All practice questions
1473 questions
A smart agriculture startup builds an IoT telemetry ingestion pipeline. The company utilizes Amazon API Gateway and AWS Lambda to process incoming data from sensors, allowing them to run code without managing virtual machines. Additionally, the development team uses scripts to dynamically launch duplicate testing environments that are destroyed immediately after validation. Which two AWS Cloud design principles are directly demonstrated by this architecture? (Select TWO.)
Select all that apply
A financial technology (fintech) startup needs to quickly deploy new experimental payment features to stay ahead of competitors. Historically, procuring and configuring physical servers in their on-premises environment for developer testing took several weeks. By migrating to AWS, the developers can now provision virtual servers and databases within minutes, allowing them to iterate and run tests immediately. Which AWS Cloud benefit is directly demonstrated by this change in operational speed?
A small retail business is deploying a new online storefront using Amazon Lightsail virtual private servers. Under the AWS Shared Responsibility Model, which two security-related tasks are the responsibility of the customer? (Select TWO)
Select all that apply
A business is deploying its first application in a Virtual Private Cloud (VPC) and needs to configure basic network security controls. The administrator wants to use both Security Groups and Network Access Control Lists (Network ACLs) to secure their resources.
Which TWO statements correctly describe the characteristics of these security resources?
Select all that apply
Match each AWS compute service with the description that best represents its primary use case.
Click a left item, then click its matching right item
Items
Matches
NovaHealth Solutions is migrating its legacy application portfolio to the AWS Cloud. During the assessment phase, the IT team identifies a highly customized mainframe billing application that has tight dependencies on local mainframe hardware. Because a modern replacement is not available and rewriting the application is not currently feasible, the company decides to keep this workload running on-premises in its current state. Which cloud migration strategy is NovaHealth Solutions using for this specific application?
A digital healthcare company hosts a patient portal on AWS and must meet strict regulatory compliance requirements for security monitoring and auditing. The compliance and operations teams define three specific requirements:
1. Every API call made by IAM users or AWS services must be recorded, stored securely, and cryptographically validated to ensure the integrity of the audit logs.
2. System administrators must receive real-time alerts if application-level logs on Amazon EC2 instances show a sudden spike in specific error codes.
3. The environment must be continuously analyzed for malicious activity, such as instances scanning for open ports or communicating with known malicious IP addresses.
Which of the following configurations should the company implement to meet these requirements? (Select TWO.)
Select all that apply
A cloud practitioner is reviewing different workload requirements to select the most appropriate AWS compute services. Match each application scenario to the AWS compute service that best meets its requirements.
Click a left item, then click its matching right item
Items
Matches
A local dental clinic is migrating its patient scheduling system from an on-premises server room to the AWS Cloud. Instead of purchasing physical servers upfront, the clinic will now pay a variable monthly fee based on the resources they consume. Which of the following options describes this shift in financial expenditure?
A logistics company wants to track activity across its AWS infrastructure. The operations team needs to:
1. Audit all user actions and API calls to identify who deleted an Amazon S3 bucket.
2. Monitor system performance metrics, such as CPU utilization of Amazon EC2 instances, and trigger alarms if they exceed normal thresholds.
Which AWS services should the company use to satisfy these requirements? (Select TWO.)
Select all that apply
A financial services company needs to process daily transaction log files uploaded sporadically to Amazon S3. Each file requires intensive computational analysis that takes approximately 18 minutes to complete. To optimize costs and operations, the company wants a serverless compute option that charges them only for the exact resource duration consumed during processing and eliminates the overhead of managing operating systems or scaling virtual servers. Which AWS compute service is the most appropriate for this workload?
A retail company wants to secure its AWS infrastructure by auditing all API activities and setting up real-time monitoring for unauthorized access attempts. The security team needs to track who made API calls to modify security group rules and also detect if any Amazon EC2 instances are communicating with known malicious IP addresses.
Which AWS services should the company implement to meet these security requirements? (Select TWO)
Select all that apply
A telehealth startup wants to expand its online patient consultation platform from a single country to a global audience without leasing physical facilities or purchasing server hardware. The startup also needs the ability to deploy its application to patients worldwide with minimal delay. Which of the following benefits of the AWS Cloud directly support this strategy? (Select TWO.)
Select all that apply
A smart home device manufacturer hosts its telemetry processing application on a fleet of Amazon EC2 instances. The security team wants to continuously monitor the AWS environment for potential security threats, such as EC2 instances communicating with known malicious IP addresses or unexpected API calls from unauthorized locations. Which AWS service should the manufacturer use to detect these active threats?
A company is configuring access for two new entities: a monitoring application running on an on-premises server that requires read-only access to Amazon CloudWatch, and a new human administrator who needs full access to manage Amazon EC2 resources. Which IAM identities should the company create to provide secure access for these entities? (Select TWO)
Select all that apply
A startup is preparing for a security audit and needs to generate a report showing who made specific API requests to modify their Amazon EC2 instances over the last thirty days. Which AWS service should the startup use to retrieve this API transaction history?
An online retail company is expanding its operations to new regions and must verify that the underlying AWS infrastructure meets both PCI DSS and ISO 27001 standards. Which of the following actions should the company take to verify AWS compliance and clarify security boundaries? (Select TWO.)
Select all that apply
A DevOps team wants to write a shell script to automate the daily starting and stopping of Amazon EC2 instances based on a schedule. The script must parse output in JSON format and run from an administrative machine without requiring a full programming language runtime. Additionally, the team needs to audit who initiated these start/stop actions. Which combination of AWS tool and service best meets these requirements?
A retail company needs to run a data validation script once per day at midnight. The script typically runs for 8 minutes, processes raw transaction logs from an Amazon S3 bucket, and outputs a summary report. The company wants to minimize costs, pay only for the compute time used, and avoid provisioning or managing any server infrastructure. Which of the following AWS compute services is the most appropriate and cost-effective choice for this workload?
A business analyst is configuring an Amazon Simple Storage Service (Amazon S3) bucket to store financial reports. The company requires that all objects in the bucket be encrypted at rest. Under the AWS shared responsibility model, which of the following tasks is the responsibility of the customer?