Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 641Soru →

When configuring security controls within an Amazon Virtual Private Cloud (VPC), understanding the behavior of instance-level and subnet-level firewalls is critical. Which two of the following statements correctly describe the operational characteristics of these network security resources?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Instance-level firewalls (Security Groups) are stateful, meaning that return traffic is automatically allowed regardless of outbound rules.; Subnet-level firewalls (Network Access Control Lists) are stateless, meaning that return traffic must be explicitly allowed by an outbound rule.

Cevap

The correct statements are that Security Groups (instance-level firewalls) are stateful and Network ACLs (subnet-level firewalls) are stateless.
Instance-level firewalls (Security Groups) are stateful, which means they automatically track connection state and allow return traffic without needing an explicit outbound rule. In contrast, subnet-level firewalls (Network ACLs) are stateless, which means they do not track connection state and require explicit rules for both inbound and outbound traffic.

Adım Adım Çözüm

1
Evaluate the behavior of instance-level firewalls (Security Groups).
Security Groups operate at the instance level and are stateful, automatically allowing return traffic.
This establishes that inbound-to-outbound or outbound-to-inbound return traffic does not require symmetric rule configurations.
2
Evaluate the behavior of subnet-level firewalls (Network ACLs).
Network ACLs operate at the subnet level and are stateless, evaluating traffic in each direction independently.
This establishes that return traffic must be explicitly allowed by matching rules in the opposite direction.

Anahtar Kavram

Stateful vs. Stateless Firewalls in AWS VPC (Security Groups and Network ACLs)
Soru 642Soru →

An online educational platform hosts its application on Amazon EC2 instances. The DevOps team wants to automatically scan these virtual servers for software packages with known vulnerabilities and identify any unintended public network exposure. Which AWS service should the platform use to perform this automated vulnerability assessment?

Cevabı ve açıklamayı göster

Cevap: Amazon Inspector

Cevap

Amazon Inspector
The correct answer is Amazon Inspector. Amazon Inspector is an automated vulnerability management service that scans EC2 instances, container images in Amazon ECR, and AWS Lambda functions for software vulnerabilities and unintended network path exposure.

Adım Adım Çözüm

1
Identify the core security requirement in the scenario.
The platform needs to scan host operating systems on EC2 instances for software vulnerabilities and network exposure.
This clarifies that the solution must perform vulnerability assessment and path analysis rather than audit logging or threat detection.
2
Evaluate the capabilities of the available security services.
Amazon Inspector is the specialized AWS service that continuously and automatically performs host-level vulnerability scans on EC2 instances and ECR container images.
Matching the requirements to the specific capabilities of Amazon Inspector yields the correct solution.

Anahtar Kavram

Amazon Inspector is the primary AWS service used for automated vulnerability management and scanning of EC2 instances, container images, and Lambda functions.
Soru 643Soru →

A financial institution is migrating its payment transaction database to AWS. Due to strict regulatory compliance requirements, the institution must manage and control its cryptographic keys using dedicated, single-tenant hardware security modules (HSMs) directly within their Virtual Private Cloud (VPC). Which AWS service should the institution use to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: AWS CloudHSM

Cevap

AWS CloudHSM
AWS CloudHSM is the correct service because it provides dedicated, single-tenant hardware security modules (HSMs) running in the customer's Virtual Private Cloud (VPC). This allows the customer to have complete control over key management, encryption, and cryptographic operations, satisfying the strict regulatory compliance requirement.

Adım Adım Çözüm

1
Analyze the customer's encryption and key storage requirements.
The customer requires dedicated, single-tenant hardware security modules (HSMs) that they manage directly.
This is a regulatory compliance constraint that rules out shared or multi-tenant managed key services.
2
Identify the AWS service that provides dedicated HSMs.
AWS CloudHSM is the service that provisions dedicated, single-tenant HSM instances inside the customer's VPC.
AWS CloudHSM gives the customer exclusive control over key storage hardware, satisfying the compliance requirement.

Anahtar Kavram

Dedicated key management using AWS CloudHSM versus multi-tenant key management using AWS KMS.
Soru 644Soru →

An online fitness company wants to launch a new virtual training application. Instead of spending months procuring and setting up physical servers, they deploy their application on AWS immediately, allowing them to test and roll out new features to users within days. Additionally, they only pay for the compute resources they consume while class sessions are active. Which two benefits of the AWS Cloud are demonstrated by this scenario?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Trade capital expense for variable expense; Increase speed and agility

Cevap

Trading capital expense for variable expense and increasing speed and agility are the correct benefits.
The correct options are the benefits of trading capital expense for variable expense and increasing speed and agility. By paying only for active compute resources during classes, the business shifts from capital expenditure to variable expenditure. By deploying immediately and iterating within days, they leverage AWS's speed and agility.

Adım Adım Çözüm

1
Analyze the financial aspects of the scenario.
The scenario notes that the company only pays for compute resources during active class sessions instead of purchasing server hardware upfront.
This corresponds to trading upfront capital expenses (CapEx) for variable operating expenses (OpEx).
2
Analyze the deployment and operational speed aspects of the scenario.
The scenario mentions deploying immediately and testing new features within days instead of spending months procuring hardware.
This corresponds to increasing speed and agility by reducing time to market.

Anahtar Kavram

The six core benefits of the AWS Cloud, specifically trading capital expense for variable expense, and increasing speed and agility.
Soru 645Soru →

A multiplayer gaming startup needs to establish a security and operational monitoring strategy on AWS. The security team wants to audit all API actions and configuration changes made by developers across their AWS account. Concurrently, the operations team needs to track performance metrics of their Amazon EC2 instances and receive automated alerts if CPU utilization exceeds 80%. Which combination of AWS services should the startup implement to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS CloudTrail to audit all API activity and configuration changes, and Amazon CloudWatch to monitor instance metrics and send utilization alerts

Cevap

AWS CloudTrail to audit all API activity and configuration changes, and Amazon CloudWatch to monitor instance metrics and send utilization alerts
The correct option is the combination of AWS CloudTrail and Amazon CloudWatch. AWS CloudTrail is designed to record and audit API calls and user activity across your AWS infrastructure, providing a complete log of who did what and when. Amazon CloudWatch is the monitoring and observability service that tracks operational and performance metrics, such as CPU utilization, and allows you to set alarms that notify you or take action when a metric threshold is crossed.

Adım Adım Çözüm

1
Identify the service responsible for logging and auditing API activity and configuration changes across the AWS account.
AWS CloudTrail is determined to be the service that records API calls, user actions, and resource changes.
CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, and command line tools.
2
Identify the service responsible for monitoring performance metrics (such as CPU utilization) and triggering automated alerts.
Amazon CloudWatch is determined to be the service that tracks metrics, collects log files, and sets alarms.
CloudWatch is the primary monitoring and observability service on AWS, allowing users to configure alarms when resource metrics cross defined thresholds.
3
Combine the identified services to find the correct matching option.
The combination of AWS CloudTrail and Amazon CloudWatch is selected.
This combination successfully satisfies both the auditing requirements of the security team and the performance monitoring/alerting requirements of the operations team.

Anahtar Kavram

AWS CloudTrail vs Amazon CloudWatch for Security and Operations
Soru 646Soru →

A developer is writing a custom Java application that needs to insert records into an Amazon DynamoDB table. Which of the following should the developer use to interact with DynamoDB programmatically within the application code?

Cevabı ve açıklamayı göster

Cevap: AWS Software Development Kit (SDK)

Cevap

AWS Software Development Kit (SDK)
The AWS Software Development Kit (SDK) is the correct choice because it provides language-specific libraries and APIs (such as for Java, Python, or .NET) that allow developers to programmatically interact with AWS services directly from their application code.

Adım Adım Çözüm

1
Identify the requirement of programmatically interacting with AWS services (inserting database records) directly from application source code.
Requires a tool that provides programming libraries and APIs.
The application code needs to communicate directly with Amazon DynamoDB APIs using a programming language (like Java).
2
Evaluate the available AWS operating and deployment tools (Console, CLI, SDK, CloudFormation) against this programmatic requirement.
The AWS SDK is designed specifically for programmatic service interaction within application code.
While the Console is graphical, the CLI is shell-based, and CloudFormation is for resource provisioning, the SDK provides the libraries needed for developer code.

Anahtar Kavram

AWS Software Development Kit (SDK) is used for programmatically interacting with AWS services within application code.
Soru 647Soru →

An organization is seeking to optimize its deployment and administrative operations across several teams. They must address the following distinct operational requirements:

1. A developer is writing a custom Python application that runs on an Amazon EC2 instance and needs to dynamically upload log files to an Amazon S3 bucket.
2. A systems administrator needs to write a local bash script to automate the weekly termination of unutilized EC2 instances based on resource tags.
3. A cloud architect needs to define, version-control, and deploy a standardized multi-tier infrastructure environment consisting of Amazon VPC, EC2, and RDS across dev, test, and prod environments.

Which combination of AWS deployment and operating methods represents the most secure and appropriate solution to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: The developer uses the AWS SDK (Boto3) within the Python code leveraging temporary credentials from an IAM Role attached to the EC2 instance; the systems administrator uses the AWS CLI in their bash script with credentials from a dedicated IAM User; the cloud architect uses AWS CloudFormation to declare and deploy the infrastructure using templates.

Cevap

The developer should use the AWS SDK (Boto3) within the application leveraging an IAM Role, the administrator should use the AWS CLI for the bash script, and the architect should use AWS CloudFormation for declarative infrastructure templates.
The correct option correctly maps each scenario to the proper AWS interface according to best practices: the AWS SDK is used inside the application code with an IAM Role; the AWS CLI is used for local shell scripting; and AWS CloudFormation is used as the Infrastructure as Code tool to manage templates.

Adım Adım Çözüm

1
Analyze the developer's requirement for programmatic S3 uploads within a custom Python application.
The AWS SDK (Boto3) is the standard programmatic interface for application development. For security, it should retrieve temporary credentials from an IAM Role attached to the EC2 instance, avoiding hardcoded keys.
This complies with the principle of least privilege and secure access without credential storage.
2
Analyze the systems administrator's requirement to write a local bash script for EC2 administration.
The AWS CLI is designed for interactive command-line access and scripting (such as bash). It should run under a dedicated IAM User's programmatic credentials.
The CLI is optimized for shell scripting, whereas the SDK is meant for application code, and the Console is manual.
3
Analyze the cloud architect's requirement to define, version-control, and replicate multi-tier infrastructure.
AWS CloudFormation is the service designed for declarative Infrastructure as Code (IaC), allowing templating, version control, and multi-environment deployment.
AWS Elastic Beanstalk is a PaaS for application hosting rather than low-level infrastructure management, and using SDK loop scripts lacks state management.

Anahtar Kavram

Selecting appropriate AWS interaction methods (Console, CLI, SDK, CloudFormation) based on automation, programmatic integration, and infrastructure provisioning needs.
Soru 648Soru →

A fitness center franchise wants to migrate its membership management system from on-premises servers to the AWS Cloud to optimize costs. Which two statements describe the economic advantages of this migration?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The franchise can swap fixed capital investments for variable operational costs.; The franchise can scale down resources during low-activity periods to pay only for active utilization.

Cevap

The correct options are the statements explaining that the franchise can swap fixed capital investments for variable operational costs and that it can scale down resources during low-activity periods to pay only for active utilization.
Migrating to the AWS Cloud allows organizations to replace upfront capital expenses with variable operating expenses. Additionally, because of cloud elasticity, organizations can scale resources down during off-peak hours, ensuring they only pay for the capacity they actually use.

Adım Adım Çözüm

1
Analyze the financial transition of cloud migration.
Identify that cloud computing replaces capital expenditure (buying hardware upfront) with operating expenditure (paying for resources dynamically).
This helps evaluate the first economic advantage regarding fixed capital investments versus variable operational costs.
2
Evaluate the impact of elasticity on cost efficiency.
Identify that scaling resources up or down dynamically based on user demand reduces waste and minimizes costs during off-peak times.
This helps evaluate the second economic advantage regarding variable resource utilization.

Anahtar Kavram

Cloud Economics: CapEx vs OpEx and Elasticity
Soru 649Soru →

A company is setting up a new application on a single Amazon EC2 instance. The application requires a dedicated, persistent block storage volume that provides low-latency performance and is attached directly to the instance. Which AWS storage service should the company use?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Block Store (Amazon EBS)

Cevap

Amazon Elastic Block Store (Amazon EBS)
Amazon Elastic Block Store provides high-performance, persistent block storage volumes that are designed to be attached to a single EC2 instance, matching the requirements of low latency and direct attachment.

Adım Adım Çözüm

1
Identify the storage requirements from the scenario.
The scenario requires a persistent block storage volume attached to a single Amazon EC2 instance with low-latency performance.
This helps narrow down the choices by matching the storage type (block) and the attachment type (directly to a single instance).
2
Evaluate the available AWS storage services against these requirements.
Amazon Elastic Block Store provides block-level storage volumes that attach directly to an EC2 instance. Amazon Simple Storage Service provides object storage, Amazon Elastic File System provides shared file storage, and Amazon S3 Glacier is for archival storage.
Matching the features of each service reveals that only the elastic block store option meets the specific low-latency, block-level attachment requirements.

Anahtar Kavram

AWS Storage Services
Tahmini Süre:45s
Soru 650Soru →

A media streaming company uses Amazon CloudFront to deliver video content to users globally. Under the AWS Shared Responsibility Model, which TWO of the following tasks are the responsibility of AWS?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Maintaining and securing the physical infrastructure at global edge locations; Patching and updating the underlying software and firmware on CloudFront edge servers

Cevap

The responsibilities of AWS are maintaining and securing the physical infrastructure at global edge locations, and patching and updating the underlying software and firmware on CloudFront edge servers.
Under the AWS Shared Responsibility Model, AWS is responsible for the security 'of' the cloud. For a managed service like Amazon CloudFront, this includes managing the physical security of the global edge locations where content is cached, and patching the software and firmware of the edge servers. Configuring distribution settings, such as forcing HTTPS (Viewer Protocol Policy) or restricting access with signed URLs, are customer responsibilities (security 'in' the cloud). Additionally, customers cannot conduct physical audits of AWS facilities; they must retrieve compliance reports via AWS Artifact.

Adım Adım Çözüm

1
Identify the service type of Amazon CloudFront.
Amazon CloudFront is a managed global content delivery network (CDN) service.
Determining the service type helps identify where the boundary lies in the Shared Responsibility Model.
2
Analyze AWS's responsibilities for a managed CDN service.
AWS is responsible for the security 'of' the cloud, which includes physical security of the edge location data centers and patching the underlying software/firmware on the edge servers.
This identifies the correct options representing AWS-managed tasks.
3
Identify and eliminate customer-side responsibilities.
Configuring viewer protocol policies (HTTPS), setting up signed URLs/cookies, and retrieving compliance reports via AWS Artifact (instead of physical data center audits) are customer responsibilities.
This helps verify that the distractors represent security 'in' the cloud tasks managed by the customer.

Anahtar Kavram

Shared Responsibility Model for Managed Services
Soru 651Soru →

Match each application workload requirement to the most appropriate AWS compute service.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A simple web application that needs a low-cost, all-in-one virtual private server (VPS) with pre-configured software stacks.
A containerized microservice that must run continuously without the overhead of provisioning, configuring, or scaling physical virtual machine instances.
An event-driven backend service that processes files in response to uploads, running only for a few seconds per execution.
A legacy database application requiring custom operating system kernel modifications and full administrative root access to the virtual machine.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The correct matches pair the simple VPS application with Amazon Lightsail, the serverless containerized microservice with AWS Fargate, the event-driven short-lived service with AWS Lambda, and the legacy database requiring root OS access with Amazon EC2.
The matches correctly align each business workload with the most appropriate AWS compute service based on the level of management control, scaling behavior, and application packaging. Amazon Lightsail is best for simple, bundled VPS hosting. AWS Fargate is ideal for serverless container workloads. AWS Lambda is the standard service for short-lived, event-driven functions. Amazon EC2 provides the required root operating system access for custom legacy applications.

Adım Adım Çözüm

1
Analyze the operational control and management requirements of each workload.
Identify workloads that require full guest OS administration versus those that can be run in a serverless or packaged environment.
This establishes the basic distinction between Infrastructure as a Service (IaaS) like EC2 and serverless or managed services like Fargate and Lambda.
2
Differentiate between containerized, event-driven, and standard VPS requirements.
Classify the microservice as container-based, the file-processing script as event-driven/short-lived, and the simple web app as a standard VPS.
This matches workloads to specialized compute offerings designed to optimize cost and management overhead for those specific paradigms.
3
Map each categorized workload to its corresponding AWS compute service.
VPS workload maps to Lightsail; containers without host management maps to Fargate; event-driven functions map to Lambda; root-access OS virtualization maps to EC2.
Completes the matching alignment in accordance with official AWS architectural best practices.

Anahtar Kavram

AWS Compute Service Selection
Tahmini Süre:1m 30s
Soru 652Soru →

A logistics company manages its supply chain application on AWS. The security team needs to implement a solution that satisfies two requirements: first, automatically scanning container images stored in Amazon Elastic Container Registry (ECR) for software vulnerabilities; second, continuously monitoring the AWS environment for anomalous API activity and potential unauthorized access. Which of the following AWS services should the company use to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Inspector; Amazon GuardDuty

Cevap

The logistics company should use Amazon Inspector and Amazon GuardDuty to meet these requirements.
To satisfy the requirements, the company must use a combination of vulnerability scanning and intelligent threat detection. Amazon Inspector automatically and continuously scans container images in Amazon Elastic Container Registry (ECR) for known software vulnerabilities. Amazon GuardDuty provides continuous monitoring and intelligent threat detection by analyzing API actions and logs to identify anomalous behavior and unauthorized access.

Adım Adım Çözüm

1
Analyze the first requirement: vulnerability scanning of container images in Amazon Elastic Container Registry (ECR).
Identify Amazon Inspector as the service designed to automatically and continuously scan EC2 workloads, Lambda functions, and ECR container images for software vulnerabilities.
Amazon Inspector specifically handles software vulnerability scanning on the host and container levels.
2
Analyze the second requirement: continuous monitoring of the AWS environment for anomalous API activity and unauthorized access.
Identify Amazon GuardDuty as the intelligent threat detection service that analyzes logs (such as CloudTrail logs) to discover anomalous API activity.
Amazon GuardDuty uses machine learning and threat intelligence to identify suspicious behavior and threats across the AWS environment.

Anahtar Kavram

Vulnerability scanning and threat detection using Amazon Inspector and Amazon GuardDuty.
Tahmini Süre:1m 30s
Soru 653Soru →

An organization is designing a migration strategy for four distinct software workloads to AWS. Each workload has specific operational, architectural, and financial constraints. Match each workload description on the left to the most appropriate AWS compute service on the right that satisfies these constraints while optimizing for operational efficiency and cost. Which of the following represents the correct alignment of these workloads with their respective AWS compute services?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A legacy corporate reporting application that requires mounting a shared storage system and installing custom kernel modifications to the operating system, running 24/7 on a steady workload.
A data validation workflow triggered by file uploads to an Amazon S3 bucket. The execution time is consistently around 12 minutes, and the frequency of uploads is highly unpredictable, ranging from zero to thousands of files per hour.
A containerized microservice that forms part of a high-throughput API. The application is packaged as a Docker image and must scale rapidly in response to CPU utilization metrics, but the operations team wants to focus solely on container definition without configuring or patching host instances.
A localized retail shop's inventory tracking system that requires a simple pre-configured SQL database, a low-cost virtual private server, and a predictable flat monthly bill to fit a strict operational budget.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The legacy application matches with Amazon EC2; the event-driven validation workflow matches with AWS Lambda; the containerized microservice matches with AWS Fargate; and the simple inventory system matches with Amazon Lightsail.
The correct alignment pairs the legacy application with Amazon EC2 (for kernel-level OS access), the file-triggered task with AWS Lambda (for event-driven scaling within the 15-minute limit), the containerized API with AWS Fargate (for serverless container deployment), and the low-budget inventory system with Amazon Lightsail (for a simple, flat-rate VPS package).

Adım Adım Çözüm

1
Analyze the legacy application requirements for kernel modification and continuous operation.
Determine that serverless offerings (like Lambda and Fargate) restrict operating system customization. Only Amazon EC2 provides full operating system access required for custom kernel changes.
To identify the compute service that allows low-level operating system administration.
2
Examine the data validation workflow's trigger mechanism, execution duration, and traffic volatility.
The workflow is event-driven (triggered by Amazon S3) and completes within 12 minutes (under the 15-minute AWS Lambda timeout limit), with highly variable demand.
To choose between provisioning dedicated VMs or using an event-driven serverless function to minimize idle cost.
3
Evaluate the containerized microservice's deployment and management requirements.
The microservice is containerized and requires auto-scaling without host server management, making AWS Fargate the ideal serverless container execution platform.
To select a container hosting service that removes the administrative overhead of managing the container host instances.
4
Assess the inventory system's operational needs and budget constraints.
The workload requires a simple SQL database and virtual private server bundled together at a low, predictable flat monthly rate, pointing to Amazon Lightsail.
To match simple, low-cost virtual private server requirements with a flat-rate billing model.

Anahtar Kavram

Selecting appropriate AWS compute services based on operational constraints, administrative control, container orchestration needs, event-driven scalability, and cost structures.
Tahmini Süre:3m 0s
Soru 654Soru →

A regional retail chain wants to migrate its inventory database to AWS. The IT director notices that the pay-as-you-go pricing for AWS services is much lower than the prices the company could negotiate with hardware vendors on its own. This cost reduction is possible because AWS aggregates usage from hundreds of thousands of customers to achieve higher purchasing power and pass these savings to customers. Which benefit of the AWS Cloud is directly illustrated by this scenario?

Cevabı ve açıklamayı göster

Cevap: Benefit from massive economies of scale

Cevap

Benefit from massive economies of scale
The scenario describes a situation where a company benefits from lower pay-as-you-go pricing because AWS aggregates usage from hundreds of thousands of customers. This directly illustrates the benefit of benefiting from massive economies of scale, which allows AWS to pass purchasing power savings on to customers in the form of lower variable costs.

Adım Adım Çözüm

1
Analyze the business scenario described in the question.
The scenario focuses on a retail chain obtaining lower service prices than it could negotiate on its own because AWS aggregates usage across hundreds of thousands of customers.
Understanding the core driver of the cost reduction helps identify which of the six cloud benefits is being leveraged.
2
Match the core driver to the official AWS Cloud benefits definitions.
Aggregated usage from hundreds of thousands of customers leading to lower variable costs/prices corresponds to the 'Benefit from massive economies of scale' benefit.
AWS official documentation defines this specific mechanism under the massive economies of scale benefit.

Anahtar Kavram

AWS Cloud Benefit: Benefit from massive economies of scale
Soru 655Soru →

A logistics company is designing an AWS architecture for two distinct workloads. The first workload is a containerized microservices API for processing real-time order transactions; it experiences highly variable traffic, and the company wants to run it without managing the underlying servers. The second workload is an on-demand batch analytics job that processes historical shipping records, takes approximately 4 hours to complete, requires a customized Linux environment with proprietary software, and can be paused or restarted without impact if interrupted. Which two of the following compute options should the company select to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Fargate to deploy the containerized microservices API without managing EC2 instances; Amazon EC2 Spot Instances to run the batch analytics job

Cevap

The correct answers are the option to use AWS Fargate to deploy the containerized microservices API without managing EC2 instances, and the option to use Amazon EC2 Spot Instances to run the batch analytics job.
AWS Fargate is the ideal serverless compute option for running containers (ECS/EKS) when developers want to eliminate the operational overhead of provisioning, configuring, and scaling virtual machines. Amazon EC2 Spot Instances offer the most cost-effective pricing model for workloads that are tolerant of interruptions (such as batch data processing) and require custom operating systems or applications running beyond serverless time limits.

Adım Adım Çözüm

1
Analyze the requirements for the first workload (microservices API).
Identify that the workload is containerized, has variable traffic, and requires zero server management (serverless containers).
AWS Fargate is a serverless compute engine for containers that fits these exact needs by removing the need to manage EC2 instances.
2
Analyze the requirements for the second workload (batch analytics job).
Identify that the job is on-demand, runs for 4 hours, requires a customized Linux environment with proprietary software, and can tolerate interruptions.
The 4-hour duration rules out serverless options like AWS Lambda (which has a 15-minute limit), and the requirement for custom OS/proprietary software points to Amazon EC2.
3
Determine the optimal EC2 purchasing option for the batch job.
Identify that because the job is interruption-tolerant, Amazon EC2 Spot Instances provide the most cost-effective pricing compared to Reserved or On-Demand Instances.
Spot Instances offer up to 90% savings for flexible, interruption-tolerant workloads.

Anahtar Kavram

Selecting the appropriate AWS compute service and purchasing model based on execution time limits, server management preferences, containerization requirements, and fault tolerance.
Soru 656Soru →

A financial technology company is migrating its application workloads to AWS. The Chief Financial Officer (CFO) wants to transition from paying large, upfront costs for physical hardware that depreciates over time to a pay-as-you-go model where expenses align directly with real-time resource consumption. Which benefit of the AWS Cloud is the CFO referring to?

Cevabı ve açıklamayı göster

Cevap: Trading capital expense for variable expense

Cevap

Trading capital expense for variable expense
The benefit of trading capital expense for variable expense is demonstrated when a company moves from upfront hardware investments (Capital Expenditure, or CapEx) to a pay-as-you-go utility model (Operating Expenditure, or OpEx). This allows organizations to pay only for the resources they consume.

Adım Adım Çözüm

1
Analyze the CFO's requirement to move from large, upfront hardware expenditures to a pay-as-you-go model based on consumption.
Identify that upfront hardware represents capital expenses (CapEx) and pay-as-you-go represents variable operational expenses (OpEx).
This sets the foundation for mapping the transition to the correct AWS Cloud benefit.
2
Evaluate the 6 benefits of AWS Cloud to find the one matching the transition from CapEx to OpEx.
The benefit 'Trading capital expense for variable expense' directly describes this shift.
This ensures the selected option corresponds exactly to official AWS Cloud Practitioner taxonomy.

Anahtar Kavram

Trading capital expense for variable expense allows businesses to pay only for the resources they consume, shifting upfront hardware investments to ongoing operational costs.
Tahmini Süre:1m 0s
Soru 657Soru →

To secure a newly created AWS account, an administrator needs to establish basic identity and access controls. According to AWS security best practices, which of the following actions should the administrator perform? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Enable Multi-Factor Authentication (MFA) on the AWS account root user; Create individual IAM users for administrators to perform daily tasks

Cevap

Enable Multi-Factor Authentication (MFA) on the AWS account root user, and create individual IAM users for administrators to perform daily tasks.
Securing the AWS account root user using multi-factor authentication (MFA) is a primary security recommendation. Additionally, administrators should create individual IAM users for daily administrative and operational work rather than using the root user, ensuring that actions can be audited and limited in scope.

Adım Adım Çözüm

1
Identify the recommended practices for securing the root user account.
The root user has unrestricted access to all resources and must be secured immediately by enabling Multi-Factor Authentication (MFA) and locking away its credentials.
This prevents unauthorized access to the entire AWS account.
2
Determine the appropriate configuration for administrative and routine tasks.
Instead of using the root user, administrators must create individual IAM users with appropriate permissions for daily activities.
This establishes individual accountability and aligns with the principle of least privilege.

Anahtar Kavram

AWS account security best practices dictate that the root user should not be used for daily tasks, must be protected with MFA, and daily tasks should be performed by individual IAM identities with minimal required privileges.
Tahmini Süre:1m 0s
Soru 658Soru →

A food delivery platform processes orders by executing a customer's payment and immediately transmitting the order details to the restaurant's kitchen terminal in a single, synchronous transaction. When a restaurant's internet connection drops, the kitchen terminal becomes unreachable, which causes the payment transaction to time out and fail. Which AWS Cloud design principle should the company apply to prevent kitchen connection issues from impacting the payment process, and how should it be implemented?

Cevabı ve açıklamayı göster

Cevap: Loose coupling; use an asynchronous messaging service to decouple the payment transaction from the kitchen order delivery process.

Cevap

Loose coupling; use an asynchronous messaging service to decouple the payment transaction from the kitchen order delivery process.
Implementing loose coupling by introducing an asynchronous messaging service ensures that the payment process and the kitchen order delivery process operate independently. If the kitchen connection drops, the order details are safely buffered in the message queue, allowing the payment transaction to complete successfully without waiting for the kitchen terminal.

Adım Adım Çözüm

1
Analyze the scenario to identify the system failure reason.
The failure is caused by a synchronous dependency where the payment transaction blocks while waiting for an external, unreliable network endpoint.
Understanding the root cause is necessary before selecting the appropriate design principle.
2
Apply the appropriate AWS Cloud design principle to break the dependency.
The principle of loose coupling indicates that systems should be designed with independent components so that a failure in one does not affect the others.
Decoupling allows the payment service to function independently of the kitchen terminal's network state.
3
Select the correct architectural pattern to implement the principle.
Introduce an asynchronous queue (such as Amazon SQS) to buffer the kitchen notifications, allowing the payment transaction to complete immediately.
This guarantees that payment processing remains highly available and orders are eventually delivered when the terminal reconnects.

Anahtar Kavram

Loose coupling and asynchronous messaging to prevent cascading failures in distributed systems.
Soru 659Soru →

A company is evaluating different AWS compute services to host various application workloads. Match each business workload requirement on the left to the most appropriate AWS compute service on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

An event-driven task that processes image uploads automatically and charges only for the exact execution time.
A basic company blog that requires a simple, pre-configured WordPress environment with a predictable flat monthly fee.
A legacy database server that requires complete administrative access to the underlying operating system for customization.
A containerized microservices application where the developer wants a serverless container hosting model without managing servers.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Event-driven image processing matches AWS Lambda. A simple blog with a predictable flat fee matches Amazon Lightsail. A legacy database requiring operating system access matches Amazon EC2. A serverless containerized microservice matches AWS Fargate.
Each compute service matches its corresponding workload requirement perfectly: AWS Lambda is optimal for short-running, event-driven image processing; Amazon Lightsail is ideal for hosting simple websites with predictable monthly pricing; Amazon EC2 provides full OS administrative control for legacy systems; and AWS Fargate hosts containers in a serverless model.

Adım Adım Çözüm

1
Analyze the event-driven requirement that needs millisecond billing.
Identify AWS Lambda as the service that runs code in response to events without provisioning servers, billing only for compute time used.
This aligns with the event-driven, utility-based billing workload.
2
Analyze the blog requirement needing a simple setup and flat monthly pricing.
Identify Amazon Lightsail as the solution that provides easy-to-use virtual private servers with fixed, predictable pricing plans.
This meets the need for low-cost, simplified, predictable compute resources.
3
Analyze the database requirement needing complete OS-level configuration access.
Identify Amazon EC2 as the service offering virtual machines where the user has full administrative control of the operating system.
This meets the requirement for a legacy database needing OS modifications.
4
Analyze the containerized microservices requirement needing serverless execution.
Identify AWS Fargate as the serverless engine for running containerized workloads without managing the virtual servers.
This matches the requirement to run containers without managing instances.

Anahtar Kavram

Selecting AWS compute services based on server management level, deployment package format, and cost predictability.
Tahmini Süre:1m 30s
Soru 660Soru →

A company wants to deploy its cloud infrastructure using declarative templates to ensure that development and production environments are created consistently. Additionally, the company's financial team needs a web-based, graphical user interface to manually review monthly billing reports. Which AWS tools or interfaces will meet these requirements? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS CloudFormation; AWS Management Console

Cevap

AWS CloudFormation and AWS Management Console meet these requirements.
AWS CloudFormation allows developers to model and set up their Amazon Web Services resources using declarative JSON or YAML templates, which guarantees identical, consistent environments. The AWS Management Console is the default web-based visual interface that enables manual navigation of services, including viewing billing dashboards.

Adım Adım Çözüm

1
Analyze the first requirement: deploying infrastructure consistently using declarative templates.
Identify AWS CloudFormation as the standard service for Infrastructure as Code (IaC) using templates.
AWS CloudFormation templates (JSON or YAML) define resources declaratively, allowing repeatable and consistent deployments.
2
Analyze the second requirement: a web-based, graphical interface to manually check billing dashboard reports.
Identify the AWS Management Console as the primary web-based GUI.
The AWS Management Console provides an interactive visual interface in the web browser, ideal for manual administration tasks like viewing billing details.

Anahtar Kavram

AWS offers multiple interfaces and deployment methods—such as AWS CloudFormation for Infrastructure as Code templates and the AWS Management Console for a web-based graphical interface—tailored to different administrative and automation needs.
ÖncekiSayfa 33 / 74Sonraki