Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 941Question →

An educational institution is building a portal to store student enrollment details and class schedules. The administration requires a database solution that organizes data in tables with predefined schemas and supports standard SQL queries. They want to minimize administrative overhead by choosing a fully managed service that handles software patching and automatic backups. Which AWS service is best suited to meet these requirements?

Show answer & explanation

Answer: Amazon Relational Database Service (Amazon RDS)

Answer

Amazon Relational Database Service (Amazon RDS)
Amazon Relational Database Service (Amazon RDS) is the correct choice because it is a fully managed service that allows customers to run relational databases (which support predefined schemas and standard SQL queries) while offloading tasks like patching, backups, and scaling to AWS.

Step-by-Step Solution

1
Analyze the application requirements for structured data, predefined schemas, and standard SQL queries.
Determine that a relational database model is needed.
Relational databases use tables, rows, columns, and SQL to organize and query structured data.
2
Evaluate the administrative requirement to minimize overhead through automated patching and backups.
Identify that a fully managed AWS database service is required.
Managed database services offload routine administrative tasks like software patching and database backups from the customer.
3
Select the AWS service that provides a managed relational database environment.
Determine that Amazon RDS matches all criteria.
Amazon RDS is a fully managed service designed specifically for hosting relational databases using standard SQL engines.

Key Concept

AWS Managed Relational Database Services
Estimated Time:45s
Question 942Question →

A company needs to automate the execution of patch compliance checks and run administrative shell scripts across a fleet of Amazon EC2 instances. Security policies prohibit opening inbound SSH ports or using bastion hosts. Which AWS service should the company use to securely manage these operational tasks at scale?

Show answer & explanation

Answer: AWS Systems Manager

Answer

AWS Systems Manager is the correct service for managing operational tasks, running scripts, and automating patches securely across instances without SSH access.
The correct service is AWS Systems Manager because it provides features such as Run Command and Patch Manager. These allow administrators to execute scripts, apply patches, and check compliance across a fleet of EC2 instances via the Systems Manager Agent, eliminating the need to expose inbound SSH ports or manage bastion hosts.

Step-by-Step Solution

1
Identify the primary requirement: running administrative scripts and checking patch compliance across EC2 instances without inbound SSH ports.
Requires a management service that uses an agent on the instance to pull tasks from the AWS API rather than receiving incoming network connection requests.
Security rules forbid inbound SSH, which means traditional push-based administration tools cannot be used.
2
Evaluate the management capabilities of AWS Systems Manager.
AWS Systems Manager provides Run Command and Patch Manager, which use the Systems Manager Agent (SSM Agent) to run scripts and inspect patch status over outbound HTTPS connections.
AWS Systems Manager is specifically designed for operational management, patching, and configuration of resource fleets.
3
Differentiate between the options to ensure the best fit.
AWS Systems Manager is the correct choice, while provisioning services like CloudFormation or Beanstalk, and monitoring services like CloudWatch, do not support remote script execution or patching.
Ensures the selected service aligns with operations rather than deployment or monitoring.

Key Concept

AWS Systems Manager capabilities for configuration management and operational security
Estimated Time:1m 0s
Question 943Question →

An engineering firm runs high-performance computing (HPC) simulation workloads on a fleet of Amazon EC2 instances. The workloads require two storage components:

1. A transient scratch pad attached directly to each EC2 instance that provides ultra-low latency and very high write throughput. Data on this scratch pad is temporary and does not need to persist if the instance is stopped or terminated.
2. A durable and cost-effective storage repository to store the final PDF simulation reports. These reports must be immediately accessible for the first 30 days after generation, but can be moved to long-term archiving afterward to minimize storage costs.

Which two AWS storage services or features should the company select to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon EC2 Instance Store to serve as the transient scratch pad; Amazon S3 Standard for initial report storage, combined with an S3 Lifecycle policy to transition reports to Amazon S3 Glacier after 30 days

Answer

The correct services are Amazon EC2 Instance Store for the temporary scratch pad and Amazon S3 Standard combined with an S3 Lifecycle policy to transition the reports to Amazon S3 Glacier after 30 days.
The correct solutions are Amazon EC2 Instance Store and Amazon S3 Standard with an S3 Lifecycle policy. An Instance Store provides temporary, high-performance block storage directly attached to the host, which is ideal for transient scratch pads where data does not need to persist. Amazon S3 Standard provides immediate (millisecond) retrieval latency for the first 30 days of report access, and S3 Lifecycle policies can automate transitioning the reports to Amazon S3 Glacier for cost-effective long-term storage.

Step-by-Step Solution

1
Analyze the scratch pad requirements for latency, throughput, and durability.
The workload requires ultra-low latency, high write throughput, and transient storage where data is lost upon stop/termination.
This identifies the need for ephemeral block storage directly attached to the host.
2
Select the storage type that matches the scratch pad requirements.
Amazon EC2 Instance Store is selected because it provides temporary, high-performance block storage attached to the host computer.
Unlike persistent EBS volumes, Instance Store is designed for transient data where speed is critical and persistence is not required.
3
Analyze the final report storage requirements for accessibility and cost.
The reports require immediate access for 30 days, followed by long-term cost-optimized archiving.
This requires an object storage class with low latency initially, and an automated method to move files to a cheaper archival class.
4
Select the storage solution that matches the report requirements.
Amazon S3 Standard combined with an S3 Lifecycle policy to transition to Amazon S3 Glacier is selected.
S3 Standard offers millisecond access for the first 30 days, and Lifecycle policies automatically move the files to Glacier for low-cost archiving.

Key Concept

Differentiating between ephemeral block storage (Instance Store), persistent block storage (EBS), and object storage (S3) tiers to meet performance, cost, and lifecycle requirements.
Estimated Time:2m 0s
Question 944Question →

A financial analytics institution is building a risk modeling application on AWS. The application runs on a fleet of Amazon Elastic Container Service (Amazon ECS) tasks distributed across multiple Availability Zones. These tasks must concurrently read and write to a shared scratch space that automatically scales throughput to handle unpredictable transaction data spikes. Additionally, the raw transactional inputs must be archived for compliance in a secure, write-once-read-many (WORM) storage class for seven years, where retrieval can take up to 12 hours. Which two AWS storage configurations or services should be selected to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon Elastic File System (Amazon EFS) to provide the shared, elastic concurrent read/write access for the container tasks across multiple Availability Zones.; Amazon Simple Storage Service (Amazon S3) Glacier Deep Archive with S3 Object Lock enabled to store the compliance archives in WORM format.

Answer

Amazon Elastic File System (Amazon EFS) to provide the shared, elastic concurrent read/write access, and Amazon Simple Storage Service (Amazon S3) Glacier Deep Archive with S3 Object Lock enabled to store compliance archives.
The correct selections are Amazon Elastic File System (Amazon EFS) and Amazon S3 Glacier Deep Archive with S3 Object Lock. Amazon EFS provides standard file system interfaces and supports concurrent access across multiple Availability Zones, which perfectly meets the container scratch space requirement. Amazon S3 Glacier Deep Archive provides the lowest-cost storage class for compliance archives with a 12-hour retrieval time, and combining it with S3 Object Lock ensures WORM compliance.

Step-by-Step Solution

1
Analyze the scratch space requirements: The application runs on ECS tasks across multiple Availability Zones, requiring shared, concurrent read/write access and elastic scaling. Amazon EFS fits this profile as a fully managed, elastic file system accessible across multiple AZs.
Amazon EFS is selected for the container scratch space.
It natively supports multi-AZ concurrent access and dynamic throughput scaling.
2
Analyze the compliance archival requirements: Data must be retained for seven years, secured with WORM (Write Once Read Many) controls, and can tolerate a retrieval time of up to 12 hours. Amazon S3 Glacier Deep Archive is the most cost-effective storage class for this retention period and retrieval time, and S3 Object Lock provides WORM capabilities.
Amazon S3 Glacier Deep Archive with S3 Object Lock is selected for the compliance archives.
It offers the lowest cost for long-term archival with WORM compliance enforcement.
3
Evaluate the wrong options: EBS Multi-Attach is restricted to a single AZ; S3 Standard-IA is not cost-optimal for seven-year archiving and lacks native WORM without Object Lock; EC2 Instance Store is ephemeral and will lose data.
Dismiss EBS Multi-Attach, S3 Standard-IA, and EC2 Instance Store as incorrect options.
They fail key structural, cost, or durability requirements.

Key Concept

Distinguishing between Amazon EBS, Amazon EFS, and Amazon S3 storage classes, along with understanding compliance features like S3 Object Lock.
Question 945Question →

Match each business workload requirement to the most appropriate AWS compute service.

Click a left item, then click its matching right item

Items

An enterprise web server running a custom proprietary kernel module that requires administrative access to the underlying operating system.
A short-lived event-driven script that runs for less than a minute to parse CSV files whenever they are uploaded to Amazon S3.
A simple staging environment for a startup testing a standard website stack with predictable monthly pricing.
A containerized microservice running continuously in production where the team wants automated scaling without managing server instances.

Matches

Show answer & explanation

Answer

The correct matches pair kernel-level OS access with Amazon EC2, S3-triggered transient scripts with AWS Lambda, predictable flat-rate environments with Amazon Lightsail, and serverless container deployments with AWS Fargate.
The correct matches align the workload specifications with AWS service features: EC2 is matched for OS-level administrative control, Lambda for short-lived event execution, Lightsail for simple low-cost environments, and Fargate for serverless container workloads.

Step-by-Step Solution

1
Analyze each application requirement to identify constraints such as operating system control, runtime duration, containerization, and pricing structure.
Identified OS level control for the first workload, brief event-driven processing for the second, predictable costs for the third, and serverless containers for the fourth.
Correct mapping relies on matches between workload characteristics and service features.
2
Map the analyzed requirements to the unique features of the target AWS compute services.
Linked OS customization to Amazon EC2, short serverless functions to AWS Lambda, simple low-cost virtual servers to Amazon Lightsail, and serverless container orchestration to AWS Fargate.
This alignment satisfies both architectural requirements and cost optimization guidelines.

Key Concept

Selecting the correct AWS compute service based on management overhead, runtime limits, OS-level requirements, and cost characteristics.
Estimated Time:1m 30s
Question 946Question →

A financial institution is migrating its core ledger application to AWS. To ensure the application remains operational even during local infrastructure outages or natural disasters, the architecture is deployed across multiple Availability Zones, uses an Amazon Aurora database with automated failover, and stores transaction logs in Amazon S3 with cross-region replication enabled. Which AWS Cloud design principle does this multi-layered architectural approach best represent?

Show answer & explanation

Answer: Design for failure

Answer

Design for failure
Designing for failure is a core AWS design principle which assumes that components will eventually fail and builds redundancy (such as Multi-AZ deployment, database failover, and cross-region replication) into the architecture to ensure continuous operation without service disruption.

Step-by-Step Solution

1
Analyze the architectural details described in the scenario.
The system uses multiple Availability Zones, database failover, and cross-region replication to remain operational during infrastructure outages.
Identifying the main objective of these mechanisms helps determine which design principle they align with.
2
Match the identified objective to the core AWS design principles.
Ensuring continuous operation and high availability during localized outages is the primary goal of the 'design for failure' principle.
This principle guides architects to assume components will fail and build in redundant paths to mitigate downtime.

Key Concept

AWS Cloud design principles - Design for failure
Estimated Time:1m 0s
Question 947Question →

A startup company wants to define and provision their AWS infrastructure, such as Amazon EC2 instances and Amazon RDS databases, using a declarative template file. Which AWS service should the company use to automate this provisioning process through Infrastructure as Code (IaC)?

Show answer & explanation

Answer: AWS CloudFormation

Answer

AWS CloudFormation is the correct service because it provides a template-based mechanism to automate the creation and management of AWS infrastructure as code.
AWS CloudFormation is designed specifically for Infrastructure as Code (IaC), allowing users to define resources in JSON or YAML templates and automatically provision them in a predictable order.

Step-by-Step Solution

1
Identify the requirement of defining and provisioning infrastructure using a declarative template file (Infrastructure as Code).
This points to AWS provisioning tools rather than monitoring or auditing tools.
The scenario requires automating infrastructure creation via templates.
2
Differentiate between infrastructure-as-code template tools and application deployment platforms.
AWS CloudFormation is selected as it directly uses templates to provision resources, whereas AWS Elastic Beanstalk focuses on deploying applications.
This confirms the correct service for raw template-based provisioning.

Key Concept

Infrastructure as Code (IaC) with AWS CloudFormation
Question 948Question →

A medical billing company is planning to migrate its legacy on-premises relational database to AWS. The company requires a database solution that is fully managed by AWS to handle database patching, operating system maintenance, and automated backups, while still allowing them to run complex SQL transactions with schema enforcement. Which AWS service is best suited to meet these requirements?

Show answer & explanation

Answer: Amazon RDS

Answer

Amazon RDS
Amazon Relational Database Service (Amazon RDS) is a fully managed service that supports relational database engines (such as PostgreSQL, MySQL, and Oracle). It automatically handles administrative tasks like software patching, OS maintenance, and backups, while allowing the customer to manage schemas and run transactional SQL queries.

Step-by-Step Solution

1
Analyze the workload requirements
The workload is relational, requiring SQL transactional capabilities and schema enforcement.
This rules out non-relational (NoSQL) database engines.
2
Analyze the management requirements
The customer wants automated OS patching, backups, and maintenance to be fully managed by AWS.
This rules out self-managed solutions on block storage or EC2.
3
Select the matching AWS database service
Amazon RDS matches both relational SQL capability and fully managed operational support.
Amazon RDS is specifically built to offload administrative tasks while supporting relational SQL database engines.

Key Concept

Distinguishing between managed relational databases and other storage or NoSQL services under the AWS Shared Responsibility Model.
Estimated Time:1m 30s
Question 949Question →

An enterprise manages its applications using separate AWS accounts for development and production. A developer in the development account needs to temporarily read logs from an Amazon S3 bucket located in the production account. Which of the following approaches represents the AWS-recommended security best practice to configure this cross-account access?

Show answer & explanation

Answer: Create an IAM role in the production account that grants read-only access to the S3 bucket, and configure a trust policy allowing the developer's identity in the development account to assume it.

Answer

Create an IAM role in the production account that grants read-only access to the S3 bucket, and configure a trust policy allowing the developer's identity in the development account to assume it.
The correct option outlines the AWS-recommended way to grant cross-account access. By creating an IAM role in the production account with a trust policy that trusts the development account, the developer can assume the role temporarily. This avoids using permanent credentials and adheres to the principle of least privilege.

Step-by-Step Solution

1
Define the access policy
An IAM policy is created in the production account specifying read-only permissions for the target Amazon S3 bucket.
To ensure the principle of least privilege is applied, limiting access to only the required resources and actions.
2
Create the cross-account IAM role
An IAM role is created in the production account with the read-only policy attached and a trust policy that references the development AWS account ID.
This establishes trust between the two accounts, enabling identities in the development account to assume the role.
3
Assume the role and access the resource
The developer in the development account uses the AWS Security Token Service (STS) to assume the role, obtaining temporary security credentials to access the production S3 bucket.
To access the logs securely without requiring long-term credentials or creating additional IAM users in the production account.

Key Concept

Cross-account access using IAM roles allows users from one AWS account to access resources in another account securely via temporary security credentials.
Question 950Question →

An inventory management system hosts its database on Amazon EC2 instances within a private subnet. The database instances must only receive inbound database traffic on port 5432 from the application tier EC2 instances. A cloud practitioner configures a Security Group for the database instances with an inbound rule allowing TCP traffic on port 5432 from the application tier's security group. Which of the following outbound configuration options is required on the database security group to allow the database instances to successfully return response traffic back to the application tier?

Show answer & explanation

Answer: No outbound rule is required because Security Groups are stateful, meaning allowed inbound traffic automatically permits the corresponding response traffic.

Answer

No outbound rule is required because Security Groups are stateful, meaning allowed inbound traffic automatically permits the corresponding response traffic.
The correct option is correct because Security Groups in AWS are stateful firewall devices. When an inbound rule permits traffic to enter an instance (such as database traffic on port 5432), the security group automatically allows the return response traffic to leave the instance, regardless of the outbound rules configured.

Step-by-Step Solution

1
Identify the resource-level security component being configured.
The resource is an Amazon EC2 instance using a Security Group.
Security Groups act as a firewall at the instance level, controlling both inbound and outbound traffic.
2
Determine the stateful nature of the security component.
Security Groups are stateful, which means they automatically allow return traffic for any established connection.
Since the inbound rule already permits the application tier to connect on port 5432, the response traffic is implicitly allowed out without a separate outbound rule.

Key Concept

Stateful behavior of Security Groups versus stateless behavior of Network ACLs
Estimated Time:1m 0s
Question 951Question →

A logistics company is migrating its supply chain management system to AWS. The system will store shipment records in Amazon S3 and database backups on Amazon EBS volumes. The company's security policy requires all data to be encrypted at rest and in transit. According to the AWS Shared Responsibility Model, which of the following security actions are the responsibility of the customer? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Enabling server-side encryption (SSE) on Amazon S3 buckets; Configuring SSL/TLS certificates on Application Load Balancers for data in transit

Answer

Under the AWS Shared Responsibility Model, the customer is responsible for configuring encryption configurations such as enabling server-side encryption on Amazon S3 buckets and configuring SSL/TLS certificates on Application Load Balancers.
Under the AWS Shared Responsibility Model, the customer is responsible for security configurations 'in the cloud'. Enabling server-side encryption on Amazon S3 buckets protects data at rest by letting customers choose key management options. Configuring SSL/TLS certificates on Application Load Balancers manages the encryption of traffic in transit to the customer application. Both actions are customer responsibilities.

Step-by-Step Solution

1
Analyze the requirements for data protection in transit and at rest under the AWS Shared Responsibility Model.
Identify that configuring encryption (both at rest using S3 bucket encryption and in transit using SSL/TLS) are settings managed by the customer within the cloud.
This establishes customer responsibility for logical security configurations.
2
Evaluate the remaining tasks related to physical infrastructure, hardware decommissioning, and hypervisor/firmware maintenance.
Identify that AWS is responsible for physical security, physical hardware lifecycle (such as destroying decommissioned drives), and physical host maintenance.
This distinguishes between 'security in the cloud' (customer) and 'security of the cloud' (AWS).

Key Concept

AWS Shared Responsibility Model for Data Protection and Encryption
Estimated Time:1m 30s
Question 952Question →

A company is developing a hybrid web application on Amazon EC2. The application has two distinct storage requirements. First, it needs a storage solution to host static user profile images that must be highly durable, scalable, and directly accessible via public web URLs. Second, it needs a persistent, low-latency block storage volume for database logs that is dedicated to a single EC2 instance and must retain data when the instance is stopped. Which two AWS storage services should the company select to meet these requirements? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Amazon Simple Storage Service (Amazon S3) to host the static user profile images; Amazon Elastic Block Store (Amazon EBS) to store the persistent database logs

Answer

Amazon Simple Storage Service (Amazon S3) to host the static user profile images, and Amazon Elastic Block Store (Amazon EBS) to store the persistent database logs
The correct options are the ones recommending Amazon Simple Storage Service (Amazon S3) and Amazon Elastic Block Store (Amazon EBS). Amazon S3 is the ideal solution for storing and retrieving static files like user profile images due to its high durability, scalability, and ability to serve objects over public URLs. Amazon EBS is the correct choice for the database logs because it provides low-latency, persistent block storage volumes that are dedicated to a single EC2 instance and retain data even if the instance is stopped.

Step-by-Step Solution

1
Analyze the first requirement: highly durable, scalable storage for static images accessible via URLs.
Identify that Amazon S3 is the optimal choice because it is a highly durable object storage service that natively supports public HTTP/HTTPS URL access for static media.
This matches the characteristics of object storage rather than block or file storage.
2
Analyze the second requirement: persistent, low-latency block storage dedicated to a single EC2 instance that retains data when stopped.
Identify that Amazon EBS provides persistent block-level storage volumes that can be attached to a single EC2 instance and preserve data independently of the instance lifespan.
This matches the characteristics of persistent block storage rather than ephemeral storage (Instance Store) or shared file storage (EFS).

Key Concept

Selecting appropriate AWS storage services (Amazon S3 for object storage and Amazon EBS for persistent block storage) based on workload requirements.
Question 953Question →

A company wants to monitor the performance metrics (such as CPU utilization) of its Amazon EC2 instances and record a history of API calls made within its AWS account for security auditing. Which two AWS services should the company use to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon CloudWatch; AWS CloudTrail

Answer

Amazon CloudWatch and AWS CloudTrail
Amazon CloudWatch is correct because it collects and tracks performance metrics like CPU utilization for EC2 instances. AWS CloudTrail is correct because it records user activity and API calls made within the AWS account for auditing purposes.

Step-by-Step Solution

1
Identify the service needed to monitor operational and performance metrics of AWS resources.
Amazon CloudWatch is the service that monitors operational metrics such as CPU utilization.
CloudWatch is designed to collect, track, and analyze performance data and metrics from EC2 instances and other AWS resources.
2
Identify the service needed to record API logs and user activity for auditing.
AWS CloudTrail is the service that logs user API calls and changes within the AWS account.
CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, and command line tools.

Key Concept

AWS monitoring, governance, and operational auditing using CloudWatch and CloudTrail.
Question 954Question →

A financial services firm is building a web application that has two distinct data management requirements. First, the application must store real-time user session states with microsecond latency. Second, it must run daily complex analytical queries on massive, historical transaction patterns to detect fraud. Which TWO database services should the architect recommend to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon ElastiCache; Amazon Redshift

Answer

The correct database services are Amazon ElastiCache and Amazon Redshift.
Amazon ElastiCache is correct because it provides a fully managed, in-memory caching service that delivers microsecond response times for session state storage. Amazon Redshift is correct because it is a fast, fully managed data warehouse that is optimized for running complex analytical queries on large historical datasets.

Step-by-Step Solution

1
Analyze the first requirement which is to store real-time user session states with microsecond latency.
Identify Amazon ElastiCache as the primary service because it is an in-memory data store providing sub-millisecond responses.
In-memory caching is required to achieve microsecond latency for session management.
2
Analyze the second requirement which is to run daily complex analytical queries on historical transaction patterns.
Identify Amazon Redshift as the primary service since it is AWS's fully managed petabyte-scale data warehouse built for complex analytical (OLAP) queries.
Data warehousing and complex analytical queries are best suited for Amazon Redshift, rather than operational databases.

Key Concept

Selecting appropriate AWS database services based on application workloads (in-memory caching vs. analytical data warehousing).
Question 955Question →

A marketing company needs to store and deliver static product images and promotional videos directly to customers over the internet. The storage solution must scale automatically to handle traffic spikes and make each file accessible via a unique web URL. Which AWS storage service should the company use to meet these requirements?

Show answer & explanation

Answer: Amazon Simple Storage Service (Amazon S3)

Answer

Amazon Simple Storage Service (Amazon S3)
Amazon Simple Storage Service (Amazon S3) is the correct choice because it is an object storage service designed to store and retrieve any amount of data from anywhere on the internet. Files stored in Amazon S3 can be assigned public URLs, allowing them to be delivered directly to users over the web. Amazon S3 automatically manages scaling and replication to handle high volumes of traffic.

Step-by-Step Solution

1
Analyze the business requirements from the scenario.
The requirements are: storing static assets (images/videos), automatic scaling for traffic spikes, and direct availability to internet clients via unique URLs.
Identifying the core requirements helps map them to the correct AWS storage service characteristics.
2
Evaluate the storage services based on object versus block or file storage properties.
Amazon S3 is object storage that serves files directly via HTTP/HTTPS URLs and scales automatically, fitting the requirements perfectly. Amazon EBS and Amazon EFS require compute instances (EC2) to serve content and do not natively support direct URL-based internet access.
This step distinguishes between block, file, and object storage use cases to determine the correct solution.

Key Concept

Selecting the appropriate AWS storage service based on requirements like internet accessibility, scaling, and storage type.
Estimated Time:45s
Question 956Question →

A research institution wants to run a legacy simulation application that requires custom kernel modifications to the underlying Linux operating system. The application must run continuously and cannot be containerized due to strict software dependencies. Which AWS compute service is the most appropriate for this workload?

Show answer & explanation

Answer: Amazon EC2

Answer

Amazon EC2
Amazon EC2 is the most appropriate service because it offers Infrastructure as a Service (IaaS), providing full administrative access to the virtual machine's operating system. This allows the installation of custom kernels and legacy software dependencies that cannot be containerized.

Step-by-Step Solution

1
Analyze the workload requirements: continuous execution, custom Linux kernel configurations, and inability to containerize.
Identified the need for full guest operating system control and virtual machine hosting.
Serverless or containerized services limit access to the underlying OS kernel.
2
Compare the available AWS compute services against these constraints.
Determined that Amazon EC2 is the only option providing full root-level control over the operating system kernel on virtualized instances.
Services like Lambda and Fargate abstract the operating system, while ECS requires containerization.

Key Concept

Selecting appropriate compute services based on OS access and virtualization requirements
Question 957Question →

A corporate training provider, TalentGrow, is preparing a business case to migrate its employee training platform from an on-premises data center to AWS. The finance team wants to understand the economic factors that drive a lower Total Cost of Ownership (TCO) in the cloud. Which of the following is a primary driver of TCO reduction when transitioning to AWS?

Show answer & explanation

Answer: The minimized need for internal IT resources to manage physical data center facilities, power, cooling, and hardware maintenance

Answer

The minimized need for internal IT resources to manage physical data center facilities, power, cooling, and hardware maintenance
The correct option is the minimized need for internal IT resources to manage physical data center facilities, power, cooling, and hardware maintenance. Transitioning to AWS reduces TCO by transferring the operational overhead of physical infrastructure management to AWS. This eliminates facilities-related costs and allows the organization to focus its IT labor on strategic goals rather than infrastructure upkeep.

Step-by-Step Solution

1
Analyze the financial and operational drivers of Total Cost of Ownership (TCO) in on-premises environments.
On-premises TCO includes not just hardware costs, but also facilities, power, cooling, physical security, and the administrative labor required to install, maintain, and upgrade the hardware.
Understanding the components of TCO is necessary to identify what changes when migrating to AWS.
2
Compare these on-premises costs with the AWS cloud consumption model.
In AWS, the customer does not pay for physical facilities, power, cooling, or physical security directly, nor do they need internal staff to perform hardware maintenance. These responsibilities shift to AWS, reducing both direct and indirect operational costs.
Identifying the shift in management responsibility highlights the primary driver of TCO reduction.

Key Concept

Total Cost of Ownership (TCO) in the cloud is reduced primarily by outsourcing the management of physical infrastructure, facilities, power, and cooling to AWS, thereby lowering capital expenditure and reducing operational overhead.
Estimated Time:1m 30s
Question 958Question →

A financial technology startup is launching a mobile micro-investing application. The application requires two components: one to store highly structured customer transaction logs that support complex SQL queries with ACID compliance, and another to cache frequently accessed stock prices in memory to achieve sub-millisecond response times.

Which two AWS services should the startup choose to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon Relational Database Service (Amazon RDS); Amazon ElastiCache

Answer

Amazon Relational Database Service (Amazon RDS) and Amazon ElastiCache
Amazon Relational Database Service (Amazon RDS) is optimized for online transactional processing (OLTP) and relational databases requiring ACID compliance. Amazon ElastiCache is an in-memory cache service that delivers sub-millisecond latency for read-heavy workloads like stock price updates.

Step-by-Step Solution

1
Analyze the first requirement for structured transactional logs with ACID compliance and SQL query support.
This indicates a relational database workload, which aligns with Amazon Relational Database Service (Amazon RDS).
Relational databases are structured to handle complex relationships, SQL queries, and ACID transactions.
2
Analyze the second requirement for caching frequently accessed data in-memory to achieve sub-millisecond latencies.
This indicates an in-memory caching workload, which aligns with Amazon ElastiCache.
In-memory caching stores data in RAM to bypass disk read latency and achieve sub-millisecond response times.

Key Concept

Identifying appropriate AWS database and caching services for relational transactional workloads and in-memory latency optimization.
Question 959Question →

A marketing analytics firm is migrating its platform to AWS. The firm requires a database solution that can perform complex analytical queries on petabyte-scale historical data to generate trend reports. Additionally, they need to implement a database caching layer to provide sub-millisecond query response times for frequently viewed dashboards. Which TWO AWS services should the firm use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Redshift; Amazon ElastiCache

Answer

Amazon Redshift and Amazon ElastiCache are the correct services for petabyte-scale data warehousing and sub-millisecond database caching, respectively.
Amazon Redshift is the ideal service for data warehousing and performing complex analytical queries on massive, petabyte-scale datasets. Amazon ElastiCache provides the required database caching layer, storing frequently accessed data in-memory to achieve sub-millisecond query response times.

Step-by-Step Solution

1
Identify the data warehousing requirement.
Amazon Redshift is identified as the optimized AWS service for running complex analytical queries on petabyte-scale historical datasets.
Relational databases (RDS) are optimized for transactional workloads (OLTP), while Redshift is designed specifically for analytics and data warehousing (OLAP).
2
Identify the database caching requirement.
Amazon ElastiCache is selected to store frequently accessed query results in-memory.
ElastiCache provides sub-millisecond response times by retrieving data from in-memory caches rather than querying disk-based databases repeatedly.

Key Concept

Selecting appropriate AWS database services based on workload characteristics (analytical vs. caching).
Question 960Question →

An operations team is investigating unauthorized configuration changes in their production environment. They need to determine: (1) what the exact rules of an Amazon EC2 security group were 48 hours ago compared to its current configuration, and (2) which IAM user executed the API call to modify the security group rules. Which combination of AWS services should the operations team use to investigate these two aspects of the change?

Show answer & explanation

Answer: AWS Config to compare the configuration states, and AWS CloudTrail to identify the user who made the API call.

Answer

AWS Config to compare the configuration states, and AWS CloudTrail to identify the user who made the API call.
AWS Config is designed to record resource configuration histories and compare changes over time, while AWS CloudTrail records API calls and user activity, making them the correct combination to address both requirements.

Step-by-Step Solution

1
Identify the service needed to track and compare configuration history.
AWS Config is selected because it continuously monitors and records AWS resource configurations, enabling comparison of historical states.
The requirement asks to determine the configuration of a security group 48 hours ago compared to its current state.
2
Identify the service needed to audit user identity and API activity.
AWS CloudTrail is selected because it records API calls, including the identity of the user who made the request.
The requirement asks to determine who made the API call to modify the security group rules.

Key Concept

Understanding the distinct roles of AWS Config (configuration history) and AWS CloudTrail (API auditing).
Estimated Time:2m 0s
PreviousPage 48 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin