All practice questions

A startup company is designing a new continuous integration and continuous delivery (CI/CD) pipeline to automate their software release process on AWS. The development team needs to select the appropriate AWS developer tools to accomplish two specific tasks: they must securely host their private Git-based repositories, and they must automatically compile their source code and run unit tests. Which two AWS services should the company select to fulfill these requirements? (Select TWO)

LuminaAero, an aerospace engineering company, runs high-performance simulation workloads for two weeks at the end of every quarter. On-premises, they must maintain a dedicated cluster of servers that remains idle for the rest of the quarter. Which concept of cloud economics represents the primary financial benefit if LuminaAero migrates this workload to AWS?

A healthcare enterprise needs to store sensitive patient files on Amazon S3. To meet compliance regulations, they require encryption at rest using dedicated, single-tenant cryptographic hardware where they maintain full control over the administration of the hardware security modules (HSMs). Which AWS service or feature should the enterprise configure to manage their encryption keys?

An organization is designing a security and administration model for a hybrid server fleet consisting of both Amazon EC2 instances and on-premises physical servers. The security team has defined the following compliance requirements:

- All interactive administrative sessions must be logged, recorded, and audited.
- No inbound ports (such as SSH port 22 or RDP port 3389) can be opened in security groups or on-premises firewalls.
- Bastion hosts must be avoided to minimize operational overhead and attack surface.
- Administrative access must be controlled strictly via AWS Identity and Access Management (IAM).

Which AWS service and feature should the operations team use to meet these requirements?

A startup is launching a new public website and needs to purchase a domain name and configure global Domain Name System (DNS) routing to direct users to their web application. Which AWS service provides both domain registration and DNS routing capabilities?

A company wants to adopt a standardized approach for provisioning their cloud infrastructure using templates. Additionally, they need to monitor CPU utilization and memory metrics of their deployed Amazon EC2 instances to ensure optimal performance.

Which two AWS services should the company use to satisfy these requirements? (Select TWO.)

A software engineering team is building a continuous integration and continuous delivery (CI/CD) process on AWS. They require a tool to define and automate their release stages—specifically, pulling source code, triggering test suites, and promoting successful builds to production. The tool must act as a central coordinator, integrating with external Git repositories, build environments, and deployment services without itself executing the compilation or deployment steps. Which AWS service should the team select to meet these orchestration requirements?

A company is reviewing the security posture of a database instance hosted within a private subnet of an Amazon Virtual Private Cloud (Amazon VPC). The database must only accept incoming queries from a specific application server located in a public subnet. To enforce defense-in-depth, the network security team wants to implement access controls at both the individual resource level and the boundary of the subnet. Which configuration of AWS network security features meets these requirements?

A cloud practitioner needs to pair different application deployment needs with their corresponding AWS compute services. Match each specific workload scenario to the most suitable AWS compute service.

A cloud architect at a media agency needs to manage AWS permissions for a team of 15 video editors and 5 system administrators. The video editors require read-only access to Amazon S3 buckets, while the administrators need full access to Amazon EC2 and Amazon RDS. Which of the following represents the most efficient way to manage and apply these permissions using AWS Identity and Access Management (IAM)?

A company is building a health monitoring portal. The portal requires a relational database to store patient contact information and appointment schedules, and a fast, scalable, non-relational database to store real-time health metrics from wearable devices. Additionally, the company wants to minimize database administration by choosing fully managed services. Which of the following AWS services should the company select to meet these requirements? (Select TWO.)

A company is preparing for an internal security audit of its AWS environment. The security team discovers that several developers are sharing a single set of access keys to perform administrative tasks, and an automated application is using the AWS account root user credentials to generate daily billing reports. Which of the following remediation steps should the security team take to align with AWS Identity and Access Management (IAM) best practices? (Select TWO.)

A biotechnology firm stores large, multi-gigabyte genomic sequence files on AWS. During the initial $30$ days of a research project, these files are accessed continuously. After this period, the access pattern becomes highly unpredictable; some files are accessed daily by global research teams, while others are not accessed at all for several months. The firm requires a storage solution that automatically minimizes costs based on changing access patterns, guarantees millisecond retrieval times for all data, and requires no manual analysis or lifecycle rules to manage. Which Amazon S3 storage class meets these requirements?

A digital marketing firm is deploying a content management application on Amazon EC2 instances. The application has two specific storage requirements:

1. A shared file system that allows multiple EC2 instances to simultaneously read and write web assets.
2. A high-performance, temporary block storage volume for processing intermediate scratch data that does not need to persist beyond the lifecycle of the instance.

Which two AWS storage options should the developer select to meet these requirements?

A company wants to manage a fleet of Amazon EC2 instances and on-premises servers from a single user interface, allowing them to automate software patching and run commands remotely. Which AWS service should the company use to meet this requirement?

A healthcare provider needs to store patient records in a specific country to comply with local data sovereignty laws. Which AWS Global Infrastructure component should the provider select to satisfy this compliance requirement?

A cloud practitioner is explaining the difference between AWS Regions and Availability Zones to a new system administrator. Which of the following statements are correct regarding these infrastructure components? (Select TWO.)

A gaming studio deploys a multiplayer matchmaking backend on Amazon EC2 instances inside a public subnet. The studio wants to ensure that only traffic from a specific list of trusted IP addresses can access these instances, and they want to minimize administrative overhead by relying on a stateful resource. Which AWS resource should be configured directly at the instance level to allow inbound traffic from these IP addresses while automatically permitting the corresponding outbound response traffic?

A retail company planning to launch a new e-commerce application needs to estimate the monthly infrastructure cost before deploying any resources. Additionally, the finance department requires a mechanism to receive email notifications if their actual monthly spend exceeds a set limit. Which of the following AWS tools should the company select to address these needs? (Select TWO.)

A marketing agency needs to store millions of graphic design files that will be accessed directly by public users via HTTP and HTTPS web links. Which AWS storage service is best suited to host these static assets?