Examkin

All practice questions

1473 questions

All types1,473Multiple choice755Multiple select693Matching25
Question 1441Question →

An organization is hosting a web application on several Amazon EC2 instances within a public subnet of a Virtual Private Cloud (VPC). The security administrator must configure a stateful network firewall rule at the instance level to permit inbound traffic on port 443 (HTTPS) from any IP address. Which AWS networking component should the administrator modify to meet this requirement?

Show answer & explanation

Answer: Security Group

Answer

Security Group
A security group is the correct component because it operates at the instance level and provides stateful traffic filtering, allowing return traffic automatically without requiring an outbound rule.

Step-by-Step Solution

1
Analyze the requirement for a firewall rule that is stateful and operates at the instance level.
Identify that the component must apply to individual instances (not subnets) and automatically allow return traffic (stateful).
Filtering at the instance level requires instance-level firewalls, and stateful behavior means return traffic does not need explicit rules.
2
Evaluate the options to find which AWS service or configuration meets these characteristics.
A security group acts at the instance level and is stateful. A Network ACL acts at the subnet level and is stateless.
This distinguishes between the two primary firewall features in an Amazon VPC.

Key Concept

VPC Security Groups vs Network ACLs
Estimated Time:1m 0s
Question 1442Question →

A smart energy grid operator is deploying a critical monitoring application on AWS. To ensure continuous operation in the event of a localized physical disaster (such as a fire or power outage affecting a data center facility), the architecture must distribute application instances across separate, physically isolated locations that feature independent utility power, cooling, and network connectivity, while still maintaining low-latency network connections between them. Which AWS Global Infrastructure component is designed specifically to meet this requirement?

Show answer & explanation

Answer: Availability Zones

Answer

Availability Zones
Availability Zones are physically distinct locations within an AWS Region. Each Availability Zone is designed to be isolated from failures in other Availability Zones, equipped with independent power, cooling, and physical security, while remaining connected via high-speed, low-latency private fiber optic networks.

Step-by-Step Solution

1
Analyze the requirements: physical isolation of data centers to protect against local disasters (power failure, flooding) combined with low-latency network connections for application synchronization.
Identified the need for localized isolation within a single geographic area that does not introduce high latency.
This rules out cross-region architectures which solve isolation but introduce significant geographic latency.
2
Evaluate the AWS Global Infrastructure components against these requirements.
Availability Zones represent isolated locations within a Region, connected by low-latency networks. Regions are separate geographic areas. Edge Locations cache content.
Understanding the definitions and purposes of each infrastructure component prevents incorrect classification.
3
Select the component that uniquely satisfies both physical separation (independent power/cooling) and low-latency networking.
Availability Zones.
Each Availability Zone is engineered to prevent failures from propagating to other zones, while remaining close enough geographically to support synchronous replication.

Key Concept

Distinction between Regions, Availability Zones, and Edge Locations for High Availability
Question 1443Question →

A startup is deploying a two-tier application in a Virtual Private Cloud (VPC) with public and private subnets. The security team must enforce two controls: first, block specific malicious IP addresses from entering the public subnet entirely; second, allow stateful, bidirectional web traffic only on port 443 to the web servers. Which two AWS networking features or configurations should be used to satisfy these security requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: A Network Access Control List (NACL) rule associated with the subnet to deny traffic from the malicious IP addresses; A Security Group rule associated with the web server instances to allow inbound HTTPS traffic

Answer

A Network Access Control List (NACL) rule associated with the subnet to deny traffic from the malicious IP addresses, and a Security Group rule associated with the web server instances to allow inbound HTTPS traffic.
The correct options are a Network Access Control List (NACL) rule to deny traffic at the subnet boundary and a Security Group rule to allow HTTPS traffic at the instance level. NACLs allow explicit deny rules and apply at the subnet level, which blocks malicious traffic before it reaches any instances. Security Groups are stateful and operate at the instance level, allowing return traffic automatically once inbound access on port 443 is granted.

Step-by-Step Solution

1
Determine the control required to block specific malicious IP addresses at the subnet level.
Network ACLs are identified as the correct tool because they operate at the subnet boundary and support explicit deny rules.
Security Groups are allow-only and cannot explicitly deny specific IP addresses.
2
Determine the control required to permit stateful port 443 traffic to the web servers.
Security Groups associated with the instances are identified as the correct tool because they are stateful and allow inbound HTTPS traffic.
Security Groups automatically allow bidirectional return traffic, unlike Network ACLs which are stateless and would require explicit ephemeral port rules in both directions.

Key Concept

The difference between stateful Security Groups operating at the instance level and stateless Network Access Control Lists (NACLs) operating at the subnet level.
Question 1444Question →

An organization is reviewing AWS Support plans to meet specific operational requirements. They need 24/7 access to Cloud Support Engineers via phone, email, and chat for technical support. In addition, the organization requires architectural guidance but does not want to pay for a dedicated Technical Account Manager (TAM). Which two AWS Support plans meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Business Support; Enterprise On-Ramp Support

Answer

Business Support and Enterprise On-Ramp Support are the plans that provide 24/7 phone, email, and chat access to Cloud Support Engineers without including a dedicated Technical Account Manager.
Business Support and Enterprise On-Ramp Support both provide 24/7 access to Cloud Support Engineers via phone, email, and chat. Neither plan includes a dedicated Technical Account Manager; Business Support offers no TAM services, while Enterprise On-Ramp Support provides access to a shared pool of TAMs rather than a dedicated resource.

Step-by-Step Solution

1
Analyze the technical support access requirement.
The requirement is 24/7 access to Cloud Support Engineers via phone, email, and chat. This rules out Basic Support (no technical support) and Developer Support (business-hours email only).
To identify which tiers offer the requested level of technical support.
2
Analyze the Technical Account Manager (TAM) requirement.
The requirement specifies no dedicated TAM. Enterprise Support includes a designated (dedicated) TAM, which rules it out. Business Support has no TAM, and Enterprise On-Ramp Support has access to a pool of TAMs (not dedicated).
To distinguish between the remaining support tiers (Business, Enterprise On-Ramp, and Enterprise) based on TAM availability.

Key Concept

AWS Support plans differ in their access to support channels (email, phone, chat), response times, and the presence of a Technical Account Manager (TAM).
Question 1445Question →

A logistics company wants to migrate its legacy supply chain management software to the AWS Cloud. The engineering team has designed a hybrid architecture that will require Amazon EC2 instances with Amazon Elastic Block Store (EBS) volumes, an Amazon Aurora database, and an AWS Site-to-Site VPN connection. The company has not yet created an AWS account but needs to estimate the monthly infrastructure costs for this proposed architecture to obtain budget approval.

Which AWS tool should the team use to generate this pre-deployment cost estimate?

Show answer & explanation

Answer: AWS Pricing Calculator

Answer

AWS Pricing Calculator
AWS Pricing Calculator allows users to estimate the cost of AWS services for planned architectures. It can be accessed publicly without an AWS account, making it the perfect tool for pre-deployment planning and budgeting.

Step-by-Step Solution

1
Analyze the customer's requirement of estimating costs for a new, undeployed architecture before creating an AWS account.
The scenario describes a pre-deployment state where resources like EC2, EBS, Aurora, and VPN are planned but not yet provisioned, and no AWS account exists.
Identifying the lifecycle state (pre-deployment vs. post-deployment) is key to selecting the correct cost management tool.
2
Compare the capabilities of available AWS billing and cost tools for estimating hypothetical configurations.
AWS Pricing Calculator is the only tool designed to model and estimate costs for hypothetical AWS resources without requiring an active account or existing usage data.
This matches the tool's core feature of providing web-based cost estimations for planned architectures.

Key Concept

AWS Pricing Calculator is a web-based planning tool used to estimate the cost of AWS services based on hypothetical workloads and resource configurations before deployment.
Question 1446Question →

A financial technology startup is planning to build a new transactional ledger system on AWS. The proposed architecture will utilize Amazon DynamoDB, AWS Lambda, and Amazon API Gateway. Before deploying any resources, the startup needs to model and estimate their expected monthly operational costs. Which of the following actions can the startup perform using the AWS Pricing Calculator to achieve this? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Estimate the monthly costs of the DynamoDB tables by specifying expected read/write throughput and storage requirements.; Compare the estimated operational costs of the serverless architecture across different AWS Regions.

Answer

The startup can use the AWS Pricing Calculator to estimate the monthly costs of the DynamoDB tables by defining parameters like storage and throughput, and to compare the estimated operational costs across different AWS Regions.
The AWS Pricing Calculator is designed to estimate the costs of AWS services prior to deployment. It allows users to input hypothetical parameters, such as DynamoDB read/write capacity and storage, to model monthly costs. Additionally, because AWS prices vary by location, it allows users to compare estimates across different AWS Regions to optimize where to deploy their workload.

Step-by-Step Solution

1
Identify the primary purpose of the tool mentioned in the scenario, which is to estimate costs before any resources are actually deployed.
The AWS Pricing Calculator is the correct tool for generating pre-deployment cost estimates based on hypothetical inputs.
This helps rule out post-deployment tracking and monitoring tools.
2
Determine which features of the AWS Pricing Calculator match the requirements for modeling the proposed architecture.
The calculator allows configuring specific service parameters (like DynamoDB storage and throughput) and selecting different AWS Regions to compare costs.
This directly maps to the two correct options.
3
Evaluate the remaining options to ensure they represent post-deployment or budgeting tools rather than pre-deployment estimation tools.
Setting budgets (AWS Budgets), reviewing past spending (AWS Cost Explorer), and analyzing actual resource utilization logs are post-deployment tasks.
This confirms that the other choices are incorrect distractors.

Key Concept

The AWS Pricing Calculator is a web-based planning tool used to estimate the cost of AWS services for hypothetical use cases and architectures before deployment.
Question 1447Question →

A consulting firm is deploying a client's customer-facing application on AWS. The client requires a support plan that provides 24/7 technical support via phone and chat, and guarantees a response time of under one hour for production system down events. What is the minimum AWS Support plan that will satisfy these requirements?

Show answer & explanation

Answer: Business

Answer

The Business support plan is the minimum tier that satisfies the requirements.
The Business support plan is the lowest-cost tier that provides 24/7 access to Cloud Support Engineers via phone and chat, and guarantees a response time of under one hour for production system down events.

Step-by-Step Solution

1
Analyze the technical support channels and response time requirements.
The requirements specify 24/7 phone and chat technical support, and a response time of under one hour for production system down events.
This helps filter out support plans that do not meet the baseline features.
2
Evaluate the AWS Support plans against the requirements.
The Developer plan is eliminated as it only provides email support during business hours. The Business plan provides 24/7 phone/chat support and a 1-hour SLA for production system down events. The Enterprise On-Ramp and Enterprise plans also meet these requirements but are higher-tier and more costly options.
Identifying the capabilities of each plan allows selection of the plan that satisfies all requirements at the minimum cost.

Key Concept

AWS Support Plans
Question 1448Question →

An educational technology company is planning to launch a virtual learning platform on AWS. Before creating an AWS account or deploying any resources, the IT team needs to estimate the monthly running costs of a proposed architecture consisting of Amazon ECS on AWS Fargate, Amazon Aurora, and Amazon CloudFront. Which of the following AWS tools should the company use to model and estimate these pre-deployment costs?

Show answer & explanation

Answer: AWS Pricing Calculator

Answer

AWS Pricing Calculator is the correct tool because it allows users to estimate the costs of AWS services for a proposed or hypothetical architecture before any resources are deployed.
AWS Pricing Calculator is a free, web-based planning tool that allows you to create cost estimates for AWS services. It is ideal for scenarios where you want to model a proposed architecture and estimate its monthly costs before actually deploying any resources.

Step-by-Step Solution

1
Identify the stage of deployment.
Pre-deployment planning stage (no resources have been deployed yet).
Understanding whether the requirement is for post-deployment tracking or pre-deployment estimation helps eliminate tools designed for active resource monitoring.
2
Evaluate the purpose of the tools.
The company wants to model hypothetical configurations of ECS, Fargate, Aurora, and CloudFront.
A cost estimation tool is required to input hypothetical configurations and output estimated costs.
3
Select the tool that matches pre-deployment estimation.
AWS Pricing Calculator fits the requirement of estimating costs for hypothetical AWS configurations.
Other billing tools like Cost Explorer, Cost and Usage Report, and AWS Budgets require existing resources and historical billing data.

Key Concept

AWS Pricing Calculator is a web-based planning tool that estimates the cost of AWS services based on user-defined configurations and hypothetical workloads.
Question 1449Question →

A business needs to deploy a static website globally. They want to ensure that user requests are resolved to the closest endpoint with low latency using domain name system (DNS) routing. Additionally, they want to distribute and cache content globally at edge locations to speed up delivery. Which AWS network services should be used to build this solution? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon Route 53; Amazon CloudFront

Answer

Amazon Route 53 and Amazon CloudFront are the correct services to route users to the closest endpoint with low latency and cache static content globally.
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) service that routes user requests to the closest endpoint with low latency. Amazon CloudFront is a global content delivery network (CDN) service that caches static and dynamic web content at edge locations close to users to speed up delivery.

Step-by-Step Solution

1
Analyze the requirement for low-latency domain name system (DNS) routing to the closest endpoint.
Identify Amazon Route 53 as the AWS DNS service that offers latency-based routing to resolve queries to the nearest endpoint.
Route 53 is AWS's managed DNS service designed to handle domain registration and traffic routing globally.
2
Analyze the requirement to distribute and cache static website content globally to reduce load times.
Identify Amazon CloudFront as the global content delivery network (CDN) that caches content at edge locations.
CloudFront uses AWS edge locations to cache and serve content closer to end-users, reducing latency.

Key Concept

AWS network services include Route 53 for global DNS routing and CloudFront for global content delivery and caching at edge locations.
Question 1450Question →

A financial services company is migrating its core systems to AWS. The operations team requires proactive operational reviews and architectural guidance from Technical Account Managers (TAMs), and is open to using either a dedicated TAM or a pool of TAMs. Which of the following AWS Support plans meet this requirement by providing access to a TAM? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Enterprise Support; Enterprise On-Ramp

Answer

Enterprise Support and Enterprise On-Ramp are the two plans that provide access to Technical Account Managers (TAMs).
Enterprise Support and Enterprise On-Ramp both provide access to Technical Account Managers (TAMs). Enterprise Support provides a dedicated TAM, while Enterprise On-Ramp provides access to a shared pool of TAMs to coordinate proactive guidance and reviews.

Step-by-Step Solution

1
Identify the core requirements from the scenario.
The company requires proactive operational reviews and architectural guidance from a Technical Account Manager (TAM), accepting either a dedicated TAM or a pool of TAMs.
This requirement narrows down the eligible AWS Support plans to those that include TAM access.
2
Evaluate the support options for TAM availability.
Basic, Developer, and Business support plans do not include any access to a Technical Account Manager (TAM). Enterprise On-Ramp provides access to a pool of TAMs, and Enterprise Support provides a designated/dedicated TAM.
By filtering out plans without TAM access, we identify Enterprise Support and Enterprise On-Ramp as the correct selections.

Key Concept

AWS Support plans offer different levels of access to Technical Account Managers (TAMs). Only Enterprise and Enterprise On-Ramp plans include access to TAMs.
Estimated Time:1m 30s
Question 1451Question →

An enterprise is planning to deploy a multi-tier web application on AWS. The application must be highly available and resilient to localized data center failures. Additionally, to comply with local regulations, all customer data must remain within the physical borders of a specific country. Which of the following statements regarding the AWS Global Infrastructure are correct? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Deploying application components across multiple Availability Zones within a single AWS Region provides high availability and fault tolerance against localized failures.; Choosing a specific AWS Region helps meet data residency and compliance requirements by keeping data physically within that region's geographic boundaries.

Answer

Deploying application components across multiple Availability Zones within a single AWS Region provides high availability and fault tolerance against localized failures; and choosing a specific AWS Region helps meet data residency and compliance requirements by keeping data physically within that region's geographic boundaries.
Deploying across multiple Availability Zones within a Region ensures protection from localized disasters because they are isolated from each other physically and utility-wise. Selecting a specific AWS Region keeps customer data physically located within that Region, directly addressing data sovereignty requirements.

Step-by-Step Solution

1
Analyze the high availability requirement against localized failures.
Availability Zones (AZs) are designed to provide physical isolation within a Region, making them the correct infrastructure component for localized disaster resilience.
AZs are separate physical locations with redundant power, networking, and connectivity within an AWS Region.
2
Analyze the compliance and data residency requirement.
AWS Regions define the geographic boundary of where data resides.
Customers choose the AWS Region in which their data is stored, and AWS guarantees that the data remains within that Region unless the customer explicitly configures replication elsewhere.

Key Concept

AWS Regions provide geographic boundaries for data sovereignty, while Availability Zones within a Region provide fault isolation and high availability.
Question 1452Question →

A small development team is setting up their AWS environment. They require a support plan that allows any of their five team members to independently open technical support cases with AWS. What is the minimum AWS Support plan that meets this requirement?

Show answer & explanation

Answer: Business Support plan

Answer

The Business Support plan is the minimum tier that allows multiple team members (unlimited contacts) to independently open technical support cases.
The correct answer is the Business Support plan. The Business Support plan is the lowest-priced tier that offers unlimited contacts (authorized IAM users) the ability to open technical support cases. In contrast, the Developer Support plan is limited to a single primary contact, and the Basic plan does not allow any technical support cases to be opened.

Step-by-Step Solution

1
Identify the core requirement of the development team.
The team needs a support plan that allows five distinct team members to independently open technical support cases.
This establishes the need for a plan that supports multiple or unlimited contacts.
2
Evaluate the capabilities of each AWS Support plan tier starting from the lowest tier.
The Basic plan has no technical support. The Developer plan allows only one primary contact to open cases. The Business plan allows unlimited contacts to open cases.
By analyzing the tiers in ascending order of cost and features, the minimum plan that satisfies the multiple contacts requirement is identified.

Key Concept

AWS Support plan tiers and contact limits
Question 1453Question →

A company is hosting a database instance in a private subnet of a Virtual Private Cloud (VPC). The database should only accept incoming traffic from web application servers running in a public subnet of the same VPC. To implement this restriction, the company wants to deploy a stateful firewall that controls inbound and outbound traffic at the individual instance level. Which AWS network security feature should be used to meet these requirements?

Show answer & explanation

Answer: Security groups

Answer

Security groups
Security groups act as a stateful firewall for EC2 instances, controlling inbound and outbound traffic at the instance level. They allow you to specify permit rules, and because they are stateful, any allowed inbound traffic is automatically allowed outbound, satisfying the requirement to secure individual database instances.

Step-by-Step Solution

1
Identify the level at which the firewall must operate based on the requirements.
The requirement specifies controlling traffic at the individual instance level, not the subnet level.
This distinguishes between security groups (which operate at the instance level) and Network ACLs (which operate at the subnet level).
2
Evaluate the statefulness requirement.
The scenario requires a stateful firewall.
Security groups are stateful, meaning allowed inbound traffic automatically permits return outbound traffic. Network ACLs are stateless and require explicit rules in both directions.

Key Concept

Security groups act as stateful firewalls at the instance level, whereas Network ACLs act as stateless firewalls at the subnet level.
Estimated Time:1m 0s
Question 1454Question →

An organization is evaluating AWS Support plans for its production workloads. The operations team requires 24/7 technical support access via phone and chat, but the organization's budget cannot accommodate a plan that provides a designated Technical Account Manager (TAM). Which of the following AWS Support plans meet these requirements? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Business; Enterprise On-Ramp

Answer

The Business and Enterprise On-Ramp support plans meet the requirements.
The Business and Enterprise On-Ramp support plans both offer 24/7 access to Cloud Support Engineers via phone and chat. Furthermore, neither plan includes a designated Technical Account Manager (the Business plan has no TAM support, and the Enterprise On-Ramp plan provides access to a pooled TAM resource rather than a designated one).

Step-by-Step Solution

1
Identify the support channel requirements.
The organization requires 24/7 phone and chat support. This rules out the Basic and Developer support plans, which do not offer 24/7 phone or chat support.
Developer support only offers business-hours email access, while Basic support offers no technical support.
2
Identify the Technical Account Manager (TAM) constraints.
The organization cannot accommodate a designated TAM. This rules out the Enterprise support plan, which includes a designated TAM.
Enterprise On-Ramp provides access to a pool of TAMs (not a designated TAM), and the Business plan does not provide any TAM access, satisfying the constraint.

Key Concept

AWS Support Plans tiers and features
Question 1455Question →

A digital marketing agency based in Chicago needs to run a real-time bidding application that requires single-digit millisecond latency for local end-users. The agency wants to run its compute resources close to these users without building or maintaining any physical infrastructure in the city. The application must also connect seamlessly back to the agency's primary resources running in the main AWS Region. Which AWS global infrastructure component should the agency use to achieve this?

Show answer & explanation

Answer: AWS Local Zones

Answer

AWS Local Zones
AWS Local Zones allow you to run latency-sensitive components of your applications close to end-users in a specific geographic area. They extend an existing Virtual Private Cloud (VPC) from a parent AWS Region, enabling compute and storage resources to run locally with single-digit millisecond latency, without requiring the customer to manage any physical hardware or data centers.

Step-by-Step Solution

1
Analyze the business requirements from the scenario.
Requirements identified: single-digit millisecond latency in a specific metropolitan area, running compute resources close to users, no on-premises hardware management, and seamless VPC connectivity.
Understanding the technical constraints helps filter out irrelevant infrastructure components.
2
Evaluate the capabilities of the available AWS infrastructure options against the requirements.
Edge Locations are for content delivery network (CDN) caching, not general compute. Wavelength targets 5G mobile devices. Outposts requires on-premises hardware installation. Local Zones allow running compute resources in a metropolitan area close to users without managing physical infrastructure.
Comparing components ensures that the selected option satisfies all constraints without introducing prohibited dependencies.
3
Select the component that natively extends a VPC to a metropolitan location.
AWS Local Zones is selected as it directly extends the parent region's VPC to a local zone, fulfilling all criteria.
Only Local Zones allows extending an existing VPC to run latency-sensitive workloads close to local users without managing physical hardware.

Key Concept

AWS Local Zones provide low-latency access to compute and storage services in specific metropolitan areas by extending a parent AWS Region's VPC close to end-users.
Question 1456Question →

A healthcare analytics firm wants to procure a proprietary data visualization tool from a third-party software vendor. The firm needs to negotiate customized pricing, a flexible multi-year payment schedule, and custom legal terms directly with the vendor, but still wants to consolidate the charges onto their existing AWS bill. Which AWS Marketplace feature enables the firm to procure this software under these customized terms?

Show answer & explanation

Answer: AWS Marketplace Private Offers

Answer

AWS Marketplace Private Offers
AWS Marketplace Private Offers enable customers to negotiate customized pricing, EULAs, and flexible payment terms directly with vendors while maintaining centralized billing through their AWS account.

Step-by-Step Solution

1
Identify the core business requirements in the scenario.
The firm requires custom pricing, custom payment terms, and custom legal terms, while retaining the benefits of AWS consolidated billing.
This establishes the constraints that the solution must meet.
2
Evaluate AWS Marketplace capabilities for custom negotiations.
AWS Marketplace Private Offers allow independent software vendors (ISVs) to create custom quotes containing negotiated terms, pricing, and EULAs for specific AWS accounts.
This matches all customer requirements, allowing them to finalize the transaction in AWS Marketplace and receive a single consolidated bill.

Key Concept

AWS Marketplace Private Offers allow buyers and sellers to negotiate custom terms, pricing, and payment schedules for third-party software while maintaining consolidated billing.
Question 1457Question →

A company's finance team is attempting to track cloud costs using a user-defined cost allocation tag named 'ProjectID' and the AWS-generated cost allocation tag 'aws:createdBy'. Although developers have applied these tags to several active Amazon EC2 instances, the tags are not appearing in the company's billing reports or AWS Cost Explorer. Which of the following describes the correct action and behavior required to make these tags visible on the billing reports?

Show answer & explanation

Answer: Activate both the 'ProjectID' and the 'aws:createdBy' tags within the AWS Billing and Cost Management console, which will cause them to appear on future billing reports without retroactively updating historical costs.

Answer

Activate both the 'ProjectID' and the 'aws:createdBy' tags within the AWS Billing and Cost Management console, which will cause them to appear on future billing reports without retroactively updating historical costs.
Cost allocation tags, whether user-defined or AWS-generated, must be activated in the AWS Billing and Cost Management console before they can be used to track costs in reports or Cost Explorer. These tags do not apply retroactively, meaning they will only track cost data from the time of activation forward.

Step-by-Step Solution

1
Identify that cost allocation tags must be explicitly enabled for billing tracking.
Applying tags directly to resources makes them available for search/organization, but not for cost tracking.
AWS requires activation so that it knows which tag keys to include in the billing datasets and reports.
2
Select the correct location for tag activation.
Both user-defined ('ProjectID') and AWS-generated ('aws:createdBy') tags must be activated in the Billing and Cost Management console.
This is the single centralized place where billing-related tag schemas are managed.
3
Determine the temporal behavior of cost allocation tags.
Activated tags only apply from the time of activation forward.
AWS does not recalculate historical billing files dynamically for retroactive tag applications.

Key Concept

Activation and behavior of cost allocation tags
Estimated Time:1m 0s
Question 1458Question →

A startup is launching a global online marketplace on AWS. The application requires high availability and resilience against local data center failures for its transactional database. Additionally, the startup wants to minimize latency for users worldwide who access static product images. Which of the following architectural strategies should the startup implement? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploy the primary and standby database instances across multiple Availability Zones within the same AWS Region.; Store and cache the static product images in AWS Edge Locations using a content delivery network.

Answer

Deploying the primary and standby database instances across multiple Availability Zones within the same AWS Region, and storing and caching the static product images in AWS Edge Locations using a content delivery network.
The correct architecture uses multiple Availability Zones within a single Region to ensure high availability and automatic failover for the database in case of a data center outage. It also utilizes AWS Edge Locations (via a service like Amazon CloudFront) to cache static images closer to international users, drastically reducing latency.

Step-by-Step Solution

1
Analyze the database requirement for high availability and resiliency against local data center failures.
Identify that Availability Zones are isolated locations within a Region designed for fault tolerance and high availability.
Deploying across multiple Availability Zones protects against localized disruptions without the high latency of cross-region setups.
2
Analyze the requirement to minimize latency for global users accessing static product images.
Identify that AWS Edge Locations cache static content closer to end-users globally.
Using a content delivery network utilizing Edge Locations minimizes latency for static assets.

Key Concept

AWS Global Infrastructure components including Regions, Availability Zones, and Edge Locations, and their appropriate architectural use cases.
Question 1459Question →

A media production company needs to deploy a third-party video transcoding solution across its AWS environments. The company wants to search for software from independent software vendors, quickly deploy it, and consolidate its procurement fees onto a single AWS invoice. Which of the following are benefits of using AWS Marketplace to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The company can find, test, and deploy pre-configured software solutions using flexible consumption models.; The software licensing costs are consolidated and billed directly through the company's existing AWS billing account.

Answer

The benefits of using AWS Marketplace are that the company can search for, test, and deploy pre-configured software solutions with flexible options, and the licensing costs are consolidated onto their existing AWS billing account.
AWS Marketplace acts as a digital catalog that enables organizations to search for, test, and deploy third-party software solutions. Additionally, purchases are billed directly through the customer's AWS account, consolidating all software and cloud infrastructure charges on a single invoice.

Step-by-Step Solution

1
Analyze the requirements for finding third-party software and consolidating billing.
Identify AWS Marketplace as the service designed for procuring third-party software with consolidated invoicing.
AWS Marketplace simplifies software discovery and integrates licensing fees directly into the AWS bill.
2
Evaluate the options for deployment models.
Confirm that pre-configured software (like AMIs or SaaS) can be deployed quickly under flexible pricing structures.
This matches the requirement for rapid deployment and procurement flexibility.
3
Verify support and operational boundaries.
Eliminate incorrect options that misallocate patching duties, expense types, or support scopes.
AWS does not manage third-party patching, convert software purchases to capital expenses, or troubleshoot vendor code.

Key Concept

AWS Marketplace is a curated digital catalog that simplifies the discovery, procurement, deployment, and billing of third-party software running on AWS.
Question 1460Question →

A retail company is launching a global web application. The company must ensure that users experience minimal latency when accessing static assets. Additionally, they must implement a stateless security layer at the boundary of their application's subnets to control inbound and outbound traffic.

Which two AWS services or features should the company configure to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Amazon CloudFront to cache static assets globally at edge locations close to users; Network Access Control Lists (Network ACLs) to define stateless firewall rules at the subnet level

Answer

The correct answers are Amazon CloudFront (to cache static assets globally) and Network Access Control Lists (to act as a stateless subnet-level firewall).
The correct services are Amazon CloudFront, which minimizes latency by caching static assets close to users, and Network Access Control Lists (NACLs), which serve as a stateless firewall at the subnet boundary.

Step-by-Step Solution

1
Analyze the requirement for low-latency delivery of static assets globally.
Amazon CloudFront is identified as the AWS content delivery network (CDN) that caches content at global edge locations.
CloudFront reduces latency by fetching content from the closest edge location to the user.
2
Analyze the requirement for a stateless firewall operating at the subnet level.
Network Access Control Lists (NACLs) are identified as the appropriate subnet-level stateless firewall.
NACLs apply rules to the entire subnet and evaluate inbound and outbound traffic independently.

Key Concept

AWS Network Services (Amazon CloudFront and Amazon VPC Network ACLs)
PreviousPage 73 / 74Next
All practice questions — AWS Certified Cloud Practitioner | Examkin