Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 1021Question →

A financial services company needs to establish a continuous governance and compliance strategy for its Amazon EC2 instance fleet. The operations team has two key requirements: first, they must automatically detect and report when any instance's resource configurations deviate from internal security standards; second, they must orchestrate and execute software patching across the entire fleet during specific, low-traffic time windows.

Which of the following AWS services should be selected to implement this solution? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Config; AWS Systems Manager

Answer

AWS Config and AWS Systems Manager are the correct choices.
AWS Config and AWS Systems Manager satisfy the requirements. AWS Config allows the continuous auditing and compliance monitoring of resource configurations. AWS Systems Manager, via Patch Manager and Maintenance Windows, automates the patching of operating systems during low-traffic windows.

Step-by-Step Solution

1
Analyze the requirement for automatic configuration drift detection and compliance auditing.
Identify that AWS Config continuously monitors and records configuration changes and evaluates them against defined rules.
AWS Config is specifically built to assess, audit, and evaluate resource configurations.
2
Analyze the requirement for orchestrating and automating software patching within scheduled time windows.
Identify that AWS Systems Manager (using Patch Manager and Maintenance Windows) is the appropriate tool.
AWS Systems Manager simplifies resource and application management, shortens maintenance windows, and automates OS patch execution.
3
Evaluate and rule out incorrect management and provisioning services.
Eliminate AWS CloudFormation, AWS Elastic Beanstalk, and AWS CloudTrail as they do not support operational OS-level patching or runtime configuration compliance auditing.
Each of these services serves a different primary function such as infrastructure provisioning, application deployment, or API activity logging.

Key Concept

Selecting appropriate AWS management and governance tools based on operational compliance and patching requirements.
Question 1022Question →

A company's cloud engineering team wants to allow non-technical business units to deploy pre-approved, standardized AWS environments (such as a specific Amazon RDS database paired with an Amazon EC2 instance) through a self-service portal. The team needs to maintain administrative control, enforce compliance, and manage versioning of these products. Which AWS service should the company use to meet this requirement?

Show answer & explanation

Answer: AWS Service Catalog

Answer

AWS Service Catalog
AWS Service Catalog is correct because it enables organizations to manage catalogs of approved IT services. It allows administrators to group resources into portfolios, apply constraints, control user access, and manage versions, enabling self-service provisioning for end-users.

Step-by-Step Solution

1
Analyze the business requirements: self-service deployment of pre-approved IT environments, centralized governance, compliance enforcement, and version control of product offerings.
Identified the need for a curated governance portal rather than low-level infrastructure configuration.
This narrows down the choice to services providing centralized catalog management.
2
Compare AWS Services that manage resource creation and catalog management.
Recognized that AWS CloudFormation handles the templates, but AWS Service Catalog provides the catalog, compliance constraints, and self-service wrapper for non-technical users.
Distinguishing between raw Infrastructure as Code and curated governance services is essential for AWS Certified Cloud Practitioner governance scenarios.

Key Concept

AWS Service Catalog enables organizations to create, manage, and govern catalogs of approved IT services.
Question 1023Question →

A freelance web developer is building a prototype for a small local business. The project requires a single virtual private server with a pre-configured Node.js development stack, a database, and a predictable monthly cost that bundles compute, storage, and data transfer. Which AWS compute service is designed to meet these requirements with minimal configuration overhead?

Show answer & explanation

Answer: Amazon Lightsail

Answer

Amazon Lightsail
Amazon Lightsail is the correct service because it is specifically designed for developers and small businesses needing an easy-to-use virtual private server (VPS) solution. It packages compute power, storage, database, and networking resources into a single, predictable monthly price, offering pre-configured application templates such as Node.js.

Step-by-Step Solution

1
Analyze the business requirements for a simple VPS hosting environment, pre-configured software stack, database, and a predictable, bundled monthly cost.
Identify the need for a lightweight, simplified hosting environment with predictable pricing rather than fine-grained infrastructure management.
Helps narrow down the choice between general-purpose compute, serverless compute, and container orchestration.
2
Compare the candidate AWS compute services against these criteria.
Amazon Lightsail provides a simplified console, pre-configured stacks, and bundled monthly pricing. Amazon EC2 requires manual VM management and has variable pricing. AWS Lambda is serverless/event-driven. AWS Elastic Beanstalk manages standard AWS resources with variable, resource-based pricing.
Validates that only Amazon Lightsail fits all constraints, especially the bundled predictable pricing and minimal configuration overhead.

Key Concept

Understanding AWS compute service use cases and selecting Amazon Lightsail for simple virtual private server (VPS) workloads with predictable pricing.
Estimated Time:1m 0s
Question 1024Question →

A cloud practitioner needs to configure a network security control that operates at the subnet level of an Amazon VPC to block traffic from a specific IP address. Which AWS service or feature should be used to meet this requirement?

Show answer & explanation

Answer: Network Access Control List (Network ACL)

Answer

Network Access Control List (Network ACL)
The correct answer is the Network Access Control List (Network ACL). A Network ACL is a stateless firewall that operates at the subnet boundary of an Amazon VPC. It supports both allow rules and deny rules, which allows a cloud practitioner to explicitly define a rule that blocks inbound or outbound traffic from a specific IP address.

Step-by-Step Solution

1
Analyze the operational boundary requirement in the scenario.
The firewall or security control must operate at the subnet level.
The requirement specifies blocking traffic at the subnet boundary of an Amazon VPC.
2
Determine the rule behavior needed to block a specific IP address.
The control must support explicit deny rules.
Blocking an IP address requires a firewall that can evaluate and reject traffic from that specific address.
3
Evaluate the capabilities of Amazon VPC security features.
Network Access Control Lists (Network ACLs) operate at the subnet level and support both allow and deny rules, while security groups operate at the instance level and only support allow rules.
This makes Network ACLs the correct tool for blocking specific IP addresses at the subnet boundary.

Key Concept

Subnet-level network security in AWS using Network Access Control Lists (Network ACLs)
Estimated Time:45s
Question 1025Question →

A logistics company is evaluating the financial impact of migrating its tracking application to the AWS Cloud. The company's financial analyst notes that because AWS aggregates usage from millions of customers, the cloud provider can achieve purchasing efficiencies that are passed back to customers as lower pay-as-you-go rates. Which benefit of the AWS Cloud is described by this characteristic?

Show answer & explanation

Answer: Benefit from massive economies of scale

Answer

Benefit from massive economies of scale
The benefit of massive economies of scale is defined by AWS's ability to aggregate usage from millions of customers, leading to purchasing efficiencies that translate into lower pay-as-you-go prices for all customers.

Step-by-Step Solution

1
Analyze the business scenario to identify the source of the cost reduction.
The cost reduction is driven by AWS aggregating usage from millions of customers, leading to purchasing efficiencies and lower pay-as-you-go rates.
Understanding the driver of the benefit helps distinguish between different cloud financial and operational advantages.
2
Map the identified driver to the official list of six AWS Cloud benefits.
The driver matches the definition of 'Benefit from massive economies of scale'.
AWS documentation explicitly states that aggregating customer usage yields higher economies of scale and lower pay-as-you-go pricing.

Key Concept

AWS Cloud Benefit: Massive Economies of Scale
Estimated Time:1m 0s
Question 1026Question →

A logistics company is designing its cloud infrastructure. The company needs to deploy two workloads: a lightweight API backend that runs short, event-driven processes lasting under a minute, and a custom database system that requires deep access to the underlying operating system kernel for performance tuning. Which of the following compute options and responsibility assignments should the company choose to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploy the lightweight API backend on AWS Lambda, as it is a serverless service designed for short-running, event-driven workloads.; Deploy the custom database system on Amazon Elastic Compute Cloud (Amazon EC2), as it provides full administrative control over the guest operating system and kernel.

Answer

The company should deploy the lightweight API backend on AWS Lambda and the custom database system on Amazon EC2.
The correct options are selecting AWS Lambda for the short, event-driven API backend and Amazon EC2 for the custom database requiring kernel access. AWS Lambda is designed to run event-driven code serverlessly with automatic scaling, making it optimal for short-running APIs. Amazon EC2 provides full control over the virtual machine instance, including root-level access to the guest operating system, which is required to modify kernel configurations.

Step-by-Step Solution

1
Analyze the requirements for the lightweight API backend.
The API backend runs short, event-driven tasks under one minute. This aligns with AWS Lambda, a serverless compute service designed for rapid scaling and short execution times.
Matching workload execution profile to the correct compute model.
2
Analyze the requirements for the custom database system.
The database needs deep OS kernel access for performance tuning. Amazon EC2 is a virtual machine service (IaaS) that grants full root/administrator control over the OS.
Matching administrative access requirements to the appropriate compute service.
3
Evaluate the administrative responsibilities for the selected services.
Under the shared responsibility model, the customer must patch and manage the guest OS on EC2. Services like Fargate and Lambda abstract OS access entirely.
Verifying configuration management and OS ownership limits.

Key Concept

AWS Compute Services
Question 1027Question →

A smart home IoT startup is deploying an application on AWS to collect and store telemetry data. The startup's security policy requires encrypting all data at rest using AWS Key Management Service (AWS KMS). Under the AWS Shared Responsibility Model, which of the following represent the responsibilities of the customer and AWS regarding encryption and key management? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Defining the key policies that control access to AWS Key Management Service (AWS KMS) customer managed keys; Maintaining the physical security and infrastructure of the hardware security modules (HSMs) that back AWS Key Management Service (AWS KMS)

Answer

The customer is responsible for defining the key policies that control access to customer managed keys, and AWS is responsible for maintaining the physical security and infrastructure of the hardware security modules (HSMs) backing AWS Key Management Service (AWS KMS).
Defining key policies is a customer responsibility under the Shared Responsibility Model to secure access to customer managed keys. AWS is responsible for the physical security and operations of the underlying HSM infrastructure that supports AWS KMS.

Step-by-Step Solution

1
Identify the shared responsibility boundary for AWS Key Management Service (AWS KMS).
AWS manages the physical security, hardware, and operational lifecycle of the HSMs, while the customer manages key configuration, access control, and usage.
AWS KMS is a managed service, meaning AWS handles infrastructure management while the customer manages data and configuration.
2
Compare customer managed keys access control.
Customers must define policies (key policies, IAM policies) to specify who can use or administer the keys.
AWS does not automatically configure user access permissions for customer managed keys.
3
Analyze physical hardware and service differences.
AWS CloudHSM, not AWS KMS, provides dedicated, single-tenant HSMs with OS-level control. Also, imported key material is managed and rotated by the customer, not AWS.
Distinguishing KMS from CloudHSM and understanding key rotation limitations ensures correct mapping of responsibilities.

Key Concept

Shared responsibility and operational characteristics of AWS Key Management Service (AWS KMS) versus AWS CloudHSM.
Estimated Time:1m 30s
Question 1028Question →

A digital marketing agency, ApexCampaigns, runs high-volume ad-serving applications. The traffic to these applications fluctuates unpredictably based on client campaign launches, with massive surges for a few days followed by periods of low activity. The agency is planning to migrate its infrastructure from an on-premises colocation facility to AWS to improve cost efficiency. Which two of the following options describe the cloud economic benefits of migrating this workload to AWS? (Select two.)

Select all that apply

Show answer & explanation

Answer: The shift from capital expenses (CapEx) to variable operating expenses (OpEx) eliminates the need for large upfront infrastructure investments.; Leveraging cloud elasticity allows the agency to dynamically scale compute capacity down during low-traffic periods to avoid paying for idle resources.

Answer

The correct options are the statements regarding the shift from capital expenses (CapEx) to variable operating expenses (OpEx) which eliminates upfront infrastructure investments, and leveraging cloud elasticity to dynamically scale compute capacity down during low-traffic periods to avoid paying for idle resources.
The correct answers highlight the shift from capital expenses to operating expenses and the use of elasticity. Shifting from CapEx to OpEx allows the agency to avoid large upfront payments for hardware they may not fully utilize. Utilizing cloud elasticity ensures that capacity scales down during low-traffic periods, preventing charges for idle resources.

Step-by-Step Solution

1
Analyze the business scenario and identify the workload pattern.
The workload fluctuates unpredictably, with massive spikes during marketing campaigns and low activity in between.
Understanding the workload pattern helps in determining how cloud economics can optimize costs.
2
Evaluate the options against AWS cloud economics principles, specifically CapEx vs OpEx and elasticity.
The shift from CapEx to OpEx reduces upfront costs, and elasticity matches resources to demand to prevent paying for idle capacity.
These are two core economic benefits of AWS that directly address the agency's goals of cost efficiency and managing fluctuating traffic.

Key Concept

AWS Cloud economics benefits, focusing on the shift from capital expenses (CapEx) to operating expenses (OpEx) and the cost efficiency driven by cloud elasticity.
Question 1029Question →

An educational institution is deploying a web portal on AWS. The portal requires a shared storage directory where multiple web servers (EC2 instances) can read and write media files at the same time. Additionally, the portal needs a dedicated, persistent storage volume attached to a single database server (EC2 instance) to store transaction logs.

Which TWO AWS storage services should the institution choose to satisfy these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Elastic File System (Amazon EFS); Amazon Elastic Block Store (Amazon EBS)

Answer

Amazon Elastic File System (Amazon EFS) and Amazon Elastic Block Store (Amazon EBS)
Amazon Elastic File System (Amazon EFS) is a fully managed file storage service that supports the Network File System (NFS) protocol, allowing multiple EC2 instances to access the storage concurrently. Amazon Elastic Block Store (Amazon EBS) provides high-performance, persistent block storage volumes designed for a single EC2 instance, making it suitable for running databases and storing transaction logs.

Step-by-Step Solution

1
Identify the storage requirements for the shared media directory.
The requirements specify a shared storage directory that multiple EC2 instances can read and write to simultaneously.
This points to a shared file storage solution, which is addressed by Amazon Elastic File System (Amazon EFS).
2
Identify the storage requirements for the database server.
The requirements specify a dedicated, persistent storage volume for a single EC2 instance to store transaction logs.
This points to a persistent block storage solution, which is addressed by Amazon Elastic Block Store (Amazon EBS).

Key Concept

Selecting appropriate AWS storage services based on file-sharing and persistence needs.
Question 1030Question →

A company needs to run a short data processing script each time a new file is uploaded to Amazon S3. The script executes in less than a minute, and the company wants to pay only for the exact duration of the script's execution without provisioning or managing virtual servers. Which AWS service should the company use to meet these requirements?

Show answer & explanation

Answer: AWS Lambda

Answer

AWS Lambda
AWS Lambda is the correct choice because it is a serverless, event-driven compute service. It runs code in response to triggers like Amazon S3 file uploads and charges only for the exact duration of the execution, eliminating the need to provision or manage servers.

Step-by-Step Solution

1
Identify the key workload requirements in the scenario.
The requirements are: event-driven trigger (S3 file upload), short execution time (under a minute), no server management, and paying only for the exact run time.
This helps filter out compute services that require server provisioning or charge flat rates.
2
Match the requirements to the correct AWS compute service.
AWS Lambda fits these requirements perfectly as it is an event-driven, serverless compute service billed down to the millisecond of execution.
Choosing the service that requires zero administration and offers sub-second billing aligns with the goal.

Key Concept

AWS Lambda is an event-driven, serverless compute service that runs code without provisioning or managing servers, billing only for compute time consumed.
Question 1031Question →

A financial services firm wants to review their historical AWS spending trends from the past quarter to identify which Amazon EC2 instance families are driving their monthly costs. Which AWS service or tool should the firm use to visualize and analyze this historical data?

Show answer & explanation

Answer: AWS Cost Explorer

Answer

AWS Cost Explorer
AWS Cost Explorer is the correct tool because it provides an interactive user interface to visualize, understand, and manage AWS costs and usage over time, allowing the firm to filter by service type (such as Amazon EC2) and instance type over a historical period (such as the past quarter).

Step-by-Step Solution

1
Identify the primary requirement in the scenario.
The firm needs to analyze and visualize historical spending trends and cost drivers from the past quarter.
This establishes that the solution must be a retrospective cost analysis tool with visualization capabilities.
2
Evaluate the available tools against the historical analysis requirement.
AWS Cost Explorer is the default tool for visualizing and graphing historical costs, whereas other options are for budgeting alerts, pre-deployment estimation, or billing rate customization.
Choosing the correct tool based on its intended primary function ensures the firm can effectively review their EC2 spending trends.

Key Concept

AWS Cost Explorer is the primary tool for visualizing, graphing, and analyzing historical AWS cost and usage patterns.
Estimated Time:45s
Question 1032Question →

A company is preparing for an operational review of their cloud environment. They want to review their workload architecture against AWS best practices and design principles. They also want to receive automated, real-time recommendations to reduce costs by identifying idle resources. Which two AWS tools or services should the company use? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Well-Architected Tool; AWS Trusted Advisor

Answer

AWS Well-Architected Tool and AWS Trusted Advisor
The correct services are AWS Well-Architected Tool and AWS Trusted Advisor. The AWS Well-Architected Tool provides a structured process for reviewing architectures against established AWS design principles and pillars. AWS Trusted Advisor scans the AWS infrastructure to provide real-time recommendations, including identifying idle resources to optimize costs.

Step-by-Step Solution

1
Identify the service needed to review workloads against best practices and design principles.
AWS Well-Architected Tool matches this need, as it guides users through architectural pillars (security, reliability, cost optimization, etc.).
This tool is specifically designed to compare cloud workloads against AWS architectural best practices.
2
Identify the service that offers automated checks and real-time recommendations to optimize costs by finding idle resources.
AWS Trusted Advisor provides these automated checks and recommendations.
Trusted Advisor checks your AWS environment to find cost-saving opportunities like idle or underutilized resources.

Key Concept

Identifying AWS management and optimization tools that evaluate workloads and recommend improvements
Question 1033Question →

A human resources software-as-a-service (SaaS) provider experiences extreme compute demands only during the final three days of each month when processing payroll for all of its clients. The rest of the month, the system requires minimal resources. The company wants to optimize its architecture on AWS to avoid paying for idle infrastructure and to eliminate the need to predict peak workloads.

Which of the following AWS Cloud benefits most directly align with these goals? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Stop guessing capacity; Trade fixed expense for variable expense

Answer

The benefits of 'Stop guessing capacity' and 'Trade fixed expense for variable expense' are correct.
The correct options are 'Stop guessing capacity' and 'Trade fixed expense for variable expense'. The SaaS provider has a periodic, variable workload that runs for only three days a month. By choosing 'Stop guessing capacity', they can leverage auto-scaling to dynamically handle the payroll workload without having to predict peak capacity beforehand. By choosing 'Trade fixed expense for variable expense', they pay only for the compute capacity they consume during those three days, avoiding the fixed cost of owning and running idle servers during the rest of the month.

Step-by-Step Solution

1
Analyze the business requirements of the SaaS provider.
The company has a highly variable workload (running only 3 days a month) and wants to avoid paying for idle infrastructure while eliminating the need to predict peak workloads.
Understanding the specific operational and financial challenges is necessary to map them to the corresponding AWS Cloud benefits.
2
Identify the AWS benefit that addresses variable workload sizing and prediction.
The benefit 'Stop guessing capacity' allows auto-scaling to meet actual demand, preventing under-provisioning or over-provisioning.
This directly resolves the need to predict peak workloads for the monthly payroll run.
3
Identify the AWS benefit that addresses cost optimization for idle resources.
The benefit 'Trade fixed expense for variable expense' allows paying only for resources used rather than investing in physical infrastructure.
This directly resolves the requirement to avoid paying for idle infrastructure during off-peak times.

Key Concept

AWS Cloud Benefits (Stop guessing capacity and Trade fixed expense for variable expense)
Question 1034Question →

A company is launching a database on a single Amazon Elastic Compute Cloud (Amazon EC2) instance. The database requires a persistent block storage volume that behaves like a physical hard drive and retains its data even if the EC2 instance is stopped or restarted. Which AWS storage service best meets these requirements?

Show answer & explanation

Answer: Amazon Elastic Block Store (Amazon EBS)

Answer

Amazon Elastic Block Store (Amazon EBS)
The correct service is Amazon Elastic Block Store (Amazon EBS) because it provides persistent block storage volumes that behave like physical hard drives. It can be easily attached to a single Amazon EC2 instance and keeps data intact even when the instance is stopped or restarted.

Step-by-Step Solution

1
Analyze the requirements in the scenario.
The requirements are: block storage, persistent (must survive instance stop/restart), and attached to a single EC2 instance.
This helps filter out services that do not offer block storage or persist data.
2
Evaluate the available storage options against the requirements.
Amazon EBS offers persistent block storage that behaves like a physical drive. Amazon S3 is object storage, Amazon EFS is shared file storage, and Amazon EC2 Instance Store is temporary storage.
Choosing the service that matches persistent block storage leads to the correct answer.

Key Concept

Identifying the appropriate AWS storage service based on block vs. object vs. file storage types and persistence requirements.
Question 1035Question →

A company wants to establish network connectivity between its on-premises office and its AWS cloud resources. Which two AWS services or features can be used to create this hybrid connection? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Direct Connect; AWS Site-to-Site VPN

Answer

AWS Direct Connect and AWS Site-to-Site VPN
AWS Direct Connect and AWS Site-to-Site VPN are the primary AWS solutions for establishing hybrid network connectivity between on-premises environments and AWS. AWS Direct Connect provides a dedicated, physical connection that bypasses the internet, whereas AWS Site-to-Site VPN establishes an encrypted tunnel over the public internet.

Step-by-Step Solution

1
Identify the main requirement in the scenario.
The company needs to establish a hybrid network connection between an on-premises office and AWS cloud resources.
Understanding the core requirement helps filter out services that are for internal VPC routing, security filtering, or data storage.
2
Evaluate the options for hybrid connectivity.
AWS Direct Connect provides a dedicated physical connection, and AWS Site-to-Site VPN establishes an encrypted IPsec connection over the internet.
Both are standard AWS networking features specifically designed to link on-premises infrastructure with AWS.

Key Concept

Hybrid network connectivity options in AWS
Question 1036Question →

A company is designing a cost-optimization strategy for three distinct workloads running on Amazon EC2:

1. A continuous, predictable baseline of containerized microservices that runs 24/7.
2. A nightly batch data processing job that is highly parallelizable, runs for 3 hours, and can resume from checkpoints if interrupted.
3. A critical, monthly database reconciliation process that runs for 6 hours on the first day of each month and must not be interrupted.

Which combination of Amazon EC2 pricing models provides the most cost-effective solution while ensuring all performance requirements are met?

Show answer & explanation

Answer: Savings Plans for the continuous baseline, Spot Instances for the nightly batch processing, and On-Demand Instances for the monthly database reconciliation.

Answer

Savings Plans for the continuous baseline, Spot Instances for the nightly batch processing, and On-Demand Instances for the monthly database reconciliation.
The strategy of using Savings Plans for the continuous baseline, Spot Instances for the nightly batch processing, and On-Demand Instances for the monthly database reconciliation represents the absolute cost-optimum. The continuous baseline receives commitment discounts, the fault-tolerant batch job leverages the deep discounts of Spot Instances, and the short-duration, critical database reconciliation is run on On-Demand to guarantee execution without paying for idle capacity during the rest of the month.

Step-by-Step Solution

1
Analyze the continuous baseline workload (24/7).
Identified Savings Plans or Reserved Instances as the most cost-effective option due to predictable, continuous utilization over 1 or 3 years.
Stable and predictable 24/7 workloads benefit from commitment-based discounts of up to 72% compared to On-Demand rates.
2
Analyze the nightly batch processing workload (3 hours, fault-tolerant).
Identified Spot Instances as the optimal choice.
Since the job is parallelizable and can resume from checkpoints, it can take advantage of Spot Instances, which offer up to a 90% discount with the trade-off of potential interruptions.
3
Analyze the monthly database reconciliation workload (6 hours once a month, critical and non-interruptible).
Identified On-Demand Instances as the best choice.
The workload cannot tolerate interruption, making Spot Instances unsuitable. Because it only runs for 6 hours a month, committing to a Savings Plan or Reserved Instance for this period would lead to massive waste (paying for idle capacity for the rest of the month), making On-Demand the most cost-effective option.
4
Combine the optimal pricing models for all three workloads.
Determined that the combination of Savings Plans, Spot Instances, and On-Demand Instances maximizes cost efficiency while fulfilling all operational requirements.
This strategy aligns the pricing model features to the specific predictability, duration, and fault tolerance of each workload.

Key Concept

Selecting the optimal Amazon EC2 pricing model based on workload predictability, duration, and fault tolerance.
Question 1037Question →

AWS offers a variety of compute services tailored to different application workloads, scaling requirements, and management preferences. A cloud architect is planning the deployment of four separate application components. Which AWS compute service is the most appropriate choice for each of these business and technical requirements? Match each workload scenario on the left with its most suitable AWS compute service on the right.

Click a left item, then click its matching right item

Items

A development team needs to launch a simple Python application environment with pre-configured virtual private servers, storage, databases, and a static IP under a flat, predictable monthly pricing structure.
A financial analysis firm needs to execute thousands of highly parallelized, containerized batch processing jobs that run to completion across dynamically scaled resources.
A software company wants to deploy a Node.js microservice that has highly sporadic traffic patterns and needs to scale instantly, ensuring they only pay for active execution time in milliseconds.
An enterprise security team wants to run containerized web services where they specify container CPU and memory requirements, but want AWS to fully manage and patch the underlying host instances.

Matches

Show answer & explanation

Answer

The correct matches pair the simple Python environment with Amazon Lightsail, the highly parallelized batch jobs with AWS Batch, the sporadic Node.js microservice with AWS Lambda, and the serverless container configuration with AWS Fargate.
Matching the workloads to their appropriate compute services is based on matching the management model, cost structure, and technical requirements. Amazon Lightsail is best for simple environments with a flat monthly rate. AWS Batch is optimized for executing large-scale parallel batch jobs to completion. AWS Lambda provides event-driven serverless scaling billed by millisecond execution for sporadic workloads. AWS Fargate provides serverless container compute where container specifications are declared without managing host instances.

Step-by-Step Solution

1
Analyze the workload requirements and key constraints for each scenario, paying attention to terms like 'predictable monthly pricing', 'highly parallelized batch', 'sporadic traffic with millisecond execution', and 'containerized without managing servers'.
Identify that the first scenario requires a simple VPS with flat pricing (Amazon Lightsail), the second requires batch orchestration (AWS Batch), the third requires event-driven micro-billing (AWS Lambda), and the fourth requires serverless containers (AWS Fargate).
This establishes the core pedagogical criteria for matching each requirement to its unique service characteristics.
2
Verify that the selected services align with the AWS Shared Responsibility Model and architectural best practices, ensuring that constraints such as Lambda's execution limits or Fargate's serverless container model match the scenario requirements.
All four scenarios are correctly paired without violating any technical constraints.
Ensures that the cloud architecture choices are valid and correct according to AWS CCP guidelines.

Key Concept

Matching workloads to AWS Compute Services based on operational model, billing, and management overhead.
Estimated Time:1m 30s
Question 1038Question →

A company is preparing to optimize its cloud infrastructure. The cloud operations team wants to perform a structured review of their workload architecture against cloud best practices, and they also need automated, real-time recommendations to reduce costs, improve security, and increase performance across their active AWS resources.

Which two AWS services or tools should the company use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Well-Architected Tool; AWS Trusted Advisor

Answer

AWS Well-Architected Tool and AWS Trusted Advisor are the correct services to perform workload reviews against best practices and obtain automated optimization recommendations.
AWS Well-Architected Tool and AWS Trusted Advisor together solve both requirements. AWS Well-Architected Tool provides a self-service resource to evaluate architectures using established best-practice pillars. AWS Trusted Advisor analyzes current usage and configurations to deliver automated suggestions for cost, performance, security, and scalability.

Step-by-Step Solution

1
Identify the requirement to evaluate workloads against architectural best practices.
The AWS Well-Architected Tool allows users to compare their architectures against the six pillars of the AWS Well-Architected Framework.
This matches the structured review requirement.
2
Identify the requirement to receive automated, real-time optimization checks across active resources.
AWS Trusted Advisor scans the AWS environment to identify opportunities for cost reduction, performance improvement, security hardening, and fault tolerance.
This matches the real-time recommendations requirement.

Key Concept

AWS Management, Governance, and Developer Tools evaluation, specifically using AWS Well-Architected Tool for architectural framework reviews and AWS Trusted Advisor for automated optimization recommendations.
Question 1039Question →

A financial services company is migrating its workloads to the AWS Cloud and has two operational requirements:

1. A developer needs to write a custom Go application that programmatically uploads transaction logs directly to an Amazon S3 bucket.
2. A cloud engineer needs to define, version-control, and deploy a repeatable stack of infrastructure resources (such as VPCs, subnets, and EC2 instances) using JSON or YAML configuration templates.

Which of the following AWS tools or services should the team use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Software Development Kit (AWS SDK); AWS CloudFormation

Answer

AWS Software Development Kit (AWS SDK) and AWS CloudFormation
The AWS Software Development Kit (AWS SDK) allows developers to write custom applications that interface programmatically with AWS services like Amazon S3. AWS CloudFormation allows cloud engineers to use template files (JSON/YAML) to configure, version, and deploy repeatable infrastructure resource stacks.

Step-by-Step Solution

1
Analyze the first requirement to determine the correct method of programmatically interacting with AWS services from within custom Go application code.
Identify that the AWS Software Development Kit (AWS SDK) is required to write code in a supported programming language that communicates directly with AWS APIs.
The AWS SDK provides language-specific libraries that translate programming commands into AWS API requests.
2
Analyze the second requirement to identify the tool for defining and deploying a repeatable stack of infrastructure resources using configuration templates.
Identify that AWS CloudFormation is the service designed to ingest JSON or YAML templates to provision and manage a unified stack of AWS infrastructure resources.
AWS CloudFormation is the primary infrastructure as code (IaC) tool in AWS for template-based resource provisioning.

Key Concept

AWS provides distinct tools for programmatic application integration and automated infrastructure deployment: the AWS SDK is used for calling services from code, while AWS CloudFormation is used for deploying template-defined infrastructure stacks.
Question 1040Question →

A financial institution is setting up its governance framework on AWS. The operations team has two key requirements: first, they must define and provision all cloud infrastructure using version-controlled, declarative templates to ensure consistency across staging and production environments; second, they must continuously log and audit all AWS API activity and user actions for compliance reporting. Which combination of AWS services should the company select to address these operational requirements?

Show answer & explanation

Answer: AWS CloudFormation and AWS CloudTrail

Answer

AWS CloudFormation and AWS CloudTrail
The correct answer combines AWS CloudFormation and AWS CloudTrail. AWS CloudFormation allows organizations to define their infrastructure as code (IaC) using templates, ensuring consistent provisioning across different environments. AWS CloudTrail provides the necessary governance and auditing capabilities by continuously tracking and logging API events and user actions across the AWS environment.

Step-by-Step Solution

1
Analyze the first requirement: defining and provisioning infrastructure using declarative templates.
Identify AWS CloudFormation as the primary service for Infrastructure as Code (IaC) that provisions resources using YAML or JSON templates.
AWS CloudFormation allows declarative representation of resources to maintain consistency across multiple environments.
2
Analyze the second requirement: continuously logging and auditing all API activity and user actions.
Identify AWS CloudTrail as the service designed to record API actions and user activity across the AWS account.
AWS CloudTrail tracks actions taken by users, roles, or AWS services, which is necessary for compliance and security auditing.
3
Combine the results and evaluate the options to find the correct pair.
Select the option containing both AWS CloudFormation and AWS CloudTrail.
This combination directly fulfills both requirements, whereas other options misuse Amazon CloudWatch for auditing API actions or AWS Elastic Beanstalk for declarative infrastructure provisioning.

Key Concept

Selecting appropriate AWS management and governance tools for infrastructure provisioning and compliance auditing.
Estimated Time:2m 0s
PreviousPage 52 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin