Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 841Soru →

An application running on a single Amazon EC2 instance requires a persistent block storage volume that behaves like a physical hard drive. The storage must retain its data even if the EC2 instance is stopped or terminated. Which AWS storage service should be used to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Block Store (Amazon EBS)

Cevap

Amazon Elastic Block Store (Amazon EBS)
The correct option is Amazon Elastic Block Store (Amazon EBS) because it provides persistent block-level storage volumes for use with EC2 instances. EBS volumes act like raw, unformatted block devices that can be attached to an instance and persist data independently of the instance's life, meaning the data remains intact if the instance is stopped or terminated.

Adım Adım Çözüm

1
Analyze the application requirements.
The application needs block storage that behaves like a physical hard drive attached to a single EC2 instance, and the data must survive instance stop or termination.
This helps narrow down the choices by eliminating file storage (EFS) and object storage (S3) which are not block storage devices, and temporary block storage (Instance Store) which does not persist data.
2
Identify the storage service that matches these requirements.
Amazon EBS is the correct service because it provides persistent block storage volumes that can be attached to a single EC2 instance and retain data independently of the instance lifecycle.
Choosing the service that satisfies both the block storage interface and the persistence requirement provides the correct answer.

Anahtar Kavram

AWS Block Storage Persistence
Tahmini Süre:45s
Soru 842Soru →

An online education platform hosts virtual classes and experiences high spikes in user traffic during exam periods, followed by low traffic during school holidays. Which two options represent the primary economic advantages of migrating this workload to AWS? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Trading capital expenses for variable operating expenses, reducing upfront hardware costs; Leveraging elasticity to dynamically scale compute capacity down during low-traffic school breaks

Cevap

Trading capital expenses for variable operating expenses, reducing upfront hardware costs; and leveraging elasticity to dynamically scale compute capacity down during low-traffic school breaks.
The correct options represent the primary advantages: trading capital expenses for variable operating expenses allows the platform to pay only for what they use without massive initial hardware investments; leveraging elasticity ensures they scale resources down when students are on break, eliminating wasted spending on idle capacity.

Adım Adım Çözüm

1
Analyze the business scenario
The platform experiences variable demand (high spikes during exam periods, low traffic during breaks) and currently uses on-premises infrastructure.
Understanding the customer's traffic pattern helps identify which cloud economic pillars apply.
2
Evaluate the financial benefit of shifting expenses
By moving to AWS, the platform avoids upfront physical server costs (CapEx) and pays for resources as they are used (OpEx).
This directly maps to the core cloud economics benefit of trading capital expense for variable expense.
3
Evaluate the technical-cost benefit of elasticity
By using elasticity, the platform dynamically scales down during breaks, avoiding payment for idle capacity.
Elasticity prevents wasted spending by aligning resource capacity directly with user demand.

Anahtar Kavram

Cloud Economics: CapEx to OpEx shift and cost benefits of elasticity
Tahmini Süre:1m 30s
Soru 843Soru →

A research laboratory is building a web application on AWS that handles sensitive clinical trials data. The regulatory authority requires the laboratory to encrypt all trial results at rest using dedicated, single-tenant hardware security modules (HSMs) that they control directly. They must also ensure that database credentials are encrypted and automatically rotated. Which of the following AWS services should the laboratory use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS CloudHSM; AWS Secrets Manager

Cevap

The research laboratory should use AWS CloudHSM to manage keys on dedicated, single-tenant hardware security modules, and AWS Secrets Manager to encrypt and automatically rotate database credentials.
To meet the compliance requirement for dedicated, single-tenant cryptographic hardware, the laboratory must use AWS CloudHSM. To encrypt and rotate database credentials, AWS Secrets Manager should be implemented.

Adım Adım Çözüm

1
Analyze the requirement for dedicated, single-tenant cryptographic hardware.
Identify AWS CloudHSM as the correct service because AWS Key Management Service (AWS KMS) relies on shared, multi-tenant hardware security modules.
AWS CloudHSM is designed for compliance workloads that strictly require single-tenant dedicated HSM instances.
2
Analyze the requirement to encrypt and automatically rotate database credentials.
Identify AWS Secrets Manager as the service designed for securely storing and rotating credentials.
AWS Secrets Manager allows rotation configuration without deploying custom code or scripts.

Anahtar Kavram

Data Protection and Encryption services (AWS CloudHSM vs. AWS KMS) and secret management (AWS Secrets Manager).
Soru 844Soru →

An agricultural technology firm, AgroSense, runs a crop monitoring system that processes data from thousands of soil sensors. The system requires high compute capacity during the three-month harvesting season but remains completely idle for the remaining nine months of the year. AgroSense decides to migrate this workload from an on-premises data center to AWS. Which of the following describes the primary cloud economics benefit AgroSense will achieve?

Cevabı ve açıklamayı göster

Cevap: The ability to trade fixed capital expenses for variable operating expenses, paying only for the compute capacity utilized during the harvesting season.

Cevap

The ability to trade fixed capital expenses for variable operating expenses, paying only for the compute capacity utilized during the harvesting season.
The option stating that AgroSense can trade fixed capital expenses for variable operating expenses is correct. On AWS, businesses pay only for resources when they are active (operating expenses or OpEx), eliminating the need to invest in physical hardware upfront (capital expenses or CapEx) that remains idle for nine months of the year.

Adım Adım Çözüm

1
Analyze the workload characteristics and requirements.
The workload is highly seasonal, requiring high capacity for three months and zero capacity for the remaining nine months.
Understanding the usage pattern helps identify the most cost-effective hosting model.
2
Evaluate the financial impact of migrating to AWS.
On-premises hosting requires purchasing hardware to support peak demand (CapEx) which sits idle. AWS allows paying only for what is used (OpEx) through elasticity.
This aligns the cost directly with business demand, realizing the core cloud economics benefit of trading capital expenses for variable expenses.

Anahtar Kavram

Trading Capital Expenses for Operating Expenses
Soru 845Soru →

An agricultural technology company runs complex crop growth simulation models that require hundreds of temporary compute instances for a few hours each week. The company wants to optimize its cloud architecture by applying the AWS design principle of 'disposable resources instead of fixed servers'. Which of the following architectural practices should the company implement to align with this principle? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Define the entire simulation infrastructure using AWS CloudFormation to programmatically deploy and destroy resources as needed.; Bootstrap the compute instances using EC2 user data scripts to dynamically configure software dependencies at startup.

Cevap

To align with the principle of disposable resources, the company should define infrastructure using AWS CloudFormation for automated deployment and teardown, and bootstrap compute instances using EC2 user data scripts to dynamically configure dependencies at startup.
The AWS design principle of 'disposable resources instead of fixed servers' encourages treating resources as temporary and interchangeable. Defining infrastructure using AWS CloudFormation allows environments to be created and destroyed programmatically, ensuring consistency and cost-efficiency. Bootstrapping compute instances using EC2 user data allows the instances to configure themselves automatically at launch, removing the need for manual configuration or maintaining pre-existing, static instances.

Adım Adım Çözüm

1
Identify the core requirement of the disposable resources design principle.
The principle emphasizes automated provisioning, configuration, and tearing down of resources rather than maintaining static, long-running servers.
This establishes the criteria for evaluating the choices based on automation and resource temporality.
2
Evaluate the practice of defining infrastructure as code.
Using AWS CloudFormation allows resources to be created dynamically for each run and completely destroyed afterward, minimizing costs and configuration drift.
This directly aligns with the concept of temporary, disposable infrastructure.
3
Evaluate instance configuration methods.
Bootstrapping instances dynamically at launch using EC2 user data scripts ensures that new, clean instances can be brought online automatically without requiring manual installation.
This supports the disposable resources pattern by automating the server setup process.
4
Identify and eliminate anti-patterns, such as vertical scaling of a single instance, maintaining always-on static fleets, or performing manual server administration.
Options recommending vertical scaling, static fleets, or manual SSH logins are marked as incorrect.
These practices treat servers as permanent assets rather than disposable resources.

Anahtar Kavram

The 'disposable resources instead of fixed servers' design principle in the AWS Cloud relies on automation, Infrastructure as Code, and dynamic bootstrapping to treat servers as temporary, interchangeable resources.
Soru 846Soru →

A company is migrating a traditional web application to the AWS Cloud. The application's backend database requires support for structured data, complex SQL queries, and transactional joins. Additionally, the company wants to minimize administrative overhead by having AWS manage database patching, software installations, and backups. Which AWS service should the company use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Relational Database Service (Amazon RDS)

Cevap

Amazon Relational Database Service (Amazon RDS) is the correct service because it provides a fully managed relational database that supports SQL queries and joins, while offloading administrative tasks like patching and backups to AWS.
Amazon Relational Database Service (Amazon RDS) is the correct service because it is a managed relational database service that supports standard SQL engines (such as PostgreSQL, MySQL, and MariaDB) and handles administrative tasks like hardware provisioning, database setup, patching, and backups.

Adım Adım Çözüm

1
Analyze the database type requirement.
The scenario specifies a requirement for a structured database that supports complex SQL queries and transactional joins, which indicates a relational database.
Relational databases are designed for schema enforcement and SQL joins, unlike NoSQL databases or object storage.
2
Analyze the management requirement.
The customer wants to minimize administrative overhead by offloading patching, software installations, and backups to AWS.
A managed database service like Amazon RDS automates these administrative tasks, whereas hosting a database on self-managed infrastructure would require the customer to handle them.
3
Select the matching AWS service.
Amazon RDS meets both the relational database requirement and the managed administration requirement.
RDS is the primary AWS service for managed relational databases.

Anahtar Kavram

Identifying the appropriate AWS database service based on business and technical requirements, specifically distinguishing relational (RDS) from non-relational services.
Soru 847Soru →

A media company is developing a service to transcode video files uploaded by users. The transcoding process is containerized using Docker, requires custom library dependencies, and takes between 15 to 25 minutes per video depending on the file size. The company wants to run these containerized jobs on a serverless compute platform to eliminate the overhead of managing operating system patching and scaling cluster capacity. Which AWS compute service should the company select to run this workload?

Cevabı ve açıklamayı göster

Cevap: AWS Fargate

Cevap

AWS Fargate
AWS Fargate is the correct choice because it is a serverless compute engine for containers. It allows the customer to run containerized workloads using Docker without having to provision, configure, or patch the underlying virtual servers. Crucially, Fargate does not impose a 15-minute execution limit like AWS Lambda, allowing the video transcoding job to run to completion.

Adım Adım Çözüm

1
Analyze the workload requirements
The workload is containerized (Docker), takes 15 to 25 minutes to complete, and must run on a serverless platform (no OS patching or capacity management).
Identifying the key constraints helps rule out compute options that cannot meet these requirements.
2
Evaluate AWS Lambda against the requirements
AWS Lambda is ruled out because its maximum execution timeout is 15 minutes, whereas the workload requires up to 25 minutes.
Lambda is serverless but has strict time limits that make it unsuitable for long-running execution tasks.
3
Evaluate Amazon EC2 and Amazon Lightsail against the requirements
Amazon EC2 and Amazon Lightsail require configuring and managing virtual machine instances, which fails the requirement to eliminate host OS patching and administration.
These services fall under the Infrastructure as a Service (IaaS) model rather than serverless.
4
Select AWS Fargate as the correct match
AWS Fargate is serverless, natively runs Docker containers, handles scaling automatically, has no server management overhead, and allows containers to run as long as needed.
Fargate meets all constraints: serverless, containerized, and supports execution times longer than 15 minutes.

Anahtar Kavram

Selecting the appropriate AWS compute service based on containerization, execution duration, and management overhead.
Tahmini Süre:2m 0s
Soru 848Soru →

A financial firm is migrating a compliance application to AWS. The application has two key storage requirements:

1. It needs a persistent block storage volume to host a transactional database run on a single Amazon EC2 instance.
2. It needs a shared file storage solution that can be mounted concurrently by multiple EC2 instances across different Availability Zones to share application configuration files.

Which two AWS storage services should the firm select to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Block Store (Amazon EBS); Amazon Elastic File System (Amazon EFS)

Cevap

Amazon Elastic Block Store (Amazon EBS) and Amazon Elastic File System (Amazon EFS)
The correct options are Amazon Elastic Block Store (Amazon EBS) and Amazon Elastic File System (Amazon EFS). Amazon EBS offers low-latency, persistent block storage volumes that attach to a single EC2 instance, matching the requirements of transactional databases. Amazon EFS offers a managed, scalable network file system that supports the NFS protocol, allowing multiple EC2 instances to read and write configuration files concurrently across multiple Availability Zones.

Adım Adım Çözüm

1
Analyze the first requirement: a persistent block storage volume to host a transactional database on a single EC2 instance.
Identify Amazon EBS as the service designed to provide persistent, low-latency block-level storage volumes for a single EC2 instance.
Transactional databases require high performance block storage, which is the primary use case for Amazon EBS.
2
Analyze the second requirement: a shared file system that can be concurrently mounted by multiple EC2 instances across multiple Availability Zones.
Identify Amazon EFS as the service that provides a serverless network file system supporting concurrent access from multiple EC2 instances.
Unlike block storage, a file system like Amazon EFS supports the Network File System (NFS) protocol for concurrent multi-instance sharing.

Anahtar Kavram

Distinguishing between block storage (EBS), file storage (EFS), and object storage (S3) based on application access patterns and persistence requirements.
Soru 849Soru →

A financial technology company is designing a disaster-tolerant transactional application in a specific geographic country to comply with strict local data sovereignty laws. The system requires synchronous replication between two database nodes to prevent any data loss (zero RPO). The nodes must be physically isolated from one another to survive localized environmental hazards, yet remain close enough to maintain a round-trip network latency of under 2 milliseconds. Which of the following deployment strategies best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy the primary database node in one Availability Zone and the secondary database node in a different Availability Zone within the same AWS Region.

Cevap

Deploy the primary database node in one Availability Zone and the secondary database node in a different Availability Zone within the same AWS Region.
Deploying the primary and secondary database nodes in different Availability Zones (AZs) within the same AWS Region is the correct strategy. AZs are physically distinct locations with independent power, cooling, and network connectivity, which protects against localized disasters. At the same time, they are connected to each other via low-latency, high-bandwidth private fiber-optic networks, allowing for synchronous replication with round-trip latencies under 2 milliseconds. Since both AZs are within the same Region, data remains within the target country, satisfying data sovereignty requirements.

Adım Adım Çözüm

1
Analyze the latency and replication requirements.
The application requires synchronous replication with a round-trip network latency of under 2 milliseconds, which rules out multi-region setups since physical distance increases latency.
To understand the physical limits of network speed and replication.
2
Evaluate the disaster tolerance and data sovereignty requirements.
The database nodes must be physically separated to survive localized disasters but reside within the same country to comply with sovereignty laws.
To narrow down the hosting infrastructure options within the same geographic boundary.
3
Map the requirements to AWS Global Infrastructure components.
Availability Zones (AZs) within a single AWS Region are physically isolated but connected by low-latency, redundant fiber networks, making them the only solution that satisfies physical separation, sub-2ms latency, and regional data residency.
To choose the correct architectural component that satisfies all constraints.

Anahtar Kavram

AWS Availability Zones provide physical isolation and low-latency connectivity within a Region to enable high availability and disaster tolerance.
Soru 850Soru →

An organization is designing a cloud-native application. The architecture requires a fully managed NoSQL database to store key-value user profile data, and an in-memory cache to reduce latency for frequent database queries.

Which of the following AWS services should the organization select to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon DynamoDB; Amazon ElastiCache

Cevap

The organization should select Amazon DynamoDB for the fully managed NoSQL key-value storage, and Amazon ElastiCache for the in-memory caching layer.
Amazon DynamoDB provides a fully managed, low-latency NoSQL database ideal for storing key-value pairs like user profiles. Amazon ElastiCache provides an in-memory cache layer to reduce query latency by caching frequently accessed data.

Adım Adım Çözüm

1
Identify the NoSQL database requirement.
Amazon DynamoDB is identified as the key-value NoSQL database service.
DynamoDB is AWS's primary managed NoSQL database, offering single-digit millisecond latency for key-value access.
2
Identify the caching layer requirement.
Amazon ElastiCache is identified as the in-memory caching service.
ElastiCache is specifically designed to cache data in-memory to improve response times for read-heavy workloads.

Anahtar Kavram

AWS Database Services classification and use cases
Soru 851Soru →

A financial technology company is using Amazon Cognito user pools to manage customer authentication and authorization for its mobile banking application. Under the AWS Shared Responsibility Model, which of the following is a responsibility of the customer?

Cevabı ve açıklamayı göster

Cevap: Configuring password complexity requirements and multi-factor authentication (MFA) settings for the user pool.

Cevap

Configuring password complexity requirements and multi-factor authentication (MFA) settings for the user pool.
Under the AWS Shared Responsibility Model, the customer is responsible for 'security in the cloud.' For Amazon Cognito user pools, this responsibility entails setting password complexity policies, configuring multi-factor authentication (MFA) protocols, and managing client-side authorization parameters.

Adım Adım Çözüm

1
Determine the service type and the division of operational duties.
Amazon Cognito is classified as a managed platform-as-a-service (PaaS) or software-as-a-service (SaaS) utility, where AWS handles the underlying infrastructure, operating system, and database tiers.
Correct classification of the AWS service is essential to identifying the boundaries of the Shared Responsibility Model.
2
Differentiate between security 'of' the cloud and security 'in' the cloud for the identified service type.
The customer's responsibility focuses on data and configuration options (security 'in' the cloud), such as setting custom password standards and configuring MFA rules. AWS's responsibility focuses on infrastructure and platform software integrity (security 'of' the cloud).
Distinguishing configuration and data access settings from infrastructure maintenance identifies who is responsible for the task.

Anahtar Kavram

Shared Responsibility Model for Managed Services
Tahmini Süre:1m 0s
Soru 852Soru →

A healthcare startup needs to manage its AWS cloud expenses. The team wants to receive an email notification if their monthly database costs are forecasted to exceed a specific limit. Additionally, they need to view and analyze interactive charts showing their monthly EC2 and Amazon S3 spending over the last three months to identify trends. Which of the following tools should the company use to meet these requirements? (Select TWO).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Budgets to create custom cost budgets that trigger email notifications when forecasted database costs exceed the specified threshold.; AWS Cost Explorer to visualize monthly historical spending patterns and view cost trends broken down by individual AWS services.

Cevap

The correct tools are AWS Budgets (for proactive notifications when costs are projected to exceed a threshold) and AWS Cost Explorer (for visualizing historical cost trends broken down by service).
AWS Budgets allows the startup to set custom budgets and configure alerts that trigger when actual or forecasted costs exceed a threshold, which satisfies the requirement for proactive alerting. AWS Cost Explorer provides a visual interface to view and analyze historical cost and usage patterns by service over a specified time period, satisfying the visualization requirement.

Adım Adım Çözüm

1
Identify the tool needed for proactive alerts when database costs are projected to exceed a threshold.
AWS Budgets is identified because it allows users to set up custom budgets and define notification alerts based on actual or forecasted costs.
Budgets help prevent cost overruns by notifying administrators before or as they occur.
2
Identify the tool needed to visualize monthly spending trends by service over the last three months.
AWS Cost Explorer is identified because it provides interactive charts to view and analyze historical cost and usage data.
Cost Explorer is designed for retrospective analysis and visual representation of active AWS resource costs.

Anahtar Kavram

AWS Billing and Cost Management tools differ in function: AWS Budgets is proactive, whereas AWS Cost Explorer is retrospective and analytical.
Soru 853Soru →

A company is designing a network architecture on AWS to connect 20 Virtual Private Clouds (VPCs) across different AWS Regions to their on-premises data center using AWS Direct Connect. They also need to implement a security control that blocks traffic from specific external IP addresses at the subnet boundary before it reaches any resources. Which two AWS configurations or services should the company implement to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway to act as a centralized hub for routing traffic between the multiple VPCs and the on-premises network; Stateless Network Access Control Lists (NACLs) associated with the subnets to block the specific malicious IP addresses

Cevap

AWS Transit Gateway and stateless Network Access Control Lists (NACLs) associated with subnets
The correct answer combines AWS Transit Gateway and stateless Network Access Control Lists (NACLs) associated with subnets. AWS Transit Gateway is designed to act as a centralized router to connect multiple VPCs and on-premises networks, eliminating the complexity of a full mesh VPC peering topology. Network Access Control Lists (NACLs) are stateless and function at the subnet boundary, making them the appropriate tool to block specific external IP addresses before traffic reaches any EC2 instances within the subnet.

Adım Adım Çözüm

1
Identify the service that simplifies interconnecting multiple VPCs (20 VPCs) across different regions and on-premises networks.
AWS Transit Gateway acts as a cloud router, serving as a centralized hub to connect multiple VPCs and on-premises networks, replacing the need for complex mesh configurations.
VPC Peering does not scale well for 20 VPCs and does not natively support transitive routing.
2
Determine the network security component capable of blocking traffic from specific IP addresses at the subnet boundary.
Network Access Control Lists (NACLs) operate at the subnet level and are stateless, allowing explicit deny rules to block specific IP addresses before traffic reaches any EC2 instance.
Security Groups operate at the instance level and do not apply at the subnet boundary.

Anahtar Kavram

AWS Transit Gateway acts as a central hub to simplify multi-VPC routing, while Network Access Control Lists (NACLs) provide stateless filtering at the subnet boundary.
Tahmini Süre:3m 0s
Soru 854Soru →

A SaaS company is hosting a collaborative document editing application on Amazon EC2 instances. The system administrator wants to allow incoming HTTP/HTTPS traffic to the EC2 instances, ensuring that any corresponding outbound response traffic is automatically permitted regardless of outbound rules. Which AWS network security feature should be configured to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: Security groups

Cevap

Security groups
Security groups are stateful firewalls that operate at the instance level. When you allow inbound traffic to an instance, the return traffic is automatically allowed regardless of any outbound security group rules.

Adım Adım Çözüm

1
Analyze the requirements for instance-level traffic filtering and stateful behavior.
The requirement specifies allowing inbound traffic to EC2 instances and automatically permitting the return outbound traffic without explicit configuration.
This matches the definition of stateful packet filtering.
2
Compare the firewalls available in an Amazon VPC.
Security groups are stateful and operate at the instance level. Network ACLs are stateless and operate at the subnet level.
Only security groups track connection state and automatically allow return traffic.

Anahtar Kavram

Security groups act as stateful firewalls for Amazon EC2 instances, automatically allowing return traffic for any permitted inbound connection.
Soru 855Soru →

A technology company plans to migrate its legacy relational database to AWS. The database administrator requires root-level access to the underlying operating system to install custom security patches and configure proprietary kernel extensions. Which AWS service or resource configuration should the company choose to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance

Cevap

Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance
The configuration using an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance is correct. This self-managed database model gives the customer root-level control over the operating system, making it possible to install custom security updates, modify kernel extensions, and manage software dependencies directly. AWS remains responsible only for the physical infrastructure and hypervisor layers.

Adım Adım Çözüm

1
Analyze the requirements for database migration and administrative access.
The database must support relational capabilities and requires root-level access to the underlying operating system for custom security patching and kernel extensions.
This determines the level of control needed over the database environment (managed vs. self-managed).
2
Evaluate the management boundaries of AWS database services under the Shared Responsibility Model.
Fully managed relational services like Amazon RDS and Amazon Aurora do not allow customer access to the underlying operating system or servers.
Managed database services offload operating system tasks to AWS, which restricts administrative OS access.
3
Select the appropriate service or resource configuration that offers OS-level access.
Running the relational database on an Amazon EC2 instance backed by Amazon EBS block storage allows the customer to maintain full administrative control, including operating system and kernel customization.
An EC2-hosted database is self-managed, shifting OS patching and custom configuration responsibilities entirely to the customer.

Anahtar Kavram

Managed vs. Self-Managed Databases on AWS
Tahmini Süre:2m 0s
Soru 856Soru →

A company is planning to run a containerized microservices application on AWS. The development team wants to deploy the containers using Amazon Elastic Container Service (Amazon ECS) but does not want to provision, configure, or scale the underlying virtual machines that host the containers. Which AWS compute service or feature provides this serverless container execution environment?

Cevabı ve açıklamayı göster

Cevap: AWS Fargate

Cevap

AWS Fargate
AWS Fargate is the correct service because it functions as a serverless compute engine for containers. It integrates with Amazon ECS to manage the provisioning, hosting, and scaling of the infrastructure, allowing developers to run containers without managing virtual machines.

Adım Adım Çözüm

1
Analyze the workload and administrative constraints
The application must run containerized microservices under Amazon ECS, but the infrastructure team wants to eliminate virtual machine management (provisioning, configuring, and scaling).
This establishes that the target service must support container orchestration while removing the operational burden of managing the underlying host servers.
2
Evaluate the compute options for Amazon ECS
Amazon ECS supports two launch types: Amazon EC2 (where the customer manages the host instances) and AWS Fargate (where AWS manages the host instances in a serverless manner).
Comparing these options identifies AWS Fargate as the service that satisfies all the specified constraints.

Anahtar Kavram

AWS Fargate is a serverless compute engine for Amazon ECS that allows running containers without provisioning or managing the underlying virtual machines.
Tahmini Süre:1m 0s
Soru 857Soru →

A medical device startup is developing a cloud-based platform for healthcare providers. The platform requires a database to store structured patient profiles and appointment schedules that need complex SQL queries and strict ACID compliance. Additionally, it requires a separate database to ingest high-speed, unstructured health telemetry data from millions of wearable sensors with single-digit millisecond latency. The startup wants to minimize administrative effort by choosing fully managed database solutions where AWS handles infrastructure provisioning, software patching, and physical security. Which two AWS services should the startup select to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Aurora; Amazon DynamoDB

Cevap

Amazon Aurora and Amazon DynamoDB should be selected to meet the relational and NoSQL requirements respectively.
Amazon Aurora is selected because it provides a fully managed, ACID-compliant relational database for structured patient records and appointments. Amazon DynamoDB is selected because it is a fully managed NoSQL database service capable of ingesting high-speed, unstructured telemetry data with single-digit millisecond latency.

Adım Adım Çözüm

1
Analyze the relational database requirements.
The patient profiles and appointment schedules require structured storage, complex SQL queries, and strict ACID compliance, which indicates a relational database.
This matches Amazon Aurora, which is a fully managed relational database service.
2
Analyze the non-relational database requirements.
The high-speed telemetry data from wearable sensors is unstructured and requires single-digit millisecond latency at scale, indicating a key-value or NoSQL database.
This matches Amazon DynamoDB, which is a fully managed NoSQL database service.
3
Evaluate the management requirement.
The startup wants to minimize administrative overhead, including patching and infrastructure management.
Both Amazon Aurora and Amazon DynamoDB are fully managed by AWS, satisfying this requirement, whereas options like self-managed databases on Amazon EBS require customer patching.

Anahtar Kavram

Selecting the appropriate AWS database service based on data structure, latency, and management model.
Soru 858Soru →

A media streaming company is storing user account information in Amazon S3 and database backups in Amazon RDS. The company's compliance policy requires all of this data to be encrypted at rest. According to the AWS Shared Responsibility Model, which of the following is a customer responsibility in this scenario?

Cevabı ve açıklamayı göster

Cevap: Configuring server-side encryption and managing access policies for the cryptographic keys

Cevap

Configuring server-side encryption and managing access policies for the cryptographic keys
Under the AWS Shared Responsibility Model, the customer is responsible for data encryption configurations (security in the cloud), which includes enabling server-side encryption on services like Amazon S3 and Amazon RDS and specifying who has permissions to use the encryption keys.

Adım Adım Çözüm

1
Identify that the requirement is for encrypting data at rest (stored in Amazon S3 and Amazon RDS).
Recognized that this falls under data protection and key management.
Encryption of data at rest involves both selecting the encryption mechanism and managing the access controls to the keys used for encryption.
2
Apply the AWS Shared Responsibility Model, dividing tasks into customer responsibility (security in the cloud) and AWS responsibility (security of the cloud).
Differentiated infrastructure management from resource configuration.
AWS manages physical data centers, hardware security, hypervisors, and storage sanitization, while customers configure resources, access permissions, and choose whether/how to enable encryption.
3
Select the option that represents a customer-managed action.
Identified that enabling server-side encryption and managing key access policies is the customer's duty.
Only configuring the encryption settings and controlling access policies is under the customer's direct control within the AWS Management Console or APIs.

Anahtar Kavram

Data protection at rest and the Shared Responsibility Model
Tahmini Süre:1m 0s
Soru 859Soru →

A company wants to deploy a containerized web application on AWS. The company's operations team prefers not to provision, configure, or scale the underlying virtual servers that host the containers. Which AWS compute service should the company select to run this containerized workload?

Cevabı ve açıklamayı göster

Cevap: AWS Fargate

Cevap

AWS Fargate
The correct answer is AWS Fargate. AWS Fargate is a serverless compute engine for containers that automates infrastructure provisioning and scaling, enabling organizations to run containerized workloads without the overhead of managing virtual machines.

Adım Adım Çözüm

1
Determine the application package type.
The application is packaged in containers.
This targets AWS compute services that support running container workloads.
2
Identify the infrastructure management preference.
The team wants to avoid provisioning, scaling, or managing servers.
This rules out Infrastructure as a Service (IaaS) options like Amazon EC2 or Amazon Lightsail where server management is required.
3
Select the serverless container execution environment.
AWS Fargate runs containers in a serverless model.
Unlike AWS Lambda, which is optimized for event-driven functions, AWS Fargate is the primary serverless engine designed for running containerized workloads.

Anahtar Kavram

AWS Serverless Container Compute (AWS Fargate)
Soru 860Soru →

A company is deploying a content management system (CMS) on AWS using multiple Amazon EC2 instances distributed across different Availability Zones to ensure high availability. The CMS instances must concurrently access, write, and update a shared repository of media assets and configuration files using standard Linux file system permissions. Which AWS storage service should the company select to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic File System (Amazon EFS)

Cevap

Amazon Elastic File System (Amazon EFS)
Amazon Elastic File System (Amazon EFS) provides a fully managed, serverless, and highly available file system that supports the Network File System (NFS) protocol. It allows multiple EC2 instances in different Availability Zones to concurrently read and write to the same shared directory, while fully supporting standard Linux POSIX file permissions.

Adım Adım Çözüm

1
Analyze the storage access patterns and infrastructure distribution described in the scenario.
The application requires shared, concurrent read and write storage accessible by multiple EC2 instances running across different Availability Zones (multi-AZ).
This requirement rules out standard single-instance block storage solutions.
2
Evaluate the protocol and API requirements of the application.
The application requires standard Linux file system permissions (POSIX compliance).
This distinguishes file storage from object storage, which uses REST APIs instead of POSIX file systems.
3
Select the AWS storage service that matches both concurrent multi-AZ access and standard file system support.
Amazon EFS is selected as it is a fully managed NFS file system built to scale elasticity and support concurrent connections from multiple EC2 instances across multiple Availability Zones.
It is the only AWS storage service that meets all the criteria of being a shared, persistent, multi-AZ, POSIX-compliant file system.

Anahtar Kavram

Identifying the appropriate AWS storage service (object, block, or file) based on shared access, protocol, and availability requirements.
Tahmini Süre:1m 30s
ÖncekiSayfa 43 / 74Sonraki
Tüm alıştırma soruları — AWS Certified Cloud Practitioner | Examkin