Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 801Question →

A company is hosting a web application on Amazon EC2 instances within a public VPC subnet. The system administrator wants to protect the web tier by implementing two security controls: block all traffic from a known malicious range of IP addresses, and restrict access to the web instances to only HTTP and HTTPS traffic. Which two of the following configurations should the administrator implement to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Create a Network Access Control List (NACL) associated with the subnet and add an inbound deny rule for the malicious IP address range.; Create a Security Group associated with the EC2 instances and add inbound allow rules for HTTP and HTTPS traffic.

Answer

Creating a Network Access Control List (NACL) with an inbound deny rule for the malicious IP range, and creating a Security Group with inbound allow rules for HTTP and HTTPS traffic.
The correct configuration uses a Network Access Control List (NACL) to deny traffic from the malicious IP range because NACLs operate at the subnet level and support explicit deny rules. It also uses a Security Group to allow only HTTP and HTTPS traffic because Security Groups act at the instance level as stateful firewalls controlling inbound allowed ports.

Step-by-Step Solution

1
Analyze the requirement to block a specific IP address range.
Identify that Network Access Control Lists (NACLs) operate at the subnet level and support explicit deny rules, which can prevent malicious traffic from entering the subnet.
Security Groups do not support deny rules, so NACLs must be used for explicit blocking.
2
Analyze the requirement to restrict instance-level access to HTTP/HTTPS traffic.
Identify that Security Groups operate at the instance level and can be configured with allow rules for specific protocols (HTTP and HTTPS).
This implements least-privilege access at the virtual firewall level for the EC2 instances.

Key Concept

Understanding the difference between stateful Security Groups (operating at the instance level with allow rules only) and stateless Network ACLs (operating at the subnet level with allow/deny rules).
Estimated Time:1m 30s
Question 802Question →

A retail company is migrating its product catalog application to AWS. The catalog contains semi-structured data with varying attributes for different product types, and needs to handle high-frequency read and write requests with single-digit millisecond latency. The development team wants to avoid managing database infrastructure, OS patching, or provisioning servers. Which AWS service is the most appropriate choice to meet these requirements?

Show answer & explanation

Answer: Amazon DynamoDB

Answer

Amazon DynamoDB
Amazon DynamoDB is the correct choice because it is a fully managed, serverless NoSQL database service that provides single-digit millisecond latency at any scale. It supports flexible, semi-structured document and key-value schemas, which fit the varying attributes of a product catalog. Since it is serverless, developers do not need to provision instances, manage database infrastructure, or perform operating system patching.

Step-by-Step Solution

1
Analyze the data structure and access pattern requirements.
The application requires storing semi-structured catalog data with high-frequency, low-latency (single-digit millisecond) reads and writes, indicating a NoSQL database is needed.
This rules out relational options and analytical data warehouses which are not optimized for high-throughput, low-latency document or key-value access patterns.
2
Analyze the operational and management constraints.
The team wants to avoid server provisioning, database infrastructure management, and operating system patching, indicating a fully managed, serverless database service is required.
This rules out self-managed database options on EC2 (where patching and management fall on the customer) and self-managed scaling configurations.
3
Identify the AWS service that satisfies both sets of requirements.
Amazon DynamoDB provides a fully managed, serverless NoSQL database that scales automatically and delivers the required single-digit millisecond latency.
DynamoDB is the only listed option that is NoSQL, serverless, and completely managed by AWS, eliminating server administration tasks.

Key Concept

Selecting the appropriate AWS database service based on data structure, latency, and management overhead requirements.
Question 803Question →

A startup wants to deploy a simple blog using a pre-configured web development stack. They require virtual private servers with predictable monthly pricing that bundles compute, storage, databases, and networking into a single plan. Which AWS compute service meets these requirements?

Show answer & explanation

Answer: Amazon Lightsail

Answer

Amazon Lightsail
Amazon Lightsail is the correct service because it is specifically designed to provide an easy-to-use virtual private server (VPS) experience. It bundles compute capacity, storage, databases, and basic networking resources (such as static IPs and DNS management) into a single, cost-predictable monthly subscription, which is ideal for hosting simple websites, blogs, or development environments.

Step-by-Step Solution

1
Analyze the requirements: a simple blog, pre-configured stack, virtual private servers (VPS), and predictable bundled monthly pricing.
Identify that the workload needs an all-in-one VPS solution rather than a highly customizable infrastructure or serverless execution environment.
This helps filter out advanced container or custom infrastructure services that require manual integration of multiple components.
2
Evaluate the AWS compute services against the identified criteria.
Amazon Lightsail matches the description perfectly as it offers pre-configured development stacks (like WordPress) and flat-rate monthly bundles containing compute, storage, and networking.
Evaluating each service prevents incorrect selection of more complex compute services like EC2 or serverless options like Lambda.

Key Concept

Selecting simple, cost-predictable virtual private servers for basic workloads using Amazon Lightsail.
Question 804Question →

A boutique architectural design firm is moving its local rendering workload to AWS. Instead of purchasing and maintaining expensive physical workstation hardware that sits idle between projects, the firm plans to run rendering jobs on Amazon EC2 instances and terminate them as soon as the rendering is complete. Which of the following describes the primary cloud economics benefit of this approach?

Show answer & explanation

Answer: It replaces upfront capital expenses (CapEx) with variable operating expenses (OpEx), aligning costs directly with actual resource utilization.

Answer

Replacing upfront capital expenses (CapEx) with variable operating expenses (OpEx), aligning costs directly with actual resource utilization.
The correct option correctly identifies that by moving from physical workstations to AWS EC2 instances, the firm replaces capital expenses (CapEx) associated with purchasing hardware upfront with variable operating expenses (OpEx) based on actual run time.

Step-by-Step Solution

1
Analyze the business scenario described in the stem.
The firm is moving from owning physical hardware (idle cost) to provision-on-demand compute resources (EC2) that are terminated when not in use.
This establishes that the resource utilization is variable and avoids upfront hardware investments.
2
Identify the financial transition occurring in this scenario.
The shift from buying physical hardware to paying for compute utility represents moving from Capital Expenditures (CapEx) to Operating Expenditures (OpEx).
CapEx involves upfront spending on physical assets, whereas OpEx involves ongoing costs to run a business day-to-day.
3
Evaluate the options to find the one matching this shift.
The option stating that it replaces upfront capital expenses with variable operating expenses aligns with this shift.
This matches the AWS cloud economics principle of trading capital expense for variable expense.

Key Concept

Shifting from Capital Expenditures (CapEx) to Operating Expenditures (OpEx) through utility-style cloud pricing.
Estimated Time:1m 0s
Question 805Question →

A digital marketing startup is building a microservices-based analytics platform to process real-time clickstream data from client websites. The startup wants to ensure the architecture adheres to AWS Cloud design principles, focusing on loose coupling and elasticity. Which of the following architectural strategies should the startup implement to achieve these goals? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Use Amazon Simple Queue Service (Amazon SQS) to decouple the ingestion tier from the processing microservices.; Implement Amazon EC2 Auto Scaling to automatically adjust compute capacity in response to fluctuations in clickstream traffic volume.

Answer

Decoupling the ingestion tier from the processing microservices using Amazon Simple Queue Service (Amazon SQS) and implementing Amazon EC2 Auto Scaling to dynamically adjust compute capacity.
Decoupling the ingestion tier using Amazon Simple Queue Service (Amazon SQS) aligns with the loose coupling principle, ensuring components operate independently. Implementing Amazon EC2 Auto Scaling matches the elasticity principle, allowing the application to scale resources automatically based on real-time traffic changes.

Step-by-Step Solution

1
Analyze the scenario requirements for the design principles of loose coupling and elasticity.
Identify that loose coupling requires components to be independent of each other, while elasticity requires resources to scale dynamically based on demand.
This establishes the target principles to evaluate each option against.
2
Evaluate option alternatives for loose coupling implementation.
The strategy using Amazon Simple Queue Service (Amazon SQS) is identified as a correct practice because queues act as buffers that prevent direct dependency between the ingestion and processing layers.
This directly demonstrates loose coupling, whereas consolidating into a monolith or using hardcoded IPs increases coupling.
3
Evaluate option alternatives for elasticity implementation.
The strategy using Amazon EC2 Auto Scaling to adjust compute capacity dynamically based on clickstream traffic is identified as a correct practice.
This demonstrates elasticity, whereas manual provisioning of a fixed pool of instances is a static design that does not leverage cloud elasticity.

Key Concept

AWS Cloud design principles, specifically loose coupling and elasticity, are fundamental to building scalable, resilient, and cost-effective applications in the cloud.
Question 806Question →

A company is designing a new document collaboration application on AWS. The application requires a shared file system that can be mounted by multiple Amazon EC2 instances simultaneously. Additionally, the company needs a durable, low-cost object storage solution to store static website assets that are served directly to users. Which two AWS storage services should the company select for these workloads?

Select all that apply

Show answer & explanation

Answer: Amazon EFS; Amazon S3

Answer

Amazon EFS and Amazon S3
Amazon EFS is correct because it provides a shared, serverless file system that multiple EC2 instances can mount simultaneously. Amazon S3 is correct because it is a highly durable, low-cost object storage service designed for storing and serving static assets directly to users over the web.

Step-by-Step Solution

1
Identify the storage requirements for the shared file system.
Amazon EFS provides a fully managed, shared file system that can be mounted concurrently by multiple EC2 instances.
This satisfies the requirement for a shared file system accessible by multiple instances.
2
Identify the storage requirements for the static website assets.
Amazon S3 provides durable, low-cost object storage suitable for serving static assets directly via the web.
This satisfies the requirement for an object storage solution for static website assets.

Key Concept

Selecting appropriate AWS storage services based on access patterns (shared file vs. object storage vs. block storage).
Question 807Question →

A company is building a global video streaming platform. The architecture requires that the backend transcoding compute servers be highly available and resilient to the failure of an entire physical data center facility. At the same time, the static video files must be cached globally to minimize delivery latency for viewers worldwide. Which combination of AWS infrastructure components best satisfies these design requirements?

Show answer & explanation

Answer: Deploy the transcoding compute servers across multiple Availability Zones in a single AWS Region, and use AWS Edge Locations to cache the video files globally.

Answer

Deploy the transcoding compute servers across multiple Availability Zones in a single AWS Region, and use AWS Edge Locations to cache the video files globally.
Deploying the transcoding compute servers across multiple Availability Zones in a single AWS Region provides high availability and fault isolation for the compute layer, as each Availability Zone is physically separated and has redundant power, networking, and connectivity. Using AWS Edge Locations to cache video files globally minimizes latency for viewers by serving the cached content from the nearest geographic location.

Step-by-Step Solution

1
Analyze the high availability requirement for the compute layer.
Determine that surviving a physical data center facility outage within a geographic area is achieved by deploying across multiple Availability Zones (AZs) in a single Region, since AZs are physically separated and isolated from one another.
AWS Regions contain multiple, isolated Availability Zones designed to provide fault isolation for running workloads.
2
Analyze the low-latency global content delivery requirement.
Determine that global content caching and delivery requires utilizing AWS Edge Locations, which are distributed globally to cache content closer to end-users.
Edge Locations run Amazon CloudFront to cache static files, reducing latency for global viewers.
3
Combine the infrastructure components to find the correct architecture.
Deploy the transcoding compute servers across multiple Availability Zones in a single AWS Region, and use AWS Edge Locations to cache the video files globally.
This matches the correct use cases for Regions, Availability Zones, and Edge Locations, avoiding structural misconceptions.

Key Concept

AWS Global Infrastructure Components and Resiliency
Estimated Time:2m 0s
Question 808Question →

A company is planning to deploy a containerized application on AWS. Due to regulatory compliance, the company's security policy requires them to install custom host-based security monitoring agents directly on the host operating system running the container workloads. Which AWS compute solution should the company select to manage the containers while satisfying this requirement?

Show answer & explanation

Answer: Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type

Answer

Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type
The correct answer is Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type. In this model, the customer is responsible for managing the EC2 instances that register into the ECS cluster. Because the customer owns these instances, they have full administrative (root) access to the host operating system, making it possible to install custom security monitoring agents. Amazon ECS handles the orchestration of the containers on top of these instances.

Step-by-Step Solution

1
Analyze the workload packaging and administrative requirements.
The application is containerized, and the customer requires host-level operating system access to install custom security agents.
Identifying these requirements helps filter out serverless or fully managed solutions where AWS manages and restricts access to the underlying host OS.
2
Evaluate the launch types and services against the customer's shared responsibility model boundaries.
Amazon ECS with the Amazon EC2 launch type allows the customer to provision and manage the EC2 instances, giving them complete administrative control over the OS. AWS Fargate, AWS Lambda, and Amazon Lightsail container services abstract the host OS completely, preventing any custom host-level software installations.
Matching the administrative requirements to the corresponding AWS compute model ensures compliance with the custom security agent policy.

Key Concept

AWS Compute Services - Shared Responsibility and OS Access in Containers
Estimated Time:1m 30s
Question 809Question →

A municipal library is hosting its public book catalog on an Amazon EC2 instance. The library's IT administrator is configuring a security group to secure this instance. Which two statements describe the behavior or characteristics of AWS security groups?

Select all that apply

Show answer & explanation

Answer: They are stateful, meaning that return traffic for allowed inbound requests is automatically permitted.; They deny all inbound traffic by default when a new security group is created, requiring explicit allow rules.

Answer

The correct statements are that security groups are stateful, automatically allowing return traffic for allowed inbound requests, and that newly created security groups deny all inbound traffic by default.
Security groups are stateful firewalls that automatically allow outbound response traffic for any permitted inbound connection. When created, they deny all incoming connections by default until custom rules are added to allow traffic.

Step-by-Step Solution

1
Identify the target resource context.
The scenario requires securing an Amazon EC2 instance using a security group.
This defines the resource scope for application of the firewall rules.
2
Determine the state behavior of security groups.
Security groups track connections and are stateful, meaning allowed traffic automatically allows its corresponding return traffic.
This establishes stateful traffic rules.
3
Evaluate the default configuration.
New security groups default to blocking all inbound traffic while allowing all outbound traffic.
This defines standard baseline security posture.

Key Concept

AWS security groups act as virtual firewalls at the instance level, operating statefully with default settings that deny all inbound traffic.
Question 810Question →

A gaming company is deploying multiplayer session backends on Amazon Elastic Compute Cloud (Amazon EC2) instances. The system requires temporary outbound ports to be opened dynamically to send traffic back to clients. The security team wants to ensure that any outbound response traffic for established inbound connections is allowed automatically without needing to define explicit outbound rules. Additionally, these rules must apply directly at the instance level. Which AWS network security feature should the company use to meet these requirements?

Show answer & explanation

Answer: Security Groups

Answer

Security Groups
Security groups act as stateful firewalls for EC2 instances, operating at the virtual interface level. Because they are stateful, any allowed inbound traffic automatically permits the corresponding outbound response traffic, regardless of any outbound security group rules.

Step-by-Step Solution

1
Analyze the requirement for instance-level traffic filtering.
Identify that firewalls at the instance level in AWS are Security Groups, whereas Network ACLs operate at the subnet level.
This narrows the choice down to instance-level firewalls.
2
Evaluate the requirement for automatically allowing return traffic without explicit outbound rules.
Understand that stateful firewalls automatically track connection state and allow return traffic, which is a key feature of Security Groups.
This distinguishes the stateful nature of Security Groups from the stateless nature of Network ACLs, which require explicit rules for return traffic.

Key Concept

Stateful instance-level security versus stateless subnet-level security in VPCs
Estimated Time:1m 15s
Question 811Question →

A financial technology firm, PayVanguard, is migrating its transaction reconciliation platform from an on-premises colocation facility to AWS. Currently, the firm must purchase and maintain high-performance physical servers to handle short-lived processing peaks at the end of each month. In the cloud, they plan to use Amazon EC2 Auto Scaling to dynamically adjust capacity based on actual transaction volume.

Which of the following are direct cloud economics benefits of this migration? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Shifting from upfront capital expenses (CapEx) to variable operating expenses (OpEx) that align with real-time demand; Eliminating costs associated with idle capacity by using elasticity to scale down compute resources when transaction volumes are low

Answer

Shifting from upfront capital expenses (CapEx) to variable operating expenses (OpEx) that align with real-time demand, and eliminating costs associated with idle capacity by using elasticity to scale down compute resources when transaction volumes are low.
The correct choices are shifting from upfront capital expenses to variable operating expenses, and eliminating costs associated with idle capacity using elasticity. Migrating to AWS allows organizations to trade capital expense (investing in physical servers and data centers upfront) for variable operating expense (paying for resources as they are used). Additionally, by utilizing elasticity (such as with Amazon EC2 Auto Scaling), the organization can scale down resources when transaction volumes are low, avoiding the cost of overprovisioning and idle capacity.

Step-by-Step Solution

1
Analyze the financial transition in cloud computing.
Identify that shifting from upfront physical hardware investments (CapEx) to a pay-as-you-go model (OpEx) is a core economic shift.
This allows the firm to pay only for the resources they actively use, improving financial flexibility.
2
Evaluate the impact of Auto Scaling on cost efficiency.
Identify that using elasticity to scale resources down during off-peak periods prevents paying for idle compute capacity.
This aligns resource supply directly with demand, avoiding overprovisioning costs typical of on-premises environments.

Key Concept

Cloud Economics: CapEx to OpEx shift and Elasticity
Estimated Time:1m 30s
Question 812Question →

A media processing company is developing a custom backend application in Python. The application must programmatically retrieve media files from an Amazon Simple Storage Service (Amazon S3) bucket, process them, and then record the metadata in an Amazon DynamoDB table. Which AWS tool or service is specifically designed to let developers integrate these service interactions directly within their application code?

Show answer & explanation

Answer: AWS Software Development Kit (SDK)

Answer

AWS Software Development Kit (SDK)
The AWS Software Development Kit (SDK) is specifically created to help developers build applications that interact programmatically with AWS services. By providing language-specific packages (such as Boto3 for Python), developers can directly call APIs to download files from Amazon S3 and save metadata in Amazon DynamoDB from within their custom codebase.

Step-by-Step Solution

1
Analyze the requirements of the application scenario.
The custom Python application needs to perform runtime data operations (download from Amazon S3 and write to Amazon DynamoDB) programmatically.
This determines that the required tool must support code-level integration in Python.
2
Evaluate the capabilities of the options relative to application code integration.
The AWS SDK supports language-specific libraries (like Boto3 for Python) that compile directly with application code, whereas other tools are for infrastructure provisioning, command-line operations, or manual configuration.
This identifies the only tool intended for developer application integration.

Key Concept

AWS Software Development Kit (SDK) usage for programmatic application integration
Question 813Question →

A financial technology company is refactoring its monolithic application into a microservices architecture. They have identified two distinct database requirements:

1. A transactional ledger that requires schema enforcement, complex relational joins, and strict ACID compliance.
2. A user session store that requires low-latency, single-digit millisecond response times for simple key-value lookups at high scale.

Which of the following database options should the cloud practitioner recommend to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Aurora to host the transactional ledger microservice.; Amazon DynamoDB to host the user session store microservice.

Answer

Amazon Aurora to host the transactional ledger microservice, and Amazon DynamoDB to host the user session store microservice.
The correct choices are the option proposing Amazon Aurora for the transactional ledger and the option proposing Amazon DynamoDB for the user session store. Aurora provides high-performance relational features with ACID compliance, and DynamoDB is a managed NoSQL service that provides fast, single-digit millisecond latency for key-value user session data.

Step-by-Step Solution

1
Analyze the requirements for the first microservice.
The first microservice needs a relational database (SQL joins, schema enforcement, ACID transactions). Amazon Aurora is the correct choice here.
Relational databases are specifically designed to support structured data, schema constraints, and complex relational logic.
2
Analyze the requirements for the second microservice.
The second microservice needs a NoSQL key-value database providing low-latency scale. Amazon DynamoDB is the correct choice.
NoSQL databases like DynamoDB are optimized for horizontal scalability and high-throughput, low-latency access to key-value data.
3
Evaluate the architectural and administrative responsibilities.
AWS manages infrastructure tasks, but the customer retains responsibility for database schema modifications and query optimization. In addition, services should remain loosely coupled rather than sharing a single database engine.
This aligns with AWS Shared Responsibility and well-architected design principles.

Key Concept

Selecting appropriate AWS database services based on relational vs. NoSQL requirements, shared responsibility, and loose coupling design principles.
Question 814Question →

An online retailer wants to store product catalog images that must be highly available and accessible directly by customers via web browser URLs. Which AWS storage service should the retailer use to meet these requirements?

Show answer & explanation

Answer: Amazon Simple Storage Service (Amazon S3)

Answer

Amazon Simple Storage Service (Amazon S3)
Amazon Simple Storage Service (Amazon S3) is an object storage service optimized for storing and retrieving any amount of data from the web. It natively supports accessing stored objects directly via unique HTTP/HTTPS web URLs, making it the perfect fit for hosting and serving static web assets like product catalog images.

Step-by-Step Solution

1
Analyze the requirements for data access.
The files (catalog images) must be accessible directly via web browser URLs (HTTP/HTTPS) and remain highly available.
Determining the access method (public web HTTP/HTTPS vs. private instance mounting) narrows down the storage service category.
2
Match the requirements to the correct storage type.
Amazon S3 is an object storage service designed for web-accessible data, while Amazon EBS (block storage) and Amazon EFS (file storage) require compute resources to serve files, and Amazon S3 Glacier has retrieval latencies.
Selecting the correct storage service ensures direct accessibility and high availability without unnecessary compute overhead.

Key Concept

Amazon S3 is an object storage service designed for storing and serving web-accessible content directly via HTTP/HTTPS.
Estimated Time:45s
Question 815Question →

A municipal water utility network monitors flow rate sensors across a city. The sensor data is received by a telemetry gateway and immediately sent to a centralized data warehouse. When massive storm events occur, sensor activity surges, which overwhelms the data warehouse with concurrent database connections and leads to data loss. The utility's cloud architect proposes inserting a managed message broker between the telemetry gateway and the data warehouse to queue the incoming data. Which design principle of the AWS Cloud is directly applied by this proposal?

Show answer & explanation

Answer: Loose coupling

Answer

The design principle of loose coupling is directly applied by inserting a message broker to queue the incoming data between components.
Inserting a managed message broker between the gateway and the database removes the direct dependency between them. The gateway can continue writing to the queue even if the database is busy, which is the definition of loose coupling.

Step-by-Step Solution

1
Analyze the problem in the scenario: the telemetry gateway directly sends data to the data warehouse, creating a strong dependency where a failure or overload in the database causes data loss.
Identified a tightly coupled architecture that violates AWS design principles.
Understanding the baseline problem is necessary to determine which design principle resolves it.
2
Analyze the proposed solution: introducing a managed message broker between the two components to queue incoming data.
This breaks the direct dependency, allowing the gateway to write data to the queue and the data warehouse to process it asynchronously at its own pace.
Breaking direct dependencies and allowing components to interact asynchronously is the definition of loose coupling.

Key Concept

Loose coupling is a core design principle of the AWS Cloud that reduces interdependencies between components, ensuring that a change or failure in one component does not cascade and affect others.
Question 816Question →

A digital art platform stores high-resolution images in an Amazon S3 bucket. The platform's compliance team requires all stored images to be encrypted at rest. The platform wants a fully managed solution where AWS handles the maintenance, clustering, and scaling of the underlying hardware security modules (HSMs), while the customer manages access policies for the encryption keys. Which AWS service should the platform use to meet this requirement?

Show answer & explanation

Answer: AWS Key Management Service (AWS KMS)

Answer

AWS Key Management Service (AWS KMS)
AWS Key Management Service (AWS KMS) is a fully managed service that allows customers to create, manage, and control cryptographic keys. With AWS KMS, AWS manages the underlying hardware security modules (HSMs) for operations such as maintenance, clustering, and scaling, while the customer remains responsible for key access policies and key usage, satisfying the requirement for a fully managed key storage solution.

Step-by-Step Solution

1
Identify the primary requirement of the scenario.
The platform needs to encrypt S3 data at rest using a managed key service where AWS maintains the physical hardware security modules (HSMs) and the customer manages access control.
Defining the technical requirements helps narrow down the service options between fully managed key management and dedicated hardware modules.
2
Compare AWS Key Management Service (AWS KMS) and AWS CloudHSM.
AWS KMS is a multi-tenant, fully managed service where AWS manages HSM provisioning and scaling. AWS CloudHSM is a single-tenant, dedicated HSM service where the customer is responsible for HSM cluster management and administration.
Distinguishing between managed services and dedicated hardware modules determines which service meets the operational and compliance constraints of the platform.

Key Concept

AWS Key Management Service (AWS KMS) vs AWS CloudHSM and Shared Responsibility for Data Protection
Question 817Question →

A regional museum wants to launch an online digital archive to showcase historical artifacts. Instead of purchasing new physical servers and backup hardware that require a large upfront investment, the museum wants to pay only for the storage and compute resources they use on a monthly basis.

Which of the following cloud economics concepts does this scenario represent?

Show answer & explanation

Answer: Trading capital expenses (CapEx) for variable operating expenses (OpEx)

Answer

Trading capital expenses (CapEx) for variable operating expenses (OpEx)
The correct option is 'Trading capital expenses (CapEx) for variable operating expenses (OpEx)'. In traditional IT, organizations must invest heavily in physical data centers and servers (Capital Expenses) before using them. Cloud computing eliminates these upfront costs by allowing organizations to pay only for the resources they consume on a variable, pay-as-you-go basis (Operating Expenses).

Step-by-Step Solution

1
Analyze the business scenario described in the stem.
The museum is avoiding upfront investments in physical hardware (Capital Expense, or CapEx) and choosing to pay on a monthly basis for consumed resources (Operating Expense, or OpEx).
Identifying the financial shift from upfront hardware purchasing to pay-as-you-go consumption is key to understanding cloud economics.
2
Evaluate the given options to find the correct economic principle.
The option corresponding to trading capital expenses for variable operating expenses matches this financial shift.
This aligns with one of the fundamental advantages of cloud computing: trading capital expense for variable expense.

Key Concept

Trading Capital Expense (CapEx) for Variable Expense (OpEx)
Estimated Time:45s
Question 818Question →

GenNode Labs, a genomics research company, runs large-scale DNA sequencing workloads for three days at the end of every month. The compute infrastructure remains completely idle for the other 27 days. The company is planning to migrate this workload from their on-premises data center to AWS. Which of the following options describes the primary cloud economics benefit that GenNode Labs will realize by moving to AWS?

Show answer & explanation

Answer: The ability to pay only for the compute resources used during the three days of sequencing, shifting from a fixed capital expense (CapEx) to a variable operating expense (OpEx).

Answer

The ability to pay only for the compute resources used during the three days of sequencing, shifting from a fixed capital expense (CapEx) to a variable operating expense (OpEx).
The correct option is correct because it highlights how GenNode Labs can utilize AWS elasticity to only pay for resources when they are active. This represents the core cloud economics benefit of moving from fixed capital expenses (purchasing and maintaining physical servers that sit idle) to variable operating expenses (paying only for the runtime of the instances).

Step-by-Step Solution

1
Analyze the workload characteristics and operational patterns.
The workload is highly periodic and bursty, running for only three days per month and remaining idle for 27 days.
Understanding the usage pattern is necessary to determine which cloud economics concept (like elasticity and variable pricing) applies.
2
Compare on-premises financial models with AWS cloud economics.
On-premises requires upfront capital expenditure (CapEx) to size for peak usage, leaving hardware idle. AWS allows paying dynamically for only the active period (operating expense, or OpEx).
This shows how elasticity directly translates to cost optimization and a shift from CapEx to OpEx.

Key Concept

Shifting from fixed capital expenses (CapEx) to variable operating expenses (OpEx) through elasticity
Estimated Time:1m 0s
Question 819Question →

An educational technology company is building an online learning platform. The platform has two key database requirements:

1. It must store student course enrollments, grade books, and academic transcripts in a relational schema that supports multi-table SQL queries and strict transactional integrity.
2. It must store transient user session tokens and session state in-memory to ensure sub-millisecond page response times.

Which two AWS services should the company select to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon RDS; Amazon ElastiCache

Answer

The correct services are the relational database service and the in-memory data store. Specifically, Amazon RDS should be chosen for the relational transactional enrollment data, and Amazon ElastiCache should be chosen for sub-millisecond in-memory session caching.
The system requires a transactional relational database for enrollments and grades, which is best served by a managed relational database service. It also requires an in-memory caching tier to store transient session state under sub-millisecond latencies, which is the primary use case for an in-memory caching service.

Step-by-Step Solution

1
Analyze the first requirement: transactional enrollment data, relational schema, and multi-table SQL queries.
Identify that a relational database service is required. Amazon RDS meets this requirement.
Relational databases provide ACID transactions, foreign keys, and SQL join capabilities.
2
Analyze the second requirement: transient user session tokens and in-memory storage for sub-millisecond response times.
Identify that an in-memory caching service is required. Amazon ElastiCache meets this requirement.
In-memory stores keep data in RAM to bypass disk-based database latencies, offering sub-millisecond performance.
3
Evaluate the other options to verify they do not fit either primary requirement.
Excluding Amazon DynamoDB (NoSQL, no complex SQL joins), Amazon Redshift (OLAP data warehouse, not OLTP), and Amazon S3 (object storage, not low-latency database/cache).
Using the correct tool for each workload aligns with AWS architectural best practices (loose coupling and purpose-built databases).

Key Concept

Selecting purpose-built AWS database services based on relational, NoSQL, data warehousing, and caching requirements.
Question 820Question →

A regional transit authority is modernizing its passenger information system. The authority needs to deploy the tracking application across multiple geographic regions to ensure low-latency arrival predictions for international travelers, and wants to eliminate the overhead of managing physical server racks, cooling, and power in its local offices. Which of the following benefits of the AWS Cloud directly align with these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Go global in minutes; Stop spending money running and maintaining data centers

Answer

The benefits of going global in minutes and stopping spending money running and maintaining data centers align with these requirements.
Deploying the application across multiple geographic regions to reduce latency maps to the benefit of going global in minutes. Eliminating the overhead of running physical infrastructure (racks, power, cooling) maps to the benefit of stopping spending money running and maintaining data centers.

Step-by-Step Solution

1
Analyze the transit authority's requirements.
Two primary requirements are identified: deploying the tracking application in multiple geographic regions for low-latency updates, and eliminating the operational overhead of physical server racks, power, and cooling.
Understanding requirements maps them to specific cloud benefits.
2
Evaluate the requirement for multi-region deployment.
Deploying applications globally with minimal effort corresponds to the 'Go global in minutes' benefit.
AWS Global Infrastructure enables regional deployment to reduce latency for users worldwide.
3
Evaluate the requirement to eliminate server rack, cooling, and power management.
Eliminating physical infrastructure upkeep corresponds to the 'Stop spending money running and maintaining data centers' benefit.
AWS manages physical data center logistics, freeing customers from infrastructure maintenance.

Key Concept

Identifying the six core benefits of AWS Cloud computing, specifically global deployment and eliminating physical infrastructure management.
PreviousPage 41 / 74Next