Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 1281Question →

A company is configuring network security controls for a web application deployed on Amazon EC2 instances within a single subnet. The security team wants to apply stateless filtering at the subnet boundary to block specific malicious IP addresses, while allowing developers to manage stateful firewall rules at the individual instance level. Which TWO of the following AWS network security features should the team configure to achieve this?

Select all that apply

Show answer & explanation

Answer: Network Access Control Lists (Network ACLs) to enforce stateless traffic filtering at the subnet boundary; Security Groups to enforce stateful traffic filtering at the EC2 instance level

Answer

Network Access Control Lists (Network ACLs) to enforce stateless traffic filtering at the subnet boundary, and Security Groups to enforce stateful traffic filtering at the EC2 instance level.
To implement stateless filtering at the subnet boundary to block malicious IPs, Network Access Control Lists (Network ACLs) must be used. To implement stateful filtering at the individual EC2 instance level, Security Groups must be used.

Step-by-Step Solution

1
Identify the subnet-level stateless filtering requirement.
Network Access Control Lists (Network ACLs) are selected.
Network ACLs operate at the subnet level and support stateless rules, allowing explicit denial of traffic from specific IP addresses.
2
Identify the instance-level stateful filtering requirement.
Security Groups are selected.
Security Groups act as stateful firewalls at the instance level, allowing developers to manage rule sets without manually tracking return traffic.

Key Concept

The difference between Security Groups (stateful, instance-level) and Network ACLs (stateless, subnet-level).
Question 1282Question →

A research institute runs a compute-intensive weather modeling simulation once a month. The simulation is a batch processing job designed to be fully fault-tolerant, frequently saving checkpoints to Amazon S3 so it can resume if interrupted. The simulation does not have a strict completion deadline, and the institute wants to minimize computing costs. Which Amazon EC2 pricing model is the most cost-effective choice for this workload?

Show answer & explanation

Answer: Spot Instances

Answer

Spot Instances
Spot Instances are the most cost-effective choice because they allow users to take advantage of unused EC2 capacity at steep discounts (up to 90%). This is ideal for fault-tolerant, flexible batch workloads that can be interrupted and resumed without loss of progress.

Step-by-Step Solution

1
Analyze the workload characteristics from the scenario.
The simulation workload is run once a month, is fully fault-tolerant, frequently saves progress, and has no strict completion deadline.
Understanding the tolerance for interruptions and the frequency of the workload helps narrow down the most cost-effective pricing model.
2
Evaluate the EC2 pricing options against the workload needs.
Spot Instances are ideal for fault-tolerant batch jobs, Reserved Instances are for 24/7 steady-state workloads, and On-Demand is for non-interruptible workloads.
Selecting the option that matches the fault-tolerance and non-continuous nature of the simulation ensures the lowest cost.

Key Concept

AWS Pricing Models
Question 1283Question →

A logistics company is running its fleet tracking system on AWS. The operations team needs 24/7 technical support with a guaranteed response time of less than 30 minutes for critical outages. Furthermore, the company requires a dedicated Technical Account Manager (TAM) to act as a primary point of contact for proactive architectural guidance and operational reviews. Which AWS Support plan is the minimum tier that meets these requirements?

Show answer & explanation

Answer: Enterprise

Answer

Enterprise Support
The Enterprise Support plan is the correct answer because it is the minimum tier that includes a dedicated Technical Account Manager (TAM). Although the Enterprise On-Ramp plan meets the response time requirement of less than 30 minutes, it only provides access to a pool of TAMs rather than a dedicated resource.

Step-by-Step Solution

1
Evaluate the 24/7 support and SLA response time requirements.
The Developer plan is eliminated as it only provides business hours email access, and the Business plan is eliminated because its fastest response SLA is 1 hour.
The system requires a response time of less than 30 minutes for critical events, which narrow the candidates to Enterprise On-Ramp (30 minutes) and Enterprise (15 minutes).
2
Evaluate the Technical Account Manager (TAM) requirement.
The requirement for a dedicated TAM eliminates the Enterprise On-Ramp plan.
Enterprise On-Ramp provides access to a shared pool of TAMs, whereas only the Enterprise support plan offers a designated, dedicated TAM.

Key Concept

Differences in Technical Account Manager (TAM) allocation and response SLAs between high-end AWS Support plans.
Question 1284Question →

An organization is designing a web application on AWS that requires high availability and fault tolerance within a single geographic area to survive local data center outages. Additionally, the application serves static media content to a global user base and must minimize latency for these users. Which of the following AWS global infrastructure components should the organization utilize to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Multiple Availability Zones within a single AWS Region; AWS Edge Locations

Answer

Multiple Availability Zones within a single AWS Region and AWS Edge Locations
Deploying across multiple Availability Zones within a single Region ensures that the application remains highly available and resilient to local data center failures. Utilizing AWS Edge Locations caches static media assets closer to users worldwide, satisfying the requirement for global low-latency content delivery.

Step-by-Step Solution

1
Analyze the high availability requirement within a single geographic area.
Identify that AWS Availability Zones provide isolated data center locations within a single Region to protect against local outages.
Deploying resources across multiple Availability Zones ensures that if one data center fails, others continue to operate.
2
Analyze the low-latency requirement for global static content delivery.
Identify that AWS Edge Locations cache content close to end-users globally.
Edge Locations work with Amazon CloudFront to store copies of static assets nearer to the users' physical locations, minimizing delivery latency.

Key Concept

AWS Regions, Availability Zones, and Edge Locations serve distinct purposes in high availability and global content delivery.
Estimated Time:1m 30s
Question 1285Question →

A retail company wants to implement a cost management strategy on AWS. The finance team needs to prevent unexpected cloud spend by receiving notifications when forecasted monthly costs exceed a specific threshold. Additionally, they require a tool to perform retrospective analysis to visualize and identify cost drivers over the past six months. Which AWS Billing and Cost Management tools should the company use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Budgets; AWS Cost Explorer

Answer

AWS Budgets and AWS Cost Explorer
AWS Budgets and AWS Cost Explorer are the correct tools. AWS Budgets meets the requirement for proactive alerting by notifying the team when forecasted monthly costs exceed a threshold. AWS Cost Explorer meets the requirement for retrospective analysis by allowing the team to visualize historical cost trends and identify specific cost drivers.

Step-by-Step Solution

1
Identify the tool required for proactive threshold alerting based on forecasted costs.
AWS Budgets is identified because it allows users to set custom budgets and receive alerts when forecasted or actual costs exceed thresholds.
This directly addresses the requirement to prevent unexpected spend by receiving notifications.
2
Identify the tool required for retrospective cost analysis and visualization.
AWS Cost Explorer is identified because it provides visual representations of historical cost and usage patterns.
This directly addresses the requirement to analyze cost drivers over the past six months.

Key Concept

AWS Cost Management Tools
Question 1286Question →

A company runs a document management application where users upload and retrieve files of varying sizes. The access patterns for these files are highly unpredictable; some files are accessed multiple times daily, while others remain untouched for months, with no regular cycle. The company wants to minimize storage costs automatically without paying retrieval fees and without affecting application performance. Which Amazon S3 storage class is best suited for this scenario?

Show answer & explanation

Answer: Amazon S3 Intelligent-Tiering

Answer

Amazon S3 Intelligent-Tiering is the best storage class because it automatically optimizes storage costs for data with unpredictable access patterns by moving it between a Frequent Access tier and an Infrequent Access tier without retrieval fees or operational overhead.
Amazon S3 Intelligent-Tiering is correct because it is specifically designed to optimize storage costs automatically when access patterns are unpredictable or changing. It moves objects that have not been accessed for 30 consecutive days to the Infrequent Access tier, and automatically moves them back to the Frequent Access tier when they are accessed, without any retrieval fees.

Step-by-Step Solution

1
Analyze the access pattern and operational requirements.
The workload requires cost optimization for highly unpredictable access patterns, zero retrieval fees, and no performance degradation.
Understanding these criteria helps filter out storage options that charge for data retrieval or have slow retrieval speeds.
2
Evaluate S3 storage classes against the requirements.
Amazon S3 Intelligent-Tiering automatically shifts data between access tiers based on usage and has no retrieval fees. S3 Standard-IA and S3 Glacier classes charge retrieval fees, and Glacier has slow retrieval times.
This confirms that Intelligent-Tiering is the only option that meets all performance and cost constraints automatically.

Key Concept

Selecting the appropriate S3 storage class based on access patterns, retrieval time, and cost considerations.
Estimated Time:1m 0s
Question 1287Question →

A company is planning to deploy a new application composed of several containerized microservices. The containers must run continuously, scale dynamically based on demand, and be managed by a centralized container orchestration service. The company wants to avoid the operational overhead of installing and maintaining container orchestration software. Which AWS compute service should the company use to meet these requirements?

Show answer & explanation

Answer: Amazon Elastic Container Service (Amazon ECS)

Answer

Amazon Elastic Container Service (Amazon ECS)
Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service that allows you to run, scale, and secure containerized applications. It eliminates the operational overhead of installing, configuring, and maintaining your own container orchestration software.

Step-by-Step Solution

1
Identify the primary deployment requirement of running continuously active containerized microservices that scale dynamically.
Limits the viable options to container hosting platforms rather than serverless functions meant for short, intermittent tasks.
AWS Lambda is event-driven and restricted by a 15-minute execution limit, making it inappropriate for continuous microservice hosting.
2
Evaluate the management requirement to avoid installing and maintaining container orchestration tools.
Amazon Elastic Container Service (Amazon ECS) is chosen as it provides managed orchestration out-of-the-box, unlike managing virtual servers manually.
Amazon EC2 would require the team to manually configure, update, and manage container clustering software (such as Docker Swarm or Kubernetes), creating extra operational overhead.

Key Concept

Selecting the appropriate AWS compute service for container orchestration while minimizing operational overhead.
Estimated Time:1m 0s
Question 1288Question →

A company is designing the network security architecture for a new web application within an Amazon Virtual Private Cloud (Amazon VPC). The security team requires using both security groups and network access control lists (NACLs) to protect their resources. Which of the following statements correctly describe the characteristics of these AWS network security features? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Security groups are stateful, meaning that if an inbound request is allowed, the outbound return traffic is automatically permitted.; Network ACLs operate at the subnet level to control traffic flowing in and out of the associated subnets.

Answer

Security groups are stateful, meaning that if an inbound request is allowed, the outbound return traffic is automatically permitted; and Network ACLs operate at the subnet level to control traffic flowing in and out of the associated subnets.
The correct options are that security groups are stateful, meaning that return traffic is automatically allowed, and network ACLs operate at the subnet level. Security groups function as virtual firewalls at the instance level, and their stateful nature ensures that if traffic is allowed in one direction, response traffic is automatically allowed. Network ACLs function at the subnet boundary and apply to all resources inside the subnet.

Step-by-Step Solution

1
Analyze security group properties.
Identify that security groups operate at the instance level, support allow rules only, and are stateful.
This helps evaluate options regarding security groups' stateful nature and scope.
2
Analyze network ACL properties.
Identify that Network ACLs operate at the subnet level, support both allow and deny rules, and are stateless.
This helps evaluate options regarding network ACLs' subnet-level boundary and stateless behavior.
3
Select the two correct statements.
Confirm that the statement about security groups being stateful and the statement about network ACLs operating at the subnet level are correct.
These match standard AWS definitions for VPC network security elements.

Key Concept

AWS VPC Network Security (Security Groups vs. Network ACLs)
Question 1289Question →

A smart-agriculture IoT startup is planning to launch a new crop-monitoring platform. The engineering team needs to estimate the projected monthly cost of the proposed AWS services before deploying them. Additionally, the finance team wants to receive email alerts if their ongoing monthly spend exceeds a predefined limit. Which of the following AWS tools should the startup use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Pricing Calculator to estimate the projected costs of the services before deployment; AWS Budgets to configure custom billing alerts based on cost thresholds

Answer

The startup should use the AWS Pricing Calculator to estimate their pre-deployment costs and AWS Budgets to configure proactive threshold notifications.
The startup should use the AWS Pricing Calculator to estimate projected costs before launching services, and AWS Budgets to set up proactive alerts for when spending exceeds defined thresholds.

Step-by-Step Solution

1
Identify the tool required for estimating costs before resources are created.
The AWS Pricing Calculator allows users to input planned resource configurations and generate a cost estimate prior to deployment.
This meets the requirement of predicting resource costs beforehand.
2
Identify the tool required to monitor actual spend against a limit and send email notifications.
AWS Budgets allows users to set custom budgets and configure alerts that send email notifications when actual or forecasted costs cross a specific threshold.
This meets the requirement of alerting the team when ongoing spend exceeds the budget limit.

Key Concept

Differentiation of AWS Billing and Cost Management tools for planning versus monitoring costs.
Question 1290Question →

A cloud architect needs to simplify the network architecture of a large enterprise that has deployed applications across many AWS accounts and Virtual Private Clouds (VPCs). The enterprise wants to route traffic dynamically between these networks and their on-premises data centers without managing a mesh of individual connections. Which service should the architect recommend to solve this requirement?

Show answer & explanation

Answer: AWS Transit Gateway

Answer

AWS Transit Gateway
AWS Transit Gateway functions as a cloud router to connect VPCs and on-premises networks in a hub-and-spoke topology. This eliminates the operational overhead of managing a mesh of point-to-point connections.

Step-by-Step Solution

1
Analyze the business and technical requirements of the scenario.
The scenario requires connecting multiple VPCs and on-premises networks using a centralized hub to avoid a complex mesh of individual connections.
This establishes the need for a central routing service that supports transitive routing.
2
Compare the candidate AWS networking services against the requirement of a centralized hub.
AWS Transit Gateway acts as a central hub (cloud router) for VPCs and on-premises connections, whereas VPC Peering is point-to-point and lacks transitive routing, and Security Groups are firewalls.
This identifies the correct service that simplifies routing for scale.

Key Concept

AWS Transit Gateway serves as a centralized hub to interconnect Virtual Private Clouds (VPCs) and on-premises networks, simplifying connectivity management at scale.
Question 1291Question →

VeritasGenomics runs high-compute DNA sequencing analysis. On-premises, they maintain a cluster of high-performance servers that is fully utilized for only three days each month when processing research runs. During the rest of the month, the hardware remains idle, though the company continues to pay for power, cooling, and data center space. Which of the following best describes the cloud economics concept that would allow VeritasGenomics to optimize these costs on AWS?

Show answer & explanation

Answer: Transitioning from fixed capital investments to variable expenses that adjust based on compute utilization.

Answer

Transitioning from fixed capital investments to variable expenses that adjust based on compute utilization.
The choice stating 'Transitioning from fixed capital investments to variable expenses that adjust based on compute utilization' is correct because AWS enables organizations to trade upfront infrastructure expenses (Capital Expenditures, or CapEx) for variable costs (Operating Expenditures, or OpEx). With elasticity, the organization can scale capacity down or turn resources off during the 27 idle days, paying only for the compute power actually consumed.

Step-by-Step Solution

1
Analyze the workload's resource usage pattern.
The workload has high-compute requirements for 3 days and is idle for the remaining 27 days.
Understanding usage patterns helps identify resource waste and cost optimization opportunities.
2
Identify the AWS cost model that fits this pattern.
Transitioning from fixed capital expense (CapEx) to variable operating expense (OpEx) allows the customer to pay only for resources when active, leveraging elasticity.
AWS allows stopping or scaling down resources during idle periods, eliminating cost waste.

Key Concept

Shifting from CapEx to OpEx and utilizing elasticity to align costs with demand.
Estimated Time:1m 30s
Question 1292Question →

An enterprise cloud service provider manages multiple customer accounts under an AWS Organization. To align with customer agreements, the provider needs to generate monthly proforma invoices that apply custom markup rates to the customers' actual AWS resource usage, without affecting the provider's overall consolidated billing invoice from AWS. Which service should the provider implement to define these custom pricing rules and generate the proforma invoices?

Show answer & explanation

Answer: AWS Billing Conductor

Answer

AWS Billing Conductor
AWS Billing Conductor is designed to help AWS customers, such as Managed Service Providers or enterprise billing administrators, customize billing rates, configure billing groups, and generate proforma invoices that reflect custom billing rules without changing the underlying consolidated AWS bill.

Step-by-Step Solution

1
Analyze the business requirements: the provider needs to partition billing data, apply custom markup rates, and generate proforma invoices without changing the actual AWS consolidated invoice.
Identified the need for custom billing logic and billing groups rather than estimation, analysis, or alerting.
This establishes that the solution must act on actual billing records to create a customized view.
2
Evaluate the capabilities of the available AWS billing and cost tools.
AWS Pricing Calculator is for pre-deployment estimation; AWS Cost Explorer is for historical analysis; AWS Budgets is for threshold alerts; AWS Billing Conductor is for customizing billing rates and billing groups.
Evaluating tools ensures that the tool selected directly matches the requirement of generating custom rate proforma invoices.
3
Select AWS Billing Conductor as the matching tool.
AWS Billing Conductor is the correct choice because it is designed specifically for managed service providers and enterprise billing administrators to customize rates and generate proforma invoices.
AWS Billing Conductor meets all design constraints without affecting the consolidated Organization billing.

Key Concept

AWS Billing Conductor allows customers to customize billing rates, organize accounts into custom billing groups, and generate proforma billing reports representing custom logic.
Estimated Time:1m 30s
Question 1293Question →

A healthcare provider manages separate AWS accounts for different clinics under its organization. The finance department wants to pay for all these accounts using a single payment method while also combining their usage to qualify for volume pricing discounts. Which AWS feature should the company use to meet these requirements?

Show answer & explanation

Answer: Consolidated billing in AWS Organizations

Answer

Consolidated billing in AWS Organizations
Consolidated billing in AWS Organizations enables a single payment method for all accounts in the organization, generating a unified invoice. It also aggregates the usage across all member accounts, allowing the organization to meet volume pricing tiers faster than individual accounts would.

Step-by-Step Solution

1
Identify the primary business requirements: paying a single bill for multiple AWS accounts and aggregating usage to qualify for volume pricing discounts.
Requirements point to a feature that centralizes payments and aggregates resources for pricing tiers.
This helps filter out tools that only provide reporting, tracking, or security policies.
2
Evaluate the options against these requirements: Consolidated billing allows multiple accounts to be paid under a single primary account and aggregates usage for pricing benefits.
Consolidated billing matches both requirements perfectly.
AWS Organizations offers consolidated billing specifically to address multi-account cost consolidation and volume discounts.

Key Concept

Consolidated billing allows organizations to consolidate payments for multiple AWS accounts and aggregate usage to achieve volume discounts.
Question 1294Question →

An individual developer is utilizing the AWS Free Tier (12-Month Free) to host small applications. During a 30-day month, the developer runs two t2.micro Amazon EC2 Linux instances continuously at the same time. How will the developer be billed for this EC2 usage?

Show answer & explanation

Answer: The developer is billed at standard On-Demand rates for the EC2 hours that exceed the combined 750-hour monthly Free Tier limit.

Answer

The developer is billed at standard On-Demand rates for the EC2 hours that exceed the combined 750-hour monthly Free Tier limit.
The correct answer is correct because the AWS Free Tier provides 750 hours of combined monthly usage for t2.micro or t3.micro instances. When running multiple instances concurrently, their run hours are added together. In a 30-day month, two instances run for a total of 1,440 hours, meaning the developer is billed for the 690 hours that exceed the 750-hour limit.

Step-by-Step Solution

1
Calculate the total hours of EC2 usage for the month.
Two instances running continuously for a 30-day month results in 2×30 days×24 hours/day=1,440 hours2 \times 30 \text{ days} \times 24 \text{ hours/day} = 1,440 \text{ hours} of usage.
Total usage must be calculated to compare against the AWS Free Tier limit.
2
Compare the total hours against the AWS Free Tier limit and identify the billing outcome.
The Free Tier provides 750 free hours. The excess usage is 1,440−750=690 hours1,440 - 750 = 690 \text{ hours}, which is billed at the standard On-Demand rate.
Since the 750-hour limit is aggregated across all running instances, any hours beyond 750 are billable.

Key Concept

AWS Free Tier EC2 limits are aggregated monthly across all active instances.
Question 1295Question →

A media streaming company is launching two new services on Amazon EC2. The first is an analytics application that must run continuously 24/7 with a highly predictable CPU utilization pattern over a three-year period. The second is a video transcoding microservice that processes user-uploaded media files; these jobs are stateless, store intermediate progress in Amazon S3, and can be interrupted or restarted without data loss. Which two Amazon EC2 pricing models should the company select to meet these requirements at the lowest cost?

Select all that apply

Show answer & explanation

Answer: Reserved Instances to host the continuously running analytics application; Spot Instances to run the video transcoding microservice

Answer

The company should select Reserved Instances for the continuously running analytics application and Spot Instances for the video transcoding microservice.
For the analytics application, Reserved Instances are correct because they offer significant discounts for a committed three-year, steady-state, 24/7 workload. For the transcoding microservice, Spot Instances are correct because the workload is stateless and fault-tolerant, allowing the company to leverage spare EC2 capacity at the lowest cost.

Step-by-Step Solution

1
Analyze the requirements for the first workload (analytics application).
The analytics application is a steady-state, predictable workload running 24/7 over a three-year period.
For long-term, predictable workloads, AWS Reserved Instances or Savings Plans provide significant cost savings (up to 72% discount) compared to On-Demand instances.
2
Analyze the requirements for the second workload (video transcoding microservice).
The video transcoding microservice is stateless, stores progress in Amazon S3, and can tolerate interruptions.
Spot Instances utilize spare EC2 capacity at discounts up to 90% off On-Demand rates, making them the most cost-effective option for fault-tolerant, interruptible workloads.

Key Concept

Selecting optimal Amazon EC2 pricing models based on workload predictability, duration, and fault tolerance.
Estimated Time:1m 30s
Question 1296Question →

A multinational retail enterprise uses consolidated billing under AWS Organizations to manage multiple member accounts. The central finance team needs to generate custom pro-forma invoices that apply specific markup rates to individual business units for internal chargeback reporting. Additionally, they must configure automated alerts to notify team leads when their monthly costs are forecasted to exceed a set budget. Which two AWS Billing and Cost Management tools should the enterprise use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Billing Conductor; AWS Budgets

Answer

The enterprise should use AWS Billing Conductor to generate custom pro-forma invoices with markup rates, and AWS Budgets to configure proactive alerts for forecasted cost overruns.
AWS Billing Conductor is correct because it enables enterprises to customize billing data, apply custom markup rates to specific accounts within billing groups, and generate pro-forma invoices for internal showback/chargeback. AWS Budgets is correct because it allows the configuration of custom thresholds to alert users proactively when forecasted or actual costs are exceeded.

Step-by-Step Solution

1
Identify the tool required for the first requirement: generating custom pro-forma invoices with markup rates for internal chargebacks.
AWS Billing Conductor allows AWS entities to customize billing data for showback and chargeback, creating billing groups and applying custom pricing rules (markups/discounts) to generate pro-forma invoices.
This tool specifically enables service providers and enterprise finance teams to customize billing views without changing the actual AWS invoice.
2
Identify the tool required for the second requirement: configuring automated alerts based on forecasted cost thresholds.
AWS Budgets supports setting custom budgets that trigger proactive alerts (via email or SNS) when forecasted or actual costs exceed set thresholds.
AWS Budgets is the primary service for setting thresholds and proactive alerting on forecasted spend.
3
Differentiate and eliminate the incorrect billing tools.
AWS Cost Explorer is eliminated because it is a reactive reporting tool for historical analysis. AWS Pricing Calculator is eliminated because it is a pre-deployment estimation tool.
Neither of these tools supports custom pricing adjustments (like markups for specific accounts) or active threshold alerting.

Key Concept

Differentiating between proactive alerting, billing customization, historical analysis, and cost estimation tools within AWS Billing and Cost Management.
Question 1297Question →

A financial services firm wants to run a containerized trading application that requires single-digit millisecond latency for end-users located in a specific metropolitan city that does not host an AWS Region. The firm wants to deploy standard AWS compute and storage services close to these users without managing their own on-premises infrastructure. Which AWS global infrastructure component should the firm use to meet these requirements?

Show answer & explanation

Answer: AWS Local Zones

Answer

AWS Local Zones
AWS Local Zones are designed to run latency-sensitive portions of applications close to end-users in metropolitan areas where no AWS Region currently exists, allowing developers to provision resources like Amazon EC2 instances and EBS volumes close to users.

Step-by-Step Solution

1
Analyze the business requirements for latency and location constraints.
The application requires single-digit millisecond latency for users in a metropolitan area that does not have an AWS Region.
This rules out deploying directly to a standard AWS Region or Availability Zone since they are physically distant.
2
Identify the global infrastructure component that runs compute and storage services in metropolitan areas.
AWS Local Zones allow running select services (like EC2, ECS, EKS, EBS) close to geographic locations containing large populations or industries.
This directly satisfies the requirement to deploy compute and storage close to users without maintaining on-premises hardware.

Key Concept

AWS Local Zones provide low-latency compute and storage services in metropolitan areas where there is no full AWS Region.
Estimated Time:1m 0s
Question 1298Question →

A company is establishing a hybrid network environment. They need to securely connect their on-premises data center to a single Virtual Private Cloud (VPC) in AWS, and they also require a firewall mechanism that filters inbound and outbound traffic specifically at the subnet level. Which AWS networking and security components should the company implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Network Access Control Lists (Network ACLs); AWS Site-to-Site VPN

Answer

Network Access Control Lists (Network ACLs) and AWS Site-to-Site VPN are the correct components.
The correct options are Network Access Control Lists (Network ACLs) and AWS Site-to-Site VPN. Network ACLs operate at the subnet level to act as a stateless firewall for controlling traffic entering and leaving subnets. AWS Site-to-Site VPN provides a secure and cost-effective way to connect an on-premises data center to a single VPC.

Step-by-Step Solution

1
Identify the requirement for filtering traffic at the subnet boundary.
Network Access Control Lists (Network ACLs) operate at the subnet level to filter traffic, fulfilling the security requirement.
Security groups, while also firewalls, operate at the instance level rather than the subnet level.
2
Identify the requirement to securely connect the on-premises data center to a single VPC.
AWS Site-to-Site VPN provides a secure IPsec connection between the on-premises network and the VPC.
Other services like AWS Transit Gateway are designed for complex hub-and-spoke architectures connecting multiple VPCs and networks, which is unnecessary for a single VPC connection.

Key Concept

Filtering subnet traffic using Network ACLs and establishing hybrid connectivity using VPN.
Question 1299Question →

SmartHaven, an IoT smart home provider, is planning to migrate its device telemetry ingestion platform from an on-premises data center to AWS. The platform experiences massive traffic spikes every evening when users return home, but remains mostly idle during the night. Which of the following describe the economic advantages of migrating this workload to AWS? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Replacing upfront capital expenses (CapEx) with variable operating expenses (OpEx); Leveraging elasticity to dynamically scale resources to match the evening demand peaks, reducing costs during idle hours

Answer

The correct options are: replacing upfront capital expenses (CapEx) with variable operating expenses (OpEx); and leveraging elasticity to dynamically scale resources to match the evening demand peaks, reducing costs during idle hours.
The correct options are the ones stating that the company can replace upfront capital expenses (CapEx) with variable operating expenses (OpEx), and leverage elasticity to dynamically scale resources to match the evening demand peaks. The shift to OpEx allows the company to avoid heavy initial infrastructure investments, while elasticity ensures they do not pay for idle servers during the low-traffic night hours.

Step-by-Step Solution

1
Analyze the financial transition in cloud migration.
Identify that cloud migration shifts financial models from purchasing hardware upfront (capital expenses) to a pay-as-you-go consumption model (operating expenses).
This determines the validity of CapEx and OpEx cost descriptions.
2
Evaluate how the workload's seasonal/daily demand pattern affects resource utilization.
The evening peak and nightly idle pattern means capacity requirements are variable. Leveraging elasticity allows the company to run resources only when needed, avoiding paying for idle capacity.
This validates the role of elasticity in reducing waste and cost.
3
Assess the incorrect options for architectural and billing mismatches.
Reject options that describe shifting to CapEx, running at peak capacity continuously (which eliminates the benefit of elasticity), or misapplying Spot Instances to critical, stateful databases.
This eliminates distractors based on common cloud economics misconceptions.

Key Concept

Cloud Economics: CapEx vs OpEx and Elasticity
Question 1300Question →

A developer is planning to use the AWS Free Tier to run a small personal project. Which of the following statements correctly describe how the AWS Free Tier limits and policies are applied? (Select TWO)

Select all that apply

Show answer & explanation

Answer: The 750750 hours of free EC2 usage per month is shared across all active t2.micro or t3.micro instances in the account.; Always Free offers do not expire at the end of the 1212-month period and remain active as long as the account exists.

Answer

The correct statements are that the 750750 hours of free EC2 usage per month is shared across all active t2.micro or t3.micro instances, and Always Free offers do not expire at the end of the 1212-month period.
The correct statements explain that the 750750-hour EC2 limit is a monthly aggregate shared by all eligible instances and that Always Free offers persist beyond the initial 1212-month period.

Step-by-Step Solution

1
Review the monthly limit for Amazon EC2 within the AWS Free Tier.
The Free Tier provides 750750 hours of t2.micro/t3.micro instances per month, which accumulates across all running instances rather than applying individually to each.
To determine if running multiple instances concurrently will exceed the free allowance.
2
Identify which AWS Free Tier offers expire and which remain active.
Always Free offers do not expire after the 1212-month sign-up period, whereas 1212-Month Free offers do expire.
To differentiate the duration of the different Free Tier categories.

Key Concept

Understanding AWS Free Tier types, limits, and expiration rules.
PreviousPage 65 / 74Next