Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 261Question →

A software development team at a retail company wants to experiment with a new machine learning model. Instead of waiting several weeks for procurement to purchase and set up physical hardware, the team spins up the required AWS resources in a few clicks to start testing immediately. Which benefit of the AWS Cloud is demonstrated in this scenario?

Show answer & explanation

Answer: Increase speed and agility

Answer

Increase speed and agility
The correct answer is the option that highlights increasing speed and agility. In cloud computing, resources are available in a few clicks, meaning developers can access new technologies and test ideas in minutes rather than waiting weeks for hardware procurement.

Step-by-Step Solution

1
Analyze the scenario details.
The team bypasses procurement waiting times (weeks) by instantly provisioning cloud resources (minutes) for experimentation.
Understanding the key pain point being resolved helps identify the correct cloud benefit.
2
Map the result to the six official AWS Cloud benefits.
Reducing the time to access new resources from weeks to minutes is the definition of increasing speed and agility.
Matching the scenario characteristics with official AWS documentation validates the correct choice.

Key Concept

AWS Cloud Benefit: Increase speed and agility
Estimated Time:45s
Question 262Question →

A retail company is migrating its core transactional inventory system to Amazon Aurora MySQL-Compatible Edition. The database will store sensitive inventory and pricing data and must be accessible only by specific application servers running in a private subnet. According to the AWS Shared Responsibility Model, which TWO of the following tasks are the responsibility of the customer to secure and maintain this database cluster?

Select all that apply

Show answer & explanation

Answer: Configuring database-level user accounts, database permissions, and roles within the MySQL database engine.; Setting up security group rules to restrict incoming database traffic to only the authorized application servers.

Answer

Configuring database-level user accounts, permissions, and roles within the MySQL engine, as well as setting up security group rules to restrict network traffic, are the responsibilities of the customer.
For a managed database service like Amazon Aurora, the customer is responsible for 'security in the cloud'. This includes configuring database-level users, roles, and permissions within the engine to enforce the principle of least privilege, and configuring network security rules (security groups) to control which resources can communicate with the database. AWS handles the maintenance of the underlying physical servers, hypervisors, and guest operating system.

Step-by-Step Solution

1
Identify the type of service being used in the scenario.
Amazon Aurora is a fully managed relational database service.
Understanding the service category (managed database/PaaS) helps determine the boundary where AWS takes over guest OS and software maintenance.
2
Evaluate the customer's responsibilities for a managed database service.
The customer is responsible for firewall settings (security groups), data encryption configurations, and database-level user access control.
AWS manages the database platform, but the customer retains control over network access to the database and internal database-level permissions.
3
Identify AWS's responsibilities for a managed database service.
AWS handles physical infrastructure security, host operating system patching, database engine updates, and hardware lifecycle management.
Managed services offload the operational burden of OS-level administration and physical infrastructure management to AWS.
4
Select the two correct options that map to the customer's responsibilities.
The correct selections are managing database-level user accounts/roles and configuring security group rules.
These tasks directly represent configuration of access control and network firewalls, which remain customer responsibilities.

Key Concept

AWS Shared Responsibility Model for Managed Services (PaaS)
Question 263Question →

A medical device manufacturer is developing a new patient-monitoring system and wants to allow its software engineers to experiment with machine learning models. Currently, setting up physical testing servers takes several weeks due to procurement and hardware configuration processes. By moving to AWS, the developers can provision testing environments in a matter of minutes, significantly reducing the time required to test new software builds. Which benefit of the AWS Cloud does this transition directly demonstrate?

Show answer & explanation

Answer: Increase speed and agility

Answer

Increase speed and agility
The correct answer is the benefit of increasing speed and agility. In a cloud environment, new IT resources are only a click away. This reduces the time to make resources available to developers from weeks to minutes, allowing the organization to innovate and experiment much faster.

Step-by-Step Solution

1
Identify the core improvement and operational change highlighted in the scenario.
The scenario highlights a reduction in the time required to provision development environments from several weeks to minutes.
Analyzing the specific operational changes helps map the business scenario to the correct cloud benefit.
2
Map the identified change to official AWS Cloud benefits.
The ability to quickly provision IT resources to support fast experimentation and reduce time-to-market is the definition of increasing speed and agility.
Ensuring the choice aligns with the official definitions provided in AWS Cloud Practitioner documentation.

Key Concept

Increase speed and agility
Question 264Question →

A biotechnology firm is developing a genomic analysis platform. The sequencing workloads are highly variable, requiring thousands of CPU cores for a few hours, followed by periods of complete inactivity. In their legacy on-premises environment, they had to invest in high-end server clusters to support peak usage, which then sat idle. Additionally, to comply with regional data residency laws and collaborate with researchers in Europe and Asia, they must deploy their processing pipelines in close physical proximity to those users.

Which two benefits of the AWS Cloud directly address this firm's challenges? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Trade capital expense for variable expense; Go global in minutes

Answer

The correct benefits are trading capital expense for variable expense and going global in minutes.
The correct options are trading capital expense for variable expense and going global in minutes. By moving to AWS, the firm shifts from upfront investments in physical hardware (capital expense) to a pay-as-you-go model (variable expense), solving the issue of idle clusters. Furthermore, deploying pipelines in Europe and Asia quickly to meet residency laws and cooperate with users aligns with the ability to go global in minutes.

Step-by-Step Solution

1
Analyze the financial challenge in the scenario
The firm has to invest in high-end server clusters upfront that sit idle during inactivity.
This corresponds to high capital expenses (CapEx) for underutilized resources.
2
Identify the AWS benefit that solves the financial challenge
Trading capital expense for variable expense allows the firm to pay only for resources when they run sequencing.
This eliminates the need for large upfront infrastructure investments.
3
Analyze the deployment challenge in the scenario
The firm needs to deploy its pipelines in Europe and Asia to meet data residency laws and collaborate.
This requires quick, multi-region geographic distribution.
4
Identify the AWS benefit that solves the deployment challenge
Go global in minutes allows deploying workloads to AWS regions worldwide instantly.
This places resources close to international users and satisfies compliance rules.

Key Concept

The advantages of cloud computing, specifically the economic benefit of trading CapEx for OpEx and the operational benefit of rapid global deployment.
Estimated Time:1m 30s
Question 265Question →

A logistics company, SwiftRoute, is planning to migrate its application portfolio to the AWS Cloud. The migration team has identified two workloads for the initial phase:

1. An inventory management application that runs on a traditional database. The team wants to migrate the application to AWS quickly without changing the core application code, but they plan to move the database to a fully managed database service, such as Amazon RDS, to reduce database administration tasks.
2. A legacy on-premises Customer Relationship Management (CRM) system. The company wants to decommission this system entirely and transition to a cloud-native Software-as-a-Service (SaaS) platform available on the AWS Marketplace.

Which two of the following migration strategies should the company use for these workloads? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Replatforming for the inventory management application; Repurchasing for the CRM system

Answer

Replatforming for the inventory management application and Repurchasing for the CRM system
The correct strategy for the inventory management application is Replatforming because the database is migrated to a managed service (Amazon RDS) without altering the application's core code. The correct strategy for the CRM system is Repurchasing because the on-premises application is decommissioned and replaced by a cloud-native SaaS product.

Step-by-Step Solution

1
Analyze the requirements for the inventory management application migration.
The application code is unchanged, but the underlying database is shifted to a managed service (Amazon RDS).
This matches the Replatforming strategy ('lift, tinker, and shift') where optimizations are applied without changing the core application architecture.
2
Analyze the requirements for the legacy CRM system migration.
The legacy system is decommissioned and replaced with a third-party cloud-native SaaS product.
This matches the Repurchasing strategy ('drop-and-shop') which involves purchasing a new product/SaaS platform.

Key Concept

AWS Cloud Migration Strategies (6 Rs)
Question 266Question →

A biotechnology startup is preparing to host sensitive clinical trial data on AWS. To satisfy regulatory requirements, the startup's compliance team must review AWS's third-party audit reports detailing the physical security and environmental controls of the AWS data centers. Which AWS service should the startup use to retrieve these documents?

Show answer & explanation

Answer: AWS Artifact

Answer

AWS Artifact
AWS Artifact is the primary self-service portal for on-demand access to AWS's compliance reports, such as SOC and ISO reports, and agreements like the Business Associate Addendum (BAA).

Step-by-Step Solution

1
Identify the core requirement of the biotechnology startup, which is to retrieve third-party audit reports of AWS infrastructure.
The startup needs access to AWS compliance reports like SOC 2 or ISO certificates.
These documents prove the security and compliance of the underlying AWS infrastructure.
2
Evaluate the available AWS services to determine which one functions as a portal for compliance documentation.
AWS Artifact is identified as the portal providing on-demand download of AWS compliance agreements and reports.
It is the direct, secure portal where customers access security and compliance documents provided by AWS.

Key Concept

AWS Artifact provides on-demand access to AWS security and compliance reports and select online agreements.
Question 267Question →

LogiRoute, a package delivery tracking company, wants to migrate its legacy on-premises tracking application to the AWS Cloud. The company needs to complete the migration quickly to shut down its local data center and wants to move the virtual machines as-is without modifying the application code or architecture. Which AWS migration strategy should LogiRoute use to achieve this goal?

Show answer & explanation

Answer: Rehosting

Answer

Rehosting is the migration strategy that moves applications to the cloud as-is without any modifications to code or architecture.
Rehosting (or lift-and-shift) is the correct strategy because it allows the company to migrate its virtual machines directly to AWS with no changes to the application code or architecture. This is the fastest migration strategy, helping them shut down their on-premises data center quickly.

Step-by-Step Solution

1
Analyze the company's requirements.
The company wants to move its application quickly, migrate the virtual machines as-is, and make zero modifications to the code or architecture.
Understanding the constraints is necessary to choose the correct migration strategy.
2
Map the requirements to the standard 6 Rs migration strategies.
A migration that moves resources as-is without code changes corresponds to Rehosting (lift-and-shift). Strategies like Replatforming, Refactoring, and Repurchasing require modifications or purchasing a new product.
Comparing strategies allows us to identify the one that aligns with the goal of an unchanged, rapid migration.

Key Concept

AWS Cloud Migration Strategies (6 Rs)
Estimated Time:45s
Question 268Question →

A retail company is migrating a legacy web application to Amazon Elastic Compute Cloud (Amazon EC2) instances. Under the AWS Shared Responsibility Model, which TWO of the following security tasks are the responsibility of the customer?

Select all that apply

Show answer & explanation

Answer: Patching the guest operating system installed on the EC2 instances; Configuring the security group rules to control traffic to the EC2 instances

Answer

The customer is responsible for patching the guest operating system and configuring the security group rules.
Under the AWS Shared Responsibility Model, customers are responsible for security 'in' the cloud. For Amazon EC2 (an Infrastructure as a Service model), this includes managing the guest operating system (such as patching and updates) and configuring security group rules to control network traffic to and from the instances.

Step-by-Step Solution

1
Analyze the service model for Amazon EC2.
Amazon EC2 is an Infrastructure as a Service (IaaS) offering. AWS manages the physical facilities, hardware, and virtualization hypervisor, while the customer manages everything from the guest operating system upward.
To define the boundary of control between AWS and the customer.
2
Evaluate each task against the customer responsibility boundary.
Guest operating system patching and security group configurations are performed within the customer's administrative control. Physical security, hypervisor patching, and hardware destruction are performed by AWS at the infrastructure layer.
To determine which options represent customer responsibilities.

Key Concept

Shared Responsibility Model for IaaS
Estimated Time:1m 0s
Question 269Question →

A shipping company is migrating its legacy container tracking system to AWS. The system experiences high demand during the holiday season (300%300\% of baseline load), stable demand during the rest of the year, and requires a minimal baseline of 1010 servers running 24/724/7 for core operations. On-premises, the company pays for server hardware depreciation (fixed capital expenses), virtualization licenses, data center cooling, and physical security. The company aims to optimize its Total Cost of Ownership (TCO) and operational efficiency on AWS.

Which of the following actions align with the core principles of AWS cloud economics? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Transitioning from physical server depreciation and upfront hypervisor licensing fees to AWS pay-as-you-go billing shifts fixed capital expenses (CapEx) to variable operating expenses (OpEx).; Applying Amazon EC2 Auto Scaling to dynamically provision instances to handle the seasonal holiday spikes and terminate them afterwards minimizes Total Cost of Ownership (TCO) by leveraging elasticity.

Answer

Transitioning from physical server depreciation and upfront hypervisor licensing fees to AWS pay-as-you-go billing shifts fixed capital expenses (CapEx) to variable operating expenses (OpEx), and applying Amazon EC2 Auto Scaling to dynamically provision instances to handle the seasonal holiday spikes and terminate them afterwards minimizes Total Cost of Ownership (TCO) by leveraging elasticity.
The transition from physical server depreciation and licensing to pay-as-you-go billing is correct because it shifts capital expenses (CapEx) into operating expenses (OpEx), reducing upfront costs. The dynamic usage of Amazon EC2 Auto Scaling is correct because it utilizes elasticity to align resource supply with real-time demand, removing the financial burden of running idle servers during off-peak periods.

Step-by-Step Solution

1
Identify the financial transition
On-premises costs (server depreciation and upfront virtualization hypervisor licenses) are Capital Expenses (CapEx). Migrating to AWS pay-as-you-go billing replaces these with variable Operating Expenses (OpEx).
Understanding CapEx vs. OpEx is the foundation of cloud economics.
2
Assess workload characteristics and apply elasticity
The holiday spikes represent a 300%300\% surge that is temporary. Applying Auto Scaling dynamically handles the spikes and terminates instances off-peak, minimizing idle resource costs.
Elasticity is the direct countermeasure to the cost of idle capacity.
3
Evaluate baseline requirements against EC2 pricing options
The baseline of 1010 servers requires 24/724/7 constant availability. Spot Instances are interruptible and unsuitable here, while Reserved Instances are best suited for this steady-state baseline, not the seasonal spikes.
Matching the correct pricing model to the workload profile prevents availability issues and cost inefficiencies.

Key Concept

Cloud economics relies on transitioning CapEx to OpEx, minimizing Total Cost of Ownership (TCO) through elasticity, and selecting the appropriate pricing models for different workload profiles.
Estimated Time:3m 0s
Question 270Question →

A software development company is migrating its testing pipeline to the AWS Cloud. The operations team notices that manual configuration updates on staging servers have led to inconsistent test results across different release cycles. The team wants to adopt a design principle that ensures test environments are clean, predictable, and free from configuration drift, while also minimizing costs when tests are not running. Which of the following approaches best demonstrates the AWS Cloud design principle of using disposable resources to meet these requirements?

Show answer & explanation

Answer: Define the testing environment as code to programmatically launch fresh Amazon EC2 instances for each test run, and terminate the instances immediately after testing completes.

Answer

Define the testing environment as code to programmatically launch fresh Amazon EC2 instances for each test run, and terminate the instances immediately after testing completes.
The correct answer is to programmatically launch fresh instances for each test run and terminate them afterwards. This defines the 'disposable resources' principle where infrastructure is treated as temporary, ensuring a consistent test state free of drift and avoiding charges for idle resources.

Step-by-Step Solution

1
Identify the core problem and requirement.
The company needs clean, consistent test environments to avoid configuration drift and minimize costs when idle.
Understanding the requirement helps isolate the specific cloud design principle required.
2
Evaluate the design principle of disposable resources.
Disposable resources are dynamic, created on-demand, and terminated when no longer needed.
This principle ensures environments are built from a known, clean state every time.
3
Select the option that automates creation and destruction of resources.
Launching fresh instances using infrastructure as code and terminating them immediately after use aligns perfectly.
It addresses both configuration consistency (fresh state) and cost optimization (terminated when idle).

Key Concept

Disposable Resources
Estimated Time:1m 15s
Question 271Question →

A municipal public transit authority plans to modernize its fare collection and passenger tracking system, which currently runs on legacy, on-premises mainframe hardware. The transit system experiences extreme peak passenger volumes during morning and evening rush hours, but very low usage overnight. The authority wants to understand how migrating this infrastructure to AWS will impact its financial model and total cost of ownership (TCO). Which two outcomes represent the primary cloud economics benefits of migrating this system to AWS? (Select TWO).

Select all that apply

Show answer & explanation

Answer: Transitioning from upfront hardware investments to a variable operational expense model that aligns costs with passenger demand.; Reducing the total cost of ownership by dynamically matching infrastructure capacity with peak transit hours, eliminating the need to pay for idle resources during overnight periods.

Answer

Transitioning from upfront hardware investments to a variable operational expense model that aligns costs with passenger demand, and reducing the total cost of ownership by dynamically matching capacity with peak transit hours.
The correct outcomes are transitioning to a variable operational expense model and reducing TCO via dynamic capacity matching. Transitioning to a variable operational expense model replaces large upfront capital expenditures (CapEx) on hardware with pay-as-you-go operating expenses (OpEx). Dynamically matching capacity with peak demand leverages elasticity, meaning resources scale up during peak passenger volumes and scale down during overnight hours, preventing costs from running on idle resources.

Step-by-Step Solution

1
Analyze the financial transition described in the scenario, identifying the shift from buying physical mainframes to renting AWS resources.
Identify that the upfront hardware cost constitutes Capital Expenditure (CapEx), while paying for active resources constitutes Operating Expenditure (OpEx). Thus, transitioning to a variable operational expense model is correct.
Understanding the shift from CapEx to OpEx is fundamental to cloud economics.
2
Analyze the workload characteristics (extreme peak hours vs. low overnight usage) to evaluate capacity requirements.
Identify that the system has highly variable demand, meaning elasticity (scaling resources dynamically) will prevent pay-for-idle scenarios and reduce the total cost of ownership (TCO).
Elasticity is the core mechanism that optimizes costs for fluctuating workloads.

Key Concept

Concepts of cloud economics including CapEx to OpEx shift and elasticity
Estimated Time:2m 0s
Question 272Question →

A financial data analysis firm uses a multi-node Amazon Redshift cluster to store and analyze large volumes of proprietary market data. Under the AWS Shared Responsibility Model, which TWO of the following security-related tasks are the responsibility of the customer? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Configuring security groups to restrict network access to the Amazon Redshift cluster; Managing database user accounts, roles, and permissions within the Redshift database

Answer

Configuring security groups to restrict network access to the Amazon Redshift cluster, and managing database user accounts, roles, and permissions within the Redshift database.
The correct responsibilities for the customer include configuring security groups to restrict network access to the cluster and managing database-level user accounts, roles, and permissions. These represent security 'in' the cloud, where the customer determines who can access the database and how network traffic is routed. AWS is responsible for security 'of' the cloud, which includes operating system patching, hardware maintenance, and physical media decommissioning.

Step-by-Step Solution

1
Identify the service type and shared responsibility boundaries.
Amazon Redshift is a managed data warehouse service. AWS manages the infrastructure (hardware, physical security, virtualization) and the platform/OS (patching, backups).
Understanding the service type helps differentiate between customer tasks (security 'in' the cloud) and AWS tasks (security 'of' the cloud).
2
Evaluate each option against customer versus AWS responsibilities.
Configuring network firewalls (security groups) and managing database-level authentication/authorization are customer responsibilities. Patching the underlying OS, replacing hardware, and decommissioning storage drives are AWS responsibilities.
This isolates the correct options from the distractors based on the Shared Responsibility Model.

Key Concept

Under the AWS Shared Responsibility Model for managed services like Amazon Redshift, AWS manages the operating system, hardware, and physical infrastructure, while the customer is responsible for data classification, network access controls (security groups), and identity and access management (IAM and database users).
Question 273Question →

A healthcare analytics startup is launching a new processing platform. The company wants to minimize large upfront hardware costs and ensure they do not pay for idle server resources during periods of low activity. Which of the following are benefits of the AWS Cloud that directly address these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Trading capital expense for variable expense; Stopping guessing capacity

Answer

Trading capital expense for variable expense and stopping guessing capacity
Trading capital expense for variable expense allows the company to pay only for the resources they consume instead of investing heavily in physical datacenters. Stopping guessing capacity ensures the company can scale resources automatically to meet demand without paying for idle server capacity during low-traffic periods.

Step-by-Step Solution

1
Analyze the business requirements of the startup.
The company wants to avoid large upfront hardware costs and prevent paying for idle server resources.
This maps the startup's requirements to specific AWS Cloud benefits.
2
Evaluate the choices to find which AWS Cloud benefits solve these requirements.
Trading capital expense for variable expense eliminates upfront investments, and stopping guessing capacity prevents paying for idle capacity.
This identifies the two correct benefits of the AWS Cloud.

Key Concept

Benefits of the AWS Cloud
Question 274Question →

A software developer needs to access Amazon S3 buckets using the AWS Command Line Interface (CLI) from their local development workstation. According to AWS security best practices, which method should the developer use to authenticate and run these commands?

Show answer & explanation

Answer: Use AWS IAM Identity Center to authenticate the session and obtain short-lived, temporary credentials.

Answer

Use AWS IAM Identity Center to authenticate the session and obtain short-lived, temporary credentials.
Using AWS IAM Identity Center allows human users to authenticate and receive short-lived, temporary credentials for command-line access. This aligns with the security best practice of avoiding long-lived access keys, which are prone to accidental exposure.

Step-by-Step Solution

1
Determine the user type and access method.
A human developer requires programmatic access to AWS via the local CLI.
Identifying the actor and tool determines which credential strategies are applicable.
2
Evaluate credential lifetimes against AWS security best practices.
Temporary credentials should always be preferred over long-lived credentials for human access.
Minimizes the blast radius and risk of credential exposure.
3
Select the modern AWS service that provides temporary credentials via single sign-on.
AWS IAM Identity Center.
It dynamically issues short-lived programmatic credentials for the CLI and simplifies multi-account access.

Key Concept

IAM Credential Management and Best Practices
Estimated Time:1m 0s
Question 275Question →

A pharmaceutical company is launching a new research database containing proprietary clinical trial data on AWS. To meet strict regulatory standards, the compliance team must download the AWS SOC 2 Type II report and verify that data protection standards are maintained. Which of the following actions must the company take to meet these compliance objectives? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Retrieve the AWS SOC 2 Type II report through the self-service portal in AWS Artifact.; Enable encryption at rest for the Amazon RDS DB instances storing the clinical trial data.

Answer

Retrieve the AWS SOC 2 Type II report through the self-service portal in AWS Artifact, and enable encryption at rest for the Amazon RDS DB instances storing the clinical trial data.
Retrieving compliance documents like SOC 2 reports is done via the self-service AWS Artifact console. Additionally, securing data at rest in Amazon RDS DB instances is a customer responsibility under the Shared Responsibility Model.

Step-by-Step Solution

1
Identify the service for compliance documentation.
Determine that AWS Artifact is the repository for on-demand compliance reports, eliminating the need to contact AWS support.
Retrieving the SOC 2 Type II report is necessary to verify the security of the AWS physical and cloud infrastructure.
2
Delineate security responsibilities under the Shared Responsibility Model.
Confirm that database encryption at rest (data protection) and guest operating system patching on EC2 instances are customer responsibilities, whereas physical security and hypervisor maintenance are AWS responsibilities.
This determines which security actions must be configured directly by the company's administrators.
3
Select the correct combination of customer-managed settings and compliance report retrieval.
Choose the option to retrieve the SOC 2 report from AWS Artifact and the option to configure RDS encryption at rest.
This satisfies both the compliance documentation requirement and the customer data protection obligation.

Key Concept

AWS Compliance and the Shared Responsibility Model
Estimated Time:2m 0s
Question 276Question →

A logistics company is designing an automated package sorting and delivery notification system. The system receives scan events from millions of IoT barcode scanners globally. These events must be processed immediately to update tracking history, and a notification must then be sent to the customer. The transaction volume spikes dramatically during holiday periods but drops to near zero overnight. The engineering team needs to design the architecture to be resilient, cost-efficient, and aligned with AWS Cloud design principles.

Which TWO architectural decisions best align with AWS design principles for this scenario?

Select all that apply

Show answer & explanation

Answer: Decouple the barcode ingestion service from the customer notification service using Amazon Simple Queue Service (SQS).; Use Amazon EC2 Auto Scaling to dynamically adjust the number of processing instances based on the volume of queue messages.

Answer

Decouple the barcode ingestion service from the customer notification service using Amazon Simple Queue Service (SQS), and use Amazon EC2 Auto Scaling to dynamically adjust the number of processing instances based on the volume of queue messages.
The correct architectural decisions are to decouple the barcode ingestion from the notification service using Amazon Simple Queue Service (SQS) and to use Amazon EC2 Auto Scaling to dynamically size the processing layer. SQS introduces loose coupling by buffer-queuing events, preventing component failures from affecting other parts of the system. Auto Scaling implements elasticity by dynamically scaling processing capacity to match actual traffic demands, maintaining cost-efficiency during off-peak hours.

Step-by-Step Solution

1
Identify the key requirements of the scenario: handling unpredictable, spiky IoT data volumes and maintaining high availability while optimizing costs.
Recognized the need for a highly elastic and decoupled architecture.
AWS design principles advocate for loose coupling to prevent cascading failures and elasticity to align cost with demand.
2
Evaluate decoupling options to isolate components.
Selected the option to use Amazon Simple Queue Service (SQS) to decouple the barcode ingestion service from downstream processing.
A queue acts as a buffer, ensuring that spikes in ingestion do not overwhelm downstream services and that failures in notifications do not drop incoming transactions.
3
Evaluate scaling strategies for the compute layer.
Selected the option to use Amazon EC2 Auto Scaling to dynamically adjust instances based on queue volume.
This implements elasticity, automatically adjusting capacity to match actual workload demands rather than paying for idle static resources.

Key Concept

AWS Cloud design principles, specifically loose coupling and elasticity.
Estimated Time:2m 0s
Question 277Question →

An organization is setting up AWS accounts for its new development team. To ensure a secure cloud environment, which of the following are AWS Identity and Access Management (IAM) best practices that the organization should implement? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Apply the principle of least privilege by granting only the minimum permissions required for developers to perform their tasks.; Enable Multi-Factor Authentication (MFA) for the AWS account root user and administrative users.

Answer

Implementing the principle of least privilege and enabling Multi-Factor Authentication (MFA) for privileged accounts are essential IAM security best practices.
Granting only the permissions required to perform a job (least privilege) and enabling Multi-Factor Authentication (MFA) for administrative and root accounts are fundamental AWS security practices that reduce unauthorized access risk.

Step-by-Step Solution

1
Analyze each option to determine if it aligns with AWS Identity and Access Management (IAM) security guidelines.
Identified that least privilege and multi-factor authentication (MFA) are recommended best practices, while sharing root credentials, hardcoding user access keys, and expecting AWS to manage permissions are incorrect practices.
AWS security best practices emphasize minimizing access (least privilege) and securing credentials (MFA), while delegating tasks to specific IAM roles instead of using root or permanent user keys.

Key Concept

AWS IAM Best Practices
Question 278Question →

A financial trading firm hosts its transaction database on Amazon EC2 instances and stores historical backups in Amazon S3. To prepare for an upcoming audit, the compliance team must review the physical security controls of the AWS data centers and ensure the database infrastructure is patched in accordance with regulatory requirements. Which of the following actions should the team take to meet these compliance and governance requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Download the AWS SOC 1 report from AWS Artifact to review the physical and environmental security controls of the AWS infrastructure.; Apply operating system updates and security patches directly to the Amazon EC2 instances hosting the database.

Answer

To meet compliance requirements, the compliance team must download the AWS SOC 1 report from AWS Artifact to review physical and environmental security controls, and they must directly apply operating system updates and security patches to the Amazon EC2 instances hosting the database.
The correct options are downloading the SOC 1 report from AWS Artifact and applying OS patches directly to the EC2 instances. AWS Artifact is the dedicated platform for compliance document retrieval, which allows customers to verify AWS physical controls. In addition, because the transaction database is hosted on Amazon EC2, the customer is fully responsible for configuring and patching the guest operating system under the Shared Responsibility Model.

Step-by-Step Solution

1
Determine the source for physical and environmental security compliance reports of AWS infrastructure.
Identify AWS Artifact as the centralized portal where AWS hosts compliance documents like SOC 1, SOC 2, and PCI reports.
AWS manages the physical security of the cloud, and customers verify this through official third-party audit reports provided via AWS Artifact.
2
Understand the confidentiality rules associated with AWS compliance reports.
Recognize that AWS Artifact documents require accepting a non-disclosure agreement (NDA) and cannot be distributed publicly.
Sharing proprietary and confidential audit reports publicly violates the terms of service.
3
Apply the Shared Responsibility Model to the database architecture (Amazon EC2).
Confirm that the customer is responsible for guest operating system patching, application management, and data configuration on EC2.
Since EC2 is an infrastructure service, the customer has root/administrator access and sole control over the operating system, making them responsible for applying OS security updates.

Key Concept

AWS compliance reporting via AWS Artifact and the division of patching duties under the Shared Responsibility Model.
Question 279Question →

A financial institution is deploying AWS Outposts inside its on-premises corporate data center to run low-latency applications. Under the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

Show answer & explanation

Answer: Providing physical security, power, cooling, and network connectivity for the Outposts rack.

Answer

Providing physical security, power, cooling, and network connectivity for the Outposts rack.
For AWS Outposts, the hardware is deployed within the customer's physical facility. Consequently, the customer is responsible for the physical security of the site, as well as providing the necessary power, cooling, and network connectivity to keep the rack operational.

Step-by-Step Solution

1
Identify the deployment model of AWS Outposts.
AWS Outposts is a hybrid cloud service where AWS-owned hardware is physically installed within the customer's on-premises environment.
Understanding the physical location of the resources helps establish the boundary for physical security and environmental controls.
2
Map physical and environmental responsibilities under this model.
Since AWS cannot control or monitor access to the customer's private data center, the responsibility for securing the rack physically and supplying power, cooling, and networking falls to the customer.
This isolates the tasks that cannot logically be performed by AWS due to lack of physical access.
3
Map infrastructure and hardware responsibilities under this model.
AWS continues to manage infrastructure software (such as hypervisors and firmware) and provides hardware maintenance and replacements.
This clarifies why the other operational tasks belong to AWS rather than the customer.

Key Concept

AWS Shared Responsibility Model for AWS Outposts
Question 280Question →

VeloMotors, an automotive manufacturing company, is migrating its legacy supply-chain tracking system to the AWS Cloud. The application currently runs on physical servers in their on-premises data center. To meet a strict data center evacuation deadline, the migration team decides to move the virtual machine images directly to Amazon EC2 instances without modifying the application code, database schema, or operating system configuration. Which of the following migration strategies is VeloMotors utilizing for this system?

Show answer & explanation

Answer: Rehosting

Answer

Rehosting
Rehosting (lift-and-shift) is a migration strategy where applications are moved to the cloud as-is, without code modifications or configuration changes. Since VeloMotors is copying virtual machine images directly to Amazon EC2 to meet their deadline without modifying the code, OS, or database, this is Rehosting.

Step-by-Step Solution

1
Analyze the migration scenario constraints and details.
The virtual machine images are being moved directly to Amazon EC2 instances with zero changes to the application code, database, or OS.
This establishes that the application is being migrated as-is without any modifications.
2
Match the scenario characteristics to the correct migration strategy from the 6 Rs.
Moving applications to the cloud as-is without code modifications matches the definition of Rehosting (lift-and-shift).
This differentiates Rehosting from strategies like Replatforming (minor tweaks) or Refactoring (major code changes).

Key Concept

AWS Cloud Migration Strategies (6 Rs) - Rehosting
PreviousPage 14 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin