Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 1Soru →

A startup is deploying a critical database on AWS and is evaluating options for high availability and disaster recovery. The database must be resilient to localized physical events such as fires, earthquakes, or power grid failures in a metropolitan area, but the data must not leave the host country due to legal compliance. A developer suggests deploying a primary database instance in one AWS Region and a read replica in a different AWS Region within the same country, while another suggestion is to deploy the database across multiple Availability Zones within a single AWS Region. Which of the following statements correctly evaluates these proposals in the context of AWS Global Infrastructure design principles?

Cevabı ve açıklamayı göster

Cevap: Deploying across multiple Availability Zones in a single Region provides protection against localized physical events because Availability Zones are physically separated, isolated locations with independent power, cooling, and network connectivity, whereas deploying across different Regions introduces higher latency and is typically used for broader geographic disaster recovery.

Cevap

Deploying across multiple Availability Zones in a single Region provides protection against localized physical events because Availability Zones are physically separated, isolated locations with independent power, cooling, and network connectivity, whereas deploying across different Regions introduces higher latency and is typically used for broader geographic disaster recovery.
Deploying across multiple Availability Zones in a single Region provides high availability and fault tolerance against localized physical events because each Availability Zone is a physically isolated location with independent power, cooling, and networking. Because they are in the same Region, they are close enough to allow low-latency synchronous replication, while remaining in the same country to satisfy data residency regulations.

Adım Adım Çözüm

1
Analyze the requirement for resilience against localized physical events within a metropolitan area.
Identify that the system requires physical isolation with independent power, cooling, and network infrastructure.
This ensures that a localized failure (like a power outage or fire) in one facility does not cause a secondary failure in another facility.
2
Evaluate the physical separation of AWS Availability Zones (AZs).
Confirm that AZs are physically isolated locations within an AWS Region, engineered to be fault-isolated.
Deploying the database across multiple AZs meets the localized resilience requirement without crossing regional boundaries.
3
Evaluate the requirement for data residency within the host country.
Verify that an AWS Region is situated within a single country's borders, and its AZs are located in the same country.
This guarantees that data stays within the national borders, fulfilling the compliance requirement.
4
Compare the AZ deployment with cross-Region and Edge Location options.
Determine that cross-Region deployment increases latency and is for disaster recovery, while Edge Locations cannot run databases.
This validates that the multi-AZ single-Region approach is the only proposal that satisfies all constraints.

Anahtar Kavram

Physical isolation and logical boundaries of AWS Regions, Availability Zones, and Edge Locations.
Soru 2Soru →

A cloud architect is reviewing the compute requirements for a media distribution platform. The platform has two distinct components:

1. A video rendering pipeline that requires deep customization of the underlying Linux kernel and direct access to physical GPU hardware resources.
2. A containerized metadata extraction service that runs on an event-driven basis in response to user uploads, with highly unpredictable traffic and a strict requirement to avoid managing host servers.

Which two of the following compute solutions should the architect select to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon EC2 instances configured with custom Amazon Machine Images (AMIs) to support the required custom operating system kernel and GPU access; AWS Fargate to run the containerized metadata extraction service dynamically without provisioning or managing host servers

Cevap

The architect should select Amazon EC2 instances configured with custom Amazon Machine Images (AMIs) to support the custom operating system and GPU requirements, and AWS Fargate to run the containerized metadata extraction service dynamically without provisioning or managing host servers.
Selecting Amazon EC2 with custom AMIs and AWS Fargate is correct because EC2 provides the administrative access needed to customize the operating system kernel and utilize physical GPU instances, while AWS Fargate provides a serverless compute engine to run containerized workloads dynamically without host management.

Adım Adım Çözüm

1
Analyze the video rendering pipeline requirements: deep kernel customization and direct GPU hardware access.
Identify that a service granting full control over the guest operating system (IaaS) and supporting GPU hardware instances is required. Amazon EC2 meets these criteria.
Serverless or fully managed services do not allow direct kernel configuration or physical hardware mappings.
2
Analyze the metadata extraction service requirements: containerized, event-driven, unpredictable usage, and no host server management.
Identify that a serverless container orchestration platform is required. AWS Fargate runs containers without requiring instance management.
AWS Fargate manages the underlying compute infrastructure automatically, scaling to meet demand without operational overhead.
3
Evaluate the remaining options against the AWS Shared Responsibility Model and service limitations.
Eliminate the option suggesting AWS patches EC2 guest operating systems, and eliminate AWS Lambda due to its inability to run custom kernels or access physical GPU hardware.
Operating system patching on EC2 is a customer responsibility, and Lambda does not support the rendering workload's hardware and kernel needs.

Anahtar Kavram

Selecting appropriate AWS compute services based on operational control, infrastructure management boundaries, and application architecture.
Soru 3Soru →

A university research department is transitioning its scientific simulation workloads to AWS. These workloads run for approximately 1212 hours at the end of each month, requiring 6464 high-performance compute nodes. The rest of the month, the department only requires a single low-power server to host their results archive. The IT director is evaluating the economic impact of this migration compared to their legacy on-premises hardware.

Which of the following describes the most cost-effective provisioning strategy that illustrates the economic benefit of cloud elasticity for this workload?

Cevabı ve açıklamayı göster

Cevap: Deploying 6464 On-Demand Instances only for the 1212 hours the simulations run and terminating them immediately afterward, while running a single low-power instance continuously.

Cevap

Deploying 6464 On-Demand Instances only for the 1212 hours the simulations run and terminating them immediately afterward, while running a single low-power instance continuously.
The correct answer demonstrates elasticity by running the high-performance compute nodes only when active (1212 hours a month) and terminating them when finished. This ensures the university only pays for what it uses, avoiding the cost of idle servers.

Adım Adım Çözüm

1
Analyze the workload's resource usage pattern over time.
The workload has a highly fluctuating demand pattern: it requires 6464 compute nodes for only 1212 hours per month (approx. 1.6%1.6\% of the month) and just a single node for the remaining 98.4%98.4\% of the time.
Identifying the demand pattern is necessary to choose between static provisioning and elastic, dynamic provisioning.
2
Evaluate the economic feasibility of AWS pricing models for the intermittent portion of the workload.
Using On-Demand instances for the 6464 simulation nodes costs only for the 1212 hours of actual use, whereas Reserved Instances or static provisioning would charge for the entire month regardless of utilization.
This step determines how to minimize waste for resources that are idle most of the month.
3
Formulate a hybrid provisioning strategy that matches the workload segments.
Run a single low-power instance continuously for the archive, and spin up 6464 On-Demand instances only when the monthly simulation runs, terminating them immediately upon completion.
This strategy leverages cloud elasticity to optimize cost by dynamically aligning compute supply with workload demand.

Anahtar Kavram

Cloud elasticity vs. static provisioning, and the pay-as-you-go consumption model.
Tahmini Süre:2m 0s
Soru 4Soru →

A global media network is migrating its digital publishing platform to AWS. The network needs to ensure that its primary publishing database is resilient against localized disasters, such as power grid failures or flooding, within its main operating market. Additionally, the network must deliver static image and video assets to a worldwide audience with minimal delay. Which of the following AWS Global Infrastructure design decisions will meet these requirements? (Select TWO).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploying the primary database across multiple Availability Zones within a single AWS Region; Utilizing AWS Edge Locations to cache and serve static media assets globally

Cevap

Deploying the primary database across multiple Availability Zones within a single AWS Region, and utilizing AWS Edge Locations to cache and serve static media assets globally.
Deploying the primary database across multiple Availability Zones within a single AWS Region ensures high availability and resilience because each Availability Zone is physically isolated with independent infrastructure (power, cooling, network). Utilizing AWS Edge Locations to cache and serve static media assets globally reduces latency for international viewers by serving files from locations closer to them.

Adım Adım Çözüm

1
Analyze the high-availability requirement for the database.
Identify that protecting against localized disasters (power failures, flooding) within a market requires deploying resources across physically separated locations within the same region (Availability Zones).
Availability Zones are isolated locations within a geographic AWS Region that are connected through low-latency links but are on separate power and flood plains.
2
Analyze the low-latency content delivery requirement.
Identify that serving static images and videos to a worldwide audience with minimal delay requires caching content close to the users.
AWS Edge Locations cache content close to global end-users, reducing latency for static assets.

Anahtar Kavram

AWS Global Infrastructure components, specifically the distinction between AWS Regions, Availability Zones, and Edge Locations.
Soru 5Soru →

A municipal utility enterprise operates a smart grid analytics platform. The workload fluctuates dramatically and unpredictably based on seasonal weather patterns, leading to periods where on-premises servers run at 95% capacity, followed by weeks of near-zero utilization. To address this, the enterprise wants to migrate to a model where they only pay for resources when they are actively consumed, eliminating the need to pre-allocate hardware. Furthermore, they are mandated to quickly replicate their software environment to support municipal grids across South America and Europe with sub-second response times. Which of the following core benefits of the AWS Cloud directly support the resolution of these operational challenges? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Stop guessing capacity; Go global in minutes

Cevap

The correct answers are the benefits to go global in minutes and to stop guessing capacity.
The correct options are stopping guessing capacity and going global in minutes. Stopping guessing capacity allows the utility enterprise to scale automatically to match variable workloads instead of maintaining idle on-premises hardware. Going global in minutes enables them to rapidly deploy applications to multiple global AWS Regions to reduce latency for municipal partners in South America and Europe.

Adım Adım Çözüm

1
Analyze the first requirement: dealing with dramatic, unpredictable workload fluctuations and eliminating pre-allocated hardware.
Identify that the ability to scale resources automatically to meet demand without upfront capacity planning corresponds to the AWS benefit of stopping guessing capacity.
This matches the operational challenge of weather-induced traffic spikes.
2
Analyze the second requirement: replicating the software environment across South America and Europe with sub-second response times.
Identify that the capability to deploy applications in multiple regions globally with minimal effort corresponds to the AWS benefit of going global in minutes.
This addresses the geographical expansion requirement with low latency.

Anahtar Kavram

Benefits of the AWS Cloud (Stop guessing capacity and Go global in minutes)
Tahmini Süre:2m 0s
Soru 6Soru →

A media streaming company is redesigning its video processing and delivery platform to handle highly fluctuating demand. The platform experiences sudden spikes in traffic during popular video releases and very low traffic during off-peak hours. Which two architectural decisions align with the AWS Cloud design principles of elasticity and services not servers? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configuring Amazon EC2 Auto Scaling to dynamically adjust the number of active virtual servers in response to fluctuating user demand; Utilizing AWS Lambda to transcode short video clips serverlessly without provisioning or managing underlying virtual machines

Cevap

The correct architectural decisions are configuring Amazon EC2 Auto Scaling to dynamically adjust the number of active virtual servers in response to fluctuating user demand, and utilizing AWS Lambda to transcode short video clips serverlessly without provisioning or managing underlying virtual machines.
The correct choices are using Amazon EC2 Auto Scaling to dynamically adjust instance count, which is a direct application of elasticity, and using AWS Lambda to run code serverlessly, which applies the 'services, not servers' principle. Together, they allow the application to scale dynamically based on demand and minimize server management overhead.

Adım Adım Çözüm

1
Analyze the requirements in the scenario.
The platform needs to handle fluctuating traffic efficiently (demand spikes vs. off-peak lows) using elasticity and 'services not servers' principles.
Understanding the core cloud design principles requested is key to identifying correct answers.
2
Evaluate options for the elasticity principle.
Configuring Amazon EC2 Auto Scaling allows the platform to scale out/in automatically to match the demand curve, proving elastic.
Elasticity is the ability to match resource supply to demand dynamically.
3
Evaluate options for the 'services not servers' principle.
Utilizing AWS Lambda allows executing code serverlessly without managing underlying operating systems or virtual machines.
The 'services, not servers' principle advocates using managed and serverless offerings to reduce operational overhead.

Anahtar Kavram

AWS Cloud Design Principles: Elasticity and Services not Servers
Tahmini Süre:1m 30s
Soru 7Soru →

A multi-department enterprise wants to secure its AWS environment by implementing the principle of least privilege and reducing security risks associated with credential management. The administrator must configure access for both developers (human users) and applications running on Amazon EC2 instances (machine identities). Which two methods represent AWS security best practices for managing these identities? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Use AWS IAM Identity Center to federate human identities and centrally manage user access to AWS accounts.; Attach an IAM role to the Amazon EC2 instances to provide applications with temporary security credentials.

Cevap

The correct practices are to use AWS IAM Identity Center for federated human access, and to attach IAM roles to Amazon EC2 instances for secure machine access using temporary credentials.
Centrally managing human user identities with AWS IAM Identity Center and using IAM roles to assign temporary credentials to EC2 instances are the industry-standard AWS best practices. They eliminate the need for permanent access keys, simplify credential rotation, and preserve detailed accountability in audit logs.

Adım Adım Çözüm

1
Analyze the requirements for human identities (developers).
Identify that AWS IAM Identity Center is the modern, recommended approach to centrally manage federated human access instead of creating static IAM users.
Reduces credential management overhead and aligns with the best practice of avoiding long-term IAM user credentials.
2
Analyze the requirements for machine identities (applications running on EC2 instances).
Identify that IAM roles should be attached to EC2 instances to provide temporary, automatically rotated security credentials.
Eliminates the risk of hardcoding or storing long-term API access keys in application configuration files.
3
Evaluate the incorrect choices to ensure they violate AWS security best practices.
Confirm that using the root user, sharing IAM accounts, or storing long-term access keys on EC2 instances are insecure configurations.
These practices increase the attack surface and violate the principles of least privilege and individual accountability.

Anahtar Kavram

AWS IAM best practices for securing human and machine access using federation and temporary credentials.
Soru 8Soru →

A retail corporation is designing a hybrid cloud architecture and needs to secure its data at rest on AWS. The security compliance policy states that the keys used for encrypting financial transactions must be stored on dedicated, single-tenant cryptographic hardware controlled entirely by the customer. However, for standard application logs stored in Amazon S3, the company wants to use a fully managed service where AWS handles the physical hardware management, but the customer retains control over key policies and rotation.

Which two of the following actions should the company take to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Provision AWS CloudHSM to manage the cryptographic keys for the financial transactions.; Use AWS Key Management Service (AWS KMS) with customer managed keys to encrypt the application logs.

Cevap

Provision AWS CloudHSM to manage the cryptographic keys for the financial transactions, and use AWS Key Management Service (AWS KMS) with customer managed keys to encrypt the application logs.
The correct options are provisioning AWS CloudHSM and using AWS KMS with customer managed keys. AWS CloudHSM satisfies the need for dedicated, single-tenant hardware cryptographic keys controlled entirely by the customer. AWS KMS with customer managed keys satisfies the requirement for a fully managed multi-tenant key service where AWS manages the underlying HSM hardware while the customer retains control over key policies and key rotation.

Adım Adım Çözüm

1
Analyze the encryption requirements for the financial transaction keys.
The requirement specifies dedicated, single-tenant cryptographic hardware controlled entirely by the customer, which points directly to AWS CloudHSM.
AWS CloudHSM is a dedicated HSM service that gives the customer exclusive administrative control.
2
Analyze the encryption requirements for the application logs stored in Amazon S3.
The requirement specifies a fully managed service where AWS manages the hardware, but the customer controls key policies and rotation. This aligns with AWS KMS customer managed keys.
AWS KMS customer managed keys are managed by the customer but run on AWS-managed multi-tenant HSM infrastructure.
3
Select the correct combination of AWS services that fulfill both conditions.
The correct options are provisioning AWS CloudHSM and using AWS KMS with customer managed keys.
This combination successfully meets both dedicated and fully-managed encryption needs.

Anahtar Kavram

Selecting appropriate AWS services (AWS KMS vs. AWS CloudHSM) based on multi-tenant versus single-tenant encryption hardware requirements under the shared responsibility model.
Soru 9Soru →

A community theater company plans to migrate its ticketing platform to AWS. The platform receives extremely high volumes of traffic during the first hour of ticket releases for major shows, but experiences negligible traffic during the rest of the month. The theater needs to avoid paying for idle infrastructure and eliminate upfront server procurement costs.

Which two AWS cloud economics concepts or benefits should the theater leverage to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Replacing upfront capital expenses with variable operational expenses; Leveraging elasticity to dynamically adjust resource capacity to match actual demand

Cevap

The theater company should replace upfront capital expenses with variable operational expenses, and leverage elasticity to dynamically adjust resource capacity to match actual demand.
The correct options identify two core AWS cloud economics benefits: shifting upfront capital expenses (CapEx) to variable operational expenses (OpEx), and using elasticity to scale resources dynamically. By trading capital expenses for operational expenses, the theater avoids upfront server purchasing costs. By leveraging elasticity, the ticketing system dynamically provisions resources to handle the sudden burst of ticket buyers and downscales during idle periods to prevent wasted expenditures.

Adım Adım Çözüm

1
Analyze the financial constraint of avoiding upfront server procurement costs.
Trading upfront hardware costs for variable billing maps to the concept of shifting capital expenses (CapEx) to operational expenses (OpEx).
AWS allows businesses to pay as they go rather than buying hardware before using it.
2
Analyze the operational constraint of handling high traffic surges while minimizing idle resource costs.
Scaling resources up and down to match demand maps to the concept of elasticity.
Elasticity prevents paying for unused, running infrastructure during periods of low activity.

Anahtar Kavram

AWS Cloud Economics (CapEx to OpEx shift and Elasticity)
Tahmini Süre:1m 0s
Soru 10Soru →

NovaSprout Organics, a distributor of organic produce, is migrating its operations to the AWS Cloud. The IT department has finalized plans for two distinct workloads:

1. The company's core inventory tracking database will be moved to Amazon RDS to eliminate the administrative burden of backups and patching, while keeping the database engine and application code unchanged.
2. The legacy customer relationship management (CRM) system, which is complex and expensive to maintain on-premises, will be decommissioned in favor of a cloud-based CRM software-as-a-service (SaaS) application.

Which two migration strategies are being utilized by NovaSprout Organics? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Replatforming; Repurchasing

Cevap

Replatforming and Repurchasing are the migration strategies utilized in this scenario.
Replatforming is the correct strategy for the database migration because the company is moving the database to a managed service (Amazon RDS) to reduce administrative overhead while keeping the application code unchanged. Repurchasing is the correct strategy for the CRM system because the company is decommissioning its legacy on-premises system and replacing it with a third-party Software as a Service (SaaS) application.

Adım Adım Çözüm

1
Analyze the database migration: The workload is moved to Amazon RDS (a managed database service) to reduce administrative tasks, but the engine and code remain unchanged.
Identify this as Replatforming (lift-tinker-and-shift), which involves optimizing a workload during migration without rewriting application code.
To classify the first workload's migration strategy.
2
Analyze the CRM system migration: The legacy system is decommissioned and replaced by a third-party CRM Software-as-a-Service (SaaS) product.
Identify this as Repurchasing (drop-and-shop), which involves moving to a different product, typically a SaaS platform.
To classify the second workload's migration strategy.
3
Select the two options that correspond to the identified strategies.
Select the options representing Replatforming and Repurchasing.
To provide the final correct answer keys.

Anahtar Kavram

Identifying cloud migration strategies (the 6 Rs), specifically Replatforming and Repurchasing.
Tahmini Süre:1m 30s
Soru 11Soru →

A government contractor is deploying an application on AWS that handles classified public safety records. Compliance regulations mandate that all data at rest must be encrypted using cryptographic keys stored inside dedicated, single-tenant hardware security modules (HSMs) that are physically and logically isolated. Which option correctly identifies the AWS service that meets this requirement and the customer's responsibility for that service under the AWS Shared Responsibility Model?

Cevabı ve açıklamayı göster

Cevap: AWS CloudHSM; the customer is responsible for managing users, keys, and cryptographic partitions on the dedicated HSM instance.

Cevap

AWS CloudHSM; the customer is responsible for managing users, keys, and cryptographic partitions on the dedicated HSM instance.
AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud. It provides dedicated, single-tenant HSM instances under the customer's direct control. Under the AWS Shared Responsibility Model, AWS manages physical security, hardware provisioning, and network connectivity, while the customer maintains sole control over the cryptographic keys, partitions, and user management.

Adım Adım Çözüm

1
Identify the key residency and tenancy requirement.
The requirements mandate dedicated, single-tenant hardware security modules (HSMs), which points to AWS CloudHSM instead of AWS Key Management Service (AWS KMS) which uses shared, multi-tenant HSMs.
AWS CloudHSM provides dedicated HSM instances, whereas AWS KMS is a multi-tenant service.
2
Determine the shared responsibility model boundary for the chosen service.
For AWS CloudHSM, AWS manages hardware provisioning, physical security, and high availability, while the customer manages HSM partitions, cryptographic users, and key generation.
To satisfy the compliance requirements, the customer must maintain exclusive administrative control over the keys and users on the single-tenant HSM.

Anahtar Kavram

AWS CloudHSM vs AWS KMS and the Shared Responsibility Model for dedicated cryptography.
Tahmini Süre:1m 0s
Soru 12Soru →

A logistics company, RouteLogix, runs a fleet management application that processes vehicle telemetry. The application requires high compute capacity to run route optimization algorithms for 4 hours every morning. During the rest of the day, the system only requires minimal resources to receive and store GPS location pings. The company's management wants to understand the economic impact of migrating this workload from their on-premises data center to AWS. Which of the following describe the financial benefits of this migration? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The company can eliminate cost overhead from idle compute capacity by dynamically scaling resources down when the optimization algorithms are not running.; The company shifts from upfront capital expenditures (CapEx) for physical server procurement to variable operating expenditures (OpEx) based on actual compute usage.

Cevap

The correct options are the statements describing how the company can eliminate cost overhead from idle compute capacity by dynamically scaling resources down, and how the company shifts from upfront capital expenditures (CapEx) to variable operating expenditures (OpEx).
The correct answer identifies the fundamental cloud economic principles of elasticity and shifting CapEx to OpEx. By utilizing elasticity, the company stops paying for idle compute capacity during the 20 hours of low daily utilization. Additionally, paying for AWS resources on-demand shifts upfront capital investments in physical hardware to operational expenses based on actual usage.

Adım Adım Çözüm

1
Analyze the workload requirements of RouteLogix.
The workload has a high requirement for 4 hours and minimal requirements for the remaining 20 hours.
Identifying the variability of the workload helps determine the relevance of elasticity and compute demand matching.
2
Evaluate the financial transition from on-premises to AWS.
On-premises requires buying physical hardware for peak capacity (CapEx), leading to idle resources. AWS allows pay-as-you-go billing (OpEx) and dynamic resource scaling (elasticity).
This matches the target economic principles: shifting CapEx to OpEx and maximizing savings through elasticity.

Anahtar Kavram

Understand concepts of cloud economics (CapEx to OpEx shift and the financial benefit of elasticity)
Tahmini Süre:1m 30s
Soru 13Soru →

A logistics company manages separate AWS accounts for its shipping, tracking, and warehousing divisions. The finance department wants to simplify its payment process and lower overall costs.

Which of the following are benefits of combining these accounts under a single organization using AWS Organizations? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Receiving a combined bill for all member accounts instead of separate invoices for each division; Aggregating resource usage across all linked accounts to meet thresholds for volume tier discounts

Cevap

Consolidating payments into a single combined invoice and aggregating usage to qualify for volume tier discounts are both key benefits of consolidated billing in AWS Organizations.
Consolidated billing under AWS Organizations provides two primary financial benefits: it combines the billing of multiple member accounts into a single management account invoice (simplifying payment processing), and it aggregates the resource usage of all member accounts to help the company qualify for volume pricing discounts (such as tiered rates for storage or data transfer).

Adım Adım Çözüm

1
Analyze the company's requirement to simplify payments and reduce costs across multiple AWS accounts.
The requirement points to features of consolidated billing and AWS Organizations.
AWS Organizations allows linking multiple accounts to centralize billing and administration.
2
Identify which options describe valid benefits of consolidated billing in AWS Organizations.
Receiving one combined invoice simplifies payments, and aggregating usage across accounts helps qualify for volume-based pricing discounts.
These are direct, documented features designed to reduce administrative overhead and cost.
3
Evaluate the distractors to ensure they describe incorrect features or security models.
AWS Organizations does not automatically sync IAM users, root users cannot be deleted, and AWS retains sole responsibility for physical hardware.
Verifying the invalid options ensures that only the two correct answers are selected.

Anahtar Kavram

Unified billing and AWS Organizations benefits, specifically combined invoicing and aggregated volume pricing.
Tahmini Süre:1m 0s
Soru 14Soru →

A medical research company is designing a new cloud architecture on AWS to handle two distinct processing tasks:

1. A batch processing job that performs genome sequencing simulations. This job must run on a custom Linux distribution with a modified kernel and runs continuously for several days.
2. An image processing task that automatically runs whenever a patient uploads a medical scan to an Amazon S3 bucket. The execution time is less than a minute, and uploads occur sporadically throughout the day.

Which two AWS compute services should the company use to support these workloads? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Compute Cloud (Amazon EC2); AWS Lambda

Cevap

Amazon Elastic Compute Cloud (Amazon EC2) and AWS Lambda are the correct selections.
Amazon Elastic Compute Cloud (Amazon EC2) is correct because it provides full administrative access and allows running custom operating system kernels, which is required for the genome sequencing simulations. AWS Lambda is correct because it is a serverless, event-driven service that automatically runs code in response to Amazon S3 uploads and scales dynamically.

Adım Adım Çözüm

1
Analyze the first requirement: genome sequencing simulations running on a custom Linux distribution with a modified kernel for several days.
Identify that this requires full control over the operating system and kernel-level customization, which is uniquely supported by virtual machines.
Managed or serverless services do not allow modification of the underlying operating system kernel.
2
Analyze the second requirement: image processing running sporadically in response to Amazon S3 uploads, executing in under a minute.
Identify that this requires an event-driven, serverless compute service that runs code only when triggered.
A serverless service provides a cost-effective, scalable, and zero-administration solution for short-lived, event-driven tasks.

Anahtar Kavram

Selecting appropriate AWS compute services based on operating system control requirements and execution patterns (continuous vs. event-driven).
Soru 15Soru →

A multinational company uses AWS Organizations with consolidated billing to manage its multiple departmental AWS accounts. The finance department notices that underutilized Amazon EC2 Reserved Instances (RIs) purchased by the marketing team's account are automatically applying discounts to EC2 instances running in the development team's account. To track budgets more accurately, the company wants to ensure that RI discounts are only applied to the specific account that purchased them. Which of the following actions should the AWS Organizations administrator take to achieve this?

Cevabı ve açıklamayı göster

Cevap: Turn off Reserved Instance (RI) discount sharing in the Billing Preferences section of the organization's management account.

Cevap

Turn off Reserved Instance (RI) discount sharing in the Billing Preferences section of the organization's management account.
By default, Reserved Instance (RI) and Savings Plans discounts are shared among all accounts under consolidated billing in AWS Organizations. The administrator can disable RI discount sharing for some or all of the member accounts in the Billing Preferences section of the management account.

Adım Adım Çözüm

1
Identify the default billing behavior of AWS Organizations regarding Reserved Instances.
By default, Reserved Instance (RI) discounts are shared across all accounts within the organization's consolidated billing family.
To understand why the development account is currently receiving the marketing account's RI discounts.
2
Evaluate the console or settings required to modify this default sharing behavior.
The discount sharing preference is a billing administration setting found in the Billing Preferences section of the AWS Billing console.
To determine where the sharing behavior can be configured and disabled.
3
Identify the account with authorization to change billing preferences.
Only the management (payer) account has the authority to disable RI discount sharing for the member accounts.
To isolate the control point for consolidated billing features.

Anahtar Kavram

Disabling Reserved Instance and Savings Plans discount sharing via Billing Preferences in AWS Organizations.
Soru 16Soru →

An enterprise retail organization is preparing to deploy an e-commerce platform on AWS. The design includes running application containers on Amazon Elastic Container Service (Amazon ECS) with AWS Fargate launch type across two AWS Regions, storing structured product catalogs in Amazon Aurora, and storing media assets in Amazon Simple Storage Service (Amazon S3). Before deploying any services or writing code, the cloud financial operations team must estimate the monthly costs for this hypothetical infrastructure.

Which of the following actions should the team perform to model and estimate these projected costs? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Use the AWS Pricing Calculator to input the estimated container count, vCPU/memory requirements, database storage size, and data transfer volumes between regions to generate a monthly cost estimate.; Configure different groups of services and resource estimates in the AWS Pricing Calculator to compare the cost differences of deploying the architecture across multiple AWS Regions.

Cevap

To estimate these projected costs, the team should use the AWS Pricing Calculator to input the estimated resource specifications (such as container count, vCPU/memory, database size, and data transfer volumes) and configure service groups to compare costs across different AWS Regions.
The AWS Pricing Calculator is the primary tool for estimating the cost of AWS services before they are deployed. It allows users to create cost estimates for hypothetical architectures by specifying configurations such as the number of ECS containers, Fargate vCPU/memory requirements, database storage size, and S3 storage classes. It also supports grouping resources to compare costs across different AWS Regions or deployment configurations, helping teams make informed architectural decisions based on projected expenses.

Adım Adım Çözüm

1
Identify the requirements of the scenario, which is estimating the monthly costs of a hypothetical, pre-deployment multi-region application architecture.
The scenario requires a planning and cost estimation tool for future configurations rather than tracking actual historical spending.
Since no resources have been deployed yet, tools that track existing resources cannot be used.
2
Evaluate the capabilities of the AWS Pricing Calculator for the scenario.
The AWS Pricing Calculator can model hypothetical workloads, including Amazon ECS, AWS Fargate, Amazon Aurora, and Amazon S3 across multiple regions, allowing the team to estimate monthly costs and compare different region configurations.
This directly aligns with the need to generate pre-deployment cost projections based on custom resource settings.
3
Differentiate the AWS Pricing Calculator from post-deployment billing and monitoring tools like AWS Cost Explorer and the AWS Cost & Usage Report, and verify economic principles.
Eliminate options suggesting the use of historical monitoring or reporting tools, as well as capital expense planning for physical hardware.
Post-deployment tools require active resources to generate data, and AWS operates on an operating expense (OpEx) model rather than a capital expense (CapEx) hardware purchasing model.

Anahtar Kavram

Estimating pre-deployment costs of hypothetical workloads using the AWS Pricing Calculator.
Tahmini Süre:2m 30s
Soru 17Soru →

A software-as-a-service (SaaS) company manages separate AWS accounts for its development, staging, and production environments. The finance team wants to receive a single monthly invoice for all accounts and benefit from aggregated volume pricing discounts for storage. At the same time, the security team must prevent users in the development accounts from deleting Amazon S3 buckets, even if those users have administrator permissions within their local accounts. Which of the following solutions should the company implement?

Cevabı ve açıklamayı göster

Cevap: AWS Organizations with consolidated billing enabled, and a Service Control Policy applied to the development accounts.

Cevap

AWS Organizations with consolidated billing enabled, and a Service Control Policy applied to the development accounts.
AWS Organizations allows organizations to centrally manage billing and permissions across multiple AWS accounts. Enabling consolidated billing generates a single monthly invoice for the management account and aggregates usage across all member accounts to qualify for volume pricing discounts. Furthermore, Service Control Policies (SCPs) can be applied to organizational units or specific member accounts to restrict maximum permissions—such as preventing S3 bucket deletion—which overrides even administrative permissions within those member accounts.

Adım Adım Çözüm

1
Identify the mechanism for combining multiple AWS accounts into a single invoice and sharing pricing tiers.
AWS Organizations consolidated billing features allow multiple member accounts to be billed under a single management account, automatically aggregating usage to qualify for higher volume discounts (e.g., S3 storage tiers).
This addresses the finance team's requirement for a single invoice and cost optimization.
2
Identify the mechanism for enforcing resource-level restriction policies across member accounts.
Service Control Policies (SCPs) in AWS Organizations can specify maximum permission boundaries for member accounts, including blocking actions like S3 bucket deletion.
This addresses the security team's requirement to restrict actions centrally, even for administrative users in the member accounts.

Anahtar Kavram

Consolidated Billing and AWS Organizations
Tahmini Süre:1m 30s
Soru 18Soru →

A retail organization plans to deploy a third-party firewall appliance as an Amazon Machine Image (AMI) on Amazon EC2. The organization decides to subscribe to the appliance through AWS Marketplace. How are the billing and software maintenance responsibilities structured for this deployment?

Cevabı ve açıklamayı göster

Cevap: Both the software subscription fee and the EC2 instance infrastructure charges are billed together through the organization's AWS account, while the organization remains responsible for configuring and patching the firewall software.

Cevap

Both the software subscription fee and the EC2 instance infrastructure charges are billed together through the organization's AWS account, while the organization remains responsible for configuring and patching the firewall software.
AWS Marketplace consolidates the billing for third-party software subscriptions directly onto the customer's AWS bill alongside their AWS infrastructure usage (such as EC2 instance charges). However, purchasing through AWS Marketplace does not alter the Shared Responsibility Model. Because the software is deployed as an Amazon Machine Image (AMI) on the customer's EC2 instances, the customer is still responsible for configuring, patching, and maintaining the software and the operating system.

Adım Adım Çözüm

1
Analyze the procurement method for the third-party software subscription.
Purchasing through AWS Marketplace aggregates the software subscription charges onto the customer's AWS bill.
This determines how the licensing fee is collected and processed.
2
Identify the infrastructure pricing for the underlying Amazon EC2 instance.
The infrastructure consumption charges for running the EC2 instance are billed to the customer's AWS bill.
This establishes that both software and hardware compute resources are consolidated into one billing stream.
3
Apply the AWS Shared Responsibility Model to the deployed Amazon Machine Image (AMI).
Since the software runs as an AMI within the customer's virtual private cloud (VPC), the customer holds the responsibility for guest operating system patching and software configuration.
This clarifies the maintenance boundary between the cloud provider and the customer.

Anahtar Kavram

AWS Marketplace Billing Integration and the Shared Responsibility Model
Tahmini Süre:1m 0s
Soru 19Soru →

A fitness technology company is launching a new health-tracking application that collects workout data from smartwatches. To handle unpredictable traffic spikes during morning workouts and prevent data loss if a processing server fails, the development team wants to implement core AWS Cloud design principles. Which two of the following architectural strategies represent the correct application of these design principles? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy Amazon Simple Queue Service (Amazon SQS) to buffer incoming metrics and decouple the data ingestion layer from the backend processing servers.; Configure Amazon EC2 Auto Scaling to dynamically adjust the number of instances based on real-time application load.

Cevap

Deploying Amazon Simple Queue Service (Amazon SQS) to buffer incoming metrics and decouple layers, and configuring Amazon EC2 Auto Scaling to dynamically adjust instance count.
Deploying Amazon SQS to buffer incoming metrics decouples the ingestion layer from the processing backend, adhering to the principle of loose coupling and ensuring that data is not lost if backend servers fail. Configuring Amazon EC2 Auto Scaling allows the system to scale out or in dynamically in response to workload demands, adhering to the principle of elasticity.

Adım Adım Çözüm

1
Analyze the business and technical requirements of the fitness tracking application, which include handling unpredictable traffic spikes and preventing data loss during server failures.
Identified the need for elasticity to handle traffic spikes and loose coupling/design for failure to prevent data loss.
Aligns the application scenario with core AWS design principles.
2
Evaluate the architectural options against AWS design principles.
Determined that using Amazon SQS to buffer metrics decouple components (loose coupling), and Amazon EC2 Auto Scaling to dynamically scale compute capacity (elasticity), directly address the requirements.
Identifies the correct cloud architecture practices.

Anahtar Kavram

AWS Cloud design principles such as loose coupling, design for failure, and elasticity enable resilient, scalable, and cost-effective cloud architectures.
Soru 20Soru →

A healthcare startup wants to rapidly test and deploy a new patient wellness application. In the cloud, the company can provision compute resources in minutes to run experiments and launch the app, compared to waiting weeks for physical hardware procurement in an on-premises data center. Which benefit of the AWS Cloud does this scenario represent?

Cevabı ve açıklamayı göster

Cevap: Increase speed and agility

Cevap

The correct answer is the option stating that the scenario represents increasing speed and agility.
The scenario highlights the ability to provision compute resources in minutes to run experiments and launch an application, rather than waiting weeks for physical hardware. This capability directly defines the benefit of increasing speed and agility by making resources instantly available to developers.

Adım Adım Çözüm

1
Identify the key operational capability described in the scenario.
The healthcare company is spinning up compute resources in minutes instead of waiting weeks for physical hardware procurement.
This establishes that the primary benefit highlighted is the speed of resource acquisition and deployment.
2
Map this capability to one of the six benefits of the AWS Cloud.
Reducing resource provisioning time from weeks to minutes aligns directly with the benefit of increasing speed and agility.
Agility in the cloud refers to the speed at which developers can access resources, which accelerates innovation and experimentation.

Anahtar Kavram

Increase speed and agility as a benefit of the AWS Cloud
Tahmini Süre:45s
Sayfa 1 / 74Sonraki