# for read information

Which pillar of the AWS Well-Architected Framework is supported by the design philosophy of performing operations as code?     **Operational excellence**

WS Infrastructure Event Management  The program is included in the Enterprise Support plan and is available to Business Support customers for an additional fee.

What is the customer's obligation while using an AWS managed service under the AWS shared responsibility model?     **Customer data**

Which of the following is an example of security in the AWS Cloud under the AWS shared responsibility model?   **Firewall configuration**

Permissions for which of the following are managed by service control policies (SCPs)?&#x20;

**AWS Organizations**

Which cloud architectural concept is supported by a system that can scale in terms of users, traffic, or data quantity without sacrificing performance? **Implement elasticity**

<mark style="color:blue;">When using AWS Lambda, what is the customer's responsibility?</mark>    <mark style="color:blue;">A. Operating system configuration B. Application management C. Platform management D. Code encr</mark>yption <mark style="color:red;">bilmirem</mark>

Which duty is the customer's responsibility while managing AWS Lambda functions under the AWS shared responsibility model? **Creating versions of Lambda functions**

Which of the following is not a duty of the client under the AWS shared responsibility model? (Select two.)   **Decommissioning of physical storage devices  Controlling physical access to data centers**

Which feature enables Amazon EC2 instances to be more elastic in response to changing workload demand?  **Virtualization Management**

Which cost components should be addressed when developing a cloud Total Cost of Ownership (TCO) model for AWS workloads? (Select three.)   **Compute costs Storage costs Data transfer costs**

<mark style="color:blue;">Which of the following are capabilities of the AWS Cost Management tools? (Select two.)</mark>

**Break down AWS costs by day, service, and linked AWS account. .**&#x20;

**Create budgets and receive notifications if current of forecasted usage exceeds the budgets.**

Which of the following is included in the AWS Trusted Advisor checks? (Select two.

**Information on Amazon S3 bucket permissions**

**Multi-factor authentication enabled on the AWS account root use**

<mark style="color:blue;">Which scenarios should a user report to the AWS Abuse te</mark>am? (Select two.

**AWS resources are being used to host objectionable or illegal content.**

**A companyגTM€s resources are being used in a way that is inconsistent with corporate policy.**&#x20;

What is the AWS Cloud's value proposition? **No long-term contract is required**

After studying the AWS Cost and Usage report in the AWS Management Console, a Cloud Practitioner detects a billing problem. Which course of action should be done to rectify this?

**. Open a detailed case related to billing and submit it to AWS Support for help.**

Which AWS services is natively supported by AWS Snowball Edge  **Amazon EC2**

After a single Availability Zone service disruption, a corporation must guarantee that the endpoint for a database instance stays the same. The program must continue database operations without human intervention from an administrator. How are these stipulations to be met?

**Configure Amazon RDS Multi-Availability Zone deployments with automatic failover to the standby**

Which AWS products anticipate future AWS expenses automatically?    **Cost Explorer**

How can customers minimize the amount of time they spend patching their operating systems by migrating to the AWS Cloud? (Select two.)

**Users can take advantage of managed services on AWS**

**Users can take advantage of AWS Systems Manager features**

Which tasks need the root user credentials for an AWS account? (Select two.)

**Changing the AWS Support plan**

**Granting an IAM user full administrative access**

What are the AWS Cloud's advantages? (Select two.

**No need to guess capacity requirements . Increased speed to market**

<mark style="color:red;">A business may be required to operate its workload exclusively in its on-premises data center due to performance and regulatory limitations. Which Amazon Web Services (AWS) services or resources should the business utilize? (Select two.)</mark>  **AWS Outposts . AWS Snowball Edge**

Which of the following is a design concept associated with dependability in the AWS Well-Architected Framework?   **Ability to recover from failure**

<mark style="color:red;">**Which AWS product or service enables businesses to monitor and classify their expenditure at a precise level?**</mark>**&#x20;  Cost allocation tags**

Which AWS service is responsible for monitoring the health of your applications automatically?

**AWS Elastic Beanstalk**

What may aid in the evaluation of a cloud-based application? (Select two.)&#x20;

**AWS Professional Services**&#x20;

**AWS Partner Network (APN**)

A cloud practitioner has a seldom run data analysis job that can be stopped without causing damage. Which Amazon EC2 purchase option should be utilized to maximize cost savings?

**Spot Instances**

<mark style="color:red;">Which AWS service or product enables an organization to</mark> <mark style="color:red;"></mark><mark style="color:red;">**automate the delivery of application changes?**</mark>**&#x20;             AWS CodeDeploy**

The term "fault tolerance" relates to the following: **the built-in redundancy of an applicationגTM€s components**

According to the AWS shared responsibility model, what is one of the customer's responsibilities?

**Application security**

On Amazon EC2 instances, a business has installed various relational databases. Each month, the database software manufacturer publishes new security updates for databases that must be deployed. Which method is the MOST EFFECTIVE for applying security patches?

**Use AWS Systems Manager to automate database patching according to a schedule**

What does the AWS Cloud bring clients in terms of increased execution speed and agility?

**Readily available resources with low provisioning times**&#x20;

&#x20;**Scalable compute capacity**

A business wishes to strengthen its security and audit posture by restricting incoming access to Amazon EC2. What should the organization use **instead of opening incoming SSH ports and** handling SSH keys to remotely access instances?     **AWS Systems Manager Session Manager**

Which service's primary objective is to manage software **versions**?     **AWS CodeCommit**

<mark style="color:red;">Which AWS solution enables rapid setup and management of a new multi-account AWS environment</mark>   **AWS Control Tower**

<mark style="color:red;">Which AWS service enables infrastructure as code management?</mark>   **AWS CloudFormation**

<mark style="color:red;">Which Amazon EC2 pricing model is dynamically adjusted in response to EC2 instance availability and demand?</mark>   **Spot Instances**

Which situations should the AWS Abuse team be notified about&#x20;

**An intrusion attempt is made from an AWS IP address**

A business need software solutions that are either hosted on the AWS platform or are linked with it. Independent software providers, as well as management and security vendors, are required to provide solutions.    **AWS Partner Network (APN) Technology Partners**

How can AWS Trusted Advisor assist AWS Cloud users? (Select two.)

. **It detects potential security vulnerabilities caused by permissions settings on account resources**

**. It provides a list of cost optimization recommendations based on current AWS usage**

Every few years, a business invests several months in modernizing its on-premises infrastructure. The organization wishes to shorten the time required for infrastructure purchase by shifting to the AWS Cloud.

**The company will have increased agility with on-demand access to IT resources**

The continuous lowering in AWS Cloud price is a result of the following:  **economies of scale**

A user must **locate, categorize, and safeguard sensitive data** stored in Amazon S3 automatically. Which AWS service satisfies these criteria?     **Amazon Macie**

A business has a stateless application workload that can withstand brief periods of outage. The program conducts calculations in massively parallel fashion. Which Amazon EC2 pricing model should the business choose to save costs? **Spot Instances**

A business wishes to migrate some of its resources to the AWS Cloud. To comply with regulatory standards, data must stay on-premises and local. AWS and the company's resources must have a low latency. Which Amazon Web Services (AWS) service or functionality may be leveraged to fulfill these requirements?     <mark style="color:red;">**AWS Outposts**</mark>

Which AWS service may be utilized to deploy the application?   <mark style="color:red;">**AWS CodePipeline**</mark>

Which resource is the MOST EFFECTIVE for keeping current on AWS security announcements?

**AWS Security Bulletins**

Which AWS services can be utilized to automate infrastructure? (Select two.)

**AWS CloudFormation AWS OpsWorks**

While an Amazon EC2 instance is only activated when it is required, it must stay active throughout the life of the procedure. What is the most acceptable method of purchase? **On-Demand Instances**

A business wishes to grant access to Amazon RDS to one of its workers. Additionally, the corporation wishes to confine contact to the AWS CLI and AWS software development kits (SDKs).  Which combination of measures should the business do in order to satisfy these needs while adhering to the concept of least privilege? (Select two.)

**Create an IAM user and provide programmatic access only**

**Create an IAM policy with Amazon RDS access and attach it to the IAM user**.

The following are the economical advantages of using AWS: (Choose two.)

**reduced Total Cost of Ownership (TCO)**

**reduced operational expenditure (opex**).

A business employs Amazon EC2 infrastructure to host steady-state workloads and is looking to save money. Which pricing model for EC2 instances should the business choose?

**Reserved Instances**

How can AWS MOST effectively cut a rising start-computing up's costs?

**It provides on-demand resources for peak usage.**

Which Amazon Web Services (AWS) service may be used to securely store and manage source code versions?  &#x20;**&#x20;**<mark style="color:red;">**AWS CodeCommit**</mark>

Which tool may be used to track planned AWS infrastructure changes?&#x20;

**AWS Personal Health Dashboard**

Which AWS solution enables customers to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location settings, or on-premises facilities through a hybrid architecture?

**AWS Outposts**

<mark style="color:red;">**Which opportunities does AWS provide for clients interested in learning about cloud security in an instructor-led setting? (Select two.**</mark>)

**AWS Online Tech Talks**

**. AWS Classroom Training**

Which tool is most suited for integrating the billing of previously distinct AWS accounts?

**Consolidated billing**

A business has chosen to shift its production workloads to the Amazon Web Services (AWS) Cloud. Which activities may assist in lowering operating expenses associated with the migration? (Select two.) &#x20;

**Reduce overprovisioned instances**&#x20;

&#x20;**Use managed services**

<mark style="color:red;">Which Amazon EC2 price option is appropriate for applications that need intermittent, spiky, or unexpected workloads?</mark>  **On-Demand Instances**

What enables a business to give a low-latency experience to its worldwide users?

**Using edge locations to put content closer to all users**

<mark style="color:red;">Which AWS Cloud feature relieves customers of the requirement to estimate future infrastructure consumption?</mark>  **Elasticity of the AWS Cloud**

Which of the following is an example of a frequent IT duty that AWS can do in order to free up firm IT resources? (Select two.)  &#x20;

<mark style="color:red;">**Patching databases software**</mark> &#x20;

&#x20;<mark style="color:red;">**Backing up databases**</mark>

A workload hosted on AWS will continue to operate indefinitely by using a steady number of Amazon EC2 instances. Which pricing strategy will decrease costs while assuring the availability of computational resources     **Reserved Instances**

On AWS, a corporation is constructing a new archiving system capable of storing terabytes of data. The firm will NOT often retrieve the data. Which Amazon S3 storage type will result in the LOWEST SYSTEM COST     **S3 Glacier**

The AWS IAM recommended practice for providing the fewest possible privileges is as follows:

**apply an IAM policy only to IAM users who require it**

<mark style="color:red;">Which AWS feature is exemplified by on-demand technology services that allow businesses to substitute variable expenditures for upfront fixed expenses?</mark>&#x20;**&#x20;Pay-as-you-go pricing**

What technology permits compute capacity to alter in response to changing load conditions

**Auto Scaling**

<mark style="color:orange;">What can be utilized to automate and manage AWS setups that are safe, well-architected, and multiaccoun</mark>t?  **AWS Control Tower** &#x20;

Control Tower automates the process of setting up a new baseline multi-account AWS environment that is secure, well-architected, and ready to use. Control Tower incorporates the knowledge that AWS Professional Service has gained over the course of thousands of successful customer engagements

Which tool is suitable for monitoring Amazon Web Services service limits?

A**WS Trusted Advisor**

Which AWS service or functionality involves the implementation of an internet service provider (ISP) and a colocation facility?  **AWS Direct Connect**

A business currently operates in one AWS Region and is extending operations to a second. In the second Region, the organization is utilizing the identical AWS CloudFormation template as in the original Region. When the organization seeks to deploy Amazon EC2 On-Demand Instances in the second Region, it encounters errors. What might possibly be the source of these error messages?

**The requested EC2 instance types are not available in the second Region**.

Which principles are used while architecting apps for AWS Cloud reliability? (Select two.)

**Design for automated failure recovery** &#x20;

**Use multiple Availability Zones**

Which AWS service or feature gives information about planned events that are now occurring or may occur in the near future and may impact an AWS account?  **AWS Personal Health Dashboard**

Which components are necessary to configure an AWS site-to-site VPN connection successfully? (Select two.)&#x20;

**Customer gateway** &#x20;

**Virtual private gateway**

AWS provides which of the following security-related services? (Select two.)

**AWS Trusted Advisor security checks** &#x20;

**Data encryption**

Which AWS Help plan gives the bare minimum technical support through phone calls? **Business**

A business want to grow from one AWS Region to another. What steps must the firm take to begin supporting the new Region?  **Begin deploying resources in the second Region**

<mark style="color:red;">Which actions can an IAM user accomplish if they have been given all available AWS Identity and Access Management (IAM) permissions? (Select two.)</mark>

**Turn on multi-factor authentication (MFA) for non-administrative IAM users.**

**Delegate access to another AWS account**

Which condition must be completed in order to delink a member account from an AWS Organizations account? &#x20;

**The member account must meet the requirements of a standalone account**

Which solution for catastrophe recovery is the LEAST expensive?  **Backup and restore**

Where can consumers obtain a list of AWS-recognized third-party security solution providers?

**AWS Marketplace**

<mark style="color:red;">Which activity on the AWS Cloud is a customer duty under the AWS shared responsibility model</mark>?

**Ensuring Amazon EBS volumes are backed up**

<mark style="color:red;">Which Amazon Web Services service consolidates, organizes, and prioritizes security warnings and results from several Amazon Web Services services</mark>?   **AWS Security Hub**

Which of the following approaches does AWS allow for securing Identity and Access Management (IAM) users? (Select two.)

**Using Multi-Factor Authentication (MFA) .**

&#x20;**Enforcing password strength and expiration**

Which AWS services are capable of being scaled automatically with AWS Auto Scaling? (Select&#x20;

two.)

**Amazon EC2 .Amazon DynamoDB**

A business wishes to migrate its data center to the Amazon Web Services (AWS) Cloud. Technology executives must prepare a business case that details the most cost-effective deployment and procurement strategies. Which AWS service or functionality provides the LEAST amount of operational overhead for this task?      **AWS Migration Evaluator**

<mark style="color:red;">According to the AWS shared responsibility model, who is responsible for scheduling and conducting backups when using Amazon RDS?</mark>

**The customer is responsible for scheduling and AWS is responsible for performing backups.**

<mark style="color:red;">Which AWS team aids clients with cloud adoption acceleration via paid engagements in one of many specialist practice areas</mark>?   . **AWS Professional Services**

Which AWS services should be utilized for read/write operations on data that is continually changing? (Select two.) **Amazon RDS Amazon EFS**

Which managed Amazon Web Services (AWS) solution gives real-time assistance on Amazon Web Services (AWS) security best practices? **AWS Trusted Advisor**

A firm's key business data must be stored on Amazon S3 with a backup in another AWS Region. How is this accomplished?   **Set up Amazon S3 cross-region replication to another AWS Region**

Which AWS Cloud services are compatible with hybrid AWS Cloud architectures? (Select two.)

<mark style="color:red;">Amazon Route 53 . Virtual Private Gateway</mark>

Which of the following services would be appropriate for deploying an application to on-premises servers? (Select two.)  <mark style="color:red;">**AWS OpsWorks . AWS CodeDeploy**</mark>

Which AWS service enables automated scaling up and down of an application without requiring capacity planning decisions?   <mark style="color:red;">**AWS Lambda  ? 546**</mark>

What is the least expensive, most durable method of storing database backups for instant retrieval?   **Amazon S3**

Which of the following options enables single sign-on (SSO) to the AWS Console for a customer?

<mark style="color:red;">**AWS Directory Service**</mark>

A security officer requests a list of any probable Amazon EC2 security group vulnerabilities. Which Amazon Web Services (AWS) service should the officer use?  <mark style="color:red;">**AWS Trusted Advisor**</mark>

Which of the following may be used to define AWS Cloud infrastructure as code?&#x20;

<mark style="color:red;">**AWS CloudFormation**</mark>

A business makes use of a database that includes a simple sign-up page for creating users and a basic login form for authenticating users and granting them access to the database. The firm want to enable users to save personal information, but user access must be more safe and trustworthy.Which Amazon Web Services (AWS) service or functionality will satisfy these requirements? **Amazon Cognito**

Which of the following is an Amazon Web Services compute service? (Select two.)

<mark style="color:red;">**Amazon Lightsail   AWS Batch**</mark>

What is Amazon Web Services Trusted Advisor? &#x20;

**It is an online tool with a set of automated checks that provides recommendations on cost optimization, performance, and security**

Previously, a business lost data kept in an on-premises data center. To guard against future data loss, the firm intends to utilize AWS to automatically provide thousands of its computers in a fully provisioned state in minutes, in a format compatible with data restoration. Which Amazon Web Services (AWS) offering should the business employ to achieve these requirements?

<mark style="color:red;">**CloudEndure Disaster Recovery**</mark>

A business want to implement a new architecture using AWS services. The business must compare service charges on a variety of scales. Which AWS service, tool, or feature should the business utilize to accomplish this task?   **AWS Pricing Calculator**

<mark style="color:red;">By treating infrastructure in the AWS Cloud as code, customers can</mark>:&#x20;

**automate the infrastructure provisioning process**

What is one of the Amazon Relational Database Service's (Amazon RDS) advantages?

**It simplifies relational database administration tasks.**

<mark style="color:red;">To get assistance with billing or to reinstate a suspended account, a user should send an account and billing request to:</mark>   **AWS Support**

On AWS, a business must plan, schedule, and execute hundreds of thousands of computing tasks. Which AWS service might be used to fulfill this requirement?     <mark style="color:red;">**AWS Batch**</mark>

A user requires an automated security assessment report that identifies unauthorized network access to Amazon EC2 instances and their associated issues. Which AWS service will be responsible for generating this evaluation report?&#x20;**&#x20;&#x20;**<mark style="color:red;">**Amazon Inspector**</mark>

What are some of the benefits of Reserved Instances? (Select two.)

**They provide a discount over on-demand pricing**

**Customers can reserve capacity in an Availability Zone.**

<mark style="color:red;">A corporation has numerous AWS accounts inside AWS Organizations and want to limit the advantage of Amazon EC2 Reserved Instances to a single account. Which course of action should be followed?</mark> &#x20;

**Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level.**

Which AWS services have automatic data backups by default?   **Amazon Aurora**

Which of the following are advantages of using Amazon RDS over an on-premises database? (Select two.)

**RDS backups are managed by AWS.** &#x20;

**RDS database compute capacity can be easily scaled**

Which service may be used to monitor and get alerts for AWS account root user sign-in events through the AWS Management Console?   **Amazon CloudWatch**

A user with minimal familiarity with AWS services want to rapidly create a scalable **Node.js** application in the AWS Cloud. Which deployment service should be utilized for the application? . **AWS Elastic Beanstalk**

Which Amazon S3 storage class enables customers to keep backup data for extended periods of time at the LOWEST possible cost? **S3 Glacier**

Which of the following is an advantage of the AWS Compliance program for AWS customers? (Select two.)

<mark style="color:red;">**AWS is responsible for the maintenance of common compliance framework documentation.**</mark>&#x20;

&#x20;<mark style="color:red;">**It assures customers that AWS is maintaining physical security and data protection.**</mark>

The security team of a business mandates that all Amazon EC2 workloads use authorized Amazon Machine Images (AMIs). Which AWS service should the organization utilize to ensure that its EC2 instances are utilizing authorized AMIs?    <mark style="color:red;">**AWS Config**</mark>

Which tool allows users who do not have an AWS account to estimate the cost of almost all AWS services?    **Simple Monthly Calculator**

Which AWS service is intended to assist customers who want to use machine learning for natural language processing (NLP) but lack prior machine learning experience? **Amazon Comprehend**

Which AWS Well-Architected Framework pillar incorporates the AWS shared responsibility model?

**Security**

A business wishes to utilize an AWS service to monitor the health of application endpoints and to redirect traffic to healthy regional endpoints in order to increase application availability. Which service will meet these criteria?     <mark style="color:red;">**AWS Global Accelerator**</mark>

Which of the following is an Amazon Web Services (AWS) database service? <mark style="color:red;">**Amazon Redshift**</mark>

Which of the Reserved Instance (RI) pricing models allows for modification of the RI's characteristics as long as the exchange results in the production of RIs of equal or higher value?

**Convertible RIs**

Which pillar of the AWS Well-Architected Framework is focused on the ability to efficiently operate workloads, get visibility into operations, and constantly enhance supporting processes and procedures   **Operational excellence**

Which pillar of the AWS Well-Architected Framework requires timely resource provisioning and scaling as required to sustain effectiveness as demand changes? **Performance efficiency**

<mark style="color:red;">**Which AWS infrastructure deployment model brings AWS**</mark><mark style="color:red;">**&#x20;**</mark><mark style="color:blue;"><mark style="color:red;">**computing, storage, database**<mark style="color:red;"></mark><mark style="color:red;">**, and other select services closer to end users, allowing for the execution of latency-sensitive applications?**</mark>

<mark style="color:red;">**Local Zones**</mark>

Which AWS service is used to pay AWS bills, track consumption, and manage budget costs?

**AWS Billing and Cost Management**

What are the advantages of utilizing Amazon Web Services managed services such as Amazon ElastiCache and Amazon Relational Database Service (Amazon RDS)?

**They have better performance than customer-managed services**

Which pillar of the AWS Well-Architected Framework is designed on the idea of frequent, minor, reversible changes?  <mark style="color:red;">**Operational excellence**</mark>

How do Amazon's massive economies of scale help customers?

**Periodic price reductions as the result of Amazon's operational efficiencies**

Recently, an ecommerce firm began using the AWS Cloud. Which security-related responsibilities fall within the purview of the business? (Select two.)

<mark style="color:red;">**İ**</mark>**nstall security patches on Amazon EC2 Linux instances.**&#x20;

. **Choose to encrypt data at rest that is stored on Amazon S3**.

Who is responsible for the virtualization layer down to the physical security of the facilities in which AWS services operate under the AWS shared responsibility model?

**. It is the sole responsibility of AWS**

Which service's primary aim is to manage software versions?  <mark style="color:red;">**AWS CodeCommit**</mark>

Which AWS service provides fully managed source control and secure Git-based repository hosting?  <mark style="color:red;">**AWS CodeCommit**</mark>

Which AWS service offers a solution for continuous delivery and deployment?  <mark style="color:red;">**AWS CodePipeline**</mark>

<mark style="color:red;">**AWS CodeBuild**</mark>

Which AWS services or functionalities should the cloud practitioner use in order to access this data? (Select two.) &#x20;

<mark style="color:red;">**AWS Solutions Library**</mark> &#x20;

<mark style="color:red;">**AWS Well-Architected Tool**</mark>
