Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 201Question →

An online gaming studio is migrating its platform to the AWS Cloud. The migration team is evaluating two specific workloads:

1. A multiplayer matchmaking system that is currently a legacy monolithic application. The studio plans to completely rewrite this application to leverage a serverless, microservices-based architecture for dynamic scaling.
2. A player profiles database currently running on an on-premises PostgreSQL server. The studio wants to move this database to a managed cloud database service to reduce administrative overhead, without changing the database engine or the database schema.

Which of the following migration strategies should the studio select for these workloads? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Refactoring (Re-architecting) for the multiplayer matchmaking system; Replatforming for the player profiles database

Answer

Refactoring (Re-architecting) for the multiplayer matchmaking system, and Replatforming for the player profiles database.
Refactoring (Re-architecting) is correct for the matchmaking system because it involves rewriting the application code to implement a microservices-based, serverless architecture. Replatforming is correct for the player profiles database because the database is moved to a managed cloud database service (like Amazon RDS) to minimize administrative overhead while preserving the original database engine and schema.

Step-by-Step Solution

1
Analyze the requirements for the multiplayer matchmaking system.
The workload requires a complete rewrite to migrate from a monolithic structure to a serverless, microservices-based architecture.
This workload requires modifying the code and design to leverage cloud-native features, which defines the Refactoring (Re-architecting) migration strategy.
2
Analyze the requirements for the player profiles database.
The database needs to move to a managed service to offload administrative tasks, but without changing the engine or schema.
This workload involves shifting to a managed service (such as Amazon RDS for PostgreSQL) while keeping the core schema and engine the same, which defines the Replatforming (lift-tinker-and-shift) strategy.

Key Concept

AWS Cloud Migration Strategies (6 Rs)
Question 202Question →

A mobile gaming studio is planning to launch a new multiplayer game. To minimize costs, they want to avoid upfront investments in physical servers. Additionally, they need to deploy the game to players worldwide with minimal latency. Which of the following benefits of the AWS Cloud directly address these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Go global in minutes; Trade capital expense for variable expense

Answer

The benefits of going global in minutes and trading capital expense for variable expense directly address the mobile gaming studio's needs.
The scenario describes a need to avoid upfront capital expenses for physical servers and to deploy the game worldwide with low latency. Trading capital expense for variable expense allows the company to pay only for the resources they consume rather than investing heavily in physical datacenters beforehand. Going global in minutes enables them to deploy applications in multiple AWS Regions around the world, providing lower latency and a better experience for players globally.

Step-by-Step Solution

1
Identify the requirement of avoiding upfront costs for physical servers.
This maps to the AWS Cloud benefit of trading capital expense for variable expense, which replaces upfront capital expenditures (CapEx) with pay-as-you-go operational expenses (OpEx).
The studio does not want to pay for physical servers before launching.
2
Identify the requirement of deploying the game to players worldwide with minimal latency.
This maps to the AWS Cloud benefit of going global in minutes, which allows deploying workloads globally across multiple AWS Regions rapidly.
Global distribution is required to minimize latency for players around the world.

Key Concept

Benefits of the AWS Cloud
Estimated Time:1m 0s
Question 203Question →

A media company is migrating its video processing pipeline to the AWS Cloud. The pipeline ingests raw video files, extracts metadata, transcodes the videos into multiple formats, and generates thumbnails. In the legacy on-premises system, all these tasks run sequentially on a single large server. If one task fails, the entire pipeline halts.

On AWS, the company wants to ensure that a failure in the thumbnail generation step does not interrupt video transcoding. Additionally, they want the compute capacity to automatically scale up during peak upload hours and scale down to zero when no videos are uploaded.

Which architectural approach on AWS directly addresses these requirements by applying the correct cloud design principles?

Show answer & explanation

Answer: Decouple the processing steps using Amazon Simple Queue Service (Amazon SQS) to achieve loose coupling, and use AWS Lambda functions to achieve elasticity.

Answer

Decouple the processing steps using Amazon Simple Queue Service (Amazon SQS) to achieve loose coupling, and use AWS Lambda functions to achieve elasticity.
The correct choice proposes decoupling the steps using Amazon SQS queues and using AWS Lambda functions. This directly implements loose coupling, preventing a failure in one component from stopping the rest of the pipeline. It also implements elasticity by scaling compute resources automatically to match load and scaling down to zero when idle.

Step-by-Step Solution

1
Analyze the system's resilience requirement.
Identify that isolating the thumbnail generation step so that it does not impact video transcoding requires a loosely coupled architecture.
Loose coupling ensures that components can fail independently without causing a cascade failure across the entire application pipeline.
2
Analyze the system's scaling and idle-state requirements.
Identify that dynamically scaling compute resources based on demand and scaling down to zero when idle requires elasticity.
Elasticity allows the application to automatically match resource supply with fluctuating demand, reducing costs during idle periods.
3
Evaluate the AWS services and principles described in the choices.
Select the option that decouples steps using Amazon SQS (loose coupling) and runs compute on AWS Lambda (elasticity and serverless scaling to zero).
Amazon SQS provides the queue buffering needed for loose coupling, and AWS Lambda provides event-driven serverless compute that scales to zero.

Key Concept

Loose coupling and elasticity are key design principles of the AWS Cloud that enable fault isolation and dynamic resource scaling.
Question 204Question →

A university database administrator needs to grant an administrative application running on a local, on-premises server the ability to read metadata from an Amazon DynamoDB table. Additionally, a new junior administrator has joined the team to assist with day-to-day configuration. Which of the following actions align with the AWS recommended best practices for IAM and access control? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Use AWS IAM Roles Anywhere to grant the on-premises server secure access to DynamoDB using temporary credentials.; Create an IAM user for the junior administrator, place them in an IAM group with least-privilege policies, and require Multi-Factor Authentication (MFA).

Answer

Use AWS IAM Roles Anywhere to grant the on-premises server secure access to DynamoDB using temporary credentials, and create an IAM user for the junior administrator, place them in an IAM group with least-privilege policies, and require Multi-Factor Authentication (MFA).
The correct practices are to use AWS IAM Roles Anywhere to grant temporary security credentials to the on-premises server, and to create an individual IAM user with least-privilege permissions and MFA enabled for the junior administrator. These actions align with the core security principles of minimizing long-term credentials and securing human identities.

Step-by-Step Solution

1
Identify secure access methods for on-premises servers to interact with AWS resources.
Using temporary credentials via AWS IAM Roles Anywhere is preferred over hardcoding long-lived access keys.
This minimizes the risk of credential exposure and adheres to the security principle of temporary credentials.
2
Identify secure access management practices for human users.
Creating a dedicated IAM user inside a group with least-privilege permissions and enforcing MFA is the recommended standard.
This ensures accountability, limits access to only what is necessary, and adds an extra layer of authentication security.

Key Concept

AWS IAM Best Practices for User and Workload Access Control
Question 205Question →

A company is building a news portal on AWS. The portal must automatically adjust its capacity to handle sudden spikes in reader traffic during breaking news events. Additionally, the team wants to ensure that a database failure in the user comments section does not prevent users from reading the main news articles. Which AWS Cloud design principles should the company implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Loose coupling; Elasticity

Answer

The correct principles are loose coupling and elasticity.
Implementing loose coupling ensures that components are independent, so a failure in the comments component does not disrupt the main article reading experience. Implementing elasticity ensures the application automatically scales its infrastructure capacity to match traffic demands without manual intervention.

Step-by-Step Solution

1
Analyze the requirement for handling sudden spikes in traffic automatically.
Identify that dynamically scaling capacity up and down to match demand refers to elasticity.
This matches the requirement of automatically adjusting capacity during breaking news events.
2
Analyze the requirement that a database failure in one component (comments) should not impact another component (reading articles).
Identify that isolating dependencies between components is called loose coupling.
This ensures the application is resilient and that failures do not cascade.

Key Concept

AWS Cloud design principles: Elasticity and Loose Coupling
Estimated Time:50s
Question 206Question →

A startup in the digital health sector is launching a telemedicine platform. The company's leadership wants to avoid purchasing expensive physical servers and storage arrays upfront. Additionally, they are uncertain about the daily patient volume, making it difficult to predict the exact resource requirements needed to prevent application downtime. Which of the following AWS Cloud benefits directly address these business requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Trade fixed expense for variable expense; Stop guessing capacity

Answer

Trading fixed expense for variable expense and stopping guessing capacity are the correct answers.
Trading fixed expense for variable expense allows the startup to avoid high upfront infrastructure costs by paying only for consumed resources. Stopping guessing capacity ensures that the application automatically scales to handle traffic spikes, preventing downtime without over-provisioning resources.

Step-by-Step Solution

1
Analyze the scenario requirements.
The startup needs to avoid high upfront server/storage costs and manage unpredictable resource demand to prevent downtime.
This helps map the business challenges to the official AWS Cloud benefits.
2
Evaluate the first requirement: avoiding upfront costs.
Trading fixed expense for variable expense allows the company to pay as they go instead of investing heavily in upfront hardware.
This directly aligns with the economic benefit of cloud computing over on-premises data centers.
3
Evaluate the second requirement: handling uncertain daily patient volume.
Stopping guessing capacity allows the system to scale resources automatically up or down based on actual usage.
This prevents application downtime from under-provisioning and saves cost from over-provisioning.

Key Concept

The six core benefits of AWS Cloud computing, specifically trading fixed expense for variable expense and stopping guessing capacity.
Question 207Question →

A media company, CineArchive, is migrating its legacy portfolio to AWS. The migration team has identified two specific workloads:

1. A legacy document management system that runs on an old operating system and relies on a specific local filesystem structure. The team wants to migrate this workload to AWS as quickly as possible with zero code or configuration changes.
2. A relational database running on-premises that suffers from high administrative overhead. The team wants to move the database to a managed service in AWS to reduce database administration tasks (such as patching and backups) without modifying the database schema or rewriting the SQL queries.

Which migration strategies represent the correct approaches for these two workloads? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Rehosting (lift-and-shift) for the document management system; Replatforming (lift-tinker-and-shift) for the database workload

Answer

The correct strategies are Rehosting (lift-and-shift) for the document management system and Replatforming (lift-tinker-and-shift) for the database workload.
Rehosting (lift-and-shift) is the correct strategy for the document management system because it allows moving the workload to the cloud without any code or configuration changes. Replatforming (lift-tinker-and-shift) is the correct strategy for the database workload because moving to a managed service (such as Amazon RDS) reduces database management overhead (e.g., patching, backups) while keeping the database schema and SQL queries intact.

Step-by-Step Solution

1
Analyze the requirements for the legacy document management system.
The requirement specifies migrating the workload as quickly as possible with zero code or configuration changes. This maps directly to the Rehosting (lift-and-shift) migration strategy.
Rehosting involves copying the existing application to the cloud without modifying its architecture or code.
2
Analyze the requirements for the relational database.
The requirement specifies moving to a managed service to reduce administrative overhead (like patching and backups) without modifying the schema or rewriting queries. This maps directly to the Replatforming (lift-tinker-and-shift) strategy.
Replatforming involves modifying the runtime environment (e.g., moving to a managed database service like Amazon RDS) to optimize operations without changing the core application architecture.

Key Concept

AWS Cloud Migration Strategies (6 Rs)
Question 208Question →

A remote education company wants to focus on developing its online learning platform rather than managing physical server racks, power supplies, and cooling systems. Which of the following are benefits of the AWS Cloud that directly support this business direction? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Stop spending money running and maintaining data centers; Trade capital expense for variable expense

Answer

The correct answers are the benefits to stop spending money running and maintaining data centers, and to trade capital expense for variable expense.
The benefit to stop spending money running and maintaining data centers directly addresses the desire to avoid managing power, cooling, and physical racks. The benefit to trade capital expense for variable expense allows the business to pay only for resources consumed, avoiding heavy upfront investments in physical infrastructure.

Step-by-Step Solution

1
Identify the company's core pain points in the scenario.
The company wants to avoid physical management overhead (racks, power, cooling) and capital investments associated with hardware.
This allows mapping the requirements to the standard benefits of cloud computing.
2
Match these needs to the six defined benefits of the AWS Cloud.
Avoiding infrastructure management matches 'Stop spending money running and maintaining data centers.' Shifting away from heavy upfront physical purchases matches 'Trade capital expense for variable expense.'
These two benefits directly alleviate the burden of physical hardware operations and cost structures.

Key Concept

Benefits of the AWS Cloud
Estimated Time:1m 0s
Question 209Question →

A startup is deploying a healthcare booking application on AWS. To ensure the application is highly resilient and requires minimal operational effort, the architectural design must adhere to AWS Cloud design principles. Which two of the following architectural decisions demonstrate the application of these AWS Cloud design principles? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploying an Amazon Simple Queue Service (Amazon SQS) queue to buffer requests between the frontend web servers and the backend processing service; Utilizing Amazon Aurora Serverless instead of managing a relational database on self-provisioned Amazon EC2 instances

Answer

The correct architectural decisions are using Amazon SQS to buffer and decouple requests, and utilizing Amazon Aurora Serverless to reduce operational overhead instead of self-managing a database on Amazon EC2.
The correct architectural decisions are using Amazon SQS to buffer requests and adopting Amazon Aurora Serverless. SQS allows components to interact asynchronously, ensuring that a bottleneck or failure in the backend does not impact the frontend's ability to receive requests, which is a classic example of loose coupling. Using a managed, serverless database service like Amazon Aurora Serverless represents the 'services, not servers' principle, shifting the operational burden of database management, patching, and scaling to AWS.

Step-by-Step Solution

1
Analyze the scenario requirements
The startup needs a highly resilient architecture that requires minimal operational effort, which means applying principles such as loose coupling, services not servers, and design for failure.
This sets the criteria for evaluating the design choices.
2
Evaluate the option to use Amazon SQS
Amazon SQS provides an asynchronous communication channel that decouples the frontend from the backend, demonstrating loose coupling.
Loose coupling prevents a failure in one component from cascading to others, improving overall resilience.
3
Evaluate the option to use Amazon Aurora Serverless
Amazon Aurora Serverless is a fully managed service that eliminates the need to manage physical or virtual servers, demonstrating the services not servers principle.
Managed services minimize operational effort by offloading tasks like patching, backups, and scaling to AWS.
4
Evaluate the remaining options to identify anti-patterns
Monolithic architectures, single-instance configurations, and over-provisioned manual scaling are anti-patterns that violate loose coupling, design for failure, and elasticity.
This confirms that the other choices represent incorrect architectural practices.

Key Concept

AWS Cloud design principles recommend decoupling components (loose coupling), using managed services (services not servers), and building for high availability and dynamic scaling.
Question 210Question →

An online education platform, EduLearn, wants to migrate its legacy student grading application to the AWS Cloud. The migration team decides to move the application's virtual machines directly to Amazon EC2 as-is, without altering any application code or configuration, to ensure a quick transition. Which migration strategy does this action represent?

Show answer & explanation

Answer: Rehosting

Answer

Rehosting
The correct answer is Rehosting. Rehosting, often referred to as 'lift-and-shift,' is a strategy where applications are migrated to the cloud without any modifications to their architecture or code, allowing for a fast and low-risk migration. In this scenario, moving the student grading application's virtual machines directly to Amazon EC2 without alterations is a classic example of Rehosting.

Step-by-Step Solution

1
Analyze the migration requirements in the scenario.
The platform wants to move the application's virtual machines to Amazon EC2 as-is, without making any modifications to the code or configurations.
Identifying the level of modification is the key to determining the correct 6 Rs migration strategy.
2
Map the level of modification to the standard AWS migration strategies.
Moving applications as-is without code modifications aligns with the definition of Rehosting (lift-and-shift).
Rehosting is characterized by zero changes to the application code, focusing on speed and simplicity of migration.

Key Concept

AWS Cloud Migration Strategies (6 Rs) - Rehosting
Estimated Time:45s
Question 211Question →

A real estate platform uses Amazon DynamoDB to store property listing details. Under the AWS Shared Responsibility Model, which of the following security tasks is the sole responsibility of the customer?

Show answer & explanation

Answer: Defining and applying Identity and Access Management (IAM) policies to control access to the DynamoDB tables

Answer

Defining and applying Identity and Access Management (IAM) policies to control access to the DynamoDB tables
For managed services such as Amazon DynamoDB, AWS is responsible for securing the infrastructure, host operating system, and database software. The customer is responsible for managing data classification and configuring access controls, such as Identity and Access Management (IAM) policies, to determine who can access the database tables.

Step-by-Step Solution

1
Identify the AWS service type being used in the scenario.
Amazon DynamoDB is a fully managed NoSQL database service.
The service type determines where the boundary of responsibility lies between AWS and the customer under the Shared Responsibility Model.
2
Distinguish between security of the cloud (AWS responsibility) and security in the cloud (customer responsibility) for a managed database service.
AWS handles the hardware, operating system patching, database software patching, and physical security. The customer handles their own data, including configuring access controls (IAM policies).
This division defines who is responsible for configuring access rules versus who maintains the underlying platform.

Key Concept

Under the Shared Responsibility Model, for managed services like Amazon DynamoDB, AWS manages the infrastructure, operating system, and physical security (security of the cloud), while the customer manages data access controls, configurations, and identity policies (security in the cloud).
Estimated Time:45s
Question 212Question →

A digital publishing company experiences highly unpredictable traffic surges when articles go viral. Previously, the company managed these surges by purchasing and maintaining a permanent array of physical web servers capable of handling peak historic traffic, which cost $25,000\$25,000 per month but operated at a baseline utilization of only 8%8\%. After migrating to AWS, the company decommissioned their physical servers and implemented an Auto Scaling group of EC2 instances. Their monthly AWS bill now varies between $2,000\$2,000 and $18,000\$18,000 depending on actual monthly web traffic. While the financial shift from a fixed monthly cost to a variable bill represents one cloud benefit, which AWS Cloud benefit is directly demonstrated by the elimination of the operational inefficiencies of under-provisioning (outages) and over-provisioning (costly idle servers)?

Show answer & explanation

Answer: Stop guessing capacity

Answer

Stop guessing capacity is the correct answer because it directly addresses the elimination of over-provisioning (idle servers) and under-provisioning (outages) by scaling capacity dynamically to match demand.
The correct answer is 'Stop guessing capacity' because the company's dynamic scaling architecture eliminates the inefficiency of over-provisioning (which led to an 8%8\% utilization rate and high idle costs) and under-provisioning (which led to outages during viral surges). By matching compute capacity to real-time traffic, they avoid both operational issues.

Step-by-Step Solution

1
Analyze the operational challenges described in the scenario.
The publishing company is dealing with under-provisioning (outages during viral traffic surges) and over-provisioning (costly idle physical servers at 8%8\% utilization).
Identifying the core technical problem allows us to map it to the correct AWS Cloud benefit.
2
Differentiate between the financial and operational aspects of the scenario.
The financial transition from fixed to variable cost represents one benefit, but the question asks specifically for the benefit that solves the operational capacity mismatches.
This step prevents falling for the distractor related to Capex/Opex.
3
Match the operational solution (dynamic auto-scaling) to the official AWS Cloud benefits.
The ability to dynamically scale resources to eliminate idle capacity and prevent outages corresponds directly to 'Stop guessing capacity'.
This confirms 'Stop guessing capacity' as the correct answer based on AWS documentation definitions.

Key Concept

Define the benefits of the AWS Cloud
Question 213Question →

A mobile gaming studio, PixelVibe, is migrating its backend multiplayer matchmaking system to AWS. The current application relies on a proprietary on-premises database that requires expensive licensing and custom clustering. The studio decides to migrate the application's code as-is to Amazon EC2, but swaps the underlying database to Amazon Aurora PostgreSQL to eliminate licensing costs and benefit from automated clustering. Which migration strategy does this scenario describe?

Show answer & explanation

Answer: Replatforming

Answer

Replatforming
The correct strategy is Replatforming because the company is migrating its application code without major changes ('as-is'), but optimizing the database by switching to a fully managed cloud service (Amazon Aurora) to reduce licensing costs and management overhead.

Step-by-Step Solution

1
Analyze the migration actions performed by the studio.
The application code is migrated without changes (as-is to EC2), but the database is modified to use a managed cloud database service (Amazon Aurora).
This helps determine the extent of modification during migration.
2
Map the analyzed actions to the 6 Rs migration strategies.
Making minor adjustments to optimize the platform (using managed databases) without restructuring the core application code is characteristic of Replatforming.
To distinguish Replatforming from Rehosting (no changes) and Refactoring (significant architecture/code changes).

Key Concept

Replatforming migration strategy involves moving applications to the cloud with minor optimizations, such as swapping self-hosted components for managed services, without changing the core architecture.
Question 214Question →

A media streaming company uses Amazon DynamoDB to store user watch histories and profiles. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

Show answer & explanation

Answer: Defining Identity and Access Management (IAM) policies to restrict read and write access to the database tables

Answer

Defining Identity and Access Management (IAM) policies to restrict read and write access to the database tables
In the Shared Responsibility Model, AWS manages the security 'of' the cloud (including patching the OS, managing physical infrastructure, and database engines for managed services like DynamoDB). The customer is responsible for security 'in' the cloud, which includes managing their data, configuring client-side encryption, and defining access permissions through Identity and Access Management (IAM) policies to secure access to the tables.

Step-by-Step Solution

1
Analyze the service model of Amazon DynamoDB.
Amazon DynamoDB is a fully managed NoSQL database service (Platform as a Service / PaaS).
Understanding the service model helps determine the boundary of shared responsibility.
2
Distinguish between customer responsibilities (security 'in' the cloud) and AWS responsibilities (security 'of' the cloud) for managed services.
AWS handles physical security, infrastructure patching, database software updates, and hardware lifecycle. The customer handles data classification, client-side encryption, and IAM permissions to access the tables.
This isolates customer tasks from AWS-managed operations.
3
Evaluate the choices to find the task that falls under customer responsibility.
Defining Identity and Access Management (IAM) policies to restrict read and write access is a customer responsibility, while patching, physical security, and manual compliance document retrieval are handled by AWS or via AWS Artifact.
To identify the correct answer matching the customer's operational obligations.

Key Concept

Shared Responsibility Model for Managed Services
Estimated Time:1m 0s
Question 215Question →

An enterprise client in the financial sector is undergoing an annual Payment Card Industry Data Security Standard (PCI DSS) compliance audit. The external auditors require official proof of compliance for the physical and environmental security controls of the AWS data centers where the client's applications are hosted. Which AWS service should the security team use to obtain the necessary reports, and how is the responsibility for physical security partitioned in this context?

Show answer & explanation

Answer: AWS Artifact is used to retrieve the PCI DSS Attestation of Compliance (AoC); AWS is solely responsible for managing the physical security and environmental controls of its data centers.

Answer

AWS Artifact is used to retrieve the PCI DSS Attestation of Compliance (AoC); AWS is solely responsible for managing the physical security and environmental controls of its data centers.
The correct option correctly identifies AWS Artifact as the service for downloading compliance documents and accurately maps data center physical security as the sole responsibility of AWS under the Shared Responsibility Model.

Step-by-Step Solution

1
Identify the service required to retrieve compliance documents.
AWS Artifact is the primary portal for downloading compliance reports and agreements (such as SOC and PCI reports).
The scenario requires official proof of compliance (PCI DSS Attestation of Compliance) which is distributed directly via AWS Artifact.
2
Determine the party responsible for data center physical and environmental security.
AWS is solely responsible for the physical security of data centers.
Under the AWS Shared Responsibility Model, physical infrastructure, hypervisor virtualization, and data center facilities fall under 'security of the cloud' and are the sole responsibility of AWS.

Key Concept

AWS compliance report retrieval and the division of physical security under the Shared Responsibility Model.
Question 216Question →

A healthcare startup must verify that AWS infrastructure meets compliance regulations for HIPAA and obtain SOC 2 reports for its investors. Which two tasks can the startup perform directly within AWS Artifact?

Select all that apply

Show answer & explanation

Answer: Download AWS security and compliance documents, such as SOC and PCI reports; Review and accept AWS agreements, such as the HIPAA Business Associate Addendum (BAA)

Answer

Downloading AWS compliance documents (such as SOC and PCI reports) and reviewing/accepting AWS agreements (such as the HIPAA Business Associate Addendum)
AWS Artifact is the primary self-service portal for on-demand access to AWS compliance reports, such as SOC and PCI reports, and is also used to review and accept AWS agreements like the HIPAA Business Associate Addendum (BAA) for individual accounts or entire organizations.

Step-by-Step Solution

1
Identify the service designed for retrieving AWS compliance documentation and managing AWS agreements.
AWS Artifact is identified as the central portal for these compliance resources.
AWS Artifact provides self-service access to compliance reports and agreements without requiring support tickets.
2
Filter options to find capabilities provided by AWS Artifact.
Downloading compliance reports and accepting HIPAA agreements are identified as valid AWS Artifact features.
This excludes distractors related to other AWS services like Amazon Inspector and AWS CloudTrail.

Key Concept

AWS Artifact provides self-service access to AWS compliance reports and agreements.
Question 217Question →

A media company is migrating its user authentication store to Amazon DynamoDB. The company must comply with strict industry data security standards. Under the AWS Shared Responsibility Model, which two security tasks are the responsibility of the customer? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Configuring AWS Identity and Access Management (IAM) policies to restrict database access to authorized application servers; Encrypting sensitive user password hashes on the client side before writing them to the table

Answer

The customer is responsible for configuring AWS Identity and Access Management (IAM) policies to restrict database access and encrypting sensitive user password hashes on the client side.
For fully managed services such as Amazon DynamoDB, AWS manages the physical infrastructure, the virtualization layer, the operating system, and the database software itself. The customer is responsible for managing data inside the service, which includes configuring IAM policies to restrict API access and implementing data encryption (such as client-side encryption before writing data to AWS).

Step-by-Step Solution

1
Analyze the service model of the AWS resource in the scenario.
Amazon DynamoDB is a fully managed NoSQL database service (Platform as a Service / Database as a Service).
The level of customer responsibility depends on whether the service is Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or a managed service.
2
Differentiate between customer responsibilities and AWS responsibilities for fully managed database services.
AWS handles physical security, infrastructure, hardware maintenance, OS patching, and database software updates. The customer handles data classification, IAM access controls, client-side encryption, and service configurations.
This determines which tasks belong to the customer ('security in the cloud') versus AWS ('security of the cloud').
3
Evaluate the choices to select the two customer responsibilities.
IAM policy configuration and client-side encryption are customer responsibilities, whereas OS patching, hardware disk replacement, and table-level security groups (which do not exist for DynamoDB) are not.
To correctly identify the final options that match the customer's domain of control under the model.

Key Concept

Under the AWS Shared Responsibility Model, for managed services like Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and the database platform. The customer retains responsibility for securing their data, including access control (IAM) and data encryption.
Question 218Question →

An application running on an Amazon EC2 instance needs to securely access files in an Amazon S3 bucket. According to AWS security best practices, which IAM entity should be attached to the EC2 instance to grant these permissions without storing long-term credentials?

Show answer & explanation

Answer: An IAM role

Answer

An IAM role
The correct answer is an IAM role because IAM roles are designed to delegate permissions to AWS services, applications, or users without requiring long-term security credentials. By attaching an IAM role (specifically via an instance profile) to an Amazon EC2 instance, AWS automatically manages and rotates temporary credentials for the application to access Amazon S3.

Step-by-Step Solution

1
Identify the authentication requirement.
An application on an EC2 instance needs to access an S3 bucket without storing long-term credentials.
Storing long-term credentials on instances exposes them to potential leakage.
2
Determine the appropriate IAM entity for service-to-service authentication.
An IAM role provides temporary security credentials that can be automatically rotated.
AWS services use IAM roles to safely access other AWS resources under the principle of least privilege.

Key Concept

IAM Roles for AWS Services
Question 219Question →

An application administrator notices that one of the virtual servers in their fleet is experiencing performance degradation. Instead of spending time troubleshooting the server, the administrator terminates it and lets the system automatically launch a new instance from a pre-defined template. Which AWS Cloud design principle does this practice demonstrate?

Show answer & explanation

Answer: Disposable resources instead of fixed servers

Answer

Disposable resources instead of fixed servers
The correct answer is correct because treating resources as disposable means that instead of spending resources to troubleshoot, patch, and maintain a failing or degraded virtual server, you terminate the instance and launch a clean one from a standard template. This ensures consistency, reduces downtime, and aligns with the AWS design principle of using disposable resources instead of fixed servers.

Step-by-Step Solution

1
Analyze the administrator's action of terminating a degraded server and replacing it automatically with a clean template, rather than repairing it.
Identify that the server is treated as temporary and replaceable (disposable) rather than a fixed asset that must be maintained and repaired.
To determine how this operational approach relates to standard cloud infrastructure design principles.
2
Map the identified behavior to the standard AWS Cloud design principles.
The practice matches the principle of 'Disposable resources instead of fixed servers' because the instance is terminated and replaced dynamically.
To select the correct design principle that matches this dynamic replacement pattern.

Key Concept

Treating servers as disposable resources instead of fixed, long-lived assets is a core AWS design principle that simplifies operations and improves reliability.
Question 220Question →

A mobile gaming company is preparing to launch a multiplayer game. The development team cannot accurately predict how many players will log in during the first week, and they want to avoid over-provisioning infrastructure that might sit idle or under-provisioning which could cause server crashes. Furthermore, the company's executive leadership wants the engineering team to focus entirely on game mechanics and player experience rather than procuring hardware, racking servers, and managing physical facilities.

Which of the following AWS Cloud benefits directly address these business and technical requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Stop spending money running and maintaining data centers; Stop guessing capacity

Answer

The correct benefits are 'Stop spending money running and maintaining data centers' and 'Stop guessing capacity'.
The scenario requires solving two problems: unpredictability of initial player adoption, and the overhead of managing hardware/facilities. The benefit of 'Stop guessing capacity' resolves the first problem by allowing dynamic scaling to match actual user demand. The benefit of 'Stop spending money running and maintaining data centers' resolves the second problem by offloading racking, stacking, and hardware maintenance tasks to AWS, letting engineers focus on game development.

Step-by-Step Solution

1
Analyze the technical requirements of the development team
The team cannot predict player adoption rates and wants to avoid under-provisioning or over-provisioning.
This requirement aligns with the AWS Cloud benefit of 'Stop guessing capacity', which allows dynamic scaling to match real-time load.
2
Analyze the business requirements of executive leadership
The leadership wants the engineering team to focus on game development rather than physical hardware infrastructure tasks.
This requirement aligns with the AWS Cloud benefit of 'Stop spending money running and maintaining data centers', which offloads infrastructure management to AWS.
3
Evaluate the remaining choices against AWS core benefits and principles
The remaining options either invert the CapEx/OpEx benefit, promote single zone monolithic structures, or suggest manual pre-provisioning of hardware.
These options are incorrect because they represent common misconceptions of cloud economics, elasticity, and design principles.

Key Concept

The six core benefits of the AWS Cloud (specifically 'Stop guessing capacity' and 'Stop spending money running and maintaining data centers')
Estimated Time:2m 0s
PreviousPage 11 / 74Next