All practice questions

1473 questions

Question 901Question

A global logistics provider is migrating its IoT-based vehicle tracking platform to the AWS Cloud. The provider has two primary objectives: first, to eliminate large upfront capital expenditures on physical hardware, and second, to deploy its fleet-tracking application across several international regions within minutes to minimize latency for drivers worldwide. Which two of the following benefits of the AWS Cloud are directly demonstrated by this migration?

Select all that apply

Show answer & explanation

Answer: Go global in minutes; Trade fixed expense for variable expense

Answer

The correct benefits demonstrated are going global in minutes and trading fixed expense for variable expense.
The logistics provider eliminates upfront hardware costs by trading fixed expense for variable expense under the cloud's pay-as-you-go model. Furthermore, deploying the fleet-tracking application to multiple global regions in minutes demonstrates the ability to go global in minutes.

Step-by-Step Solution

1
Analyze the first requirement: the logistics provider wants to eliminate large upfront capital expenditures on physical hardware.
This maps to the benefit 'Trade fixed expense for variable expense', as paying only for what is consumed replaces large fixed upfront costs.
AWS allows organizations to pay for resources on-demand, which reduces capital expenditures (CapEx) in favor of operating expenditures (OpEx).
2
Analyze the second requirement: the provider wants to deploy its application across several international regions within minutes to minimize latency.
This maps to the benefit 'Go global in minutes' because of AWS's expansive global infrastructure footprint.
AWS enables rapid multi-region deployment, allowing applications to be close to users with minimal latency.

Key Concept

The six core advantages/benefits of AWS cloud computing, specifically focusing on global reach and cost flexibility.
Question 902Question

A media streaming company is designing a new application. The architecture requires a fully managed database to store and retrieve user session state data with single-digit millisecond latency at any scale. Additionally, the company needs a data warehouse solution to run complex analytical queries over petabytes of historical user viewing history for business intelligence reports. Which TWO AWS services should the company select to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon DynamoDB; Amazon Redshift

Answer

Amazon DynamoDB and Amazon Redshift
Amazon DynamoDB is a NoSQL key-value database designed to handle high-throughput workloads with single-digit millisecond latency, making it the correct choice for user session state data. Amazon Redshift is a fully managed data warehouse designed specifically to handle complex analytical queries over petabytes of structured data for business intelligence reporting.

Step-by-Step Solution

1
Analyze the first requirement: a database to store and retrieve user session state data with single-digit millisecond latency at any scale.
Identify that a fully managed NoSQL key-value database like Amazon DynamoDB is optimized for high-throughput, low-latency session store workloads.
Relational databases (like Amazon RDS) do not scale as easily or cost-effectively for millions of concurrent key-value lookups with sub-10ms response times.
2
Analyze the second requirement: a data warehouse solution to run complex analytical queries over petabytes of historical data.
Identify that Amazon Redshift is the dedicated AWS service for data warehousing and Online Analytical Processing (OLAP) at scale.
Standard databases are meant for transaction processing (OLTP) and perform poorly under heavy analytical queries across petabytes of historical data.

Key Concept

Selecting AWS database services based on specific workloads (NoSQL vs. data warehousing)
Question 903Question

A logistics company is hosting a dispatch coordinate management system on Amazon EC2 instances within a Virtual Private Cloud (VPC). A security administrator needs to implement a network security design that meets two criteria:

1. Block a list of specific malicious IP addresses at the subnet boundary before the traffic reaches any resources.
2. Automatically allow return traffic for any authorized inbound connections to the EC2 instances without needing to configure outbound rules.

Which of the following configurations should the administrator implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Apply a Network Access Control List (Network ACL) at the subnet level with deny rules to block the malicious IP addresses.; Apply a Security Group at the instance level to allow inbound traffic, relying on its stateful nature to automatically permit return traffic.

Answer

Apply a Network Access Control List (Network ACL) at the subnet level with deny rules to block the malicious IP addresses, and apply a Security Group at the instance level to allow inbound traffic, relying on its stateful nature to automatically permit return traffic.
The correct strategy combines a subnet-level Network Access Control List (Network ACL) to explicitly block malicious IP addresses (since Network ACLs support deny rules at the subnet boundary) and an instance-level Security Group to control application access (since Security Groups are stateful and automatically permit return traffic for established connections without needing outbound rule configuration).

Step-by-Step Solution

1
Analyze the requirement to block specific IP addresses at the subnet boundary.
Identify that Network Access Control Lists (NACLs) operate at the subnet level and support explicit deny rules.
Security Groups do not support deny rules and operate at the instance level, so NACLs must be used to block IPs at the subnet boundary.
2
Analyze the requirement to automatically allow return traffic for established connections.
Identify that Security Groups are stateful and automatically track connection states to allow return traffic.
Network ACLs are stateless and require explicit configuration of outbound rules for return traffic, whereas Security Groups automatically handle return traffic.

Key Concept

Stateful vs. Stateless network firewalls in AWS (Security Groups vs. Network ACLs)
Question 904Question

An enterprise is launching a new microservice on Amazon Elastic Container Service (Amazon ECS) that needs to write data to an Amazon DynamoDB table. Which configuration represents the most secure method for granting the microservice the necessary permissions?

Show answer & explanation

Answer: Associate an IAM role with the container task definition, granting it temporary security credentials with write access to the DynamoDB table.

Answer

Associating an IAM role with the container task definition, granting it temporary security credentials with write access to the DynamoDB table.
Associating an IAM role with the ECS task definition is the recommended practice. It allows the microservice container to retrieve temporary security credentials automatically. This removes the need to store long-term, hardcoded access keys in the code or container environment, minimizing credential exposure.

Step-by-Step Solution

1
Identify the entity requiring access (a containerized application on ECS) and the target resource (DynamoDB table).
An application running on an AWS compute service needs access to an AWS database service.
Access requirements dictate what type of IAM identity is most appropriate (e.g., role vs. user).
2
Apply the AWS security best practice of using temporary security credentials for applications running on AWS services.
An IAM role must be created and associated with the container task definition rather than creating an IAM user with long-term access keys.
Roles provide temporary credentials that rotate automatically, avoiding the security risk of exposing hardcoded long-term credentials.
3
Define the scope of customer responsibility under the AWS Shared Responsibility Model.
The customer is responsible for configuring access policies and assigning IAM roles to resources.
AWS does not manage or configure resource-level permissions for the customer.

Key Concept

Using IAM roles to grant temporary credentials to AWS resources and applications
Estimated Time:1m 0s
Question 905Question

An enterprise is migrating a legacy, monolithic document management system to AWS. The application requires a storage solution that supports POSIX file permissions and file-locking capabilities. It must be concurrently accessed by a fleet of auto-scaling Linux EC2 instances across multiple Availability Zones, as well as on-premises servers via an existing AWS Direct Connect connection. The performance requirements dictate that throughput must scale dynamically and automatically with the workload's I/O activity, without requiring manual provisioning of throughput capacity. Which AWS storage solution best meets these requirements with the least operational overhead?

Show answer & explanation

Answer: Amazon Elastic File System (Amazon EFS) configured with Elastic throughput

Answer

Amazon Elastic File System (Amazon EFS) configured with Elastic throughput
Amazon Elastic File System (Amazon EFS) is designed for shared file access across multiple Availability Zones and on-premises servers via AWS Direct Connect. By using Elastic throughput, throughput automatically scales in response to workload activity, eliminating the need to manage or provision throughput limits.

Step-by-Step Solution

1
Identify the file system protocol and access requirements.
The application requires concurrent access across multiple Availability Zones and on-premises servers using a POSIX-compliant interface with file-locking capabilities.
This rules out block storage solutions like EBS (which are AZ-restricted and lack native cross-instance sharing) and object storage like S3 (which lacks full POSIX compliance).
2
Evaluate the scaling and performance management requirements.
Throughput must scale dynamically and automatically without manual intervention or provisioning.
Elastic throughput configuration on Amazon EFS automatically adjusts performance to meet dynamic demand, minimizing operational overhead.

Key Concept

Shared, POSIX-compliant file storage with dynamic throughput scaling across multiple environments.
Estimated Time:2m 0s
Question 906Question

A company is designing an application architecture on AWS and needs to select storage solutions for two different use cases. First, they need low-latency, temporary block storage to hold temporary scratch files and cache data that can be safely discarded when the EC2 instances are stopped. Second, they need a low-cost storage solution to archive historical records that are rarely accessed but must be retrievable within a few hours. Which TWO AWS storage options should the company select to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon EC2 Instance Store; Amazon S3 Glacier Flexible Retrieval

Answer

The correct options are Amazon EC2 Instance Store and Amazon S3 Glacier Flexible Retrieval.
Amazon EC2 Instance Store is correct because it provides temporary, high-speed block storage directly attached to the host computer, which is ideal for temporary scratch files or buffer data that does not need to survive instance stops. Amazon S3 Glacier Flexible Retrieval is correct because it is designed for low-cost archiving of historical data that is rarely accessed, offering retrieval options that take between a few minutes and a few hours.

Step-by-Step Solution

1
Analyze the first requirement: low-latency, temporary block storage for files that do not need to persist when the EC2 instance stops.
Amazon EC2 Instance Store fits this scenario, as it is physically attached to the host computer and is ephemeral (data is lost when the instance is stopped or terminated).
Instance Store is optimized for temporary block storage and has no ongoing cost if the instance is running, unlike persistent block storage options.
2
Analyze the second requirement: low-cost archival storage for rarely accessed records retrievable within a few hours.
Amazon S3 Glacier Flexible Retrieval fits this scenario, as it is designed for low-cost archiving with retrieval options ranging from minutes to hours.
S3 Glacier provides highly durable and extremely cheap storage for inactive data compared to active storage classes or block storage.

Key Concept

AWS Storage Services selection based on persistence and lifecycle requirements
Question 907Question

A university research team needs to provision a standardized set of AWS resources—consisting of an Amazon Virtual Private Cloud (Amazon VPC), three Amazon EC2 instances, and an Amazon RDS database—for multiple student projects. They want to define this entire architecture in a single YAML template so they can easily deploy, update, and tear down identical environments for each project. Which AWS service is designed to meet this requirement?

Show answer & explanation

Answer: AWS CloudFormation

Answer

AWS CloudFormation
AWS CloudFormation is an Infrastructure as Code (IaC) service that allows you to define your entire AWS infrastructure in a declarative YAML or JSON template. It automatically provisions and manages all the resources in the stack, ensuring consistent deployments and simple teardowns.

Step-by-Step Solution

1
Analyze the requirement to define a complete set of infrastructure resources (VPC, EC2 instances, and an RDS database) using a single, version-controlled template file written in YAML.
Identify that the solution must support declarative templates (Infrastructure as Code) to ensure repeatability and ease of teardown.
A declarative configuration file allows the entire environment stack to be managed as code rather than via manual processes or individual command scripts.
2
Evaluate the available AWS deployment options against the requirements.
Select AWS CloudFormation as it is built specifically to provision and manage AWS resources from YAML or JSON templates.
AWS CloudFormation automatically handles dependencies and state, making it the most suitable tool for deploying identical multi-resource environments.

Key Concept

AWS CloudFormation is the native Infrastructure as Code (IaC) service used to define, deploy, and manage AWS resource stacks using templates.
Estimated Time:1m 30s
Question 908Question

A startup in the agriculture technology sector wants to test a new machine learning model for crop yield prediction. The development team needs to provision several GPU-enabled virtual servers to run experiments over the weekend, with the plan to terminate them immediately afterward. Instead of waiting weeks to procure and configure physical hardware on-premises, they deploy these instances on AWS within minutes. Which benefit of the AWS Cloud does this scenario directly illustrate?

Show answer & explanation

Answer: Increase speed and agility

Answer

Increase speed and agility
The benefit of increasing speed and agility in the AWS Cloud allows developers to access new IT resources in minutes rather than weeks. This dramatically reduces the time and cost required to deploy and run experiments, enabling organizations to innovate faster.

Step-by-Step Solution

1
Analyze the core business challenge in the scenario
The startup needs to quickly provision GPU-enabled virtual servers to run short-term machine learning experiments without waiting weeks for hardware procurement.
Understanding the primary motivation (reducing deployment time for testing) helps map it to the correct cloud benefit.
2
Evaluate the options against AWS Cloud benefits
The AWS Cloud benefit that emphasizes reducing the time it takes to make resources available to developers from weeks to minutes is 'Increase speed and agility'.
This benefit directly supports rapid experimentation and development velocity.

Key Concept

Increase speed and agility allows organizations to provision resources in minutes, reducing the cost and time required for experimentation.
Question 909Question

A startup is launching a real-time multiplayer gaming application. The architecture must satisfy three requirements:
1. Provide single-digit millisecond latency for compute workloads to users in a specific metropolitan area that does not have an AWS Region.
2. Provide high availability and fault tolerance for the central database, protecting against physical data center disasters.
3. Cache static game assets globally to reduce load times for international players.

Which of the following deployment strategies correctly leverage AWS Global Infrastructure components to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploy the latency-sensitive game server workloads in an AWS Local Zone located in the target metropolitan area.; Deploy the central database across multiple Availability Zones in the nearest AWS Region.

Answer

Deploying the latency-sensitive game server workloads in an AWS Local Zone located in the target metropolitan area, and deploying the central database across multiple Availability Zones in the nearest AWS Region.
Deploying game servers in AWS Local Zones allows the application to achieve single-digit millisecond latency close to users in metropolitan areas where there is no primary AWS Region. Deploying the database across multiple Availability Zones within the nearest AWS Region provides physical redundancy and automatic failover capability to protect against local data center disasters.

Step-by-Step Solution

1
Analyze the requirement for single-digit millisecond latency in a metropolitan area without an AWS Region.
Identify AWS Local Zones as the infrastructure component designed to bring compute, storage, and database services close to major population centers for low-latency requirements.
Regions are geographically dispersed, and when a Region is not present in a metropolitan area, AWS Local Zones fill this gap.
2
Analyze the requirement for database high availability and disaster protection against data center failures.
Identify Multi-AZ deployment as the solution.
Availability Zones are physically isolated data centers within a Region with redundant power, networking, and connectivity, making them the standard choice for localized high availability.
3
Evaluate the distractors based on the roles of Edge Locations, Regions, and CloudFront.
Eliminate options proposing databases in Edge Locations, multi-Region synchronous replication for AZ failovers, and CloudFront-managed EC2 instance replication.
Edge locations cache content rather than host databases, Regions replicate asynchronously, and CloudFront handles content delivery rather than server mirroring.

Key Concept

AWS Global Infrastructure components (Regions, Availability Zones, Local Zones, Edge Locations) and their distinct architectural purposes.
Estimated Time:2m 0s
Question 910Question

A media company is planning the launch of a new streaming service. They expect their subscriber base to grow steadily over the next three years, requiring their infrastructure to expand to handle this long-term growth. However, they also need their infrastructure to automatically scale up during Friday evening peak hours and scale down during weekday nights to minimize costs. Which AWS Cloud design principle is specifically demonstrated by the ability to automatically scale resources up and down in response to short-term demand fluctuations?

Show answer & explanation

Answer: Elasticity

Answer

Elasticity
Elasticity is the design principle that allows a system to dynamically allocate and deallocate resources in real time to match demand. In this scenario, automatically scaling resources up during peak hours and down during low-activity periods to optimize costs is a direct application of elasticity.

Step-by-Step Solution

1
Analyze the requirements in the scenario to identify the type of scaling described.
The scenario describes two scaling needs: long-term growth over three years and short-term automatic scaling up and down based on daily demand fluctuations.
This helps distinguish between different cloud design principles related to scale.
2
Differentiate between scalability and elasticity.
Scalability is the ability to handle long-term growth, while elasticity is the ability to dynamically scale resources up and down to match demand fluctuations.
The question specifically asks about the ability to scale resources up and down in response to short-term fluctuations.
3
Select the design principle that represents this dynamic, short-term adjustment.
Elasticity is the correct principle.
Elasticity directly addresses matching resource provisioning to real-time demand.

Key Concept

AWS Cloud Design Principles: Elasticity vs Scalability
Estimated Time:1m 0s
Question 911Question

A logistics company, FleetRoute, operates a package tracking application that experiences high traffic during business hours and very low usage overnight. The company is migrating this workload from an on-premises data center to the AWS Cloud to optimize its infrastructure spending. Which two of the following represent core cloud economics concepts or benefits that the company will realize after this migration?

Select all that apply

Show answer & explanation

Answer: Trading upfront capital expenses (CapEx) for variable operating expenses (OpEx) that align costs directly with actual usage; Reducing overall costs by using elasticity to scale down compute resources automatically during periods of low overnight demand

Answer

The correct options are: trading upfront capital expenses (CapEx) for variable operating expenses (OpEx) that align costs directly with actual usage, and reducing overall costs by using elasticity to scale down compute resources automatically during periods of low overnight demand.
The correct options describe two fundamental cloud economic pillars. First, transitioning to AWS changes spending from upfront capital investments (CapEx) to variable, usage-based operating expenses (OpEx). Second, leveraging elasticity allows the infrastructure to automatically scale down when demand drops overnight, eliminating payment for idle resources.

Step-by-Step Solution

1
Analyze the financial model shift in cloud computing.
Identify that shifting from upfront physical hardware investments (CapEx) to a pay-as-you-go consumption model (OpEx) is a foundational economic benefit.
This shows the change in expenditure structure when moving to AWS.
2
Analyze how workload traffic fluctuations can be leveraged for cost savings.
Determine that elasticity allows resources to shrink during low usage (overnight), preventing overprovisioning costs.
This maps the dynamic scalability of AWS to cost efficiency.

Key Concept

Cloud economics and the financial benefits of moving to AWS, specifically CapEx to OpEx shift and elasticity.
Question 912Question

An operations manager who travels frequently needs a convenient, visual way to check the status of Amazon EC2 instances and perform basic troubleshooting tasks, such as restarting an instance, directly from a web browser. Which AWS tool or interface is designed for this type of manual, interactive management?

Show answer & explanation

Answer: AWS Management Console

Answer

AWS Management Console
The AWS Management Console is a web-based, graphical interface that allows users to manually access and manage AWS resources directly from a web browser. It is designed for interactive tasks, such as checking resource status or restarting instances, making it the most suitable tool for this scenario.

Step-by-Step Solution

1
Identify the key requirement in the scenario.
The user needs a visual, web-browser-based interface to perform manual, interactive management tasks like restarting instances.
This helps filter out programmatic, command-line, or infrastructure-as-code deployment methods.
2
Evaluate the available AWS deployment and operating tools against the requirement.
The AWS Management Console is the only tool that provides a web-based graphical user interface for direct manual management.
Other tools like the CLI, SDKs, and CloudFormation are designed for scripting, custom coding, or template-based resource provisioning rather than visual manual administration.

Key Concept

Methods of Deploying and Operating in AWS
Estimated Time:1m 0s
Question 913Question

A company is planning to deploy a new application on AWS and has identified two specific compute requirements:

1. A containerized API microservice that runs continuously and must scale dynamically without the team managing or provisioning any underlying virtual servers.
2. A short-lived database logging utility that only executes for a few seconds whenever a new record is added to a database.

Which of the following AWS compute services should the company select to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Fargate to deploy the containerized API microservice; AWS Lambda to execute the database logging utility code

Answer

AWS Fargate to deploy the containerized API microservice, and AWS Lambda to execute the database logging utility code
The correct services are AWS Fargate and AWS Lambda. AWS Fargate is a serverless compute engine that runs containers without the customer needing to provision, configure, or scale virtual machines, which perfectly satisfies the continuous microservice requirement. AWS Lambda is a serverless compute service that automatically runs code in response to events (such as database changes) and scales dynamically, making it the most cost-effective and operationally efficient choice for short-lived logging tasks.

Step-by-Step Solution

1
Analyze the containerized microservice requirement.
The microservice needs to run continuously and scale automatically without server management.
AWS Fargate matches this containerized serverless requirement because it manages the underlying infrastructure for container execution.
2
Analyze the database logging utility requirement.
The logging utility is short-lived, executes for only a few seconds, and is triggered by database events.
AWS Lambda is the ideal serverless choice for this because it executes code in response to events without running a persistent server.
3
Evaluate and eliminate incorrect compute choices based on operational responsibility and efficiency.
Amazon EC2 requires manual server configuration and OS patching, and running an EC2 instance continuously for occasional database triggers is cost-inefficient.
Eliminating options that violate the AWS Shared Responsibility Model or introduce unnecessary administrative and financial overhead aligns the architecture with AWS best practices.

Key Concept

Selecting appropriate AWS compute services based on serverless execution models, workload characteristics, and operational management boundaries.
Estimated Time:1m 30s
Question 914Question

A gaming startup is designing a mobile application and needs a database to store and retrieve player profiles, game states, and leaderboard scores using simple key-value lookups. The database must automatically scale to support millions of active players while maintaining single-digit millisecond latency. Which AWS database service is best suited for this requirement?

Show answer & explanation

Answer: Amazon DynamoDB

Answer

Amazon DynamoDB
Amazon DynamoDB is the correct choice because it is a fully managed, serverless NoSQL database service that supports both document and key-value store models. It automatically scales to meet demand while maintaining consistent, single-digit millisecond latency, which fits the requirements of storing player profiles and leaderboard scores for millions of users.

Step-by-Step Solution

1
Analyze the application requirements.
The application requires key-value storage, automatic scaling for millions of players, and single-digit millisecond latency.
This helps determine whether a relational, non-relational, or analytical storage model is required.
2
Evaluate the database options against the requirements.
Amazon DynamoDB is a managed NoSQL database designed specifically for low-latency, key-value access at any scale.
Relational options (like Amazon RDS) are built for structured SQL operations, and analytical options (like Amazon Redshift) are built for reporting, leaving DynamoDB as the optimal match.

Key Concept

Selecting the appropriate AWS database service based on data structure and performance requirements.
Estimated Time:45s
Question 915Question

A developer is designing a real-time multiplayer game and needs a data store to manage a highly dynamic leaderboard. The application requires response times in the sub-millisecond range to maintain a fluid user experience. Which AWS service is best suited to meet these requirements?

Show answer & explanation

Answer: Amazon ElastiCache

Answer

Amazon ElastiCache is the best choice because it provides fully managed in-memory caching that delivers sub-millisecond response times required for gaming leaderboards.
Amazon ElastiCache is correct because it uses in-memory data structures (supporting Redis and Memcached) to serve read-heavy workloads with sub-millisecond response times, making it ideal for real-time leaderboards.

Step-by-Step Solution

1
Analyze the application requirements.
Identify that the system needs to support a highly dynamic gaming leaderboard with sub-millisecond latency.
This establishes the performance threshold and workload type.
2
Compare AWS database and caching services against the requirements.
Determine that relational databases (like RDS) and standard NoSQL databases (like DynamoDB) operate in the millisecond range, while in-memory stores (like ElastiCache) operate in the sub-millisecond range.
Matching the latency requirement to the correct database class ensures the right architectural decision.

Key Concept

AWS in-memory caching and database service selection based on latency requirements
Question 916Question

A manufacturing enterprise with a global presence is designing two new applications. First, they need to run latency-sensitive telemetry processing applications directly inside their own physical factories where data residency constraints require local processing. Second, they need to deploy a real-time smart-vehicle monitoring system that delivers single-digit millisecond latency to connected mobile devices over 5G networks. Which two AWS infrastructure offerings will meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Outposts to run AWS infrastructure and services on-premises within the physical factory locations; AWS Wavelength to embed AWS compute and storage services within 5G telecommunications carrier networks

Answer

AWS Outposts and AWS Wavelength are the correct services for these requirements.
The correct options are the statements recommending AWS Outposts for on-premises deployment and AWS Wavelength for 5G network integration. AWS Outposts provides fully managed AWS infrastructure on-premises, which directly satisfies the requirement of local data processing and data residency within the physical factory locations. AWS Wavelength embeds AWS compute and storage services inside telecommunications providers' 5G network infrastructure, enabling application traffic from mobile devices to reach application servers without leaving the carrier network, satisfying the single-digit millisecond latency requirement for connected mobile devices.

Step-by-Step Solution

1
Analyze the first requirement which is running applications directly inside the customer's physical factories for local data residency and low latency.
Identify that this requires on-premises deployment of AWS infrastructure.
AWS Outposts is the specific global infrastructure component designed to bring native AWS services and infrastructure to on-premises environments.
2
Analyze the second requirement which is delivering single-digit millisecond latency to mobile devices connected via 5G networks.
Identify that this requires running compute and storage within the cellular carrier's networks.
AWS Wavelength is the global infrastructure component that embeds AWS services within 5G networks to minimize network hops from the mobile device to the application.
3
Evaluate the remaining options to rule them out.
Local Zones, Edge Locations, and standard AWS Regions are ruled out because they do not meet the on-premises or 5G network integration requirements.
AWS Regions and Local Zones are public cloud locations, and Edge Locations are primarily optimized for content caching rather than hosting custom telemetry workloads on-premises or inside mobile carrier networks.

Key Concept

Distinguishing between specialized AWS global infrastructure components (Outposts, Wavelength, Local Zones, Edge Locations) for specific hybrid and edge deployment scenarios.
Estimated Time:2m 0s
Question 917Question

A medical clinic needs to store patient records that are older than one year. The clinic rarely accesses these records, but when they do, the files must be retrieved immediately in milliseconds. The clinic wants to minimize storage costs while maintaining high durability. Which AWS storage class is the most appropriate for this workload?

Show answer & explanation

Answer: Amazon S3 Standard-Infrequent Access (S3 Standard-IA)

Answer

Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
Amazon S3 Standard-Infrequent Access (S3 Standard-IA) is the optimal choice because it is specifically designed for data that is accessed less frequently but requires rapid (millisecond) access when requested. It provides the same durability as S3 Standard but at a lower storage price point, matching all constraints in the scenario.

Step-by-Step Solution

1
Analyze the access pattern and retrieval requirements.
The data is rarely accessed (infrequent access) but must be available in milliseconds (immediate retrieval).
This rules out archival classes like Glacier that require minutes or hours to retrieve data.
2
Compare cost-effective storage options that support immediate retrieval.
Amazon S3 Standard-Infrequent Access (S3 Standard-IA) offers lower storage pricing than S3 Standard while meeting the millisecond retrieval requirement.
This satisfies the clinic's requirement to minimize storage costs while retaining high durability and low-latency access.

Key Concept

Selecting cost-effective S3 storage classes based on access frequency and retrieval time constraints.
Estimated Time:1m 0s
Question 918Question

An enterprise is designing a regulatory-compliant application on AWS. The application must achieve high availability across multiple physical facilities, support single-digit millisecond latency for users in a remote metropolitan city, and ensure that customer data remains strictly within national borders. Which TWO of the following statements correctly describe how the AWS Global Infrastructure handles these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploying the workload across multiple Availability Zones in a single AWS Region provides physical separation between data centers while keeping data within the same national boundary.; AWS Local Zones can be used to run latency-sensitive applications closer to end-users in the remote metropolitan city, while maintaining a connection to the parent AWS Region.

Answer

Deploying the workload across multiple Availability Zones in a single AWS Region provides physical separation between data centers while keeping data within the same national boundary, and AWS Local Zones can be used to run latency-sensitive applications closer to end-users in the remote metropolitan city, while maintaining a connection to the parent AWS Region.
The correct options correctly describe the functions of Availability Zones and Local Zones. Multiple Availability Zones within one Region provide redundant, physically isolated power and cooling domains to guarantee high availability while keeping data inside the same country to meet data residency rules. AWS Local Zones place compute and storage services close to metropolitan areas to satisfy low-latency demands for local users.

Step-by-Step Solution

1
Analyze the high availability and data sovereignty requirement.
Identify that Availability Zones within a single Region provide physical redundancy (isolation from failures) while remaining within the same geographic/political border.
Availability Zones are designed with independent infrastructure (power, cooling, network) but reside in the same Region, satisfying both physical separation and local residency needs.
2
Analyze the low-latency metropolitan user requirement.
Identify that AWS Local Zones extend the parent Region to place AWS resources physically closer to metropolitan areas, achieving single-digit millisecond latency.
Edge locations are for content caching (CDN) rather than full database deployment, whereas Local Zones support running compute and database workloads closer to local end-users.
3
Evaluate and eliminate incorrect infrastructure options.
Eliminate options claiming automatic cross-region replication, database hosting in Edge Locations, or cross-country distribution of Availability Zones within a single Region.
These claims misrepresent the role and capabilities of Edge Locations, Availability Zones, and the AWS Shared Responsibility Model.

Key Concept

AWS Global Infrastructure components (Regions, Availability Zones, Local Zones, and Edge Locations) serve distinct roles in resiliency, latency, and compliance.
Question 919Question

An IoT company deploys telemetry collection servers on Amazon EC2 instances within a custom subnet. The cloud practitioner configures a Network Access Control List (Network ACL) at the subnet level to allow inbound TCP traffic on port 8883 from the internet. Although the EC2 instances' Security Groups are configured to allow all outbound traffic, the external sensors are unable to receive acknowledgment responses from the servers. Which of the following configuration changes is required to resolve this issue and allow the acknowledgment traffic back to the sensors?

Show answer & explanation

Answer: Add an outbound rule to the subnet's Network ACL that allows traffic to the ephemeral port range of the external sensors.

Answer

Add an outbound rule to the subnet's Network ACL that allows traffic to the ephemeral port range of the external sensors.
The correct option is correct because Network ACLs are stateless firewalls operating at the subnet level. They evaluate inbound and outbound rules independently. When inbound traffic is allowed on port 8883, the return traffic destined for the client's ephemeral ports will be blocked unless an outbound rule explicitly allows it. Security Groups, on the other hand, are stateful and do not block this return traffic.

Step-by-Step Solution

1
Analyze the network security configuration and traffic behavior.
The inbound traffic reaches the EC2 instances successfully, but the outbound return traffic is blocked at the subnet boundary.
Since the Security Group is stateful, it automatically permits return traffic. The failure must be occurring at the Network ACL, which controls subnet-level traffic.
2
Apply the rule characteristics of Network ACLs vs. Security Groups.
Network ACLs are stateless. Therefore, allowing inbound traffic on port 8883 does not automatically allow the outbound return traffic.
An explicit outbound rule must be configured in the Network ACL to allow the return traffic (typically using ephemeral ports) back to the client.

Key Concept

Stateful vs. Stateless Firewalls in AWS (Security Groups vs. Network ACLs)
Estimated Time:1m 30s
Question 920Question

A boutique clothing retailer plans to launch a seasonal marketing campaign. Instead of purchasing physical servers and networking hardware to host their promotional website in a local data center, the retailer deploys the website on AWS to pay only for the virtual resources they consume during the campaign. Which benefit of the AWS Cloud is best illustrated by this scenario?

Show answer & explanation

Answer: Trade capital expense for variable expense

Answer

Trade capital expense for variable expense
The correct answer is the cloud benefit that describes shifting upfront hardware costs (capital expenses) to pay-as-you-go costs based on consumption (variable expenses). By using AWS resources only for the duration of the campaign, the retailer avoids the capital costs of buying servers.

Step-by-Step Solution

1
Analyze the financial transition in the scenario
The retailer avoids purchasing physical servers (upfront capital expense) and instead uses AWS on-demand resources (pay-as-you-go variable expense).
To identify which cloud benefit directly maps to the shift from upfront hardware investment to operational usage billing.
2
Map the result to the 6 core AWS Cloud benefits
The action of paying only for active virtual resources during the campaign aligns with trading capital expense for variable expense.
To select the official AWS benefit definition that represents this specific optimization.

Key Concept

AWS Cloud Benefit: Trading capital expense for variable expense
Estimated Time:1m 0s
PreviousPage 46 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin