All practice questions
1473 questions
Which AWS compute service configuration is the most appropriate for each of the following business workload scenarios? Match the workload scenario on the left with the correct AWS compute service on the right.
Click a left item, then click its matching right item
Items
Matches
An online tutoring company is migrating its student portal to AWS to reduce overall infrastructure costs. Which TWO of the following statements correctly describe the economic benefits of this migration?
Select all that apply
A financial technology firm wants to enhance its operational visibility and security auditing on AWS. The operations team needs to collect and search log files generated by their application running on Amazon EC2 instances, and trigger automated alerts when system errors are detected. Simultaneously, the security team needs to audit all administrative API requests made to AWS resources to identify which user made specific configuration changes. Which AWS services should the firm implement to fulfill these two requirements? (Select TWO.)
Select all that apply
A financial services company needs to investigate an incident where a critical Amazon RDS database instance was unexpectedly deleted. The security team must identify the specific IAM user who initiated the deletion, the exact time of the API call, and the source IP address of the request. Which AWS service should the security team use to retrieve this historical record of API activity?
A logistics company is migrating its application to Amazon EC2 instances. The security team needs to implement a logging and monitoring strategy that addresses two requirements: First, they must monitor application-specific log files generated on the EC2 instances for pattern matches and automatically notify administrators if error rates spike. Second, they must continuously analyze AWS API calls and network activity to detect potential security threats, such as compromised credentials or communication with known malicious IP addresses. Which TWO AWS services should the company implement to meet these requirements? (Select TWO.)
Select all that apply
A digital music streaming platform wants to eliminate the upfront costs of purchasing physical servers and infrastructure hardware. Instead, they want to pay for computing resources only as they are consumed. Which benefit of the AWS Cloud describes this financial model?
A company wants to integrate a third-party security auditing application that runs on an external, non-AWS platform. The application requires read-only access to the company's AWS resource configurations. Which of the following is the AWS-recommended best practice to grant this access securely?
A logistics company is migrating its supply chain database to AWS. The compliance team needs to verify how regulatory compliance is managed under the AWS Shared Responsibility Model. Which of the following compliance-related activities is the sole responsibility of AWS?
A startup is deploying a new web application and needs to select the appropriate AWS compute services. They require one service to host a legacy database that demands custom operating system configurations, and a second service to execute a short-lived image resizing script whenever files are uploaded to storage, without managing any server infrastructure. Which of the following AWS compute services should the startup select to meet these requirements? (Select TWO.)
Select all that apply
An enterprise is planning to deploy and manage a multi-tier web application across multiple AWS environments including development, testing, and production. The operations team requires a method that enables them to define the entire infrastructure configuration as code, track changes in a centralized version control repository, perform peer reviews on configuration updates, and automatically detect when resources have been manually altered outside of the deployment pipeline. Which AWS service or tool should the team use to meet these requirements?
A healthcare analytics company is migrating its data warehousing workloads to Amazon Redshift to perform complex queries on patient data. According to the AWS Shared Responsibility Model, which two of the following security and operational tasks are the responsibility of the customer?
Select all that apply
A company is configuring a Virtual Private Cloud (VPC) to host a new application. The security administrator wants to implement a defense-in-depth strategy by combining instance-level firewall protection with subnet-level firewall protection. Which of the following statements correctly describe the characteristics of Security Groups and Network Access Control Lists (Network ACLs)? (Select TWO.)
Select all that apply
A company's security team needs to define a custom set of permissions for their database administrators. The policy must be reusable across multiple IAM groups, support version history, and allow for easy rollbacks if a change causes issues. Which type of IAM policy should the security team implement to meet these requirements?
A digital marketing agency needs to implement security measures for its AWS infrastructure. The agency wants to continuously monitor its AWS accounts for unauthorized behavior and malicious activity. Additionally, they need to scan their Amazon Elastic Container Registry (Amazon ECR) container images for software vulnerabilities. Which two AWS services should the agency use to meet these requirements? (Select two.)
Select all that apply
An organization is setting up access controls for a new application developer who needs to manage Amazon S3 buckets and Amazon EC2 instances. Which of the following is the AWS-recommended method to configure this access?
A company is planning to migrate two separate workloads to AWS. The first workload is a legacy enterprise application that requires specific operating system kernel modifications. The second workload is a containerized microservice API that needs to run on a serverless infrastructure without the overhead of provisioning or managing virtual machines. Which two AWS compute services should the company select to host these workloads? (Select two.)
Select all that apply
A healthcare technology company is migrating its legacy billing and reporting system to the AWS Cloud. The system currently processes patient invoices and generates compliance reports. The invoicing process must run continuously without interrupting the reporting system, and the reporting system only needs resources during the first week of every month when reports are compiled. Which two architectural practices should the company adopt to align with AWS Cloud design principles? (Select TWO.)
Select all that apply
A company is implementing a data protection policy for its applications running on AWS. The security team needs to understand the division of responsibility for data protection under the AWS Shared Responsibility Model.
Which of the following are responsibilities of the customer? (Select TWO.)
Select all that apply
An online education platform needs to implement a security and monitoring strategy for its AWS environment. The security team must meet two primary requirements: first, they must keep a complete history of all API calls made within their AWS account for auditing purposes; second, they need to continuously monitor their AWS accounts and workloads for malicious activity and unauthorized behavior, such as potential cryptocurrency mining. Which AWS services should the company implement to meet these requirements? (Select TWO.)
Select all that apply
A logistics startup is launching a new delivery tracking application. To keep initial costs low, the startup decides to host the application on AWS to avoid buying physical servers and instead pay a variable monthly rate based on their actual resource consumption. Which of the following terms describes this financial transition?