Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 341Question →

A company is migrating a legacy payroll application to AWS. Currently, the application’s web server, database, and reporting system are all running on a single virtual machine. If the reporting system crashes, the entire application becomes unavailable. To prevent this, the company plans to split the application into independent components that can fail without affecting each other. Which AWS Cloud design principle is the company implementing?

Show answer & explanation

Answer: Loose coupling

Answer

Loose coupling
Loose coupling is a fundamental design principle in the AWS Cloud. By separating the web server, database, and reporting system into independent components that communicate via standard interfaces (such as APIs or message queues), the company ensures that a failure in the reporting system does not cause a cascading failure across the web server or database.

Step-by-Step Solution

1
Analyze the current application state and the company's objective.
The current application has all components on a single virtual machine (tight dependency/single point of failure). The objective is to make the components independent so that a failure in one does not affect the others.
Identifying the core problem (cascading failure due to tight integration) is necessary to determine which cloud design principle solves it.
2
Match the goal of independent component execution to the correct AWS Cloud design principle.
Designing components to interact through well-defined interfaces without depending on each other's internal configurations corresponds to loose coupling.
Loose coupling reduces interdependencies, ensuring that the failure of one system component does not bring down the entire application.

Key Concept

Loose coupling reduces dependencies between systems or components, helping to isolate failures and prevent a single component's outage from impacting the entire application.
Question 342Question →

A manufacturing company is analyzing the financial impact of migrating its supply chain optimization application to AWS. Currently, the on-premises system runs on physical servers that are depreciated over a five-year lifecycle. The application experiences a predictable, steady baseline workload throughout the year, but requires double the capacity for a three-day period at the end of every month to run inventory reconciliations. Which of the following describes the most cost-effective strategy that aligns with AWS cloud economics principles for this workload?

Show answer & explanation

Answer: Commit to a Savings Plan for the baseline workload to reduce operating expenses, and dynamically provision additional resources only during the three-day monthly spikes to benefit from elasticity.

Answer

Commit to a Savings Plan for the baseline workload to reduce operating expenses, and dynamically provision additional resources only during the three-day monthly spikes to benefit from elasticity.
The correct strategy combines a commitment-based payment model (Savings Plan) to lower the operating expenses of the constant baseline workload with dynamic scaling (elasticity) to handle the short-term monthly spikes. This avoids paying for idle capacity and fully transitions the company from a capital expense model (depreciating physical servers) to an optimized operating expense model.

Step-by-Step Solution

1
Analyze the workload characteristics: a constant, predictable baseline throughout the year and a short, recurring spike at the end of each month.
Identified two distinct demand profiles: steady-state (baseline) and transient/elastic (monthly spike).
Different workload profiles require different pricing and provisioning models to optimize costs.
2
Identify the appropriate pricing model for the predictable baseline workload.
A commitment-based model like Savings Plans or Reserved Instances is ideal for steady-state baseline workloads, providing significant discounts over On-Demand rates.
Commitment reduces operating expenses for predictable workloads.
3
Identify the appropriate provisioning strategy for the transient monthly spike.
Using elasticity to provision resources dynamically for the three days and terminate them afterward is the most cost-effective approach.
This avoids paying for idle resources during the rest of the month, demonstrating the economic benefits of cloud elasticity.
4
Evaluate the financial transition model from on-premises to AWS.
Migrating to AWS shifts capital expenses (depreciating physical servers) to operating expenses (pay-as-you-go and operational cost optimization).
This aligns with the cloud economics principle of trading capital expense for variable operating expense.

Key Concept

Cloud Economics: CapEx vs OpEx and Elasticity
Estimated Time:2m 0s
Question 343Question →

EcoHarvest Co-op, a regional agricultural cooperative, is planning to migrate its operations to the AWS Cloud. During the application discovery phase, the IT team decides to decommission their legacy, on-premises billing application and replace it with a commercial Software-as-a-Service (SaaS) billing solution. Which migration strategy does this decision represent?

Show answer & explanation

Answer: Repurchasing

Answer

Repurchasing
The correct answer is Repurchasing. This migration strategy, sometimes called 'drop-and-shop', involves retiring an existing legacy application and replacing it with a new product, typically a Software-as-a-Service (SaaS) platform, or buying a different license.

Step-by-Step Solution

1
Analyze the migration scenario details.
The scenario describes a company decommissioning their legacy billing application and replacing it with a commercial Software-as-a-Service (SaaS) billing solution.
Identifying key actions like replacing legacy software with a SaaS model is essential to mapping the migration to the correct 6 Rs strategy.
2
Evaluate the 6 Rs migration strategies against the identified action.
Replacing a system with a different product (typically SaaS) is the definition of the Repurchasing strategy.
This confirms that the strategy is Repurchasing rather than Rehosting, Replatforming, or Refactoring.

Key Concept

AWS Cloud Migration Strategies (6 Rs)
Question 344Question →

A global smart agriculture company collects telemetry data from soil sensors deployed in various fields. The volume of data fluctuates significantly, peaking during harvest seasons and dropping to near zero during winter. The company is migrating its data processing workload from an on-premises data center to the AWS Cloud. Which two of the following describe the primary cloud economic advantages of this migration?

Select all that apply

Show answer & explanation

Answer: Shifting from a capital expense (CapEx) model of purchasing physical hardware to a variable operating expense (OpEx) model.; Leveraging cloud elasticity to scale resources down during the off-season, preventing costs associated with idle capacity.

Answer

Shifting from a capital expense (CapEx) model of purchasing physical hardware to a variable operating expense (OpEx) model, and leveraging cloud elasticity to scale resources down during the off-season, preventing costs associated with idle capacity.
The correct options represent core cloud economic advantages. The transition from capital expenses to operating expenses allows a business to pay only for the resources consumed rather than investing upfront in depreciating physical hardware. Furthermore, leveraging elasticity allows the system to scale down during low-activity periods (winter), preventing wasted expenditure on idle server capacity.

Step-by-Step Solution

1
Analyze the workload characteristics described in the scenario.
The workload has highly seasonal and fluctuating demand (high peak during harvests, low during winter).
Understanding the usage pattern helps identify the financial benefits of scaling resources dynamically.
2
Evaluate the financial shift in cloud computing.
On-premises requires upfront Capital Expenses (CapEx) for peak capacity, whereas AWS uses variable Operating Expenses (OpEx).
This identifies the economic advantage of trading fixed capital costs for variable operational costs.
3
Apply the concept of elasticity to the fluctuating demand.
AWS resources can scale down when demand is low (winter) and scale up when demand is high (harvest).
This explains how the cost benefit of elasticity prevents paying for idle resources.

Key Concept

Understand concepts of cloud economics including CapEx vs OpEx and the cost benefits of elasticity.
Estimated Time:2m 0s
Question 345Question →

A university research laboratory is setting up an AWS account. The administrator needs to grant ten student researchers read-only access to a specific Amazon S3 bucket. Which of the following approaches represent AWS Identity and Access Management (IAM) best practices for this scenario? (Select two.)

Select all that apply

Show answer & explanation

Answer: Create an individual IAM user for each student researcher.; Create an IAM group, attach the required permission policy to the group, and add the student users to it.

Answer

The correct practices are to create an individual IAM user for each student researcher, and to manage their permissions collectively by creating an IAM group, attaching the permission policy to that group, and adding the users to the group.
Creating individual IAM users and organizing them into an IAM group to apply policies is the AWS-recommended approach. This pattern ensures clear auditing of actions while minimizing management overhead by applying policy controls at the group level.

Step-by-Step Solution

1
Analyze the access requirement.
Ten student researchers require S3 read-only access under administrative control.
To determine the appropriate identity and access strategy.
2
Apply IAM identity best practices.
Determine that sharing credentials or using the root user violates security principles, while creating individual IAM users and using IAM groups for permission management aligns with AWS best practices.
To ensure individual accountability, ease of management, and adherence to the principle of least privilege.

Key Concept

AWS IAM best practices emphasize using individual identities (IAM users) and grouping them (IAM groups) to simplify policy management, while strictly avoiding the use of shared accounts or the root user for daily activities.
Estimated Time:1m 0s
Question 346Question →

A digital advertising agency must provide its clients with independent audit reports verifying that the AWS infrastructure hosting their campaigns complies with global security standards. The agency also needs to review and accept a Non-Disclosure Agreement (NDA) with AWS. Which two tasks can the agency perform using AWS Artifact to satisfy these requirements?

Select all that apply

Show answer & explanation

Answer: Downloading AWS compliance reports, such as ISO certifications and Service Organization Control (SOC) reports.; Reviewing, accepting, and managing agreements with AWS, such as global Non-Disclosure Agreements (NDAs).

Answer

Downloading AWS compliance reports (such as ISO or SOC) and reviewing/accepting agreements with AWS (such as Non-Disclosure Agreements).
AWS Artifact provides on-demand access to AWS compliance documentation (including SOC and ISO reports) and allows customers to review, accept, and manage agreements (such as NDAs or BAAs) directly from the AWS Management Console.

Step-by-Step Solution

1
Identify the AWS service designed as a central repository for compliance-related information and agreement management.
AWS Artifact is identified as the service providing on-demand access to AWS compliance reports and agreements.
The scenario requires retrieving third-party audit reports (like ISO/SOC) and signing a Non-Disclosure Agreement (NDA) with AWS.
2
Verify which proposed features belong to AWS Artifact versus other AWS security services or customer responsibilities.
Downloading compliance documents and accepting NDAs are core capabilities of AWS Artifact, whereas patching, vulnerability scanning, and API auditing are handled by other services or customer processes.
This isolates the correct capabilities to fulfill the business requirements.

Key Concept

AWS Artifact provides on-demand download of AWS compliance documents and self-service agreement management.
Question 347Question →

An agricultural analytics company processes soil sensor telemetry data from farms across North America. The data volume increases tenfold during the spring planting season but drops to near zero during the winter months. By migrating to AWS, the company dynamically adjusts its computing resources to match the seasonal demand, avoiding the need to purchase infrastructure based on peak workload projections. Which benefit of the AWS Cloud does this scenario demonstrate?

Show answer & explanation

Answer: Stop guessing capacity

Answer

Stop guessing capacity
The correct answer is the option stating 'Stop guessing capacity'. In traditional IT, organizations must estimate and pay for peak capacity to avoid outages during busy periods, leading to idle resources during off-peak times. AWS eliminates this issue by allowing resources to scale dynamically as needed.

Step-by-Step Solution

1
Analyze the company's problem of fluctuating seasonal demand and the desire to avoid purchasing infrastructure based on peak predictions.
Identify that the issue stems from having to predict and provision hardware capacity in advance.
Determining capacity requirements in advance often leads to either wasted resource expenses or service outages.
2
Match the solution of dynamically scaling resources to the defined AWS Cloud benefits.
The capability to adjust resources to match actual demand dynamically corresponds to the benefit of 'Stop guessing capacity'.
AWS allows businesses to scale resources on-demand, eliminating the need to guess and pay for peak infrastructure capacity.

Key Concept

Define the benefits of the AWS Cloud
Estimated Time:1m 0s
Question 348Question →

An educational technology company hosting student record databases on AWS must prepare for an audit by its university customers. The customers require verification of the physical security controls of the AWS data centers, and the company must accept the AWS non-disclosure agreements (NDAs) to access these documents. Which TWO actions should the company take to meet these compliance requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Download AWS compliance documents such as SOC and ISO reports directly from the AWS Artifact console; Accept the required AWS agreements, such as non-disclosure agreements, directly within AWS Artifact

Answer

Download AWS compliance documents such as SOC and ISO reports directly from the AWS Artifact console, and accept the required AWS agreements, such as non-disclosure agreements, directly within AWS Artifact.
To verify AWS physical security controls, the customer must access AWS compliance documents (such as Service Organization Control (SOC) and ISO reports) which are available on-demand in AWS Artifact. To access these documents, the customer must accept the associated AWS agreements and non-disclosure terms, which can be done directly through the AWS Artifact portal.

Step-by-Step Solution

1
Identify the primary service in AWS for retrieving official compliance reports and signing agreements.
Recognize that AWS Artifact is the self-service portal designed for compliance document retrieval and agreement acceptance.
AWS Artifact allows customers to access security and compliance reports and accept AWS agreements on-demand.
2
Determine which action retrieves the physical security control documentation requested by the auditors.
Select the option to download SOC and ISO reports directly from AWS Artifact.
SOC and ISO reports contain the audit evidence for AWS physical infrastructure security.
3
Determine how the company can accept the required non-disclosure agreements (NDAs) to access the documents.
Select the option to accept the required agreements online via the AWS Artifact console.
AWS Artifact Agreements allows customers to review and accept AWS terms and NDAs.

Key Concept

AWS compliance reports retrieval and agreements acceptance under the Shared Responsibility Model.
Question 349Question →

A financial organization is using AWS Storage Gateway (Volume Gateway) deployed as a virtual machine (VM) on their on-premises VMware ESXi hypervisor to replicate local file data to Amazon S3. Under the AWS Shared Responsibility Model, which of the following operational security tasks is the responsibility of AWS?

Show answer & explanation

Answer: Providing and deploying software updates and security patches for the Storage Gateway virtual appliance guest operating system and application software.

Answer

Providing and deploying software updates and security patches for the Storage Gateway virtual appliance guest operating system and application software.
AWS is responsible for providing and deploying software updates and security patches for the Storage Gateway virtual appliance. Because it is a managed virtual appliance, AWS maintains and packages updates for the gateway software and its underlying operating system, though the customer retains control over the schedule for applying these updates.

Step-by-Step Solution

1
Analyze the service model and deployment type.
AWS Storage Gateway is a hybrid storage service. The virtual machine runs on-premises, but the gateway software itself is a managed appliance provided by AWS.
Understanding where the service components run is key to identifying the boundary of the Shared Responsibility Model.
2
Determine the boundary of responsibility for the gateway software appliance.
AWS is responsible for building, patching, and maintaining the VM appliance's guest operating system and gateway software.
AWS maintains operational control over the software image of the appliance, even though it runs on customer-owned hardware.
3
Evaluate the customer's on-premises responsibilities.
The customer is responsible for the physical security of the on-premises data center, the hypervisor configuration, local networking, and the protection of local data.
AWS cannot manage or secure physical hardware, hypervisors, or networks that are outside of its cloud infrastructure.

Key Concept

Shared Responsibility Model for Hybrid Services
Question 350Question →

Apex Realty Group is migrating its IT infrastructure to the AWS Cloud. The migration team has decided to move its legacy customer-facing web portal directly to Amazon EC2 instances without modifying any code. Additionally, they plan to migrate their relational database to Amazon Relational Database Service (Amazon RDS) to minimize database administration effort while keeping the application's underlying code unchanged. Which two of the following migration strategies are being utilized by Apex Realty Group?

Select all that apply

Show answer & explanation

Answer: Rehosting; Replatforming

Answer

Rehosting and Replatforming
Rehosting is correct because moving the legacy customer-facing web portal to Amazon EC2 without code changes is a classic lift-and-shift. Replatforming is correct because moving the database to a managed service like Amazon RDS to reduce management overhead while keeping the core code intact is a lift-tinker-and-shift.

Step-by-Step Solution

1
Analyze the web portal migration
The web portal is moved to Amazon EC2 with zero code changes, which corresponds directly to the Rehosting strategy.
Identifying that no modifications are made to the code indicates a pure lift-and-shift (Rehosting).
2
Analyze the database migration
The database is moved to Amazon RDS to reduce management overhead without changing the core architecture, which corresponds directly to the Replatforming strategy.
Switching from self-managed database infrastructure to a managed service (Amazon RDS) without altering core application logic represents a lift-tinker-and-shift (Replatforming).

Key Concept

Cloud migration strategies (6 Rs)
Question 351Question →

An engineering firm designs and tests wind turbine prototypes using computational fluid dynamics (CFD) simulations. Historically, their on-premises computing clusters sat idle during design-drafting phases, yet became heavily bottlenecked with long job queues during testing phases. By migrating these workloads to AWS, they can spin up hundreds of virtual cores on demand to run simulations in parallel, and immediately terminate them when the runs complete. Which AWS Cloud benefit is directly demonstrated by resolving this specific challenge of idle hardware and queue delays?

Show answer & explanation

Answer: Stop guessing capacity

Answer

Stop guessing capacity
The correct answer is 'Stop guessing capacity'. The scenario highlights the classic dilemma of capacity planning: having idle resources during low-demand periods (over-provisioning) and queue bottlenecks during peak periods (under-provisioning). AWS solves this by allowing resources to scale up and down dynamically as needed, meaning organizations no longer need to forecast capacity beforehand.

Step-by-Step Solution

1
Analyze the business problem in the scenario: the engineering firm experiences periods of idle resources (over-provisioning) and periods of queue delays (under-provisioning) due to static infrastructure capacity constraints.
Identified that the core challenge is related to predicting and matching infrastructure capacity to fluctuating simulation workloads.
Understanding the operational bottleneck is the first step in mapping it to the correct cloud benefit.
2
Evaluate how migrating to AWS resolves this challenge: the firm can dynamically spin up resources on demand and terminate them immediately when finished.
AWS allows the firm to scale capacity up and down within minutes, eliminating the need to pre-allocate fixed hardware.
This shows how dynamic cloud elasticity solves the traditional capacity forecasting problem.
3
Map this solution to the six official AWS Cloud benefits defined in the AWS Certified Cloud Practitioner curriculum.
The ability to dynamically scale resources to match demand and eliminate the issues of idle hardware or capacity limits maps directly to 'Stop guessing capacity'.
Official AWS documentation defines 'Stop guessing capacity' as eliminating the need to make capacity decisions prior to deploying applications, preventing sitting on idle resources or dealing with limited capacity.

Key Concept

AWS Cloud Benefit: Stop guessing capacity
Question 352Question →

A startup is establishing its cloud environment and wants to secure access for its development team. The developers currently share a single set of credentials to manage AWS resources. Which TWO AWS Identity and Access Management (IAM) best practices should the startup implement to secure its environment? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Create individual IAM users for each developer and place them in an IAM group with least-privilege permissions attached.; Enable multi-factor authentication (MFA) on the AWS account root user and restrict its use to only tasks that require root credentials.

Answer

The correct practices are to create individual IAM users for each developer within an IAM group, and to enable multi-factor authentication (MFA) on the root user while avoiding its use for daily administrative tasks.
To secure the AWS environment, individual IAM users should be created for each developer to ensure accountability, and they should be organized into IAM groups to simplify permission management using policies. Additionally, the AWS account root user must be secured with multi-factor authentication (MFA) and restricted from daily use, as it has unrestricted administrative privileges.

Step-by-Step Solution

1
Analyze the security requirements of a development team currently sharing credentials.
Identified the need to establish individual accountability and protect administrative access.
Sharing credentials violates security guidelines and prevents auditing of individual actions.
2
Evaluate identity and access management options for developers.
Determine that creating individual IAM users and using IAM groups simplifies permission management and enforces individual accountability.
This aligns with the principle of least privilege and AWS IAM best practices.
3
Evaluate root account security options.
Determine that the root user should be secured with MFA and not used for daily administration tasks.
The root user has unrestricted access and poses a significant security risk if compromised.

Key Concept

AWS IAM Best Practices for Account Security and User Management
Question 353Question →

A startup is building a new mobile application backend. The development team wants to focus entirely on writing application code without the operational overhead of provisioning, patching, or managing virtual servers. Which AWS Cloud design principle is best demonstrated by choosing managed services like AWS Lambda and Amazon DynamoDB for this architecture?

Show answer & explanation

Answer: Services, not servers

Answer

Services, not servers
The principle of 'Services, not servers' recommends using AWS managed services to eliminate the need for customers to manage, patch, and provision virtual servers. By choosing managed offerings like AWS Lambda (serverless compute) and Amazon DynamoDB (serverless database), developers can focus entirely on application logic while AWS handles the underlying infrastructure.

Step-by-Step Solution

1
Analyze the requirements in the scenario.
The team wants to avoid provisioning, patching, and managing virtual servers, opting instead for managed services.
This helps identify which AWS design principle removes server management overhead.
2
Compare the scenario details with AWS Cloud design principles.
Using serverless and managed services like AWS Lambda and Amazon DynamoDB aligns directly with the principle of using services instead of managing servers.
This confirms the correct architectural principle being applied.

Key Concept

Services, not servers
Question 354Question →

An online retail company wants to implement a service that continuously monitors their AWS accounts and workloads for malicious activity and unauthorized behavior. Which AWS service provides this threat detection capability?

Show answer & explanation

Answer: Amazon GuardDuty

Answer

Amazon GuardDuty
Amazon GuardDuty is the correct service because it provides continuous threat detection by monitoring activities across AWS accounts and workloads to find anomalies, unauthorized behavior, or known malicious signatures.

Step-by-Step Solution

1
Identify the primary requirement in the scenario.
The requirement is to continuously monitor AWS accounts and workloads for malicious activity and unauthorized behavior.
This helps determine the category of service needed, specifically threat detection.
2
Map the threat detection requirement to the correct AWS service capability.
Amazon GuardDuty is the AWS service that uses machine learning and threat intelligence to identify anomalous and malicious activities.
Matching the service features to the operational requirement confirms the correct choice.

Key Concept

Amazon GuardDuty is a managed threat detection service that continuously monitors AWS accounts, workloads, and data for malicious activity and unauthorized behavior.
Question 355Question →

A software-as-a-service (SaaS) startup is launching a new application on AWS. The workload is expected to be highly variable, with unpredictable traffic spikes throughout the day. The startup's Chief Financial Officer (CFO) wants to minimize up-front infrastructure costs and ensure that the company only pays for the compute resources it actually consumes. Which of the following strategies aligns with AWS cloud economics to meet the CFO's requirements?

Show answer & explanation

Answer: Deploying the application using an elastic architecture that automatically scales resources in response to demand, converting fixed capital expenses (CapEx) into variable operating expenses (OpEx).

Answer

Deploying the application using an elastic architecture that automatically scales resources in response to demand, converting fixed capital expenses (CapEx) into variable operating expenses (OpEx).
The strategy of deploying an elastic architecture that scales dynamically based on real-time demand allows the startup to pay only for the resources they consume. This represents a shift from capital expenses (CapEx) to variable operating expenses (OpEx), which is a key concept of cloud economics.

Step-by-Step Solution

1
Identify the CFO's financial constraints and requirements.
The CFO wants to minimize up-front infrastructure costs (avoid CapEx) and pay only for consumed capacity (leverage variable costs/elasticity).
This defines the target economic criteria to evaluate the options.
2
Analyze the economic impact of static vs. elastic architectures in the cloud.
An elastic architecture scales resources down when demand is low, preventing charges for idle capacity and representing a variable operating expense (OpEx).
This determines how elasticity affects TCO.
3
Evaluate the billing and operational characteristics of the options.
Only the option utilizing an elastic architecture to transition from CapEx to OpEx satisfies both the avoidance of up-front costs and the dynamic matching of capacity to demand.
This confirms the correct choice based on cloud economic principles.

Key Concept

Shifting capital expenses (CapEx) to operating expenses (OpEx) through elasticity
Question 356Question →

EduPath Learning, an online education provider, is migrating its systems to the AWS Cloud. The migration team has decided on the following actions:

1. The relational database for the student portal will be moved to Amazon RDS for PostgreSQL to take advantage of automated patching and backups, without changing the application logic.
2. A legacy system used for processing legacy course credits, which is planned for decommissioning next year, will be kept on-premises in its current state for now.

Which two of the following migration strategies are represented by these decisions?

Select all that apply

Show answer & explanation

Answer: Replatforming; Retaining

Answer

Replatforming and Retaining
Replatforming represents the decision to move the database to Amazon RDS to benefit from managed services without modifying the core application code. Retaining represents the decision to keep the legacy billing system on-premises in its current state until it is decommissioned.

Step-by-Step Solution

1
Analyze the first decision: migrating the database to Amazon RDS for PostgreSQL without changing application logic to leverage managed backups.
This is Replatforming (lift-tinker-and-shift) because the database is optimized for cloud management without code changes.
Identifying the characteristics of migrating to a managed service like RDS matches the Replatforming strategy.
2
Analyze the second decision: keeping the legacy course-credits system on-premises in its current state because it is scheduled to be retired.
This is Retaining because the workload is kept on-premises as-is during the migration process.
Identifying that keeping a workload on-premises during migration fits the Retaining strategy.

Key Concept

AWS Cloud Migration Strategies (6 Rs)
Estimated Time:1m 30s
Question 357Question →

A retail pharmacy chain is launching a digital prescription delivery platform. The company wants to deploy its application without predicting how many users will register in the first week, avoiding the risk of under-provisioning servers. Additionally, they want to focus their engineering talent on writing software features rather than managing physical server racks and hypervisors. Which of the following AWS Cloud benefits directly align with these goals? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Stop guessing capacity; Stop spending money running and maintaining data centers

Answer

The correct answers are 'Stop guessing capacity' and 'Stop spending money running and maintaining data centers'.
The correct benefits are 'Stop guessing capacity' and 'Stop spending money running and maintaining data centers'. 'Stop guessing capacity' allows the business to launch without predicting first-week user registrations, eliminating the risk of under-provisioning. 'Stop spending money running and maintaining data centers' allows engineers to focus on software features rather than managing infrastructure layers.

Step-by-Step Solution

1
Analyze the company's requirement to launch without predicting registration numbers and avoid under-provisioning.
Identify that this requirement maps directly to the benefit of not needing to pre-determine infrastructure size, which is defined as 'Stop guessing capacity'.
This benefit allows scaling resources dynamically in response to actual demand rather than making upfront capacity assumptions.
2
Analyze the requirement to focus engineering talent on software features rather than managing physical server racks and hypervisors.
Identify that this requirement maps directly to offloading infrastructure management to AWS, which is defined as 'Stop spending money running and maintaining data centers'.
By eliminating rack maintenance, power, cooling, and hypervisor management, engineering resources are freed up to focus on business-differentiating features.

Key Concept

The 6 Advantages of Cloud Computing (AWS Cloud Benefits)
Question 358Question →

An online organic grocery startup is planning to migrate its operations to the AWS Cloud. The startup wants to stop managing physical server infrastructure and quickly expand its delivery booking system to customers across Europe and Asia with minimal latency. Which of the following benefits of the AWS Cloud directly align with these goals? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Stop spending money running and maintaining data centers; Go global in minutes

Answer

The correct benefits are stopping spending money running and maintaining data centers, and going global in minutes.
The correct options are stopping spending money running and maintaining data centers, which removes the burden of infrastructure management, and going global in minutes, which allows rapid deployment across multiple geographical regions to reduce latency.

Step-by-Step Solution

1
Analyze the business requirements of the startup.
The startup needs to eliminate physical infrastructure management costs and deploy services in Europe and Asia with low latency.
Understanding the customer's business requirements helps map them to specific cloud benefits.
2
Identify the AWS benefit that maps to eliminating server maintenance costs.
The benefit is 'Stop spending money running and maintaining data centers.'
AWS manages physical data centers, allowing customers to redirect resources to core business tasks.
3
Identify the AWS benefit that maps to deploying services to global users with low latency.
The benefit is 'Go global in minutes.'
AWS global infrastructure allows deployment across multiple global Regions rapidly.

Key Concept

Benefits of the AWS Cloud
Question 359Question →

An educational technology company is preparing for an audit of its online learning platform. The company needs to obtain official AWS compliance documents, such as SOC and PCI reports, and clarify the division of security responsibilities between the company and AWS for their Amazon EC2 instances. Which of the following actions should the company take to meet these compliance requirements? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Download the required compliance reports directly from AWS Artifact; Apply security patches and updates to the guest operating systems of the EC2 instances

Answer

Downloading the required compliance reports directly from AWS Artifact, and applying security patches and updates to the guest operating systems of the EC2 instances.
AWS Artifact is the self-service portal where customers can download AWS compliance reports. Furthermore, under the AWS Shared Responsibility Model, the customer is responsible for guest operating system patching on Amazon EC2 instances.

Step-by-Step Solution

1
Identify the service needed to access and retrieve official AWS compliance documentation, such as SOC or PCI reports.
AWS Artifact is the central portal for downloading these reports.
AWS Artifact provides on-demand access to AWS compliance documentation and reports.
2
Determine the division of responsibility under the Shared Responsibility Model for Amazon EC2 instances.
The customer is responsible for the guest operating system patching and configuration, while AWS is responsible for physical security of data centers.
Amazon EC2 is an Infrastructure as a Service (IaaS) offering, giving the customer complete control over the guest OS, including patches.

Key Concept

AWS Artifact provides access to compliance reports, and the Shared Responsibility Model dictates that customers manage guest OS configuration on EC2.
Question 360Question →

A gaming company is launching a new multiplayer game on AWS and must provide its legal team with the official AWS SOC 2 compliance report. Which AWS service provides on-demand access to these security and compliance reports?

Show answer & explanation

Answer: AWS Artifact

Answer

AWS Artifact provides on-demand access to AWS security and compliance reports.
AWS Artifact is the primary portal for secure, on-demand compliance reports (such as SOC 2 and PCI reports) and agreements between AWS and its customers. It allows users to download these reports directly from the AWS Management Console.

Step-by-Step Solution

1
Identify the requirement of retrieving official AWS security and compliance reports (such as SOC 2).
Recognized that the legal team needs a formal third-party compliance document concerning AWS infrastructure.
This establishes the goal of finding the AWS service dedicated to compliance document retrieval.
2
Differentiate between the purposes of AWS Artifact, Amazon Inspector, AWS CloudTrail, and AWS Systems Manager.
Identified AWS Artifact as the primary portal for retrieving compliance reports, whereas other services perform security scanning, API logging, or systems management.
This guarantees selecting the correct service that aligns with the compliance and governance objectives.

Key Concept

AWS Artifact provides on-demand access to AWS compliance reports and agreements.
Estimated Time:45s
PreviousPage 18 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin