Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 1181Question →

A company is configuring network security for a web application hosted on Amazon EC2 instances in a VPC. The security team has two requirements:

1. Apply rules at the subnet boundary where both inbound and outbound traffic must be explicitly allowed, as rules are evaluated independently for return traffic.
2. Apply rules at the instance boundary where allowing inbound traffic automatically permits the corresponding outbound return traffic.

Which combination of AWS security features should the company use to meet these requirements?

Show answer & explanation

Answer: Network Access Control Lists (NACLs) at the subnet level because they are stateless, and Security Groups at the instance level because they are stateful

Answer

Network Access Control Lists (NACLs) at the subnet level because they are stateless, and Security Groups at the instance level because they are stateful
The correct answer combines Network Access Control Lists (NACLs) for the subnet-level requirement and Security Groups for the instance-level requirement. NACLs are stateless firewalls that control inbound and outbound traffic at the subnet boundary, meaning outbound return traffic must be explicitly permitted. Security Groups are stateful firewalls that apply to individual EC2 instances, meaning once inbound traffic is allowed, the outbound return traffic is automatically allowed.

Step-by-Step Solution

1
Analyze the subnet-level requirement.
The requirement states that rules must be evaluated independently for return traffic, meaning the firewall is stateless. Network Access Control Lists (NACLs) operate at the subnet boundary and are stateless.
Stateless firewalls do not keep track of connection state, so outbound return traffic must be explicitly allowed by an outbound rule.
2
Analyze the instance-level requirement.
The requirement states that allowing inbound traffic should automatically permit the corresponding outbound return traffic, meaning the firewall is stateful. Security Groups operate at the instance boundary and are stateful.
Stateful firewalls track connection state, allowing return traffic automatically without requiring an explicit outbound rule.

Key Concept

The difference between stateful Security Groups (operating at the instance level) and stateless Network Access Control Lists (operating at the subnet level).
Estimated Time:1m 30s
Question 1182Question →

An IT consultancy is planning the migration of several distinct client applications to AWS. To optimize costs and operational efficiency, they must pair each workload with the correct compute service. How should the following workload scenarios be matched to their most appropriate AWS compute services?

Click a left item, then click its matching right item

Items

A developer needs to host a simple, low-cost personal portfolio website with a pre-configured LAMP stack and predictable monthly pricing.
A system administrator needs to run a legacy enterprise software application that requires full control over the underlying operating system and administrative access to configure custom kernel modules.
A software engineer wants to run a serverless, event-driven background job that automatically processes image uploads to an Amazon S3 bucket within milliseconds, with no infrastructure management.
A DevOps team needs to run containerized microservices where AWS manages the underlying server provisioning, cluster scaling, and server maintenance.

Matches

Show answer & explanation

Answer

The portfolio website matches Amazon Lightsail; the legacy application requiring kernel control matches Amazon Elastic Compute Cloud (Amazon EC2); the event-driven image processing job matches AWS Lambda; and the containerized microservices requiring serverless management match AWS Fargate.
The correct matches map each business workload to the compute service that aligns with its administration requirements and scaling parameters. Amazon Lightsail is correct for the LAMP site because it bundles compute, storage, and networking into a simple package with predictable pricing. Amazon EC2 is correct for the legacy application because it provides full host and operating system administrative control. AWS Lambda is correct for the S3-triggered event processing because it runs short-lived functions in response to event triggers without provisioning servers. AWS Fargate is correct for containerized microservices because it is a serverless container host that eliminates server management.

Step-by-Step Solution

1
Analyze the workload requirements for each scenario, noting key constraints such as operating system control, serverless scaling, pre-configured environments, and pricing predictability.
Identified key requirements: predictable pricing/LAMP for scenario 1, OS/kernel control for scenario 2, serverless/event-driven trigger for scenario 3, and serverless container management for scenario 4.
Matching AWS compute services depends on mapping specific workload characteristics to the capabilities and management models of each service.
2
Evaluate Amazon Lightsail against the portfolio website scenario.
Amazon Lightsail is selected because it offers pre-configured stacks (like LAMP) and predictable pricing structures.
Lightsail provides all-in-one virtual private servers tailored for simple projects with fixed monthly plans.
3
Evaluate Amazon EC2 against the legacy software scenario.
Amazon Elastic Compute Cloud (Amazon EC2) is selected because the customer requires full root access and OS/kernel customization.
EC2 is an Infrastructure-as-a-Service (IaaS) offering that grants complete administrative control over virtual machines.
4
Evaluate AWS Lambda against the image processing scenario.
AWS Lambda is selected because the execution is short-lived, event-driven (triggered by Amazon S3 uploads), and serverless.
Lambda is the primary serverless function service for running code in response to S3 events without managing container images or servers.
5
Evaluate AWS Fargate against the containerized microservices scenario.
AWS Fargate is selected because it allows running containers (ECS/EKS) without managing or provisioning underlying EC2 instances.
Fargate is a serverless compute engine specifically designed for running containerized workloads.

Key Concept

Selecting appropriate AWS compute services based on operational control, cost structure, serverless capabilities, and container orchestration requirements.
Estimated Time:2m 0s
Question 1183Question →

A design studio wants to visualize their monthly cloud spending trends over the past year to identify which services are driving their bills. Which AWS tool should they use to view this historical cost data and generate graphs of their usage patterns?

Show answer & explanation

Answer: AWS Cost Explorer

Answer

AWS Cost Explorer
AWS Cost Explorer is the correct tool because it provides an interactive interface to visualize, understand, and manage AWS costs and usage over time, allowing the design studio to view historical cost charts and identify cost drivers.

Step-by-Step Solution

1
Identify the primary goal of the organization, which is to visualize, graph, and analyze actual historical spending trends over the past year.
The correct tool must support retrospective analysis and visual graphing of actual usage.
Understanding the difference between proactive monitoring (budgets), future estimation (calculator), and reactive visual analysis (cost explorer) is key to selecting the correct tool.
2
Match the requirement with the correct AWS service capabilities.
AWS Cost Explorer is the designated tool for graphing and analyzing past usage trends, while other tools serve pre-deployment or billing rule management functions.
Evaluating all options confirms that AWS Cost Explorer is the only service that provides detailed, interactive graphs of historical usage.

Key Concept

Identifying the purpose of AWS Cost Explorer for historical cost visualization and trend analysis.
Estimated Time:45s
Question 1184Question →

A cloud practitioner is configuring network security for a new Amazon EC2 instance. They need to define firewall rules that allow inbound HTTP traffic on port 80, and the firewall must automatically allow return outbound traffic. Which Amazon VPC feature should the cloud practitioner use?

Show answer & explanation

Answer: Security group

Answer

Security group
The correct answer is the option indicating a security group. Security groups operate at the instance level and are stateful, meaning any allowed inbound traffic automatically permits return outbound traffic.

Step-by-Step Solution

1
Analyze the requirements: network security at the Amazon EC2 instance level, allowing inbound traffic on port 80, and automatically allowing the return outbound traffic (stateful behavior).
Identify that the firewall must operate at the instance level and behave statefully.
This matches the definition and behavior of an AWS security group.
2
Evaluate the other options to verify they are incorrect for this scenario.
Network ACLs are stateless and subnet-level, IAM roles manage access permissions, and AWS Artifact manages compliance documents.
This confirms that only the security group meets the criteria.

Key Concept

AWS Security Groups are stateful, instance-level firewalls that automatically track connection states to allow return traffic.
Question 1185Question →

A digital marketing agency needs to configure storage on AWS for a new campaign portal. The portal requires:

1. A highly available, shared file system that multiple Amazon EC2 instances running Linux can access concurrently to read and write campaign assets.
2. A persistent block storage volume attached to a single EC2 database instance that requires sub-millisecond latency for transaction logs.

Which two AWS storage services should the agency choose to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Amazon Elastic File System (Amazon EFS) to support the concurrent shared file access for the Linux instances.; Amazon Elastic Block Store (Amazon EBS) to provide persistent, low-latency block storage for the database instance.

Answer

The correct services are Amazon Elastic File System (Amazon EFS) for the shared file system and Amazon Elastic Block Store (Amazon EBS) for the database block storage.
Amazon Elastic File System (Amazon EFS) is a shared file system that can be mounted concurrently by multiple EC2 instances, meeting the first requirement. Amazon Elastic Block Store (Amazon EBS) provides high-performance, persistent block storage volumes for a single EC2 instance, meeting the second requirement.

Step-by-Step Solution

1
Analyze the first requirement: a shared file system accessible concurrently by multiple Linux-based Amazon EC2 instances.
Identify Amazon Elastic File System (Amazon EFS) as the correct choice since it is a fully managed network file system (NFS) that allows concurrent access from multiple EC2 instances.
EFS is designed for shared, concurrent file storage for Linux workloads, unlike block storage options.
2
Analyze the second requirement: persistent block storage attached to a single database instance with sub-millisecond latency.
Identify Amazon Elastic Block Store (Amazon EBS) as the correct choice since it provides high-performance, low-latency block-level storage volumes for individual EC2 instances.
EBS is optimized for databases and transactional logs that require dedicated, fast block storage.

Key Concept

Selecting appropriate AWS storage services based on file, block, object, and archival characteristics.
Question 1186Question →

An IoT-based fleet management system tracks real-time location coordinates and device status updates from 50,000 delivery vehicles. The system requires a database that can handle high-throughput write operations with sub-millisecond latency and a flexible schema for varying telemetry data. Additionally, the system needs to cache frequently accessed driver profile records to reduce read latency.

Which AWS services should be selected to meet these database and caching requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon DynamoDB to store the high-throughput fleet telemetry data; Amazon ElastiCache to cache driver profile records

Answer

Amazon DynamoDB to store the high-throughput fleet telemetry data, and Amazon ElastiCache to cache driver profile records
The system requires a NoSQL database that scales dynamically and handles high-throughput, flexible telemetry schemas with low latency, which is the primary use case for Amazon DynamoDB. To lower read latency for frequently accessed driver profile data, an in-memory cache like Amazon ElastiCache is the correct choice.

Step-by-Step Solution

1
Identify the storage requirements for the telemetry data stream.
The telemetry data requires a flexible schema, high write throughput, and low latency.
This workload characteristics align with NoSQL databases, specifically Amazon DynamoDB.
2
Identify the caching requirement for driver profiles.
Frequently accessed driver profiles need fast retrieval to reduce read latency.
In-memory caching is designed for this pattern, making Amazon ElastiCache the correct service.

Key Concept

AWS Database and Caching Services
Question 1187Question →

A cloud administrator is configuring a high-availability architecture and needs to distribute virtual servers across separate, isolated physical locations within the same geographic area to prevent concurrent failures. What are these isolated physical locations called?

Show answer & explanation

Answer: Availability Zones

Answer

Availability Zones
Availability Zones are physical locations within an AWS Region, each consisting of one or more discrete data centers with redundant power, networking, and connectivity. Distributing resources across multiple Availability Zones protects applications from single data center failures, achieving high availability.

Step-by-Step Solution

1
Identify the requirement of distributing virtual servers across separate, isolated physical locations within the same geographic area to ensure high availability.
The administrator needs to locate the AWS physical infrastructure component designed to isolate failures within a single region.
Understanding the architecture requirement helps select the appropriate level of the AWS Global Infrastructure hierarchy.
2
Evaluate the options based on their function in the AWS Global Infrastructure.
Availability Zones consist of one or more discrete data centers with redundant power, networking, and connectivity within an AWS Region. AWS Regions are the larger geographic areas containing these zones. Edge Locations cache content, and Local Zones extend services to specific cities.
Comparing the options ensures the selected component matches the definition of isolated physical locations within a geographic area.

Key Concept

Availability Zones provide physical isolation and redundancy within a single AWS Region.
Question 1188Question →

A gaming company is deploying matchmaking servers on Amazon EC2 instances within a Virtual Private Cloud (VPC). The network security architecture must meet the following requirements:
1. Control traffic at the individual instance level, ensuring that return traffic for allowed inbound requests is automatically permitted.
2. Control traffic at the subnet boundary, acting as a secondary layer of defense that requires explicit rules for both inbound and outbound traffic.

Which two AWS network security features should the company implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Security Groups; Network Access Control Lists (NACLs)

Answer

Security Groups and Network Access Control Lists (NACLs)
The correct choices are Security Groups and Network Access Control Lists (NACLs). Security Groups act as a firewall for EC2 instances and are stateful, meaning any allowed inbound traffic automatically permits the corresponding outbound return traffic. Network Access Control Lists (NACLs) act as a firewall at the subnet boundary and are stateless, meaning return traffic must be explicitly allowed by configuring both inbound and outbound rules.

Step-by-Step Solution

1
Identify the requirement for instance-level, stateful traffic control.
Security Groups are identified as the service that operates at the instance level and automatically permits return traffic due to their stateful nature.
This fulfills the first requirement of the scenario.
2
Identify the requirement for subnet-level, stateless traffic control.
Network Access Control Lists (NACLs) are identified as the service that operates at the subnet boundary and requires explicit rules for both inbound and outbound traffic because they are stateless.
This fulfills the second requirement of the scenario.

Key Concept

Understanding the differences between Security Groups (stateful, instance-level) and Network ACLs (stateless, subnet-level) in AWS VPC security.
Estimated Time:1m 30s
Question 1189Question →

LexSearch Systems is a legal discovery software provider that runs resource-intensive document indexing jobs only when a client uploads a new case. These jobs run for 3 to 5 days, during which they require massive compute power, but the system remains completely idle for the rest of the month. The company currently leases dedicated physical servers on a fixed monthly basis to ensure they have enough capacity for these peaks.

Which of the following best describes the economic advantage LexSearch Systems would gain by migrating this workload to AWS?

Show answer & explanation

Answer: Shifting from fixed, upfront hardware leasing commitments to variable operating expenses, and using elasticity to pay only for resources consumed during active indexing runs.

Answer

Shifting from fixed, upfront hardware leasing commitments to variable operating expenses, and using elasticity to pay only for resources consumed during active indexing runs.
The correct answer explains that migrating to AWS enables the company to switch from fixed monthly leasing commitments to variable operating expenses (paying only for what is used) and utilizes elasticity to scale resources up during active indexing periods and down during idle times to avoid waste.

Step-by-Step Solution

1
Analyze the workload demand pattern.
The workload is highly variable (indexing runs 3-5 days a month, idle for the remaining time).
Understanding the usage pattern helps identify the appropriate cloud billing and scaling model.
2
Identify the current expense model and compare it to the cloud economics model.
The current model relies on fixed monthly leases (sunk costs regardless of use). The cloud model shifts these to variable, pay-as-you-go expenses.
AWS cloud economics leverages a variable operating expense model where costs match usage.
3
Select the scaling capability that aligns with the workload variance.
Elasticity allows the company to scale compute capacity up during active runs and down to zero during idle periods.
Elasticity ensures cost optimization by aligning resource consumption directly with demand spikes and troughs.

Key Concept

Understand concepts of cloud economics (specifically the transition from CapEx/fixed OpEx to variable OpEx, and the cost benefit of elasticity).
Estimated Time:1m 0s
Question 1190Question →

An organization is designing a highly available application and wants to understand the relationship between AWS Regions and Availability Zones (AZs). Which two statements correctly describe how these global infrastructure components are structured and connected?

Select all that apply

Show answer & explanation

Answer: An Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity.; An AWS Region contains multiple, physically separated and isolated Availability Zones.

Answer

An AWS Region is a geographic area that houses multiple, isolated Availability Zones, and each Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity.
An AWS Region consists of multiple, physically separated and isolated Availability Zones to ensure high availability. Each Availability Zone consists of one or more discrete data centers equipped with redundant power, cooling, and networking.

Step-by-Step Solution

1
Analyze the relationship between Regions and Availability Zones (AZs).
AWS Regions contain multiple, isolated Availability Zones, which are composed of one or more physical data centers.
To verify the architectural hierarchy of AWS Global Infrastructure.
2
Evaluate the connectivity and replication behavior.
Low-latency connections are within a Region, and replication across AZs must be configured by the user.
To rule out incorrect options claiming cross-region default low-latency connectivity or automatic replication.

Key Concept

AWS Regions and Availability Zones Architecture
Question 1191Question →

An online education platform hosts its virtual classroom application on Amazon EC2 instances within a public subnet of a VPC. To enhance security, the network administrator must meet two requirements:
1. Block all inbound traffic from a known list of malicious IP addresses before it reaches the subnet.
2. Ensure the EC2 instances accept inbound HTTPS traffic on port 443, while automatically allowing the outbound response traffic back to the clients without configuring any outbound rules.
Which combination of AWS security features will satisfy these requirements?

Show answer & explanation

Answer: A Network Access Control List (NACL) at the subnet level to deny the malicious IP addresses, and a Security Group at the instance level to allow inbound port 443 traffic

Answer

A Network Access Control List (NACL) at the subnet level to deny the malicious IP addresses, and a Security Group at the instance level to allow inbound port 443 traffic
The correct option is the one specifying a Network Access Control List (NACL) at the subnet level to deny the malicious IP addresses, and a Security Group at the instance level to allow inbound port 443 traffic. A NACL operates at the subnet level and supports explicit deny rules, which satisfies the first requirement of blocking specific IP addresses. A Security Group operates at the instance level and is stateful, which automatically allows return traffic for any established inbound connection, meeting the second requirement without needing outbound rules.

Step-by-Step Solution

1
Analyze the requirement to block malicious IP addresses before traffic reaches the subnet.
Identify that a Network Access Control List (NACL) is applied at the subnet boundary and supports explicit 'deny' rules to block specific IP addresses.
Security Groups only support 'allow' rules and cannot block specific IP addresses directly; therefore, a NACL is needed at the subnet boundary.
2
Analyze the requirement to allow inbound HTTPS traffic (port 443) and automatically permit outbound response traffic without outbound rules.
Identify that Security Groups are stateful firewalls that operate at the instance level, allowing return traffic automatically without needing corresponding outbound rules.
NACLs are stateless and require explicit outbound rules for return traffic, which violates the requirement of not needing outbound rules.

Key Concept

Stateful vs. Stateless network filtering in AWS VPC (Security Groups vs. Network ACLs)
Question 1192Question →

A manufacturing company is developing an IoT (Internet of Things) device agent that needs to send real-time machinery temperature readings directly to an Amazon Kinesis data stream. The agent code is written in C++ and runs on resource-constrained embedded systems. Which AWS tool should the developers integrate into their C++ application code to enable this programmatic data ingestion?

Show answer & explanation

Answer: AWS Software Development Kit (SDK)

Answer

AWS Software Development Kit (SDK)
The correct answer is the AWS Software Development Kit (SDK) because it provides language-specific libraries and APIs (including for C++) that enable developers to write application code that interacts programmatically with AWS services like Amazon Kinesis.

Step-by-Step Solution

1
Analyze the scenario requirements.
The requirement is to programmatically send data (real-time temperature readings) from within application code (C++) running on embedded devices to an AWS service (Amazon Kinesis).
Identifying the nature of the interaction (programmatic application code vs. scripting or manual admin) is essential to select the correct tool.
2
Evaluate the capabilities of the available AWS tools.
The AWS SDK is designed specifically for application integration, offering libraries and APIs in multiple programming languages, including C++, to interact with AWS services directly from code.
Comparing tool capabilities ensures the selection of a tool designed for programmatic, code-level interactions.

Key Concept

AWS SDK for Programmatic Interaction
Estimated Time:1m 0s
Question 1193Question →

A company has three separate Amazon VPCs in the same AWS Region and wants to establish direct network connectivity between all of them. To keep the configuration simple and avoid managing multiple individual connections, which AWS networking service should they use as a central routing hub?

Show answer & explanation

Answer: AWS Transit Gateway

Answer

AWS Transit Gateway is the correct service because it acts as a central hub to connect multiple VPCs and on-premises networks, simplifying routing management compared to point-to-point connections.
AWS Transit Gateway acts as a centralized cloud router that simplifies connectivity by connecting multiple VPCs and on-premises networks in a hub-and-spoke topology. This removes the administrative overhead of managing many individual point-to-point peering connections.

Step-by-Step Solution

1
Analyze the requirement to connect multiple Amazon VPCs using a centralized routing hub rather than individual point-to-point connections.
Identify that connecting multiple VPCs point-to-point requires a complex mesh of VPC peering connections.
VPC peering is only suitable for simple point-to-point connections and becomes difficult to manage at scale.
2
Select the AWS service designed to act as a central cloud router for interconnecting multiple VPCs and on-premises networks.
Determine that AWS Transit Gateway acts as a hub-and-spoke router to simplify multi-VPC connectivity.
AWS Transit Gateway is specifically designed to eliminate the complexity of managing a large number of VPC peering connections.

Key Concept

AWS Transit Gateway simplifies multi-VPC and hybrid network connectivity by acting as a central routing hub.
Question 1194Question →

A financial technology startup is designing its deployment and operations strategy. The startup needs to define, template, and automatically deploy its core network infrastructure and database instances in a repeatable, consistent manner across multiple AWS Regions. Additionally, they need to build a custom, internal management application in Go that programmatically retrieves the health metrics of these resources and stops or starts instances based on business hours. Which of the following AWS tools or interfaces should the startup use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS CloudFormation to define and version-control infrastructure templates for automated deployment across multiple regions; AWS Software Development Kit (SDK) to programmatically monitor and manage resources within the custom Go application

Answer

The startup should use AWS CloudFormation to define and version-control infrastructure templates for automated deployment, and the AWS Software Development Kit (SDK) to programmatically interact with and manage these resources from within their custom Go application.
AWS CloudFormation enables the startup to declare their network and database configurations in code templates, ensuring that environment setup is repeatable and identical across regions. Meanwhile, the AWS SDK provides the programming libraries required to bind the custom Go dashboard directly to AWS service APIs for runtime resource controls.

Step-by-Step Solution

1
Identify the method required for automating consistent infrastructure deployments across multiple regions.
AWS CloudFormation is the correct tool because it uses templates to treat infrastructure as code (IaC), allowing repeatable and automated deployments.
VPCs and databases need to be consistently set up across regions without manual intervention.
2
Identify the interface required for integrating AWS operations programmatically within a custom application written in Go.
The AWS SDK (specifically the AWS SDK for Go) is the correct interface as it allows developers to integrate application logic directly with AWS service APIs.
The management application needs to programmatically query metrics and execute start/stop actions.

Key Concept

AWS Deployment and Operating Methods
Question 1195Question →

A gaming company is deploying an application on Amazon EC2 instances that processes real-time player leaderboards. The application requires high-performance, lowest-latency block storage to serve as temporary caching and scratch space. If an instance terminates, the cached data can be easily recreated and does not need to persist. Which AWS storage option should the company select to meet these requirements at no additional cost?

Show answer & explanation

Answer: Amazon EC2 Instance Store

Answer

Amazon EC2 Instance Store
Amazon EC2 Instance Store provides temporary block-level storage that is physically attached to the host computer. This physical attachment delivers the lowest possible latency for temporary caching and scratch space, and its cost is included in the EC2 instance pricing, meaning it incurs no additional storage charges.

Step-by-Step Solution

1
Identify the storage requirements: block storage, lowest latency, temporary (non-persistent) scratch space, and no additional cost.
The solution must be physically attached block storage that does not charge extra for storage capacity.
This filters out network-attached storage services which have higher latency and additional charges.
2
Evaluate the options against these criteria.
Amazon EC2 Instance Store is physically attached, temporary, and included in the instance cost. Amazon EBS, EFS, and S3 are network-based and incur extra charges.
To find the service that specifically matches temporary block storage with zero additional cost.

Key Concept

Differentiating between temporary local block storage (Instance Store) and persistent network-attached storage options (EBS, EFS, S3).
Question 1196Question →

EduClass Systems, an educational technology provider, is planning to migrate its virtual classroom platform from a private on-premises data center to AWS. The platform experiences high demand during school hours on weekdays, but has almost no traffic during nights, weekends, and summer breaks. Which TWO of the following describe the economic benefits of this migration for EduClass Systems? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The company can shift from a Capital Expense (CapEx) model of purchasing and maintaining physical servers upfront to a variable Operating Expense (OpEx) model, paying only for the compute resources they consume.; The company can lower its Total Cost of Ownership (TCO) by using AWS elasticity to automatically scale compute resources down during off-peak hours and school holidays, avoiding payment for idle capacity.

Answer

Shifting from a Capital Expense (CapEx) model to a variable Operating Expense (OpEx) model, and lowering the Total Cost of Ownership (TCO) by using AWS elasticity to scale down resources during low-demand periods.
The correct options identify the shift from capital expenses (CapEx) to operating expenses (OpEx), allowing the company to pay only for consumed resources rather than upfront hardware investments, and the utilization of cloud elasticity to dynamically downscale resources during off-peak times to optimize Total Cost of Ownership (TCO).

Step-by-Step Solution

1
Analyze the existing infrastructure costs of the company.
The company currently incurs Capital Expenses (CapEx) by purchasing and managing physical servers upfront in a private data center.
This establishes the baseline cost model to compare against AWS cloud economics.
2
Identify the workload characteristics and traffic patterns.
The workload is highly variable with predictable off-peak periods (nights, weekends, holidays).
This points to elasticity as the primary driver for cost optimization.
3
Map AWS cloud economic concepts to solve the company's problem.
Migrating to AWS shifts costs to an Operating Expense (OpEx) model (pay-as-you-go) and allows the company to scale resources down when not in use (elasticity) to lower Total Cost of Ownership (TCO).
Matches the scenario to correct cloud business value propositions.

Key Concept

Cloud economics benefits: shifting CapEx to OpEx, and leveraging elasticity to optimize resource utilization and reduce Total Cost of Ownership (TCO).
Estimated Time:1m 30s
Question 1197Question →

A small marketing agency wants to deploy a simple, low-traffic corporate website using a standard Content Management System (CMS) like WordPress. The team has minimal AWS expertise and requires a straightforward, low-cost virtual private server (VPS) solution that bundles compute, storage, and networking with a predictable monthly pricing model. Which AWS compute service should the agency use to deploy this website?

Show answer & explanation

Answer: Amazon Lightsail

Answer

Amazon Lightsail is the most appropriate service because it provides simple virtual private server (VPS) instances, storage, and databases at a predictable monthly cost, which is ideal for hosting basic CMS websites like WordPress with minimal management overhead.
Amazon Lightsail is the correct service because it offers a simplified management experience and predictable pricing by packaging virtual private servers, storage, and networking into a single monthly plan. This is perfect for simple websites, blogs, or applications where the customer has minimal cloud expertise.

Step-by-Step Solution

1
Analyze the business and technical requirements of the scenario.
The workload is a simple, low-traffic corporate website (WordPress CMS). The team has minimal AWS expertise and needs a straightforward VPS solution with predictable, bundled monthly pricing.
This establishes the constraints and goals to narrow down the AWS compute service.
2
Compare the available AWS compute services against the requirements.
Amazon Lightsail is specifically designed for quick, simple VPS deployments with bundled storage, data transfer, and predictable pricing. Other services like EC2 require more management overhead and have variable pricing. Lambda is for event-driven functions, and Fargate is for container orchestration.
This identifies the correct service that matches the target criteria while ruling out overly complex or unsuitable alternatives.

Key Concept

Selecting appropriate AWS compute services based on workload complexity, administrative overhead, and pricing predictability.
Question 1198Question →

A retail company is building a business intelligence platform to analyze customer purchasing patterns over the last five years. The system must perform complex, multi-table analytical queries on massive volumes of aggregated transactional data to generate weekly reports. Which AWS database service is specifically designed to support this type of online analytical processing (OLAP) workload?

Show answer & explanation

Answer: Amazon Redshift

Answer

Amazon Redshift
Amazon Redshift is a fully managed, petabyte-scale data warehouse service designed specifically for complex analytical and business intelligence workloads. It uses columnar storage and massive parallel processing (MPP) to query large datasets efficiently.

Step-by-Step Solution

1
Analyze the workload requirements: the system needs to perform complex, multi-table analytical queries on massive volumes of historical sales data.
Identified the workload as Online Analytical Processing (OLAP) rather than Online Transactional Processing (OLTP).
This helps narrow down the database service type to data warehousing solutions.
2
Evaluate the capabilities of the database options against the OLAP requirements.
Determined that Amazon Redshift is the optimized, fully managed AWS data warehouse designed specifically for OLAP.
Amazon DynamoDB is NoSQL, Amazon ElastiCache is for caching, and Amazon EC2 is a self-managed virtual machine, leaving Amazon Redshift as the correct fit.

Key Concept

AWS Database Services
Question 1199Question →

A company is designing its network security controls within an Amazon Virtual Private Cloud (Amazon VPC). The engineering team needs to configure both security groups and network access control lists (network ACLs) to secure their resources.

Which of the following statements correctly describe the operational differences between security groups and network ACLs? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Security groups operate at the instance level, whereas network ACLs operate at the subnet level.; Security groups are stateful, whereas network ACLs are stateless.

Answer

Security groups operate at the instance level and are stateful, whereas network ACLs operate at the subnet level and are stateless.
Security groups act as stateful firewalls operating at the instance level, allowing return traffic automatically without requiring an outbound rule. Network ACLs operate as stateless firewalls at the subnet level, which means separate rules must be defined to allow traffic in both directions.

Step-by-Step Solution

1
Evaluate the boundary levels at which security groups and network ACLs are applied within a VPC.
Confirm that security groups secure individual instances (such as Amazon EC2 instances) and network ACLs secure the subnet boundaries.
This establishes where the traffic filtering takes place.
2
Evaluate how connection state is tracked by both firewalls.
Confirm that security groups automatically permit return traffic (stateful), while network ACLs require independent rules for inbound and outbound paths (stateless).
This identifies the difference in rule configuration complexity and behavior.

Key Concept

VPC Security: Security Groups vs Network ACLs
Question 1200Question →

A freelance developer needs to deploy a simple web application prototype for a local client. The developer requires a virtual private server (VPS) with a pre-configured software stack, a static IP address, and a predictable monthly price that bundles compute, storage, and data transfer. Which AWS compute service should the developer use to meet these needs?

Show answer & explanation

Answer: Amazon Lightsail

Answer

Amazon Lightsail
Amazon Lightsail is the most appropriate service because it is designed to provide simple virtual private servers (VPS) with pre-configured application templates (such as Node.js, LAMP, or WordPress) and a predictable monthly price that bundles compute, SSD storage, and data transfer allowances into a single price plan.

Step-by-Step Solution

1
Analyze the business requirements from the scenario.
The requirements specify a need for a virtual private server (VPS), a pre-configured software stack, a static IP address, and a predictable, bundled monthly cost.
Identifying these key attributes helps narrow down which compute service is optimized for simple, packaged deployments.
2
Evaluate the capabilities of the available compute options against the requirements.
Amazon Lightsail specifically provides simple virtual private server (VPS) instances with bundled resource pricing. Amazon EC2 has complex, granular pricing and requires manual networking configuration. AWS Lambda is event-driven and does not host persistent virtual servers. AWS Fargate is serverless container hosting.
Comparing the features of each service ensures the selection aligns with the developer's need for simplicity and cost predictability.

Key Concept

Selecting compute services based on resource bundling and cost predictability
Estimated Time:1m 0s
PreviousPage 60 / 74Next