Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 621Soru →

A mobile game studio is launching a new multiplayer game. To support a global player base, the studio needs to deploy their game backend across multiple regions worldwide to reduce latency for international players. Additionally, the studio wants to eliminate the overhead of buying, racking, and cooling physical hardware in their own facilities.

Which of the following AWS Cloud benefits directly align with these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Go global in minutes; Stop spending money running and maintaining data centers

Cevap

The two correct benefits are going global in minutes and stopping spending money running and maintaining data centers.
The correct benefits demonstrated are going global in minutes and stopping spending money running and maintaining data centers. Going global in minutes allows the studio to deploy their game backend across multiple geographic regions to reduce latency. Stopping spending money running and maintaining data centers addresses the studio's desire to avoid buying, racking, and cooling physical servers in their own facilities.

Adım Adım Çözüm

1
Analyze the first requirement: deploying the game backend across multiple regions worldwide to reduce latency.
This maps directly to the AWS benefit of going global in minutes.
AWS infrastructure is globally distributed, enabling rapid deployment close to end users.
2
Analyze the second requirement: eliminating the overhead of buying, racking, and cooling physical hardware.
This maps directly to the AWS benefit of stopping spending money running and maintaining data centers.
By shifting infrastructure to AWS, businesses offload physical data center maintenance.

Anahtar Kavram

Benefits of AWS Cloud
Tahmini Süre:1m 30s
Soru 622Soru →

Which of the following AWS Identity and Access Management (IAM) components is specifically designed to provide temporary security credentials for AWS services or federated users?

Cevabı ve açıklamayı göster

Cevap: IAM role

Cevap

IAM role
The correct answer is the option specifying an IAM role. An IAM role is an identity that you can create in your account that has specific permissions. It is not associated with a specific user or group, and when assumed, AWS Security Token Service (STS) dynamically generates temporary security credentials that expire after a set duration.

Adım Adım Çözüm

1
Identify the primary requirement in the question stem, which is the need for temporary security credentials for AWS services or federated users.
Temporary security credentials are required.
This narrows down the potential IAM entities to those that do not use permanent or long-term keys.
2
Evaluate the credentials associated with each IAM entity: IAM users, groups, roles, and the root user.
IAM users, groups, and root users use or manage long-term credentials, whereas IAM roles use security tokens for temporary access.
To choose the correct identity type, we must distinguish between permanent and temporary credential mechanisms in AWS.
3
Select the entity that can be assumed to obtain temporary credentials.
IAM role is selected as the correct answer.
An IAM role provides temporary security credentials when assumed by a service or external identity.

Anahtar Kavram

Temporary security credentials via IAM Roles
Tahmini Süre:45s
Soru 623Soru →

A software developer needs to write a custom microservice that reads and writes messages in an Amazon Simple Queue Service (Amazon SQS) queue. Concurrently, a financial administrator needs to perform a one-time visual audit of the company's AWS spending patterns over the last quarter and configure an email alert for when estimated charges exceed a set threshold. Which of the following AWS interaction methods represent the most appropriate choices for these two scenarios? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Use the AWS Software Development Kit (SDK) to programmatically interact with the SQS queue from within the microservice code; Use the AWS Management Console to visually review quarterly spending graphs and manually configure an AWS Budgets alert

Cevap

The correct methods are using the AWS Software Development Kit (SDK) to programmatically interact with the SQS queue within the application code, and using the AWS Management Console to visually review spending graphs and configure the budget alert.
The AWS Software Development Kit (SDK) is the appropriate tool for programmatic service integration within custom application code. The AWS Management Console is the correct tool for manual, visual tasks such as reviewing Cost Explorer graphs and configuring budget alerts.

Adım Adım Çözüm

1
Evaluate the requirement for the microservice application to programmatically send and receive messages from the SQS queue.
Identify that integrating AWS service actions directly into application runtime logic requires the AWS Software Development Kit (SDK).
The SDK provides library interfaces in various programming languages, making it the standard tool for code-level AWS service interactions.
2
Evaluate the requirement for the financial administrator to conduct a manual visual audit and configure a budget alarm.
Identify that visual dashboard inspection and interactive manual setup are best suited for the AWS Management Console.
The AWS Management Console provides the web UI necessary to navigate Cost Explorer graphs and set budget thresholds without writing code.
3
Review the remaining options to ensure they represent misapplications of AWS interaction tools.
Confirm that using the Console for scripting automation, the SDK for manual dashboard audits, and CloudFormation for application code logic are incorrect patterns.
These distractors incorrectly mix manual tools with automation needs, and infrastructure provisioning tools with application execution.

Anahtar Kavram

Selecting the appropriate AWS interaction tool (Console, CLI, SDK, CloudFormation) based on the operational use case (manual, scripting, programmatic, or infrastructure provisioning).
Tahmini Süre:2m 0s
Soru 624Soru →

A software-as-a-service (SaaS) company is designing a backend component to process user-uploaded PDF documents. The processing job runs a proprietary executable that requires a custom Linux library. Each document takes between 2 to 5 seconds to process. The workload is highly unpredictable; the platform receives around 50 uploads scattered throughout a typical day, but can experience brief spikes of up to 1,000 uploads. The company requires a serverless compute option with zero idle costs and sub-second scaling responsiveness to minimize user wait times. Which AWS compute service should the company select to host this component?

Cevabı ve açıklamayı göster

Cevap: AWS Lambda with a custom container image deployment

Cevap

AWS Lambda with a custom container image deployment
The correct answer is the option specifying AWS Lambda with a custom container image. This service matches all requirements: it supports packaging custom binaries and libraries within container images, scales instantly to handle unpredictable spikes in traffic, and charges only when the function is executing, ensuring zero cost when idle.

Adım Adım Çözüm

1
Analyze the application runtime and dependency requirements.
The application requires a custom Linux library and a proprietary executable, which can be packaged inside a Docker container image.
This requirement rules out standard zip-based runtimes but is supported by both AWS Lambda (via container images) and container orchestration services like Amazon ECS.
2
Evaluate the scaling and latency requirements.
The workload must scale to zero during inactivity and scale up sub-second during sudden bursts of up to 1,000 concurrent requests.
AWS Lambda is designed for rapid, event-driven scaling with sub-second execution startup. Running container tasks on AWS Fargate on-demand via the ECS RunTask API suffers from initialization latency (often 30+ seconds), which does not meet the sub-second response criteria.
3
Assess the cost constraints and idle state billing.
The solution must incur zero idle costs when there are no document uploads.
AWS Lambda bills strictly for the milliseconds of compute time consumed during executions, resulting in zero costs when idle. In contrast, Amazon ECS with AWS Fargate (as a service), Amazon EC2, and Amazon Lightsail all charge for running capacity regardless of whether active jobs are processing.

Anahtar Kavram

Selecting appropriate AWS compute services based on runtime dependencies, scaling behavior, startup latency, and billing models.
Tahmini Süre:3m 0s
Soru 625Soru →

A company wants to automate its AWS resource management tasks using command-line shell scripts, and also wants to integrate AWS service operations directly into a custom Java application. Which of the following methods should the company use to meet these requirements? (Select TWO).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Command Line Interface (CLI); AWS Software Development Kits (SDKs)

Cevap

AWS Command Line Interface (CLI) and AWS Software Development Kits (SDKs)
The AWS Command Line Interface (CLI) fulfills the scripting requirement by enabling command-line management of resources. The AWS Software Development Kits (SDKs) fulfill the application integration requirement by providing language-specific libraries that allow custom code to communicate directly with AWS APIs.

Adım Adım Çözüm

1
Determine the tool required for scripting and executing command-line management tasks.
The AWS Command Line Interface (CLI) allows users to manage resources directly from the command line and write automated shell scripts.
The AWS CLI is designed for direct shell-based interaction and automation of AWS APIs.
2
Determine the tool required to build custom application integration in a specific programming language like Java.
AWS Software Development Kits (SDKs) provide native software libraries for integration.
SDKs provide development dependencies and interfaces to write custom software interacting with AWS.

Anahtar Kavram

AWS offers various mechanisms for interacting with its APIs: the AWS Management Console (a graphical web interface), the AWS CLI (a command-line shell script interface), and AWS SDKs (programming language-specific libraries).
Soru 626Soru →

A financial services organization is migrating a containerized application to AWS. The application requires custom kernel-level configurations and third-party security agents to be installed directly on the underlying host operating system for compliance auditing. The team wants to utilize container orchestration to manage the application but must retain full root access to the virtualization host. Which AWS compute option is the most appropriate to satisfy these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type

Cevap

Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type
The correct answer is the option indicating Amazon ECS with the Amazon EC2 launch type. This deployment model allows the customer to orchestrate containerized applications while retaining full administrative control, root access, and configuration capability over the underlying EC2 instances. This is necessary for installing custom security agents at the OS level and making kernel-level modifications.

Adım Adım Çözüm

1
Analyze the business and technical requirements of the workload.
The application is containerized, requires container orchestration, and must allow custom kernel-level OS modifications and host security agent installation.
This establishes the constraints: we need container management but must retain full control over the underlying operating system and virtualization host.
2
Evaluate AWS Fargate against the constraints.
Fargate is serverless container execution. Because AWS manages the underlying EC2 instances and OS, root access is unavailable.
This rules out AWS Fargate launch type.
3
Evaluate AWS Lambda and Amazon Lightsail against the constraints.
AWS Lambda abstracts all server management and has execution limits, while Amazon Lightsail container service does not allow host-level operating system configurations.
This rules out other serverless or simplified compute services.
4
Evaluate Amazon ECS with the Amazon EC2 launch type.
ECS with the EC2 launch type gives the user full administrative control over the EC2 instances in the ECS cluster, including operating system and kernel settings.
This option satisfies all container orchestration and compliance requirements.

Anahtar Kavram

Shared Responsibility Model application in managed vs. unmanaged AWS compute environments.
Tahmini Süre:1m 30s
Soru 627Soru →

Lumina Learning plans to migrate its on-premises student information portal to the AWS Cloud. The database currently runs on a self-managed Oracle database server. To minimize licensing fees and operational overhead, the company decides to migrate the database to Amazon Aurora PostgreSQL while keeping the application server's core code unchanged. Which migration strategy is Lumina Learning using?

Cevabı ve açıklamayı göster

Cevap: Replatforming

Cevap

Replatforming
The correct answer is Replatforming. Replatforming, also known as 'lift, tinker, and shift', involves making minor optimizations to take advantage of cloud features (such as moving to a managed database like Amazon Aurora) without changing the core application architecture.

Adım Adım Çözüm

1
Analyze the migration scenario details
The scenario describes migrating a database from an on-premises self-managed Oracle database to Amazon Aurora PostgreSQL (a managed cloud database service) without changing the core application code.
This helps identify if any modifications or platform optimizations are being performed during the migration.
2
Evaluate the defined migration strategies (6 Rs)
Migrating to a managed service or changing the database engine to optimize operations without rewriting the application code aligns with the Replatforming strategy.
Replatforming is characterized by making small adjustments to take advantage of cloud benefits without modifying the core architecture of the application.

Anahtar Kavram

Cloud migration strategies (6 Rs)
Tahmini Süre:1m 0s
Soru 628Soru →

A retail company is migrating its microservices-based application to AWS. Each microservice is packaged as a Docker container. The company wants to run these containers without provisioning, configuring, or scaling the underlying virtual servers, and wishes to pay only for the vCPU and memory resources requested by the running containers. Which AWS compute option or launch type best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS Fargate

Cevap

AWS Fargate
The correct option is the serverless container compute engine that enables running containers without managing underlying EC2 instances. It abstracts the server layer and bills dynamically based on the container configuration.

Adım Adım Çözüm

1
Identify the key constraints in the scenario: running Docker-packaged microservices, eliminating the need to manage virtual servers (serverless), and paying only for the allocated CPU/memory resources.
The workload requires a serverless container environment.
This rules out traditional instance-based compute models like EC2 and Lightsail, which require virtual machine management.
2
Evaluate the remaining serverless options against the container orchestration requirement.
AWS Fargate is identified as the correct service because it runs containers serverlessly, whereas AWS Lambda is meant for event-driven functions.
AWS Fargate removes the operational overhead of scaling and provisioning instances while natively supporting containerized applications.

Anahtar Kavram

Serverless container compute on AWS
Soru 629Soru →

A new hospitality booking startup wants to launch an online reservation platform. The team wants to ensure the platform can automatically scale to handle seasonal spikes in user traffic without overprovisioning hardware. Additionally, the startup wants to focus its resources on developing customer-facing features rather than managing physical server racks and power supplies. Which of the following are benefits of the AWS Cloud that directly align with the startup's goals? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Stop guessing capacity; Stop spending money running and maintaining data centers

Cevap

The correct answers are the options stating 'Stop guessing capacity' and 'Stop spending money running and maintaining data centers'.
The option stating 'Stop guessing capacity' represents the benefit of dynamic scaling (elasticity) to handle peak traffic without overprovisioning. The option stating 'Stop spending money running and maintaining data centers' represents the benefit of allowing companies to focus on customer-facing features instead of managing physical infrastructure like server racks and power supplies.

Adım Adım Çözüm

1
Analyze the startup's requirements: automatically scaling to handle seasonal spikes and focusing resources on developing customer-facing features instead of managing physical servers.
Identified need for dynamic capacity management and elimination of physical data center management.
To map the business needs to the corresponding AWS Cloud benefits.
2
Evaluate each option against the six AWS Cloud benefits.
'Stop guessing capacity' matches the scaling requirement, and 'Stop spending money running and maintaining data centers' matches the infrastructure management requirement.
To select the two correct AWS Cloud benefits that directly address the scenario.

Anahtar Kavram

The six benefits of the AWS Cloud
Tahmini Süre:45s
Soru 630Soru →

A financial institution is deploying a payment gateway on AWS. The institution's compliance policy dictates that all customer transactions must be encrypted at rest using single-tenant cryptographic hardware under the institution's exclusive control. Additionally, all transactional data must be encrypted in transit across all application tiers.

Under the AWS Shared Responsibility Model, which of the following are responsibilities of the customer to meet these security requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Generating and managing the cryptographic keys and user accounts within an AWS CloudHSM instance; Configuring SSL/TLS parameters to secure data in transit between application layers

Cevap

Generating and managing the cryptographic keys and user accounts within an AWS CloudHSM instance, and configuring SSL/TLS parameters to secure data in transit between application layers.
Generating and managing keys inside AWS CloudHSM is a customer responsibility because CloudHSM provides dedicated cryptographic hardware where the customer has sole control over keys and users. Configuring SSL/TLS parameters for data in transit is also a customer responsibility because it is configured at the application and operating system level, which falls under customer control in the AWS Shared Responsibility Model.

Adım Adım Çözüm

1
Identify key management requirements.
The scenario requires dedicated, single-tenant cryptographic hardware under exclusive control. This points to AWS CloudHSM.
AWS CloudHSM provides dedicated, single-tenant hardware security modules where the customer manages the keys and users, unlike AWS KMS which is multi-tenant by default.
2
Identify data in transit requirements.
Securing data in transit requires SSL/TLS configuration between application layers.
Encrypting data in transit is handled by configuring secure communication protocols (like SSL/TLS) at the operating system or application tier, which are managed by the customer.
3
Differentiate customer responsibilities from AWS responsibilities.
AWS handles physical security, hardware lifecycle, and hypervisor security, while the customer handles data configuration, encryption settings, and key management inside their instances.
Under the Shared Responsibility Model, AWS is responsible for security 'of' the cloud (physical data centers, hardware infrastructure), and the customer is responsible for security 'in' the cloud (data encryption, network traffic protection).

Anahtar Kavram

Under the AWS Shared Responsibility Model, the customer is responsible for configuring encryption in transit (SSL/TLS) and managing their cryptographic keys and user accounts within single-tenant hardware like AWS CloudHSM, while AWS handles physical infrastructure and hardware maintenance.
Tahmini Süre:2m 0s
Soru 631Soru →

A startup is configuring access permissions for a newly deployed multi-tier application. An Amazon EC2 instance needs to retrieve configuration files from an Amazon S3 bucket, while an external systems administrator requires temporary access to troubleshoot EC2 configurations. Which two of the following options represent AWS-recommended practices for securing these access requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Attach an IAM role with S3 read-only permissions to the EC2 instance to grant the application temporary access credentials.; Configure an IAM role with EC2 administrative permissions for the external administrator to assume for a limited duration.

Cevap

The correct practices are to attach an IAM role with S3 read-only permissions to the EC2 instance and to configure an IAM role with EC2 administrative permissions for the external administrator to assume for a limited duration.
Attaching an IAM role with S3 permissions to the EC2 instance ensures the application dynamically acquires temporary credentials, avoiding hardcoded secrets. Additionally, setting up an IAM role with EC2 administrative permissions that the external administrator can assume ensures they only have administrative access for a limited, controlled duration.

Adım Adım Çözüm

1
Analyze the access requirement for the EC2 instance.
The application running on the instance requires access to S3. AWS recommends using IAM roles to delegate temporary credentials to applications instead of using long-term access keys.
This secures EC2-to-S3 access without exposing long-term secrets.
2
Analyze the access requirement for the external systems administrator.
The administrator only needs access temporarily. AWS recommends using assume-role configurations to grant temporary credentials for third parties or administrative tasks.
This ensures the administrative permissions expire after a set time, reducing the attack surface.
3
Evaluate the distractors against AWS best practices and the Shared Responsibility Model.
Using the root account, using hardcoded IAM user access keys, and expecting AWS to manage OS-level settings all violate AWS practices.
This confirms the two chosen answers are the only correct and secure solutions.

Anahtar Kavram

Securing applications and users using IAM roles to provide temporary credentials and adhering to the Shared Responsibility Model.
Tahmini Süre:1m 30s
Soru 632Soru →

An education technology company is preparing for an independent audit to verify its compliance with international security standards. The compliance team needs to obtain official documentation regarding the security of the AWS physical infrastructure and understand which compliance tasks remain the responsibility of the company. Which of the following actions should the company take to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Download the AWS ISO 27001 certification directly from AWS Artifact; Configure and document the security settings of guest operating systems running on Amazon EC2 instances

Cevap

The company should download the AWS ISO 27001 certification directly from AWS Artifact and configure and document the security settings of guest operating systems running on Amazon EC2 instances.
The correct answers identify downloading the compliance documents from AWS Artifact and managing guest operating system security as customer responsibilities. Under the Shared Responsibility Model, AWS maintains compliance and security audits of the physical infrastructure and virtualization layer, which customers can verify by downloading reports from AWS Artifact. Meanwhile, customers are fully responsible for the compliance, security configurations, and updates of the operating systems they run on their EC2 instances.

Adım Adım Çözüm

1
Identify where to retrieve AWS's third-party compliance reports.
AWS Artifact is recognized as the correct portal for downloading compliance reports like ISO certifications and SOC reports.
AWS provides on-demand access to its compliance documentation to help customers verify AWS infrastructure security.
2
Determine the customer's responsibilities for compliance under the Shared Responsibility Model.
The customer is responsible for the configuration, maintenance, and security of guest operating systems running on EC2.
AWS manages security of the cloud (infrastructure, physical hosts), whereas customers manage security in the cloud (guest OS, applications, data).

Anahtar Kavram

AWS Compliance and the Shared Responsibility Model
Soru 633Soru →

A company wants to grant a team of new developers access to manage AWS resources. All developers in the team require the same permissions. Which of the following actions align with AWS Identity and Access Management (IAM) security best practices to accomplish this? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create an IAM group with the required permissions attached, and add individual developer user accounts to this group.; Enable multi-factor authentication (MFA) on each individual developer's IAM user account.

Cevap

Creating an IAM group with the required permissions attached, adding developer user accounts to this group, and enabling multi-factor authentication (MFA) on each developer's IAM user account.
Configuring permissions using IAM groups ensures administrative efficiency and uniform policy application. Securing individual accounts with multi-factor authentication (MFA) adds essential protection to human access identities.

Adım Adım Çözüm

1
Determine the best practice for applying identical permissions to multiple users.
Utilize an IAM group to consolidate and manage permissions for the entire team in one place.
This prevents configuration drift and simplifies permission management.
2
Determine the best practice for protecting individual credentials.
Apply Multi-Factor Authentication (MFA) to all individual accounts.
MFA provides additional protection if a user's password is stolen or guessed.

Anahtar Kavram

Foundational IAM Best Practices (Groups and MFA)
Soru 634Soru →

An online education platform stores student grades and profile details on AWS. To comply with privacy standards, the platform must ensure that data is encrypted both at rest and in transit. Under the AWS shared responsibility model, which of the following actions are responsibilities of the customer? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configuring server-side encryption on Amazon S3 buckets used to store student files; Managing SSL/TLS certificates and traffic encryption for application servers running on Amazon EC2

Cevap

The correct responsibilities of the customer are configuring server-side encryption on Amazon S3 buckets and managing SSL/TLS certificates and traffic encryption on Amazon EC2 instances.
Under the AWS shared responsibility model, the customer is responsible for 'security in the cloud,' which includes managing data encryption options (such as enabling server-side encryption on Amazon S3) and configuring network traffic protection at the OS/application layer (such as SSL/TLS configuration on EC2 instances).

Adım Adım Çözüm

1
Identify the requirements of the scenario.
The platform needs to encrypt student data at rest and in transit.
To determine which actions are performed by the customer vs AWS under the shared responsibility model.
2
Apply the AWS Shared Responsibility Model to data encryption.
The customer is responsible for configuring encryption on services they use (like S3) and managing traffic encryption (like SSL/TLS) on their instances, while AWS is responsible for physical security and infrastructure maintenance.
To select the two correct customer-managed security actions.

Anahtar Kavram

AWS Shared Responsibility Model for Data Protection and Encryption
Soru 635Soru →

A cloud administrator is designing the network security architecture for a multi-tier application. The administrator needs to implement a firewall barrier at the boundary of a subnet that evaluates traffic flow in both directions independently (stateless). Which AWS resource must be used to achieve this?

Cevabı ve açıklamayı göster

Cevap: Network Access Control Lists (Network ACLs)

Cevap

Network Access Control Lists (Network ACLs)
Network Access Control Lists (Network ACLs) are the correct answer because they serve as a stateless firewall at the subnet level, inspecting traffic entering and exiting the subnet and requiring explicit rules for both directions.

Adım Adım Çözüm

1
Identify the required network boundary for the security barrier.
The requirement specifies a barrier at the boundary of a subnet rather than at the individual instance level.
This narrows the choices down to subnet-level security features like Network ACLs.
2
Identify the evaluation state behavior required by the scenario.
The firewall must be stateless (evaluating traffic flow in both directions independently).
Network ACLs are stateless, meaning that outbound return traffic must be explicitly allowed, whereas Security Groups are stateful and automatically allow return traffic.

Anahtar Kavram

Stateful vs. Stateless Network Firewalls at Subnet and Instance Levels
Soru 636Soru →

A pharmaceutical research firm is deploying an application that uses Amazon DynamoDB to store proprietary drug discovery data. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

Cevabı ve açıklamayı göster

Cevap: Defining fine-grained access control policies using IAM to restrict access to the database tables.

Cevap

Defining fine-grained access control policies using IAM to restrict access to the database tables.
For fully managed services like Amazon DynamoDB, the customer is responsible for configuring access permissions, such as writing IAM policies to define who can access the DynamoDB tables. This falls under security 'in' the cloud.

Adım Adım Çözüm

1
Analyze the AWS service model for Amazon DynamoDB.
Amazon DynamoDB is a fully managed database service (NoSQL), meaning AWS handles the underlying infrastructure, operating system, and database software.
Understanding the service type (IaaS vs. PaaS vs. Managed) determines the boundary of the Shared Responsibility Model.
2
Differentiate between security 'of' the cloud and security 'in' the cloud for DynamoDB.
AWS is responsible for physical security, operating system patching, and hardware management. The customer is responsible for data classification, encryption settings, and client-side access control.
This distinction helps identify customer-managed tasks vs. AWS-managed tasks.
3
Evaluate the choices to find the customer's responsibility.
Defining access control policies via IAM is a customer task, while OS patching and physical security are AWS tasks. Directly configuring NACLs on managed database instances is a misunderstanding since DynamoDB does not expose instances to the customer.
To select the correct option representing the customer's operational boundary.

Anahtar Kavram

Under the AWS Shared Responsibility Model, for managed services like DynamoDB, AWS manages the physical infrastructure, operating system, and database software, while the customer is responsible for data protection, access configuration (IAM), and endpoint security.
Tahmini Süre:1m 0s
Soru 637Soru →

An educational technology (EdTech) platform experiences extreme traffic fluctuations, with massive user login spikes during midterms and finals, but minimal activity during summer breaks. Historically, the company had to pre-purchase and configure physical servers to handle peak demand, resulting in underutilized infrastructure for most of the year. By moving to AWS, the platform can automatically scale its resources up and down to match user demand dynamically. Which benefit of the AWS Cloud does this business case describe?

Cevabı ve açıklamayı göster

Cevap: Stop guessing capacity

Cevap

Stop guessing capacity
The scenario describes a classic use case for 'Stop guessing capacity'. Instead of paying for idle physical servers to support peak loads (such as exam weeks), the platform uses the AWS Cloud to automatically scale resources to match actual demand, ensuring they only pay for what they use and avoid capacity constraints.

Adım Adım Çözüm

1
Analyze the business scenario described in the stem.
The EdTech platform faces highly fluctuating demand (peaks during exams, valleys during summers) and previously had to buy physical hardware based on peak demand, leading to idle resources.
Understanding the core problem of capacity management and resource underutilization is necessary to map it to the correct AWS Cloud benefit.
2
Evaluate the 6 benefits of the AWS Cloud against the scenario.
The ability to dynamically scale resources to match actual demand in real-time prevents the need to guess and pre-provision for maximum capacity.
Identifying the benefit that maps to dynamic resource adjustment resolves the underutilization and over-provisioning problems.

Anahtar Kavram

Stop guessing capacity
Tahmini Süre:1m 0s
Soru 638Soru →

A systems administrator needs to deploy a workload on a virtual machine in AWS. The administrator requires full administrative control over the guest operating system, including the ability to apply custom kernel patches and configure directory services. Which AWS compute service should the administrator use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Compute Cloud (Amazon EC2)

Cevap

Amazon Elastic Compute Cloud (Amazon EC2)
Amazon Elastic Compute Cloud (Amazon EC2) is an Infrastructure as a Service (IaaS) offering that provides virtual machines (instances) in the cloud. It gives the customer full root or administrator access to the guest operating system, allowing them to manage software installations, configuration settings, and OS patching.

Adım Adım Çözüm

1
Analyze the requirements: the customer needs a virtual machine with full administrative access (root/administrator control) to configure and patch the guest operating system.
Identify that the solution must be an Infrastructure as a Service (IaaS) offering where the customer manages the operating system layer.
Serverless or platform-based services restrict operating system access to simplify management for the customer.
2
Evaluate the AWS compute services against these requirements.
Amazon EC2 provides complete control over the guest OS, whereas serverless options like AWS Lambda and AWS Fargate manage the OS entirely on behalf of the customer, and AWS Elastic Beanstalk is a deployment platform.
Selecting Amazon EC2 matches the requirement for full operating system administrative access.

Anahtar Kavram

Understanding the level of control and shared responsibility model associated with different AWS compute services, specifically the administrative control offered by Amazon EC2.
Soru 639Soru →

A financial technology organization is designing a disaster recovery strategy. The cloud engineering team must meet two primary requirements:
1. Define and deploy identical multi-tier environments across multiple AWS Regions automatically using templated configurations.
2. Build a custom internal monitoring portal that programmatically queries the deployment state and resource metadata of these environments.

Which combination of AWS deployment and operating methods will satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS CloudFormation to model and provision the infrastructure in a safe, repeatable manner across regions using configuration templates; AWS Software Development Kits (SDKs) to programmatically query resource metadata and stack states from within the monitoring portal's custom codebase

Cevap

AWS CloudFormation to model and provision the infrastructure in a safe, repeatable manner across regions using configuration templates; and AWS Software Development Kits (SDKs) to programmatically query resource metadata and stack states from within the monitoring portal's custom codebase.
The combination of AWS CloudFormation and AWS SDKs is correct because CloudFormation handles the template-based automation of environments across regions, while SDKs provide the library interface to programmatically request resource status from the portal's code.

Adım Adım Çözüm

1
Analyze the first requirement: defining and deploying identical environments across multiple regions automatically using templated configurations.
Identify AWS CloudFormation as the primary Infrastructure as Code service designed to template and repeatably deploy resources.
CloudFormation templates guarantee consistency and automation across regions.
2
Analyze the second requirement: programmatically querying deployment status and resource metadata from a custom codebase.
Identify AWS SDKs as the correct tool because they provide APIs for specific programming languages to interact with AWS resources.
SDKs are required to enable programmatic queries from inside a custom monitoring portal's code.
3
Evaluate the option for AWS Elastic Beanstalk.
Eliminate this option as it focuses on application hosting (PaaS) and is not intended for writing raw infrastructure templates.
CloudFormation, not Beanstalk, is the tool of choice for raw template-based provisioning.
4
Evaluate the option for the AWS Management Console.
Eliminate this option as the console is a graphical user interface and cannot execute programmatic scripts for external application integrations.
Programmatic access requires the SDK or CLI, not the visual console.
5
Evaluate the option for Amazon CloudWatch logs.
Eliminate this option because auditing API calls is managed by AWS CloudTrail.
CloudWatch handles logs and metrics, while CloudTrail tracks API activity.

Anahtar Kavram

Selecting appropriate AWS interaction tools (Console, CLI, SDK, CloudFormation) based on the automation, scripting, or manual requirements of a scenario.
Soru 640Soru →

ApexMart, a retail company, is planning to migrate its legacy on-premises web server to AWS EC2 instances with no changes to the application code or configuration. The company also wants to transition its IT budget from upfront hardware investments to a pay-as-you-go model. Which two of the following statements correctly describe the migration strategy used for the web server and the financial benefit of this migration?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The migration strategy used is Rehosting (lift-and-shift).; The financial benefit is shifting from capital expenses (CapEx) to operating expenses (OpEx).

Cevap

The migration strategy used is Rehosting (lift-and-shift), and the financial benefit is shifting from capital expenses (CapEx) to operating expenses (OpEx).
The correct options state that the strategy is Rehosting and the financial benefit is shifting from CapEx to OpEx. Rehosting represents migrating workloads with zero modifications (lift-and-shift). Shifting from upfront hardware purchasing to pay-as-you-go models replaces capital expenditures (CapEx) with operating expenditures (OpEx).

Adım Adım Çözüm

1
Analyze the migration scenario for the web server.
The web server is being moved to AWS EC2 instances with zero changes to the application code or configuration. This represents a 'lift-and-shift' approach, which corresponds to the Rehosting migration strategy.
To identify the correct migration strategy from the 6 Rs.
2
Analyze the financial goals of the company.
The company wants to move from upfront hardware investments (Capital Expenditure, or CapEx) to a pay-as-you-go model (Operating Expenditure, or OpEx). This represents a shift from CapEx to OpEx.
To identify the correct financial benefit of cloud adoption.

Anahtar Kavram

Identifying AWS migration strategies (specifically Rehosting) and understanding the shift from CapEx to OpEx in cloud economics.
ÖncekiSayfa 32 / 74Sonraki
Tüm alıştırma soruları — AWS Certified Cloud Practitioner | Examkin