All practice questions

1473 questions

Question 1401Question

A startup is deploying a web-based platform with two virtual networks: one for their frontend web servers and one for their backend database. They want to enable private, low-latency communication between these two virtual networks without routing traffic through the public internet. At the same time, they need to restrict database access so that only the frontend web servers can communicate with the database instances on port 3306, while automatically allowing returning traffic. Which two AWS network or security features should the company implement to meet these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: VPC Peering; Security Groups

Answer

VPC Peering and Security Groups
VPC Peering is correct because it connects two VPCs directly, privately, and with minimal latency. Security Groups are correct because they control traffic statefully at the instance level and allow referencing the frontend instances' security group as the source.

Step-by-Step Solution

1
Analyze the connection requirement.
The company needs a simple, private, low-latency connection between exactly two virtual networks (VPCs) without internet traversal.
VPC Peering is the most direct and cost-effective method to connect two VPCs. AWS Transit Gateway is designed for larger, complex hub-and-spoke multi-VPC networks and is unnecessary here.
2
Analyze the traffic restriction and security requirements.
The company needs to restrict traffic specifically to database instances on port 3306 based on the frontend source, and ensure returning traffic is automatically allowed.
Security Groups operate statefully at the instance level, allowing returning traffic automatically and allowing the frontend security group to be referenced as the source. Network ACLs operate at the subnet level, are stateless, and cannot reference other security groups.

Key Concept

AWS hybrid and inter-VPC network connectivity combined with stateful instance-level security filtering.
Question 1402Question

A financial technology company manages separate AWS accounts for its customer-facing mobile application, core banking ledger, and data analytics platform. To simplify administrative overhead and leverage volume discounts, the company decides to create an organization in AWS Organizations and enable consolidated billing. Which two of the following are benefits of this configuration? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: A single payment method is used to pay for all linked accounts, resulting in a single monthly invoice for the organization.; AWS combines the usage of all member accounts in the organization to qualify for volume-pricing discounts on services like Amazon S3.

Answer

The correct benefits of enabling consolidated billing in AWS Organizations are: (1) using a single payment method to pay for all linked accounts, resulting in a single monthly invoice, and (2) combining usage across all member accounts to qualify for volume-pricing discounts.
Consolidated billing in AWS Organizations provides two major benefits. First, it simplifies payment by consolidating the invoices of all linked accounts into a single monthly bill paid by a single payment method from the management account. Second, it allows the organization to benefit from volume-pricing discounts by aggregating usage (such as S3 storage volume or EC2 usage hours) across all member accounts.

Step-by-Step Solution

1
Analyze the financial and operational capabilities of AWS Organizations consolidated billing.
Identify that consolidated billing provides a central management invoice and pools service usage for tiered discounts.
This establishes the valid pricing and operational advantages of consolidation.
2
Evaluate the distractors against AWS service limits and capabilities.
Eliminate options involving setting budgets with Service Control Policies, transforming OpEx to CapEx, or automatically deleting member root account credentials.
SCPs restrict API actions but do not manage alerts or costs; AWS remains an OpEx model; and root user accounts are not deleted when joining an organization.

Key Concept

Consolidated billing features and boundaries within AWS Organizations
Estimated Time:1m 30s
Question 1403Question

A hospitality company wants to analyze audio recordings from its guest feedback kiosks located in hotel lobbies. The company needs to convert the spoken audio feedback into written text and then analyze the text to identify brand names and determine the guests' sentiment. Which two AWS services should the company use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Transcribe; Amazon Comprehend

Answer

Amazon Transcribe and Amazon Comprehend
To satisfy the requirements, the company should first use Amazon Transcribe to convert the spoken audio from the feedback kiosks into written text. Next, they should use Amazon Comprehend to analyze the resulting text to identify specific entities (such as brand names) and detect the overall sentiment of the guest feedback.

Step-by-Step Solution

1
Determine the service needed to convert the guest audio recordings into written text.
Amazon Transcribe is selected.
Amazon Transcribe converts speech to text, which generates the required transcripts from the audio files.
2
Determine the service needed to analyze the generated text transcripts for brand names and customer sentiment.
Amazon Comprehend is selected.
Amazon Comprehend is designed to analyze text data for entities (like brand names) and sentiment (positive, negative, neutral, or mixed).

Key Concept

Selecting and combining pre-trained AWS AI/ML services to solve speech-to-text and natural language processing business requirements.
Question 1404Question

A software development firm runs integration tests on Amazon EC2 instances. These tests are triggered automatically throughout the day whenever developers commit code. Each test run takes between 15 to 45 minutes to complete. The testing environment must start immediately upon trigger and cannot tolerate any interruptions during execution. Which Amazon EC2 pricing model is the most cost-effective for this workload?

Show answer & explanation

Answer: On-Demand Instances

Answer

On-Demand Instances
On-Demand Instances are the most appropriate choice because they provide reliable compute capacity with no long-term commitment. They start immediately upon request, are billed per second (with a 60-second minimum), and will not be interrupted by AWS during the test execution, perfectly matching the requirements of short-term, unpredictable, and non-interruptible workloads.

Step-by-Step Solution

1
Analyze the workload requirements: it runs sporadically throughout the day for short durations (15 to 45 minutes), requires immediate availability, and cannot tolerate interruptions.
This eliminates options that allow resource interruption or require continuous, long-term resource commitments.
Understanding constraints is critical to matching the workload to the correct pricing model.
2
Evaluate the pricing options against these requirements: Spot Instances can be interrupted, and Reserved Instances or Savings Plans require a 1-year or 3-year commitment which leads to paying for idle time.
On-Demand Instances provide immediate availability, guarantee no interruptions, and charge only for the exact seconds the instance runs.
On-Demand matches the requirement for reliable, short-term, and irregular compute capacity.

Key Concept

Selecting the optimal Amazon EC2 pricing model based on workload patterns and constraints

Alternative Method

Analyzing the trade-off between flexible consumption and long-term commitment helps identify On-Demand as the only model that offers per-second billing with guaranteed availability and zero interruption risk.
Estimated Time:1m 30s
Question 1405Question

A government agency is migrating its national census processing system to AWS. The agency is legally mandated to ensure that all census database records remain strictly within the country's geographic boundaries. Additionally, the system architecture must be designed to withstand the complete failure of an entire physical data center facility without any service interruption.

Which of the following deployment strategies best satisfies these requirements?

Show answer & explanation

Answer: Distributing the database instances across multiple Availability Zones within a single AWS Region located in the host country.

Answer

Distributing the database instances across multiple Availability Zones within a single AWS Region located in the host country.
Distributing the database across multiple Availability Zones within a single AWS Region satisfies both constraints. Availability Zones are physically separated and isolated from one another within a Region, protecting the system from a localized physical disaster. By keeping the deployment within a single AWS Region inside the host country, the data residency requirement is strictly met.

Step-by-Step Solution

1
Identify the compliance and resilience requirements from the scenario.
The system needs to keep all data within the national borders (data residency) and survive a complete data center outage (high availability/disaster recovery).
Establishing clear constraints prevents selecting options that violate legal compliance or fail to provide redundant physical infrastructure.
2
Evaluate the options against the data residency constraint.
Using multiple AWS Regions or replicating logs to another country violates the residency mandate, while using a single Region inside the country maintains compliance.
AWS Regions are geographically isolated, and data replication does not occur across Regions unless explicitly configured by the customer.
3
Evaluate the remaining options against the high availability and physical disaster recovery constraint.
Availability Zones are physically distinct, isolated locations within a Region designed to withstand localized disasters. Using multiple Availability Zones provides high availability, whereas Edge Locations or a single Local Zone do not support multi-data-center database replication.
A single Region contains multiple Availability Zones, allowing the agency to build a highly available architecture without transferring data across country borders.

Key Concept

AWS Global Infrastructure design for high availability and compliance, specifically the difference between Regions and Availability Zones.
Estimated Time:1m 15s
Question 1406Question

An international e-learning platform is optimizing its deployment on AWS. The platform has two key requirements: first, it must store user profile data in a database designed to withstand the complete failure of an entire data center facility without data loss; second, it must minimize latency for students downloading course syllabus PDF documents from different continents. Which of the following AWS infrastructure solutions should the company utilize to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Replicating the database across multiple Availability Zones within the same AWS Region.; Storing and caching the syllabus documents in AWS Edge Locations globally.

Answer

Replicating the database across multiple Availability Zones within the same AWS Region, and storing and caching the syllabus documents in AWS Edge Locations globally.
Replicating the database across multiple Availability Zones within a single AWS Region ensures high availability because Availability Zones are physically separated, isolated data centers connected by low-latency networks, allowing synchronous failover. Caching static documents at AWS Edge Locations utilizes the global Amazon CloudFront network to deliver content from locations physically closer to users, thereby minimizing latency.

Step-by-Step Solution

1
Analyze the database resilience requirement.
Identify that a database must survive the loss of an entire data center facility.
AWS Availability Zones consist of one or more discrete data centers with redundant power, networking, and connectivity, designed for high availability and synchronous replication within a Region.
2
Analyze the global document retrieval latency requirement.
Identify that files need to be retrieved with minimum latency by users distributed across different continents.
AWS Edge Locations cache content close to end users globally using Amazon CloudFront, reducing latency for static file downloads.

Key Concept

AWS Global Infrastructure components serve different design objectives: Availability Zones provide high availability and isolation within a single Region, while Edge Locations provide low-latency global content delivery.
Estimated Time:1m 30s
Question 1407Question

A healthcare provider is deploying a telemedicine application on AWS. The application must be designed for high availability and fault tolerance, ensuring that if a physical data center experiences a power outage, the application continues to run without downtime. The system must also support synchronous database replication within the same geographical territory.

Which AWS Global Infrastructure component should the company use to distribute their application instances to meet these requirements?

Show answer & explanation

Answer: Availability Zones

Answer

Availability Zones
Availability Zones are the correct choice because they are physically isolated locations within an AWS Region, designed to protect applications from local power or cooling outages while remaining close enough to support synchronous data replication and high availability.

Step-by-Step Solution

1
Identify the core requirement for high availability and physical redundancy within a single geographical territory.
The requirement demands physical isolation to survive localized power outages while supporting synchronous replication (low latency).
This helps narrow down infrastructure options that are close enough for low latency but physically isolated.
2
Compare AWS Regions, Availability Zones, Edge Locations, and AWS Outposts.
Availability Zones are distinct groups of physical data centers within a Region, connected by low-latency links. AWS Regions represent separate geographic territories. Edge Locations cache content but do not run applications. AWS Outposts are on-premises.
Choosing the correct component ensures the system meets the high availability and synchronous replication requirements.

Key Concept

AWS Global Infrastructure components, specifically the distinction between Regions, Availability Zones, Edge Locations, and hybrid options.
Estimated Time:1m 0s
Question 1408Question

A cloud administrator is configuring network security for Amazon EC2 instances. The administrator needs to ensure that when inbound web traffic is allowed on port 443, the corresponding outbound response traffic is automatically permitted to return to the client without requiring an explicit outbound rule. Which AWS security feature should the administrator use to achieve this stateful behavior?

Show answer & explanation

Answer: A Security Group

Answer

A Security Group
A Security Group is a stateful firewall that controls inbound and outbound traffic for Amazon EC2 instances. Because it is stateful, if an inbound rule allows traffic (such as on port 443), the corresponding outbound response traffic is automatically permitted to return, regardless of any outbound rules.

Step-by-Step Solution

1
Identify the requirement for stateful behavior where inbound allowed traffic automatically permits returning outbound response traffic.
The security resource must track the state of connections at the instance level.
Stateful firewalls automatically allow response traffic, whereas stateless firewalls require rules in both directions.
2
Evaluate the available options to determine which one is a stateful security feature at the instance level.
Security Groups are stateful and operate at the instance level, whereas Network ACLs are stateless and operate at the subnet level.
This matches the requirement to allow return traffic automatically without explicit outbound rules.

Key Concept

Stateful vs Stateless Network Filtering in AWS
Question 1409Question

An online education platform wants to automatically scan uploaded student profile pictures to identify and flag inappropriate or unsafe content before the images are published. The platform wants to use a pre-trained, fully managed AWS service to achieve this without building custom machine learning models. Which AWS service should the platform use for this capability?

Show answer & explanation

Answer: Amazon Rekognition

Answer

Amazon Rekognition
The correct answer is Amazon Rekognition. This service provides pre-trained computer vision capabilities that allow developers to automate image and video analysis, including content moderation to flag inappropriate or unsafe images, without needing machine learning expertise or custom model development.

Step-by-Step Solution

1
Analyze the business requirement and data type.
The platform needs to analyze images (profile pictures) to identify unsafe or inappropriate content.
Identifying the target data type (images) filters out machine learning services that only process text or audio.
2
Identify the model training constraint.
The service must be fully managed, pre-trained, and require no custom model building or training.
This rules out Amazon SageMaker, which is designed for building, training, and deploying custom models from scratch.
3
Select the correct managed AWS service for computer vision.
Amazon Rekognition is selected as it offers pre-trained computer vision models, including content moderation for images.
Amazon Rekognition directly fulfills the requirement of analyzing image content using built-in, pre-trained models.

Key Concept

AWS Machine Learning Services categorization and use cases
Estimated Time:1m 0s
Question 1410Question

An online educational institute wants to expand its reach by making its English-recorded lecture videos accessible to global students. The institute requires a solution that can automatically convert the audio from the lectures into text transcripts and then translate those English text transcripts into Spanish and French. Which two AWS services should the institute use to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Transcribe; Amazon Translate

Answer

The institute should use Amazon Transcribe to convert the lecture audio into text transcripts, and Amazon Translate to convert those transcripts into Spanish and French.
The organization needs to perform speech-to-text transcription and language translation. Amazon Transcribe is the managed service that converts speech to text, and Amazon Translate is the managed service designed for translating text from one language to another.

Step-by-Step Solution

1
Identify the service needed to convert audio lectures into text transcripts.
Amazon Transcribe is identified as the service that converts speech to text.
The requirement is to automatically convert the audio from the lectures into text transcripts.
2
Identify the service needed to translate the text transcripts from English to Spanish and French.
Amazon Translate is identified as the neural machine translation service that translates text.
The requirement is to translate the English text transcripts into Spanish and French.

Key Concept

AWS Machine Learning services specialize in different modalities; speech-to-text requires Amazon Transcribe, while language translation requires Amazon Translate.
Estimated Time:1m 30s
Question 1411Question

A retail corporation is expanding its AWS infrastructure and now manages twenty Virtual Private Clouds (VPCs) across multiple departments. To optimize operations, the network engineering team wants to implement a centralized network hub to route traffic between all VPCs and their on-premises data center without establishing complex point-to-point connections. At the same time, the security team requires the ability to block traffic from specific external IP addresses at the boundary of each subnet.

Which two AWS features or services should the corporation implement to satisfy both the routing and security requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Transit Gateway; Network Access Control Lists (NACLs)

Answer

AWS Transit Gateway and Network Access Control Lists (NACLs)
AWS Transit Gateway acts as a central hub to connect multiple VPCs and on-premises networks, simplifying routing compared to point-to-point peering. Network Access Control Lists (NACLs) operate at the subnet level and allow explicit deny rules to block specific IP addresses.

Step-by-Step Solution

1
Analyze the routing requirement.
The company needs a centralized hub to route traffic across twenty VPCs and on-premises without complex point-to-point connections.
AWS Transit Gateway is designed precisely for this hub-and-spoke architecture, replacing complex VPC peering meshes.
2
Analyze the security requirement.
The company needs to block traffic from specific IP addresses at the subnet level.
Network Access Control Lists (NACLs) operate at the subnet boundary and support explicit 'deny' rules, which is necessary to block specific IP addresses. Security groups only support 'allow' rules and operate at the instance level.

Key Concept

AWS Network Services (Transit Gateway and NACLs)
Question 1412Question

An entertainment company wants to run a real-time video processing application that requires single-digit millisecond latency for users in a metropolitan area where AWS does not have a full Region. The company wants to deploy compute and storage resources close to these users without owning or operating any physical on-premises infrastructure. Which AWS global infrastructure component should the company use to meet these requirements?

Show answer & explanation

Answer: AWS Local Zones

Answer

AWS Local Zones
AWS Local Zones allow developers to run compute, storage, and database services close to end-users in specific metropolitan areas. This satisfies the requirement of achieving single-digit millisecond latency for video processing workloads while shifting the physical infrastructure management entirely to AWS.

Step-by-Step Solution

1
Analyze the constraint regarding physical on-premises infrastructure.
AWS Outposts is eliminated because it requires installing and managing physical hardware within the customer's own facility.
The company wants to deploy resources without owning or operating physical infrastructure.
2
Evaluate the workload requirement to run compute and storage applications against latency-reducing components.
AWS Edge Locations are eliminated because they are content delivery network (CDN) cache endpoints and do not support running arbitrary compute workloads.
The application requires running real-time video processing compute resources.
3
Differentiate between mobile network latency components and general metropolitan latency components.
AWS Wavelength is eliminated as it is specific to 5G mobile network carriers, leaving AWS Local Zones as the correct solution.
AWS Local Zones extend AWS Regions to metropolitan areas to run general latency-sensitive workloads close to local users.

Key Concept

AWS Local Zones
Question 1413Question

A healthcare provider is migrating its patient record system to AWS. To comply with national regulations, all patient data must remain physically within a specific country's borders. Additionally, the application must be designed to remain fully operational even if an entire data center facility experiences a physical power outage. Which of the following AWS Global Infrastructure configurations best meets both the data residency and high availability requirements?

Show answer & explanation

Answer: Deploying the application in a single AWS Region located in the target country, distributing the workload across multiple Availability Zones.

Answer

Deploying the application in a single AWS Region located in the target country, distributing the workload across multiple Availability Zones.
Deploying the application in a single AWS Region located within the target country satisfies the data residency requirement because AWS does not replicate data outside of a selected Region unless configured by the customer. Distributing the application across multiple Availability Zones within that Region satisfies the high availability requirement, as each Availability Zone consists of one or more physical data centers designed to be isolated from failures in other zones.

Step-by-Step Solution

1
Analyze the data residency constraint.
The application and all its data must reside within a single country's borders. This means the deployment must be contained within an AWS Region that is physically located inside that country.
Deploying resources across multiple regions internationally would violate data sovereignty regulations.
2
Analyze the high availability constraint.
The application must survive the outage of an entire data center facility. This requires distributing the application across multiple Availability Zones within the chosen AWS Region.
Each Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity.

Key Concept

AWS Regions provide data residency boundaries, while Availability Zones within a region provide fault isolation and high availability.
Estimated Time:1m 0s
Question 1414Question

A biotechnology startup runs genomic sequencing batch jobs that take 4 to 6 hours to complete. The sequencing application is designed to automatically checkpoint its progress every 15 minutes, allowing any interrupted job to resume from the last saved state without data loss. The startup needs to run these jobs at the lowest possible cost. Which Amazon EC2 pricing model is the most cost-effective choice for this workload?

Show answer & explanation

Answer: Spot Instances

Answer

Spot Instances
Spot Instances are ideal for workloads that have flexible start and end times, can withstand interruptions, and require low cost. Because the genomic sequencing jobs checkpoint their progress every 15 minutes, they can easily recover from an interruption when AWS reclaims the capacity, allowing the startup to take advantage of the substantial discounts (up to 90% off) offered by Spot Instances.

Step-by-Step Solution

1
Analyze the workload characteristics described in the scenario.
The genomic sequencing batch jobs are flexible in timing, take 4 to 6 hours, and are fault-tolerant because they save checkpoints every 15 minutes. This means they can be interrupted and resumed without significant loss of progress.
Understanding the tolerance for interruptions is key to selecting the correct EC2 pricing model.
2
Compare the cost-effectiveness and operational behavior of EC2 pricing models against these characteristics.
Spot Instances utilize spare EC2 capacity at steep discounts but can be reclaimed by AWS with a 2-minute warning. Since the application checkpoints every 15 minutes, it can handle reclaim events gracefully, making Spot Instances the lowest-cost option.
Selecting the option that matches the highest discount with the workload's ability to tolerate interruptions.

Key Concept

AWS Pricing Models
Question 1415Question

A real estate agency wants to add an interactive virtual assistant to its property portal. The assistant must understand natural language text inputs from users to answer FAQs about property listings and help users book appointments for property viewings. Which AWS service should the agency use to build this conversational chatbot?

Show answer & explanation

Answer: Amazon Lex

Answer

Amazon Lex
Amazon Lex is the correct service because it provides natural language understanding and automatic speech recognition to build conversational interfaces (chatbots) that can understand user intent and execute tasks like booking appointments.

Step-by-Step Solution

1
Identify the core requirement of the scenario.
The requirement is to build an interactive virtual assistant (chatbot) that understands natural language text inputs to answer questions and book appointments.
Clarifying the specific business need allows selection of the appropriate specialized AWS machine learning service.
2
Evaluate the capabilities of the available AWS machine learning services.
Amazon Lex is designed specifically for building conversational interfaces using voice and text, whereas other options perform tasks like text-to-speech (Amazon Polly), speech-to-text (Amazon Transcribe), or text analysis (Amazon Comprehend).
Selecting the service that natively supports dialog management and intent recognition is required to meet the objective.

Key Concept

AWS Machine Learning Services for conversational interfaces
Estimated Time:1m 0s
Question 1416Question

An organization is designing a security strategy for its Amazon Virtual Private Cloud (Amazon VPC) to defend against network-level attacks. The security team requires a stateless traffic filtering mechanism that can evaluate rules at the boundary of a subnet. Which Amazon VPC feature should the security team implement to satisfy this requirement?

Show answer & explanation

Answer: Network Access Control Lists

Answer

Network Access Control Lists
Network Access Control Lists (NACLs) act as a firewall for associated subnets, controlling both inbound and outbound traffic at the subnet boundary. They are stateless, meaning that return traffic must be explicitly allowed by rules.

Step-by-Step Solution

1
Analyze the requirements in the scenario: the firewall mechanism must be 'stateless' and operate at the 'subnet boundary'.
Identified key constraints: stateless filtering and subnet-level placement.
This narrows down the AWS networking features to those operating at the subnet level rather than the instance level.
2
Compare the features of Security Groups and Network Access Control Lists (NACLs).
Security Groups are stateful and operate at the instance level, whereas Network Access Control Lists (NACLs) are stateless and operate at the subnet level.
Since the requirement specifies stateless filtering at the subnet boundary, Network Access Control Lists are the correct choice.

Key Concept

Understanding the difference between stateful instance-level security groups and stateless subnet-level Network Access Control Lists (NACLs).
Question 1417Question

An educational technology company is planning to deploy two distinct workloads on Amazon EC2:
1. A production student portal application that must run continuously 24/724/7 and exhibits stable, predictable usage throughout the school year.
2. A machine learning model training job that runs periodically, can be safely paused and resumed, and needs the absolute lowest cost compute options.

Which two Amazon EC2 pricing models should the company select to run these workloads in the most cost-effective manner?

Select all that apply

Show answer & explanation

Answer: Reserved Instances for the continuous student portal application; Spot Instances for the periodic machine learning training job

Answer

Reserved Instances for the continuous student portal application and Spot Instances for the periodic machine learning training job
For the continuous and predictable student portal application, Reserved Instances provide a significant discount (up to 72%72\%) in exchange for a one-year or three-year commitment. For the periodic and interruptible machine learning model training job, Spot Instances offer the lowest cost (up to a 90%90\% discount) because they utilize unused EC2 capacity and can be reclaimed by AWS with a two-minute warning.

Step-by-Step Solution

1
Analyze the student portal application workload requirements.
The application requires constant 24/724/7 availability with a predictable load pattern.
Predictable, steady-state workloads benefit most from the significant discounts provided by Reserved Instances or Savings Plans in exchange for a commitment.
2
Analyze the machine learning model training workload requirements.
The training job is periodic, flexible, and can tolerate interruptions.
Spot Instances are the most cost-effective option for fault-tolerant, flexible workloads because they offer up to a 90%90\% discount compared to On-Demand rates.

Key Concept

AWS EC2 pricing models selection based on workload requirements
Question 1418Question

A company is launching a new online training platform to serve customers globally. The platform's architecture must support two key requirements: first, it must remain operational even if an entire physical data center facility experiences a failure; second, it must deliver cached video thumbnails and static assets to users worldwide with the lowest possible latency. Which of the following AWS global infrastructure components should be utilized to satisfy these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Availability Zones; Edge Locations

Answer

The correct components are Availability Zones and Edge Locations.
The system requirements are satisfied by combining Availability Zones for data center fault tolerance and Edge Locations for low-latency global content delivery. Availability Zones ensure that application workloads continue to run if a single physical data center fails, and Edge Locations cache static assets near global users to minimize latency.

Step-by-Step Solution

1
Analyze the requirement for resilience against a physical data center failure.
Identify that Availability Zones are designed to isolate outages, as each zone consists of one or more distinct data center facilities with independent infrastructure.
This guarantees that if one data center experiences an outage, instances running in a different Availability Zone in the same region can continue to function.
2
Analyze the requirement for delivering cached static assets globally with minimal latency.
Identify that Edge Locations are used by Amazon CloudFront to cache media and web assets closer to users worldwide.
This reduces the distance request data travels, thereby minimizing latency for the global user base.

Key Concept

AWS Global Infrastructure components are designed for specific purposes: AWS Regions provide geographic separation, Availability Zones provide high availability and fault tolerance within a Region, Edge Locations cache content close to global users, and Local Zones place compute resources close to metropolitan areas.
Estimated Time:1m 30s
Question 1419Question

A gaming studio is launching several multiplayer games, with each game development team operating in its own AWS account. The studio's finance team wants to consolidate billing to streamline payments and optimize costs, while the security team needs to enforce security baselines across all accounts. Which TWO statements correctly describe the behavior or features of AWS Organizations and consolidated billing in this scenario? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The usage of all member accounts is aggregated on a single monthly invoice, allowing the studio to benefit from volume-based pricing discounts across services like Amazon S3.; Service Control Policies (SCPs) can be applied to restrict which AWS services and actions can be accessed by the individual game development accounts.

Answer

The usage of all member accounts is aggregated on a single monthly invoice to qualify for volume discounts, and Service Control Policies (SCPs) are used to restrict the maximum permissions of the member accounts.
The correct options are the ones stating that usage is aggregated on a single invoice to receive volume pricing discounts and that Service Control Policies (SCPs) can be used to restrict services and actions. Consolidated billing aggregates S3 and other usage across all member accounts to calculate volume discounts. SCPs act as central permission guardrails for member accounts.

Step-by-Step Solution

1
Analyze the billing requirements for consolidated accounts.
Usage across all accounts (such as Amazon S3 storage) is combined on a single invoice, allowing the organization to qualify for volume-pricing discounts as a single entity.
AWS treats all accounts in an organization as a single account for billing purposes, aggregating usage to reach volume tiers.
2
Analyze the security and governance requirements.
SCPs can be applied at the root, OU, or account level to restrict maximum permissions, serving as security guardrails.
SCPs set permission boundaries but do not grant permissions; they ensure member accounts do not violate security guidelines.

Key Concept

AWS Organizations consolidated billing features and Service Control Policies (SCPs) guardrails
Question 1420Question

A sovereign wealth fund based in Singapore is migrating its core financial reporting platform to AWS. To comply with national data sovereignty laws, all financial records must reside physically within Singapore. Additionally, the platform must be highly available and resilient against localized power grid or cooling failures. Which of the following infrastructure designs satisfies these requirements?

Show answer & explanation

Answer: Deploy the application across multiple Availability Zones within the Singapore Region.

Answer

Deploy the application across multiple Availability Zones within the Singapore Region.
The correct architecture uses multiple Availability Zones within the Singapore Region. This keeps the data within the national boundary of Singapore to satisfy compliance laws, while leveraging the physical separation, independent power, and cooling of multiple Availability Zones to ensure high availability and disaster resilience.

Step-by-Step Solution

1
Analyze the business requirements for data residency and physical isolation.
The application must keep all data physically inside Singapore and must survive a localized power or cooling failure at a facility.
This establishes constraints: the data must remain in the Singapore Region, and the deployment must span multiple isolated infrastructure boundaries.
2
Map these constraints to AWS Global Infrastructure components.
An AWS Region provides a defined geographic boundary (Singapore), while Availability Zones (AZs) within that Region provide isolated locations with redundant power, networking, and connectivity.
Using multiple AZs in the Singapore Region ensures that if one AZ suffers a facility outage, the application remains operational in another AZ, all while keeping the data within Singapore's physical borders.

Key Concept

AWS Regions provide data sovereignty and residency boundaries, while Availability Zones provide fault isolation and high availability within a Region.
PreviousPage 71 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin