All practice questions
1473 questions
A digital media agency runs containerized video rendering workloads on AWS. The workloads are highly unpredictable, with sudden bursts of activity when client campaigns launch. To optimize costs and efficiency, the agency utilizes Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to automatically run containers only when rendering tasks are in the queue, shut them down immediately after completion, and avoid managing any underlying virtual machines.
Which AWS Cloud design principles are demonstrated by this architecture? (Select TWO.)
Select all that apply
A travel booking platform is deploying a new application on AWS. To secure customer reservation records, the platform needs to encrypt data at rest within its storage services. The security team wants to use a fully managed service that creates and controls the cryptographic keys, rather than renting dedicated, single-tenant cryptographic hardware. Which AWS service is designed to meet this requirement?
An enterprise is planning to migrate several diverse applications to AWS and needs to select the most appropriate compute option for each workload based on administrative control, management overhead, and pricing structures. Match each operational requirement or compute profile to the corresponding AWS compute service.
Click a left item, then click its matching right item
Items
Matches
A regional retail bakery chain is migrating its point-of-sale inventory system to AWS. By moving to the cloud, the bakery avoids purchasing expensive on-premises hardware upfront and instead pays a monthly bill based on actual resource consumption. Which economic transition does this scenario demonstrate?
An administrator needs to configure a network access control list (network ACL) to allow inbound traffic on a specific port to a subnet. Which of the following actions is also required to allow response traffic back to the client?
Horizon Media Group plans to migrate its legacy on-premises content management system (CMS). To reduce operational overhead, the company decides to decommission the self-managed system and transition to a commercial third-party CMS subscription delivered as a Software-as-a-Service (SaaS) application. Which migration strategy is Horizon Media Group using for this transition?
A financial services firm is designing a high-frequency trading platform on AWS. The system must meet two major requirements: it must provide single-digit millisecond latency to an on-premises trading environment in a metropolitan area where no AWS Region exists, and it must replicate transaction logs to a geographically isolated recovery site located more than 250 miles away to satisfy disaster recovery regulations.
Which TWO of the following AWS infrastructure components or deployment models should the firm choose to meet these requirements?
Select all that apply
A business analyst needs to perform a one-time task of creating an Amazon Simple Storage Service (Amazon S3) bucket and uploading a few report files. The analyst does not have programming experience and wants to use a graphical, browser-based interface to complete this task. Which of the following tools should the analyst use?
A biotechnology firm is preparing for an audit to verify compliance with international security standards. The compliance team needs to obtain AWS security reports and establish which security controls are the direct responsibility of the cloud provider. Which TWO actions should the company take to meet these requirements?
Select all that apply
A cloud practitioner is designing a database subnet within an Amazon VPC and needs to apply a firewall rule set at the subnet boundary. The configuration must be stateless, requiring both inbound and outbound traffic rules to be explicitly defined. Which AWS service or feature should be implemented to meet this requirement?
A developer wants to run a background script that automatically resizes photos whenever they are uploaded to an Amazon S3 bucket. The script executes in less than ten seconds and does not run continuously. The developer wants to avoid provisioning or managing any virtual machines. Which AWS compute service should be used to meet these requirements?
A company wants to allow its on-premises employees to access the AWS Management Console using their existing corporate directory credentials instead of creating individual IAM users. Which of the following are required to configure this federated access? (Select TWO.)
Select all that apply
A media company is migrating its video-on-demand platform to AWS. The security team needs to implement a logging and security monitoring solution that meets two requirements:
1. It must record, continuously monitor, and retain a history of all API calls and user actions within the AWS account for compliance auditing.
2. It must provide continuous, intelligent threat detection and anomaly monitoring to identify potential malicious activity, such as brute-force attacks or compromised credentials.
Which AWS services should the company implement to satisfy these security requirements? (Select two.)
Select all that apply
A startup is launching a proof-of-concept marketing website. The startup has a strict monthly budget of $10 and wants to avoid unexpected charges from traffic spikes. The website requires a simple virtual server, SSD storage, and basic networking components like a static IP and DNS management. The team has minimal AWS expertise and wants to avoid the complexity of manually configuring Virtual Private Clouds (VPCs), security groups, and storage volume attachments. Which AWS compute service should the startup select?
An organization is planning to migrate its workloads to AWS. They have two specific requirements: first, they need to run containerized applications without provisioning or managing any underlying servers; second, they need to execute event-driven code snippets only when new data is uploaded, paying only for the compute time used. Which two AWS compute services should the company choose to fulfill these requirements?
Select all that apply
An enterprise is building a custom employee onboarding web application written in Node.js that runs on-premises. As part of the onboarding process, the application must programmatically create a unique IAM user, assign specific group memberships, and generate temporary access keys for the new hire without manual intervention. Which AWS interaction method is the most appropriate and secure way to implement this integration?
A company needs to host a simple marketing website with predictable traffic patterns. The development team has minimal cloud management experience and wants a solution that provides a virtual private server, SSD-based storage, data transfer, and a static IP address in a single, low-cost monthly plan. Which AWS compute service should the company select to meet these requirements?
A local bookstore chain is migrating its inventory database and customer-facing web application from on-premises physical servers to the AWS Cloud. Which two of the following choices represent core cloud economics benefits of this migration?
Select all that apply
A financial company needs to implement a security and monitoring solution for its AWS environment. The security team must be able to audit all API actions taken by users and services across the account. Additionally, the operations team needs to collect and track performance metrics for their Amazon EC2 instances to configure automated alerts for high CPU utilization. Which of the following AWS services should be used to meet these requirements? (Select TWO.)
Select all that apply
A developer is troubleshooting connectivity to an Amazon EC2 instance and needs to analyze the firewall settings. The developer must evaluate the differences in behavior between security groups and network access control lists (network ACLs). Which two statements correctly describe how traffic is processed by these security features? (Select TWO.)
Select all that apply