AWS Certified Cloud Practitioner (CLF-C02) Certification Exam Practice Question and Answers | Pass

Hello and welcome to this new video. In

this video, we're going to cover 600

latest and important question answers

for AWS Cloud Practitioner CLF C02

version. So before going to the question

answers, we request you to kindly

subscribe to our YouTube channel if

you're not already a subscriber. And

these question answers PDF is also

available to download from

shapingpixel.com website. The full link

will be in the description.

So let's jump onto the questions.

Question number one. A company plans to

use an Amazon Snowball Edge device to

transfer files to the AWS cloud. Which

activities related to a Snowball Edge

device are available to the company at

no cost?

Option A, use of the Snowball Edge

appliance for a 10-day period.

Option B, the transfer of data out of

Amazon S3 and to the Snowball Edge

appliance.

Option C, the transfer of data from the

Snowball Edge appliance into Amazon S3.

And option D, daily use of the Snowball

Edge appliance after 10 days.

So the right answer here is option C.

Data transfer into Amazon S3 is 0 per

GB. Data transfer out of Amazon S3 is

priced by region.

So question number two, a company has

deployed applications on Amazon EC2

instances. The company needs to access

application vulnerabilities and must

identify infrastructure deployments that

do not meet best practices.

Which AWS service can the company use to

meet these requirements?

The options are AWS trusted advisor,

Amazon Inspector, AWS Config, Amazon

Guard Duty.

So the right answer here is option B.

Amazon Inspector.

Amazon Inspector is an automated

vulnerability management service that

continually scans AWS workloads for

software vulnerabilities and unended

network exposure. The key word here is

vulnerabilities.

Question number three. A company has a

centralized group of users with large

file storage requirement that have

exceeded the space available on

premises.

The company wants to extend its file

storage capabilities for this group

while retaining the performance benefit

of sharing content locally. What is the

most operationally efficient AWS

solution for the scenario?

Option A, create an Amazon S3 bucket for

each user. Mount each bucket by using an

S3 file system mounting utility.

Option B, configure and deploy an AWS

storage gateway file gateway. Connect

each user's workstation to the file

gateway.

Option C, move each user's working

environment to Amazon Workspaces. Set up

an Amazon works account for each user.

Option D, deploy an Amazon EC2 instance

and attach an Amazon elastic block store

provided IOPS value. Share the EBS

volume directly with the users.

So the right answer here is option B.

Question number four, according to

security best practices, how should an

Amazon EC2 instance be given access to

an Amazon S3 bucket?

Option A, hardcode an IM user secret key

and access key directly in the

application and upload the file.

Option B, store the IM user secret key

and access key in a text file on the EC2

instance. Read the keys, then upload the

file.

Option C, have the EC2 instance assume a

role to obtain the privileges to upload

the file.

And option D, modify the S3 bucket

policy so that any service can upload to

it at any time.

So the right answer here is option C.

Have the EC2 instance assume a role to

obtain the privileges to upload the

file?

Question number five, which option is a

customer responsibility when using

Amazon Dynamo DB under the AWS shared

responsibility model?

Option A, physical security of Dynamo

DB.

Option B, patching of Dynamo DB. Option

C, access to Dynamo DB tables. And

option D, encryption of data addressed

in Dynamo DB.

So the right answer here is option C,

access to Dynamo DB tables.

Under the AWS share responsibility

model, controlling and managing access

to AWS services including Amazon Dynamo

DB tables is a customer responsibility

while AWS take care of the physical

infrastructure, patching and encryption

of data at rest in Dynamo DB. Customers

are responsible for setting up proper

access controls, authentication and

authorization to protect their data and

resources.

So question number six, which option is

a perspective that includes foundational

capabilities of the AWS cloud adaption

framework AWS CF.

The options are sustainability,

performance, efficiency, governance,

reliability.

So the right answer here is option C,

governance.

The six AWS CF

prospectives are business, people,

governance, platform, security and

operations.

Question number seven. A company is

running and managing its own Docker

environment on Amazon EC2 instances. The

company wants an alternative to help

manage cluster size, scheduuling and

environment maintenance.

Which AWS service meets these

requirements

and the options are AWS Lambda, Amazon

RDS, AWS Fargate, Amazon Athena.

So the right answer here is option C.

AWS Fargate.

AWS Fargate is a serverless

pasco comput engine that lets you focus

on building applications without

managing service.

AWS Fargate is compatible with both

Amazon Elastic Container Service and

Amazon Elastic Kubernetes Service.

Question number eight. A company wants

to run a NoSQL database on Amazon EC2

instances.

Which task is the responsibility of AWS

in this scenario?

Option A, update the guest operating

system of the EC2 instances.

Option B, maintain high availability at

the database layer. Option C, patch the

physical infrastructure that hosts the

EC2 instances.

Option D, configure the security group

firewall.

So the right answer here is option C,

patch the physical infrastructure that

hosts the EC2 instances.

patch the physical infrastructure that

hosts the EC2 instances. Guest operating

system is always responsibility of

customer and host of AWS.

Question number nine, which AWS services

or tools can identify resizing

opportunities for Amazon EC2 instances?

Choose two and the options are AWS Cast

Explorer, AWS Building Conductor, Amazon

Code Guru, Amazon Sage Maker,

AWS Compute Optimizer.

So the right answer here is option A and

option E.

AWS cost explorer and AWS compute

optimizer.

Question number 10. Which of the

following are benefits of using AWS

trusted advisor? Option A, providing

high performance container

orchestration.

Option B, creating and rotating

encryption keys.

Option C, detecting underutilized

resources to save costs. Option D,

improving security by proactively

monitoring the AWS environment. Option

E, implementing enforced tagging across

AWS resources.

So the right answer here is option C and

option D.

Benefits of trusted advisor. Cost

optimization. Performance. Security.

Fall tolerance. Service quotas.

Question number 11. Which of the

following is an advantage that users

experience when they move on premises

workloads to the AWS cloud?

Option A, elimination of expenses for

running and maintaining data centers.

Option B, price discounts that are

identical to discounts from hardware

providers.

Option C, distribution of all

operational controls to AWS.

Option D, elimination of operational

expenses.

So the right answer here is

option A.

Elimination of expenses for running and

maintaining data centers.

Question number 12. A company wants to

manage deployed IT services and govern

its infrastructure as a code templates.

Which AWS service will meet this

requirement?

And the options are AWS resource

explorer,

AWS service catalog,

AWS organizations,

AWS systems manager.

So the right answer here is option B.

AWS service catalog

AWS service catalog lets you centrally

manage your cloud resources to achieve

governance at scale of your

infrastructure as code templates

written in cloud formation or terapform

configurations.

With AWS service catalog, you can meet

your compliance requirements while

making sure your customers can quickly

deploy the cloud resources they need.

Question number 13. Which AWS service or

tool helps users visualize, understand,

and manage spending and usage over time?

And the options are AWS organizations,

AWS pricing calculator,

AWS cost explorer,

AWS service catalog.

So the right answer here is option C,

AWS cost explorer.

AWS Cost Explorer has an easy to use

interface

that lets you visualize, understand, and

manage your AWS cost and usage over

time. Get started quickly by creating

custom reports that analyze cost and

usage data.

Analyze your data at a high level

or dive deeper into your cost and usage

data to identify trends, pinpoint cost

drivers and detect anomalies.

Question number 14. A company is using a

central data platform to manage multiple

types of data to its customers. The

company wants to use AWS services to

discover, transform and visualize the

data.

Which combination of AWS services should

the company use to meet these

requirements? Choose two. And the

options are AWS Glue, Amazon Elastic

File System,

Amazon Red Shift, Amazon Quicksite,

Amazon Quantum Ledger Database.

So the right answer here is

option A and option D.

AWS Glue is a serverless data

integration service that makes it easier

to discover, prepare, move, and

integrate data from multiple resources

for analytics, machine learning, and

application development.

Amazon Quicksite powers datadriven

organizations with unified business

intelligence at hypers scale. With

Quicksite, all users can meet varying

analytic needs from the same source of

truth through modern interactive

dashboards, pagated reports, embedded

analytics, and natural language queries.

Question number 15. A global company

wants to migrate its third-party

applications to the AWS cloud. The

company wants help from a global team of

experts to complete the migration faster

and more reliable in accordance with AWS

internal best practices.

Which AWS service or resource will meet

these requirements?

And the options are AWS support, AWS

professional services, AWS launch

wizard, AWS manage services.

So the right answer here is option B.

AWS professional services.

AWS partner network APN.

Consulting partners help customers

design, architect, build, migrate, and

manage workloads and applications on

Amazon Web Services.

Question number 16.

An e-learning platform needs to run an

application for 2 months each year. The

application will be deployed on Amazon

EC2 instances.

Any application downtime during those

two months must be avoided.

Which EC2 purchasing option will meet

these requirements most cost

effectively?

And the options are reserved instances,

dedicated hosts, spot instances, on

demand instances.

So the right answer here is

option D. On demand instances

on demand instances are recommended for

users that prefer the low cost and

flexibility of EC2 without any upfront

framement upfront payment for long-term

amendments.

applications with short-term spiky or

unpredictable workloads that cannot be

interrupted.

Applications

being developed or tested on EC2 for the

first time.

Question number 17. A developer wants to

deploy an application quickly on AWS

without manually creating the required

resources.

Which AWS service will meet these

requirements?

The options are Amazon EC2,

AWS elastic beanto,

AWS code build, Amazon personalize.

So the right answer here is option B.

AWS elastic beanto.

With Elastic Beantock, you can quickly

deploy and manage applications in the

AWS cloud without having to learn about

the infrastructure that runs those

applications. Elastic Beantock reduces

management complexity without

restricting choice or control. You

simply upload your application and

Elastic Beantock automatically handles

the details of capacity provisioning,

load balancing, scaling and application

health monitoring.

Question number 18. The company is

storing sensitive customers data in an

Amazon S3 bucket. The company wants to

protect the data from accidental

deletion or overriding.

Which S3 feature should the company use

to meet this requirements?

We have the following four options. S3

life cycle rules. S3 versioning, S3

bucket policies, S3 serverside

encryption.

So the right answer here is option B, S3

versioning.

Versioning in Amazon S3

is a means of keeping multiple variants

of an object in the same bucket. You can

use the S3 versioning feature to

preserve, retrieve, and restore every

version of every object stored in your

buckets. Versioning enabled buckets can

help you recover object from accidental

deletion or override. For example, if

you delete an object, Amazon S3 inserts

a delete marker instead of removing the

object permanently.

Question number 19. Which AWS service

provides the ability to manage

infrastructure as code?

And the options are AWS code pipeline,

AWS code deploy, AWS direct connect, AWS

cloud formation.

So the right answer here is option D.

AWS cloud formation.

AWS cloud formation lets you model,

provision and manage AWS and third party

resources by treating infrastructure as

code.

Question number 20. An online gaming

company needs to choose a purchasing

option to run its Amazon EC2 instances

for one year. The web traffic is

consistent and any increase in traffic

are predictable. The EC2 instances must

be online and available without any

disruption.

Which EC2 instances purchasing option

will meet these requirements most cost

effectively

and the options are on demand instances,

reserved instances, spot instances, spot

fleet.

So the right answer here is option B,

reserved instances.

Amazon EC2 reserved instances provide a

significant discount compared to

ondemand prices pricing and provide a

capacity reservation when used in a

specific availability zone.

Question number 21. Which AWS service or

feature allows a users to establish a

dedicated network connection between a

company's on premises data center and

AWS cloud

and the options are AWS direct connect

VPC peering AWSVPN

Amazon root 53.

So the right answer here is option A.

AWS direct connect.

Create a dedicated network connection to

AWS. The AWS direct connect cloud

service is the shortest path to your AWS

resources. While in transit, your

network traffic remains on the AWS

global network and never touches the

public internet.

Question number 22. Which option is a

physical location of the AWS global

infrastructure?

The options are AWS data sync, AWS

region, Amazon connect, AWS

organizations.

So the right answer here is option B AWS

region.

AWS has the concept of a region which is

a physical location around the world

where we cluster data centers.

Question number 23. A company wants to

protect its AWS cloud formation systems

and assets while performing risk

assessment and mitigation tasks.

Which pillar of the AWS well architected

framework is supported by these goals?

And the options are reliability,

security, operational excellence,

performance, efficiency.

So the right answer here is

option B security.

So this is conclusion of security

builder. Help you build and operate

architectures that protect information

systems and assets while delivering

business value.

Question number 24. What is the purpose

of having an internet gateway within a

VPC?

Option A to create a VPN connection to

the VPC.

Option B to allow communication between

the VPC and the internet. Option C to

impose bandwidth constraints on internet

traffic. Option D to load balance

traffic from the internet across Amazon

EC2 instances.

The right answer here is option B to

allow communication between the VPC and

the internet.

An internet gateway is a horizontally

scaled, redundant, and highly available

VPC component that allows communication

between your VPC and the internet.

Question number 25. A company is running

a monolithic on premises application

that does not scale and is difficult to

maintain. The company has a plan to

migrate the application to AWS and

divide the application into

microservices.

Which best practice of the AWS

wellarchchitected framework is the

company following with this plan?

Option A, integrate functional testing

as part of AWS deployment. Option B, use

automation to deploy changes. Option C,

deploy the application to multiple

locations. Option D, implement loosely

coupled dependencies.

So the right answer here is option D,

implement loosely coupled dependencies.

Dependencies such as queuing systems,

streaming systems, workflows, and load

balancers are loosely coupled. Loose

coupling helps isolate behavior of a

component from other components that

depend on it, increasing resilency

and agility.

Question number 26. A company has an AWS

account. The company wants to audit its

password and access key rotation details

for compliance purposes.

Which AWS service or tool will meet this

requirement?

And the options are IM access analyzer,

AWS artifact,

IM credential report, AWS audit manager.

So the right answer here is option C, IM

credential report.

You can use credential reports to assist

in your auditing and compliance efforts.

You can use the report to audit the

effects of credential life cycle

requirements such as password and access

key updates.

Question number 27. A company wants to

receive a notification when a specific

AWS cost threshold is reached. Which AWS

services or tools can the company use to

meet these requirements? Choose two. The

options are Amazon simple Q service, AWS

budgets, cost explorer, Amazon

cloudatch, AWS cost and usage report.

So the right answer here is

option B and option D.

AWS budgets and Amazon Cloudatch.

Question number 28.

Which AWS service or resource provides

answers to the most frequently asked

security related questions that AWS

receives from its users?

The options are AWS artifact, Amazon

connect, AWS chatbot, AWS knowledge

center.

So the right answer here is option D.

AWS knowledge center.

The AWS knowledge center is a

comprehensive resource that provides

answers to the most frequently asked

security related questions that AWS

receives from its users. It is a central

repository of security information and

guidance covering a wide range of

topics.

Question number 29.

Which tasks are customers

responsibilities according to the AWS

shared responsibility model? Choose two.

Option A, configure the AWS provided

security group firewall. Option B,

classify company assets in the AWS

cloud. Option C, determine which

availability jones to use for Amazon S3

buckets. Option D, patch or upgrade

Amazon Dynamo DB. Option E, select

Amazon EC2 instances to run AWS Lambdon.

So the right answer here is option A and

option B.

Question number 13. Which of the

following are pillars of the AWS well

architected framework? Choose two. The

options are availability,

reliability, scalability, responsive

design, operational excellence.

So the right answer here is option B and

option E.

Reliability and operational excellence.

AWS well architected helps cloud

architects build secure, high-erforming,

preent and efficient infrastructure for

a variety of applications and workloads.

Built around six pillars, operational

excellence, security, reliability,

performance, efficiency, cost

optimization, and sustainability.

Question number 31.

Which AWS service or feature is used to

send both text and email messages from

distributed applications?

Option A, Amazon simple notification

service.

Option B, Amazon simple email service.

Option C, Amazon Cloudatch alerts. and

option D, Amazon simple Q service.

So the right answer here is option A,

Amazon simple notification service.

Amazon simple notification service sends

notifications two ways A to A and A2P.

A2A provides high throughput pushbased

many to many messaging dist between

distributed systems microservices and

eventdriven serverless applications.

These applications include Amazon simple

Q service, Amazon Kinesis data fire

host, AWS Lambda and other HTTPS

endpoints. A2P functionality lets you

send messages to your customers with SMS

text, push notifications, and email.

Question number 32. A user needs

programmatic access to AWS resources

through the AWS CLI or the AWS API.

Which option will provide the user with

the appropriate access? And the options

are Amazon inspector access keys, SSH

public keys, AWS key management service

keys.

So the right answer here is option B.

Access keys.

Access

keys are long-term credentials for an IM

user or the AWS account root user. You

can use access keys to sign programmatic

request to the AWS CLI or AWS API.

Question number 33. The company runs

thousands of simultaneous

simulations using AWS batch. Each

simulation is stateless, is fall

tolerant, and runs for up to 3 hours.

Which pricing model enables the company

to optimize cost and meet these

requirements?

The options are reserved instances, spot

instances, on demand instances,

dedicated instances.

So the right answer here is option B.

Spot instances.

Spot instances are good fit for

stateless fall tolerance workloads that

can be interrupted without any impact on

the overall job.

Question number 34.

What does the concept of agility mean in

AWS cloud computing? Choose two. And we

have the following five options. Option

A, the speed at which AWS resources are

implemented.

Option B, the speed at which AWS creates

new AWS regions. Option C, the ability

to experiment quickly. Option D, the

elimination of wasted capacity. Option

E, the low cost of entry into cloud

computing.

The right answer here is option A and

option C.

Question number 35. A company needs to

block SQL injection attacks. Which AWS

service or feature can meet these

requirements?

And the options are AWS WAF, AWS Shield,

Network ACL, Security Groups.

So the right answer here is option A.

AWS WAF.

AWSW AF helps you protect against common

web exploits and bots that can affect

availability, compromise security or

consume excessive resources.

Question number 36. Which AWS service or

feature identifies whether an Amazon S3

bucket or an IM role has been shared

with an external entity?

Option A, AWS service catalog,

option B, AWS systems manager, option C,

AWS IM access analyzer and option D AWS

organizations.

So the right answer here is

option C. AWS IM access analyzer.

IM access analyzer helps identify

resources in your organization and

accounts that are shared with an

external entity.

Question number 37. A cloud practitioner

needs to obtain AWS compliance reports

before migrating an environment to the

AWS cloud. How can these reports be

generated?

Option A, contact the AWS compliance

team.

Option B, download the reports from AWS

artifact.

Option C, open a case with AWS support.

Option D, generate the reports with

Amazon Mackie.

So the right answer here is option B,

download the reports from AWS Artifact.

AWS artifact is a portal that provides

access to various compliance reports

including certifications, attestations

and other relevant documents. You can

download these reports directly from AWS

artifact.

Question number 38. An e-commerce

company has migrated its IT

infrastructure from an on premises data

center to the AWS cloud. Which cost is

the company's direct responsibility?

Option A, cost of application software

licenses,

option B, cost of the hardware

infrastructure on AWS.

Option C, cost of power for the AWS

servers. And option D, cost of physical

security for the AWS data center.

So the right answer here is option A.

Cost of application software licenses.

Question number 39. A company is setting

up AWS identity and access management on

an AWS account. Which recommendation

compiles complies with IM security best

practices?

Option A, use the account root user

access keys for administrative tasks.

Option B, grant broad permissions so

that all company employees can access

the resources they need. Option C, turn

on multiffactor authentication for added

security during the login process.

Option D, avoid rotating credentials to

prevent issues in production

applications.

So the right answer here is option C.

Enabling multiffactor authentication for

user accounts, especially for users with

administrative or highprivilege access,

is a crucial security best practice. MFI

adds an additional layer of security by

requiring users to provide two or more

verification factors.

Something they know like a password or

something they have like a temporary MFA

code from a hardware token or mobile

before gaining access. These

significantly reduces the risk of

unauthorized access even if login

credentials are compromised.

Question number 40. Elasticity in the

AWS cloud refers to which of the

following? Choose two. Option A. How

quickly an Amazon EC2 instance can be

restarted?

Option B, the ability to rightsize

resources as demand shifts. Option C,

the maximum amount of RAM an Amazon EC2

instance can use. Option D, the pay as

you go billing model. Option E, how

easily resources can be produced when

they are needed.

So the right answer here is option B and

option E.

Elasticity is the ability to add and

release resources as business needs

change. It has nothing to do with

pricing.

Question number 41. Which service

enables customers to audit API calls in

their AWS accounts?

And the options are AWS cloud trial,

AWS trusted advisor, Amazon Inspector,

AWS X-Ray.

So the right answer here is option A.

AWS cloud trial.

AWS cloud trial is a service that

records all API calls made on your AWS

account. It provides a detailed history

of events including who made the call,

what actions were performed and from

which IP address the call originated.

This audit trail is valuable for

security compliance, troubleshooting and

monitoring purposes. And it helps you

maintain visibility into how your AWS

resources are being used.

Question number 42. What is a customer

responsibility when using AWS Lambda

according to the AWS shared

responsibility model?

Option A, managing the code within the

Lambda function. Option B, confirming

that the hardware is working in the data

center.

Option C, patching the operating system.

Option D, shutting down Lambda functions

when they are no longer in use.

So the right answer here is option A.

Managing the code with the lambda

function.

In the AWS shared responsibility model,

AWS is responsible for the

infrastructure and security of the cloud

while customers are responsible for the

security in the cloud. When using AWS

Lambda, customers are responsible for

managing the code and configuration

within the Lambda function. These

includes writing and updating the code,

configuring the functions, execution

environment, and ensuring that the code

complies with security best practices

and is free from vulnerabilities.

Question number 43. A company has 5

terabyte of data stored in Amazon S3.

The company plans to occasionally run

queries on the data of for analysis.

Which AWS service should the company use

to run these queries in the most cost

effective manner?

And the following options are Amazon Red

Shift, Amazon Athena, Amazon Kinesis,

Amazon RDS.

So the right answer here is option B,

Amazon Athena.

Amazon Athena is a serverless

interactive analytics service built on

open-source framework supporting open

table and file formats. Athena provides

a simplified flexible way to analyze

pabytes of data where it lives analyze

data or build applications from an

Amazon simple storage service data lake

and 30 data sources

including on premises data sources or

other cloud systems using SQL or Python.

Athena is built on open-source Trino and

Presto engines and Apache Spark

frameworks with no provisioning or

configuration effort required.

Question number 44, which AWS service

can be used at no additional cost?

And the options are Amazon Sage Maker,

AWS Config, AWS organizations,

Amazon Cloudatch.

So the right answer here is option C,

AWS organizations.

AWS organizations is an account

management service that enables you to

consolidate

multiple AWS accounts into an

organization that you create and

centrally manage. AWS organizations is

offered at no additional charge. You are

charged only for AWS resources that uses

and roles in your member account you

accounts use. For example, you are

charged the standard fees for Amazon EC2

instances that are used by users or

roles in your members account.

Question number 45. Which AWS cloud

adoption framework capabilities belongs

to the people prospective?

options are data architecture, event

management, cloud fluency, strategic

partnership.

So the right answer here is option C,

cloud fluency.

Question number 46. A company wants to

make an upfront commitment for continued

use of its production Amazon EC2

instances in exchange for a reduced

overall cost. Which pricing options meet

these requirements with the lowest cost?

Choose two and the options are spot

instances on demand instances, reserved

instances, savings plans, dedicated

hosts.

So the right answer here is option C and

option D.

Reserved instances provide a significant

discount compared to on demand pricing

in exchange for a one-time upfront

payment and or a lower hourly rate. The

more you commit, the greater the

discount. Option D, savings plans.

Savings plans offers flexible pricing

and savings on your AWS usage with

discounts of up to 72%

compared to ondemand pricing. With

savings plans, you commit to a certain

amount of usage for a one or threeear

term and receive a lower rate for the

you for that usage.

Question number 47. A company wants to

migrate its on premises relational

databases to the AWS cloud. The company

wants to use infrastructure as close to

its current geographical location as

possible. Which AWS service or resource

should the company use to select its

Amazon RDS deployment area? And the

options are Amazon connect, AWS

wavelength, AWS regions, AWS direct

connect. So the right answer here is

option C. AWS regions

AWS connect customer service cloud

contact center AWS wavelength 5G devices

AWS direct connect dedicated network

connection bypass public network.

Question number 48. A company is

exploring the use of the AWS cloud and

needs to create a cost estimate for a

project before the infrastructure is

provisioned. Which AWS service or

feature can be used to estimate cost

before deployment?

Option A, AWS free tire, option B, AWS

pricing calculator. Option C, AWS

billing and cost management. Option D,

AWS cost and usage report.

So the right answer here is option B.

AWS pricing calculator.

AWS pricing calculator is a web- based

planning tool that you can use to create

estimates for your AWS use cases. You

can use it to model your solutions

before building them. Explore the AWS

service price points and review the

calculations beyond behind your

estimates.

Question number 49. A company is

building an application that needs to

deliver images and videos globally with

minimal latency. Which approach can the

company use to accomplish these in a

cost-ffective manner?

A deliver content through Amazon

CloudFront. Option B, store the content

on Amazon S3 and enable S3 cross region

replication. Option C, implement a VPN

across multiple AWS regions. Option D,

deliver the content through AWS private

link.

So the right answer here is option A,

deliver the content through Amazon

CloudFront.

Securely deliver content with low

latency and high transfer speeds.

Question number 15. Which option is a

benefit of the economies of scale based

on the advantages of cloud computing?

Option A, the ability to trade variable

expenses for fixed expenses. Option B,

increased speed and agility. Option C,

lower variable cost over fixed costs.

Option D, increased operational cost

over across data centers.

So the right answer here is option C,

lower variable cost over fixed costs.

Benefit from massive economies of scale

by using cloud computing. You can

achieve a lower variable cost than you

can get on your own because usage from

hundreds of thousands of customers is

aggregated in the cloud. Providers such

as AWS can achieve higher economies of

scale which translates into lower pay as

you go prices?

Question number 51. Which of the

following is a software development

framework that a company can use to

define cloud resources as code and

provision the resources through AWS

cloud formation?

Options are AWS CLI, AWS developer

center, AWS cloud development kit, AWS

codear.

So the right answer here is option C.

AWS cloud development kit. AWS CDK is a

software development framework that

enables developers to define

infrastructure as code using familiar

programming languages like TypeScript,

Python, Java, C# and more. With AWS CDK,

you can define cloud resources, the

relationships and provisioning logic in

your preferred programming language. AWS

CDK also generates cloud formation

templates based on your code, making it

easier to manage and deploy

infrastructure resources in AWS.

Question number 52. A company is

developing an application that uses

multiple AWS services. The application

needs to use temporary limited privilege

credentials for authentication with

other AWS APIs. Which AWS service or

feature should the company use to meet

these authentication requirements?

Option A, Amazon API gateway. Option B,

A IM users. Option C, AWS security token

service. Option D, IM instance profiles.

So the right answer here is option C.

AWS security token service. AWS provides

AWS security token service as a web

service that enables you to request

temporary limited privilege credentials

for users.

Question number 53. Which AWS service is

a cloud security posture management

service that aggregates alerts from

various AWS services and partner

products in a standardized format and

the options are AWS security hub, AWS

trusted advisor, Amazon Event Bridge,

Amazon Guard Duty. So the right answer

here is option A, AWS security hub.

AWS Security Hub is a cloud security

posture management service that performs

automated continuous security best

practices checks against your AWS

resources to help you identify

misisconfigurations and aggregates your

security alerts in a standardized format

so that you can more easily enrich,

investigate and remediate them.

Question number 54. Which AWS service is

always provided at no charge? The

options are Amazon S3, AWS identity and

access management, elastic load

balances, AWS W AF.

So the right answer here is option B.

AWS identity and access management

IM is a feature of your AWS account and

is offered at no additional charge.

Question number 55. To reduce cost, a

company is planning to migrate a NoSQL

database to AWS. Which AWS service is

fully managed and can automatically

scale through capacity to meet database

workload demands? And the options are

Amazon Redshift, Amazon Aurora, Amazon

Dynamob, Amazon RDS.

So the right answer here is option C,

Amazon Dynamo DB.

Amazon DynamoB is a fully managed NoSQL

database service that provides fast and

predictable performance with seamless

scalability.

Question number 56. A company is using

Amazon Dynamo DB. Which task is the

company's responsibility according to

the AWS shared responsibility model? And

the options are option A patch the

operating system option B provision host

option C manage database access

permissions and option D secure the

operating system.

So the right answer here is option C

manage database access permissions.

Question number 57. A company has a test

AWS environment. A company is planning

on testing an application within AWS.

Application testing can be interrupted

and does not need to run continuously.

Which Amazon EC2 purchasing option will

meet the requirements most cost

effectively?

And the options are on demand instances,

dedicated instances, spot instances,

reserved instances.

So the right answer here is option C,

spot instances.

Question number 58. Which AWS service

gives users the ability to discover and

protect sensitive data that is stored in

Amazon S3 buckets? The options are

Amazon Mackie, Amazon Detective, Amazon

Guard Duty, AWS IM Access Analyzer.

So the right answer here is option A.

Amazon Macki.

Amazon Mackie is a data security service

that discovers sensitive data using

machine learning and pattern matching.

Provides visibility into data security

risk and enables you to automate

protection against those risks.

Question number 59. Which of the

following services can be used to block

network traffic to an instance?

Choose two. The options are security

groups, Amazon virtual private cloud,

flow logs, network ACL, Amazon

cloudatch, AWS cloud trial.

So the right answer here is option A and

option C. Security groups and network

ACL.

Security groups are stateful firewalls

that control inbound and outbound

traffic at the instance level. You can

configure security groups to allow or

deny specific types of network traffic

to and from your instances. Network ACL

are stateless firewall that control

traffic at the subnet level. Network ACL

define rules to allow or deny traffic

based on source and destination IP

addresses, ports, and protocols.

Question number 60. Which AWS service

can identify when an Amazon EC2 instance

was terminated? And the options are

option A AWS identity and access

management, option B AWS cloud trial,

option C AWS compute optimizer and

option D Amazon event bridge.

So the right answer here is option B AWS

cloud trial.

AWS cloud trial is a service that

records all API activity in your AWS

account, including the termination of

EC2 instances. It creates log entries

for various events, providing an audit

trail of actions taken on resources. By

reviewing cloud trial logs, you can

identify when an EC2 instance was

terminated, who initiated the

termination, and other relevant details

about the event?

Question number 61. Which of the

following is a fully managed MySQL

compatible database?

And the options are Amazon S3, Amazon

Dynamob, Amazon Red Shift, Amazon

Aurora.

So the right answer here is option D,

Amazon Aurora.

Amazon Aurora is a relational database

service that is compatible with MySQL

and PostSQL. It is fully managed by AWS

and is designed for high availability,

performance, and scalability while

maintaining MySQL compatibility. Aurora

offers features like automated backups,

read replicas, and seamless failure to

ensure data durability and availability.

It's a popular choice for applications

that require MySQL compatible database

with the benefits of a fully managed

service.

Question number 62.

Which AWS service supports a hybrid

architecture that gives users the

ability to extend AWS infrastructure,

AWS services, APIs and tools to data

centers, collocation environments or on

premises facilities.

The options are AWS no mobile, AWS local

Jones, AWS outpost and AWS Fargate.

So the right answer here is option C.

AWS outposts.

AWS outposts enable you to run AWS

infrastructure and services on premises

while seamlessly connecting to the AWS

cloud. This service extends the AWS

ecosystem to your on premises locations

allowing you to take advantage of cloud

benefits while addressing the

requirements of data residency,

low latency applications and specific

regulatory needs in hybrid environments.

Question number 63. Which AWS service

can run a managed postry SQL databases?

that provides online transaction

processing OLTP and the options are

Amazon Dynamob, Amazon Athena, Amazon

RDS, Amazon EMR.

So the right answer here is option C,

Amazon RDS.

Amazon RDS supports various database

engines including PostgresSQL and offers

a managed database service suitable for

OLTP workloads. With Amazon RDS for

PostgresSQL, you can easily set up,

operate and scale a PostRSQL database

without the administrative overhead of

managing the infrastructure.

Question number 64. A company wants to

provide managed Windows virtual desktops

and applications to its remote employees

over secure network connections. Which

AWS services can the company use to meet

these requirements? Choose to. And the

options are Amazon Connect, Amazon

AppStream,

Amazon Workspaces, AWS Sight to

SightVPN,

Amazon Elastic Container Service, Amazon

ECS.

So the right answer here is option B and

option C. Amazon AppStream 2.0,

Amazon Workspaces.

Amazon AppStream 2.0 0 is a service that

enables you to stream desktop

applications to users through web

browsers. You can deliver Windows

applications securely to remote users

without the need to provision and manage

full virtual desktops.

Option C, Amazon Workspaces is a fully

managed desktop as a service solution

that provides Windows desktop to users.

You can configure and manage virtual

desktops for remote employees using

workspaces.

Question number 65. A company wants to

monitor for misconfigured security

groups that are allowing unrestricted

access to specific ports. Which AWS

service will meet this requirement?

The options are AWS trusted advisor,

Amazon cloudatch, Amazon guard duty, AWS

health dashboard.

So the right answer here is option A.

AWS trusted advisor.

Unrestricted access check security

groups for rules that allow unrestricted

access to a resource. Unrestricted

accesses increase opportunities for

malicious activities. For more details,

see the trusted advisor frequently asked

questions.

Question number 66.

Which AWS service is a key value

database that provide sub millisecond

latency on a large scale? The options

are Amazon Dynamob, Amazon Aurora,

Amazon Document DB, Amazon Neptune.

So the right answer here is option A.

Amazon Dynamo DB

because Amazon DynamoB is a non-

relational database that delivers

reliable performance at any scale. It's

a fully managed multi-reion multim

masteraster database that provides

consistent singledigit millisecond

latency and offers built-in security

backup and restore and in-memory

catching.

Question number 67. Which AWS services

or features provide disaster recovery

solutions for Amazon EC2 instances?

choose to and the options are EC2

reserved instances, EC2 Amazon machine

images, Amazon elastic block store

snapshots, AWS shield, Amazon guard

duty.

So the right answer here is option B and

option C. EC2 mach Amazon machine

images, Amazon elastic block store

snapshots.

Amazon machine images are used to create

backups of EC2 instances and they can be

used to launch replacement instances in

the event of a disaster or data loss.

AMIs are essential

for creating recovery points for your

EC2 instances.

EBS snapshots allow you to create point

in time backups for your EBS volumes.

These snapshots can be used to restore

data or create new EBS volumes, making

them a key component of disaster

recovery for EC2 instances.

Question number 68. Which AWS service

provides command line access to AWS

tools and resources directly from a web

browser?

And the options are AWS cloud HSM, AWS

CloudShell, Amazon Workspaces, AWS Cloud

Map.

So the right answer here is option B AWS

cloud shell.

Using AWS CloudShell, a browser-based

shell, you can quickly run scripts with

the AWS command line interface,

experiment with service APIs using the

AWS CLI, and use other tools to increase

your productivity. The cloud shell icon

appears in AWS region where cloud shell

is available.

Question number 69. A network engineer

needs to build a hybrid cloud

architecture connecting on premises

network to the AWS cloud using AWS

direct connect. The company has a few

VPCs in a single AWS region and expects

to increase the number of VPCs to

hundreds over time. Which AWS service or

feature should the engineer use to

simplify and scale these connectivity as

the VPCs increase in number? And the

options are VPC endpoints, AWS transit

gateway, Amazon root 53, AWS secrets

manager.

So the right answer here is option B,

AWS transit gateway.

AWS transit gateway connects your Amazon

virtual private clouds and on premises

networks through a central hub. These

connection simplifies your network and

puts an end to complex peering

relationships. Transit gateway acts as a

highly scalable cloud router. Each new

connection is made only once.

Question number 70. A company wants to

establish a schedule for rotating

database user credentials. Which AWS

service will support this requirement

with the least amount of operational

overhead? The options are AWS systems

manager, AWS secrets manager, AWS

license manager, AWS managed services.

So the right answer here is option B.

AWS secrets manager.

AWS Secrets Manager helps you manage,

retrieve, and rotate database

credentials, API keys, and other secrets

throughout their life cycles.

Question number 71. Which AWS service is

used to provide encryption for Amazon

EBS? And the options are AWS certificate

manager, AWS systems manager, AWS KMS,

AWS config.

So the right answer here is option C.

AWS KMS.

AWS key management service lets you

create, manage, and control

cryptographic keys across your

applications and AWS services.

Question number 72. A company wants to

manage its AWS cloud resources through a

web interface. Which AWS service will

meet this requirement? And the options

are AWS management console, AWS CLI, AWS

CDK, AWS cloud9.

So the right answer here is option A.

AWS management console.

The AWS management console is a web

application that comprises and refers to

a broad collection of service consoles

for managing AWS resources.

Question number 73. Which of the

following are advantages of the AWS

cloud? Choose two. And the options are

option A trade variable expenses for

capital expenses. Option B high economy

of scale. Option C launch globally in

minutes. Option D focus on managing

hardware infrastructure. Option E

overprovision to ensure capacity.

So the right answer here is option B and

option C.

High economy of scale launch globally in

minutes.

Ability to quickly change required

capacity. With the AWS cloud, users can

easily scale their infrastructure up or

down based on demand. This flexibility

allows for rapid ad adjustments of

resources to match application needs

enabling cost optimization and efficient

resource utilization.

High economy of scale. AWS operates at a

large scale serving millions of

customers globally. This scale allows

AWS to achieve cost efficiencies and

pass on the benefits to customers. By

leveraging AWS services, users can

access enterprisegrade infrastructure

and services without the need for

significant upfront investment in

hardware or infrastructure.

Question number 74. Which AWS cloud

benefit is shown by an architectures

ability to withstand failures with

minimal downtime?

And the options are agility, elasticity,

scalability, high availability.

So the right answer here is option D,

high availability.

The ability of an architecture to

withstand failures with minimal downtime

is a characteristics of high

availability. High availability ensures

that your system remains operational and

accessible even in the face of component

failures. This is critical for

maintaining a reliable and responsive

application or service.

Question number 75. A developer needs to

maintain a development environment

infrastructure and a production

environment infrastructure in a

repeatable fashion. Which AWS service

should the developer use to meet these

requirements?

The options are AWS ground station, AWS

shield, AWS IoT device defender and AWS

cloud formation.

So the right answer here is

option D. AWS cloud formation.

AWS cloud formation lets you model,

provision and manage AWS and third party

resources by treating infrastructure as

code.

Question number 76. Which task is the

customer's responsibility according to

the AWS shared responsibility model?

Option A, maintain the security of the

AWS cloud. Option B, configure firewalls

and networks. Option C, patch the

operating system of Amazon RDS

instances. Option D, implement physical

and environmental controls.

So the right answer here is option B,

configure firewalls and networks.

Question number 77. Which AWS service

helps deliver highly available

applications with fast failure for

multi-reion and multi-AZ architectures?

And the options are AWS WF, AWS Global

Accelerator, AWS Shield, AWS Direct

Connect.

So the right answer here is

option B. AWS global accelerator.

Deliver highly available applications

with fast failure for multi-reion and

multi-AZ architectures.

Question number 78. A company has a set

of e-commerce applications. The

applications needs to be able to send

messages to each other. Which AWS

service meets this requirement?

Option A, AWS autoscaling. Option B,

elastic load balancing. Option C, Amazon

simple Q service, Amazon SQS. and option

D, Amazon Kinesis data streams. So the

right answer here is option C. Amazon

simple Q service.

Amazon simple Q service is a fully

managed message queuing service that

enables you to decouple and scale

microservices, distributed systems and

serverless applications. It allows one

application to send messages to a que

and another application to retrieve

those messages from the queue. These can

be helpful in scenarios where the sender

and receiver are not required to

interact with each other in real time.

Question number 79. What are the

benefits of consolidated building for

AWS cloud services? Choose two. Option

A, volume discounts. Option B, a minimal

additional fee for use. Option C, one

bill will for multiple accounts. Option

D, installment payment option. And

option E, custom cost usage budget

creation. So the right answer here is

option A and option C.

Consolidated billing has the following

benefits. One bill, you get one bill for

multiple accounts. Easy tracking. You

can track the charges across multiple

accounts and download the combined cost

and usage data. Combined usage. You can

combine the usage across all accounts in

the organization to share the volume

pricing discounts, reserved instances,

discounts, and savings plans. These can

result in a lower charge for your

project department or company than with

individual standalone accounts. For more

information, see volume discounts. No

extra fee. Consolidated billing is

offered at no additional cost.

Question number 80. A user wants to

retrieve all Amazon S3 buckets with

ACL's and S3 bucket policies in the S3

console. Which AWS service or resource

will meet these requirements?

Option A, S3 multi-reion access points.

Option B, S3 storage lens. Option C, AWS

IM identity center. Option D, Access

Analyzer for S3.

So the right answer here is option D,

access analyzer for S3.

Access analyzer for S3 allows you to

analyze and review access policies for

your S3 buckets.

It helps you identify and resolve

unintended access to your S3 resources.

With access analyzer for S3, you can

review both bucket policies and bucket

ACL to ensure proper access controls.

Question number 81. What is the best

resource for a user to find compliance

related information and reports about

AWS?

The options are AWS artifact, AWS

marketplace, Amazon inspector, AWS

support.

So the right answer here is option A,

AWS artifact.

AWS Artifact is your go-to central

resource for compliance related

information that matters to you. It

provides on demand access to security

and compliance reports from AWS and ISVS

who sell their products on AWS

marketplace.

Question number 82. Which AWS service

enables companies to deploy an

application close to end users? And the

options are Amazon CloudFront, AWS

Autoscaling, AWS AppSync, Amazon Route

53.

So the right answer here is option A,

Amazon CloudFront.

Amazon CloudFront speeds up distribution

of your static and dynamic web content

such as HTML,

CSS, PHP, image and media files. When

users request your content, CloudFront

delivers it through a worldwide network

of edge locations that provide low

latency and high performance.

So question number 83, which AWS service

or feature improves network performance

by sending traffic through the AWS

worldwide network infrastructure?

And the options are root table, AWS

transit gateway, AWS global accelerator,

Amazon VPC.

So the right answer here is option C.

AWS global accelerator.

Improve

application availability, performance,

and security using the AWS global

network.

Question number 84. Which AWS service

provides highly durable object storage?

And the options are Amazon S3, Amazon

Elastic File System, Amazon Elastic

Block Store, Amazon FSX.

So the right answer here is option A,

Amazon S3.

S3 standard offers high durability,

availability, and performance object

storage for frequently accessed data.

Question number 85. Which responsibility

belongs to AWS when a company host its

databases on Amazon EC2 instances?

Options are database backups, database

software patches, operating system

patches, operating system installations.

So the right answer here is option D

operating system installations.

AWS provides the infrastructure and

services that include a range of Amazon

machine main images with pre-installed

operating systems. These means AWS is

responsible for ensuring that these AMIs

are available and that the underlying

infrastructure to run these instances is

secure and reliable. The other

responsibilities listed database

backups, database software patches and

operating system patches are under the

purview of the customers when using

Amazon EC2 instances.

Question number 86. Which of the

following are advantages of moving to

the AWS cloud? Choose two. Option A, the

ability to turn over the responsibility

of all security to AWS. Option B, the

ability to use the pay as you go model.

Option C, the ability to have full

control over the physical

infrastructure. Option D, no longer

having to guess what capacity will be

required. Option E, no longer worrying

about users access controls.

So the right answer here is option B and

option D.

Stop kissing capacity. Trade fixed

expenses for variable expenses.

Question number 87. Which AWS service is

hybrid cloud storage service that

provides on premises users access to

virtually unlimited cloud storage?

And we have four options. AWS data sync,

Amazon S3 Classier, AWS storage gateway,

Amazon elastic block store.

So the right answer here is option C.

AWS storage gateway.

AWS storage gateway is a set of hybrid

cloud storage services that provide on

premises access to virtually unlimited

cloud storage.

Question number 88. A company plans to

migrate to AWS and wants to create cost

estimates for its AWS use cases. Which

AWS service or tool can the company use

to meet these requirements?

And the options are AWS pricing

calculator, Amazon Cloudatch, AWS Cost

Explorer, and AWS Budgets.

So the right answer here is option A,

AWS pricing calculator.

AWS pricing calculator is a web- based

planning tool that you can use to create

estimates for your AWS use cases. You

can use it to model your solutions

before building them. Explore the AWS

service price points and review the

calculations behind your estimates. You

can use it to help you plan how you

spend, find cost-saving opportunities,

and make informed decisions when using

Amazon Web Services.

Question number 89. Which tool should a

developer use to integrate AWS service

feature

directly into an application? The

options are AWS software development

kit, AWS code deploy, AWS Lambda, AWS

batch.

So the right answer here is option A.

AWS software development kit.

Question number 90. Which of the

following is the recommended design

principle of the AWS well architected

framework? Option A, reduce downtime by

making infrastructure changes

infrequently and in large increments.

Option B, invest the time to configure

infrastructure manually. Option C, learn

to improve from operational failures.

Option D, use monolithic application

design for centralization.

So the right answer here is option C.

Learn to improve from operational

failures.

Learn from all operational failures.

Drive improvement through lessons

learned from all operational events and

failures. Share what is learned across

teams and through the entire

organization.

Question number 91. Use AWS identity

access management to grant access only

to the resources needed to perform a

task is a concept known as

the options are restricted access as

needed access least privilege access

token access.

So the right answer here is option C

least privilege access.

Question number 92. A company wants to

operate a data warehouse to analyze data

without managing the data warehouse

infrastructure. Which AWS service will

meet this requirement?

And the options are Amazon Aurora,

Amazon Red Shift Serverless, AWS Lambda,

Amazon RDS.

So the right answer here is option B.

AWS, Amazon Redshift Serverless.

Amazon Redshift Serverless makes it easy

to run analytics workloads of any size

without having to manage data warehouse

infrastructure.

Question number 93. How does AWS cloud

computing help businesses reduce cost?

Choose two. And the options are option A

as charges the same prices for services

in every AWS region. Option B AWS

enables capacity to adjust on demand.

Option C AWS offers discounts for Amazon

EC2 instances that remain ideal for more

than one week. Option C, AWS does not

charge for data sent from the AWS cloud

to the internet. Option E, AWS

eliminates many of the cost of building

and maintaining on premises data

centers.

So the right answer here is option B and

option E.

Stop spending money running and

maintaining data centers benefit from

massive economies of scale.

Question number 94. The company wants to

grant users in one AWS account access to

resources in another AWS account. The

users do not currently have permission

to access the resources. Which AWS

service will meet these requirements?

And the options are IM group, IM role,

IM tag, IM access analyzer.

So the right answer here is option P. IM

role

Question number 95. Which task is the

responsibility of AWS when using AWS

services?

Option A, management of IM user

permissions. Option B, creation of

security group rules for outbound

access. Option C, maintenance of

physical and environmental controls.

Option D, application of Amazon EC2

operating system patches.

So the right answer here is option C.

Maintaining of physical and

environmental controls.

AWS is responsible for maintaining the

physical and environmental controls of

its data centers including the security

and reliability of the infrastructure.

These includes aspects such as power,

cooling and physical security.

Question number 96. A company wants to

automate infrastructure deployment by

using infrastructure as code. The

company wants to scale production stacks

so the stacks can be deployed in

multiple AWS regions. Which AWS service

will meet these requirements?

And the options are Amazon Cloudatch,

AWS Config, AWS Trusted Advisor, AWS

Cloud Formation.

So the right answer here is option D,

AWS cloud formation.

AWS cloud formation gives you an easy

way to model a collection of related AWS

and third party resources, provision

them quickly and consistently and manage

them through their life cycles by

treating infrastructure as code. The

cloud formation template describes your

desired resources and their dependencies

so you can launch and configure them

together as stack. You can use a

template to create, update, and delete

an entire stack as a single unit as

often as you need to. Instead of

managing resources individually, you can

manage and provision stacks across

multiple AWS accounts and AWS regions.

Question number 97. Which option is an

AWS cloud adoption framework

platform perspective capability and the

options are data architecture, data

protection, data governance, data

science.

So the right answer here is option A

data architecture

AWS cloud adoption framework. Seven

platform perspectives are platform

architecture, data architecture,

platform engineering, data engineering,

provisioning and orchestration, modern

app development, CI/CD.

Question number 98.

A company is running a workload in the

AWS cloud. Which AWS best practice

ensures the most cost effective

architecture for the workload

and the options are loose coupling,

right sizing, catching redundancy.

So the right answer here is option B

right sizing.

Right sizing is the process of matching

instances types and sizes to your

workload performance and capacity

requirements at the lowest possible

cost.

Question number 99. A company is using a

third-party service to back up 10

terabyte of data to a tape library. The

on-remises backup server is running out

of space. The company wants to use AWS

services with the backup without

changing its existing backup workflows.

Which AWS service should the company use

to meet these requirements?

options are Amazon elastic block store,

AWS storage gateway, Amazon elastic

container service, AWS Lambda.

So the right answer here is

option B AWS storage gateway.

AWS storage gateway is a hybrid cloud

storage service that gives you onremises

access to virtually unlimited cloud

storage. Storage gateway provides a

standard set of storage protocols such

as ISI

SMP and NFS which allows you to use AWS

storage without rewriting your existing

applications.

Question number 100. Which task are the

customers responsibility according to

the AWS shared responsibility model?

Choose two. And the options are

establish the global infrastructure.

Option B perform client side data

encryption. Option C configure AM

credential. Option D secure edge

locations. Option E patch Amazon RDS DB

instances.

So the right answer here is option B and

option C.

Question number 101. A company is using

the AWS free tar for several AWS

services for an application. What will

happen if the free tar period usage

period expires or if the application use

exceeds the free tar usage limits?

And we have four options. Option A, the

company will be charged standard pay as

you go service rates for the usage that

exceeds the free t usage. Option B, AWS

support will contact the company to set

up standard services charges. Option C,

the company will be charged for the

services it consumes during the free

tire period plus additional charges for

service consumption after the free tire

period. Option D, the company AWS

account will be frozen and can be

restarted after a payment plan is

established.

So the right answer here is option A.

The company will be charged the standard

pay as you go pricing service rates for

the usage that exceeds the free tar

usage. So when your free T expires or if

your application use exceeds the free T

limits, you simply pay standard pay

service rates.

Question number 102.

Which AWS service uses machine learning

to help discover, monitor, and protect

sensitive data that is stored in Amazon

S3 bucket? And we have four options.

Option A, AWS Shield. Option B, Amazon

Mackie. Option C, AWS network firewall.

Option D, Amazon Cognto.

So the right answer here is option B,

Amazon Mackie.

Amazon Mackie is a data security and

data privacy service that uses machine

learning ML and pattern matching to

discover and protect your sensitive

data.

Question number 103. According to the

AWS share responsibility model, which of

the following is exclusively the

responsibility of AWS? We have four

options. Option A, patching of the guest

operating system. Option B, security

awareness and training. Option C,

physical and environmental control.

Option D, development of an IM password

policy.

So the right answer here is option C,

physical and environmental control.

So according to AWS share responsibility

model AWS is responsible for the

security of the cloud and the customer

is responsible for the security in the

cloud. AWS responsibility AWS is

responsible for protecting the

infrastructure that runs all the AWS

services.

Question number 104. What can users do

using AWS Marketplace?

Select and we have five options. Option

A, sell unused Amazon EC2 spot

instances. Option B, sell solutions to

other AWS users. Option C, buy third

party software that runs on AWS. Option

D, purchase AWS security and compliance

documents. Option E, order AWS Snowball.

So the right answer here is option B

sell solution to other AWS users and

option C buy third party software and

that runs on AWS.

So the AWS marketplace enables qualified

partners to market and sell their

software to AWS customers. AWS

marketplace is an online software store

that helps customers to find, buy and

immediate start using the software and

services that runs on AWS.

Question number 105. What are the

possible uses of AWS edge locations?

Select two. And we have five options.

Option A, hosting applications. Option

B, delivering content closer to users.

Option C, running NoSQL database

catching services. Option D reducing

traffic on the service server by

catching responses. Option E sending

notification messages to end users.

So the right answer is option B

delivering content closer to user. And

option D reducing traffic on the server

by catching responses.

So CloudFront delivers your content

through a worldwide network of data

centers called edge locations. When a

user request content that you are search

serving with CloudFront, the user is

rooted to the edge location that

provides the lowest latency so that

content is delivered with the best

possible performance.

Question number 106. Amazon elastic

container service, Amazon ECS and Amazon

Dynamo DB are used by a firm to execute

its mission critical web application

multiple times during the day. The

workload jumps to up to 10 times the

regular level. Which AWS cloud feature

helps the business to adapt to these

demand changes? And we have four

options. Option A, agility, option B

global reach. Option C scalability and

option D security.

So the right answer here is option C,

scalability.

So AWS EC2 autoscaling servers can get

more requests than they can handle. Too

many requests can cause timeouts and

outages. AWS EC2 autoscaling allows you

to add or remove EC2 instances

automatically. It outcome automates the

capacity to the demand.

Question number 107. A company wants to

improve the overall availability and

performance of its application that are

hosted on AWS. Which AWS service should

the company use? And we have four

options. Option A, Amazon Connect.

Option B, Amazon light sale, option C

AWS Global Accelerator. And option D AWS

storage gateway.

So the right answer here is option C.

AWS Global Accelerator.

So AWS Global Accelerator is a

networking service that improves the

performance of your users traffic by up

to 60% using Amazon Web Services global

network infrastructure when the internet

is congested. AWS Global Accelerator

optimizes the path to your application

to keep packet loss, jitter, and latency

consistently low.

Question number 108. Which of the

following tasks is the customer's duty

under the share responsibility model?

And we have five options. Option A,

maintaining the underlying Amazon EC2

hardware. Option B, managing the VPC

network access control lists. Option C,

encrypting data in transit and at rest.

Option D, replacing failed hard disk

drives. Option E, deploying hardware in

different availability jones.

So the right answer here is option B,

managing the VPC network access control

lists and option C, encrypting data in

transit and at rest.

The hardware related jobs is the prime

responsibility of AWS. VPC network

access control list is something a

customer has to do himself to secure the

applications. Encrypting data in transit

and address is a shared responsibility

in which AWS plays a part. All hardware

related jobs have nothing to do with

customer.

Question number 109. Which of the

following are AWS obligations according

to the AWS shared responsibility model?

And we have five options. Option A,

network infrastructure and

virtualization of infrastructure. Option

B, security of application data. Option

C, guest operating systems. Option D,

physical security of hardware and option

A credentials and policies.

So the right answers are option A

network infrastructure and

virtualization of infrastructure and

option D physical security of hardware.

So physical security is one area where

the AWS shared responsibility model

comes into play. AWS is responsible for

protecting security of the cloud which

includes the infrastructure of hardware,

software, networking and facilities that

run AWS services.

Question number 110. What charges are

included in the comparison of AWS versus

on premises total cost of ownership TCO?

And we have four options. Option A data

center security. Option B business

analysis. Option C project management.

And option D operating system

administration.

So the right answer here is option A

data center security. So cloud TCO

involves calculating the cost required

to host, run, integrate, secure and

manage workloads in the cloud over their

lifetime. This includes fees associated

with the underlying infrastructure such

as compute, data transfer and storage.

It also includes the cost of supporting

cloud services ranging from security and

management tools to data analytics.

Manpower cost for cloud engineers should

also be a part of the cloud TCO

equation.

Question number 111. Which AWS service

or feature identifies whether an Amazon

S3 bucket or an IM role has been shared

with an external entity? And we have

four options. Option A, AWS service

catalog. Option B, AWS systems manager.

Option C, AWS IM access analyzer. Option

D, AWS organizations.

So the right answer here is option C,

AWS IM access analyzer.

So access analyzer helps you identify

the resources in your organization and

accounts such as Amazon S3 buckets or IM

roles shared with an external entity.

This lets you identify unintended access

to your resources and data which is a

security risk.

Question number 112. Which AWS service

supports MySQL and PostSQL as relational

databases? And we have four options.

Option A, Amazon Red Shift. Option B,

Amazon Dynamo DB. Option C, Amazon

Aurora. and option D, Amazon Neptune.

So the right answer here is option C,

Amazon Aurora.

So AWS Aurora is a fully managed

relational database optimized for use in

AWS. It supports MySQL and PostgresSQL.

With this service, you can combine the

cost effectiveness of open-source

databases with increased availability

and performance.

Question number 113.

Which AWS services is natively supported

by AWS Snowball Edge?

And we have four options. Option A, AWS

Server Migration Service, AWS SMS,

option B, Amazon Aurora,

option C, AWS Trusted Advisor.

And option D, Amazon EC2.

So the right answer here is option D.

Amazon EC2.

Snowball edge devices have Amazon S3 and

Amazon EC2 compatible endpoints

available enabling programmatic use

cases.

Question number 114. Which AWS share

responsibility controls are shared? And

we have five options. Option Awareness

and training. Option B patching of

Amazon RTS. Option C configuration

management. Option D physical and

environmental controls. Option E service

and communications protection or

security.

So the right answer here is option A

awareness and training and option C

configuration management.

So shared controls controls which apply

to both the infrastructure layer and a

customer layers but in completely

separate contexts or prospectives. In a

shared control AWS provides the

requirements for the infrastructure and

the customers must provide their own

control implementation within their use

of AWS services. Examples include patch

management. AWS is responsible for

patching and fixing flaws within the

infrastructure. But customers are

responsible for patching their guest OS

and applications. Configuration

management. AWS maintains the

configuration of its infrastructure

devices. But a customer is responsible

for configuring their own guest

operating systems, databases, and

applications. Awareness and training.

AWS trains AWS employees, but a customer

must train their own employees.

Question number 115. A company does not

want to rely on elaborate forecasting to

determine its usage of compute

resources. Instead, the company wants to

play pay only for the resources that it

uses. The company also needs the ability

to increase or decrease its resources

using to meet business requirements.

Which pillar of the AWS well architected

framework aligns with these

requirements? And we have four options.

Option A operational excellence. Option

B security, option C reliability. And

option D cost optimization.

So the right answer here is option D

cost optimization.

So cost optimization is a continual

process of refinement and improvement

over span of a workload life cycle. The

practices in this paper helps you build

and operate cost aware workloads that

achieve business outcomes while

minimizing costs and allowing your

organization to maximize its returns on

investments.

Question number 116. After a single

availability jone service disruption, a

corporation must guarantee that the end

point for the database instance stays

the same. The program must continue

database operations without human

intervention from an administrator. How

are these speculations to be met? And we

have four options. Option A, use

multiple Amazon Route 53 routes to the

standby database instance endpoint

hosted on AWS storage gateway. Option B,

configure Amazon RDS multi-availability

zone deployments with automatic failover

to the standby. Option C, add multiple

application load balancers and deploy

the database instance with AWS elastic

paintto. Option D, deploy a single

network load balancer to distribute

incoming traffic across multiple Amazon

CloudFront origins. So the right answer

here is option B. Configure Amazon RDS

multi-availability zone deployment with

automatic failover to the standby.

So multiaser deployments can have one

standby or two standby DB instances.

When the deployment has one standby DB

instance, it's called a multi- asert DB

instant deployment. A multiADB instant

deployment has one standby DB instance

that provides failover support but

doesn't serve read traffic. The

deployment has two standby DB instances.

It's called the multi-AZDB cluster

deployment. A multi-AZDB cluster

deployment has standby DB instances that

provide failover support and can also

serve read traffic.

Question number 117. Which cost must be

addressed when comparing AWS cloud

versus onremises total cost of

ownership? Select two. And we have five

options. Option A, software development.

Option B, project management. Option C,

storage hardware. Option D, physical

servers. Option E, antivirus software

license. So the right answer is option

C, storage hardware and option D,

physical servers.

So to get the most out of your

estimates, you should have a good idea

of your basic requirements. For example,

if you're going to try Amazon Elastic

Compute Cloud, it might help if you know

what kind of operating system you need.

what your memory requirements are and

how much input output you need. You

should also dei decide whether you need

storage such as if you're going to run a

database and how long you intend to use

the service. You don't need to make

these decisions before generating an

estimate. Though you can play around

with the service configuration and

parameters to see which options fit your

use case and budget best.

Question number 118. A company is

migrating to the AWS cloud. The company

requires consultative review and

guidance for its applications during the

migration. After the migration is

complete, the company requires a

response within 30 minutes of if

business critical systems go down. Which

AWS support plans meet these

requirements? Choose two. And we have

five options. Option A, AWS enterprise

support. Option B, AWS enterprise onramp

support. Option C, AWS developer

support. Option D, AWS basic support.

And option E, AWS business support. So

the right answer here is option A, AWS

enterprise support. And option B, AWS

enterprise onramp support.

So with enterprise onramp you get 24

into7 technical support from highquality

engineers tools and technologies to

automatically manage health of your

environment. Consultative architectural

guidance delivered in the context of

your application use cases and a pool of

technical account managers to coordinate

access to proactive preventative

programs and AWS subject matter experts.

Question number 119. Which AWS products

anticipate future AWS expenses

automatically? And we have four options.

Option A, AWS support center. Option B,

AWS total cost of ownership calculator.

Option C, AWS simple monthly calculator.

And option D cost explorer.

So the right answer here is option D

cost explorer.

So AWS cost explorer has an easy to use

interface that lets you visualize,

understand and manage your AWS cost and

usage over time.

Question number 120. Which functionality

may be utilized to prevent inadvertent

overrides or deletions of Amazon S3

buckets? And we have four options.

Option A, life cycle policy. Option B,

object versioning. Option C, server side

encryption. And option D, bucket ACL.

So the right answer here is option B,

object versioning.

So S3 object versioning is one of the

most secret features in Amazon S3.

Object versioning is used to avoid

unintended overrides and deletions.

versionings is not enabled by default

and this feature is used to keep

multiple versions of objects at the same

time in the bucket. If we enable

versioning on the bucket, we cannot

delete an object directly. All versions

remains in the bucket and a delete

marker is introduced which become the

current version. So if you need to

delete an object, you need to remove

that delete marker also. Existing

objects in your bucket do not change and

only future request behavior changes. If

you put an object retrieval request, the

current version of the object will

always return.

Question number 121. Amazon Dynamo DP is

used by a business in its AWS cloud

architecture. Which of the following is

the duty of the organization according

to the AWS shared responsibility model?

We have five options. Option A,

operating system patching and upgrades.

Option B, application of appropriate

permissions with IM tools. Option C,

configuration of data encryption

options. Option D, creation of DynamoB

endpoints. Option E, infrastructure

provisioning and maintenance.

Right answer is option B, application of

appropriate permissions with IM tools

and option C, configuration of data

encryption. options.

So cloud security at AWS is the highest

priority. As an AWS customer, you

benefit from a data center and network

architecture that is built to meet the

requirements of the most security

sensitive organization. Security is a

shared responsibility between AWS and

AWS customer.

Question number 122. A company wants to

launch its workload on AWS and requires

the system to automatically recover from

failure. Which pillar of the AWS well

architected framework includes this

requirement? We have four options.

Option A cost optimization, option B

operational excellence, option C

performance efficiency and option D

reliability.

So the right answer is option D

reliability.

So the reliability pillar includes the

ability of a system to recover from

infrastructure or service disruptions,

dynamically acquire computing resources

to meet demand and mitigate disruptions

such as my misisconfigurations or

transient network issues.

Question number 123. Which AWS service

should a company use to create a NoSQL

database? And we have four options.

Option A, Amazon Aurora. Option B,

Amazon Dynamo TV. Option C, Amazon Red

Shift. And option D, Amazon Neptune.

So the right answer is option B, Amazon

Dynamo DB.

So AWS Dynamob DB is a fully managed

NoSQL database service that is designed

to provide fast and predictable

performance with seamless scalability.

It is a good choice for companies

looking to create a NoSQL database in

AWS.

Question number 124. Which AWS service

or functionality is utilized by

distributed application to send text and

email messages? And we have four

options. Option A, Amazon simple

notification service. Option B, Amazon

simple email service. Option C, Amazon

Cloudatch alerts and option D, Amazon

simple Q service.

So the right answer here is option A,

Amazon simple notification service which

is Amazon SNS.

So Amazon SNS is a fully managed

messaging service for both application

to application and application toerson

communication. The application to

application functionality provides

topics for high throughput pushbased

many to many messaging between

distributed systems, microservices and

event driven serverless applications

using Amazon SNS topics. Your publisher

system can fan out messages to a large

number of subscriber systems including

Amazon SQS

Q's AWS Lambda functions, HTTPS

endpoints, and Amazon Kinesis data

firehouse for parallel processing and

A2P functionality enables you to send

messages to users to scale via SMS,

mobile push, and email.

Question number 125. To achieve high

availability, how many availability

jones should competing resources be

provided across? And we have four

options. Option A, a minimum of one.

Option B, a minimum of two or option C,

a minimum of three. And option D, a

minimum of four or more.

So the right answer is option B. A

minimum of two.

So high availability requires at least

two availability jones. The idea is that

only one jone will go down at a time.

The probable packhole cutting power and

network cables. Since Amazon isolates

the data center for each availability

jone, the pack hole won't take out more

than one availability jone.

Question number 126. Which of the

following is AWS obligation under the

AWS share responsibility model? And we

have four options. Option A, data

encryption in transit. Option B,

firmware updates on hardware. Option C,

operating system patching on Amazon EC2

instances. Option D, data encryption at

rest.

So the right answer here is option B,

firmware updates on hardware.

So under the shared responsibility

model, AWS is responsible for the

hardware and software that runs AWS

services. This applies to AWS outpost

just as it does to an AWS region. For

example, AWS manages security patches,

updates firmware, and maintains the

outpost equipment.

Question number 127. To boost

availability, a user intend to create

two more Amazon EC2 instances. What

should the user do? And we have four

options. Option A, launch the instance

across multiple availability zones in a

single AWS region. Option B, launch the

instances as EC2 reserved instances in

the same AWS region and the same

availability zone. Option C, launch the

instances in multiple AWS region but in

the same availability zone. Option D,

launch the instances as EC2 spot

instances in the same AWS region but in

different availability jones. So the

right answer here is option A, launch

the instances across multiple

availability zones in a single AWS

region. So AWS operates

state-of-the-art, highly available data

centers. Although rare, failures can

occur that affects the availability of

instances that are in the same location.

If you host all of your instances in the

same location that is affected by a

failure, none of your instances would be

available.

Question number 128. What are the

customers duties under the AWS share

responsibility model? Select.

And we have five options. Option A,

physical and environmental security.

Option B, physical network devices

including firewalls. Option C, storage

device decommissioning. Option D,

security of data in transit. Option E,

data integrity authentication.

So the right answer here is option D

security of data in transit. and option

E data integrity authentication.

So customers responsibility is the

security of everything they make in AWS

cloud. Customers have complete control

over your content. Customers manages AWS

services, softwares and access the

access to the data.

Question number 129. A large enterprise

with multiple VPCs in several AWS

regions around the world needs to

connect and centrally manage network

activity between its VPCs. Which AWS

service or feature meets these

requirements? And we have four options.

Option A, AWS direct connect, option B,

AWS transit gateway, option C AWS side

to side VPN or option D VPC endpoints.

So the right answer here is option B.

AWS transit gateway.

So AWS transit gateway connects your

Amazon virtual private clouds and on

premises networks through a central hub.

These connection simplifies your network

and puts an end to complex peering

relationships. Transit gateway acts as a

highly scalable cloud router. Each new

connection is made only once. So deliver

applications around the world. Build,

deploy, and manage applications across

thousands of Amazon VPCs without having

to manage peering connections or update

routing tables.

Question number 130. Which AWS service

should be used to monitor Amazon EC2

instances for CPU and network

utilization? And we have four options.

Option A, Amazon Inspector. Option B,

AWS Cloud Trial. Option C, Amazon

Cloudatch and option D, AWS config. So

the right answer here is option C,

Amazon Cloudatch.

So using Amazon Cloudatch, which is a

monitoring service provided by AWS,

Cloudatch provides metrics and logs for

ECS such as CPU and memory usage for the

container instances, the number of tasks

and running services running, and the

number of containers that are being

deployed or stopped.

Question number 131. How can customers

minimize the amount of time they spend

patching their operating system by

migrating to the AWS cloud? And we have

five options. Option A, users can take

advantage of managed services on AWS.

Option B, users can outsource operating

system patching to the AWS support team.

Option C, AWS professional service will

upgrade instances to the latest

operating system versions. Option D,

users have the ability to use license

included Amazon EC2 instances. Option E,

users can take advantage of AWS system

manager features. So the right answer

here is option A, users can take

advantage of managed services on AWS and

option E, users can take advantage of

AWS system manager futures. So patch

manager a capability of AWS system

manager automates the process of

patching managed nodes with both

security related updates and other types

of updates.

Question number 132. In the case of an

environmental disruption, a company

needs to make sure it infrastructure is

structured for fault tolerance and

business continuity. Which parts of the

AWS truck architecture should the

organization replicate? And we have four

options. Option A, edge locations.

Option B, availability zones. Option C

regions. Option D Amazon root 53.

So the right answer here is option C

regions.

So AWS has the concept of a region which

is a physical location around the world

where we cluster data centers.

So we call each group of logical data

centers an availability zone. Each AWS

region consists of a minimum of three

isolated and physically separated

availability jones within a geographic

area. Unlike other cloud providers who

often define a region as a single data

center. The multiple AZ design of every

AWS region offers advantages for

customers. Each availability zone has

independent power, cooling and physical

security and is connected via redundant

ultra low latency networks.

Question number 133. According to which

AWS cloud design guideline system should

minimize their interdependencies? And we

have four options. Option A scalability.

Option B services not servers. Option C

removing single point of failure. Option

D loose coupling. So the right answer

here is option D loose coupling. So AWS

help helps loose coupled architecture

that reduces interdependencies. A change

of failure in a component does not

cascade to other components.

Question number 134. Which task need the

root user credentials for an AWS

account? Select. And we have five

options. Option A, creating an Amazon

EC2 key pair? Option B, removing an IM

user from the administrators group.

Option C, changing the AWS support plan.

Option D, creating an Amazon CloudFront

keypad. Option E, granting an IM user

full administrative access. So the right

answer here is option C changing the AWS

support plan. Option D granting an IM

user full administrative access.

So there are only few tasks that require

you to use root user. Change your

account settings. This includes account

name, email address, root user password

and root user access keys. View certain

tax invoices. Close your AWS account.

Restore IM user permissions and change

your AWS support plan or cancel your AWS

support plan.

Question number 135. A user wants to

deploy a service to the AWS cloud by

using infrastructure as a code

principles. Which AWS service can be

used to meet this requirement? And we

have four options. Option A, AWS system

manager. Option B, AWS cloud formation.

Option C, AWS code commit. And option D,

AWS config. So the right answer is

option B, AWS cloud formation. So use

AWS cloud formation templates. AWS cloud

formation is a service that helps you

model and set up your Amazon web

services resources, making it easier to

manage and automate your infrastructure.

With cloud formation, you can define

your infrastructure as a code using

templates written in JSON or YAML.

Question number 136. A company that has

multiple business units wants to

centrally manage and govern its AWS

cloud environments. The company wants to

automate the creation of AWS accounts,

apply service control policies, and

simplify billing processes. Which AWS

service or tool should the company use

to meet this requirement? We have four

options. Option A, AWS organizations,

option B, cost explorer, option C, AWS

budgets. Option D, AWS trusted advisor.

So the right answer here is option A,

AWS organization.

So AWS organization provides you with

the capability to centrally manage and

govern your your cloud environment. You

can manage and govern your accounts

under a single bill. Set central

policies and configuration requirements

for your entire organization. Create

custom permissions or capabilities

within the organization and delegate

responsibilities to other accounts so

they can manage on behalf of the

organization. In addition, AWS

organization is integrated with other

AWS services. So you can define central

configurations, security mechanisms,

audit requirements, and resource sharing

across accounts in your organization.

Question number 137. The administrator

must first install and begin utilizing a

popular IT product. What resources are

available to the administrator?

You have four options. Option A, AWS

well architected framework

documentation. Option B, Amazon

CloudFront. Option C, AWS code commit.

Option D, AWS quick start reference

deployments.

So the right answer here is option D AWS

quickart reference deployments.

So quick starts are built by AWS

solutions architects and partners to

help you deploy popular technologies on

AWS

based on AWS best practices for security

and high availability. These

accelerators reduce hundreds of manual

procedures into just a few steps so you

can build your production environment

quickly and start using it immediately.

Question number 138. Which solution

enables user in various AWS regions to

have the fastest application response

times for frequently requested data? And

we have four options. Option A, AWS

cloud trial across multiple availability

zones. Option B, Amazon CloudFront to

edge locations. Option C, AWS cloud

formation in multiple regions. Option D,

a virtual private gateway or AWS direct

connect.