Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 1341Question →

A healthcare provider is deploying a new electronic health record (EHR) database on Amazon EC2. The database must run continuously with consistent performance 24 hours a day, 7 days a week. The provider is committed to running this workload for the next three years and knows the specific instance type and AWS Region they will use. Which Amazon EC2 pricing model should the provider select to minimize costs for this database workload?

Show answer & explanation

Answer: Reserved Instances

Answer

The correct answer is Reserved Instances because it provides a significant discount for steady-state, predictable workloads with a long-term commitment.
Reserved Instances are the most cost-effective option for steady-state, predictable workloads that must run continuously. By committing to a 3-year term for a specific instance configuration, the healthcare provider receives a significant discount compared to standard hourly pricing.

Step-by-Step Solution

1
Analyze the workload characteristics from the scenario.
The EHR database is a critical workload that requires uninterrupted, steady-state execution 24/7 for a predictable 3-year period using a specific instance type.
Understanding workload predictability and tolerance for interruption is the first step in selecting the correct EC2 pricing model.
2
Evaluate the suitability of the available pricing models.
Spot Instances are ruled out due to interruption risk. On-Demand is ruled out because it is too expensive for long-term predictable needs. Upfront hardware purchase is not supported by AWS. Reserved Instances fit a 3-year commitment for a specific instance configuration.
Comparing the technical constraints and cost-efficiency of each option identifies the optimal choice.

Key Concept

AWS EC2 pricing models and commitment-based discounts
Question 1342Question →

A digital services startup wants to consolidate its billing and governance across multiple business units. The startup decides to bring several standalone AWS accounts under a single AWS Organization using consolidated billing. The IT security team wants to define permission boundaries for these accounts, while the finance team wants to ensure they benefit from bulk resource consumption.

Which two of the following statements correctly describe the behavior or features of AWS Organizations and consolidated billing in this scenario? (Select TWO)

Select all that apply

Show answer & explanation

Answer: The resource usage across all member accounts is aggregated to calculate volume pricing discounts for services like Amazon S3, lowering the overall cost for the organization.; Service Control Policies (SCPs) can be applied to Organizational Units (OUs) to restrict the maximum permissions for member accounts, but they do not grant permissions.

Answer

The correct statements are that resource usage is aggregated across accounts for volume discounts, and that Service Control Policies (SCPs) act as permission boundaries rather than granting permissions.
AWS Organizations consolidated billing aggregates resource usage across all member accounts to qualify for tiered volume discounts (such as S3 storage pricing tiers). Additionally, Service Control Policies (SCPs) act as permission boundaries (guardrails) for the organization or OUs, specifying the maximum allowed permissions without granting any access directly.

Step-by-Step Solution

1
Analyze the pricing benefits of consolidated billing.
AWS combines the usage from all member accounts in the Organization to calculate volume tier discounts (e.g., for Amazon S3), reducing costs.
Consolidated billing treats all accounts within the organization as a single account for volume pricing calculation purposes.
2
Evaluate the behavior of Service Control Policies (SCPs).
SCPs act as maximum permission boundaries (guardrails) at the OU or account level but do not grant any permissions.
SCPs restrict what actions can be performed but do not replace IAM policies, which must still be used to grant permission to users or roles.

Key Concept

Benefits and governance mechanisms of AWS Organizations and consolidated billing, including aggregated volume discounts and the function of Service Control Policies (SCPs).
Question 1343Question →

A company has exactly two Virtual Private Clouds (VPCs) in the same AWS Region and needs to enable secure, low-latency, and high-bandwidth communication between them. The network traffic must remain within the AWS backbone network, and they want to avoid any additional hourly base charges or per-gigabyte data processing fees. Which AWS networking service or feature should they use to connect these two VPCs?

Show answer & explanation

Answer: VPC Peering

Answer

VPC Peering
VPC Peering is the correct option because it allows the routing of traffic between two VPCs using private IP addresses as if they were in the same network. There are no hourly charges or data processing fees associated with VPC Peering itself, only standard data transfer charges, which satisfies the cost constraint.

Step-by-Step Solution

1
Analyze the requirements for connecting exactly two VPCs in the same region: low-latency, secure, entirely on the AWS backbone, and minimizing costs (no hourly fees or data processing charges).
Identified that the connection is a simple point-to-point VPC-to-VPC connection.
This rules out complex hub-and-spoke systems and external hybrid networking solutions.
2
Compare the cost models of VPC Peering and AWS Transit Gateway.
VPC Peering has no hourly setup charges or data processing fees, whereas Transit Gateway charges both hourly per-attachment fees and per-GB data processing fees.
VPC Peering is the most cost-efficient choice for connecting a pair of VPCs.

Key Concept

AWS VPC Peering provides a direct, low-latency, and cost-effective connection between two VPCs without extra hourly fees, unlike AWS Transit Gateway which is suited for complex multi-VPC architectures.
Question 1344Question →

A smart agriculture company is deploying two distinct workloads on Amazon EC2. The first workload is a telemetry ingestion engine that runs continuously throughout the year with a highly predictable baseline resource utilization. The second workload is a periodic, non-critical data analysis job that can be interrupted and resumed at any time without affecting the application's integrity. Which two Amazon EC2 pricing models should the company select to achieve the most cost-effective solution? (Select TWO).

Select all that apply

Show answer & explanation

Answer: Savings Plans for the telemetry ingestion engine; Spot Instances for the periodic data analysis job

Answer

Savings Plans for the telemetry ingestion engine and Spot Instances for the periodic data analysis job.
Savings Plans provide substantial discounts (up to 72%) compared to On-Demand pricing in exchange for a commitment to a consistent amount of compute usage, making them ideal for the continuous, predictable telemetry workload. Spot Instances leverage spare AWS capacity to offer discounts up to 90%, which is perfect for non-critical, interruptible data analysis jobs.

Step-by-Step Solution

1
Analyze the resource utilization and runtime requirements of the telemetry ingestion workload.
The workload runs continuously and has a predictable baseline throughout the year.
Continuous, predictable workloads benefit from commitment-based discounts like Savings Plans or Reserved Instances rather than paying full On-Demand prices.
2
Analyze the tolerance for interruption and flexibility of the data analysis workload.
The job is periodic, non-critical, and can tolerate interruptions without data integrity issues.
Workloads that are highly flexible and interruptible are perfect candidates for Spot Instances, which provide the largest discount tier in EC2.

Key Concept

AWS Pricing Models for EC2 instances based on workload characteristics
Estimated Time:1m 30s
Question 1345Question →

A company is reviewing the features available under the free AWS Basic Support plan. Which of the following resources or services are included in this plan at no additional cost? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: 24/7 access to customer service for billing and account inquiries; Access to the 7 core AWS Trusted Advisor checks

Answer

The resources included in the AWS Basic Support plan at no additional cost are 24/7 access to customer service for billing and account inquiries, and access to the 7 core AWS Trusted Advisor checks.
The free AWS Basic Support plan provides 24/7 access to customer service for billing and account management, as well as access to the 7 core AWS Trusted Advisor checks. These features are standard for all AWS accounts without requiring a paid subscription.

Step-by-Step Solution

1
Identify the features of the AWS Basic Support plan.
The Basic plan is free and includes access to customer service for billing/account issues, support forums, documentation, the AWS Health Dashboard, and 7 core Trusted Advisor checks.
This establishes the baseline of what is free to all AWS users.
2
Evaluate each option against the identified features of the Basic plan.
Billing and account customer service (24/7) and core Trusted Advisor checks are free. Technical support, TAMs, and architectural guidance require paid support plans.
This isolates the correct options from the paid support plan features.

Key Concept

AWS Basic Support plan features
Question 1346Question →

A digital archiving firm, ArchivalSafe, is planning to migrate its legacy document indexing system from an on-premises data center to the AWS Cloud. The current system requires upfront hardware purchases every three years to handle peak storage and indexing periods, resulting in underutilized servers during off-peak months. Which two of the following represent the primary cloud economics benefits that ArchivalSafe will realize by migrating to AWS? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Shifting from upfront capital expenses (CapEx) to variable operating expenses (OpEx), paying only for the storage and compute resources consumed; Leveraging elasticity to dynamically scale resources up or down to match actual demand, eliminating the cost of idle capacity

Answer

Shifting from upfront capital expenses to variable operating expenses, and leveraging elasticity to dynamically scale resources to match actual demand.
Moving to the AWS Cloud allows the company to transition from capital expenses (CapEx) to variable operating expenses (OpEx), meaning they pay only for what they use instead of buying hardware upfront. Furthermore, cloud elasticity enables the company to scale resources dynamically to align with demand spikes and scale down during off-peak times, eliminating underutilized server costs.

Step-by-Step Solution

1
Analyze the business scenario to identify the primary cost inefficiencies: upfront hardware purchases every three years (representing capital expenses) and underutilized servers during off-peak periods (representing resource waste).
Identified capital expenditure (CapEx) inefficiencies and lack of elasticity as the main problems.
Understanding the baseline problem is necessary to map it to the correct AWS cloud economics solutions.
2
Evaluate the options against AWS cloud economics principles, specifically how AWS transitions capital expenses to operational expenses and how elasticity dynamically resolves underutilization.
Determined that shifting from CapEx to OpEx addresses the upfront purchasing cycles, and leveraging elasticity addresses the idle capacity costs.
Matching AWS features like pay-as-you-go pricing and auto-scaling directly answers the business scenario requirements.

Key Concept

AWS cloud economics principles focus on shifting capital expenses to operational expenses and leveraging elasticity to pay only for resources consumed.
Question 1347Question →

A logistics enterprise acquires a regional delivery partner and moves the partner's standalone AWS account into the enterprise's AWS Organizations structure. The enterprise organization uses consolidated billing and has a Service Control Policy (SCP) at the root level that denies access to Amazon Redshift. The partner account contains active EC2 Reserved Instances (RIs) and has an IAM administrator user who needs to manage an existing Amazon Redshift cluster. Which of the following describes the immediate impact of this integration on the partner account's billing and service access?

Show answer & explanation

Answer: The partner account's billing is consolidated under the enterprise, its EC2 usage qualifies for the enterprise's volume pricing discounts, and the IAM administrator is immediately blocked from accessing Amazon Redshift.

Answer

The partner account's billing is consolidated under the enterprise, its EC2 usage qualifies for the enterprise's volume pricing discounts, and the IAM administrator is immediately blocked from accessing Amazon Redshift.
Upon joining an AWS Organization, a member account's billing immediately consolidates under the organization's management account. This allows the organization to benefit from aggregated volume pricing discounts and share existing Reserved Instances. At the same time, any Service Control Policies (SCPs) applied at the organization's root or OUs act as permission guardrails that filter the account's permissions. Because the root SCP denies access to Amazon Redshift, this restriction immediately overrides any local IAM permissions, blocking the administrator user from managing the Amazon Redshift cluster.

Step-by-Step Solution

1
Analyze the impact on billing consolidation.
The standalone account's billing is linked to the organization's management account immediately upon accepting the invitation.
AWS Organizations features consolidated billing, which aggregates payments and usage immediately across all member accounts.
2
Evaluate volume discounts and Reserved Instance sharing.
The partner account's active RIs can be shared across the organization, and its resource usage aggregates towards volume tiers.
By default, consolidated billing enables sharing of Reserved Instances and Savings Plans across all linked accounts to minimize costs.
3
Assess the behavior of Service Control Policies (SCPs) on administrative access.
The root-level SCP denying Amazon Redshift overrides the local IAM administrator permissions, blocking access.
SCPs define the maximum permission boundary for an account. They apply to all users and roles within member accounts, including the account root user and administrator roles.

Key Concept

AWS Organizations Consolidated Billing and Service Control Policies (SCPs)
Estimated Time:2m 0s
Question 1348Question →

An automotive manufacturer is designing a telemetry collection platform on AWS to gather real-time data from connected vehicles. The architectural team must ensure the platform is highly resilient to localized physical disasters, while also complying with national data privacy laws that require data to remain within a specific country. Which two statements describe the characteristics of AWS Regions and Availability Zones (AZs) that the team must consider?

Select all that apply

Show answer & explanation

Answer: Each AWS Region is a separate geographic area, and selecting a specific Region ensures that customer data remains within that geographic boundary to meet data residency laws.; Availability Zones within a single Region are physically isolated from one another and have independent power, cooling, and physical security.

Answer

Selecting a specific AWS Region ensures that data remains within its geographic boundary for data residency, and using physically isolated Availability Zones within that Region protects against localized physical disasters.
The correct statements are that selecting a specific AWS Region ensures that customer data remains within that geographic boundary to meet data residency laws, and that Availability Zones within a single Region are physically isolated from one another with independent power, cooling, and physical security. These characteristics directly satisfy the requirements of data sovereignty and resilience against local physical disasters.

Step-by-Step Solution

1
Analyze the data residency requirement.
Determine that AWS Regions are geographic areas that provide complete data isolation, allowing data residency compliance.
AWS guarantees that data stored in a specific Region remains there unless explicitly moved by the user.
2
Analyze the high resiliency and localized physical disaster requirement.
Identify that Availability Zones are physically isolated locations with independent power, cooling, and physical security.
This isolation ensures that a disaster affecting one Availability Zone does not impact another within the same Region.

Key Concept

AWS Regions provide data isolation and residency boundaries, while Availability Zones within a Region provide fault tolerance and physical resiliency.
Question 1349Question →

A company is planning to deploy a containerized microservice application on AWS. The application needs to run continuously to handle incoming web traffic. The development team wants to use a container orchestration tool but wants to eliminate the need to provision, configure, or patch virtual servers. Which AWS compute option best meets these requirements?

Show answer & explanation

Answer: Amazon Elastic Container Service (Amazon ECS) with AWS Fargate

Answer

Amazon Elastic Container Service (Amazon ECS) with AWS Fargate
Amazon Elastic Container Service (Amazon ECS) with AWS Fargate provides a serverless container orchestration environment. It allows containerized applications to run continuously without the customer needing to provision, manage, or patch the underlying virtual machines, fulfilling all requirements.

Step-by-Step Solution

1
Analyze the workload characteristics
The application is containerized, runs continuously, and requires container orchestration.
Identifying containerization and continuous running requirements helps narrow down the service choices to container orchestration platforms.
2
Evaluate management overhead requirements
The company wants to eliminate the need to patch, configure, or provision virtual servers.
This constraint rules out infrastructure-as-a-service (IaaS) options like Amazon EC2 or Amazon Lightsail where server maintenance is the user's responsibility.
3
Compare serverless compute options for containers
AWS Fargate runs containers serverlessly, while AWS Lambda is event-driven with execution limits and is not suitable for continuous web microservices.
AWS Fargate under Amazon ECS is the appropriate serverless option designed for continuously running containerized applications.

Key Concept

AWS serverless container orchestration using Amazon ECS and AWS Fargate
Question 1350Question →

A media company uploads news broadcast videos daily to Amazon S3. These video files are heavily accessed by viewers for the first 14 days after upload. After this initial period, the videos are rarely requested. However, if a video is requested, it must be available immediately (within milliseconds) for streaming. The company wants a cost-effective storage class that maintains high availability and durability across multiple Availability Zones. Which Amazon S3 storage class is the most appropriate for storing the videos after the first 14 days?

Show answer & explanation

Answer: Amazon S3 Standard-Infrequent Access (S3 Standard-IA)

Answer

Amazon S3 Standard-Infrequent Access (S3 Standard-IA) is the correct storage class because it provides cost-effective storage for infrequently accessed data with millisecond retrieval times and multi-AZ redundancy.
The correct storage class is Amazon S3 Standard-Infrequent Access (S3 Standard-IA). It is optimized for data that is accessed less frequently but requires immediate (millisecond) access when requested. It also stores data redundantly across multiple Availability Zones, meeting all of the company's requirements.

Step-by-Step Solution

1
Identify the key access pattern requirements from the scenario.
The data is accessed frequently for the first 14 days, and then rarely accessed. However, when accessed, retrieval must be immediate (in milliseconds).
Understanding the retrieval latency requirement helps eliminate archival storage classes that have retrieval delays.
2
Identify the availability and durability requirements.
The storage must maintain high availability and durability across multiple Availability Zones.
This helps distinguish between multi-AZ storage classes and single-AZ storage classes.
3
Evaluate the matching Amazon S3 storage classes against the requirements.
Amazon S3 Standard-Infrequent Access (S3 Standard-IA) is the only class that offers lower storage costs for infrequently accessed data, millisecond access, and multi-AZ resilience.
Matching the characteristics of each storage class to the business requirements yields the correct solution.

Key Concept

Amazon S3 Storage Classes and their retrieval times, availability, and durability characteristics.
Estimated Time:1m 0s
Question 1351Question →

A company is planning to migrate its workloads to AWS and requires a dedicated Technical Account Manager (TAM) to provide proactive guidance and coordinate operational reviews. Which AWS Support plan is the minimum tier that includes a dedicated TAM?

Show answer & explanation

Answer: Enterprise Support

Answer

Enterprise Support
The Enterprise Support plan is the minimum tier that provides a dedicated Technical Account Manager (TAM). The TAM acts as a designated point of contact to help manage environments, coordinate operational reviews, and provide proactive architectural advice.

Step-by-Step Solution

1
Identify the primary requirement in the scenario.
The company requires a dedicated Technical Account Manager (TAM).
This establishes the core service feature that needs to be evaluated against the plans.
2
Evaluate the TAM availability across AWS Support plans.
Developer and Business plans have no TAM access. Enterprise On-Ramp offers a pooled TAM. Enterprise Support offers a dedicated TAM.
This identifies which plans fulfill the requirement of having a dedicated TAM resource.
3
Determine the minimum plan that satisfies the dedicated TAM requirement.
Enterprise Support is the only plan from the options that includes a dedicated TAM.
This confirms the correct minimum support plan tier.

Key Concept

AWS Support Plan Tiers and Features
Question 1352Question →

A logistics company, ShipRapid, plans to migrate its package tracking and routing platform to the AWS Cloud. Currently, the company pays upfront for physical servers and data center infrastructure on a five-year refresh cycle, even though resource utilization fluctuates daily and spikes heavily during the holiday season. Which TWO of the following benefits of AWS cloud economics directly address this company's challenges? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Shifting from upfront capital expenses (CapEx) to variable operating expenses (OpEx), paying only for computing resources when they are active; Leveraging cloud elasticity to dynamically scale resources up and down to match demand, minimizing cost during low-use periods

Answer

The benefits that align with AWS cloud economics are shifting from upfront capital expenses to variable operating expenses, and leveraging cloud elasticity to dynamically scale resources to match demand.
AWS cloud economics helps businesses transition from a capital expense (CapEx) model, where they pay for physical infrastructure upfront, to a variable operational expense (OpEx) model, where they pay only for what they consume. In addition, elasticity allows resources to scale dynamically in response to real-time demand fluctuations, reducing costs associated with idle, over-provisioned infrastructure during off-peak times.

Step-by-Step Solution

1
Analyze the company's current on-premises pain points regarding hardware refresh cycles and seasonal/daily demand fluctuations.
Identify that upfront 5-year purchasing represents high Capital Expenses (CapEx), and provisioning for holiday spikes leads to wasted costs due to low daily utilization.
Understanding the baseline financial and operational challenges is necessary to determine which cloud economics concepts apply.
2
Evaluate the financial benefit of transitioning physical server costs to AWS.
Determine that moving to a consumption-based model shifts CapEx to variable Operating Expenses (OpEx), directly addressing the 5-year upfront cycle cost.
This shows how AWS pricing models resolve the budget rigidity of on-premises hosting.
3
Evaluate the operational benefit of scaling resources dynamically to match varying load.
Determine that elasticity allows the package tracking system to scale down during low-traffic periods, avoiding costs for idle resources while scaling up for peak holiday seasons.
This links the technical capability of elasticity to the economic benefit of cost optimization.

Key Concept

Understand concepts of cloud economics
Estimated Time:1m 30s
Question 1353Question →

A financial technology company is planning to deploy a new serverless backend on AWS. The cloud engineering team needs to estimate the monthly cost of this new architecture before launching it. Additionally, the finance team wants to set up automated alerts to notify them if their actual or forecasted monthly spending exceeds 1000010{}000.

Which TWO of the following AWS Billing and Cost Management tools should the company use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Pricing Calculator; AWS Budgets

Answer

The company should use the AWS Pricing Calculator to estimate the costs of the serverless backend prior to deployment, and AWS Budgets to establish proactive alerts for when actual or forecasted monthly spending exceeds the threshold.
The correct selection involves using the AWS Pricing Calculator to estimate costs before launching resources, combined with AWS Budgets to configure proactive notifications when spending thresholds are breached or forecasted to be breached.

Step-by-Step Solution

1
Identify the pre-deployment cost estimation requirement.
The AWS Pricing Calculator is the designated tool for estimating costs of AWS architectures before resources are provisioned.
This matches the cloud engineering team's goal of estimating the serverless backend's monthly cost.
2
Identify the automated threshold alerting requirement.
AWS Budgets is the designated tool for defining budget limits and sending notifications when costs or usage exceed (or are forecasted to exceed) those limits.
This matches the finance team's requirement to receive notifications if spending exceeds 1000010{}000.

Key Concept

Differentiating AWS cost tools for estimation (AWS Pricing Calculator) and budgeting/alerting (AWS Budgets).
Estimated Time:1m 30s
Question 1354Question →

A research institute is planning a project that will last exactly one year. As part of this project, they need to run a critical data analysis workload on an Amazon EC2 instance for 8 hours every Friday. The analysis cannot be interrupted once it begins. Which EC2 pricing model is the most cost-effective for this workload?

Show answer & explanation

Answer: On-Demand Instances

Answer

On-Demand Instances are the most cost-effective model because the workload runs for only 416416 hours total over the year, making any 1-year commitment far more expensive, while Spot Instances cannot guarantee the required uninterrupted execution.
The correct answer is On-Demand Instances. Because the workload runs for only 8 hours a week, the total run time over the year is 416416 hours. Paying the standard hourly rate for On-Demand is far cheaper than committing to a 1-year Reserved Instance or Savings Plan, which charges for all 8,7608,760 hours of the year. Additionally, On-Demand Instances guarantee that the compute resources will not be reclaimed or interrupted, ensuring the analysis runs successfully to completion.

Step-by-Step Solution

1
Calculate the total hours of compute required for the workload over the course of the project.
The workload runs for 8 hours per week for 52 weeks, which equals 8×52=4168 \times 52 = 416 hours.
Determining the total compute hours helps compare actual usage against commitment-based pricing options.
2
Evaluate the cost of commitment-based models (Reserved Instances and Savings Plans) over a 1-year period.
A 1-year commitment requires paying for all hours in a year (24×365=8,76024 \times 365 = 8,760 hours). Even with a typical discount of 30% to 72%, paying for 8,7608,760 hours is significantly more expensive than paying for only 416416 hours of On-Demand compute.
Evaluating commitment models prevents the misconception that a long-term project automatically warrants a long-term billing commitment.
3
Evaluate the viability of Spot Instances based on the workload requirements.
Spot Instances can be terminated by AWS with a 2-minute warning if capacity is needed elsewhere. Because the analysis must complete without interruption, Spot Instances are disqualified.
Ensuring the technical requirements of the application (no interruption) are met before selecting a pricing model.
4
Select the most cost-effective and compliant pricing option.
On-Demand Instances satisfy the zero-interruption requirement and are the most cost-effective choice since the instance is only billed when running (416416 hours total).
Choosing the final pricing model that matches both the business budget constraints and system stability requirements.

Key Concept

Selecting the optimal Amazon EC2 pricing model based on workload patterns, predictability, and duration.
Question 1355Question →

A digital food delivery startup, QuickBite, experiences predictable surges in traffic daily during lunch and dinner hours, while traffic during the night is negligible. The company is migrating its ordering system to AWS. Which of the following describes the most significant economic advantage of this migration regarding cost optimization?

Show answer & explanation

Answer: The ability to dynamically provision and terminate resources to align with fluctuating daily demand, minimizing cost during low-traffic periods.

Answer

The ability to dynamically provision and terminate resources to align with fluctuating daily demand, minimizing cost during low-traffic periods.
The correct option is correct because the food delivery startup has variable daily workloads. By using cloud elasticity, they can dynamically provision resources during high-traffic lunch and dinner times and terminate them during low-traffic hours, minimizing operational costs.

Step-by-Step Solution

1
Identify the workload characteristics of the startup.
The workload has high peaks during meal hours and extremely low demand overnight.
Understanding the traffic pattern helps determine the appropriate resource management strategy.
2
Evaluate how AWS pricing models and features address this workload pattern.
Elasticity allows the startup to scale resources up and down to match demand, using pay-as-you-go pricing.
Dynamic scaling ensures that the company does not pay for idle capacity during low-traffic periods.
3
Compare options to find the one representing this economic advantage.
Aligning resource provisioning dynamically with daily demand optimizes costs.
This directly matches the cloud economics principle of elasticity and variable cost optimization.

Key Concept

Cloud elasticity and its cost optimization benefits
Question 1356Question →

An independent consultant is developing a prototype application in a test environment on AWS and decides to subscribe to the AWS Developer Support plan. Which two of the following features or resources are included in this plan?

Select all that apply

Show answer & explanation

Answer: Business-hours access to Cloud Support Associates via web/email for a single primary contact; General architectural guidance and technical support for non-production workloads

Answer

The AWS Developer Support plan includes business-hours access to Cloud Support Associates via web/email for a single primary contact, and general architectural guidance and technical support for non-production workloads.
The AWS Developer Support plan is tailored for non-production workloads and early-stage testing. It offers business-hours email/web access to Cloud Support Associates for a single primary contact, and general architectural guidance to help design and test prototypes.

Step-by-Step Solution

1
Identify the target AWS Support plan and its primary audience.
The target plan is the Developer Support plan, which is designed for testing, development, and non-production environments.
This helps filter out enterprise-level or production-level features.
2
Evaluate each option against the capabilities of the Developer Support plan.
Identify that business-hours web/email support by a single contact and support for non-production workloads are features of the Developer tier, whereas 24/7 phone/chat support, full Trusted Advisor checks, and TAM support are restricted to higher tiers.
This selects the correct features and identifies the distractors.

Key Concept

AWS Support Plans Features and Limitations
Question 1357Question →

An organization needs to secure a web application deployed on Amazon EC2 instances. The security administrator must implement a rule to block traffic from a specific malicious IP address before it enters the subnet. Additionally, the administrator wants to allow incoming HTTP traffic to the EC2 instances such that return traffic is automatically allowed without requiring an outbound rule.

Which of the following Amazon VPC security features should the administrator configure to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Security Groups; Network Access Control Lists (Network ACLs)

Answer

Security Groups and Network Access Control Lists (Network ACLs)
The correct options are Security Groups and Network Access Control Lists (Network ACLs). Network ACLs act as a stateless firewall at the subnet level and allow the configuration of explicit deny rules to block a specific malicious IP address before traffic reaches the EC2 instances. Security Groups act as a stateful firewall at the instance level, meaning that once inbound HTTP traffic is permitted, the return outbound traffic is automatically allowed without requiring a matching outbound rule.

Step-by-Step Solution

1
Identify the service needed to block traffic from a specific malicious IP address before it enters the subnet.
Network Access Control Lists (Network ACLs) operate at the subnet level and support explicit deny rules, which allows blocking specific IP addresses.
Security groups do not support deny rules and operate at the instance level rather than the subnet level.
2
Identify the service needed to allow incoming HTTP traffic to EC2 instances such that return traffic is automatically allowed.
Security Groups are stateful firewalls operating at the instance level. Because they are stateful, allowing inbound traffic automatically allows the return outbound traffic.
Network ACLs are stateless, meaning outbound return traffic must be explicitly allowed by outbound rules.

Key Concept

Understanding the differences between Security Groups (stateful, instance-level, allow-only rules) and Network ACLs (stateless, subnet-level, allow and deny rules) for securing an Amazon VPC environment.
Question 1358Question →

A company's security team deploys a third-party firewall purchased from AWS Marketplace as an Amazon Machine Image (AMI) onto an Amazon EC2 instance. Under the AWS Shared Responsibility Model, who is responsible for applying software updates and security patches to this firewall?

Show answer & explanation

Answer: The customer, who maintains full control and responsibility for configuring and patching software deployed on their Amazon EC2 instances.

Answer

The customer is responsible for applying software updates and security patches, as they maintain control of the software deployed on their EC2 instances.
The customer is responsible because deploying an AMI on Amazon EC2 means the software runs within the customer's boundary of the Shared Responsibility Model. The customer must configure and patch the operating system and applications they choose to run.

Step-by-Step Solution

1
Analyze the deployment model of the third-party software.
The firewall is deployed as an Amazon Machine Image (AMI) on an Amazon EC2 instance.
Understanding where the software runs helps determine the boundary of the Shared Responsibility Model.
2
Apply the AWS Shared Responsibility Model to the EC2 deployment.
AWS is responsible for the security of the cloud (underlying hardware, hypervisor, physical security), whereas the customer is responsible for security in the cloud (operating systems, network configuration, and application patching).
This establishes that customer-managed EC2 instances fall under the customer's operational responsibility.
3
Determine if purchasing through AWS Marketplace alters this responsibility.
AWS Marketplace simplifies licensing and billing, but does not transfer administrative or patching duties of EC2-hosted applications to AWS or the vendor.
Purchasing software from a catalog does not change the core responsibility of running and securing it on your instances.

Key Concept

AWS Shared Responsibility Model applied to AWS Marketplace AMI deployments
Question 1359Question →

An online education platform wants to prevent unexpected cloud expenditure. The operations team needs to receive immediate notifications when the monthly data transfer charges for their content delivery network are projected to exceed a specific spending threshold. Which AWS service or tool should the team use to configure these notifications?

Show answer & explanation

Answer: AWS Budgets

Answer

AWS Budgets is the correct tool because it allows organizations to define custom budget thresholds and configures proactive email or SNS notifications when actual or forecasted usage exceeds those limits.
AWS Budgets is specifically designed to let users set custom cost and usage limits and receive proactive notifications when the budget thresholds are breached or forecasted to be breached.

Step-by-Step Solution

1
Analyze the business requirement.
The requirement is to receive immediate alerts when costs are projected (forecasted) to exceed a specific spending threshold.
This establishes that a proactive alerting mechanism is required rather than a planning tool or retrospective analysis tool.
2
Evaluate the capabilities of the billing tools.
AWS Budgets is the only tool listed that natively supports defining budget thresholds and sending proactive alerts based on actual or forecasted metrics.
Matching the alerting requirements to the service features confirms the correct choice.

Key Concept

Differentiating proactive cost alerting (AWS Budgets) from visual analysis (AWS Cost Explorer) and pre-deployment estimation (AWS Pricing Calculator).
Estimated Time:1m 0s
Question 1360Question →

A media streaming company is designing a live video platform on AWS. The architecture team needs to cache video segments closer to global viewers to minimize playback latency. At the same time, they must deploy their video transcoding backend across isolated physical facilities within a single geographic territory to protect against localized power or hardware failures. Which combination of AWS global infrastructure components should the company use to meet these requirements?

Show answer & explanation

Answer: Edge Locations to cache video segments, and Availability Zones to host transcoding backend servers across isolated facilities

Answer

Edge Locations to cache video segments, and Availability Zones to host transcoding backend servers across isolated facilities
Edge Locations are the endpoints used by Amazon CloudFront to cache content closer to end-users worldwide, thereby reducing latency. Availability Zones are isolated locations within an AWS Region that contain one or more physical data centers, providing the infrastructure redundancy needed to survive localized facility failures.

Step-by-Step Solution

1
Analyze the content caching requirement to reduce playback latency for global users.
Identify that Edge Locations (part of the AWS Content Delivery Network) are designed to cache content close to viewers.
Edge Locations host CloudFront caches globally to minimize latency.
2
Analyze the backend redundancy requirement to protect against localized physical failures within a single geographic territory.
Identify that Availability Zones (AZs) consist of one or more discrete, isolated data centers inside an AWS Region.
AZs provide localized physical isolation, power redundancy, and high-speed networking to survive single-facility outages.

Key Concept

AWS Global Infrastructure components and their specific roles: Edge Locations for low-latency content caching, and Availability Zones for localized fault tolerance.
PreviousPage 68 / 74Next