Tüm alıştırma soruları

1473 soru

Soru 1041Soru

A data analytics company runs a high-performance transaction processing application on a single Amazon EC2 instance. The application requires a temporary block storage volume to serve as a high-speed buffer and scratch space. This volume must provide the lowest possible I/O latency and high throughput. The data is temporary, replicated at the application layer, and does not need to persist if the instance is stopped or terminated. Which AWS storage option best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon EC2 Instance Store

Cevap

Amazon EC2 Instance Store
The correct answer is Amazon EC2 Instance Store because it provides block-level storage physically attached to the host computer. This physical attachment delivers the lowest possible latency and high random I/O performance required for buffers and scratch space. Since the data is temporary and does not need to persist past the lifetime of the instance, the ephemeral nature of the instance store is fully acceptable.

Adım Adım Çözüm

1
Analyze the storage type requirement
The application requires block storage to act as a high-speed buffer and scratch space, ruling out object storage (Amazon S3) and shared file storage (Amazon EFS).
Scratch space for databases requires local block-level block access for raw read/write operations.
2
Analyze the latency and persistence requirements
The application needs the lowest possible latency and does not require the data to persist when the instance is stopped or terminated.
Evaluating whether persistent network-attached storage (Amazon EBS) or temporary host-attached storage (Amazon EC2 Instance Store) is optimal.
3
Select the optimal AWS storage service
Amazon EC2 Instance Store is physically attached to the host, offering lower latency than network-attached EBS, and its ephemeral nature matches the application's tolerance for data loss.
Choosing the service that matches the physical proximity and persistence characteristics required by the scenario.

Anahtar Kavram

AWS Storage Services
Tahmini Süre:2m 0s
Soru 1042Soru

A financial services company is optimizing the deployment costs for two newly migrated workloads on Amazon EC2. The first workload is a real-time trading API that experiences sudden, sharp spikes in demand during market hours. The API cannot tolerate any service interruptions or latency increases, and the capacity requirement during non-trading hours is negligible. The second workload is a batch risk-modeling simulation that runs nightly, requires hundreds of vCPUs, is designed to tolerate interruptions by saving state, and must be completed at the lowest possible cost.

Which of the following EC2 pricing models should the company combine to achieve the most cost-effective solution for both workloads? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: On-Demand Instances to handle the sudden, unpredictable scaling demands of the trading API; Spot Instances for the fault-tolerant, nightly batch risk-modeling simulation

Cevap

The company should combine On-Demand Instances to handle the sudden, unpredictable scaling demands of the trading API and Spot Instances for the fault-tolerant, nightly batch risk-modeling simulation.
The correct combination consists of On-Demand Instances and Spot Instances. On-Demand Instances provide uninterrupted compute capability without long-term commitments, which matches the trading API's strict SLAs and unpredictable spike patterns. Spot Instances offer the deepest discounts (up to 90%) for the nightly batch risk-modeling simulation, which is designed to tolerate interruptions by saving state.

Adım Adım Çözüm

1
Analyze the trading API workload requirements.
The trading API requires immediate capacity during market hours, experiences unpredictable spikes, cannot tolerate interruptions, and has near-zero usage off-hours.
Identifying these traits helps eliminate options that involve long-term commitments for idle capacity or interruptible models.
2
Select the optimal pricing model for the trading API.
On-Demand Instances are chosen because they offer zero risk of interruption and charge only for active compute time with no long-term commitment.
This guarantees performance SLAs while keeping costs aligned to actual spiky usage patterns.
3
Analyze the nightly batch simulation workload requirements.
The nightly batch simulation requires high compute capacity (hundreds of vCPUs), runs for a short duration nightly, is designed to save state and tolerate interruptions, and prioritizes lowest cost.
These characteristics point toward leveraging AWS spare capacity discount models.
4
Select the optimal pricing model for the batch simulation.
Spot Instances are chosen because they offer the lowest cost (up to 90% discount) for interruptible, fault-tolerant batch workloads.
This minimizes the cost of massive parallel compute while accommodating the potential for instance reclamation.

Anahtar Kavram

Selecting the most cost-effective EC2 pricing models based on workload predictability, tolerance to interruption, and duration.
Soru 1043Soru

A company wants to distribute its web application content globally with minimal delay. To achieve this, the company needs to understand the role of different AWS infrastructure components.

Which of the following are key characteristics of AWS Edge Locations? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: They are used by Amazon CloudFront to cache content closer to end users.; They help reduce latency for global users by delivering content from nearby sites.

Cevap

AWS Edge Locations are used by Amazon CloudFront to cache content closer to end users, helping to reduce latency for global users by delivering content from nearby sites.
The correct answers state that Edge Locations are used by Amazon CloudFront to cache content closer to end users and that they help reduce latency for global users by delivering content from nearby sites. These two characteristics define the fundamental role of Edge Locations within the AWS Global Infrastructure.

Adım Adım Çözüm

1
Identify the primary purpose of AWS Edge Locations.
Edge Locations are cache endpoints used by Amazon CloudFront to store copies of files closer to global users.
This allows requests to be served from the nearest location rather than fetching them from the origin server every time.
2
Analyze each option to see if it describes AWS Edge Locations or another AWS infrastructure component.
The options describing Amazon CloudFront caching and reducing latency for global users are correct. The options describing isolated data centers, data sovereignty boundaries, and hosting database instances describe Availability Zones and AWS Regions.
This filters out the incorrect infrastructure roles (Regions and Availability Zones) and confirms the correct characteristics of Edge Locations.

Anahtar Kavram

AWS Edge Locations and Content Delivery
Soru 1044Soru

A startup company wants to track and audit all user activity and API actions across their AWS infrastructure for compliance purposes. Which AWS service should the company use to record this activity?

Cevabı ve açıklamayı göster

Cevap: AWS CloudTrail

Cevap

AWS CloudTrail
AWS CloudTrail logs and monitors account activity, providing a complete history of API calls made through the AWS Management Console, AWS SDKs, and command line tools, which is essential for compliance and auditing.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario, which is to track and audit user activity and API actions for compliance.
The target service must support auditing, governance, and logging of API transactions.
This distinguishes auditing services from deployment or performance monitoring services.
2
Select the service that logs AWS API calls.
AWS CloudTrail records AWS API calls and user activity, enabling security analysis, resource change tracking, and compliance auditing.
AWS CloudTrail is the core service designed for capturing account-wide user activity history.

Anahtar Kavram

AWS CloudTrail is the dedicated service for tracking user activity and API calls to enable auditing and compliance, while Amazon CloudWatch focuses on performance monitoring.
Tahmini Süre:45s
Soru 1045Soru

An organization wants to minimize its operational overhead by deploying applications using serverless compute services on AWS, where they do not need to manage or patch virtual servers. Which of the following AWS compute services are serverless? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Lambda; AWS Fargate

Cevap

AWS Lambda and AWS Fargate are the correct serverless compute services.
AWS Lambda and AWS Fargate are both serverless compute services. AWS Lambda runs code in response to events and automatically manages the underlying compute resources. AWS Fargate is a serverless compute engine for containers, which runs containers without the customer needing to provision or manage virtual machines.

Adım Adım Çözüm

1
Identify the requirement for serverless compute services where the customer does not need to manage or patch virtual servers.
We need to filter the options to find services where AWS manages the underlying infrastructure, operating system, and physical hardware completely.
Serverless services offload the operational burden of server management, including provisioning, scaling, and patching, to AWS.
2
Evaluate each option against the serverless criteria.
AWS Lambda runs code on a high-availability compute infrastructure and handles all administration. AWS Fargate runs containers without requiring you to provision or manage EC2 instances. Amazon EC2, Amazon Lightsail, and AWS Elastic Beanstalk all involve customer management of underlying virtual servers.
This identifies AWS Lambda and AWS Fargate as the correct choices.

Anahtar Kavram

AWS Serverless Compute Services
Tahmini Süre:45s
Soru 1046Soru

A university IT department is setting up its AWS environment. The administrator needs to configure permissions for two scenarios: first, allowing an Amazon EC2 instance to securely write logs to an Amazon CloudWatch Logs stream; second, organizing access for ten lab students who all require identical read-only permissions to Amazon S3. Which of the following IAM solutions represent AWS best practices for these scenarios? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Attach an IAM role to the Amazon EC2 instance to grant the required CloudWatch Logs write permissions.; Place the ten lab student IAM users into an IAM group and attach a managed S3 read-only policy to that group.

Cevap

Attaching an IAM role to the EC2 instance for CloudWatch permissions, and placing the lab students into an IAM group with a managed S3 read-only policy attached to the group.
The correct options recommend attaching an IAM role to the EC2 instance and placing the lab students into an IAM group. Using IAM roles for EC2 instances allows them to securely access other AWS services using temporary credentials without storing permanent credentials. Placing users with identical access requirements into an IAM group allows permissions to be managed collectively, adhering to operational efficiency.

Adım Adım Çözüm

1
Analyze the EC2 logging scenario to determine the secure way to grant permissions to AWS resources.
Identify that applications running on EC2 instances require temporary security credentials, which are securely provided using IAM roles rather than permanent access keys.
This aligns with the best practice of avoiding hardcoded long-term credentials.
2
Analyze the student access scenario to identify the most efficient way to manage identical permissions for multiple users.
Determine that placing the users in an IAM group and attaching the S3 read-only policy to the group is the recommended operational practice.
This simplifies permission management and ensures consistency across all identical users.

Anahtar Kavram

AWS IAM Best Practices for Access Management (Roles and Groups)
Soru 1047Soru

A media company is setting up a video processing pipeline on AWS and requires two types of storage:

First, a cost-effective storage class to archive finished projects for compliance. The archives will be rarely accessed, and a retrieval time of up to 12 hours is acceptable.

Second, a temporary scratch space for active video rendering on a single Amazon EC2 instance. This space must deliver the lowest possible latency and highest random I/O performance, but the data does not need to persist when the instance is stopped or terminated.

Which two AWS storage options should the company select to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon S3 Glacier Deep Archive; Amazon EC2 Instance Store

Cevap

Amazon S3 Glacier Deep Archive and Amazon EC2 Instance Store
Amazon S3 Glacier Deep Archive is the most cost-effective solution for archival storage where a 12-hour retrieval time is acceptable. Amazon EC2 Instance Store is ideal for temporary scratch storage because it is physically attached to the host computer, offering low-latency, high-speed random I/O at no additional cost, while automatically deleting the data when the instance stops or terminates.

Adım Adım Çözüm

1
Identify the storage requirements for archiving footage.
The footage is rarely accessed, requires the lowest cost, and can tolerate a 12-hour retrieval window, matching the characteristics of Amazon S3 Glacier Deep Archive.
This maps the business constraints to the most economical long-term archival tier.
2
Identify the storage requirements for active video rendering.
The rendering requires temporary scratch space on a single EC2 instance with high performance, ultra-low latency, and no persistence after the instance stops, matching the characteristics of Amazon EC2 Instance Store.
This maps the performance and durability requirements to the correct block storage type.

Anahtar Kavram

Selecting the correct AWS storage services based on access frequency, performance, durability, and cost requirements.
Soru 1048Soru

A financial services startup is launching a mobile application and has two specific server requirements:

* The primary transaction processing API layer, which runs continuously and has a predictable baseline CPU utilization that will not change over the next year.
* An analytics job that runs nightly for 2 hours, performing data transformation. This job is stateless, fault-tolerant, and can be terminated mid-run and retried the next night without data loss.

Which two Amazon EC2 pricing models should the startup select to achieve the most cost-effective solution for these workloads? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Savings Plans to run the continuous, predictable transaction processing API layer; Spot Instances to run the fault-tolerant, stateless nightly analytics jobs

Cevap

The startup should select Savings Plans for the continuous, predictable transaction processing API layer, and Spot Instances for the fault-tolerant, stateless nightly analytics jobs.
The correct choices are Savings Plans for the transaction API layer and Spot Instances for the nightly analytics jobs. Savings Plans offer substantial discounts for predictable, continuous compute usage over a 1-year or 3-year term, making them ideal for the API layer. Spot Instances offer the highest discounts for workloads that are flexible, fault-tolerant, and can tolerate interruptions, which perfectly fits the stateless nightly analytics jobs.

Adım Adım Çözüm

1
Analyze the first workload requirement (transaction API layer).
The API runs continuously (24/7) with a predictable baseline for at least a year.
For predictable, long-term continuous workloads, committing to a Savings Plan or Reserved Instances provides a significant discount compared to On-Demand pricing.
2
Analyze the second workload requirement (analytics job).
The job runs nightly for 2 hours, is stateless, fault-tolerant, and can be terminated mid-run and retried.
Since the job can tolerate interruptions and runs briefly, Spot Instances are the most cost-effective choice, offering up to 90% off On-Demand rates without any long-term commitment.
3
Evaluate the options and identify the correct combination.
The correct selections are the options proposing Savings Plans for the API layer and Spot Instances for the nightly analytics jobs.
Other combinations either introduce high costs (using On-Demand for baseline API, or Reserved Instances for 2-hour daily jobs) or risk service disruption (using Spot Instances for the critical transactional API).

Anahtar Kavram

Selecting optimal AWS EC2 pricing models based on workload predictability, duration, and fault tolerance.
Tahmini Süre:2m 0s
Soru 1049Soru

A retail company is migrating its containerized order-processing application to AWS. The development team needs to deploy Docker containers but wants a serverless approach where they do not have to provision, scale, or patch the underlying virtual servers. Which AWS compute option should the company use?

Cevabı ve açıklamayı göster

Cevap: AWS Fargate

Cevap

AWS Fargate
AWS Fargate is the correct choice because it is a serverless compute engine for containers. It works with Amazon ECS to manage and run containerized workloads without requiring the user to manage, scale, or patch the underlying virtual machine instances.

Adım Adım Çözüm

1
Identify the key workload requirements from the scenario.
The workload is containerized (Docker), needs serverless scaling, and requires no management of underlying virtual servers (no provisioning, scaling, or patching).
This narrows down the AWS compute options to container-focused and serverless services.
2
Evaluate the available compute options against the requirements.
AWS Fargate allows running Docker containers without provisioning or managing virtual machines. Amazon EC2 requires manual VM management and OS patching. AWS Lambda is for event-driven code execution, not persistent container hosting. Amazon Lightsail requires managing virtual private servers.
By process of elimination and direct mapping, the serverless container option is selected.

Anahtar Kavram

Serverless container compute engine
Tahmini Süre:1m 0s
Soru 1050Soru

An online travel agency is migrating its booking application to AWS. The agency must ensure that customer passport numbers are encrypted at rest using encryption keys managed by the customer, and that database backups are securely stored. Under the AWS shared responsibility model, which of the following are responsibilities of the customer for protecting this data? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Defining key policies and rotation schedules for Customer Managed Keys (CMKs) in AWS Key Management Service (AWS KMS); Enabling server-side encryption on the storage services used for storing database backups

Cevap

The customer is responsible for defining key policies and rotation schedules for Customer Managed Keys (CMKs) in AWS KMS, and enabling server-side encryption on the storage services used for storing database backups.
Under the AWS shared responsibility model, the customer is responsible for security 'in' the cloud, which includes configuring data encryption at rest (such as enabling server-side encryption on backup storage) and managing key access policies and rotation schedules for Customer Managed Keys (CMKs) within AWS Key Management Service (AWS KMS).

Adım Adım Çözüm

1
Differentiate between customer responsibilities (security 'in' the cloud) and AWS responsibilities (security 'of' the cloud) regarding data protection.
Identify that managing key configurations and enabling encryption settings on storage services are customer duties, whereas physical security and hardware retirement are AWS duties.
To classify each option according to the AWS Shared Responsibility Model.
2
Evaluate the management boundaries of AWS KMS key types and AWS CloudHSM.
Determine that standard AWS-managed keys cannot be managed within a dedicated AWS CloudHSM cluster, which is a single-tenant hardware solution.
To eliminate incorrect options regarding key management infrastructure integrations.

Anahtar Kavram

AWS Shared Responsibility Model for Data Encryption and Key Management
Soru 1051Soru

AgriSense IoT, an agricultural technology startup, is migrating its soil analysis platform from an on-premises data center to the AWS Cloud. The platform processes continuous sensor data from farms and experiences massive surges in analytical workloads during the spring and autumn harvesting seasons, with minimal activity during winter. Which two of the following represent the direct cloud economic benefits of this migration? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Trading upfront capital expenses (CapEx) for variable operating expenses (OpEx), paying only for compute capacity when analytical jobs are running.; Lowering the total cost of ownership (TCO) by leveraging elasticity to scale down resources during low-demand winter months.

Cevap

Trading upfront capital expenses (CapEx) for variable operating expenses (OpEx), and lowering the total cost of ownership (TCO) by leveraging elasticity.
Migrating to AWS allows AgriSense IoT to trade capital expenses (CapEx) for operating expenses (OpEx), paying only for what they consume during peak harvesting seasons. Furthermore, by using elasticity, they can scale down resources during low-demand winter months, reducing idle resource costs and lowering their total cost of ownership (TCO).

Adım Adım Çözüm

1
Analyze the workload characteristics of AgriSense IoT.
The workload consists of continuous baseline sensor data collection alongside highly variable, seasonal analytical jobs.
Understanding the workload pattern determines which AWS pricing models and economic benefits apply.
2
Evaluate the shift in financial models (CapEx vs OpEx).
AgriSense IoT shifts from purchasing and maintaining physical servers (CapEx) to paying dynamically for AWS services as they are consumed (OpEx).
This is a core pillar of AWS cloud economics, allowing businesses to optimize cash flow.
3
Evaluate the application of elasticity for seasonal demand.
By using AWS elasticity, the company can shrink infrastructure capacity during low-demand winter months.
Scaling down resources when they are not in use minimizes wasted capacity and reduces the total cost of ownership (TCO).

Anahtar Kavram

AWS cloud economics centers on trading fixed capital expenses for variable operating expenses and using elasticity to align capacity with demand, thereby reducing the total cost of ownership.
Soru 1052Soru

A company hosts a payroll processing portal on Amazon EC2 instances inside a virtual private cloud (VPC). The security administrator needs to permit inbound HTTPS traffic on port 443 from a specific corporate office IP address range. The administrator wants the return traffic from the EC2 instances back to the corporate office to be permitted automatically without needing to define any outbound rules. Which AWS resource or feature should the administrator configure to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Security groups associated with the EC2 instances

Cevap

Security groups associated with the EC2 instances
The correct answer is the option focusing on security groups associated with the EC2 instances. Security groups are stateful firewalls that operate at the instance level. Because they are stateful, any permitted inbound traffic automatically allows the return response traffic to flow back, eliminating the need to write a corresponding outbound rule.

Adım Adım Çözüm

1
Analyze the requirement for automatic return traffic permission without explicit outbound rules.
Determined that the firewall mechanism must be stateful.
Stateful firewalls automatically allow response traffic for any established inbound connection.
2
Evaluate the stateful and stateless properties of AWS network security features.
Identified that Security Groups are stateful and operate at the instance level, whereas Network ACLs are stateless and operate at the subnet level.
This determines which configuration meets the automatic return traffic requirement.
3
Select the appropriate resource based on responsibility and firewall characteristics.
Security groups associated with the EC2 instances is the correct resource, as configuration of instance firewalls falls under the customer's responsibility.
Security groups satisfy both the technical stateful requirement and the shared responsibility model rules.

Anahtar Kavram

Security groups are stateful firewalls that control inbound and outbound traffic for Amazon EC2 instances, automatically allowing return traffic for any permitted inbound connection.
Soru 1053Soru

A research institution is deploying an application that performs complex simulations. The application must run on a customized Linux kernel configuration and requires administrative root-level access to configure local storage drives. Which AWS compute service should the institution select to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Compute Cloud (Amazon EC2)

Cevap

Amazon Elastic Compute Cloud (Amazon EC2)
Amazon Elastic Compute Cloud (Amazon EC2) provides resizable virtual servers (instances) in the cloud. It grants the user complete administrative control, which includes root-level access to the operating system, the capability to customize the kernel configuration, and direct management of attached storage volumes.

Adım Adım Çözüm

1
Identify the workload requirements: the application needs customized Linux kernel configurations and root-level administrative access to configure local storage drives.
The application requires a compute service that offers full administrative control over the operating system and virtual hardware.
This determines the required level of control and responsibility under the AWS Shared Responsibility Model.
2
Evaluate the management and control levels of AWS compute options (Lambda, Fargate, Lightsail, EC2).
Serverless options like Lambda and Fargate manage and abstract the OS. Lightsail offers simplified virtual servers but restricts advanced OS/kernel configurations. Only Amazon EC2 offers complete root-level control.
Matching workload needs to the appropriate management tier ensures all technical prerequisites are met.
3
Select the service that allows custom OS and kernel settings.
Amazon EC2 is selected as the correct compute service.
Amazon EC2 provides virtual servers where the user is responsible for managing the operating system, including kernel modifications.

Anahtar Kavram

Levels of control and management across AWS compute services
Tahmini Süre:1m 0s
Soru 1054Soru

A logistics company wants to track its current AWS spending. The company needs to set up alerts to notify the team when monthly costs exceed a predefined threshold, and they also want to view graphs of their service costs over the past three months to identify spending trends.

Which of the following AWS Billing and Cost Management tools should the company use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Budgets; AWS Cost Explorer

Cevap

AWS Budgets and AWS Cost Explorer are the correct tools.
AWS Budgets is designed to create alerts when cost or usage metrics exceed a user-defined threshold, helping control cloud spend proactively. AWS Cost Explorer provides the visualization tools needed to examine historical usage patterns and trends over the preceding months.

Adım Adım Çözüm

1
Identify the need for proactive threshold-based notifications.
The company needs a tool to set up alerts when spending exceeds thresholds. This is a core feature of AWS Budgets.
AWS Budgets is specifically designed for proactive cost tracking and automated notifications based on threshold parameters.
2
Identify the need to visualize historical costs and identify trends over the past three months.
The company needs to view service cost graphs over the past three months. This matches the capabilities of AWS Cost Explorer.
AWS Cost Explorer provides highly interactive charts and forecasting based on historical cost and usage records.
3
Evaluate the incorrect options to confirm the final selection.
AWS Pricing Calculator is incorrect because it is used for pre-deployment estimates. AWS Billing Conductor is incorrect because it is designed for custom billing configurations, not standard spend visualization and alerting.
By process of elimination, AWS Budgets and AWS Cost Explorer are the two correct and complementary tools required for the scenario.

Anahtar Kavram

Identifying correct AWS Billing and Cost Management tools based on proactive budgeting and reactive visualization needs
Soru 1055Soru

A mobile game development studio is launching a new multiplayer game. They require a database to store player session states and real-time game lobby information. The data structure consists of simple key-value pairs, and the system must scale dynamically to support millions of players with consistent, single-digit millisecond latency. Which AWS service is best suited for these database requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon DynamoDB

Cevap

Amazon DynamoDB is the most suitable service for this scenario.
Amazon DynamoDB is a fully managed NoSQL database service that provides consistent, single-digit millisecond latency and horizontal scaling, which matches the game studio's requirements for key-value player session states and real-time lobby information at scale.

Adım Adım Çözüm

1
Analyze the application requirements.
The application requires key-value storage, dynamic scaling for millions of players, and consistent single-digit millisecond latency.
Understanding the data access pattern (key-value) and performance SLA (single-digit millisecond latency) guides the selection of the database engine.
2
Evaluate AWS database services against the requirements.
Amazon DynamoDB matches the key-value NoSQL pattern and guarantees single-digit millisecond latency at scale, while Amazon RDS (relational), Amazon Redshift (OLAP), and EC2 (unmanaged) do not align with these criteria.
Eliminating options that introduce overhead, latency, or relational features that do not match key-value scaling requirements ensures the correct choice is identified.

Anahtar Kavram

Selecting the appropriate AWS database service based on workload requirements (NoSQL key-value store with low latency vs. relational or data warehouse).
Soru 1056Soru

A multinational online retail company wants to deploy its application to users across South America, Europe, and Asia to reduce latency and establish a backup disaster recovery site. Using AWS, the deployment can be completed across these geographic locations in a matter of minutes. Which benefit of the AWS Cloud is directly demonstrated by this capability?

Cevabı ve açıklamayı göster

Cevap: Go global in minutes

Cevap

Go global in minutes
The correct answer is the option stating 'Go global in minutes'. This AWS Cloud benefit allows companies to quickly deploy applications across multiple AWS Regions around the world, providing lower latency and a better experience for their global user base.

Adım Adım Çözüm

1
Analyze the customer requirements in the scenario.
The scenario requires deploying applications across multiple continents (South America, Europe, and Asia) quickly (in a matter of minutes) to achieve lower latency and disaster recovery.
Identifying the core goal (global multi-region deployment) helps map it to the correct AWS Cloud benefit.
2
Map the requirement to the six AWS Cloud benefits.
The ability to deploy workloads worldwide in minutes using AWS infrastructure corresponds to the benefit 'Go global in minutes'.
Comparing the scenario's outcome with AWS cloud concept definitions ensures the correct mapping.

Anahtar Kavram

Go global in minutes is one of the six benefits of cloud computing, enabling organizations to deploy applications in multiple AWS Regions worldwide with minimal latency and setup time.
Soru 1057Soru

A digital photography startup is designing a system on AWS. They need to store two types of data: high-resolution images that are accessed directly by users over the internet, and temporary cache files that require extremely low latency block storage on an EC2 instance but do not need to persist when the instance is stopped. Which two AWS storage options should the startup select to satisfy these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Simple Storage Service (Amazon S3); Amazon EC2 Instance Store

Cevap

The correct answers are the options for Amazon Simple Storage Service (Amazon S3) and Amazon EC2 Instance Store.
Amazon Simple Storage Service (Amazon S3) is object storage designed to be highly durable and accessible directly via HTTP/HTTPS, which fits the requirement of serving high-resolution images directly to users. Amazon EC2 Instance Store provides direct-attached physical block storage that offers very low latency for temporary data, such as scratch files and cache, which do not need to persist when the instance is stopped.

Adım Adım Çözüm

1
Identify the storage requirements for user-uploaded high-resolution images.
The images must be stored in a durable, web-accessible object storage service.
Amazon S3 is the primary object storage service on AWS, designed for high durability and accessible via HTTP/HTTPS.
2
Identify the storage requirements for temporary cache and scratch files.
The files need very low latency, direct-attached block storage, and do not need to persist when the instance stops.
Amazon EC2 Instance Store is physically attached to the host computer, providing the lowest latency block storage, and is temporary (ephemeral) by design.

Anahtar Kavram

AWS Storage Services
Soru 1058Soru

An organization needs to establish a dedicated, private network connection from their on-premises office to their AWS VPC. The connection must bypass the public internet to ensure consistent network performance and lower latency. However, due to budget constraints during the transition phase, they also require a cost-effective, quick-to-implement backup connection that runs over the public internet. Which combination of AWS network services best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS Direct Connect as the primary connection and AWS Site-to-Site VPN as the backup connection

Cevap

AWS Direct Connect as the primary connection and AWS Site-to-Site VPN as the backup connection
The correct answer combines AWS Direct Connect (for the dedicated, private, low-latency connection that bypasses the public internet) and AWS Site-to-Site VPN (for the fast, cost-effective backup connection over the public internet). This is a standard hybrid architecture pattern that balances performance, cost, and high availability.

Adım Adım Çözüm

1
Analyze the primary connection requirement: a dedicated, private connection to AWS that bypasses the public internet for consistent performance.
AWS Direct Connect is identified as the correct service because it establishes a dedicated physical network connection from on-premises to AWS without using the public internet.
AWS Direct Connect provides predictable network performance and low latency by routing traffic over dedicated physical lines.
2
Analyze the backup connection requirement: a cost-effective, fast-to-implement connection that runs over the public internet.
AWS Site-to-Site VPN is identified as the correct backup service because it establishes an IPsec VPN tunnel over the public internet, which is quick to set up and cost-effective.
A VPN provides a secure tunnel over the public internet, acting as an excellent secondary path if the primary Direct Connect line fails.

Anahtar Kavram

AWS hybrid connectivity options, specifically distinguishing between dedicated physical connections (Direct Connect) and internet-based secure tunnels (VPN) for on-premises integration.
Soru 1059Soru

A multinational enterprise is consolidating its cloud infrastructure after acquiring several smaller subsidiaries. The IT team must interconnect 40 separate Virtual Private Clouds (VPCs) across different AWS accounts and also establish a connection to their central headquarters. Additionally, they must implement a mechanism to deny inbound traffic from a list of known malicious IP addresses at the boundary of their subnets. Which combination of AWS solutions will satisfy these requirements with the lowest operational complexity?

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway to interconnect the networks, combined with Network Access Control Lists (Network ACLs) at the subnet level

Cevap

The combination of AWS Transit Gateway to interconnect the networks and Network Access Control Lists (Network ACLs) at the subnet level.
The correct answer combines AWS Transit Gateway and Network Access Control Lists. AWS Transit Gateway simplifies the network architecture by acting as a central hub that transitively routes traffic between the 40 VPCs and the corporate headquarters. Network ACLs operate at the subnet boundary and support stateless rule evaluation, allowing administrators to add explicit deny rules for specific malicious IP addresses.

Adım Adım Çözüm

1
Analyze the interconnection requirements for 40 VPCs and an on-premises network.
Identify that VPC Peering would require a complex, unmanageable mesh of point-to-point connections, whereas AWS Transit Gateway acts as a central hub to simplify routing.
Choosing the service that minimizes operational overhead for multi-VPC and hybrid network connectivity.
2
Analyze the security requirement to block specific external IP addresses at the subnet boundary.
Determine that Network ACLs are stateless, apply at the subnet boundary, and support explicit deny rules. In contrast, Security Groups are stateful, apply at the instance level, and only support allow rules.
Selecting the appropriate security control that supports blocking specific source IPs before traffic reaches the instances.

Anahtar Kavram

AWS Transit Gateway provides simplified hub-and-spoke routing for multi-VPC environments, while Network ACLs allow stateless subnet-level traffic filtering, including explicit deny rules.
Soru 1060Soru

A company wants to deploy a containerized application using Amazon Elastic Container Service (Amazon ECS). The company's IT team requires full administrative control over the underlying virtual machine instances, including operating system configuration and patch management. Which launch type or configuration should the company choose to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon ECS with the Amazon EC2 launch type

Cevap

Amazon ECS with the Amazon EC2 launch type
The correct answer is Amazon ECS with the Amazon EC2 launch type. When deploying containers on Amazon ECS using the Amazon EC2 launch type, the customer is responsible for provisioning, configuring, and updating the EC2 instances that host the containers. This gives the customer full administrative access to the underlying operating systems and control over software patching.

Adım Adım Çözüm

1
Identify the key workload requirement and user administrative constraints.
The company needs to run containerized workloads using Amazon ECS but must maintain full administrative control over the underlying operating systems and patching.
This establishes that the customer must manage the infrastructure layer directly, ruling out serverless options.
2
Evaluate the management models of the options.
Amazon ECS with the Amazon EC2 launch type leaves the provisioning, configuration, and patching of the virtual machine instances under the customer's control, while the other options delegate this management to AWS.
Selecting the Amazon EC2 launch type aligns with the customer's requirement for full administrative and infrastructure control.

Anahtar Kavram

Understanding the customer control differences between the infrastructure-based Amazon EC2 launch type and the serverless AWS Fargate launch type in Amazon ECS.
ÖncekiSayfa 53 / 74Sonraki
Tüm alıştırma soruları — AWS Certified Cloud Practitioner | Examkin