Tüm alıştırma soruları

1473 soru

Soru 81Soru

A financial analytics firm is deploying 1515 virtual private clouds (VPCs) across multiple AWS accounts to isolate different customer datasets. The firm requires a simplified, central routing hub to enable communication between all VPCs. Furthermore, the security team needs to enforce traffic filtering at the boundary of each subnet to explicitly reject incoming requests from a list of known malicious IP ranges.

Which two AWS network services or configuration components should the firm implement to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway to act as a centralized router for interconnecting the VPCs; Network Access Control Lists (Network ACLs) configured with deny rules for the malicious IP ranges

Cevap

AWS Transit Gateway to act as a centralized router, and Network Access Control Lists (Network ACLs) configured with deny rules
AWS Transit Gateway simplifies the network topology by acting as a central hub that routes traffic between all 1515 VPCs, avoiding the need for a complex full mesh of point-to-point connections. Network ACLs operate at the subnet boundary and support explicit deny rules, which allows the security team to block traffic from the specified malicious IP ranges before it reaches any resources in the subnet.

Adım Adım Çözüm

1
Evaluate the multi-VPC routing requirement.
AWS Transit Gateway is identified as the optimal hub-and-spoke solution for scaling connections across 1515 VPCs.
Creating individual VPC Peering connections or VPN tunnels for 1515 VPCs introduces high management overhead and configuration complexity.
2
Evaluate the subnet-level traffic filtering requirement.
Network ACLs are chosen because they support explicit deny rules and apply at the subnet boundary.
Security Groups cannot satisfy this requirement because they only support allow rules and operate at the instance level.

Anahtar Kavram

Centralized multi-VPC routing using AWS Transit Gateway and subnet-level traffic filtering using stateless Network ACLs.
Tahmini Süre:2m 0s
Soru 82Soru

A healthcare enterprise is migrating its medical image processing pipeline to AWS. The pipeline experiences highly variable demand: it lies idle for hours, then must suddenly process thousands of high-resolution scans within minutes when clinical trials submit data. On-premises, the enterprise had to purchase and maintain a massive high-performance computing cluster sized for peak load, resulting in high idle costs. On AWS, they deploy a serverless architecture that dynamically scales to zero during idle periods and scales out instantly during peak submissions.

To resolve their capacity utilization challenge, which specific AWS Cloud benefit is the enterprise primarily leveraging?

Cevabı ve açıklamayı göster

Cevap: Stop guessing capacity

Cevap

Stop guessing capacity
The correct answer is 'Stop guessing capacity' because this benefit specifically addresses capacity management. By leveraging elasticity to scale resources up and down in response to demand, organizations no longer need to pre-provision and pay for idle resources to support peak loads, nor do they risk performance issues from under-provisioning.

Adım Adım Çözüm

1
Analyze the core problem described in the scenario.
The enterprise is dealing with highly variable demand (idle periods vs. sudden bursts) and wants to avoid paying for idle capacity while ensuring performance under peak loads.
This establishes that the primary issue is capacity management and utilization rather than initial resource provisioning speed or bulk unit pricing.
2
Evaluate the technical solution implemented on AWS.
They deploy a serverless architecture that dynamically scales down to zero and scales out instantly based on real-time demand.
This is a direct application of elasticity, which maps to the AWS Cloud benefit of not having to guess capacity needs.
3
Map the technical solution to the official six AWS Cloud benefits.
'Stop guessing capacity' is the benefit that specifically eliminates the need to pre-provision infrastructure for peak loads, preventing either expensive idle resources or capacity constraints.
While 'Trade fixed expense for variable expense' describes the payment model, the direct resolution of the capacity mismatch is described by 'Stop guessing capacity'.

Anahtar Kavram

The six benefits of the AWS Cloud, specifically the distinction between financial benefits (CapEx vs OpEx) and operational/technical capacity management (Elasticity / Stop guessing capacity).
Soru 83Soru

An enterprise is redesigning a media-processing application to run on AWS. In the legacy architecture, a single, high-capacity virtual machine hosts the queue manager, the processing application, and the media storage. In the new architecture, media files are uploaded directly to Amazon S3, which triggers an AWS Lambda function. This function saves metadata to Amazon DynamoDB and sends a message to an Amazon SQS queue. A group of Amazon EC2 instances in an Auto Scaling group pulls messages from SQS to process the media files. Which set of AWS Cloud design principles does the new architecture most directly implement?

Cevabı ve açıklamayı göster

Cevap: Loose coupling by using Amazon SQS as an asynchronous buffer, services not servers by replacing the legacy queue and database with managed AWS offerings, and disposable resources by dynamically provisioning and terminating EC2 instances using Auto Scaling.

Cevap

Loose coupling by using Amazon SQS as an asynchronous buffer, services not servers by replacing the legacy queue and database with managed AWS offerings, and disposable resources by dynamically provisioning and terminating EC2 instances using Auto Scaling.
The correct option correctly identifies three fundamental AWS Cloud design principles demonstrated in the redesign. Using Amazon SQS creates a decoupled (loosely coupled) boundary between the ingestion and processing tiers. Utilizing managed and serverless offerings like Amazon S3, AWS Lambda, and Amazon DynamoDB demonstrates the 'services not servers' principle, shifting operational responsibility to AWS. Employing Auto Scaling with EC2 instances allows resources to be treated as disposable, spinning up and down to match demand.

Adım Adım Çözüm

1
Analyze the legacy architecture to identify anti-patterns.
The legacy system uses a single virtual machine hosting everything, which is a single point of failure (tightly coupled and monolithic).
Understanding the baseline architecture helps identify the specific cloud design principles applied during the redesign.
2
Examine the role of Amazon SQS in the new architecture.
Amazon SQS acts as a buffer between the ingestion layer (Lambda/S3) and the processing layer (EC2).
This shows the implementation of loose coupling, as the front-end and back-end can scale and fail independently without blocking each other.
3
Examine the role of Amazon S3, AWS Lambda, and Amazon DynamoDB.
These are managed or serverless services where AWS handles infrastructure provisioning, scaling, and maintenance.
This implements the 'services not servers' design principle, allowing the organization to focus on application code rather than server management.
4
Examine the role of Amazon EC2 with Auto Scaling.
EC2 instances are launched and terminated automatically based on queue size (demand).
This demonstrates treating resources as disposable rather than permanent, which aligns with elasticity and disposable resources principles.

Anahtar Kavram

AWS Cloud Design Principles (Loose Coupling, Services not Servers, Disposable Resources)
Soru 84Soru

A non-profit organization plans to migrate its physical media archive to the AWS Cloud. The proposed architecture includes AWS Storage Gateway and Amazon S3 Glacier Flexible Retrieval. The organization does not have an AWS account yet and needs to estimate the monthly costs of this proposed workload for an upcoming budget review.

Which TWO of the following statements correctly describe how the AWS Pricing Calculator can assist the organization in this scenario? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: It allows the organization to estimate the monthly cost of AWS services without requiring an active AWS account or an existing deployment.; It models hypothetical resource requirements, such as S3 storage capacity and retrieval rates, to project future costs based on different configurations.

Cevap

The AWS Pricing Calculator allows the organization to estimate the monthly cost of AWS services without requiring an active AWS account or an existing deployment, and models hypothetical resource requirements, such as S3 storage capacity and retrieval rates, to project future costs based on different configurations.
The correct statements describe the core purpose of the AWS Pricing Calculator: it enables users to estimate the cost of AWS services for a proposed architecture without requiring an active AWS account, and it allows them to model hypothetical resource requirements (such as storage volumes and retrieval speeds) to project future operational costs.

Adım Adım Çözüm

1
Analyze the scenario and business requirements.
The organization has a proposed architecture (AWS Storage Gateway and S3 Glacier), does not yet have an AWS account, and needs to estimate future costs.
This establishes that the needed tool must support pre-deployment estimation without requiring account creation.
2
Identify the features of the AWS Pricing Calculator that match the requirements.
The AWS Pricing Calculator is free, web-based, does not require an active AWS account, and supports modeling configurations like storage size and data access frequencies.
This confirms that the tool can calculate hypothetical operational costs based on specific architecture parameters.
3
Differentiate the AWS Pricing Calculator from post-deployment billing and cost management tools.
AWS Cost Explorer, AWS Cost and Usage Report, and AWS Budgets are eliminated because they require active resources and account history to function.
This distinguishes between tools used for post-deployment cost tracking and those used for pre-deployment planning.

Anahtar Kavram

AWS Pricing Calculator
Soru 85Soru

A startup is launching a new customer-facing application on AWS and requires 24/7 access to technical support via phone and chat. Additionally, they need a response time of less than 1 hour if their production environment experiences a complete outage. They want to minimize costs and do not need Technical Account Manager (TAM) services. Which AWS Support plan is the most cost-effective option that meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Business Support

Cevap

Business Support
Business Support is the correct choice because it is the minimum support tier that provides 24/7 phone, email, and chat access to AWS Cloud Support Engineers, along with an SLA of under 1 hour for production system down cases, without charging for Technical Account Manager (TAM) services.

Adım Adım Çözüm

1
Analyze the customer's support requirements.
The requirements are 24/7 phone and chat technical support, under 1 hour response time for production outages, minimal cost, and no Technical Account Manager (TAM) services.
This establishes the constraints needed to filter out the incorrect support tiers.
2
Evaluate the AWS Support plans against the requirements.
Basic has no technical support. Developer has email support during business hours only. Business offers 24/7 phone/chat and a 1-hour response time SLA for production down. Enterprise On-Ramp and Enterprise include TAM services and are more expensive.
This determines the most cost-effective plan that matches all constraints.

Anahtar Kavram

AWS Support Plans features, response times, and cost-effectiveness
Soru 86Soru

An enterprise has deployed 5050 Virtual Private Clouds (VPCs) across multiple AWS accounts to segment different business units. The network administration team wants to interconnect all of these VPCs to allow full communication between them. They need a solution that acts as a centralized cloud router to simplify the routing configuration and avoid managing a complex web of individual point-to-point connections.

Which AWS service or feature should the enterprise use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Transit Gateway

Cevap

Transit Gateway
Transit Gateway is the correct choice because it acts as a centralized cloud router. It allows organizations to connect multiple VPCs and on-premises networks to a single hub, greatly simplifying network architecture and routing management as the number of VPCs grows.

Adım Adım Çözüm

1
Analyze the business and technical requirements.
The requirement is to interconnect 5050 VPCs across multiple accounts using a centralized cloud router to avoid point-to-point mesh complexity.
This establishes that we need a hub-and-spoke networking model rather than peer-to-peer connection models.
2
Evaluate the available AWS networking options against the centralized hub requirement.
Transit Gateway acts as a central regional router to simplify multi-VPC connectivity, whereas VPC Peer Connections require complex mesh management for large numbers of VPCs.
This identifies the service designed specifically to solve the scalability issues of point-to-point routing.

Anahtar Kavram

Transit Gateway simplifies network topology by acting as a centralized hub that routes traffic between multiple Virtual Private Clouds (VPCs) and on-premises networks.
Soru 87Soru

A company is planning to migrate its on-premises infrastructure to the AWS Cloud. They want to ensure they have access to a Technical Account Manager (TAM) to receive proactive operational reviews and architectural guidance. Which of the following AWS Support plans include access to a Technical Account Manager (TAM) (either as a designated resource or from a shared pool)? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Enterprise On-Ramp Support; Enterprise Support

Cevap

The correct answers are Enterprise On-Ramp Support and Enterprise Support.
Enterprise On-Ramp Support and Enterprise Support are the only AWS Support plans that provide access to a Technical Account Manager (TAM). Enterprise On-Ramp Support gives customers access to a shared pool of TAMs, while Enterprise Support provides a designated TAM who becomes a primary contact for the account's operational and architectural needs.

Adım Adım Çözüm

1
Identify the support resources required by the organization.
The organization requires access to a Technical Account Manager (TAM) for architectural and operational guidance.
This requirement narrows down the eligible support plans to those that offer TAM access.
2
Evaluate which AWS Support plans include TAM access.
Basic, Developer, and Business Support plans do not include any TAM access. Enterprise On-Ramp Support provides access to a pool of TAMs, and Enterprise Support provides a designated TAM.
By filtering out the plans without TAM access, we identify Enterprise On-Ramp Support and Enterprise Support as the correct options.

Anahtar Kavram

AWS Support Plans features, specifically Technical Account Manager (TAM) availability.
Soru 88Soru

A software development company is migrating its infrastructure to AWS. The company has existing on-premises licenses for a third-party database administration tool that they want to continue using in their new AWS environment without paying additional licensing fees. Additionally, the company wants to procure a new security monitoring tool from a different third-party vendor, but needs to negotiate custom pricing and contract terms instead of using standard list prices. Both software solutions must be billed through their consolidated AWS invoice. Which TWO AWS Marketplace features or options should the company use to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Bring Your Own License (BYOL) to deploy the existing database tool without purchasing new licenses; Seller Private Offers to purchase the security monitoring tool under custom negotiated terms and pricing

Cevap

The company should use Bring Your Own License (BYOL) to run their existing database tool licenses on AWS, and use Seller Private Offers to buy the security monitoring tool under negotiated custom pricing and terms.
The correct options are Bring Your Own License (BYOL) and Seller Private Offers. Bring Your Own License (BYOL) allows organizations to deploy third-party software in AWS using their existing on-premises software licenses, avoiding new software costs. Seller Private Offers enable customers to negotiate custom pricing, payment terms, and custom license agreements with third-party software sellers, with all charges consolidated directly into their monthly AWS invoice.

Adım Adım Çözüm

1
Analyze the requirement to run existing third-party software licenses without paying new licensing fees.
Identify Bring Your Own License (BYOL) as the feature in AWS Marketplace that supports using pre-existing licenses in the cloud.
BYOL allows customers to migrate workload licenses they already own, reducing migration costs.
2
Analyze the requirement to buy a new software product under custom negotiated pricing and terms instead of standard public list prices.
Identify Seller Private Offers as the mechanism for custom negotiations in AWS Marketplace.
Seller Private Offers allow vendors and customers to agree on custom pricing, contracts, and payment schedules.
3
Verify that both BYOL and Private Offers solutions are consolidated into the AWS monthly bill.
Confirm that AWS Marketplace consolidates all purchases into a single AWS invoice.
Consolidated billing is a fundamental feature of AWS Marketplace procurement.

Anahtar Kavram

AWS Marketplace simplifies software procurement and deployment, supporting Bring Your Own License (BYOL) for existing assets, Seller Private Offers for custom pricing negotiations, and consolidated billing.
Soru 89Soru

An organization is deploying a new containerized application on Amazon EC2 instances that must periodically write application state data to an Amazon DynamoDB table. Additionally, an external compliance auditor requires temporary read-only access to the DynamoDB table to verify data integrity. Which two configurations represent the most secure AWS-recommended practices for managing these access requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Attach an IAM role with DynamoDB write permissions to the EC2 instance profile.; Create an IAM role with a trust policy that allows the external auditor to assume it for read-only access.

Cevap

The correct configurations are attaching an IAM role with DynamoDB write permissions to the EC2 instance profile, and creating an IAM role with a trust policy that allows the external auditor to assume it for read-only access.
Attaching an IAM role to the EC2 instance profile ensures the application automatically receives temporary security credentials to write to DynamoDB without hardcoding keys. Creating an IAM role with a trust policy allows the external auditor to assume the role and obtain temporary, read-only permissions without requiring permanent credentials.

Adım Adım Çözüm

1
Determine the secure method for applications running on EC2 instances to access other AWS services.
Identify that IAM roles attached to an instance profile allow services to retrieve temporary credentials, which is more secure than hardcoding credentials.
This avoids exposing permanent access keys in the code or server configurations.
2
Determine the secure method for external third parties to access the AWS environment temporarily.
Identify that creating a role with a trust policy allows federated or cross-account users to assume that role and receive temporary, read-only access.
This prevents creating permanent IAM users or sharing sensitive administrative credentials.
3
Verify if either of the correct options corresponds to AWS management or root user tasks.
Confirm that using the root user or asking AWS to disable IAM authorization violate basic security guidelines.
AWS credentials must follow the principle of least privilege, and access control is a customer responsibility under the Shared Responsibility Model.

Anahtar Kavram

Applying the principle of least privilege and using temporary security credentials via IAM roles instead of long-term access keys or sharing root account credentials.
Soru 90Soru

A digital marketing firm is planning to migrate its analytics workload to AWS. The proposed architecture will utilize Amazon Kinesis Data Streams for data ingestion, AWS Lambda for processing, and Amazon DynamoDB for storing the results. Before provisioning these services, the finance team wants to estimate the potential monthly costs.

Which two of the following tasks can the team perform using the AWS Pricing Calculator to achieve this? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Group the estimated services into distinct logical sections to model costs for different environments, such as development and production.; Estimate the ongoing operational costs of AWS services based on hypothetical configurations and usage patterns before any resources are provisioned.

Cevap

The team can group the estimated services into distinct logical sections to model costs for different environments (such as development and production), and estimate the ongoing operational costs of AWS services based on hypothetical configurations and usage patterns before any resources are provisioned.
The AWS Pricing Calculator allows users to estimate the costs of AWS services for planned architectures based on hypothetical configurations and usage patterns before deploying any resources. Additionally, it supports organizing estimates into groups (such as environments or departments) to provide structured cost breakdowns.

Adım Adım Çözüm

1
Identify that the scenario describes a pre-deployment cost estimation requirement where no resources are currently active.
Recognize that tools tracking actual billing or historical usage (like Cost Explorer, AWS Budgets, and Cost & Usage Reports) are not applicable.
Since the workload is only proposed, no billing metrics exist yet.
2
Identify the primary tool on AWS for estimating the costs of new architectures based on expected parameters.
Select the AWS Pricing Calculator as the appropriate service.
The AWS Pricing Calculator allows users to input hypothetical parameters (e.g., Kinesis shard count, Lambda execution numbers, DynamoDB capacity) to generate estimated monthly bills.
3
Identify features of the AWS Pricing Calculator that support the company's organizational needs.
Select the ability to group services logically (e.g., by dev/prod environment) and calculate costs based on hypothetical configurations.
These capabilities allow the team to represent their architecture accurately in groups and obtain fine-grained pre-deployment estimates.

Anahtar Kavram

AWS Pricing Calculator features and capabilities for pre-deployment cost estimation.
Soru 91Soru

A software-as-a-service (SaaS) provider needs to periodically analyze resource configurations stored in an Amazon S3 bucket within a customer's AWS account. The customer wants to grant this access to the provider's AWS account securely without creating or exchanging permanent IAM credentials. Which of the following is the AWS-recommended best practice to achieve this?

Cevabı ve açıklamayı göster

Cevap: Create an IAM role with a trust policy that allows the provider's AWS account to assume it, and attach a permissions policy that grants read-only access to the S3 bucket.

Cevap

Create an IAM role with a trust policy that allows the provider's AWS account to assume it, and attach a permissions policy that grants read-only access to the S3 bucket.
The most secure method is to create an IAM role in the customer's account that trusts the provider's AWS account. This role has a trust policy allowing the provider to assume it and a permissions policy that grants read-only S3 access. This setup uses short-lived, temporary security credentials and avoids the exchange of long-term credentials.

Adım Adım Çözüm

1
Identify the security requirement for cross-account resource access without long-term credentials.
Determine that temporary credentials and delegation of access to an external AWS account are required.
AWS recommends delegating access using temporary security credentials (IAM roles) rather than sharing permanent access keys or root credentials.
2
Create an IAM role in the trusting account (the customer's account).
An IAM role is defined with a trust policy specifying the trusted entity (the SaaS provider's AWS account ID) and a permissions policy allowing read-only access to the S3 bucket.
The trust policy enables the external account to assume the role, while the permissions policy enforces the principle of least privilege.
3
Allow the external provider to assume the role.
The SaaS provider assumes the role using AWS Security Token Service (STS) to obtain short-lived credentials for S3 access.
This eliminates the need to manage, rotate, or risk leaking long-term credentials.

Anahtar Kavram

IAM Roles for cross-account access provide a secure way to grant third-party entities access to AWS resources using temporary security credentials instead of sharing long-term IAM user credentials or root account details.
Soru 92Soru

Veridian Dynamics is planning to migrate its legacy on-premises customer relationship management (CRM) system to the cloud. The company decides to decommission the legacy system and purchase a modern Software as a Service (SaaS) CRM platform from the AWS Marketplace. Which migration strategy does this scenario represent?

Cevabı ve açıklamayı göster

Cevap: Repurchasing

Cevap

Repurchasing
The scenario describes repurchasing, which is a migration strategy where a company decides to replace its existing legacy system by purchasing a Software as a Service (SaaS) solution, often from the AWS Marketplace.

Adım Adım Çözüm

1
Analyze the scenario and identify the migration action taken.
The company is replacing its legacy customer relationship management (CRM) software by purchasing a Software as a Service (SaaS) solution.
Determining the migration mechanism (replace vs. shift vs. rewrite) is the first step in classifying the migration strategy.
2
Map the action to one of the 6 Rs of migration strategies.
Purchasing a SaaS solution to replace a legacy workload maps to the Repurchasing strategy.
Repurchasing is defined as moving to a different product, typically a SaaS platform.

Anahtar Kavram

Repurchasing migration strategy
Soru 93Soru

A media streaming company is preparing for an audit and needs to verify that the underlying AWS infrastructure complies with payment card industry and international security standards. Which AWS service provides the company with on-demand access to AWS security and compliance reports?

Cevabı ve açıklamayı göster

Cevap: AWS Artifact

Cevap

AWS Artifact provides on-demand access to AWS security and compliance reports.
AWS Artifact is a self-service portal that provides customers with free, on-demand access to AWS's security and compliance reports (such as SOC and PCI reports) and select online agreements.

Adım Adım Çözüm

1
Identify the requirement of accessing third-party compliance reports (such as PCI or ISO) for AWS infrastructure.
The company needs a portal where AWS publishes its own compliance documentation.
AWS is responsible for the security of the cloud, and customers need official audit reports to verify this compliance.
2
Select the correct AWS service that acts as a self-service portal for compliance documentation.
AWS Artifact is identified as the service designed specifically for retrieving these documents.
AWS Artifact allows customers to download SOC, PCI, and ISO compliance reports directly from the AWS Management Console.

Anahtar Kavram

AWS Artifact is the primary portal for retrieving AWS compliance reports and agreements.
Soru 94Soru

A biotechnology startup is developing a drug discovery platform that runs heavy genomic sequencing simulations. These workloads run for only a few days each month, requiring hundreds of compute instances, but the platform requires almost no resources for the rest of the month. Additionally, the startup must make the platform available to research teams in both North America and Europe with low latency.

Which of the following benefits of the AWS Cloud directly address this startup's requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Trade capital expense for variable expense; Go global in minutes

Cevap

Trading capital expense for variable expense, and going global in minutes are the correct AWS Cloud benefits for this scenario.
The requirement to run heavy workloads only a few days a month without purchasing hardware aligns with the benefit of trading capital expense for variable expense, allowing the company to pay only for the resources they use. The requirement to deploy the platform to users in both North America and Europe with low latency is addressed by the benefit of going global in minutes, which enables rapid multi-region deployment.

Adım Adım Çözüm

1
Analyze the business requirements from the scenario.
The startup needs to run high-compute workloads for only a few days a month without buying hardware, and needs to serve global users in North America and Europe with low latency.
Identifying specific requirements helps map them to corresponding cloud benefits.
2
Map the requirement of avoiding upfront hardware costs for periodic workloads to the correct AWS benefit.
This maps to 'trading capital expense for variable expense' since the startup pays only for what they consume.
The startup avoids large upfront CapEx by using variable OpEx.
3
Map the requirement of serving international users with low latency to the correct AWS benefit.
This maps to 'go global in minutes' since resources can be deployed in multiple global AWS Regions rapidly.
AWS infrastructure spanning multiple regions allows deployment close to target users worldwide.

Anahtar Kavram

AWS Cloud Benefits (specifically trading capital expense for variable expense, and going global in minutes)
Tahmini Süre:1m 30s
Soru 95Soru

A municipality is deploying a smart parking system that collects sensor data using Amazon EC2 instances located in a private subnet. The network engineering team must design a security controls strategy to govern inbound and outbound traffic at both the subnet boundary and the instance level. Which two of the following statements correctly describe the behavior of the security components needed for this architecture?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Security groups operate at the instance level and are stateful, meaning that return traffic is automatically allowed regardless of outbound rules.; Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless, meaning that outbound rules must explicitly allow return traffic for allowed inbound requests.

Cevap

Security groups operate at the instance level and are stateful, meaning that return traffic is automatically allowed regardless of outbound rules; and Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless, meaning that outbound rules must explicitly allow return traffic for allowed inbound requests.
The correct answers identify that Security Groups operate at the instance level and are stateful, and Network ACLs operate at the subnet level and are stateless. In a stateful security group, return traffic is automatically allowed. In a stateless Network ACL, outbound rules must be explicitly configured to allow the return traffic.

Adım Adım Çözüm

1
Evaluate the traffic management requirements at the instance level.
Determine that security groups are evaluated at the instance level and are stateful, meaning that return traffic is automatically permitted.
Security groups act as a firewall at the network interface level for EC2 instances, and their stateful nature ensures established connections do not need symmetric rules.
2
Evaluate the traffic management requirements at the subnet boundary level.
Determine that Network ACLs are evaluated at the subnet level and are stateless, meaning that inbound and outbound rules are processed independently.
Network ACLs act as a boundary firewall for the entire subnet, and because they are stateless, return traffic must be explicitly allowed by a corresponding outbound rule.

Anahtar Kavram

The stateful behavior of Security Groups at the instance level versus the stateless behavior of Network ACLs at the subnet level.
Soru 96Soru

A media company is migrating its sports analytics platform to AWS. The platform experiences intense, unpredictable traffic surges during live sporting events, which last for a few hours, followed by long periods of inactive user traffic. To manage costs, the operations team configures the system to automatically provision additional compute instances as traffic rises, and automatically terminate those instances as soon as the event ends and traffic subsides.

Which AWS Cloud design principle is directly demonstrated by this design, and how does it distinctively differ from scalability?

Cevabı ve açıklamayı göster

Cevap: Elasticity, which focuses on the dynamic matching of resource supply to fluctuating demand, including the automatic reduction of capacity during low-traffic periods to optimize cost.

Cevap

Elasticity, which focuses on the dynamic matching of resource supply to fluctuating demand, including the automatic reduction of capacity during low-traffic periods to optimize cost.
The correct answer is the choice describing elasticity. Elasticity is the design principle that refers to matching resource supply directly to fluctuating demand, enabling automatic resource expansion and contraction to minimize cost. Scalability is the ability to handle increased load but does not focus on shrinking capacity to save costs.

Adım Adım Çözüm

1
Analyze the workload pattern.
The platform experiences brief, unpredictable traffic spikes during events, followed by long idle periods.
Understanding traffic patterns is necessary to determine the appropriate resource management strategy.
2
Identify the primary operational and cost goals.
The goal is to automatically add capacity during surges and remove capacity when idle to reduce costs.
Selecting a design principle requires aligning the technical solution with the business goals of cost efficiency and availability.
3
Differentiate between elasticity and scalability.
Elasticity dynamically scales capacity up and down to match demand, while scalability is the ability to scale up/out to handle growth.
This distinction ensures that the correct AWS principle is identified for dynamic contraction of resources.

Anahtar Kavram

AWS Cloud design principles focus on elasticity to match resources to demand dynamically, helping to optimize costs compared to traditional, statically provisioned infrastructure.
Soru 97Soru

A company plans to migrate its legacy on-premises relational database to AWS. The IT team wants to minimize administrative tasks such as operating system patching, database software patching, and storage provisioning. At the same time, the database administrators still need to manage database schemas and customize database engine parameters. Which AWS service should the company use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon RDS

Cevap

Amazon RDS
Amazon Relational Database Service (Amazon RDS) is a fully managed service that offloads administrative tasks such as hardware provisioning, database setup, patching, and backups, while allowing database administrators to retain control over schemas and engine parameter settings.

Adım Adım Çözüm

1
Identify the type of source database and administrative requirements.
The source database is relational, and the company wants to minimize infrastructure administration (patching, backups, provisioning) while maintaining control over schemas and database parameters.
This helps filter services based on the relational model and the level of management required.
2
Compare candidate AWS services against the management and relational requirements.
Amazon RDS automates infrastructure management (patching, backups) but allows schema and parameter control. Amazon EC2 requires self-management of patching. Amazon DynamoDB is NoSQL and does not support relational engines. AWS Elastic Beanstalk is a deployment platform.
This determines the optimal service that satisfies all constraints with the least overhead.

Anahtar Kavram

Managed relational database services on AWS
Tahmini Süre:1m 0s
Soru 98Soru

A logistics company is updating its operational workflows and has two new requirements:

First, an administrator needs to write shell scripts to automate the backup of local log files to Amazon S3 every night.
Second, a developer needs to write a custom application that programmatically creates Amazon DynamoDB tables from within Go application code.

Which of the following AWS deployment and operating methods are most appropriate to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Command Line Interface (CLI); AWS Software Development Kit (SDK)

Cevap

AWS Command Line Interface (CLI) and AWS Software Development Kit (SDK)
The AWS Command Line Interface (AWS CLI) is the most suitable tool for administrative tasks automated via shell scripts, such as scheduled daily file uploads to Amazon S3. The AWS Software Development Kit (AWS SDK) is the correct choice for developers who need to interact with AWS services programmatically using code libraries in languages like Go, Java, or Python.

Adım Adım Çözüm

1
Analyze the first requirement to determine the best interaction method for shell scripting and automation of S3 backups.
The AWS Command Line Interface (CLI) is identified as the tool designed for shell scripting and executing commands directly from a terminal.
Shell scripts interact with AWS services via commands, which is the primary use case of the AWS CLI.
2
Analyze the second requirement to determine the best method for programmatically interacting with AWS services from inside custom Go application code.
The AWS Software Development Kit (SDK) is identified as the tool providing language-specific libraries (like Go) for application code integration.
Developers use SDKs to write application logic that creates, manages, or uses AWS resources programmatically.

Anahtar Kavram

AWS Deployment and Operating Methods (Console, CLI, SDK, CloudFormation)
Tahmini Süre:1m 30s
Soru 99Soru

A business wants to move two distinct workloads to the AWS Cloud:

1. A legacy system that requires direct access to the operating system to install custom software and configure low-level settings.
2. A lightweight background task that runs for only a few seconds to resize images whenever customers upload them.

Which two AWS compute services should the business select to host these workloads? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Compute Cloud (Amazon EC2) to host the legacy system, providing full control over the guest operating system; AWS Lambda to run the short image-resizing tasks when images are uploaded

Cevap

Amazon Elastic Compute Cloud (Amazon EC2) and AWS Lambda
Amazon Elastic Compute Cloud (Amazon EC2) is correct for the legacy workload because it provides virtual machines where users have complete administrative control over the guest operating system, which is required for custom installations. AWS Lambda is correct for the image-resizing workload because it is a serverless, event-driven compute service designed to run code for short durations in response to events (like file uploads) without provisioning or managing servers.

Adım Adım Çözüm

1
Analyze the legacy workload requirement of direct access to the operating system for custom configuration.
Identify that virtual machines like Amazon Elastic Compute Cloud (Amazon EC2) provide full administrative control over the guest operating system, whereas container or serverless platforms do not.
To ensure the legacy application can be installed and configured at the OS level.
2
Analyze the image-resizing workload requirement of running for a few seconds in response to uploads.
Identify that AWS Lambda is an event-driven, serverless service that executes code in response to triggers and only runs for the duration of the task, offering high efficiency.
To minimize management overhead and costs for short-lived, event-driven tasks.

Anahtar Kavram

Selecting the appropriate AWS compute services based on operational control and workload duration.
Soru 100Soru

A retail corporation is planning to migrate its transaction processing database to AWS. Currently, the database runs on on-premises proprietary servers that must be replaced every 33 years at a high upfront cost. The servers are sized to handle peak traffic during holiday sales, meaning they run at less than 15%15\% utilization for the remainder of the year. Which of the following actions best demonstrates how the company can leverage AWS cloud economics to resolve their capacity utilization and hardware funding challenges?

Cevabı ve açıklamayı göster

Cevap: Adopting a pay-as-you-go model with auto-scaling resources that match database capacity to real-time consumer demand, thereby shifting hardware costs to variable operating expenses.

Cevap

Adopting a pay-as-you-go model with auto-scaling resources that match database capacity to real-time consumer demand, thereby shifting hardware costs to variable operating expenses.
Adopting a pay-as-you-go model with auto-scaling database resources allows the company to pay only for the capacity they use, transitioning their high upfront physical hardware costs into variable operating expenses (OpEx) while automatically scaling down during off-peak times.

Adım Adım Çözüm

1
Analyze the existing infrastructure challenges and requirements.
The retail company has high upfront capital expenses (hardware refresh every three years) and low utilization (under fifteen percent for ten months of the year) due to sizing hardware for peak demand.
Understanding the current financial and operational bottlenecks helps identify the relevant cloud economics solutions.
2
Identify the cloud economics principle that replaces upfront physical hardware purchasing.
Shifting from Capital Expenditures (CapEx) to Operating Expenditures (OpEx) allows paying only for resources used.
This shift addresses the high cost of the periodic physical hardware refresh cycles.
3
Determine the cloud capability needed to solve the low utilization issue.
Elasticity and auto-scaling dynamically match capacity to real-time demand.
Elasticity ensures the company does not pay for idle capacity during off-peak months.
4
Select the strategy that combines both CapEx-to-OpEx shift and elasticity.
Adopting a pay-as-you-go model with auto-scaling database resources.
This strategy eliminates upfront hardware refresh costs while dynamically scaling resources to match consumer demand, optimizing overall costs.

Anahtar Kavram

Understand concepts of cloud economics
ÖncekiSayfa 5 / 74Sonraki
Tüm alıştırma soruları — AWS Certified Cloud Practitioner | Examkin