All practice questions

1473 questions

Question 1461Question

A game development studio is testing multiplayer features in a non-production environment. The team requires access to AWS technical support for configuration assistance, with a response time of under 24 hours for general questions. They only require email support during business hours and do not need phone or chat support. Which of the following is the minimum AWS Support plan that meets these requirements?

Show answer & explanation

Answer: Developer

Answer

Developer support plan
The Developer plan is the most cost-effective tier that offers technical support. It meets all of the studio's requirements by providing email access to support engineers during business hours, with a response SLA of under 24 hours for general guidance.

Step-by-Step Solution

1
Analyze the requirements: technical support for configuration assistance, email-only support during business hours, response time of under 24 hours for general questions, and a need for the minimum cost plan.
Identify that the Basic plan must be ruled out because it does not offer technical support cases.
Basic support is only for billing and account issues.
2
Compare the remaining tiers: Developer, Business, and Enterprise On-Ramp.
The Developer plan provides email support with a response time of under 24 hours for general guidance. Business and Enterprise On-Ramp provide 24/7 phone/chat support and faster response times but at a higher cost.
Since the studio only requires email support and under 24-hour response times, the Developer plan is the minimum viable support tier.

Key Concept

AWS Support Plans features and minimum requirements
Question 1462Question

An organization wants to categorize their infrastructure spend by environment using the custom tag key 'Environment'. Additionally, they want to track which IAM user created each resource by using the AWS-defined tag 'aws:createdBy'. The tags have been applied to all resources, but the billing administrator notices that neither tag is appearing in AWS Cost Explorer. What action is required to resolve this issue and make these tags available for cost analysis?

Show answer & explanation

Answer: Activate both the 'Environment' and the 'aws:createdBy' tags in the Billing and Cost Management console, as cost tracking only begins from the time of activation forward.

Answer

Activate both the 'Environment' and the 'aws:createdBy' tags in the Billing and Cost Management console, as cost tracking only begins from the time of activation forward.
To use cost allocation tags in AWS Cost Explorer or billing reports, they must first be applied to the resources and then activated in the Billing and Cost Management console. This applies to both user-defined tags (such as 'Environment') and AWS-generated tags (such as 'aws:createdBy'). Furthermore, cost allocation tags do not apply retroactively; they only track costs from the time they are activated in the billing console.

Step-by-Step Solution

1
Identify the types of tags used in the scenario.
The 'Environment' tag is a user-defined cost allocation tag, and 'aws:createdBy' is an AWS-generated cost allocation tag.
Both user-defined and AWS-generated tags are used for cost allocation, but they have different origins and naming formats.
2
Determine where cost allocation tags are activated for billing reports.
They must be activated within the Billing and Cost Management console.
Applying tags to AWS resources makes them visible in the console, but they do not appear in cost reports or AWS Cost Explorer until they are activated in the billing console.
3
Evaluate the timeline of the cost tracking.
Cost allocation tags start tracking costs only after activation and do not apply retroactively.
This explains why historical billing data does not reflect these tags and reinforces the forward-looking nature of cost allocation tags.

Key Concept

Activation of User-Defined and AWS-Generated Cost Allocation Tags
Question 1463Question

A company is expanding its infrastructure from a single Virtual Private Cloud (VPC) to a multi-VPC environment across multiple AWS accounts. The network engineering team needs to design a solution that satisfies two requirements: First, all VPCs must be connected through a centralized hub to simplify routing management and avoid a complex mesh of point-to-point connections. Second, network traffic entering or leaving specific subnets within each VPC must be filtered in a stateless manner. Which combination of AWS services or features should the company use to meet these requirements?

Show answer & explanation

Answer: AWS Transit Gateway and Network Access Control Lists (Network ACLs)

Answer

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
The combination of AWS Transit Gateway and Network Access Control Lists (Network ACLs) is correct because AWS Transit Gateway operates as a centralized cloud router to simplify traffic management across multiple VPCs and accounts, while Network ACLs are configured at the subnet level to provide stateless traffic filtering.

Step-by-Step Solution

1
Identify the AWS networking service required to connect multiple VPCs through a centralized hub.
AWS Transit Gateway acts as a cloud router to centralize external and inter-VPC connections, avoiding the management complexity of a full mesh of VPC peering connections.
The scenario requires a centralized hub to simplify routing management across multiple VPCs.
2
Identify the VPC feature required to filter traffic in a stateless manner at the subnet level.
Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless.
Security Groups are stateful and operate at the instance level, whereas Network ACLs are stateless and operate at the subnet boundary.
3
Select the option that combines both identified features.
The combination of AWS Transit Gateway and Network Access Control Lists (Network ACLs) satisfies both requirements.
This is the only configuration that provides centralized routing alongside stateless subnet-level filtering.

Key Concept

Using AWS Transit Gateway for centralized multi-VPC routing and Network Access Control Lists (Network ACLs) for stateless subnet-level security filtering.
Question 1464Question

An organization is migrating their non-production environments to AWS and has decided to subscribe to the Developer Support plan. Which of the following features or limitations are associated with the Developer Support plan? (Select two.)

Select all that apply

Show answer & explanation

Answer: Technical support cases can only be opened by one primary contact.; Technical support is restricted to web-based email cases during local business hours.

Answer

The Developer Support plan allows only a single primary contact to open technical cases and limits technical support to web-based email communication during local business hours.
The Developer Support plan is designed for testing and early development. It is limited to a single primary contact who can open web-based support cases, and technical support is only accessible via web/email during local business hours (9 AM to 6 PM).

Step-by-Step Solution

1
Analyze the requirements and limitations of the AWS Developer Support plan.
Identify that the Developer Support plan is designed for non-production environments, provides email-only support during local business hours, allows 1 primary contact to open cases, and has no phone/chat support or production-level SLAs.
This establishes the baseline capabilities of the Developer Support tier.
2
Compare the features of the Developer Support plan against the given options to find the correct attributes.
The option specifying only one primary contact and the option specifying web-based email during business hours are correct. The options regarding 24/7 phone/chat support, a designated Technical Account Manager, and a one-hour response time for production down cases are features of higher tiers (Business or Enterprise).
This isolates the correct options and eliminates the distractors.

Key Concept

AWS Support Plan Tiers and Features
Question 1465Question

A retail company is launching a seasonal marketing campaign and has deployed several AWS resources, including Amazon EC2 instances and Amazon S3 buckets. To organize their billing reports, they applied a user-defined tag with the key CampaignID to all resources, and they want to use the AWS-generated aws:createdBy tag to track resource creators. However, they notice that neither tag key is available for filtering or grouping in AWS Cost Explorer. Which of the following actions must the company take to resolve this issue and track their campaign costs? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Activate both the CampaignID tag and the aws:createdBy tag in the Billing and Cost Management console.; Allow new billing data to generate, as cost allocation tags only apply to cost data from the time of activation forward.

Answer

To resolve the issue, the company must activate both the CampaignID tag and the aws:createdBy tag in the Billing and Cost Management console, and allow new billing data to generate, as tags do not apply retroactively.
Cost allocation tags must be activated in the Billing and Cost Management console before they can be used for grouping and filtering in AWS Cost Explorer or appearing on billing reports. Additionally, cost allocation tags are not retroactive; they only track costs from the point of activation onward.

Step-by-Step Solution

1
Identify the status of the cost allocation tags.
The tags are applied to the resources but have not been activated in the billing system.
Before tags can appear in billing reports or AWS Cost Explorer, they must be explicitly activated.
2
Activate the tags in the console.
Activate the user-defined CampaignID tag and the AWS-generated aws:createdBy tag in the Billing and Cost Management console.
Both types of tags require separate activation in the billing console to be tracked.
3
Acknowledge temporal limitations.
Accept that past billing periods will not show tagged cost data.
AWS cost allocation tags do not apply retroactively to historical billing data.

Key Concept

Activation and temporal rules of user-defined and AWS-generated cost allocation tags.
Estimated Time:1m 30s
Question 1466Question

A university department is deploying a student registry portal on AWS. The department's technical staff requires 24/7 access to AWS support engineers via phone and chat to resolve immediate configuration issues. Additionally, they need architectural guidance tailored to their specific system design and use case. What is the minimum AWS Support plan that meets these requirements?

Show answer & explanation

Answer: Business

Answer

The Business support plan is the minimum plan that provides 24/7 access to phone and chat support along with use-case architectural guidance.
The Business support plan is the minimum tier that provides 24/7 access to Cloud Support Engineers via phone, email, and chat, as well as context-specific (use-case) architectural guidance.

Step-by-Step Solution

1
Analyze the customer requirements for support channels and architectural guidance.
The requirements are 24/7 phone and chat access, and use-case specific architectural guidance.
This establishes the minimum criteria for comparing the AWS Support plans.
2
Evaluate the Basic and Developer plans against these requirements.
The Basic plan has no technical support, and the Developer plan only provides business-hours email support with general guidance. Both fail the requirements.
Eliminating plans that do not meet the baseline technical support requirements.
3
Evaluate the Business and Enterprise On-Ramp plans to identify the minimum option.
The Business plan meets all requirements. The Enterprise On-Ramp plan also meets them but includes pooled TAM access and proactive reviews, representing a higher cost tier.
Identifying the most cost-effective (minimum) plan that meets the specified criteria.

Key Concept

AWS Support Plan Tiers and Features
Question 1467Question

A digital marketing agency plans to launch a high-profile media campaign on AWS. To ensure a smooth launch, the agency requires access to AWS Infrastructure Event Management (IEM) as a standard feature of their plan. They also need 24/7 phone and chat support with a response time of less than 30 minutes for critical system down events. While they require architectural guidance and support from a Technical Account Manager (TAM), they wish to minimize costs and do not need a designated TAM. Which AWS Support plan is the most cost-effective option that meets these requirements?

Show answer & explanation

Answer: Enterprise On-Ramp

Answer

Enterprise On-Ramp
The Enterprise On-Ramp support plan is designed for companies that need enterprise-grade support features, including AWS Infrastructure Event Management (IEM) and a 30-minute response time for critical issues, but want to minimize costs by using a pool of Technical Account Managers (TAMs) rather than a designated TAM.

Step-by-Step Solution

1
Identify the required support features from the scenario.
The organization needs AWS Infrastructure Event Management (IEM) included, under 30-minute response times for critical issues, and access to a pool of Technical Account Managers (TAMs) rather than a designated TAM.
Filtering the available AWS Support plans based on these specific constraints ensures the minimum required tier is chosen.
2
Compare these requirements against the features of the AWS Support plans.
Only Enterprise On-Ramp and Enterprise include IEM and under 30-minute response times. Among these two, Enterprise On-Ramp offers a pool of TAMs (instead of a designated TAM) at a lower entry cost.
To find the most cost-effective plan that meets all requirements without paying for unneeded features like a dedicated TAM.

Key Concept

AWS Support Plan Tiers and Features
Estimated Time:1m 30s
Question 1468Question

A logistics company is designing its network architecture in AWS. The company has created 1212 Virtual Private Clouds (VPCs) to isolate different services, such as inventory management, billing, and shipment tracking. They need a solution that establishes a simplified hub-and-spoke routing model to allow all 1212 VPCs to communicate with one another without managing a complex mesh of point-to-point connections. Additionally, the security team requires a stateless firewall mechanism at the subnet boundary to explicitly deny traffic from a list of known malicious IP addresses.

Which two AWS services or features should the company implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: AWS Transit Gateway; Network Access Control Lists (Network ACLs)

Answer

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
AWS Transit Gateway is correct because it acts as a central cloud router, simplifying multi-VPC connectivity into a hub-and-spoke model. Network Access Control Lists (Network ACLs) is correct because it operates at the subnet boundary, is stateless, and supports explicit deny rules to block malicious traffic before it reaches the instances.

Step-by-Step Solution

1
Analyze the VPC routing requirement for 12 VPCs.
Using point-to-point connections like VPC Peering would require n(n1)/2=12(11)/2=66n(n-1)/2 = 12(11)/2 = 66 peering connections, which is complex to manage. A centralized hub-and-spoke model is required, pointing to AWS Transit Gateway.
AWS Transit Gateway simplifies multi-VPC routing by acting as a central network transit hub.
2
Analyze the firewall requirement.
The firewall must be stateless, operate at the subnet boundary, and support explicit deny rules to block a specific range of malicious IP addresses.
Network Access Control Lists (Network ACLs) meet these criteria because they are stateless, operate at the subnet level, and support both allow and deny rules. Security Groups are stateful, operate at the instance level, and only support allow rules.

Key Concept

AWS multi-VPC routing and subnet-level security access control.
Question 1469Question

A financial services company is restructuring its cloud cost reporting. The finance team wants to track monthly AWS spending using two specific tags: a custom user-defined tag named `CostCenter` and the AWS-generated tag `aws:createdBy`. Although resources have already been tagged with `CostCenter` and launched by developers for several weeks, neither tag is currently appearing in AWS Cost Explorer or the monthly cost reports. Which of the following describes the correct process to make both tags visible in the cost reports, and the effect this action will have on historical cost data?

Show answer & explanation

Answer: Both the user-defined `CostCenter` tag and the AWS-generated `aws:createdBy` tag must be activated in the Billing and Cost Management console, and the tag data will only appear on billing reports generated after activation.

Answer

Both the user-defined `CostCenter` tag and the AWS-generated `aws:createdBy` tag must be activated in the Billing and Cost Management console, and the tag data will only appear on billing reports generated after activation.
To use tags for cost allocation, both user-defined tags (such as `CostCenter`) and AWS-generated tags (such as `aws:createdBy`) must be activated in the Billing and Cost Management console. Once activated, AWS begins organizing billing data based on these tags. This activation is not retroactive, meaning that the tags will only appear on cost reports (like AWS Cost Explorer or the Cost and Usage Report) for billing periods after the activation date.

Step-by-Step Solution

1
Identify the console where cost allocation tags must be activated.
Billing and Cost Management console.
AWS requires cost allocation tags to be explicitly enabled in the Billing and Cost Management console before they can be used for cost tracking and analysis.
2
Determine the activation requirements for user-defined vs. AWS-generated tags.
Both types of tags must be explicitly activated.
Neither user-defined nor AWS-generated cost allocation tags are active by default for billing purposes; both require activation.
3
Evaluate the retroactive impact of activating cost allocation tags.
Tags do not apply retroactively to past billing periods.
AWS only starts tracking and displaying cost data by tags from the time of activation forward.

Key Concept

Activation and retroactive limitations of Cost Allocation Tags
Question 1470Question

A company is evaluating AWS Support plans for its production environments. Which of the following features are included in the AWS Business support plan? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: 24/7 access to Cloud Support Engineers via phone, email, and chat; A response time of less than 1 hour for production system down cases

Answer

The AWS Business support plan features 24/7 customer service and technical support access via phone, email, and chat, along with a response time of less than 1 hour for production system down cases.
The AWS Business support plan provides 24/7 access to Cloud Support Engineers via phone, email, and chat for an unlimited number of cases. It also guarantees a response time of less than 1 hour for production system down cases.

Step-by-Step Solution

1
Evaluate the support channels available to subscribers of the AWS Business plan.
Subscribers receive 24/7 technical support access to Cloud Support Engineers through phone, email, and chat.
To identify the standard communication channels included in this tier.
2
Determine the response time service level agreements (SLAs) for production-level issues under the Business plan.
The Business support plan offers a response time of less than 1 hour when production systems go down.
To verify the speed of support resolution for business-critical events.
3
Filter out administrative and specialized architectural guidance features that belong to higher tiers.
A designated Technical Account Manager, the Support Concierge team, and inclusive Infrastructure Event Management are ruled out since they require either the Enterprise On-Ramp or Enterprise support plans.
To separate the cost-optimized features of the Business tier from the premium features of Enterprise tiers.

Key Concept

AWS Business Support Plan Features and Limits
Question 1471Question

A financial services company hosts a web application on Amazon EC2 instances inside a public subnet of an Amazon VPC. The security team detects a flood of malicious traffic coming from a specific external IP address range: 198.51.100.0/22198.51.100.0/22. To protect the application, the team must immediately block all incoming traffic from this specific IP range before it reaches the EC2 instances.

Which AWS network security feature should the company configure to meet this requirement?

Show answer & explanation

Answer: Network Access Control List (Network ACL)

Answer

Network Access Control List (Network ACL)
A Network Access Control List (Network ACL) acts as a stateless firewall at the subnet boundary. Because it supports both allow and deny rules, it can be configured to block all inbound traffic from the specified IP address range before the traffic can reach any resources in the subnet.

Step-by-Step Solution

1
Identify the level of network control required.
The requirement is to block traffic at the subnet boundary before it reaches any EC2 instances.
This narrows down the choice to subnet-level network features rather than instance-level or global routing services.
2
Determine the rule capability needed.
The solution requires an explicit deny rule to block a specific IP range (198.51.100.0/22198.51.100.0/22).
Security Groups only support allow rules, whereas Network ACLs support both allow and deny rules.
3
Select the correct AWS network security feature.
A Network ACL is the correct tool since it operates at the subnet boundary and allows creating explicit inbound deny rules.
This satisfies both the boundary and functional requirements of the scenario.

Key Concept

Network ACLs act as stateless firewalls at the subnet level and support explicit allow and deny rules, whereas Security Groups act as stateful firewalls at the instance level and only support allow rules.
Question 1472Question

A financial services company is planning to migrate its workloads to AWS. The company's management has decided to subscribe to the AWS Enterprise On-Ramp support plan to balance cost-efficiency with proactive architectural and operational guidance. Which two of the following features are included in the AWS Enterprise On-Ramp support plan?

Select all that apply

Show answer & explanation

Answer: Access to a pool of Technical Account Managers (TAMs) who provide proactive operational guidance and coordinate support resources.; Technical support response times of less than 30 minutes for business-critical system down cases.

Answer

The features included in the AWS Enterprise On-Ramp support plan are access to a pool of Technical Account Managers (TAMs) who provide proactive operational guidance and technical support response times of less than 30 minutes for business-critical system down cases.
The AWS Enterprise On-Ramp support plan bridges the gap between the Business and Enterprise tiers. It includes access to a pool of Technical Account Managers (TAMs) who provide proactive operational guidance and support resource coordination. Additionally, it offers a guaranteed response time of less than 30 minutes for business-critical system down cases.

Step-by-Step Solution

1
Identify the target support plan in the scenario.
The target plan is the AWS Enterprise On-Ramp support plan.
The company's requirements match the offerings of the Enterprise On-Ramp tier.
2
Analyze the Technical Account Manager (TAM) model for the Enterprise On-Ramp plan.
Enterprise On-Ramp provides access to a pool of TAMs, whereas the Enterprise plan provides a designated TAM.
This identifies the correct TAM resource model for this tier.
3
Determine the response time SLA for business-critical system down cases under Enterprise On-Ramp.
The response time SLA is less than 30 minutes.
This distinguishes it from the 15-minute response time under the Enterprise plan and the 1-hour response time under the Business plan.

Key Concept

AWS Support Plans Features
Question 1473Question

A company is expanding its AWS infrastructure by creating eight Virtual Private Clouds (VPCs) across different AWS accounts to isolate development environments. The network team needs to allow all these VPCs to communicate with one another. To minimize administrative overhead, the solution must avoid the complexity of managing a large mesh of point-to-point connections. Which AWS service or feature should the company use to satisfy these requirements?

Show answer & explanation

Answer: AWS Transit Gateway

Answer

AWS Transit Gateway
AWS Transit Gateway is the correct solution because it acts as a centralized cloud router that simplifies network architecture by connecting multiple VPCs and on-premises networks. It eliminates the need to manage a complex mesh of individual VPC peering connections.

Step-by-Step Solution

1
Analyze the requirement to connect eight Virtual Private Clouds (VPCs) while avoiding a complex mesh of point-to-point connections.
Identify that point-to-point connections like VPC Peering will scale poorly (requiring N(N1)2=28\frac{N(N-1)}{2} = 28 connections) and increase administrative overhead.
This establishes the need for a hub-and-spoke network topology rather than a mesh network.
2
Evaluate AWS networking services that can act as a central hub to simplify multi-VPC routing.
Identify AWS Transit Gateway as the service designed to connect multiple VPCs and on-premises networks to a single gateway.
AWS Transit Gateway acts as a regional virtual router, reducing the number of connections and simplifying route table management.

Key Concept

AWS Transit Gateway acts as a centralized cloud router to simplify multi-VPC network architectures.
Estimated Time:1m 30s
PreviousPage 74 / 74
All practice questions — AWS Certified Cloud Practitioner | Examkin