variable costs
D. By replacing the repeated scaling of virtual servers with a simpler fixed-scale model
Correct Answer: B
A. Amazon VPC subnet ACLs to check the health of a service
B. AWS Auto Scaling for Amazon EC2 instances
C. Distributed resources across multiple Availability Zones
D. AWS Server Migration Service (AWS SMS) to move Amazon EC2 instances into a different Region
E. Distributed resources across multiple AWS points of presence
Correct Answer: BC
A. Distribute the compute load across multiple resources
B. Create fixed dependencies among application components
C. Aggregate services on a single instance
D. Deploy applications in a single Availability Zone
Correct Answer: A
A. Recommend that the same password be used on AWS and other sites
B. Require IAM users to store their passwords in raw text
C. Disable multi-factor authentication (MFA) for IAM users
D. Require IAM users to change their passwords after a specified period of time
E. Prevent IAM users from reusing previous passwords
Correct Answer: DE
A. Ask for a quote from the AWS Marketplace team to perform a migration into the company’s AWS account.
B. Select a partner from the AWS Partner Network (APN) to assist with the migration
C. Contact AWS Support and open a case for assistance
D. Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company’s AWS account
E. Use Amazon Connect to create a new request for proposal (RFP) for expert assistance in migrating to the AWS Cloud.
Correct Answer: CD
A. Supporting application development
B. Answering billing and account inquiries
C. Providing architectural guidance
D. Answering questions regarding technical support cases
Correct Answer: B
A. being highly available
B. having elasticity
C. having global reach
D. using an economy of scale
Correct Answer: B
A. AWS Regions
B. subnets
C. Availability Zones
D. placement groups
Correct Answer: C
A. AWS Trusted Advisor
B. AWS Simple Monthly Calculator
C. Cost Explorer
D. AWS Total Cost of Ownership (TCO) Calculator
Correct Answer: D
A. Enable billing alerts in the AWS Billing and Cost Management console.
B. Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level.
C. Purchase the Reserved Instances from the master payer account and turn off Reserved Instance sharing.
D. Enable Reserved Instance sharing in the AWS Billing and Cost Management console.
Correct Answer: C
A. In Availability Zone has a service disruption
B. A user has trouble accessing an Amazon S3 bucket from an AWS IP address
C. An intrusion attempt is made from an AWS IP address
D. A user needs to change payment methods due to a compromise
Correct Answer: C
A. Application Load Balancer
B. AWS Direct Connect
C. AWS Lambda
D. Amazon CloudFront
E. AWS Global Accelerator
Correct Answer: DE
A. Amazon EC2 instances
B. Amazon Lightsail
C. AWS Lambda
D. Amazon ElastiCache
Correct Answer: C
A. Objects
B. Buckets
C. Access key
D. Subnets
E. Internet gateways
Correct Answer: DE
A. prevent a given user from creating a resource
B. set resource limits in AWS accounts to prevent overspending
C. send an alert when the utilisation of Reserved Instances drops below a certain percentage
D. split an AWS bill across multiple forms of payment
Correct Answer: B
A. AWS Secrets Manager
B. Password policies
C. AWS Certificate Manager
D. AWS Multi-Factor Authentication (AWS MFA)
E. Security groups
Correct Answer: BD
A. AWS service outages
B. Available software patches
C. Number of users in the account
D. Information on Amazon S3 bucket permissions
E. Multi-factor authentication enabled on the AWS account root user
Correct Answer: DE
A. Create and manage keys for encryption and decryption of data
B. Create and manage AWS access keys for the AWS account root user
C. Create and manage AWS access keys for an AWS account IAM user
D. Create and manage keys for multi-factor authentication
Correct Answer: A
A. It identifies software vulnerabilities in applications running on AWS
B. It automatically corrects potential security issues caused by permissions settings on account resources
C. It provides proactive alerting whenever an Amazon EC2 instance has been compromised
D. It provides a list of cost optimization recommendations based on current AWS usage
E. It detects potential security vulnerabilities caused by permissions settings on account resources
Correct Answer: DE
QUESTION 107
Which of the following are advantages of the AWS Cloud? (Choose two.)
A. AWS manages the security of applications built on AWS
B. AWS manages the maintenance of the cloud infrastructure
C. AWS manages the development of applications on AWS
D. AWS manages capacity planning for physical servers
E. AWS manages cost planning for virtual servers
Correct Answer: BD
A. Performance efficiency
B. Cost optimization
C. Reliability
D. Security
Correct Answer: C
A. Amazon Connect
B. AWS VPN
C. AWS Direct Connect
D. Amazon Cognito
E. AWS Managed Services
Correct Answer: BC
A. Consolidated billing
B. Amazon CloudWatch
C. AWS Billing and Cost Management
D. Amazon QuickSight
Correct Answer: C
A. Keep the root user password with the security team.
B. Create an access key for the root user.
C. Enable multi-factor authentication (MFA) for the root user.
D. Keep the root user password consistent for compliance purposes.
Correct Answer: C
A. VPN connection
B. Internet gateway
C. NAT gateway
D. VPC endpoint
Correct Answer: D
A. Notification setup
B. Refresh checks
C. Action links
D. AWS Support API
Correct Answer: D