All practice questions

1473 questions

All types1,473 Multiple choice755 Multiple select693 Matching25

A healthcare provider network consolidates three independent clinic AWS accounts under a single organization using AWS Organizations. Clinic A stores $60\text{ TB}$ of data in Amazon S3 Standard, while Clinic B stores $40\text{ TB}$ of data in Amazon S3 Standard. How does AWS calculate the S3 storage charges for these accounts under consolidated billing?

AWS calculates S3 storage costs for each clinic account independently (

60\text{ TB}

and

40\text{ TB}

separately) and sums them up without aggregating the usage for volume tier discounts.

The member accounts must share their root user credentials with the management account in order to enable volume discount aggregation for S3 storage.

AWS combines the S3 storage usage of both accounts (

100\text{ TB}

total) to qualify for volume pricing discounts, applying the lower tier rates across the consolidated billing invoice.

The organization must convert its S3 storage costs into a fixed upfront capital expenditure (CapEx) to qualify for consolidated volume discounts.

Show answer & explanation

Answer: AWS combines the S3 storage usage of both accounts ( $100\text{ TB}$ total) to qualify for volume pricing discounts, applying the lower tier rates across the consolidated billing invoice.

Answer

AWS combines the S3 storage usage of both accounts (

100\text{ TB}

total) to qualify for volume pricing discounts, applying the lower tier rates across the consolidated billing invoice.

AWS consolidated billing aggregates the usage of all member accounts in an organization for volume-discounted services such as Amazon S3. In this scenario, the storage from Clinic A (

60\text{ TB}

) and Clinic B (

40\text{ TB}

) is combined into a single total of

100\text{ TB}

. This combined total is used to determine the pricing tier, allowing the organization to benefit from cheaper per-gigabyte rates for volume thresholds exceeded, rather than calculating each account's storage costs separately.

Step-by-Step Solution

Aggregate the total storage usage across all active member accounts in the organization.

The usage from Clinic A (

60\text{ TB}

) and Clinic B (

40\text{ TB}

) is combined to equal

100\text{ TB}

AWS consolidated billing combines the usage of a service across all member accounts to determine the volume pricing tier.

Apply the volume pricing discounts of Amazon S3 to the aggregated usage total.

The organization pays a lower overall per-gigabyte rate for the storage that falls into the higher volume pricing tiers.

By treating the organization as a single customer account, volume pricing tiers are reached faster, reducing the overall bill.

Key Concept

Consolidated Billing Volume Pricing Aggregation

Question 1422Question →

A logistics company runs a legacy enterprise resource planning (ERP) application on a single Amazon EC2 instance. The application must run continuously 24/7 with a stable, predictable workload. Due to a planned database migration to a serverless architecture in six months, the company cannot commit to a one-year or three-year contract. Additionally, the workload cannot tolerate any interruptions. Which EC2 pricing model is the most cost-effective option for this scenario?

On-Demand Instances

Spot Instances

Three-year Reserved Instances

All Upfront Reserved Instances to shift the computing costs from operating expenses (OpEx) to capital expenses (CapEx)

Show answer & explanation

Answer: On-Demand Instances

Answer

On-Demand Instances

On-Demand Instances are the most cost-effective option because they require no long-term commitment (fitting the six-month migration window) and provide uninterrupted compute capacity, which is required for the critical ERP application.

Step-by-Step Solution

Analyze the workload requirements and identify key constraints.

The workload must run 24/7 without interruption (eliminating Spot Instances) and has a lifetime of only six months.

Understanding the timeline and interruption tolerance narrows down the applicable pricing models.

Evaluate the commitment-based pricing options against the project duration constraint.

Reserved Instances and Savings Plans require a minimum commitment of one year, leaving six months of unused capacity.

Pricing options must be evaluated for overall cost-effectiveness over the entire six-month period.

Compare the remaining options to find the most cost-effective and flexible model.

On-Demand Instances allow paying only for the active six months of usage without any long-term commitment or penalty.

On-Demand is the optimal choice when the workload duration is shorter than the minimum commitment period of Reserved Instances/Savings Plans and cannot tolerate interruptions.

Key Concept

Matching application workload characteristics and project timelines to the appropriate EC2 pricing model.

Question 1423Question →

A company wants to connect their on-premises office to a single Amazon VPC so that developers can access private resources. The connection must encrypt traffic over the public internet and be established quickly. Additionally, the company needs to apply a layer of network security that filters inbound and outbound traffic at the subnet level.

Which two AWS services or features should the company configure to meet these requirements? (Select TWO)

Select all that apply

AWS Site-to-Site VPN

Network ACLs

Security Groups

Transit Gateway

VPC Peering connections

Show answer & explanation

Answer: AWS Site-to-Site VPN; Network ACLs

Answer

AWS Site-to-Site VPN and Network ACLs

AWS Site-to-Site VPN provides a quick-to-establish, encrypted connection over the public internet between the on-premises office and the VPC. Network ACLs operate at the subnet boundary to filter both inbound and outbound traffic, satisfying the subnet-level security requirement.

Step-by-Step Solution

Identify the hybrid connectivity requirement.

The requirement specifies a secure, encrypted connection over the public internet that can be established quickly between the on-premises office and the VPC. AWS Site-to-Site VPN fits this because it uses IPsec over the internet and can be set up rapidly compared to physical lines like AWS Direct Connect.

This determines the correct connectivity service.

Identify the network security requirement.

The security requirement specifies filtering inbound and outbound traffic at the subnet boundary. Network ACLs operate at the subnet level to filter traffic, whereas Security Groups operate at the instance level.

This determines the correct security filtering component.

Key Concept

AWS hybrid connectivity and VPC network security boundaries.

Estimated Time:1m 30s

Question 1424Question →

A financial services firm is migrating its risk analysis platform to Amazon EC2. The platform consists of two distinct workloads:

1. A core transaction processing engine that must run continuously 24/7 with highly predictable resource usage.
2. A stateless data analytics modeling job that runs periodically, can be distributed across multiple instances, and can tolerate unexpected interruptions.

Which EC2 pricing models should the company select to achieve the most cost-effective solution? (Select TWO.)

Select all that apply

Spot Instances for the stateless data analytics modeling job to leverage steep discounts for interruptible workloads.

Reserved Instances for the core transaction processing engine to secure significant discounts for predictable, steady-state usage.

On-Demand Instances for the core transaction processing engine to avoid long-term commitments for the steady-state workload.

Spot Instances for the core transaction processing engine to minimize costs for the continuous 24/7 transaction processing workload.

Dedicated Hosts for both workloads to shift from capital expenses (CapEx) to operating expenses (OpEx).

Show answer & explanation

Answer: Spot Instances for the stateless data analytics modeling job to leverage steep discounts for interruptible workloads.; Reserved Instances for the core transaction processing engine to secure significant discounts for predictable, steady-state usage.

Answer

The company should choose Spot Instances for the stateless data analytics modeling job and Reserved Instances for the core transaction processing engine.

For the core transaction processing engine, which runs continuously 24/7 with predictable utilization, Reserved Instances (or Savings Plans) provide the optimal discount compared to On-Demand rates. For the stateless, fault-tolerant data analytics modeling job that can tolerate interruptions, Spot Instances offer the highest cost savings (up to 90% off On-Demand rates) by utilizing spare AWS capacity.

Step-by-Step Solution

Analyze the first workload requirement: A core transaction processing engine running continuously 24/7 with predictable resource usage.

Identify that a continuous, predictable, steady-state workload is best suited for committed pricing models such as Reserved Instances or Savings Plans to maximize discount rates.

Reserved Instances and Savings Plans provide significant cost reductions (up to 72%) compared to On-Demand pricing in exchange for a commit period of 1 or 3 years.

Analyze the second workload requirement: A stateless data analytics modeling job that runs periodically, can be distributed, and can tolerate unexpected interruptions.

Identify that fault-tolerant, interruptible workloads are best suited for Spot Instances.

Spot Instances allow customers to bid on unused EC2 capacity at discounts of up to 90%, which is highly cost-effective for tasks that can handle interruption and do not require constant availability.

Combine the results to select the correct two options.

Select the option specifying Spot Instances for the analytics modeling job and the option specifying Reserved Instances for the transaction processing engine.

This combination aligns the workload characteristics (stability vs. flexibility/fault tolerance) with the most cost-effective pricing models.

Key Concept

AWS EC2 pricing models optimization based on workload characteristics.

Question 1425Question →

An enterprise is migrating its centralized service-oriented architecture to AWS. The architecture consists of 12 distinct Virtual Private Clouds (VPCs) that require full network connectivity with each other through a centralized hub. The enterprise also needs to enforce stateless packet filtering at the boundary of each subnet to prevent traffic from unauthorized external networks. Which combination of AWS networking components should the enterprise implement to satisfy these requirements?

AWS Transit Gateway to interconnect the VPCs, and Network Access Control Lists (Network ACLs) for subnet-level stateless packet filtering

AWS Transit Gateway to interconnect the VPCs, and Security Groups for subnet-level stateless packet filtering

VPC Peering connections to interconnect the VPCs, and Security Groups for subnet-level stateless packet filtering

VPC Peering connections to interconnect the VPCs, and Network Access Control Lists (Network ACLs) for subnet-level stateless packet filtering

Show answer & explanation

Answer: AWS Transit Gateway to interconnect the VPCs, and Network Access Control Lists (Network ACLs) for subnet-level stateless packet filtering

Answer

AWS Transit Gateway to interconnect the VPCs, and Network Access Control Lists (Network ACLs) for subnet-level stateless packet filtering

The correct option combines AWS Transit Gateway to act as a centralized router for the 12 VPCs, avoiding the complexity of a peer-to-peer mesh, and Network Access Control Lists (Network ACLs) to perform stateless packet filtering at the subnet boundaries.

Step-by-Step Solution

Determine the optimal network topology for connecting multiple VPCs.

AWS Transit Gateway acts as a central hub, routing traffic between the 12 VPCs and avoiding a complex mesh network of 66 peering connections.

Transit Gateway simplifies route management and scales easily for hub-and-spoke multi-VPC designs.

Identify the resource that provides stateless filtering at the subnet level.

Network Access Control Lists (Network ACLs) operate at the subnet boundary and perform stateless packet filtering.

Network ACLs evaluate traffic entering and leaving subnets against explicit rules, whereas Security Groups operate at the instance/ENI level and are stateful.

Key Concept

AWS network topologies and security boundaries

Question 1426Question →

A renewable energy company is expanding its operations and wants to consolidate several AWS accounts used by its wind turbine monitoring systems, solar grid analytics team, and corporate offices under a single organization in AWS Organizations. The company wants to optimize its AWS costs and centralize security governance.

Which two of the following statements correctly describe the financial or security governance behaviors of consolidated billing and AWS Organizations in this scenario? (Select TWO.)

Select all that apply

AWS aggregates the usage from all member accounts in the organization to qualify for volume pricing discounts on services such as Amazon S3.

Service Control Policies (SCPs) can be used to directly grant administrative access and assign roles to specific IAM users in member accounts.

SCPs (Service Control Policies) can be applied to specify the maximum available permissions for member accounts, establishing security boundaries.

The administrator must share the AWS Account Root User credentials of the management account with all member accounts to allow them to view consolidated bills.

Consolidated billing shifts the organization's AWS costs from an operating expense (OpEx) model to a capital expense (CapEx) model by requiring upfront registration fees.

Show answer & explanation

Answer: AWS aggregates the usage from all member accounts in the organization to qualify for volume pricing discounts on services such as Amazon S3.; SCPs (Service Control Policies) can be applied to specify the maximum available permissions for member accounts, establishing security boundaries.

Answer

The correct answers are the statements explaining that AWS aggregates usage across all member accounts to qualify for volume pricing discounts, and that Service Control Policies (SCPs) can be applied to specify the maximum available permissions for member accounts to establish security boundaries.

The correct options correctly identify the key capabilities of AWS Organizations. First, consolidated billing aggregates the usage across all member accounts within the organization to calculate volume tier discounts. Second, Service Control Policies (SCPs) serve as central security guardrails that set the maximum allowable permissions for member accounts.

Step-by-Step Solution

Analyze the financial advantages of AWS Organizations consolidated billing.

Consolidated billing aggregates the volume usage of all member accounts, allowing the organization to benefit from tiered pricing discounts (e.g., lower per-GB costs for Amazon S3 storage).

To identify which options correctly address cost optimization.

Evaluate the security and governance mechanisms available in AWS Organizations.

Service Control Policies (SCPs) define permission guardrails at the organization, OU, or account level, setting the maximum permissions that can be exercised by IAM policies within those accounts.

To identify which options correctly address centralizing security governance.

Review the remaining distractors to identify misconceptions.

SCPs do not grant permissions; root credentials must never be shared; consolidated billing does not convert OpEx into CapEx.

To eliminate the incorrect options based on core AWS billing and security concepts.

Key Concept

AWS Organizations allows companies to consolidate billing for multiple AWS accounts, enabling volume discounts across the aggregated usage of the entire organization, while using Service Control Policies (SCPs) as permission guardrails to establish security boundaries.

Question 1427Question →

A financial services startup is designing a secure payment transaction processing system. To protect against local site failures such as power outages or flooding at a single facility, they want to distribute their application servers across multiple physical data centers. However, all data must remain within the same geographic boundary for compliance, and the replication latency must be minimal. Which AWS infrastructure design should the startup implement to satisfy these requirements?

Deploy the application across multiple Availability Zones within a single AWS Region.

Deploy the application across multiple AWS Regions.

Deploy the application using AWS Edge Locations.

Deploy the application using AWS Outposts in multiple on-premises data centers.

Show answer & explanation

Answer: Deploy the application across multiple Availability Zones within a single AWS Region.

Answer

Deploy the application across multiple Availability Zones within a single AWS Region.

Deploying the application across multiple Availability Zones in a single AWS Region is the correct design. Availability Zones are physically distinct groups of data centers within a Region. They are isolated from local hazards like flooding or power grid failures, yet connected by low-latency networking. This allows for synchronous data replication and high availability while keeping all data residency within the same region.

Step-by-Step Solution

Analyze the requirements: protection against local site failures (multi-facility/data center redundancy), minimal latency, and compliance requiring data to remain within the same geographic boundary.

Identify that the solution must utilize separate physical facilities located close enough to maintain low latency and within the same regulatory boundary.

This narrows down the choice between Regions, Availability Zones, Edge Locations, and Outposts.

Evaluate the architectural roles of AWS Global Infrastructure components.

Determine that Availability Zones (AZs) consist of isolated data centers within a single Region, providing low-latency replication and fault isolation while keeping data local. AWS Regions are too geographically dispersed and increase latency/sovereignty issues. Edge Locations are for content delivery caching. Outposts is for hybrid cloud, not cloud-native multi-facility redundancy.

This selects the single best component designed for high availability within a region.

Key Concept

AWS Global Infrastructure - Regions and Availability Zones

Estimated Time:1m 0s

Question 1428Question →

A company is designing a secure network architecture in Amazon Virtual Private Cloud (Amazon VPC). The security team requires two distinct layers of control: first, a stateless firewall that controls inbound and outbound traffic at the subnet boundary, and second, a stateful firewall that controls inbound and outbound traffic at the individual Amazon EC2 instance level. Which of the following network security features should the cloud practitioner configure to meet these requirements? (Select TWO.)

Select all that apply

Network Access Control Lists (NACLs) configured at the subnet level to provide stateless traffic filtering

Security groups configured at the instance level to provide stateful traffic filtering

Network Access Control Lists (NACLs) configured at the instance level to provide stateful traffic filtering

Security groups configured at the subnet level to provide stateless traffic filtering

VPC Peering connections to route and isolate traffic between the web and database subnets

Show answer & explanation

Answer: Network Access Control Lists (NACLs) configured at the subnet level to provide stateless traffic filtering; Security groups configured at the instance level to provide stateful traffic filtering

Answer

Configure Network Access Control Lists (NACLs) at the subnet level to provide stateless traffic filtering, and configure Security groups at the instance level to provide stateful traffic filtering.

The correct options are Network Access Control Lists (NACLs) at the subnet level and security groups at the instance level. NACLs act as a stateless firewall controlling traffic in and out of subnets, whereas security groups act as stateful firewalls controlling traffic at the instance level.

Step-by-Step Solution

Identify the subnet-level boundary requirement

Network Access Control Lists (NACLs) are selected because they operate at the subnet boundary and are stateless.

The scenario requires a stateless firewall at the subnet level.

Identify the instance-level boundary requirement

Security groups are selected because they operate at the network interface (instance) level and are stateful.

The scenario requires a stateful firewall at the individual Amazon EC2 instance level.

Key Concept

Amazon VPC offers two layers of security to control traffic: security groups (stateful, instance-level) and network ACLs (stateless, subnet-level).

Estimated Time:1m 30s

Question 1429Question →

An agricultural technology company is designing a smart farming platform on AWS. The architect wants to ensure that the application is highly available and resilient to localized physical disasters, while also complying with regional data residency regulations.

Which of the following statements correctly describe how the company should leverage AWS Global Infrastructure components? (Select TWO.)

Select all that apply

An Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity within an AWS Region.

Deploying the application across multiple Availability Zones in a single AWS Region protects against localized failures such as fires or power outages.

An Availability Zone is a geographic area that contains multiple AWS Regions connected by high-speed fiber-optic networks.

Each AWS Region automatically replicates all customer data to at least one other Region to ensure compliance with data sovereignty laws.

All Availability Zones inside a given AWS Region share the same physical infrastructure and power grid to reduce deployment latency.

Show answer & explanation

Answer: An Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity within an AWS Region.; Deploying the application across multiple Availability Zones in a single AWS Region protects against localized failures such as fires or power outages.

Answer

An Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity within an AWS Region, and deploying the application across multiple Availability Zones in a single AWS Region protects against localized failures such as fires or power outages.

The correct options state that an Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity in an AWS Region, and that deploying across multiple Availability Zones protects against localized failures. This aligns with the physical architecture of AWS, where AZs are physically isolated partitions of a Region, designed to run production applications that require high availability and fault tolerance.

Step-by-Step Solution

Analyze the requirements for high availability, localized disaster resilience, and compliance with data residency regulations.

The solution must keep data within the chosen region (for compliance) while distributing components across isolated boundaries within that region to prevent localized outages from causing downtime.

This establishes the scope of AWS infrastructure needed: a single AWS Region for data residency compliance, and multiple Availability Zones for fault isolation.

Evaluate the relationship between AWS Regions and Availability Zones (AZs) to identify correct options.

Confirm that an AZ consists of discrete data centers within a Region, and that using multiple AZs provides localized fault isolation.

AWS Regions contain multiple AZs. AZs are physically separated and isolated from power or cooling issues affecting other zones.

Assess and eliminate the incorrect options.

Identify that AZs do not contain Regions, they do not share power/infrastructure, and cross-region data replication is a customer responsibility rather than an automatic AWS-managed task.

This ensures the selected answers are the only structurally and operationally correct ones.

Key Concept

AWS Global Infrastructure, specifically the relationship, physical isolation, and deployment benefits of AWS Regions and Availability Zones.

Question 1430Question →

A smart-grid utility company is deploying a fleet of IoT sensors that report electricity consumption data. The core ingestion server runs continuously $24/7$ to process this real-time stream. However, once a month, the company runs a complex data aggregation and simulation job that takes exactly $2$ hours to complete. This monthly simulation is critical, cannot be interrupted, and must run on a specific day. Which combination of Amazon EC2 pricing models represents the most cost-effective choice for these workloads?

Spot Instances for the core ingestion server, and On-Demand Instances for the monthly simulation job.

Reserved Instances for the core ingestion server, and On-Demand Instances for the monthly simulation job.

Reserved Instances for the core ingestion server, and Spot Instances for the monthly simulation job.

On-Demand Instances for the core ingestion server, and Dedicated Hosts for the monthly simulation job.

Show answer & explanation

Answer: Reserved Instances for the core ingestion server, and On-Demand Instances for the monthly simulation job.

Answer

Reserved Instances for the core ingestion server, and On-Demand Instances for the monthly simulation job.

The correct option combines Reserved Instances for the steady-state ingestion server and On-Demand Instances for the monthly simulation job. The core ingestion server runs continuously (

24/7

), representing a predictable workload where Reserved Instances offer a significant discount. The monthly simulation is a short, critical, and non-interruptible task. On-Demand Instances provide the required reliability and capacity guarantee for this brief duration without requiring any upfront or long-term commitment.

Step-by-Step Solution

Analyze the core ingestion server workload requirements.

The server runs continuously (

24/7

), representing a predictable, steady-state workload.

Steady-state workloads are best suited for Reserved Instances or Savings Plans to minimize hourly costs.

Analyze the monthly simulation job workload requirements.

The job runs for only

2

hours once a month, is critical, and cannot tolerate interruptions.

Because it cannot tolerate interruptions, Spot Instances cannot be used. Because it runs only

2

hours a month, Reserved Instances would be highly wasteful. Therefore, On-Demand Instances are the most cost-effective option for this short-duration, critical task.

Combine the optimal pricing models for both workloads.

Reserved Instances for the core ingestion server, and On-Demand Instances for the monthly simulation job.

This combination ensures maximum cost efficiency while meeting the availability and reliability requirements of both workloads.

Key Concept

Selecting optimal Amazon EC2 pricing models based on workload predictability, duration, and fault tolerance.

Estimated Time:1m 30s

Question 1431Question →

A municipal government is planning to implement an IoT-based smart parking system. The proposed architecture includes thousands of IoT sensors publishing data to AWS IoT Core, which will trigger AWS Lambda functions to write records to an Amazon DynamoDB table. Before starting the procurement process, the project manager needs to estimate the potential monthly costs of these hypothetical services. Which of the following tools should the project manager use to model this configuration and estimate the future costs?

AWS Pricing Calculator

AWS Cost Explorer

AWS Cost and Usage Report

AWS Budgets

Show answer & explanation

Answer: AWS Pricing Calculator

Answer

AWS Pricing Calculator

The correct answer is the AWS Pricing Calculator. It allows users to input expected resource parameters (such as the number of IoT messages, Lambda request counts, and DynamoDB read/write capacities) to estimate monthly costs before any infrastructure is actually created in AWS.

Step-by-Step Solution

Identify that the requirement is for a pre-deployment cost estimate of a hypothetical AWS architecture before any resources are provisioned.

The target goal is upfront, pre-deployment estimation.

This determines that post-deployment tracking and monitoring tools are incorrect.

Evaluate the available AWS tools to find one that allows inputting custom configurations (such as IoT Core messages, Lambda executions, and DynamoDB storage) to calculate estimated pricing.

The AWS Pricing Calculator is selected as it supports creating a custom estimate for these services based on hypothetical usage inputs.

It matches the capability to estimate future costs based on user-defined configurations.

Key Concept

Estimating future AWS costs for hypothetical configurations prior to deployment

Question 1432Question →

A digital media firm has established $15$ separate Virtual Private Clouds (VPCs) to isolate various production workloads. The firm wants to enable communication among all these VPCs and route traffic through a central hub, while avoiding the overhead of creating and maintaining a complex, point-to-point network mesh. Which AWS service or feature is designed to act as a centralized regional router to simplify this connectivity?

Security Groups

VPC Peering

AWS Transit Gateway

Network Access Control Lists

Show answer & explanation

Answer: AWS Transit Gateway

Answer

AWS Transit Gateway

AWS Transit Gateway acts as a centralized regional router, allowing multiple VPCs and on-premises networks to connect to a single hub. This design simplifies network topology and eliminates the complexity of managing a large number of individual point-to-point connections.

Step-by-Step Solution

Evaluate the architectural requirement of connecting

15

VPCs through a central hub while avoiding point-to-point connections.

Determine that a hub-and-spoke networking model is needed to eliminate the complexity of a full-mesh peering configuration.

Connecting

15

VPCs using point-to-point peering requires

\frac{15 \times (15-1)}{2} = 105

connections, which creates high operational overhead.

Identify the AWS networking service designed to serve as a centralized hub or cloud router.

Identify AWS Transit Gateway as the service that connects VPCs and on-premises networks through a central router.

AWS Transit Gateway simplifies network routing and architecture by allowing all VPCs to connect to a single gateway instead of peering directly with one another.

Key Concept

AWS Transit Gateway simplifies multi-VPC networking by serving as a centralized regional router, eliminating the need for a complex mesh of VPC peering connections.

Question 1433Question →

A company is setting up a hybrid network architecture. They need to establish a dedicated, private physical connection between their on-premises data center and AWS that bypasses the public internet. Additionally, they must implement a stateless firewall to control inbound and outbound traffic at the subnet boundary.

Which two AWS networking services or features should the company configure to meet these requirements?

Select all that apply

AWS Direct Connect

Network Access Control Lists (Network ACLs)

Security Groups

AWS Transit Gateway

VPC Peering

Show answer & explanation

Answer: AWS Direct Connect; Network Access Control Lists (Network ACLs)

Answer

The company should select AWS Direct Connect to establish a dedicated, private connection to their on-premises data center, and Network Access Control Lists (Network ACLs) to serve as a stateless firewall at the subnet boundary.

AWS Direct Connect establishes a dedicated, private physical network connection from the customer's on-premises environment to AWS, bypassing the public internet to deliver consistent performance. Network Access Control Lists (Network ACLs) serve as a stateless security layer at the subnet boundary, requiring explicit rules for both inbound and outbound traffic.

Step-by-Step Solution

Analyze the connectivity requirement.

The company needs a dedicated, private physical connection bypassing the public internet. AWS Direct Connect is the service designed for this purpose.

AWS Direct Connect provides a dedicated physical connection to AWS, unlike a VPN which uses the public internet.

Analyze the security filtering requirement.

The company needs a stateless firewall to control inbound and outbound traffic at the subnet boundary. Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless.

Network ACLs evaluate traffic at the subnet boundary and are stateless, requiring separate rules for inbound and outbound traffic.

Key Concept

AWS hybrid connectivity options and VPC network security boundaries.

Question 1434Question →

A healthcare provider is planning to migrate its patient portal to AWS. The proposed architecture includes several Amazon EC2 instances for the web layer, an Amazon RDS database for structured patient records, and an Amazon S3 bucket for medical imaging backups. Before beginning migration, the IT management team requires a preliminary estimate of the monthly run costs for this hypothetical setup. Which TWO of the following tasks can be accomplished using the AWS Pricing Calculator to support this pre-deployment request? (Select TWO.)

Select all that apply

Group estimated resources into distinct sections to represent different application tiers (e.g., web tier and database tier).

Generate a Cost and Usage Report (CUR) to analyze actual data transfer costs incurred during the first week of migration.

Compare potential cost-savings by applying different pricing models, such as On-Demand, Reserved Instances, and Savings Plans, to the EC2 instances.

Create automated budgets and alert thresholds to notify the team if the actual monthly spend exceeds the estimate.

Calculate the precise reduction in Capital Expenditures (CapEx) relative to the residual value of the physical data center hardware.

Show answer & explanation

Answer: Group estimated resources into distinct sections to represent different application tiers (e.g., web tier and database tier).; Compare potential cost-savings by applying different pricing models, such as On-Demand, Reserved Instances, and Savings Plans, to the EC2 instances.

Answer

The correct tasks are grouping estimated resources into distinct sections to represent different application tiers and comparing potential cost-savings by applying different pricing models to the planned EC2 instances.

The correct options represent core features of the AWS Pricing Calculator. Users can model a multi-tier architecture by grouping services (such as EC2, RDS, and S3) into logical sections like application layers. Additionally, users can modify configurations for hypothetical services, such as changing the pricing model of EC2 instances from On-Demand to Reserved Instances or Savings Plans, to compare prospective monthly run costs.

Step-by-Step Solution

Identify the project phase and corresponding tool requirements.

The project is in the planning and pre-deployment phase, which requires estimating costs for hypothetical resources rather than analyzing actual spend.

This establishes that the AWS Pricing Calculator is the correct tool to use, as it model costs before resources are created.

Evaluate the design and structuring features of the AWS Pricing Calculator.

The calculator allows resources to be added, configured with different payment models (such as Savings Plans or Reserved Instances), and organized into logical groups (such as application tiers).

This confirms that structuring the estimate by web/database tiers and comparing EC2 purchase options are supported functionalities.

Exclude post-deployment monitoring and cloud economics modeling tools.

Post-deployment monitoring (Budgets, Cost and Usage Report) and CapEx asset-value depreciation analysis are excluded.

These capabilities belong to other billing/governance tools or general cloud economics methodologies, not the AWS Pricing Calculator.

Key Concept

AWS Pricing Calculator features and capabilities for pre-deployment cost estimation.

Question 1435Question →

A multi-national logistics provider is launching a tracking application. The architecture must satisfy two distinct requirements:

1. Static assets (such as tracking portal images and stylesheets) must be cached and delivered with sub-millisecond latency to customers globally.
2. The core transactional database containing customer shipment records must be kept within a specific geographic area to comply with local data sovereignty regulations.

Which combination of AWS infrastructure components best addresses these requirements?

AWS Regions for caching static assets, and Availability Zones for database data sovereignty.

Availability Zones for caching static assets, and Edge Locations for database data sovereignty.

Edge Locations for caching static assets, and a specific AWS Region for database data sovereignty.

Edge Locations for caching static assets, and Amazon EBS volumes for database data sovereignty.

Show answer & explanation

Answer: Edge Locations for caching static assets, and a specific AWS Region for database data sovereignty.

Answer

Edge Locations for caching static assets, and a specific AWS Region for database data sovereignty.

Edge Locations are used to cache static assets close to end-users, ensuring sub-millisecond delivery latency. AWS Regions are independent geographic areas, and deploying resources in a specific Region guarantees that data remains in that Region, satisfying data sovereignty requirements.

Step-by-Step Solution

Identify the AWS infrastructure component designed for global low-latency content delivery.

Edge Locations are identified, as they cache content closer to end-users.

To satisfy the requirement of serving static assets globally with minimum latency.

Identify the AWS infrastructure component designed to restrict data storage to a specific geographic boundary.

AWS Regions are identified, as data stored in a Region does not leave that Region unless explicitly copied.

To satisfy the data sovereignty compliance requirement for customer shipment records.

Key Concept

AWS Global Infrastructure components (Regions and Edge Locations) and their distinct use cases for data residency and latency optimization.

Estimated Time:1m 15s

Question 1436Question →

A company is running multiple business-critical workloads on AWS. The management team wants to receive proactive reviews of their cloud operations and needs a Support Concierge to help manage billing and account inquiries. Additionally, they require access to Technical Account Managers (TAMs) to coordinate support issues, but they do not need a designated, dedicated TAM assigned solely to their account. What is the minimum AWS Support plan that meets these requirements?

Enterprise On-Ramp

Enterprise

Business

Developer

Show answer & explanation

Answer: Enterprise On-Ramp

Answer

Enterprise On-Ramp

The correct plan is Enterprise On-Ramp because it is the minimum support plan that includes proactive operational reviews, a Support Concierge for billing issues, and access to a shared pool of Technical Account Managers (TAMs) rather than a dedicated, single TAM.

Step-by-Step Solution

Identify the key support features requested: proactive operational reviews, a Support Concierge, and access to Technical Account Managers (TAMs).

These features rule out the Developer and Business support tiers, which do not offer TAM access or a Support Concierge.

Developer and Business plans only provide access to customer service, billing support, and technical support engineers, but not TAMs or a dedicated concierge.

Determine the minimum plan between the remaining options (Enterprise On-Ramp and Enterprise) based on the requirement of not needing a designated, dedicated TAM.

Enterprise On-Ramp offers access to a pool of TAMs (rather than a designated, dedicated TAM) along with Support Concierge and proactive reviews.

Enterprise On-Ramp is a lower-cost tier than Enterprise and satisfies all specified requirements without paying for a dedicated TAM.

Key Concept

AWS Support plans offer different levels of support, technical assistance, and account management. The Enterprise On-Ramp plan is the lowest tier that provides access to a pool of Technical Account Managers (TAMs) and a Support Concierge, whereas the Enterprise plan provides a designated (dedicated) TAM.

Question 1437Question →

A software-as-a-service (SaaS) provider is planning a high-profile launch of a new application. The provider wants AWS support to help coordinate capacity planning, perform architectural reviews, and provide event-day support. The provider needs these Infrastructure Event Management (IEM) services to be included in their support subscription without incurring additional, separate event-based charges. Which AWS Support plan is the minimum tier that satisfies this requirement?

AWS Business Support

AWS Enterprise Support

AWS Developer Support

AWS Enterprise On-Ramp Support

Show answer & explanation

Answer: AWS Enterprise On-Ramp Support

Answer

AWS Enterprise On-Ramp Support

AWS Enterprise On-Ramp Support is the minimum support plan that includes Infrastructure Event Management (IEM) at no additional charge. While AWS Business Support offers IEM, it requires paying an additional fee. AWS Enterprise Support also includes IEM, but it is a higher-tier and more expensive plan than Enterprise On-Ramp. AWS Developer Support does not offer IEM at all.

Step-by-Step Solution

Identify the plans that include Infrastructure Event Management (IEM) in their subscription price.

Enterprise On-Ramp and Enterprise plans include IEM at no additional cost, while the Business plan requires a separate fee, and the Developer plan does not offer it.

This isolates the options to only those that meet the no-extra-cost requirement.

Determine the minimum (lowest cost) support tier from the remaining eligible plans.

Compare Enterprise On-Ramp Support with Enterprise Support.

Enterprise On-Ramp is positioned below Enterprise Support, making it the minimum tier that includes IEM.

Key Concept

AWS Support plans features and tiers, specifically Infrastructure Event Management (IEM) availability.

Estimated Time:1m 30s

Question 1438Question →

A gaming studio is planning to launch a new multiplayer game and is designing the backend architecture on AWS. The proposed design will use Amazon GameLift for game server hosting, Amazon RDS for SQL Server to store player profiles, and Amazon CloudFront for content delivery. Before provisioning any resources, the studio's finance team needs to model various usage scenarios and estimate the expected monthly costs for this hypothetical setup. Which AWS tool should the studio use to generate these pre-deployment cost estimates?

AWS Pricing Calculator

AWS Cost Explorer

AWS Cost & Usage Report

AWS Budgets

Show answer & explanation

Answer: AWS Pricing Calculator

Answer

AWS Pricing Calculator

The correct answer is the AWS Pricing Calculator. This web-based planning tool allows users to model and estimate the costs of AWS services based on expected usage and hypothetical configurations before deploying them. This aligns with the studio's requirement to model monthly costs prior to provisioning resources.

Step-by-Step Solution

Analyze the requirements in the scenario.

The gaming studio needs to estimate costs before deploying any services (pre-deployment) using a hypothetical setup of Amazon GameLift, Amazon RDS, and Amazon CloudFront.

Identifying whether the requirement is for pre-deployment planning or post-deployment tracking determines the correct billing tool category.

Evaluate the capabilities of the available AWS billing and cost management tools.

The AWS Pricing Calculator allows users to input planned resources and usage parameters to estimate monthly costs. Other tools like Cost Explorer, AWS Budgets, and the Cost & Usage Report operate on actual historical usage and cost data.

Choosing the correct tool requires distinguishing between pre-deployment estimation tools and post-deployment tracking/analysis tools.

Key Concept

AWS Pricing Calculator is the primary tool for estimating costs of AWS services before resources are deployed based on hypothetical architectures.

Estimated Time:1m 0s

Question 1439Question →

A media streaming company is designing a new real-time interactive video application. The application has two primary requirements:
1. It must deliver single-digit millisecond latency to end-users located in specific major metropolitan areas that do not contain an AWS Region.
2. It must cache and deliver static media assets globally with minimal latency.

Which of the following AWS global infrastructure components should the company utilize to meet these requirements? (Select TWO.)

Select all that apply

AWS Local Zones

AWS Edge Locations

AWS Regions

Availability Zones

AWS Outposts

Show answer & explanation

Answer: AWS Local Zones; AWS Edge Locations

Answer

The correct answers are AWS Local Zones and AWS Edge Locations.

AWS Local Zones allow applications to run low-latency tasks closer to metropolitan areas, fulfilling the requirement for single-digit millisecond latency. AWS Edge Locations cache and deliver static content globally near end-users, fulfilling the content delivery requirement.

Step-by-Step Solution

Analyze the first requirement: Delivering single-digit millisecond latency to users in metropolitan areas lacking an AWS Region.

Identify AWS Local Zones as the correct infrastructure component designed to place resources closer to major population centers outside of existing Regions.

AWS Local Zones bring compute and storage resources closer to users in specific metropolitan areas to achieve single-digit millisecond latency.

Analyze the second requirement: Caching and delivering static media assets globally with minimal latency.

Identify AWS Edge Locations as the infrastructure components that host Amazon CloudFront to cache content closer to users globally.

AWS Edge Locations act as points of presence (PoPs) to cache static content near global users, reducing latency.

Key Concept

Identifying correct AWS Global Infrastructure components for specific latency and geographical requirements.

Question 1440Question →

A multinational retail company is reviewing its AWS support options to optimize account management. The company's billing department requires direct access to the AWS Support Concierge team, a dedicated group of billing and account experts who can help analyze complex consolidated billing reports and optimize cost structures across multiple member accounts. Which two AWS Support plans include access to this service?

Select all that apply

Basic

Developer

Business

Enterprise On-Ramp

Enterprise

Show answer & explanation

Answer: Enterprise On-Ramp; Enterprise

Answer

The Enterprise On-Ramp and Enterprise support plans are the only tiers that include access to the AWS Support Concierge service.

The Support Concierge is a specialized billing and account management support team available only to customers on the Enterprise On-Ramp and Enterprise support plans. These plans provide billing experts to assist with complex billing questions, consolidated billing analysis, and operational billing queries.

Step-by-Step Solution

Identify the customer's core requirement, which is direct access to the AWS Support Concierge team of billing and account experts.

The target feature is the AWS Support Concierge.

This allows filtering of AWS Support plans based on whether they include this specific service.

Evaluate the feature set of each AWS Support plan tier (Basic, Developer, Business, Enterprise On-Ramp, Enterprise) to determine where the Support Concierge is included.

Basic, Developer, and Business do not offer the Support Concierge. Enterprise On-Ramp and Enterprise both include access to the Support Concierge.

To correctly identify the two plans that meet the user requirements.

Key Concept

AWS Support Plans features and Support Concierge availability

PreviousPage 72 / 74Next

All practice questions

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept