Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 101Soru →

A gaming company is launching a new multiplayer game. They require a fully managed database solution to store real-time player profiles and session state data, which has a highly flexible schema and demands sub-millisecond, single-digit latency response times. Additionally, their data analyst team needs to store and analyze millions of rows of historical game logs from the past year to run complex, long-running business intelligence queries. Which TWO of the following solutions should the company implement to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon DynamoDB to store player profiles and session state data; Amazon Redshift to run complex analytical queries on historical game logs

Cevap

The company should implement Amazon DynamoDB to store player profiles and session state data, and Amazon Redshift to run complex analytical queries on historical game logs.
The correct services are Amazon DynamoDB and Amazon Redshift. Amazon DynamoDB provides the required single-digit millisecond latency and flexible key-value schema needed for live player profile and session state tracking. Amazon Redshift is designed specifically as a data warehouse to handle complex, long-running analytical queries on massive amounts of historical data without impacting the operational database.

Adım Adım Çözüm

1
Analyze the operational workload requirements.
The application needs sub-millisecond, low-latency access to flexible-schema player profiles and session states.
This points to a NoSQL database solution designed for high scale and key-value lookups, such as Amazon DynamoDB.
2
Analyze the analytical workload requirements.
The business intelligence team needs to perform complex, long-running queries over massive volumes of historical log data.
This is an Online Analytical Processing (OLAP) use case, which is best addressed by a dedicated data warehouse solution like Amazon Redshift.
3
Evaluate the wrong options.
Using relational options for NoSQL workloads, consolidating transactional and analytical workloads, or self-managing databases on EC2 fail to meet performance, design, or management overhead goals.
Decoupling workloads and leveraging the appropriate managed service types aligns with AWS architectural best practices.

Anahtar Kavram

Selecting the correct AWS database service based on workload characteristics (NoSQL for low-latency operational data vs. data warehousing for complex analytics) and understanding the managed service responsibility model.
Soru 102Soru →

A logistics company is designing an automated workflow with two main operational requirements:

1. A Python application running on a local server must programmatically upload delivery logs to an Amazon S3 bucket and trigger an AWS Lambda function.
2. The systems administration team must model, provision, and update the entire production infrastructure in a repeatable way using a single YAML template.

Which of the following AWS tools should the company use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Software Development Kit (SDK); AWS CloudFormation

Cevap

The AWS Software Development Kit (SDK) and AWS CloudFormation
The correct tools are the AWS Software Development Kit (SDK) and AWS CloudFormation. The AWS SDK enables developers to write Python code that programmatically communicates with AWS services like Amazon S3 and AWS Lambda. AWS CloudFormation enables systems administrators to define their entire infrastructure stack in a single YAML configuration template, ensuring repeatable and automated deployments.

Adım Adım Çözüm

1
Identify the tool required for programmatic API integration from custom application code (Python).
The AWS Software Development Kit (SDK) is designed for writing code that interacts with AWS resources.
Allows programmatic uploads to Amazon S3 and triggers AWS Lambda from custom Python code.
2
Identify the tool required for repeatable infrastructure provisioning using YAML templates.
AWS CloudFormation is the declarative infrastructure as code (IaC) tool that accepts YAML templates.
Enables systems administrators to model and deploy resources in a repeatable manner.

Anahtar Kavram

Methods of deploying and operating in AWS, distinguishing between programmatic application access and declarative infrastructure provisioning.
Soru 103Soru →

A technology company is planning to deploy its business-critical applications on AWS. To meet their high-availability and disaster-recovery requirements, the IT architecture team needs to define the structural relationships and network isolation features of the AWS Global Infrastructure.

Which of the following statements correctly describe the characteristics of AWS Regions and Availability Zones? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Each Availability Zone is a fully isolated partition of the AWS infrastructure, consisting of one or more discrete physical data centers.; AWS Regions are geographically distinct areas that operate independently of one another to maximize fault isolation.

Cevap

The correct statements are that each Availability Zone is a fully isolated partition of the AWS infrastructure consisting of one or more discrete physical data centers, and that AWS Regions are geographically distinct areas that operate independently of one another to maximize fault isolation.
The correct statements are that each Availability Zone is a fully isolated partition of the AWS infrastructure consisting of one or more physical data centers, and that AWS Regions are geographically distinct areas operating independently. Availability Zones provide fault isolation and high availability within a Region, while Regions are completely isolated from each other geographically to guarantee that regional level disasters do not cascade.

Adım Adım Çözüm

1
Analyze the definitions of AWS Regions and Availability Zones.
Identify that an AWS Region is a physical location in the world where AWS has multiple Availability Zones, and each Availability Zone is an isolated partition consisting of one or more discrete data centers.
This establishes the base hierarchy and physical definition of the global infrastructure components.
2
Examine how these components are connected and isolated from one another.
Determine that Availability Zones within a Region are connected via high-speed, private, low-latency fiber-optic networks, whereas different AWS Regions are geographically isolated and operate independently of one another.
This highlights the network latency characteristics and fault isolation boundaries built into the AWS architecture.
3
Evaluate the choices to select the correct statements and discard incorrect distractors.
Confirm the statements regarding the physical composition of Availability Zones and the independence of Regions as correct, while discarding options that reverse the structural hierarchy, suggest shared power across Regions, or claim the public internet connects Availability Zones.
This isolates the correct technical configurations from common architectural misconceptions.

Anahtar Kavram

Distinction and relationship between AWS Regions and Availability Zones
Soru 104Soru →

A company is configuring network security for an Amazon EC2 instance. The administrator wants to apply stateful firewall rules directly to the instance. Under the AWS Shared Responsibility Model, which of the following is the customer's responsibility to configure to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: Security groups

Cevap

Security groups
The correct option is 'Security groups' because security groups are stateful firewalls that control inbound and outbound traffic at the instance level. Under the AWS Shared Responsibility Model, configuring security groups is the responsibility of the customer.

Adım Adım Çözüm

1
Identify the resource and security requirement in the scenario.
The resource is an Amazon EC2 instance, which is an Infrastructure as a Service (IaaS) resource, and the requirement is to apply stateful firewall rules directly to it.
This establishes the boundary of the Shared Responsibility Model (customer responsibility for guest OS and instance-level firewalls) and the specific technical constraints (stateful, instance-level).
2
Evaluate the options against the Shared Responsibility Model and technical requirements.
Security groups are stateful, operate at the instance level, and are configured by the customer. Network Access Control Lists (NACLs) operate at the subnet level and are stateless. Physical firewalls are managed entirely by AWS. AWS Artifact is a compliance reporting portal, not a firewall service.
This eliminates the incorrect options based on their operational level (instance vs. subnet vs. physical infrastructure) and statefulness.

Anahtar Kavram

Under the AWS Shared Responsibility Model, the customer is responsible for security 'in' the cloud, which includes configuring instance-level, stateful firewalls (security groups) for Amazon EC2 instances.
Soru 105Soru →

A retail enterprise connects its on-premises data center to an AWS Virtual Private Cloud (VPC) using an AWS Site-to-Site VPN. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

Cevabı ve açıklamayı göster

Cevap: Configuring and maintaining the physical customer gateway device at the on-premises data center

Cevap

Configuring and maintaining the physical customer gateway device at the on-premises data center
The customer gateway is a physical device or software application on the customer's side of the connection (on-premises). Under the Shared Responsibility Model, the customer maintains full ownership and operational responsibility for their physical assets, configuration, and security outside of the AWS global infrastructure.

Adım Adım Çözüm

1
Analyze the components of the AWS Site-to-Site VPN connection.
The connection consists of a customer-side component (customer gateway) and an AWS-side component (virtual private gateway).
Identifying the boundary between on-premises infrastructure and AWS resources is key to determining responsibility.
2
Apply the Shared Responsibility Model guidelines to the components.
The customer is responsible for the security and configuration of resources they own and control (on-premises gateway), while AWS is responsible for the security 'of' the cloud (virtual private gateway hosting, physical security of AWS data centers).
This determines that the physical customer gateway management is the customer's task.

Anahtar Kavram

Shared Responsibility Model boundary for hybrid networking components
Soru 106Soru →

A software development team is building a serverless, event-driven web application. The architecture utilizes AWS Lambda to run the backend application code and Amazon DynamoDB as the database layer. According to the AWS Shared Responsibility Model, which of the following operational tasks are the sole responsibility of the customer? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configuring IAM roles to establish fine-grained permissions for the Lambda function to interact with the DynamoDB table; Writing secure application logic and managing the software dependencies of the package uploaded to AWS Lambda

Cevap

Configuring IAM roles to establish fine-grained permissions and securing custom application code along with its dependencies.
Under the AWS Shared Responsibility Model for serverless services like AWS Lambda, AWS manages the underlying physical infrastructure, virtualization layer, and operating system. The customer is responsible for securing their own application code, including dependencies, and configuring identity and access management (IAM) permissions to control access between resources (such as Lambda and DynamoDB).

Adım Adım Çözüm

1
Analyze the service types used in the scenario.
AWS Lambda and Amazon DynamoDB are classified as managed/serverless (abstracted) services.
The division of responsibility shifts more operational tasks to AWS when using serverless services compared to Infrastructure as a Service (IaaS) like Amazon EC2.
2
Differentiate between customer and AWS responsibilities for serverless compute and database layers.
AWS handles physical security, infrastructure, operating systems, virtualization, and runtime environment updates. The customer handles data classification, IAM permissions, configuration settings, and application code/dependencies.
This establishes the logical boundary of the Shared Responsibility Model for serverless architectures.
3
Evaluate the choices against common misconceptions regarding VPC networks and compliance tooling.
Exclude operating system patching (AWS responsibility), subnet NACL isolation for Lambda containers (managed by AWS), and uploading logs to AWS Artifact (misunderstanding of AWS Artifact's pull-only nature). Identify code security and IAM configuration as customer responsibilities.
This isolates the correct options and maps the incorrect distractors to specific cloud security misconceptions.

Anahtar Kavram

Shared Responsibility Model for Serverless Services
Soru 107Soru →

An IoT fleet management company tracks real-time telemetry from thousands of delivery vehicles. The current architecture relies on self-hosted database clusters and monolithic backend servers on Amazon EC2. During peak hours, the servers experience CPU exhaustion, leading to lost data packets, while the database cluster requires manual partitioning and intervention to scale. The company wants to redesign this architecture on AWS to handle unpredictable traffic surges efficiently and minimize administrative overhead.

Which two architectural choices should the company implement to align with AWS cloud design principles? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy Amazon Kinesis Data Streams to ingest vehicle telemetry and AWS Lambda for processing, shifting infrastructure management to managed AWS services.; Store the telemetry data in Amazon DynamoDB with auto-scaling enabled, replacing the self-hosted database cluster to leverage managed services and automatic scaling.

Cevap

The correct architectural choices are deploying Amazon Kinesis Data Streams with AWS Lambda for managed ingestion and processing, and storing the data in Amazon DynamoDB with auto-scaling enabled for a fully managed, elastic database layer.
Deploying managed services like Amazon Kinesis Data Streams and AWS Lambda aligns with the 'services not servers' and 'loose coupling' principles by removing the operational burden of server management and decoupling ingestion from processing. Using Amazon DynamoDB with auto-scaling aligns with 'services not servers' and 'elasticity' by automatically scaling database capacity to handle traffic surges without manual intervention.

Adım Adım Çözüm

1
Analyze the business and technical constraints: the current architecture has monolithic bottlenecks on EC2 and a self-hosted database requiring manual scaling, and needs to handle unpredictable surges with low overhead.
Identify the target cloud design principles required: 'services not servers' (to reduce administrative overhead), 'loose coupling' (to separate ingestion/processing and prevent packet loss), and 'elasticity' (to dynamically match unpredictable demand).
Understanding the principles ensures incorrect anti-patterns can be filtered out.
2
Evaluate compute and ingestion options against 'services not servers' and 'loose coupling'.
Selecting the combination of Amazon Kinesis Data Streams and AWS Lambda decouples ingestion from processing and leverages serverless managed services.
This removes server management overhead and prevents CPU exhaustion from causing packet loss.
3
Evaluate database options against 'services not servers' and 'elasticity'.
Selecting Amazon DynamoDB with auto-scaling enabled replaces the self-hosted cluster with a managed database that dynamically scales capacity up and down.
This eliminates manual partitioning and aligns resource consumption directly with demand.

Anahtar Kavram

AWS Cloud design principles, specifically 'services not servers', 'loose coupling', and 'elasticity'.
Soru 108Soru →

A retail company plans to migrate its on-premises relational database to AWS. The database currently runs on a self-managed physical server. To reduce operational overhead such as backups and patching, the company decides to migrate the database to Amazon RDS without modifying the database engine or making changes to the application code. Which cloud migration strategy is this company employing?

Cevabı ve açıklamayı göster

Cevap: Replatforming

Cevap

Replatforming is the correct migration strategy because it involves migrating the database to a managed service to reduce operational tasks without changing the database engine or the core application code.
Replatforming is the correct strategy because the company is moving their database to a managed platform (Amazon RDS) to reduce administrative overhead, but they are retaining the same database engine and code, making minimal modifications without re-architecting the application.

Adım Adım Çözüm

1
Analyze the company's objective.
The company wants to move a database to AWS, reduce management overhead (patching, backups), and keep the database engine and application code the same.
This establishes the scope of changes: some optimization (using a managed service) is done, but the core architecture remains unchanged.
2
Map the scenario to the 6 Rs migration strategies.
Moving a self-managed database to a fully managed platform (Amazon RDS) without core code modification is known as Replatforming.
This strategy allows the organization to benefit from cloud-managed infrastructure without the cost or complexity of a full redesign.

Anahtar Kavram

Cloud Migration Strategies (Replatforming)
Soru 109Soru →

A company is deploying a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances to host a new customer portal. According to the AWS Shared Responsibility Model, which of the following operational tasks is the sole responsibility of the customer?

Cevabı ve açıklamayı göster

Cevap: Patching and updating the guest operating system running on the EC2 instances

Cevap

Patching and updating the guest operating system running on the EC2 instances
Patching and updating the guest operating system is a customer responsibility under the AWS Shared Responsibility Model for EC2 instances. Because EC2 is an Infrastructure as a Service (IaaS) offering, AWS manages the physical host and hypervisor, but the customer retains full control and responsibility over the operating system, applications, and data configured on the instance.

Adım Adım Çözüm

1
Identify the service type in the scenario.
Amazon EC2 is an Infrastructure as a Service (IaaS) resource.
The boundary of the Shared Responsibility Model depends on whether a service is Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or Software as a Service (SaaS).
2
Determine the boundary of responsibility for IaaS services.
For IaaS resources, the customer is responsible for the guest operating system and anything installed or configured on top of it, while AWS is responsible for the underlying infrastructure and physical facilities.
This division defines what falls under 'security in the cloud' (customer) versus 'security of the cloud' (AWS).
3
Evaluate the choices to locate a customer-managed operational task.
Patching the guest operating system is a customer responsibility, whereas physical hardware maintenance, hypervisor management, and media disposal are AWS responsibilities.
Operating system updates require administrative access to the instance, which only the customer possesses.

Anahtar Kavram

The customer is responsible for security 'in' the cloud (such as guest operating systems), while AWS is responsible for security 'of' the cloud (such as physical infrastructure and virtualization layers).
Tahmini Süre:45s
Soru 110Soru →

A logistics company wants to migrate its legacy shipment-tracking application to the AWS Cloud. The primary goal is to complete the migration as quickly as possible to meet an upcoming data center evacuation deadline, without making any modifications to the application code or architecture. Which migration strategy should the company use to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: Rehosting

Cevap

Rehosting
The correct strategy is Rehosting. Rehosting, often referred to as 'lift-and-shift', involves migrating applications from an on-premises environment to AWS virtual machines (Amazon EC2) with no changes to the application code, architecture, or configuration. This makes it the fastest migration method and ideal for urgent data center evacuations.

Adım Adım Çözüm

1
Analyze the company's constraints and goals from the scenario.
The company needs to migrate quickly due to a deadline and wants to make zero code or architecture changes.
This establishes the requirements for the migration strategy.
2
Map the zero-change, fast migration requirement to the AWS migration strategies (6 Rs).
Rehosting is identified as the strategy that copies the application to the cloud as-is without code changes.
Rehosting matches the requirement of minimal modification and rapid deployment.

Anahtar Kavram

AWS Cloud Migration Strategies (6 Rs)
Tahmini Süre:45s
Soru 111Soru →

A retail startup wants to launch a new e-commerce application. Instead of investing heavily in physical servers and building their own data centers before knowing how successful the application will be, they decide to deploy on AWS and pay only for the resources they consume. Which benefit of the AWS Cloud is this startup demonstrating?

Cevabı ve açıklamayı göster

Cevap: Trading capital expense for variable expense

Cevap

Trading capital expense for variable expense
Trading capital expense for variable expense is the correct benefit. By using AWS, the startup avoids capital expenses (CapEx) associated with purchasing and maintaining physical servers. Instead, they pay for computing resources as variable expenses (OpEx) based on actual usage.

Adım Adım Çözüm

1
Analyze the business scenario described in the stem.
The startup wants to avoid upfront infrastructure costs and instead pay incrementally based on usage.
This relates to the economic benefits of cloud computing.
2
Match the scenario to the official AWS Cloud benefits.
Paying on-demand for resources instead of investing in physical data centers upfront represents trading capital expenses (CapEx) for variable expenses (OpEx).
To identify which cloud benefit fits paying only for what is consumed without upfront investment.

Anahtar Kavram

Trading capital expense for variable expense is a key economic benefit of the AWS Cloud, enabling organizations to pay only for the resources they consume rather than investing heavily in physical data centers and servers upfront.
Soru 112Soru →

A financial technology company deploys a transactional database using Amazon Relational Database Service (Amazon RDS). As part of a security audit, the company must document the division of operational tasks based on the AWS Shared Responsibility Model. Which of the following tasks is the customer's responsibility under the AWS Shared Responsibility Model for this database deployment?

Cevabı ve açıklamayı göster

Cevap: Configuring database-level user access controls and network access rules via database security groups

Cevap

Configuring database-level user access controls and network access rules via database security groups
Configuring network access rules using database security groups and managing database-level user access are customer responsibilities (security 'in' the cloud). Even under a managed database service like Amazon RDS, the customer must configure who can access the database resources.

Adım Adım Çözüm

1
Identify the type of service being utilized in the scenario.
Amazon RDS is identified as a managed platform-as-a-service (PaaS) database offering.
The Shared Responsibility Model shifts the operational boundary depending on whether the service is classified as IaaS or PaaS/managed.
2
Determine the boundary of responsibility for a managed database service.
AWS manages physical hardware, infrastructure, and virtual machines (including guest OS patching). The customer maintains responsibility for the data, database engine configurations, access credentials, and network firewall configurations.
This establishes which operations are handled by AWS and which must be configured by the customer's administrative team.
3
Evaluate the choices to isolate the customer-managed task.
Managing database security groups and user access privileges is a customer task, whereas patching the OS, securing physical hardware, and auditing facilities are AWS responsibilities.
Applying the Shared Responsibility Model rules eliminates AWS-side responsibilities and isolates the correct customer action.

Anahtar Kavram

AWS Shared Responsibility Model for Managed Services
Soru 113Soru →

A company is deploying a web application on an Amazon EC2 instance that needs to read and write files to an Amazon S3 bucket. Which of the following is the AWS-recommended best practice to grant the application access to the S3 bucket?

Cevabı ve açıklamayı göster

Cevap: Create an IAM role with the necessary S3 permissions and attach it to the Amazon EC2 instance.

Cevap

Create an IAM role with the necessary S3 permissions and attach it to the Amazon EC2 instance.
Creating an IAM role and attaching it to the Amazon EC2 instance is the recommended practice. AWS handles the rotation of temporary security credentials automatically, preventing the security risks associated with managing and storing long-term credentials on the instance.

Adım Adım Çözüm

1
Determine if the requester is an AWS service or a human user.
The requester is an Amazon EC2 instance running a web application.
AWS services should use roles with temporary credentials rather than users with permanent access keys to access other AWS services.
2
Identify the permissions needed and apply the principle of least privilege.
Create a policy that permits only read and write actions on the specific S3 bucket.
Ensuring least privilege minimizes the potential impact of a security compromise.
3
Associate the permissions with the EC2 instance using a role.
Attach the policy to an IAM role, and then associate that role with the EC2 instance.
The application on the EC2 instance can then retrieve temporary security credentials automatically from instance metadata.

Anahtar Kavram

Granting temporary credentials to AWS resources using IAM roles is a fundamental security best practice.
Tahmini Süre:1m 0s
Soru 114Soru →

A financial services company is migrating its transaction processing system to AWS. The system currently uses an application server that synchronously writes transaction logs to a database and simultaneously invokes a third-party credit check API. If either the database or the third-party API becomes unresponsive, the entire transaction fails, resulting in customer dissatisfaction. Which architectural design modification should the company implement to align with AWS cloud design principles and improve the system's resilience?

Cevabı ve açıklamayı göster

Cevap: Introduce an Amazon Simple Queue Service (Amazon SQS) queue to buffer transaction requests, processing them asynchronously to isolate the application server from database or API downtime.

Cevap

Introduce an Amazon Simple Queue Service (Amazon SQS) queue to buffer transaction requests, processing them asynchronously to isolate the application server from database or API downtime.
The correct design uses Amazon Simple Queue Service (Amazon SQS) to decouple the components. By buffering transaction requests in a queue and processing them asynchronously, the core application server is isolated from downstream database latency or third-party credit check API downtime. This aligns with the AWS design principles of loose coupling and designing for failure, ensuring the system remains responsive even if dependencies fail.

Adım Adım Çözüm

1
Identify the system bottlenecks and failure domains.
The application server, database, and third-party credit check API are synchronously dependent, meaning any failure in the downstream services causes a total system failure.
Understanding the current tightly coupled state is necessary to apply the correct AWS design principles.
2
Apply the 'loose coupling' and 'design for failure' AWS design principles.
Determine that an asynchronous communication mechanism is required to break the synchronous dependencies.
Loose coupling ensures that components can fail or experience latency independently without causing a cascading failure across the entire system.
3
Select the appropriate AWS service to decouple the components.
Introduce Amazon SQS to queue incoming transaction requests and process them asynchronously.
An SQS queue buffers incoming requests, allowing the application server to accept transactions immediately and processing consumers to retry requests if downstream services are temporarily unavailable.

Anahtar Kavram

Loose coupling and design for failure using asynchronous messaging
Tahmini Süre:2m 0s
Soru 115Soru →

A startup is migrating its application to AWS. The application consists of an order processing service and an inventory service. Originally, the order processing service made direct, synchronous HTTPS calls to the inventory service. To ensure that orders can still be accepted even if the inventory service is temporarily offline or experiencing high latency, the team introduces an Amazon Simple Queue Service (Amazon SQS) queue to decouple the two services. Which of the following cloud design principles does this architectural change directly implement?

Cevabı ve açıklamayı göster

Cevap: Loose coupling

Cevap

Loose coupling
The correct answer is loose coupling. By inserting Amazon SQS as a messaging buffer between the order processing service and the inventory service, the systems are decoupled. If the inventory service goes offline or is slow, the order processing service can still write messages to the queue and complete the transaction from the user's perspective, avoiding a system-wide failure.

Adım Adım Çözüm

1
Analyze the problem scenario
The application has two services (order processing and inventory) that communicate synchronously, creating a single point of failure where if the inventory service is offline, the entire order process fails.
Understanding the current architecture helps identify the main drawback being addressed.
2
Evaluate the architectural change
An Amazon SQS queue is placed between the two services so that messages are queued asynchronously instead of direct, synchronous calls.
This shows that the services are no longer tightly dependent on each other's immediate runtime availability.
3
Map the change to AWS Cloud design principles
This separation is a classic implementation of loose coupling, which prevents cascading failures and allows components to scale or fail independently.
Matches the action of decoupling to the design principle of loose coupling.

Anahtar Kavram

Loose coupling is a key AWS design principle that reduces dependencies between components, preventing failures in one service from impacting another.
Tahmini Süre:1m 0s
Soru 116Soru →

A startup is designing a web application on AWS. They want to ensure that if the database layer experiences a temporary outage, the front-end web servers can still accept incoming customer orders without immediately failing. Which AWS Cloud design principle should the startup implement to achieve this goal?

Cevabı ve açıklamayı göster

Cevap: Loose coupling

Cevap

Loose coupling
Loose coupling is the correct design principle because it isolates components of an application (often using intermediary services like Amazon Simple Queue Service or Amazon EventBridge). This ensures that if one component (such as the database) becomes unavailable, other components (such as the web servers) can continue to function and accept requests without failing immediately.

Adım Adım Çözüm

1
Analyze the scenario requirements.
The startup needs to prevent a failure in the database layer from causing the front-end web servers to fail.
This requires isolating components and removing direct dependencies so they can operate independently.
2
Evaluate the design principles against the goal.
Loose coupling (for example, using a message queue like Amazon SQS between the web servers and database) allows the web servers to continue accepting orders even if the database is down.
Loose coupling is the AWS design principle dedicated to reducing dependencies and isolating failures.

Anahtar Kavram

Loose coupling is a fundamental AWS design principle that decouples application components (e.g., using queues or asynchronous communication) so that they run independently. This prevents a failure in one service from cascading to other services, improving overall system resilience.
Soru 117Soru →

An administrator needs to configure an application running on an Amazon EC2 instance to read files from an Amazon S3 bucket. According to AWS security best practices, which approach should the administrator use to grant the EC2 instance the necessary permissions?

Cevabı ve açıklamayı göster

Cevap: Create an IAM role with S3 read permissions and associate it with the EC2 instance.

Cevap

Create an IAM role with S3 read permissions and associate it with the EC2 instance.
Associating an IAM role with the EC2 instance is the recommended practice because it delegates temporary credentials to the instance. This prevents the need to manage, store, or rotate static access keys on the instance itself.

Adım Adım Çözüm

1
Determine if the accessing entity is an AWS resource or a human user.
The accessing entity is an Amazon EC2 instance (an AWS service resource).
AWS services should authenticate using temporary credentials rather than permanent, hardcoded credentials.
2
Identify the AWS security best practice for resource-to-resource authentication.
Create an IAM role with the minimum required S3 read permissions and attach it to the EC2 instance.
IAM roles leverage AWS Security Token Service (STS) to deliver temporary, automatically rotating credentials to the EC2 instance.

Anahtar Kavram

IAM Roles for AWS Services
Soru 118Soru →

A company is planning to migrate a legacy web application to AWS. The application currently runs on an on-premises physical server and uses an Oracle database. To meet a tight datacenter exit deadline, the company decides to migrate the application servers directly to Amazon EC2 instances without any modifications. Simultaneously, they decide to migrate the Oracle database to Amazon RDS for Oracle to reduce database administration overhead. Which migration strategies is the company using for the web application and the database respectively?

Cevabı ve açıklamayı göster

Cevap: Rehosting for the web application and Replatforming for the database

Cevap

Rehosting for the web application and Replatforming for the database
The correct answer states that the company uses Rehosting for the web application and Replatforming for the database. Rehosting (lift-and-shift) is used when moving virtual or physical servers directly to Amazon EC2 without modifications, which fits the rapid migration of the application servers. Replatforming (lift-tinker-and-shift) involves adopting managed services like Amazon RDS to reduce management overhead without changing the core application architecture, which is how the database is being migrated.

Adım Adım Çözüm

1
Analyze the web application migration method
The company migrates the application servers directly to Amazon EC2 without modifications.
This is a classic 'lift-and-shift' approach, which corresponds to the Rehosting migration strategy.
2
Analyze the database migration method
The Oracle database is moved to Amazon RDS for Oracle to reduce database administration overhead.
This involves optimizing the platform by adopting a managed service (RDS) while keeping the same database engine and application code. This corresponds to the Replatforming (lift-tinker-and-shift) migration strategy.
3
Combine the identified strategies and select the matching option
The correct combination is Rehosting for the web application and Replatforming for the database.
This correctly maps both migration actions to their respective AWS cloud migration strategies.

Anahtar Kavram

Cloud migration strategies (the 6 Rs) allow organizations to choose the right path for moving workloads to AWS, balancing speed, cost, and effort.
Soru 119Soru →

An enterprise is planning to migrate its on-premises workloads to the AWS Cloud. During the discovery phase, the migration team identifies two specific workloads:

1. A legacy system that is no longer used by any business unit and has no operational value.
2. An on-premises customer relationship management (CRM) application that the company wants to replace entirely with a cloud-based Software-as-a-Service (SaaS) platform.

Which of the following migration strategies describe the correct paths for these workloads? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Retiring the legacy system that is no longer in use; Repurchasing the CRM application by moving to a SaaS platform

Cevap

The correct strategies are retiring the legacy system that is no longer in use, and repurchasing the CRM application by moving to a SaaS platform.
The correct strategy for the legacy system is retiring it because it has no business value and can be safely shut down. The correct strategy for the CRM application is repurchasing because the company is replacing its existing on-premises software with a new cloud-native Software-as-a-Service (SaaS) product.

Adım Adım Çözüm

1
Analyze the requirement for the first workload (obsolete legacy system).
Identify that because the system has no operational value and is no longer used, it should be turned off or decommissioned. The migration strategy for decommissioning workloads is Retiring.
Retiring helps reduce costs and focus migration effort only on active and valuable workloads.
2
Analyze the requirement for the second workload (CRM application to be replaced by SaaS).
Identify that replacing an on-premises product with a different product or platform, specifically a Software-as-a-Service (SaaS) model, represents the Repurchasing strategy.
Repurchasing, or 'drop-and-shop', refers to switching to a different product, commonly a SaaS platform.

Anahtar Kavram

AWS Cloud Migration Strategies (6 Rs)
Soru 120Soru →

An e-learning company plans to migrate its legacy student portal to the AWS Cloud. The IT team wants to adopt AWS Cloud design principles to increase the portal's reliability and reduce operational overhead. Which of the following architectural actions align with these design principles? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Decoupling the frontend user interface from the backend databases using Amazon Simple Queue Service (Amazon SQS) to manage requests.; Using AWS Lambda to process student quiz submissions automatically instead of maintaining running virtual servers.

Cevap

Decoupling the frontend user interface from the backend databases using Amazon SQS, and using AWS Lambda to process student quiz submissions automatically instead of maintaining running virtual servers.
Decoupling components with message queues (such as Amazon SQS) is a key aspect of loose coupling, ensuring that a failure in one component does not break the entire system. Implementing serverless functions (such as AWS Lambda) aligns with the 'services, not servers' design principle, allowing the team to focus on application logic while AWS manages server provisioning and scaling.

Adım Adım Çözüm

1
Analyze the scenario requirements.
The company wants to apply AWS Cloud design principles (such as loose coupling, services not servers, and elasticity) to modernize a legacy application.
This establishes the criteria for evaluating the choices.
2
Evaluate the architectural options against AWS Cloud design principles.
Using Amazon SQS decouples components (loose coupling), and using AWS Lambda leverages serverless compute (services not servers). Consolidating into a single EC2 instance, manually provisioning fixed capacity, and misinterpreting shared responsibility boundaries are cloud anti-patterns.
This identifies the correct design choices and eliminates the incorrect options.

Anahtar Kavram

AWS Cloud Design Principles (Loose Coupling and Services not Servers)
ÖncekiSayfa 6 / 74Sonraki
Tüm alıştırma soruları — AWS Certified Cloud Practitioner | Examkin