Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 841Question →

An application running on a single Amazon EC2 instance requires a persistent block storage volume that behaves like a physical hard drive. The storage must retain its data even if the EC2 instance is stopped or terminated. Which AWS storage service should be used to meet these requirements?

Show answer & explanation

Answer: Amazon Elastic Block Store (Amazon EBS)

Answer

Amazon Elastic Block Store (Amazon EBS)
The correct option is Amazon Elastic Block Store (Amazon EBS) because it provides persistent block-level storage volumes for use with EC2 instances. EBS volumes act like raw, unformatted block devices that can be attached to an instance and persist data independently of the instance's life, meaning the data remains intact if the instance is stopped or terminated.

Step-by-Step Solution

1
Analyze the application requirements.
The application needs block storage that behaves like a physical hard drive attached to a single EC2 instance, and the data must survive instance stop or termination.
This helps narrow down the choices by eliminating file storage (EFS) and object storage (S3) which are not block storage devices, and temporary block storage (Instance Store) which does not persist data.
2
Identify the storage service that matches these requirements.
Amazon EBS is the correct service because it provides persistent block storage volumes that can be attached to a single EC2 instance and retain data independently of the instance lifecycle.
Choosing the service that satisfies both the block storage interface and the persistence requirement provides the correct answer.

Key Concept

AWS Block Storage Persistence
Estimated Time:45s
Question 842Question →

An online education platform hosts virtual classes and experiences high spikes in user traffic during exam periods, followed by low traffic during school holidays. Which two options represent the primary economic advantages of migrating this workload to AWS? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Trading capital expenses for variable operating expenses, reducing upfront hardware costs; Leveraging elasticity to dynamically scale compute capacity down during low-traffic school breaks

Answer

Trading capital expenses for variable operating expenses, reducing upfront hardware costs; and leveraging elasticity to dynamically scale compute capacity down during low-traffic school breaks.
The correct options represent the primary advantages: trading capital expenses for variable operating expenses allows the platform to pay only for what they use without massive initial hardware investments; leveraging elasticity ensures they scale resources down when students are on break, eliminating wasted spending on idle capacity.

Step-by-Step Solution

1
Analyze the business scenario
The platform experiences variable demand (high spikes during exam periods, low traffic during breaks) and currently uses on-premises infrastructure.
Understanding the customer's traffic pattern helps identify which cloud economic pillars apply.
2
Evaluate the financial benefit of shifting expenses
By moving to AWS, the platform avoids upfront physical server costs (CapEx) and pays for resources as they are used (OpEx).
This directly maps to the core cloud economics benefit of trading capital expense for variable expense.
3
Evaluate the technical-cost benefit of elasticity
By using elasticity, the platform dynamically scales down during breaks, avoiding payment for idle capacity.
Elasticity prevents wasted spending by aligning resource capacity directly with user demand.

Key Concept

Cloud Economics: CapEx to OpEx shift and cost benefits of elasticity
Estimated Time:1m 30s
Question 843Question →

A research laboratory is building a web application on AWS that handles sensitive clinical trials data. The regulatory authority requires the laboratory to encrypt all trial results at rest using dedicated, single-tenant hardware security modules (HSMs) that they control directly. They must also ensure that database credentials are encrypted and automatically rotated. Which of the following AWS services should the laboratory use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS CloudHSM; AWS Secrets Manager

Answer

The research laboratory should use AWS CloudHSM to manage keys on dedicated, single-tenant hardware security modules, and AWS Secrets Manager to encrypt and automatically rotate database credentials.
To meet the compliance requirement for dedicated, single-tenant cryptographic hardware, the laboratory must use AWS CloudHSM. To encrypt and rotate database credentials, AWS Secrets Manager should be implemented.

Step-by-Step Solution

1
Analyze the requirement for dedicated, single-tenant cryptographic hardware.
Identify AWS CloudHSM as the correct service because AWS Key Management Service (AWS KMS) relies on shared, multi-tenant hardware security modules.
AWS CloudHSM is designed for compliance workloads that strictly require single-tenant dedicated HSM instances.
2
Analyze the requirement to encrypt and automatically rotate database credentials.
Identify AWS Secrets Manager as the service designed for securely storing and rotating credentials.
AWS Secrets Manager allows rotation configuration without deploying custom code or scripts.

Key Concept

Data Protection and Encryption services (AWS CloudHSM vs. AWS KMS) and secret management (AWS Secrets Manager).
Question 844Question →

An agricultural technology firm, AgroSense, runs a crop monitoring system that processes data from thousands of soil sensors. The system requires high compute capacity during the three-month harvesting season but remains completely idle for the remaining nine months of the year. AgroSense decides to migrate this workload from an on-premises data center to AWS. Which of the following describes the primary cloud economics benefit AgroSense will achieve?

Show answer & explanation

Answer: The ability to trade fixed capital expenses for variable operating expenses, paying only for the compute capacity utilized during the harvesting season.

Answer

The ability to trade fixed capital expenses for variable operating expenses, paying only for the compute capacity utilized during the harvesting season.
The option stating that AgroSense can trade fixed capital expenses for variable operating expenses is correct. On AWS, businesses pay only for resources when they are active (operating expenses or OpEx), eliminating the need to invest in physical hardware upfront (capital expenses or CapEx) that remains idle for nine months of the year.

Step-by-Step Solution

1
Analyze the workload characteristics and requirements.
The workload is highly seasonal, requiring high capacity for three months and zero capacity for the remaining nine months.
Understanding the usage pattern helps identify the most cost-effective hosting model.
2
Evaluate the financial impact of migrating to AWS.
On-premises hosting requires purchasing hardware to support peak demand (CapEx) which sits idle. AWS allows paying only for what is used (OpEx) through elasticity.
This aligns the cost directly with business demand, realizing the core cloud economics benefit of trading capital expenses for variable expenses.

Key Concept

Trading Capital Expenses for Operating Expenses
Question 845Question →

An agricultural technology company runs complex crop growth simulation models that require hundreds of temporary compute instances for a few hours each week. The company wants to optimize its cloud architecture by applying the AWS design principle of 'disposable resources instead of fixed servers'. Which of the following architectural practices should the company implement to align with this principle? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Define the entire simulation infrastructure using AWS CloudFormation to programmatically deploy and destroy resources as needed.; Bootstrap the compute instances using EC2 user data scripts to dynamically configure software dependencies at startup.

Answer

To align with the principle of disposable resources, the company should define infrastructure using AWS CloudFormation for automated deployment and teardown, and bootstrap compute instances using EC2 user data scripts to dynamically configure dependencies at startup.
The AWS design principle of 'disposable resources instead of fixed servers' encourages treating resources as temporary and interchangeable. Defining infrastructure using AWS CloudFormation allows environments to be created and destroyed programmatically, ensuring consistency and cost-efficiency. Bootstrapping compute instances using EC2 user data allows the instances to configure themselves automatically at launch, removing the need for manual configuration or maintaining pre-existing, static instances.

Step-by-Step Solution

1
Identify the core requirement of the disposable resources design principle.
The principle emphasizes automated provisioning, configuration, and tearing down of resources rather than maintaining static, long-running servers.
This establishes the criteria for evaluating the choices based on automation and resource temporality.
2
Evaluate the practice of defining infrastructure as code.
Using AWS CloudFormation allows resources to be created dynamically for each run and completely destroyed afterward, minimizing costs and configuration drift.
This directly aligns with the concept of temporary, disposable infrastructure.
3
Evaluate instance configuration methods.
Bootstrapping instances dynamically at launch using EC2 user data scripts ensures that new, clean instances can be brought online automatically without requiring manual installation.
This supports the disposable resources pattern by automating the server setup process.
4
Identify and eliminate anti-patterns, such as vertical scaling of a single instance, maintaining always-on static fleets, or performing manual server administration.
Options recommending vertical scaling, static fleets, or manual SSH logins are marked as incorrect.
These practices treat servers as permanent assets rather than disposable resources.

Key Concept

The 'disposable resources instead of fixed servers' design principle in the AWS Cloud relies on automation, Infrastructure as Code, and dynamic bootstrapping to treat servers as temporary, interchangeable resources.
Question 846Question →

A company is migrating a traditional web application to the AWS Cloud. The application's backend database requires support for structured data, complex SQL queries, and transactional joins. Additionally, the company wants to minimize administrative overhead by having AWS manage database patching, software installations, and backups. Which AWS service should the company use to meet these requirements?

Show answer & explanation

Answer: Amazon Relational Database Service (Amazon RDS)

Answer

Amazon Relational Database Service (Amazon RDS) is the correct service because it provides a fully managed relational database that supports SQL queries and joins, while offloading administrative tasks like patching and backups to AWS.
Amazon Relational Database Service (Amazon RDS) is the correct service because it is a managed relational database service that supports standard SQL engines (such as PostgreSQL, MySQL, and MariaDB) and handles administrative tasks like hardware provisioning, database setup, patching, and backups.

Step-by-Step Solution

1
Analyze the database type requirement.
The scenario specifies a requirement for a structured database that supports complex SQL queries and transactional joins, which indicates a relational database.
Relational databases are designed for schema enforcement and SQL joins, unlike NoSQL databases or object storage.
2
Analyze the management requirement.
The customer wants to minimize administrative overhead by offloading patching, software installations, and backups to AWS.
A managed database service like Amazon RDS automates these administrative tasks, whereas hosting a database on self-managed infrastructure would require the customer to handle them.
3
Select the matching AWS service.
Amazon RDS meets both the relational database requirement and the managed administration requirement.
RDS is the primary AWS service for managed relational databases.

Key Concept

Identifying the appropriate AWS database service based on business and technical requirements, specifically distinguishing relational (RDS) from non-relational services.
Question 847Question →

A media company is developing a service to transcode video files uploaded by users. The transcoding process is containerized using Docker, requires custom library dependencies, and takes between 15 to 25 minutes per video depending on the file size. The company wants to run these containerized jobs on a serverless compute platform to eliminate the overhead of managing operating system patching and scaling cluster capacity. Which AWS compute service should the company select to run this workload?

Show answer & explanation

Answer: AWS Fargate

Answer

AWS Fargate
AWS Fargate is the correct choice because it is a serverless compute engine for containers. It allows the customer to run containerized workloads using Docker without having to provision, configure, or patch the underlying virtual servers. Crucially, Fargate does not impose a 15-minute execution limit like AWS Lambda, allowing the video transcoding job to run to completion.

Step-by-Step Solution

1
Analyze the workload requirements
The workload is containerized (Docker), takes 15 to 25 minutes to complete, and must run on a serverless platform (no OS patching or capacity management).
Identifying the key constraints helps rule out compute options that cannot meet these requirements.
2
Evaluate AWS Lambda against the requirements
AWS Lambda is ruled out because its maximum execution timeout is 15 minutes, whereas the workload requires up to 25 minutes.
Lambda is serverless but has strict time limits that make it unsuitable for long-running execution tasks.
3
Evaluate Amazon EC2 and Amazon Lightsail against the requirements
Amazon EC2 and Amazon Lightsail require configuring and managing virtual machine instances, which fails the requirement to eliminate host OS patching and administration.
These services fall under the Infrastructure as a Service (IaaS) model rather than serverless.
4
Select AWS Fargate as the correct match
AWS Fargate is serverless, natively runs Docker containers, handles scaling automatically, has no server management overhead, and allows containers to run as long as needed.
Fargate meets all constraints: serverless, containerized, and supports execution times longer than 15 minutes.

Key Concept

Selecting the appropriate AWS compute service based on containerization, execution duration, and management overhead.
Estimated Time:2m 0s
Question 848Question →

A financial firm is migrating a compliance application to AWS. The application has two key storage requirements:

1. It needs a persistent block storage volume to host a transactional database run on a single Amazon EC2 instance.
2. It needs a shared file storage solution that can be mounted concurrently by multiple EC2 instances across different Availability Zones to share application configuration files.

Which two AWS storage services should the firm select to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Elastic Block Store (Amazon EBS); Amazon Elastic File System (Amazon EFS)

Answer

Amazon Elastic Block Store (Amazon EBS) and Amazon Elastic File System (Amazon EFS)
The correct options are Amazon Elastic Block Store (Amazon EBS) and Amazon Elastic File System (Amazon EFS). Amazon EBS offers low-latency, persistent block storage volumes that attach to a single EC2 instance, matching the requirements of transactional databases. Amazon EFS offers a managed, scalable network file system that supports the NFS protocol, allowing multiple EC2 instances to read and write configuration files concurrently across multiple Availability Zones.

Step-by-Step Solution

1
Analyze the first requirement: a persistent block storage volume to host a transactional database on a single EC2 instance.
Identify Amazon EBS as the service designed to provide persistent, low-latency block-level storage volumes for a single EC2 instance.
Transactional databases require high performance block storage, which is the primary use case for Amazon EBS.
2
Analyze the second requirement: a shared file system that can be concurrently mounted by multiple EC2 instances across multiple Availability Zones.
Identify Amazon EFS as the service that provides a serverless network file system supporting concurrent access from multiple EC2 instances.
Unlike block storage, a file system like Amazon EFS supports the Network File System (NFS) protocol for concurrent multi-instance sharing.

Key Concept

Distinguishing between block storage (EBS), file storage (EFS), and object storage (S3) based on application access patterns and persistence requirements.
Question 849Question →

A financial technology company is designing a disaster-tolerant transactional application in a specific geographic country to comply with strict local data sovereignty laws. The system requires synchronous replication between two database nodes to prevent any data loss (zero RPO). The nodes must be physically isolated from one another to survive localized environmental hazards, yet remain close enough to maintain a round-trip network latency of under 2 milliseconds. Which of the following deployment strategies best meets these requirements?

Show answer & explanation

Answer: Deploy the primary database node in one Availability Zone and the secondary database node in a different Availability Zone within the same AWS Region.

Answer

Deploy the primary database node in one Availability Zone and the secondary database node in a different Availability Zone within the same AWS Region.
Deploying the primary and secondary database nodes in different Availability Zones (AZs) within the same AWS Region is the correct strategy. AZs are physically distinct locations with independent power, cooling, and network connectivity, which protects against localized disasters. At the same time, they are connected to each other via low-latency, high-bandwidth private fiber-optic networks, allowing for synchronous replication with round-trip latencies under 2 milliseconds. Since both AZs are within the same Region, data remains within the target country, satisfying data sovereignty requirements.

Step-by-Step Solution

1
Analyze the latency and replication requirements.
The application requires synchronous replication with a round-trip network latency of under 2 milliseconds, which rules out multi-region setups since physical distance increases latency.
To understand the physical limits of network speed and replication.
2
Evaluate the disaster tolerance and data sovereignty requirements.
The database nodes must be physically separated to survive localized disasters but reside within the same country to comply with sovereignty laws.
To narrow down the hosting infrastructure options within the same geographic boundary.
3
Map the requirements to AWS Global Infrastructure components.
Availability Zones (AZs) within a single AWS Region are physically isolated but connected by low-latency, redundant fiber networks, making them the only solution that satisfies physical separation, sub-2ms latency, and regional data residency.
To choose the correct architectural component that satisfies all constraints.

Key Concept

AWS Availability Zones provide physical isolation and low-latency connectivity within a Region to enable high availability and disaster tolerance.
Question 850Question →

An organization is designing a cloud-native application. The architecture requires a fully managed NoSQL database to store key-value user profile data, and an in-memory cache to reduce latency for frequent database queries.

Which of the following AWS services should the organization select to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon DynamoDB; Amazon ElastiCache

Answer

The organization should select Amazon DynamoDB for the fully managed NoSQL key-value storage, and Amazon ElastiCache for the in-memory caching layer.
Amazon DynamoDB provides a fully managed, low-latency NoSQL database ideal for storing key-value pairs like user profiles. Amazon ElastiCache provides an in-memory cache layer to reduce query latency by caching frequently accessed data.

Step-by-Step Solution

1
Identify the NoSQL database requirement.
Amazon DynamoDB is identified as the key-value NoSQL database service.
DynamoDB is AWS's primary managed NoSQL database, offering single-digit millisecond latency for key-value access.
2
Identify the caching layer requirement.
Amazon ElastiCache is identified as the in-memory caching service.
ElastiCache is specifically designed to cache data in-memory to improve response times for read-heavy workloads.

Key Concept

AWS Database Services classification and use cases
Question 851Question →

A financial technology company is using Amazon Cognito user pools to manage customer authentication and authorization for its mobile banking application. Under the AWS Shared Responsibility Model, which of the following is a responsibility of the customer?

Show answer & explanation

Answer: Configuring password complexity requirements and multi-factor authentication (MFA) settings for the user pool.

Answer

Configuring password complexity requirements and multi-factor authentication (MFA) settings for the user pool.
Under the AWS Shared Responsibility Model, the customer is responsible for 'security in the cloud.' For Amazon Cognito user pools, this responsibility entails setting password complexity policies, configuring multi-factor authentication (MFA) protocols, and managing client-side authorization parameters.

Step-by-Step Solution

1
Determine the service type and the division of operational duties.
Amazon Cognito is classified as a managed platform-as-a-service (PaaS) or software-as-a-service (SaaS) utility, where AWS handles the underlying infrastructure, operating system, and database tiers.
Correct classification of the AWS service is essential to identifying the boundaries of the Shared Responsibility Model.
2
Differentiate between security 'of' the cloud and security 'in' the cloud for the identified service type.
The customer's responsibility focuses on data and configuration options (security 'in' the cloud), such as setting custom password standards and configuring MFA rules. AWS's responsibility focuses on infrastructure and platform software integrity (security 'of' the cloud).
Distinguishing configuration and data access settings from infrastructure maintenance identifies who is responsible for the task.

Key Concept

Shared Responsibility Model for Managed Services
Estimated Time:1m 0s
Question 852Question →

A healthcare startup needs to manage its AWS cloud expenses. The team wants to receive an email notification if their monthly database costs are forecasted to exceed a specific limit. Additionally, they need to view and analyze interactive charts showing their monthly EC2 and Amazon S3 spending over the last three months to identify trends. Which of the following tools should the company use to meet these requirements? (Select TWO).

Select all that apply

Show answer & explanation

Answer: AWS Budgets to create custom cost budgets that trigger email notifications when forecasted database costs exceed the specified threshold.; AWS Cost Explorer to visualize monthly historical spending patterns and view cost trends broken down by individual AWS services.

Answer

The correct tools are AWS Budgets (for proactive notifications when costs are projected to exceed a threshold) and AWS Cost Explorer (for visualizing historical cost trends broken down by service).
AWS Budgets allows the startup to set custom budgets and configure alerts that trigger when actual or forecasted costs exceed a threshold, which satisfies the requirement for proactive alerting. AWS Cost Explorer provides a visual interface to view and analyze historical cost and usage patterns by service over a specified time period, satisfying the visualization requirement.

Step-by-Step Solution

1
Identify the tool needed for proactive alerts when database costs are projected to exceed a threshold.
AWS Budgets is identified because it allows users to set up custom budgets and define notification alerts based on actual or forecasted costs.
Budgets help prevent cost overruns by notifying administrators before or as they occur.
2
Identify the tool needed to visualize monthly spending trends by service over the last three months.
AWS Cost Explorer is identified because it provides interactive charts to view and analyze historical cost and usage data.
Cost Explorer is designed for retrospective analysis and visual representation of active AWS resource costs.

Key Concept

AWS Billing and Cost Management tools differ in function: AWS Budgets is proactive, whereas AWS Cost Explorer is retrospective and analytical.
Question 853Question →

A company is designing a network architecture on AWS to connect 20 Virtual Private Clouds (VPCs) across different AWS Regions to their on-premises data center using AWS Direct Connect. They also need to implement a security control that blocks traffic from specific external IP addresses at the subnet boundary before it reaches any resources. Which two AWS configurations or services should the company implement to meet these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: AWS Transit Gateway to act as a centralized hub for routing traffic between the multiple VPCs and the on-premises network; Stateless Network Access Control Lists (NACLs) associated with the subnets to block the specific malicious IP addresses

Answer

AWS Transit Gateway and stateless Network Access Control Lists (NACLs) associated with subnets
The correct answer combines AWS Transit Gateway and stateless Network Access Control Lists (NACLs) associated with subnets. AWS Transit Gateway is designed to act as a centralized router to connect multiple VPCs and on-premises networks, eliminating the complexity of a full mesh VPC peering topology. Network Access Control Lists (NACLs) are stateless and function at the subnet boundary, making them the appropriate tool to block specific external IP addresses before traffic reaches any EC2 instances within the subnet.

Step-by-Step Solution

1
Identify the service that simplifies interconnecting multiple VPCs (20 VPCs) across different regions and on-premises networks.
AWS Transit Gateway acts as a cloud router, serving as a centralized hub to connect multiple VPCs and on-premises networks, replacing the need for complex mesh configurations.
VPC Peering does not scale well for 20 VPCs and does not natively support transitive routing.
2
Determine the network security component capable of blocking traffic from specific IP addresses at the subnet boundary.
Network Access Control Lists (NACLs) operate at the subnet level and are stateless, allowing explicit deny rules to block specific IP addresses before traffic reaches any EC2 instance.
Security Groups operate at the instance level and do not apply at the subnet boundary.

Key Concept

AWS Transit Gateway acts as a central hub to simplify multi-VPC routing, while Network Access Control Lists (NACLs) provide stateless filtering at the subnet boundary.
Estimated Time:3m 0s
Question 854Question →

A SaaS company is hosting a collaborative document editing application on Amazon EC2 instances. The system administrator wants to allow incoming HTTP/HTTPS traffic to the EC2 instances, ensuring that any corresponding outbound response traffic is automatically permitted regardless of outbound rules. Which AWS network security feature should be configured to meet this requirement?

Show answer & explanation

Answer: Security groups

Answer

Security groups
Security groups are stateful firewalls that operate at the instance level. When you allow inbound traffic to an instance, the return traffic is automatically allowed regardless of any outbound security group rules.

Step-by-Step Solution

1
Analyze the requirements for instance-level traffic filtering and stateful behavior.
The requirement specifies allowing inbound traffic to EC2 instances and automatically permitting the return outbound traffic without explicit configuration.
This matches the definition of stateful packet filtering.
2
Compare the firewalls available in an Amazon VPC.
Security groups are stateful and operate at the instance level. Network ACLs are stateless and operate at the subnet level.
Only security groups track connection state and automatically allow return traffic.

Key Concept

Security groups act as stateful firewalls for Amazon EC2 instances, automatically allowing return traffic for any permitted inbound connection.
Question 855Question →

A technology company plans to migrate its legacy relational database to AWS. The database administrator requires root-level access to the underlying operating system to install custom security patches and configure proprietary kernel extensions. Which AWS service or resource configuration should the company choose to meet these requirements?

Show answer & explanation

Answer: Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance

Answer

Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance
The configuration using an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance is correct. This self-managed database model gives the customer root-level control over the operating system, making it possible to install custom security updates, modify kernel extensions, and manage software dependencies directly. AWS remains responsible only for the physical infrastructure and hypervisor layers.

Step-by-Step Solution

1
Analyze the requirements for database migration and administrative access.
The database must support relational capabilities and requires root-level access to the underlying operating system for custom security patching and kernel extensions.
This determines the level of control needed over the database environment (managed vs. self-managed).
2
Evaluate the management boundaries of AWS database services under the Shared Responsibility Model.
Fully managed relational services like Amazon RDS and Amazon Aurora do not allow customer access to the underlying operating system or servers.
Managed database services offload operating system tasks to AWS, which restricts administrative OS access.
3
Select the appropriate service or resource configuration that offers OS-level access.
Running the relational database on an Amazon EC2 instance backed by Amazon EBS block storage allows the customer to maintain full administrative control, including operating system and kernel customization.
An EC2-hosted database is self-managed, shifting OS patching and custom configuration responsibilities entirely to the customer.

Key Concept

Managed vs. Self-Managed Databases on AWS
Estimated Time:2m 0s
Question 856Question →

A company is planning to run a containerized microservices application on AWS. The development team wants to deploy the containers using Amazon Elastic Container Service (Amazon ECS) but does not want to provision, configure, or scale the underlying virtual machines that host the containers. Which AWS compute service or feature provides this serverless container execution environment?

Show answer & explanation

Answer: AWS Fargate

Answer

AWS Fargate
AWS Fargate is the correct service because it functions as a serverless compute engine for containers. It integrates with Amazon ECS to manage the provisioning, hosting, and scaling of the infrastructure, allowing developers to run containers without managing virtual machines.

Step-by-Step Solution

1
Analyze the workload and administrative constraints
The application must run containerized microservices under Amazon ECS, but the infrastructure team wants to eliminate virtual machine management (provisioning, configuring, and scaling).
This establishes that the target service must support container orchestration while removing the operational burden of managing the underlying host servers.
2
Evaluate the compute options for Amazon ECS
Amazon ECS supports two launch types: Amazon EC2 (where the customer manages the host instances) and AWS Fargate (where AWS manages the host instances in a serverless manner).
Comparing these options identifies AWS Fargate as the service that satisfies all the specified constraints.

Key Concept

AWS Fargate is a serverless compute engine for Amazon ECS that allows running containers without provisioning or managing the underlying virtual machines.
Estimated Time:1m 0s
Question 857Question →

A medical device startup is developing a cloud-based platform for healthcare providers. The platform requires a database to store structured patient profiles and appointment schedules that need complex SQL queries and strict ACID compliance. Additionally, it requires a separate database to ingest high-speed, unstructured health telemetry data from millions of wearable sensors with single-digit millisecond latency. The startup wants to minimize administrative effort by choosing fully managed database solutions where AWS handles infrastructure provisioning, software patching, and physical security. Which two AWS services should the startup select to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Aurora; Amazon DynamoDB

Answer

Amazon Aurora and Amazon DynamoDB should be selected to meet the relational and NoSQL requirements respectively.
Amazon Aurora is selected because it provides a fully managed, ACID-compliant relational database for structured patient records and appointments. Amazon DynamoDB is selected because it is a fully managed NoSQL database service capable of ingesting high-speed, unstructured telemetry data with single-digit millisecond latency.

Step-by-Step Solution

1
Analyze the relational database requirements.
The patient profiles and appointment schedules require structured storage, complex SQL queries, and strict ACID compliance, which indicates a relational database.
This matches Amazon Aurora, which is a fully managed relational database service.
2
Analyze the non-relational database requirements.
The high-speed telemetry data from wearable sensors is unstructured and requires single-digit millisecond latency at scale, indicating a key-value or NoSQL database.
This matches Amazon DynamoDB, which is a fully managed NoSQL database service.
3
Evaluate the management requirement.
The startup wants to minimize administrative overhead, including patching and infrastructure management.
Both Amazon Aurora and Amazon DynamoDB are fully managed by AWS, satisfying this requirement, whereas options like self-managed databases on Amazon EBS require customer patching.

Key Concept

Selecting the appropriate AWS database service based on data structure, latency, and management model.
Question 858Question →

A media streaming company is storing user account information in Amazon S3 and database backups in Amazon RDS. The company's compliance policy requires all of this data to be encrypted at rest. According to the AWS Shared Responsibility Model, which of the following is a customer responsibility in this scenario?

Show answer & explanation

Answer: Configuring server-side encryption and managing access policies for the cryptographic keys

Answer

Configuring server-side encryption and managing access policies for the cryptographic keys
Under the AWS Shared Responsibility Model, the customer is responsible for data encryption configurations (security in the cloud), which includes enabling server-side encryption on services like Amazon S3 and Amazon RDS and specifying who has permissions to use the encryption keys.

Step-by-Step Solution

1
Identify that the requirement is for encrypting data at rest (stored in Amazon S3 and Amazon RDS).
Recognized that this falls under data protection and key management.
Encryption of data at rest involves both selecting the encryption mechanism and managing the access controls to the keys used for encryption.
2
Apply the AWS Shared Responsibility Model, dividing tasks into customer responsibility (security in the cloud) and AWS responsibility (security of the cloud).
Differentiated infrastructure management from resource configuration.
AWS manages physical data centers, hardware security, hypervisors, and storage sanitization, while customers configure resources, access permissions, and choose whether/how to enable encryption.
3
Select the option that represents a customer-managed action.
Identified that enabling server-side encryption and managing key access policies is the customer's duty.
Only configuring the encryption settings and controlling access policies is under the customer's direct control within the AWS Management Console or APIs.

Key Concept

Data protection at rest and the Shared Responsibility Model
Estimated Time:1m 0s
Question 859Question →

A company wants to deploy a containerized web application on AWS. The company's operations team prefers not to provision, configure, or scale the underlying virtual servers that host the containers. Which AWS compute service should the company select to run this containerized workload?

Show answer & explanation

Answer: AWS Fargate

Answer

AWS Fargate
The correct answer is AWS Fargate. AWS Fargate is a serverless compute engine for containers that automates infrastructure provisioning and scaling, enabling organizations to run containerized workloads without the overhead of managing virtual machines.

Step-by-Step Solution

1
Determine the application package type.
The application is packaged in containers.
This targets AWS compute services that support running container workloads.
2
Identify the infrastructure management preference.
The team wants to avoid provisioning, scaling, or managing servers.
This rules out Infrastructure as a Service (IaaS) options like Amazon EC2 or Amazon Lightsail where server management is required.
3
Select the serverless container execution environment.
AWS Fargate runs containers in a serverless model.
Unlike AWS Lambda, which is optimized for event-driven functions, AWS Fargate is the primary serverless engine designed for running containerized workloads.

Key Concept

AWS Serverless Container Compute (AWS Fargate)
Question 860Question →

A company is deploying a content management system (CMS) on AWS using multiple Amazon EC2 instances distributed across different Availability Zones to ensure high availability. The CMS instances must concurrently access, write, and update a shared repository of media assets and configuration files using standard Linux file system permissions. Which AWS storage service should the company select to meet these requirements?

Show answer & explanation

Answer: Amazon Elastic File System (Amazon EFS)

Answer

Amazon Elastic File System (Amazon EFS)
Amazon Elastic File System (Amazon EFS) provides a fully managed, serverless, and highly available file system that supports the Network File System (NFS) protocol. It allows multiple EC2 instances in different Availability Zones to concurrently read and write to the same shared directory, while fully supporting standard Linux POSIX file permissions.

Step-by-Step Solution

1
Analyze the storage access patterns and infrastructure distribution described in the scenario.
The application requires shared, concurrent read and write storage accessible by multiple EC2 instances running across different Availability Zones (multi-AZ).
This requirement rules out standard single-instance block storage solutions.
2
Evaluate the protocol and API requirements of the application.
The application requires standard Linux file system permissions (POSIX compliance).
This distinguishes file storage from object storage, which uses REST APIs instead of POSIX file systems.
3
Select the AWS storage service that matches both concurrent multi-AZ access and standard file system support.
Amazon EFS is selected as it is a fully managed NFS file system built to scale elasticity and support concurrent connections from multiple EC2 instances across multiple Availability Zones.
It is the only AWS storage service that meets all the criteria of being a shared, persistent, multi-AZ, POSIX-compliant file system.

Key Concept

Identifying the appropriate AWS storage service (object, block, or file) based on shared access, protocol, and availability requirements.
Estimated Time:1m 30s
PreviousPage 43 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin