Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 961Question →

A company wants to track changes made to their AWS resource configurations over time and audit which IAM user or service made the API calls that initiated those changes. Which of the following AWS services should the company use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Config; AWS CloudTrail

Answer

AWS Config and AWS CloudTrail
The service that tracks AWS resource configuration history and evaluates compliance is AWS Config. The service that records API activity and tracks the identity of users making changes is AWS CloudTrail. Using these two services together provides a complete audit trail of what changed and who changed it.

Step-by-Step Solution

1
Identify the requirement to track AWS resource configurations and their history over time.
AWS Config is identified as the primary service designed to record resource configuration histories and evaluate compliance against guidelines.
AWS Config monitors and records configuration changes, allowing administrators to see how resources were configured at any point in time.
2
Identify the requirement to audit API activity and determine who or what made the API calls causing the changes.
AWS CloudTrail is identified as the primary service that captures API activity, including the identity of the caller and the time of the event.
AWS CloudTrail provides an audit log of all actions taken via the AWS Management Console, SDKs, CLI, or other AWS services.

Key Concept

Distinguishing between AWS auditing, configuration monitoring, and performance monitoring services.
Question 962Question →

An e-commerce company is hosting its website on AWS. The company wants to reduce the latency for global website visitors downloading static files, such as image headers and stylesheets, which are stored in a central AWS Region. Which AWS Global Infrastructure component is designed to cache this content closer to users globally?

Show answer & explanation

Answer: Edge Locations

Answer

Edge Locations
The option specifying Edge Locations is correct because Edge Locations cache static and dynamic web content closer to users worldwide via Amazon CloudFront (AWS's Content Delivery Network), reducing latency and improving loading times.

Step-by-Step Solution

1
Analyze the primary requirement of the scenario.
The requirement is to reduce the download latency of static assets for users distributed globally.
Identifying the target goal helps differentiate between high-availability solutions and caching solutions.
2
Evaluate the AWS Global Infrastructure components designed for caching.
AWS Edge Locations host cache nodes for Amazon CloudFront, delivering static content from locations physically closer to the users.
This contrasts with Regions and Availability Zones, which host the core infrastructure resources rather than distributing cached assets.

Key Concept

AWS Global Infrastructure components and their roles in content delivery and latency optimization.
Question 963Question →

An organization is designing a network architecture to connect six corporate offices to ten Amazon VPCs. The technical requirements specify a centralized, hub-and-spoke connectivity model to simplify routing management. Additionally, the security team needs to enforce stateless traffic filtering at the boundary of each subnet within the VPCs. Which combination of AWS networking components best satisfies these requirements?

Show answer & explanation

Answer: AWS Transit Gateway to centralize VPC and office connectivity, combined with Network Access Control Lists (Network ACLs) for subnet-level filtering.

Answer

AWS Transit Gateway to centralize VPC and office connectivity, combined with Network Access Control Lists (Network ACLs) for subnet-level filtering.
AWS Transit Gateway acts as a cloud router, establishing a centralized hub-and-spoke network topology that simplifies routing management across multiple VPCs and on-premises networks. Network Access Control Lists (Network ACLs) are stateless firewall rules that operate at the subnet boundary, satisfying the requirement for stateless traffic filtering at the subnet level.

Step-by-Step Solution

1
Analyze the connectivity requirements.
The architecture requires connecting six offices and ten VPCs using a centralized hub-and-spoke model.
AWS Transit Gateway is designed to act as a central hub, simplifying connection management. VPC Peering requires point-to-point connections, which would result in a complex and difficult-to-manage mesh.
2
Analyze the security and filtering requirements.
The architecture requires stateless traffic filtering at the subnet boundary.
Network Access Control Lists (NACLs) are stateless and operate at the subnet boundary. Security Groups are stateful and operate at the instance/elastic network interface (ENI) level.
3
Combine the networking and security requirements.
AWS Transit Gateway provides the centralized hub-and-spoke connectivity, while Network ACLs provide the stateless subnet-level filtering.
This combination successfully meets all specified technical and security requirements of the scenario.

Key Concept

Centralized multi-VPC routing and subnet-level security filtering on AWS
Estimated Time:2m 0s
Question 964Question →

A logistics company is designing an application that receives daily delivery log files uploaded directly by thousands of drivers globally. These logs must be immediately available for analysis upon upload. After 30 days, the logs are rarely accessed but must be retained for 7 years to meet regulatory requirements. Which AWS storage solution meets these requirements most cost-effectively?

Show answer & explanation

Answer: Amazon S3 Standard with an S3 Lifecycle policy to transition the logs to Amazon S3 Glacier Flexible Retrieval after 30 days

Answer

Amazon S3 Standard with an S3 Lifecycle policy to transition the logs to Amazon S3 Glacier Flexible Retrieval after 30 days
The correct answer is the configuration using Amazon S3 Standard with an S3 Lifecycle policy. Amazon S3 is an object storage service designed to store and retrieve any amount of data from anywhere on the web, making it ideal for direct uploads from global clients. The S3 Lifecycle policy automatically moves the logs to Amazon S3 Glacier Flexible Retrieval after 30 days, which dramatically reduces storage costs for the remaining 7-year compliance period while meeting regulatory durability requirements.

Step-by-Step Solution

1
Analyze the scaling and accessibility requirements for incoming files.
The solution must handle concurrent uploads from thousands of global drivers, which points to Amazon S3 as the ideal entry point since it is designed for global scale, internet-accessible object uploads, and high availability.
Block storage (EBS) and file storage (EFS) require mounting to EC2 instances and are not designed for direct, concurrent internet uploads from client applications.
2
Evaluate the lifecycle and retention requirements.
Logs need immediate access for 30 days, followed by long-term compliance retention for 7 years.
An S3 Lifecycle policy can automatically transition objects from Amazon S3 Standard to Amazon S3 Glacier Flexible Retrieval after 30 days, minimizing storage costs while maintaining the objects in a durable archive for 7 years.

Key Concept

Selecting appropriate AWS storage classes and using S3 Lifecycle policies for cost optimization and compliance archiving.
Estimated Time:1m 30s
Question 965Question →

A startup is building a new application on AWS. They need a shared file storage solution that can be mounted simultaneously by multiple Linux EC2 instances, and they also need a persistent block storage volume that is attached to a single EC2 instance to host a database. Which two AWS storage services should the startup use to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon Elastic File System (Amazon EFS); Amazon Elastic Block Store (Amazon EBS)

Answer

Amazon Elastic File System (Amazon EFS) and Amazon Elastic Block Store (Amazon EBS)
The correct services are Amazon Elastic File System (Amazon EFS) and Amazon Elastic Block Store (Amazon EBS). Amazon EFS provides shared, elastic file storage accessible by multiple EC2 instances simultaneously, which matches the shared file system requirement. Amazon EBS provides persistent block storage volumes that attach to a single EC2 instance, which is required for hosting a persistent database.

Step-by-Step Solution

1
Identify the shared file storage requirement.
Amazon Elastic File System (Amazon EFS) supports the NFSv4 protocol and allows multiple EC2 instances to mount and access the file system concurrently.
To find a storage type that supports simultaneous connections from multiple Linux EC2 instances.
2
Identify the database block storage requirement.
Amazon Elastic Block Store (Amazon EBS) provides persistent, low-latency block volumes that can be attached to a single EC2 instance.
To find a storage type that provides persistent block-level storage suitable for a database attached to an EC2 instance.

Key Concept

AWS Storage Services
Question 966Question →

A company manages several AWS accounts within an AWS Organization. A system administrator notices that when deploying EC2 instances in the Availability Zone named 'us-east-1a' in Account A and Account B, the physical data centers hosting these instances might be different.

Which of the following statements explains this behavior and identifies the correct method to reference the same physical infrastructure across both accounts?

Show answer & explanation

Answer: AWS maps Availability Zone names (such as 'us-east-1a') independently for each AWS account to ensure resource distribution. To reference the same physical Availability Zone across accounts, the company must use the Availability Zone ID (AZ ID), such as 'use1-az1'.

Answer

AWS maps Availability Zone names (such as 'us-east-1a') independently for each AWS account to ensure resource distribution. To reference the same physical Availability Zone across accounts, the company must use the Availability Zone ID (AZ ID), such as 'use1-az1'.
The correct answer explains that AWS maps Availability Zone names (like 'us-east-1a') independently to physical infrastructure for each AWS account to ensure even resource distribution. To reference the same physical Availability Zone across accounts, the company must use the Availability Zone ID (AZ ID), such as 'use1-az1'.

Step-by-Step Solution

1
Understand why Availability Zone logical names vary.
AWS maps logical names to physical data centers independently for each account to distribute power, cooling, and compute resources evenly.
To prevent resource concentration in a single physical facility (e.g., everyone deploying to 'us-east-1a' and overloading it).
2
Identify the mechanism to consistently reference a physical Availability Zone.
The Availability Zone ID (AZ ID) remains constant across all AWS accounts in an organization.
AZ IDs (like 'use1-az1') uniquely map to the actual physical facility in a Region.
3
Select the option that explains the logical-to-physical mapping difference and recommends using AZ IDs.
The correct option is the one stating that AWS maps names independently and that AZ IDs must be used.
It aligns with AWS Global Infrastructure design principles for multi-account architectures.

Key Concept

AWS Availability Zone Logical Names vs. Physical AZ IDs
Question 967Question →

A financial technology company is migrating its batch reconciliation system to the AWS Cloud. In their on-premises environment, the team had to wait several months to procure and install server racks, power systems, and physical security controls in their private server room. After migrating to AWS, developers can provision and test infrastructure within minutes, eliminating the need to manage physical infrastructure and power systems. Which of the following are benefits of the AWS Cloud illustrated by this scenario? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Increase speed and agility; Stop spending money running and maintaining data centers

Answer

The benefits of the AWS Cloud demonstrated by this scenario are increasing speed and agility, and stopping spending money running and maintaining data centers.
The scenario highlights that the developers can now provision and test infrastructure within minutes instead of waiting months for physical hardware procurement, which directly aligns with increasing speed and agility. Furthermore, by no longer managing physical server racks, power systems, and security controls in a private server room, the company eliminates the overhead associated with running and maintaining data centers.

Step-by-Step Solution

1
Analyze the transition described in the scenario to identify improvements in speed and infrastructure management.
The team can now provision infrastructure in minutes instead of months, and they no longer manage physical server racks, power systems, or data center security.
This establishes the factual outcomes of the migration to map to cloud benefits.
2
Map these outcomes to the official six benefits of the AWS Cloud.
Reducing setup time from months to minutes aligns with 'Increase speed and agility'. Eliminating physical infrastructure management aligns with 'Stop spending money running and maintaining data centers'.
To identify which specific defined AWS Cloud benefits are shown.
3
Evaluate the incorrect options to confirm they represent misconceptions.
Trading variable expenses for capital expenses is the reverse of the actual model; vertical scaling does not constitute elasticity; monolithic design runs counter to loose coupling.
To ensure that the incorrect options are logically ruled out.

Key Concept

Identifying the six core benefits of AWS Cloud computing in real-world scenarios.
Estimated Time:1m 30s
Question 968Question →

A retail company is deploying a secure three-tier application within an Amazon VPC. The operations team needs to understand how to apply firewall-like controls at both the instance level and the subnet boundary. Which two of the following statements accurately describe the characteristics and behavior of Security Groups and Network Access Control Lists (Network ACLs) in this environment?

Select all that apply

Show answer & explanation

Answer: Security groups are stateful, meaning that allowed inbound traffic automatically permits the corresponding outbound response traffic.; Network ACLs are stateless, meaning that outbound response traffic must be explicitly allowed by a corresponding outbound rule.

Answer

Security groups are stateful, allowing corresponding outbound response traffic automatically, and Network ACLs are stateless, requiring return traffic to be explicitly allowed by an outbound rule.
Security groups are stateful network firewalls that operate at the instance level; once inbound traffic is allowed, return outbound traffic is permitted automatically. In contrast, Network ACLs operate at the subnet level and are stateless, requiring explicit outbound rules to permit return traffic.

Step-by-Step Solution

1
Analyze the stateful nature of Security Groups.
Confirm that Security Groups track session state, allowing outbound replies automatically if the inbound request was allowed.
This verifies that the statement about stateful Security Groups is correct.
2
Analyze the stateless nature of Network ACLs.
Confirm that Network ACLs do not track session state, meaning return traffic requires a separate outbound rule.
This verifies that the statement about stateless Network ACLs is correct.
3
Evaluate the levels of operation for both services.
Security Groups operate at the instance level (network interface), while Network ACLs operate at the subnet level.
This helps rule out incorrect statements claiming Security Groups operate at the subnet level.

Key Concept

Stateful vs. Stateless Network Security in AWS VPC
Question 969Question →

A financial analysis firm runs data-intensive rendering workloads on Amazon EC2 instances. The application requires extremely low-latency, temporary block-level storage to hold transient scratch data during calculations. The data does not need to persist beyond the lifecycle of the instance and can be easily regenerated if an instance fails. To achieve the highest input/output performance (IOPS) for this temporary data at the lowest cost, which storage option should the company select?

Show answer & explanation

Answer: Amazon EC2 Instance Store

Answer

Amazon EC2 Instance Store is the correct choice because it provides locally attached, temporary block-level storage optimized for ultra-low latency and high random IOPS, suited perfectly for scratch space and temporary caches at no extra charge beyond the instance host cost.
The correct answer is Amazon EC2 Instance Store. An instance store provides temporary block-level storage for your instance. This storage is located on disks that are physically attached to the host computer. It is ideal for temporary storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content, and offers very high IOPS and ultra-low latency at no additional cost.

Step-by-Step Solution

1
Analyze the storage requirements.
The workload requires temporary block-level storage for transient scratch data.
This helps filter out non-block options like object or file storage.
2
Identify performance and cost constraints.
The solution must achieve the highest IOPS at the lowest cost and tolerate data loss upon instance termination.
This defines the selection criteria for local vs. network-attached options.
3
Compare matching AWS storage options.
Amazon EC2 Instance Store is physically attached to the host, providing superior IOPS and lower latency than network-attached EBS, and since it is included in the instance cost, it is the most cost-effective choice for non-persistent scratch data.
This points to the instance store as the optimal solution matching all criteria.

Key Concept

Differentiating between block, file, and object storage types in AWS, specifically understanding the use cases for Amazon EC2 Instance Store versus persistent Amazon EBS volumes.
Estimated Time:1m 30s
Question 970Question →

An e-learning platform hosts its student database on Amazon RDS. The platform's security policy requires all data to be encrypted in transit between the application servers and the database instance. Under the AWS Shared Responsibility Model, which of the following is a customer responsibility for securing this data in transit?

Show answer & explanation

Answer: Enabling and enforcing SSL/TLS connections on the application client side when connecting to the database.

Answer

Enabling and enforcing SSL/TLS connections on the application client side when connecting to the database.
The correct answer is correct because configuration of database client applications, such as forcing SSL/TLS connections, is an application-level setting controlled and managed by the customer. AWS manages the underlying RDS infrastructure, but the customer must instruct their applications to connect securely.

Step-by-Step Solution

1
Analyze the security requirement and model boundaries
The requirement is to secure data in transit (encryption in transit) between the application tier and the database tier in AWS.
This establishes what is being protected and where the boundaries of control lie.
2
Distinguish between customer and AWS responsibilities under the Shared Responsibility Model
AWS is responsible for 'Security of the Cloud' (physical infrastructure, virtualization layer, hardware). The customer is responsible for 'Security in the Cloud' (operating system configuration, firewall rules, and application-level settings such as client-side connection parameters).
Enforcing secure client connections belongs to application configuration, which falls under customer responsibility.

Key Concept

Under the AWS Shared Responsibility Model, AWS manages host-level and network infrastructure security (including providing TLS/SSL capability for managed services), while customers are responsible for configuring application clients, enabling secure transmission protocols, and managing connection settings.
Estimated Time:1m 15s
Question 971Question →

A startup is deploying a three-tier web application on AWS and needs to accomplish two operational tasks:

1. Define the infrastructure resources (such as Amazon VPCs and RDS databases) in a declarative template file to ensure consistent deployments across test and production environments.
2. Enable the web application's backend code to programmatically upload user files to Amazon Simple Storage Service (Amazon S3).

Which two AWS services or tools are best suited to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS CloudFormation to define infrastructure resources in a template file; AWS Software Development Kit (AWS SDK) to programmatically upload files from the application code

Answer

AWS CloudFormation and AWS Software Development Kit (AWS SDK)
AWS CloudFormation enables Infrastructure as Code (IaC) to define resources in templates, ensuring consistent and repeatable deployments. The AWS SDK (Software Development Kit) provides APIs to programmatically integrate AWS services within application code, which is ideal for uploading files from the backend application.

Step-by-Step Solution

1
Identify the method required for defining infrastructure consistently using template files.
AWS CloudFormation is the service designed for Infrastructure as Code (IaC), allowing declarative resource definition in JSON or YAML templates.
This matches the requirement to deploy resources repeatedly and consistently across multiple environments.
2
Identify the method required for programmatically interacting with AWS services from application backend code.
The AWS SDK (Software Development Kit) provides language-specific libraries to integrate AWS actions directly into application code.
This matches the requirement to programmatically upload files to Amazon S3 from the backend code.

Key Concept

AWS deployment and operating methods including Infrastructure as Code (IaC) and programmatic access.
Question 972Question →

An organization wants to grant their third-party auditing team temporary access to audit their AWS cloud resources for compliance. At the same time, the organization needs to allow their database administrators to manage Amazon RDS resources without sharing credentials or using individual user policies. Which of the following configurations align with AWS Identity and Access Management (IAM) best practices? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Assign the database administrators to an IAM group and attach an IAM policy to that group that grants permissions to manage Amazon RDS.; Create an IAM role for the third-party auditors with a trust policy that allows the external audit account to assume the role.

Answer

Assigning database administrators to an IAM group with an attached IAM policy, and creating an IAM role for the third-party auditors to assume.
Assigning database administrators to an IAM group and attaching an IAM policy to the group is the recommended way to manage human user permissions efficiently. Creating an IAM role with a trust policy for the third-party auditors enables secure cross-account delegation with temporary credentials, avoiding the risk of credential leakage.

Step-by-Step Solution

1
Identify the proper access mechanism for the database administrators.
Assign database administrators to an IAM group and attach an IAM policy to that group.
Managing permissions collectively through groups is an AWS best practice that simplifies administration compared to managing individual user policies.
2
Identify the proper access mechanism for external third-party auditors.
Create an IAM role with a trust policy allowing the external auditors to assume it.
IAM roles provide temporary security credentials for cross-account access, eliminating the need to share long-term credentials.

Key Concept

AWS IAM access control best practices including group-based permissions and cross-account delegation using roles.
Question 973Question →

A logistics company is designing the infrastructure for two new applications on AWS:

1. A containerized API backend that needs to run in a serverless manner, meaning the company wants to run containers without managing or provisioning virtual servers.
2. A legacy routing application that requires direct access to the underlying operating system to configure custom kernel parameters and install proprietary system-level packages.

Which two AWS compute services should the company select to meet these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: AWS Fargate; Amazon Elastic Compute Cloud (Amazon EC2)

Answer

The correct services are AWS Fargate and Amazon Elastic Compute Cloud (Amazon EC2).
AWS Fargate satisfies the first requirement because it is a serverless compute engine for containers that removes the need to provision or manage virtual machines. Amazon Elastic Compute Cloud (Amazon EC2) satisfies the second requirement because it provides virtual servers in the cloud with full administrative (root) access, enabling the customization of operating system settings, kernel parameters, and system-level software dependencies.

Step-by-Step Solution

1
Analyze the requirement for the first application.
The first application requires a serverless containerized backend where containers are run without managing virtual servers.
This requirement aligns directly with AWS Fargate, which automatically provisions and manages the compute resources for containers.
2
Analyze the requirement for the second application.
The second application is a legacy workload that requires direct operating system access, custom kernel configuration, and proprietary system packages.
This requirement aligns with Amazon EC2, which provides full virtual machine root access, allowing extensive customization at the operating system and kernel levels.

Key Concept

Selecting AWS compute services based on the level of administrative control and application architecture (containers vs. virtual machines).
Estimated Time:1m 30s
Question 974Question →

A developer wants to deploy a Node.js web application on AWS by uploading the application code. They want the service to automatically handle resource provisioning, load balancing, auto-scaling, and health monitoring, while still retaining full control over the underlying AWS resources. Which AWS service should be used to meet these requirements with the least configuration effort?

Show answer & explanation

Answer: AWS Elastic Beanstalk

Answer

AWS Elastic Beanstalk
AWS Elastic Beanstalk is a Platform as a Service (PaaS) that allows developers to upload their application code and automatically handles the provisioning of servers, database connections, load balancers, auto-scaling, and health monitoring, while still letting developers maintain full control over the underlying AWS resources.

Step-by-Step Solution

1
Analyze the scenario requirement: deployment of a web application from code upload with automatic infrastructure management.
The requirement matches a Platform as a Service (PaaS) model where infrastructure tasks are managed automatically.
This helps filter out services that require manual infrastructure provisioning.
2
Compare the services to determine which one hosts applications directly from code with minimal configuration.
AWS Elastic Beanstalk is the primary PaaS offering on AWS for web applications, meeting all criteria.
Other services either require manual management (Amazon EC2) or template-based infrastructure definitions (AWS CloudFormation).

Key Concept

AWS Elastic Beanstalk as a PaaS deployment tool
Question 975Question →

A logistics company operates an online shipping portal backed by a relational database. Due to a surge in user traffic, the database is experiencing high read latency when retrieving frequently accessed tracking information. The company wants to add an in-memory caching layer to store these frequent queries and reduce the load on the database. Which AWS service is best suited to meet this requirement?

Show answer & explanation

Answer: Amazon ElastiCache

Answer

Amazon ElastiCache
Amazon ElastiCache is a web service that makes it easy to set up, manage, and scale distributed in-memory data stores or caches in the cloud. It improves the performance of web applications by allowing retrieval of information from fast, managed, in-memory caches, instead of relying solely on slower disk-based databases.

Step-by-Step Solution

1
Analyze the business and technical requirements.
The requirement is to implement an in-memory caching layer to speed up read queries and reduce the read load on a relational database.
Identifying the primary function needed (in-memory caching) helps narrow down the service choices.
2
Evaluate the available AWS database and caching services against the requirement.
Amazon ElastiCache is specifically designed for in-memory caching (Redis or Memcached), whereas DynamoDB is a NoSQL database, Redshift is a data warehouse, and Aurora is a relational database.
Matching service capabilities to the requirement ensures the correct architecture choice is made.

Key Concept

In-memory caching with Amazon ElastiCache to improve performance and reduce database load.
Question 976Question →

An online education provider is deploying a video processing application on Amazon EC2. The architecture has two distinct storage requirements:

* A storage tier to host course video assets that are accessed frequently for the first 30 days, then accessed rarely, but must remain available for millisecond retrieval.
* A temporary block storage location with the lowest possible latency to serve as a scratch space for rendering video thumbnails during transcoding, where data persistence is not required.

Which two storage solutions should the company use to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon S3 Standard-Infrequent Access (S3 Standard-IA) to host the course video assets; An Amazon EC2 Instance Store volume to serve as the temporary scratch space

Answer

The correct answers are the option to use Amazon S3 Standard-Infrequent Access (S3 Standard-IA) to host the course video assets and the option to use an Amazon EC2 Instance Store volume to serve as the temporary scratch space.
Amazon S3 Standard-Infrequent Access (S3 Standard-IA) is the most cost-effective object storage tier for video assets that are rarely accessed but still require rapid, millisecond-level retrieval. An Amazon EC2 Instance Store volume is the ideal selection for temporary scratch space because it provides high-throughput, low-latency local block storage directly attached to the host, and its ephemeral nature aligns with the requirement that data does not need to persist.

Step-by-Step Solution

1
Analyze the first requirement: video assets that are accessed frequently for 30 days, then rarely, requiring millisecond retrieval.
Identify that Amazon S3 is the standard object storage for hosting web-accessible video assets, and S3 Standard-Infrequent Access (S3 Standard-IA) specifically fits the access pattern of low frequency but immediate (millisecond) retrieval.
This minimizes storage costs while maintaining the required rapid retrieval performance.
2
Analyze the second requirement: temporary block storage with the lowest latency for scratch space during rendering, where data persistence is not needed.
Identify that an EC2 Instance Store volume offers the lowest possible block storage latency because it is physically attached to the host hardware, and its ephemeral nature is acceptable since data durability is not required.
Instance Store provides superior I/O performance for temporary processing tasks compared to network-attached alternatives.

Key Concept

Selecting appropriate AWS storage services (Amazon S3 Standard-IA and Amazon EC2 Instance Store) based on access patterns, performance, durability, and cost constraints.
Question 977Question →

A startup's development team wants to establish a continuous integration and continuous delivery (CI/CD) workflow on AWS. They need a service that can coordinate the entire software release process by automatically retrieving source code from a repository, triggering a build tool, running unit tests, and deploying the application to Amazon EC2 instances. Which AWS service is designed to model, visualize, and automate these end-to-end pipeline stages?

Show answer & explanation

Answer: AWS CodePipeline

Answer

AWS CodePipeline
AWS CodePipeline is designed specifically to model, visualize, and automate the steps required to release software. It functions as the workflow orchestrator that coordinates pulling code from a source repository, sending it to a build tool like AWS CodeBuild, and executing deployment through a service like AWS CodeDeploy.

Step-by-Step Solution

1
Analyze the business and technical scenario requirements.
The scenario requires a service that can coordinate, model, visualize, and automate different stages of a continuous integration and continuous delivery (CI/CD) release pipeline (sourcing, building, testing, deploying).
Understanding the core requirement helps distinguish between services that perform individual tasks (like building or deploying) and the service that orchestrates the entire workflow.
2
Evaluate the capabilities of the developer tools mentioned.
AWS CodePipeline functions as the workflow orchestrator. AWS CodeBuild handles compiling/testing. AWS CodeDeploy handles deployment. AWS CloudFormation handles infrastructure provisioning.
This step identifies which service fits the specific role of end-to-end automation and visualization of the workflow.

Key Concept

AWS CodePipeline is the orchestration service for CI/CD workflows, coordinating build, test, and deployment phases.
Question 978Question →

A retail company is designing a new microservices-based application. To follow the AWS architectural design principle of loose coupling and avoid a single point of failure, the developers want to decouple the services by using separate, specialized databases. The order processing service requires a relational database to support ACID transactions, while the session management service requires a low-latency, schema-free database. Which combination of AWS database services should the company use to meet these requirements?

Show answer & explanation

Answer: Amazon RDS for order processing and Amazon DynamoDB for session management

Answer

Amazon RDS for order processing and Amazon DynamoDB for session management
The combination of Amazon RDS and Amazon DynamoDB correctly matches the requirements of both services. Amazon RDS supports the ACID-compliant relational transactions needed for order processing, while DynamoDB provides the fast, schema-free storage needed for session management. Additionally, using separate databases for each microservice adheres to the AWS design principle of loose coupling.

Step-by-Step Solution

1
Analyze the requirements for the order processing service.
The order processing service requires a relational database for ACID transactions, which points to Amazon RDS (Relational Database Service) or Amazon Aurora.
Relational databases are optimized for transactional consistency, schemas, and complex joins.
2
Analyze the requirements for the session management service.
The session management service requires a low-latency, schema-free database, which points to Amazon DynamoDB.
NoSQL key-value databases are designed for high-speed, scalable, and schema-less data storage.
3
Evaluate the architectural pattern against the AWS loose coupling principle.
Using separate databases (Amazon RDS and Amazon DynamoDB) keeps the microservices decoupled and prevents a single point of failure.
Decoupled databases allow each service to scale, deploy, and fail independently, aligning with AWS best practices.

Key Concept

AWS Database Services Selection and Decoupled Architecture
Question 979Question →

A ride-sharing platform is planning to migrate its core application workload to AWS. Currently, the company's infrastructure engineers spend a significant portion of their time managing physical server racks, power supplies, and HVAC systems in their leased facilities. By moving to AWS, the company aims to allow its engineering team to focus solely on optimizing driver-matching algorithms and improving customer experience. Which AWS Cloud benefit is directly demonstrated by this migration?

Show answer & explanation

Answer: Stop spending money running and maintaining data centers

Answer

Stop spending money running and maintaining data centers
The correct option is correct because the company is shifting its engineers away from the operational heavy lifting of racking, stacking, powering, and cooling physical servers. This enables them to focus on core business differentiators (such as driver-matching algorithms), which represents the AWS benefit of stopping the running and maintaining of data centers.

Step-by-Step Solution

1
Identify the operational challenge described in the scenario.
The infrastructure engineers are spending time on physical facility tasks like server racks, power supplies, and HVAC.
Understanding what tasks are being eliminated is key to mapping them to the correct AWS Cloud benefit.
2
Map the elimination of physical facilities tasks and redirection of engineering focus to the official AWS Cloud benefits.
This matches the benefit of letting AWS handle physical infrastructure maintenance so the company can focus on business-specific projects.
Stopping the management of physical infrastructure represents the benefit of stopping spending money and effort running and maintaining data centers.

Key Concept

Stop spending money running and maintaining data centers
Question 980Question →

An organization wants to run its applications using serverless compute services to avoid the administrative overhead of managing and patching operating systems. Which of the following AWS compute services are serverless? (Select TWO)

Select all that apply

Show answer & explanation

Answer: AWS Lambda; AWS Fargate

Answer

AWS Lambda and AWS Fargate are the correct serverless compute services.
AWS Lambda and AWS Fargate are serverless compute options. AWS Lambda allows running code in response to events without managing any infrastructure. AWS Fargate is a serverless compute engine that deploys containers without requiring you to manage the underlying EC2 instances or container hosts.

Step-by-Step Solution

1
Determine the defining characteristic of serverless compute in AWS, which is the removal of the need to manage, patch, or scale the underlying server instances.
AWS Lambda and AWS Fargate are identified as serverless options since AWS manages the infrastructure stack completely.
This establishes the criteria for evaluating the choices.
2
Evaluate Amazon EC2 and Amazon Lightsail against the serverless definition.
Amazon EC2 and Amazon Lightsail are excluded because they require manual management and provisioning of virtual servers.
Correctly identifying non-serverless services ensures the wrong choices are eliminated.

Key Concept

Distinguishing between serverless compute services and server-based virtual instance offerings.
PreviousPage 49 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin