All practice questions

1473 questions

Question 1141Question

A startup has deployed two applications in separate Amazon Virtual Private Clouds (VPCs) within the same AWS Region. The startup needs to connect these two VPCs directly so that they can share resources securely using private IP addresses, without routing traffic through a central hub. Which AWS networking feature should the startup use to meet this requirement?

Show answer & explanation

Answer: VPC peering

Answer

VPC peering
VPC peering is a networking connection that allows routing of traffic between two Virtual Private Clouds (VPCs) privately. This allows instances in either VPC to communicate with each other as if they were within the same network, making it the most direct and cost-effective solution for a simple two-VPC setup.

Step-by-Step Solution

1
Identify that the requirement is to connect exactly two separate VPCs directly using private IP addresses.
Two VPCs need a point-to-point connection.
This helps narrow down the choices to features designed for direct, private VPC interconnection.
2
Select the service that provides direct point-to-point VPC connectivity without a centralized router.
VPC peering is selected.
VPC peering establishes a direct link between two VPCs, routing traffic privately without traversing the public internet or requiring a central transit hub.

Key Concept

VPC peering provides private, point-to-point connectivity between two VPCs.
Question 1142Question

An organization is deploying several workloads with different requirements on AWS. Match each operational workload requirement to its most appropriate AWS compute service.

Click a left item, then click its matching right item

Items

An enterprise database system that requires custom operating system kernel configurations and administrative root access to the virtual server.
A data processing script that executes only when an object is uploaded to an Amazon S3 bucket, running for less than 15 seconds per execution.
A containerized microservice API that needs to run continuously without the development team having to manage, patch, or scale any underlying virtual machines.
A simple development environment with a pre-configured web server and database that requires a predictable, flat-rate monthly price.

Matches

Show answer & explanation

Answer

The database system requiring custom OS configurations matches Amazon EC2. The event-triggered script processing S3 uploads matches AWS Lambda. The containerized microservice requiring serverless orchestration matches AWS Fargate. The development environment requiring a predictable flat-rate cost matches Amazon Lightsail.
The correct pairings align the specific workload features with the administrative responsibilities of each AWS compute service: Amazon EC2 is selected for full OS control; AWS Lambda is selected for transient, event-driven functions; AWS Fargate is selected for serverless container workloads; and Amazon Lightsail is selected for simple, predictably priced pre-packaged stacks.

Step-by-Step Solution

1
Evaluate administrative control requirements.
Amazon EC2 provides root access and full operating system level control.
To match the workload requiring custom operating system kernel configurations.
2
Evaluate execution duration and trigger types.
AWS Lambda is a serverless, event-driven service designed for short-lived tasks triggered by AWS services.
To match the short-duration data processing script triggered by S3 uploads.
3
Evaluate container management models.
AWS Fargate is a serverless compute engine for containers that removes the need to manage underlying servers.
To match the continuously running containerized microservice API needing no host administration.
4
Evaluate cost predictability and setup complexity.
Amazon Lightsail offers an all-in-one pre-configured server and database bundle with a flat-rate price.
To match the requirement for a simple, predictable, and low-cost development environment.

Key Concept

Selecting AWS compute services based on operational constraints such as serverless automation, container hosting, OS-level administrative control, and predictable flat-rate pricing structures.
Question 1143Question

A retail company is preparing to migrate its e-commerce application to AWS. The project team needs to estimate the monthly costs of the proposed architecture before launching any resources, and they also require a mechanism to receive email notifications if the actual or forecasted monthly spending exceeds a predefined threshold.

Which AWS Billing and Cost Management tools should the company use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Pricing Calculator; AWS Budgets

Answer

The correct tools are AWS Pricing Calculator and AWS Budgets.
AWS Pricing Calculator is the correct tool for estimating the costs of a proposed architecture before resources are deployed. AWS Budgets is the correct tool for defining cost thresholds and configuring proactive email alerts when actual or forecasted spending exceeds those thresholds.

Step-by-Step Solution

1
Determine the tool needed to estimate costs before launching resources.
AWS Pricing Calculator is identified as the tool designed for pre-deployment cost estimation.
It allows users to model and calculate future AWS costs based on service configurations.
2
Determine the tool needed to set proactive alerts for threshold breaches.
AWS Budgets is identified as the tool designed for configuring budget limits and alert notifications.
It supports sending email alerts when actual or forecasted costs cross defined thresholds.

Key Concept

AWS Billing and Cost Management tools have distinct purposes: AWS Pricing Calculator is for pre-deployment estimation, AWS Budgets is for proactive alerting, AWS Cost Explorer is for reactive historical analysis, and AWS Billing Conductor is for customized billing rules.
Question 1144Question

A software startup is setting up two different compute tasks on Amazon EC2:

1. A temporary testing environment that will run for exactly two weeks, where workloads are unpredictable but must run without interruption.
2. A data archiving workflow that runs overnight, can be safely interrupted without losing progress, and requires the lowest possible compute cost.

Which two Amazon EC2 pricing models are most suitable for these tasks? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: On-Demand Instances; Spot Instances

Answer

On-Demand Instances and Spot Instances are the most suitable pricing models for these workloads.
On-Demand Instances are the correct choice for the temporary testing workload because they provide flexible, pay-as-you-go compute capacity without any long-term contract or interruption risks. Spot Instances are the correct choice for the data archiving workflow because they offer the deepest discounts for flexible, fault-tolerant tasks that can be reclaimed by AWS with a short notice.

Step-by-Step Solution

1
Determine the pricing model for the first workload (two-week temporary testing environment with unpredictable, uninterrupted traffic).
On-Demand Instances are selected because they offer low cost and flexibility without any contract or upfront payment, while ensuring the instances are not interrupted.
Short-term workloads (under a year) cannot benefit from long-term commitment savings, and workloads that cannot tolerate interruption are not suitable for Spot Instances.
2
Determine the pricing model for the second workload (overnight data archiving that can be safely interrupted and needs the lowest cost).
Spot Instances are selected because they offer the lowest cost (up to 90% discount compared to On-Demand) and fit workloads that can be interrupted.
Since the data archiving workflow can tolerate interruptions and is highly cost-sensitive, Spot Instances provide the optimal price-to-performance ratio.

Key Concept

Matching workload duration, predictability, and interruption tolerance to the most cost-effective Amazon EC2 pricing model.
Question 1145Question

A healthcare organization needs to store patient medical records for 10 years to meet regulatory compliance requirements. The records are rarely accessed after the initial treatment period, but the organization must be able to retrieve them within 3 to 5 hours if an audit occurs. The solution must minimize storage costs. Which Amazon S3 storage class is the most cost-effective choice for this scenario?

Show answer & explanation

Answer: Amazon S3 Glacier Flexible Retrieval

Answer

Amazon S3 Glacier Flexible Retrieval
Amazon S3 Glacier Flexible Retrieval is the most cost-effective option because it is specifically designed for archive data that does not require immediate retrieval but requires access options ranging from minutes to hours. The standard retrieval option fits the 3-to-5-hour requirement perfectly while keeping storage costs extremely low.

Step-by-Step Solution

1
Analyze the access pattern and retrieval requirements.
The medical records are rarely accessed (archival use case) but must be retrievable within a 3-to-5-hour window.
This helps filter out storage classes that do not meet the retrieval timeframe or are optimized for active datasets.
2
Evaluate the cost and retrieval times of candidate Amazon S3 storage classes.
Amazon S3 Glacier Flexible Retrieval offers standard retrieval in 3 to 5 hours at a very low storage cost. Amazon S3 Glacier Deep Archive takes 12 hours (too slow). Amazon S3 Standard-IA is for millisecond access and is more expensive.
Choosing the service that meets the SLA while minimizing storage cost ensures the most optimal architecture.

Key Concept

Amazon S3 Storage Classes
Estimated Time:1m 0s
Question 1146Question

ShieldHealth Solutions, a health insurance provider, plans to migrate its member portal and monthly claims analysis pipeline from an on-premises data center to AWS. The portal experiences steady daily traffic with occasional massive spikes during annual open enrollment periods. The claims analysis pipeline runs once a month, requiring substantial compute power for a 12-hour window. Which TWO of the following describe cloud economic benefits or mechanisms that ShieldHealth Solutions will realize by moving to AWS?

Select all that apply

Show answer & explanation

Answer: Transitioning from a capital expense (CapEx) model to an operating expense (OpEx) model, allowing the company to pay only for the infrastructure actually consumed; Leveraging elasticity to dynamically scale resources to meet the demand spikes of open enrollment and monthly analysis, eliminating payments for idle capacity

Answer

Transitioning from a capital expense (CapEx) model to an operating expense (OpEx) model, and leveraging elasticity to dynamically scale resources to meet demand spikes while eliminating payments for idle capacity.
The correct options are: transitioning from a capital expense (CapEx) model to an operating expense (OpEx) model, and leveraging elasticity to scale resources dynamically to meet demand spikes. Transitioning to AWS shifts the financial model from high upfront capital investments in physical servers (CapEx) to a pay-as-you-go operating expense (OpEx) structure. Elasticity allows the company to automatically provision resources during peak periods and release them when they are not needed, avoiding costs for idle infrastructure.

Step-by-Step Solution

1
Identify the workload patterns described: a portal with steady baseline traffic and seasonal spikes (open enrollment), and a predictable but infrequent high-compute task (monthly claims analysis).
Recognize that provisioning physical hardware for peak demand is inefficient and results in high idle capacity.
This sets the foundation for applying cloud economics concepts to optimize resource utilization.
2
Analyze the financial shifts associated with cloud migration.
Determine that moving from purchasing on-premises hardware (CapEx) to paying for cloud services on demand represents a shift to OpEx.
This addresses the core difference between capital expenditures and operating expenditures in cloud environments.
3
Analyze operational efficiency mechanism for fluctuating workloads.
Determine that AWS elasticity allows the company to scale up only when needed (e.g., during open enrollment or claims analysis) and scale down to avoid paying for unused capacity.
This maps the workload requirements to the cloud concept of elasticity.

Key Concept

Cloud Economics: CapEx vs OpEx and Elasticity
Question 1147Question

A multinational company is launching a new application and needs to host its user data within the borders of Germany to comply with national regulations. Which AWS global infrastructure component should the company select to ensure the data is stored in this specific geographic location?

Show answer & explanation

Answer: AWS Regions

Answer

AWS Regions
AWS Regions are independent geographic areas that contain multiple Availability Zones. Deploying resources in a specific AWS Region ensures that data remains within that geographical boundary, satisfying data sovereignty and residency laws.

Step-by-Step Solution

1
Identify the primary requirement, which is to store user data within the physical borders of Germany to comply with national regulations.
Recognize that the solution must select a top-level geographic boundary in AWS that guarantees data residency.
Compliance and data sovereignty laws require data to be hosted inside specific national boundaries.
2
Evaluate which AWS global infrastructure component represents a separate geographic area.
Determine that AWS Regions are the independent geographic areas where AWS services are deployed, allowing customers to control data location.
Choosing a Region in Germany (such as eu-central-1 in Frankfurt) ensures that all provisioned resources and data remain within the national borders of Germany.

Key Concept

AWS Regions are separate geographic areas used to host resources and satisfy data sovereignty and compliance requirements.
Estimated Time:45s
Question 1148Question

A company is extending its on-premises corporate office to AWS using a 10 Gbps10\text{ Gbps} AWS Direct Connect connection. The corporate network needs to access workloads deployed across 3030 different Virtual Private Clouds (VPCs) in the same AWS Region. Additionally, the security team requires that any incoming traffic from the on-premises network to the VPCs' database subnets be filtered at the subnet boundary to permit only a specific range of administrative IP addresses. Which AWS networking solution and security feature should the company implement to meet these requirements?

Show answer & explanation

Answer: AWS Transit Gateway to route traffic from the Direct Connect gateway to the 3030 VPCs, and Network ACLs on the database subnets to filter incoming traffic.

Answer

AWS Transit Gateway combined with Network ACLs on the database subnets.
The solution utilizing AWS Transit Gateway for routing and Network ACLs for filtering is correct. AWS Transit Gateway acts as a cloud router, enabling transitive routing between the on-premises network connected via Direct Connect and all 3030 VPCs. Network ACLs operate at the subnet boundary, fulfilling the security requirement to filter incoming database subnet traffic based on source IP ranges.

Step-by-Step Solution

1
Analyze the requirement to connect 3030 VPCs to an on-premises network via a single AWS Direct Connect connection.
Identify that VPC Peering is not viable due to the lack of transitive routing (spokes cannot access Direct Connect via a hub VPC) and high operational overhead. AWS Transit Gateway is the correct solution as it natively supports transitive routing and acts as a centralized hub.
AWS Transit Gateway simplifies multi-VPC architectures and allows external connections like Direct Connect to route traffic to all attached VPCs transitively.
2
Determine the resource to enforce traffic filtering at the subnet boundary.
Identify that Network Access Control Lists (NACLs) operate at the subnet boundary, whereas Security Groups operate at the instance level.
The scenario explicitly requests filtering at the subnet boundary, which is the operational boundary for Network ACLs.

Key Concept

VPC Transitive Routing and Subnet-Level Filtering
Question 1149Question

A company is running an application on a fleet of Amazon EC2 instances. The operations team needs to monitor the CPU utilization of the instances in real time and receive an automated notification if the utilization exceeds 85%85\% for more than 55 minutes. Which AWS service should the company use to collect these performance metrics and trigger the notification?

Show answer & explanation

Answer: Amazon CloudWatch

Answer

Amazon CloudWatch is the correct service because it monitors operational and performance metrics, such as CPU utilization, and can trigger alarms and notifications when preconfigured thresholds are crossed.
Amazon CloudWatch is the correct service because it natively monitors operational and performance metrics (such as CPU utilization) of AWS resources and allows users to configure alarms that send notifications when thresholds are exceeded.

Step-by-Step Solution

1
Identify the operational requirement: monitoring real-time performance metrics (CPU utilization) and setting up metric-based alarm thresholds.
Real-time metrics and alarm thresholds are primary capabilities of Amazon CloudWatch.
Understanding the difference between metric monitoring (CloudWatch), audit logging (CloudTrail), configuration compliance (Config), and operational execution (Systems Manager) is key to selecting the correct tool.
2
Differentiate Amazon CloudWatch from AWS CloudTrail.
Amazon CloudWatch tracks performance metrics, whereas AWS CloudTrail records API calls and user operations for auditing.
This rules out AWS CloudTrail as it does not collect CPU metrics or trigger utilization alarms.
3
Differentiate Amazon CloudWatch from AWS Config and AWS Systems Manager.
AWS Config is for compliance and configuration auditing, and AWS Systems Manager is for resource management, neither of which natively manages metric-based alerts.
This confirms Amazon CloudWatch as the only suitable service.

Key Concept

Amazon CloudWatch is the monitoring and observability service that provides data and actionable insights for AWS resources, including performance metrics and alarm triggers.
Estimated Time:1m 0s
Question 1150Question

An online education platform wants to expand its course offerings to a global audience. The platform needs to convert its English study guides and written lecture notes into multiple languages, including French and Spanish, while maintaining the contextual meaning of the text. Which AWS service should the platform use to meet this requirement?

Show answer & explanation

Answer: Amazon Translate

Answer

Amazon Translate
Amazon Translate is a neural machine translation service that uses advanced deep learning technologies to provide high-quality and fast language translation of written text, which perfectly matches the requirement to translate study guides and lecture notes.

Step-by-Step Solution

1
Identify the core business requirement in the scenario.
The requirement is to convert written documents (study guides and lecture notes) from English into other languages (French and Spanish) while preserving contextual meaning.
Understanding the input format (text) and the desired output (translated text) narrows down the service selection.
2
Map the requirement to the correct AWS Machine Learning service.
Amazon Translate is the specialized AWS AI service designed for language translation of text.
Comparing the capabilities of available machine learning services ensures the correct one is chosen for text translation.

Key Concept

AWS Machine Learning Services
Estimated Time:45s
Question 1151Question

A research institute, BioGenetics, currently runs its genomic sequencing workloads on an on-premises datacenter. They experience highly unpredictable computing demands, with massive spikes in resource usage during research phases followed by weeks of idle infrastructure. The institute plans to migrate these workloads to AWS to pay for resources only when they are actively running analyses, and to decommission resources when they are not in use. Which of the following represents the primary economic advantage of this migration strategy?

Show answer & explanation

Answer: It shifts the infrastructure model from capital expenses (CapEx) to operating expenses (OpEx), while leveraging elasticity to align costs directly with actual demand.

Answer

The primary economic advantage is shifting from capital expenses (CapEx) to operating expenses (OpEx) while leveraging elasticity to align costs directly with actual demand.
The correct option correctly identifies that the cloud model shifts spending from capital expenses (CapEx) to operating expenses (OpEx). By deploying application workloads in an elastic manner, the institute pays only for what they use, dynamically scaling resources to match the fluctuating sequencing demands.

Step-by-Step Solution

1
Analyze the business scenario described in the stem.
BioGenetics experiences highly variable demand, which results in idle on-premises hardware and upfront capital costs.
Understanding the current financial and operational pain points helps identify the matching cloud economics benefit.
2
Identify the financial transformation when moving to the cloud.
The shift from upfront hardware costs (CapEx) to variable pay-as-you-go costs (OpEx).
This is a foundational concept of cloud economics.
3
Identify the operational mechanism to handle variable workloads.
Elasticity, which dynamically adjusts capacity to meet demand, avoiding cost waste from idle resources.
Elasticity directly matches the requirement to scale down resources during idle weeks.

Key Concept

Shifting from CapEx to OpEx and utilizing elasticity to align costs with demand.
Estimated Time:1m 0s
Question 1152Question

An organization is evaluating AWS compute services to host different types of applications and workloads. Match each workload scenario to the most appropriate AWS compute service.

Click a left item, then click its matching right item

Items

An IoT platform needs to run short-lived, background data processing scripts that trigger only when sensors report anomalous data, paying only for the execution time.
A student wants to run a personal portfolio website with a pre-integrated database and a simplified, bundled billing structure.
A retail company wants to deploy containerized web APIs that automatically scale based on demand without managing the underlying virtual machine host clusters.
A research team needs to run a proprietary simulation application that requires custom kernel modifications on the operating system and direct access to raw block storage.

Matches

Show answer & explanation

Answer

The correct pairings are: the IoT platform matches AWS Lambda; the portfolio website matches Amazon Lightsail; the containerized API matches AWS Fargate; and the simulation application matches Amazon EC2.
Each workload aligns with a specific compute option: AWS Lambda excels at event-driven, short-lived tasks; Amazon Lightsail is optimized for quick, bundled deployments with predictable pricing; AWS Fargate runs containerized applications without requiring infrastructure provisioning; and Amazon EC2 provides raw virtual servers with complete administrative and OS-level control.

Step-by-Step Solution

1
Analyze each workload's primary requirements, such as administrative access, management overhead, containerization, event-driven execution, and pricing models.
Identified key requirements: IoT needs short-lived event-driven execution; portfolio website needs simplified bundle; APIs need container execution without VM management; simulation needs OS kernel customization.
Allows mapping characteristics to specific compute service categories (IaaS, Serverless, Containerized, PaaS/VPS).
2
Match the identified requirements to the corresponding AWS compute services: AWS Lambda for event-driven serverless code; Amazon Lightsail for simple pre-configured VPS with predictable pricing; AWS Fargate for serverless container running; Amazon EC2 for raw virtual servers with OS administrative control.
Mapped IoT to AWS Lambda, portfolio website to Amazon Lightsail, APIs to AWS Fargate, and simulation to Amazon EC2.
Ensures optimal resource alignment based on AWS design principles and service limits.

Key Concept

Selecting appropriate AWS compute services based on operational constraints, cost models, and management responsibility.
Estimated Time:2m 0s
Question 1153Question

An architect is designing an infrastructure strategy. The strategy requires copying database backups to a distant geographic location for disaster recovery compliance. Additionally, the application's active web servers must run in multiple isolated locations within the same area to prevent downtime from a single facility outage. Which two AWS Global Infrastructure components should the architect use to meet these requirements?

Select all that apply

Show answer & explanation

Answer: AWS Regions; Availability Zones

Answer

AWS Regions and Availability Zones
AWS Regions provide the separate geographic boundaries needed for disaster recovery compliance by isolating workloads across different physical locations globally. Availability Zones provide high availability within a region by grouping discrete, isolated data centers with redundant power and networking, protecting against a single facility outage.

Step-by-Step Solution

1
Identify the requirement for replicating data to a distant geographic location for disaster recovery compliance.
AWS Regions represent geographically distinct locations, making them the correct component for large-scale geographic separation.
Data sovereignty and regional disaster recovery are typically addressed by using multiple AWS Regions.
2
Identify the requirement for running active web servers in multiple isolated locations within the same area to prevent single-facility downtime.
Availability Zones consist of one or more discrete, isolated data centers within a single AWS Region.
Distributing workloads across multiple Availability Zones protects the application from the outage of a single physical facility.

Key Concept

AWS Global Infrastructure components, specifically the distinction between AWS Regions (geographic isolation) and Availability Zones (datacenter-level isolation).
Estimated Time:45s
Question 1154Question

A health-tech startup hosts its patient record database on Amazon EC2 instances inside a private subnet of a Virtual Private Cloud (VPC). The security team needs to restrict incoming database traffic to only the application server instances. Additionally, any outbound response traffic from the database back to the application servers must be allowed automatically, without configuring an explicit outbound rule. Which AWS firewall option should the security team configure to meet these requirements?

Show answer & explanation

Answer: Security Groups at the instance level, because they are stateful and automatically allow outbound responses to allowed inbound requests.

Answer

Security Groups at the instance level, because they are stateful and automatically allow outbound responses to allowed inbound requests.
The correct option is the one specifying Security Groups at the instance level. Security Groups are stateful, meaning any inbound traffic allowed is automatically permitted to flow outbound as a response, meeting the requirement to allow return traffic without an explicit outbound rule. They also operate at the instance level, allowing granular access control between specific application and database instances.

Step-by-Step Solution

1
Analyze the requirement for instance-level traffic restriction to the application server instances.
Identify that the firewall must support instance-level targeting (such as referencing the application server security group).
This isolates the database instances from other resources within the same or different subnets.
2
Evaluate the statefulness requirement: return traffic must be allowed automatically without explicit outbound rules.
Security Groups are stateful and track connection states, allowing return traffic automatically. Network ACLs are stateless and would require explicit outbound rule configurations.
Choosing a stateful resource satisfies the requirement to allow return traffic automatically without additional outbound rules.

Key Concept

Stateful instance-level security (Security Groups) vs. stateless subnet-level security (Network ACLs)
Question 1155Question

A digital education platform needs to store students' course progress and quiz answer history. The data schema is simple (student ID, course ID, quiz ID, and completion status) and requires fast, predictable read and write performance that scales automatically to support millions of active users during exam weeks. The development team wants a serverless, key-value database that eliminates the operational overhead of managing database servers. Which AWS database service best meets these requirements?

Show answer & explanation

Answer: Amazon DynamoDB

Answer

Amazon DynamoDB
Amazon DynamoDB is a serverless NoSQL database service that provides key-value storage, automatic scaling, and single-digit millisecond latency without requiring database server provisioning or management.

Step-by-Step Solution

1
Analyze the application requirements.
The application requires storing simple key-value progress records (student ID, course ID, quiz ID, status) with low-latency and automatic scaling, while eliminating database server management.
This helps identify whether a relational or non-relational database is needed, and whether a serverless or managed model is required.
2
Evaluate the database models.
Amazon DynamoDB is a serverless, key-value NoSQL database that automatically scales to meet demand and requires no server provisioning or management.
Matching the requirements to the capabilities of AWS database services shows that DynamoDB is the most suitable option.

Key Concept

AWS Database Services
Question 1156Question

A company is planning to deploy a multi-tier web application in Amazon VPC. The architecture requires that the database tier be completely isolated from the public internet, while the web servers must be accessible to the public internet. Which subnet configuration should the company use to meet these requirements?

Show answer & explanation

Answer: Public subnets for the web servers and private subnets for the database tier

Answer

Public subnets for the web servers and private subnets for the database tier
The correct answer is to place the web servers in public subnets and the database tier in private subnets. Public subnets are configured with a route to an Internet Gateway, allowing them to send and receive traffic from the public internet. Private subnets do not have a route to the Internet Gateway, keeping the resources inside them isolated from direct internet access.

Step-by-Step Solution

1
Analyze the requirement for the web servers to accept public internet traffic.
Web servers must be placed in a public subnet.
A public subnet has a route table associated with an Internet Gateway, allowing direct inbound and outbound communication with the internet.
2
Analyze the requirement for the database tier to be isolated from the public internet.
The database tier must be placed in a private subnet.
A private subnet does not have a route to an Internet Gateway, preventing direct access from the public internet to the database resources.

Key Concept

Understanding how subnets (public and private) within an Amazon VPC are used to isolate or expose application tiers.
Estimated Time:45s
Question 1157Question

A network administrator is conducting a one-time experiment and needs to manually configure a network connection between two Amazon Virtual Private Clouds (VPCs). The administrator wants to use a graphical, web-based interface to perform this configuration without writing any code, scripts, or infrastructure templates.

Which AWS tool or interface should the administrator use to meet these requirements?

Show answer & explanation

Answer: AWS Management Console

Answer

AWS Management Console
The AWS Management Console provides an intuitive, web-based graphical user interface (GUI) designed for manual operations, making it the perfect choice for one-off configurations, experiments, and users who do not want to write code or scripts.

Step-by-Step Solution

1
Analyze the operational requirements: manual configuration, one-time experiment, web-based graphical interface, and no coding, scripting, or templates.
The requirement points to an interactive graphical user interface (GUI) accessible via a web browser.
Understanding the administrative need helps filter out programmatic and template-based methods.
2
Evaluate the available AWS deployment and operating tools against these requirements.
The AWS Management Console is the only tool that fits a web-based, manual GUI approach. The CLI and SDK require terminal command-line or programming code, and CloudFormation requires writing declarative templates.
Comparing the capabilities of each interface determines the most appropriate tool.

Key Concept

AWS Management Console is the primary graphical user interface for manual, interactive cloud management tasks.
Question 1158Question

An organization plans to expand its services globally and wants to understand how AWS structures its physical resources. Which of the following represents a physical geographical location that contains multiple isolated and physically separate Availability Zones?

Show answer & explanation

Answer: AWS Region

Answer

AWS Region
An AWS Region is a physical geographical location that contains multiple, isolated, and physically separate Availability Zones. This design provides high availability and fault tolerance within a geographic area.

Step-by-Step Solution

1
Analyze the question requirement.
The question asks for the AWS infrastructure component that is a physical geographical location containing multiple isolated Availability Zones.
Understanding the hierarchy of the AWS Global Infrastructure is key to distinguishing between regions, zones, and edge locations.
2
Evaluate the definition of an AWS Region.
An AWS Region is defined as a geographic area that houses multiple Availability Zones, which are isolated from each other to prevent single points of failure.
This matches the definition requested in the prompt.

Key Concept

AWS Regions contain multiple isolated Availability Zones to provide fault tolerance and localization of resources.
Estimated Time:45s
Question 1159Question

A cloud architect is designing a high-availability strategy for a critical application that must comply with national data sovereignty laws. Which of the following statements correctly describe how AWS Global Infrastructure components support these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Regions are geographically isolated, allowing customers to deploy resources in specific locations to meet data residency regulations.; Availability Zones are physically distinct partitions within a Region, enabling high availability through low-latency network connectivity.

Answer

AWS Regions are geographically isolated, allowing customers to deploy resources in specific locations to meet data residency regulations, and Availability Zones are physically distinct partition lines within a Region, enabling high availability through low-latency connectivity.
AWS Regions are geographically isolated from one another, enabling customers to choose a Region that satisfies local data residency laws. Within a Region, Availability Zones are physically separated locations connected by redundant, low-latency private fiber-optic networks. This allows architects to deploy highly available applications across multiple zones without data leaving the selected country's Region.

Step-by-Step Solution

1
Analyze the compliance requirement.
The application must comply with national data sovereignty laws, meaning data must remain within the specific country's geographic boundaries.
Determines that AWS Regions are the primary boundary for data residency.
2
Analyze the high-availability requirement.
The application needs protection against localized failures without violating data residency.
Availability Zones provide physical isolation and low-latency replication within the same Region, satisfying high-availability needs locally.
3
Evaluate the infrastructure options.
Identify that AWS Regions provide geographic boundary compliance, while Availability Zones provide low-latency local resilience.
Validates the correct components of the AWS Global Infrastructure.

Key Concept

AWS Regions vs. Availability Zones
Estimated Time:1m 30s
Question 1160Question

A company plans to deploy a custom database application that requires low-level kernel configuration modifications and direct control over the underlying operating system patching schedule. Which AWS compute service is the most appropriate for this workload?

Show answer & explanation

Answer: Amazon Elastic Compute Cloud (Amazon EC2)

Answer

Amazon Elastic Compute Cloud (Amazon EC2) is the most appropriate service because it provides raw virtual machine instances with full administrative access, allowing the user to modify the operating system kernel and manage patching schedules.
Amazon Elastic Compute Cloud (Amazon EC2) provides virtual machines in the cloud, granting full root/administrator access to the operating system. This allows customers to modify kernel parameters, install custom software, and control the operating system patching schedule.

Step-by-Step Solution

1
Analyze the workload requirements for direct operating system access, custom kernel configuration, and control over patching.
Identify that the application needs an Infrastructure as a Service (IaaS) model rather than serverless or managed platform services.
Serverless and managed services abstract the operating system and restrict administrative/root access.
2
Evaluate the available AWS compute services against these requirements.
Determine that Amazon EC2 provides full control over the OS and kernel, whereas AWS Fargate, AWS Lambda, and AWS Elastic Beanstalk manage or abstract these layers.
Selecting Amazon EC2 is necessary when root-level OS customization and patch management are strictly required.

Key Concept

Understanding the level of control and shared responsibility across different AWS compute services (IaaS vs. PaaS/Serverless).
PreviousPage 58 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin