Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 1381Soru →

An e-commerce retailer operates separate AWS accounts for its online store, customer analytics, and inventory management. They have recently linked these accounts under a single organization using AWS Organizations with all features enabled. Which of the following describe how consolidated billing affects this organization? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A single consolidated invoice is generated monthly for the organization, with the management account responsible for paying the total charges.; The active usage of all member accounts is combined for pricing calculations, allowing the organization to benefit from volume discount tiers.

Cevap

A single consolidated invoice is generated monthly for the organization, with the management account responsible for paying the total charges, and the active usage of all member accounts is combined for pricing calculations, allowing the organization to benefit from volume discount tiers.
Under consolidated billing, AWS generates a single monthly invoice for the entire organization, which is sent to and paid by the management account. Additionally, the usage across all member accounts is aggregated to share volume-pricing tiers for qualifying services, helping the organization qualify for lower rates on services like Amazon S3 sooner.

Adım Adım Çözüm

1
Analyze how AWS Organizations consolidated billing structures payments.
Consolidation combines billing across accounts, generating a single bill for the management account instead of individual invoices for each member account.
This simplifies accounting by routing all costs to a central payer.
2
Determine how service usage is evaluated for volume-pricing discounts under consolidated billing.
AWS aggregates resource consumption from all accounts within the organization to reach higher volume-pricing tiers sooner.
This allows the combined entity to lower the unit cost of resources compared to standalone accounts.

Anahtar Kavram

AWS Organizations Consolidated Billing
Tahmini Süre:1m 30s
Soru 1382Soru →

A financial institution is designing a disaster recovery strategy for its core banking application on AWS. The application currently runs in a single AWS Region. The institution's compliance policy requires that backup copies of the data be stored in a geographically isolated location that is at least 250 miles away from the primary operating environment to protect against a regional natural disaster. Which AWS Global Infrastructure component should the institution use to store these backups?

Cevabı ve açıklamayı göster

Cevap: A different AWS Region

Cevap

A different AWS Region
Storing backups in a different AWS Region satisfies the compliance requirement because AWS Regions are geographically isolated from one another by hundreds of miles. This distance ensures that a regional disaster affecting the primary region will not impact the backup data stored in the secondary region.

Adım Adım Çözüm

1
Identify the primary constraint in the scenario.
The backups must be stored in a geographically isolated location at least 250 miles away from the primary operating environment.
This requirement rules out any infrastructure components that reside within the same metropolitan area or parent Region.
2
Evaluate the geographic scale and boundaries of the AWS Global Infrastructure components.
Availability Zones and Local Zones are situated within or close to the parent Region's metropolitan area, whereas different AWS Regions are separated by hundreds of miles across distinct geographic areas.
This comparison identifies which component provides the physical distance needed to satisfy the 250-mile policy.
3
Verify the capabilities of the remaining components to support backup storage.
An AWS Region supports full storage services (like Amazon S3 and Amazon EBS) for durable backups, while Edge Locations are only designed for content caching and low-latency delivery.
This confirms that deploying backups to a different AWS Region is both physically sufficient and technologically correct.

Anahtar Kavram

AWS Regions vs Availability Zones for Disaster Recovery
Soru 1383Soru →

A retail company plans to deploy its core customer database on Amazon EC2. The database must run continuously 24/7 and requires stable, predictable compute capacity. The company is prepared to commit to a 1-year term to reduce costs. Additionally, the company expects sudden, short-term traffic spikes during promotional events when they will need to launch additional temporary instances. Which combination of EC2 pricing models provides the most cost-effective solution while ensuring database stability?

Cevabı ve açıklamayı göster

Cevap: Reserved Instances for the baseline database and On-Demand Instances for the temporary spikes

Cevap

Reserved Instances for the baseline database and On-Demand Instances for the temporary spikes
The correct answer is the combination of Reserved Instances for the baseline database and On-Demand Instances for the temporary traffic spikes. Reserved Instances offer a significant discount compared to On-Demand pricing in exchange for a 1-year or 3-year commitment, which fits the stable 24/7 baseline requirement of the database. On-Demand Instances are billed by the second or hour with no long-term commitment, making them perfect for handling short-term, unpredictable spikes without the risk of interruption.

Adım Adım Çözüm

1
Identify the requirements of the baseline workload.
The baseline database runs continuously (24/7), requires stability (no interruptions), and the company is willing to make a 1-year commitment.
Analyzing baseline needs allows us to select the most cost-effective committed pricing model (Reserved Instances or Savings Plans) rather than paying full price.
2
Identify the requirements of the temporary scaling workload.
The traffic spikes are sudden, short-term, and temporary.
Analyzing spike characteristics prevents committing to long-term pricing models for resources that are only needed briefly, and rules out Spot Instances due to the potential for interruption during critical customer activity.
3
Combine the optimal pricing models to form the final solution.
Use Reserved Instances for the baseline database to secure discounts, and On-Demand Instances for the temporary traffic spikes to ensure reliability without long-term commitments.
This combination minimizes costs for predictable usage while maintaining stability and flexibility for unpredictable spikes.

Anahtar Kavram

AWS EC2 Pricing Models
Soru 1384Soru →

A business wants to track its cloud expenses by department using tags. They also want to trace who created each resource using the `aws:createdBy` tag. Which of the following statements are correct regarding how these cost allocation tags function? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: User-defined tags must be activated in the Billing and Cost Management console before they can be used to organize costs on billing reports.; AWS-generated tags, such as `aws:createdBy`, must be activated in the Billing and Cost Management console to appear on billing reports.

Cevap

User-defined tags must be activated in the Billing and Cost Management console, and AWS-generated tags, such as `aws:createdBy`, must also be activated in the Billing and Cost Management console to appear on billing reports.
For tags to appear on billing reports, both user-defined tags and AWS-generated tags (like `aws:createdBy`) must be explicitly activated in the Billing and Cost Management console. Once activated, AWS organizes cost data based on these tags.

Adım Adım Çözüm

1
Differentiate between user-defined and AWS-generated cost allocation tags.
Both types of tags exist, but neither automatically appears on billing reports by default.
Understanding the lifecycle of cost allocation tags is necessary to configure them.
2
Identify the activation requirement in the Billing and Cost Management console.
Confirm that both user-defined and AWS-generated tags must be activated in the Billing console before they are included in cost reports.
This is a required step for tags to show up in cost analysis tools like AWS Cost Explorer.
3
Determine if tags apply retroactively.
Tags only apply forward from the time of activation, not to historical costs.
To avoid expecting past reports to update automatically after activating tags.

Anahtar Kavram

Cost Allocation Tags activation and categorization rules
Soru 1385Soru →

A retail company has internal business applications running on Amazon EC2 instances located in a private subnet of a VPC. These applications must regularly download large datasets from an object storage service and write the processed results back. The network traffic must remain entirely within the AWS network to ensure security and avoid data transfer costs over the public internet. Which solution should the cloud architect implement to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Configure a VPC gateway endpoint to Amazon S3

Cevap

Configure a VPC gateway endpoint to Amazon S3
Configuring a VPC gateway endpoint to Amazon S3 is the correct solution. It provides private, secure connectivity between the private subnet in the VPC and Amazon S3 without requiring public IP addresses, an internet gateway, or a NAT gateway. Traffic to S3 is routed locally through the endpoint and stays entirely within the AWS network, meeting all security and cost-reduction requirements.

Adım Adım Çözüm

1
Identify the storage service required by the application.
The application requires object storage, which points to Amazon S3.
Establishing the correct destination service ensures the right connectivity option is selected.
2
Analyze the network security and cost constraints.
Traffic must not traverse the public internet, must remain inside the AWS network, and must avoid NAT gateway costs.
This rules out standard routes like NAT gateways or internet gateways that send traffic over public paths or add runtime costs.
3
Evaluate the AWS networking feature designed for private service access within a VPC.
A VPC gateway endpoint is the specific feature that allows private, free routing from a VPC to Amazon S3.
Gateway endpoints keep traffic localized to the AWS network and bypass the need for public internet access.

Anahtar Kavram

VPC Endpoints (Gateway Endpoints) for private AWS service connectivity
Tahmini Süre:1m 30s
Soru 1386Soru →

A company is migrating its operations to AWS and plans to deploy dozens of Virtual Private Clouds (VPCs) across multiple AWS accounts to isolate different departments. They need to simplify their network architecture by interconnecting all these VPCs through a central hub, avoiding a complex point-to-point routing mesh. Additionally, they must implement stateless traffic filtering at the subnet boundary to block traffic from specific IP addresses. Which two AWS networking solutions or features should the company implement to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway; Network Access Control Lists (Network ACLs)

Cevap

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
AWS Transit Gateway is the correct solution for interconnecting dozens of VPCs via a centralized hub, simplifying the network architecture. Network Access Control Lists (Network ACLs) are the correct choice for implementing stateless traffic filtering at the subnet boundary to block specific IP addresses.

Adım Adım Çözüm

1
Identify the service required to interconnect dozens of VPCs through a central hub rather than a point-to-point mesh.
AWS Transit Gateway acts as a central cloud router, providing a hub-and-spoke topology to simplify multi-VPC routing.
VPC Peering does not scale easily for dozens of VPCs as it requires a full mesh of individual connections.
2
Identify the feature required to implement stateless traffic filtering at the subnet boundary.
Network Access Control Lists (Network ACLs) operate at the subnet level and support stateless allow and deny rules.
Security Groups are stateful and operate at the instance level, not the subnet level.

Anahtar Kavram

VPC connectivity scaling using AWS Transit Gateway and subnet-level security using Network ACLs
Soru 1387Soru →

A company wants to integrate its internal IT service management (ITSM) tool with AWS to programmatically open, track, and resolve support cases. Additionally, the team requires technical support for configuring common third-party operating systems and web servers running on Amazon EC2. Which is the minimum AWS Support plan that meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Business

Cevap

Business
The Business support plan is the minimum plan that provides access to the AWS Support API for programmatic case management and includes support for configuring common third-party software (such as operating systems and web servers). The Developer plan does not include these features, while the Enterprise and Enterprise On-Ramp plans are higher-tier plans and thus do not represent the minimum option.

Adım Adım Çözüm

1
Analyze the technical requirements of the scenario.
The requirements are programmatic case management (requiring the AWS Support API) and support for configuring third-party software applications.
These specific features are not available on all AWS Support plans and require a minimum tier.
2
Evaluate the capabilities of the lowest-tier support plans.
The Basic and Developer plans do not support the AWS Support API or third-party software assistance.
Developer support only provides email access during business hours for a single primary contact and does not allow API access.
3
Identify the lowest-cost plan that supports all specified features.
The Business plan is the lowest tier that provides access to the AWS Support API and support for third-party software.
While Enterprise On-Ramp and Enterprise plans also offer these features, the Business plan is the most cost-effective and meets the 'minimum' requirement.

Anahtar Kavram

AWS Support plan features and tiers
Tahmini Süre:1m 0s
Soru 1388Soru →

A fintech startup is developing a mobile banking application. The startup wants to implement two features to improve accessibility and security: automatically read account balances and transaction alerts aloud to visually impaired users, and authenticate users by comparing a live selfie against their registered profile photo. Which two AWS services should the startup integrate into their application to achieve these features? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Polly; Amazon Rekognition

Cevap

Amazon Polly and Amazon Rekognition
The correct services are Amazon Polly and Amazon Rekognition. Amazon Polly converts written text into spoken audio, making it ideal for reading balances and alerts. Amazon Rekognition analyzes images to compare faces, which satisfies the authentication requirement.

Adım Adım Çözüm

1
Analyze the first requirement: reading text-based account balances and alerts aloud.
Identify that a text-to-speech service is required. Amazon Polly matches this need by converting written text into lifelike spoken audio.
Choosing the correct AI service for audio synthesis requires mapping text-to-speech to Amazon Polly.
2
Analyze the second requirement: comparing a live selfie image with a registered profile photo.
Identify that computer vision and image analysis are required. Amazon Rekognition matches this need by offering facial comparison features.
Choosing the correct AI service for visual comparison requires mapping facial matching to Amazon Rekognition.

Anahtar Kavram

AWS machine learning services are purpose-built to handle specific AI tasks such as text-to-speech (Amazon Polly) and image/video analysis (Amazon Rekognition).
Soru 1389Soru →

A media streaming service is migrating its core platform to AWS. The operations team requires round-the-clock (24/7) technical support via phone, email, and chat to resolve urgent system issues. What is the minimum AWS Support plan that satisfies these requirements?

Cevabı ve açıklamayı göster

Cevap: Business Support

Cevap

Business Support
The Business Support plan is the minimum tier that provides 24/7 technical support via phone, email, and chat with Cloud Support Engineers. This fits the operations team's requirement for round-the-clock support across multiple communication channels.

Adım Adım Çözüm

1
Analyze the technical support requirement
The scenario requires 24/7 access to technical support via phone, email, and chat.
This helps filter out plans that only offer business-hours email support or no technical support.
2
Determine the minimum plan matching the channel and availability needs
Basic Support offers no technical support. Developer Support offers only email during business hours. Business Support provides 24/7 access to phone, email, and chat. Enterprise Support also provides this but at a higher cost tier.
By comparing the support channels and availability of each tier, Business Support is identified as the entry-level plan that fulfills all requirements.

Anahtar Kavram

AWS Support plans differ in their technical support availability, contact channels, and response times. The Business Support plan is the entry level for 24/7 phone, email, and chat support with cloud support engineers.
Tahmini Süre:45s
Soru 1390Soru →

A global non-profit organization is launching a public safety alert portal. The organization has two key requirements: first, static emergency documents must be distributed to users worldwide with the lowest possible latency; second, the primary application servers must be deployed in a configuration that ensures continuous operation even if an entire data center facility goes offline. Which two of the following AWS Global Infrastructure components should the organization use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Edge Locations to cache static alert documents close to global viewers; Multiple Availability Zones to deploy redundant application servers within a Region

Cevap

The organization should use AWS Edge Locations to cache static alert documents close to global viewers, and multiple Availability Zones to deploy redundant application servers within a Region.
The correct options identify the proper mapping of requirements to AWS infrastructure components. Static content delivery with low latency is solved using AWS Edge Locations, which cache data closer to global users. High availability and protection against single points of failure (such as an entire data center going offline) is solved by distributing compute resources across multiple Availability Zones within an AWS Region.

Adım Adım Çözüm

1
Analyze the requirement for low-latency global distribution of static documents.
Identify AWS Edge Locations as the correct global infrastructure component for caching and content delivery closer to end users.
Edge locations run Amazon CloudFront to cache content at locations closest to users globally.
2
Analyze the requirement for high availability and protection against data center facility failures.
Identify that deploying across multiple Availability Zones ensures fault tolerance.
Each Availability Zone is physically separate and isolated from failures in other zones within the same AWS Region.

Anahtar Kavram

AWS Global Infrastructure components (Edge Locations and Availability Zones) and their resilience and latency characteristics.
Soru 1391Soru →

A manufacturing enterprise uses AWS Organizations to consolidate the billing of its three separate business units, each operating in its own AWS member account. Two of the accounts store large volumes of data in the Amazon S3 Standard storage class. Which of the following describes how AWS determines the storage pricing for this enterprise under consolidated billing?

Cevabı ve açıklamayı göster

Cevap: AWS aggregates the S3 storage usage across all member accounts in the organization, allowing the enterprise to reach lower-priced volume tiers faster.

Cevap

AWS aggregates the S3 storage usage across all member accounts in the organization, allowing the enterprise to reach lower-priced volume tiers faster.
The correct option is that AWS aggregates S3 storage usage across all member accounts in the organization. S3 Standard pricing features volume discount tiers where the cost per gigabyte decreases as storage volume increases. By consolidating the usage of all member accounts, the enterprise combines its storage volume, allowing it to reach those lower-priced volume tiers faster and lower its overall S3 costs.

Adım Adım Çözüm

1
Analyze how consolidated billing handles multi-account resource usage for pricing.
AWS consolidated billing treats all member accounts in the organization as a single account for the purpose of calculating volume pricing tiers.
This behavior enables organizations with multiple accounts to pool their resource usage and qualify for volume discounts.
2
Evaluate the S3 pricing model under consolidation.
S3 Standard charges decrease per gigabyte as storage volume increases into higher tiers. Aggregating the usage of the two accounts combines their total gigabytes, pushing the organization into cheaper tier rates faster than single, isolated accounts would achieve.
This direct consolidation mechanism lowers the overall cost for the organization compared to paying individual bills.

Anahtar Kavram

Consolidated Billing Volume Discounts
Tahmini Süre:1m 30s
Soru 1392Soru →

A retail company wants to develop a custom machine learning model to predict customer churn based on historical shopping behavior. The company's data science team needs a fully managed service to prepare datasets, train the model using their custom algorithms, and deploy it to a production-ready endpoint. Which AWS service should the company use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon SageMaker

Cevap

Amazon SageMaker
Amazon SageMaker is correct because it is a fully managed service that enables data scientists and developers to quickly build, train, and deploy custom machine learning models at scale, covering the entire ML workflow from data prep to hosting.

Adım Adım Çözüm

1
Identify the core requirement of the scenario.
The scenario requires a fully managed environment to prepare datasets, train a model using custom algorithms, and deploy it to production.
This requirement points to custom model development rather than using a pre-packaged AI service.
2
Evaluate the capabilities of the listed AWS machine learning services.
Amazon SageMaker is the only listed service that manages the complete machine learning lifecycle (build, train, deploy) for custom models.
Services like Comprehend, Rekognition, and Lex are pre-trained AI services that perform specific tasks and do not support custom model training workflows.

Anahtar Kavram

Amazon SageMaker is the AWS service used to build, train, and deploy custom machine learning models, whereas other AWS AI services are pre-built and task-specific.
Tahmini Süre:1m 0s
Soru 1393Soru →

A financial services firm is migrating its transaction processing application to AWS. The application requires synchronous database replication to ensure high availability with minimal latency. Additionally, compliance regulations dictate that a copy of the transactional data must be stored in a geographically isolated location at least 250 miles away for disaster recovery. Which architectural strategy utilizing AWS global infrastructure components best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy the database instances across multiple Availability Zones within a single AWS Region, and replicate data to a separate AWS Region for disaster recovery.

Cevap

Deploy the database instances across multiple Availability Zones within a single AWS Region, and replicate data to a separate AWS Region for disaster recovery.
Deploying database instances across multiple Availability Zones in the same Region ensures high availability through synchronous replication due to low-latency links. Replicating data to a different AWS Region achieves the required geographic distance (hundreds of miles) to safeguard against regional disasters.

Adım Adım Çözüm

1
Analyze the high availability and low latency requirement.
Availability Zones (AZs) in the same AWS Region are connected by high-speed, low-latency links, supporting synchronous replication.
Designing for high availability requires deploying resources across multiple AZs to protect against localized failures while maintaining sub-millisecond latencies.
2
Analyze the geographical isolation and disaster recovery requirement.
AWS Regions are geographically separated by hundreds of miles, which satisfies the 250-mile isolation requirement.
Replicating backups or data to a separate AWS Region protects against large-scale disasters that could affect an entire region.

Anahtar Kavram

AWS Regions provide geographical separation for disaster recovery and compliance, while Availability Zones provide isolated locations within a Region designed for high availability and low-latency synchronous replication.
Soru 1394Soru →

A media company is migrating several independent business units to AWS. The company wants to centrally manage billing to receive a single invoice and automatically benefit from volume pricing discounts by combining usage. Additionally, the security department must establish permission guardrails to restrict access to unauthorized AWS services for all accounts.

Which two features or capabilities of AWS Organizations will allow the company to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Consolidated billing to aggregate usage across all accounts and qualify for volume tier discounts.; Service Control Policies (SCPs) to specify the maximum available permissions for member accounts.

Cevap

The correct options are consolidated billing (which aggregates usage to qualify for volume discounts) and Service Control Policies (which define permission guardrails for member accounts).
Consolidated billing combines the usage of all member accounts in an organization to qualify for volume discounts, while also generating a single invoice. Service Control Policies (SCPs) specify the maximum permissions for member accounts, allowing security teams to restrict access to unauthorized AWS services.

Adım Adım Çözüm

1
Analyze the business requirements for centralizing billing and applying service restrictions.
Identify that the solution must handle consolidated billing/volume discounts and account-level service restrictions.
To narrow down the AWS Organizations features required.
2
Evaluate the available features of AWS Organizations.
Consolidated billing provides a single invoice and combines usage for volume pricing, while Service Control Policies (SCPs) restrict service access across accounts.
To select the matching correct answers.
3
Identify why other options are incorrect.
IAM groups are account-specific, AWS Budgets only alerts on costs rather than restricting services, and Support plans do not share enterprise tier upgrades across accounts.
To rule out the distractors.

Anahtar Kavram

Centralized governance and billing using AWS Organizations features, specifically Consolidated Billing and Service Control Policies (SCPs).
Soru 1395Soru →

A financial services firm runs a risk-assessment analysis every Friday night. The analysis requires high-performance Amazon EC2 instances to run continuously for 6 hours. The process cannot be interrupted, as a single failure requires restarting the entire analysis from the beginning. Which EC2 purchasing option is the most cost-effective for this workload?

Cevabı ve açıklamayı göster

Cevap: On-Demand Instances

Cevap

On-Demand Instances
On-Demand Instances are the correct choice because they offer a pay-as-you-go model with no long-term commitment or upfront payment. Since the workload only runs for 6 hours a week and cannot tolerate interruptions, paying exclusively for those 6 hours of guaranteed computing time is the most economical option.

Adım Adım Çözüm

1
Analyze the workload characteristics: it runs for a short duration (6 hours once a week), is periodic, and cannot tolerate any interruptions.
Workload is classified as short-term, low-utilization (6 out of 168 hours per week), and interruption-intolerant.
This rules out Spot Instances (due to interruption risk) and indicates that constant-running options (Reserved Instances or Savings Plans) may be wasteful.
2
Evaluate the financial commitment of Reserved Instances versus On-Demand pricing.
On-Demand charges only for the 6 hours of weekly use, whereas Reserved Instances charge for all 168 hours of the week regardless of usage.
A 1-year or 3-year commitment is not cost-effective for a workload running only ~3.5% of the time.
3
Determine the best option among all available models.
On-Demand Instances provide the necessary reliability without the overhead of long-term commitment costs.
It offers the lowest total cost of ownership while fully meeting the application's stability requirements.

Anahtar Kavram

Selecting the most cost-effective EC2 purchasing option based on workload duration, pattern, and fault tolerance.
Soru 1396Soru →

A research institution uses AWS Organizations to manage multiple AWS accounts for various departments. To optimize costs, the finance team wants to implement consolidated billing to aggregate Amazon S3 storage usage across all accounts. Which of the following describes how AWS determines S3 pricing for this organization?

Cevabı ve açıklamayı göster

Cevap: AWS aggregates the S3 storage usage of all accounts in the organization to compute volume pricing tier discounts on the consolidated bill

Cevap

AWS aggregates the S3 storage usage of all accounts in the organization to compute volume pricing tier discounts on the consolidated bill.
Under consolidated billing, AWS aggregates the S3 storage usage of all member accounts in the organization, treating them as a single account for the purpose of volume pricing tiers. This allows the organization to reach higher discount tiers faster than individual accounts could on their own.

Adım Adım Çözüm

1
Analyze how volume pricing tiers operate in AWS Consolidated Billing.
AWS combines the usage of all member accounts for services like Amazon S3 to calculate volume discounts.
Consolidating usage enables organizations to qualify for lower pricing tiers more quickly than separate accounts acting independently.
2
Evaluate the role of Service Control Policies (SCPs) in AWS Organizations.
SCPs are governance and authorization tools, not billing mechanisms.
This rules out the option involving SCPs for discount distribution.
3
Examine the security and cloud economics implications.
Billing consolidation does not change the operational expense model to capital expense, nor does it require root credentials.
This rules out the remaining incorrect options.

Anahtar Kavram

AWS Consolidated Billing volume pricing aggregation
Soru 1397Soru →

An organization needs to interconnect ten Amazon VPCs in a single AWS Region using a hub-and-spoke topology to simplify routing management. In addition, the security team requires that inbound traffic from a specific external IP address range be blocked at the subnet boundary before it reaches any resources. Which combination of AWS services and features should be used to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway to interconnect the VPCs, and Network ACLs to block the IP range at the subnet boundary

Cevap

AWS Transit Gateway to interconnect the VPCs, and Network ACLs to block the IP range at the subnet boundary
The correct option combines AWS Transit Gateway and Network ACLs. AWS Transit Gateway serves as a central hub to simplify routing across multiple VPCs in a hub-and-spoke design. Network ACLs operate at the subnet boundary and support stateless rules, allowing administrators to explicitly define block (deny) rules for specific external IP address ranges.

Adım Adım Çözüm

1
Analyze the requirement for connecting ten VPCs using a simplified hub-and-spoke topology.
Identify that AWS Transit Gateway acts as a central cloud router to connect multiple VPCs without the complexity of a point-to-point mesh.
VPC Peering does not support transitive routing, requiring a complex mesh of connections as the number of VPCs grows.
2
Analyze the security requirement to block a specific external IP range at the subnet boundary.
Identify that Network Access Control Lists (Network ACLs) operate at the subnet level and support explicit deny rules.
Security Groups operate at the instance level (network interface) and only support allow rules, making them incapable of blocking specific IP ranges at the subnet boundary.

Anahtar Kavram

AWS hybrid and multi-VPC networking topologies combined with subnet-level security controls.
Tahmini Süre:1m 30s
Soru 1398Soru →

A legal technology platform needs to analyze uploaded contract files to automatically identify and redact sensitive customer details, such as names, phone numbers, and home addresses. Which AWS service should the platform use to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: Amazon Comprehend

Cevap

Amazon Comprehend is the correct service because it is a natural language processing service that includes pre-built APIs to locate and redact sensitive personally identifiable information (PII) within text documents.
Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to find insights and relationships in text. It features built-in support for identifying and redacting personally identifiable information (PII) such as names, phone numbers, and addresses from text documents.

Adım Adım Çözüm

1
Analyze the business requirement
The requirement is to identify and redact sensitive textual data (PII) from contract files.
Identifying that the input is text and the task involves understanding textual entities (names, addresses) indicates a natural language processing (NLP) requirement.
2
Evaluate AWS machine learning services for text analysis
Amazon Comprehend provides pre-trained models to detect PII in text documents without requiring machine learning expertise.
Matching the pre-trained NLP capability to Amazon Comprehend ensures a fast, serverless implementation that meets the requirement.

Anahtar Kavram

AWS Machine Learning Services for Natural Language Processing (NLP)
Soru 1399Soru →

A media streaming startup is designing its infrastructure on AWS and needs to deploy two distinct workloads on Amazon EC2:

1. A transcoding service that processes user-uploaded video files. This workload is highly fault-tolerant, can be paused and resumed at any time, and does not have a strict completion deadline.
2. A core catalog database that displays video metadata to customers. This workload must run continuously 24/7 to ensure high availability and has predictable resource utilization.

Which two Amazon EC2 pricing models should the startup select to run these workloads most cost-effectively? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Spot Instances; Reserved Instances

Cevap

Spot Instances and Reserved Instances
The transcoding service is highly fault-tolerant and has no strict deadline, meaning it can handle potential interruptions. This makes it an ideal fit for Spot Instances, which offer the largest discounts in exchange for the risk of interruption. The core catalog database is a steady-state workload that runs 24/7 with predictable utilization, making it an ideal fit for Reserved Instances, which provide substantial discounts over On-Demand rates in exchange for a 1-year or 3-year usage commitment.

Adım Adım Çözüm

1
Evaluate the requirements of the transcoding service.
The transcoding service is flexible, can be interrupted, and has no strict deadline.
Identify the EC2 pricing model that offers the largest discount for interruptible, fault-tolerant workloads, which is Spot Instances.
2
Evaluate the requirements of the core catalog database.
The database must run continuously 24/7 and has predictable resource utilization.
Identify the EC2 pricing model that offers a significant discount for steady-state, long-term committed workloads, which is Reserved Instances (or Savings Plans).

Anahtar Kavram

Selecting cost-optimized Amazon EC2 pricing models based on workload predictability, urgency, and fault tolerance.
Tahmini Süre:1m 30s
Soru 1400Soru →

A logistics company wants to run a fleet optimization application that requires single-digit millisecond latency for users located in a metropolitan area that does not have an active AWS Region. The company wants to run Amazon EC2 instances and other AWS services locally without managing their own physical infrastructure. Which AWS global infrastructure component is designed to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS Local Zones

Cevap

AWS Local Zones
AWS Local Zones are a type of AWS infrastructure deployment that places compute, storage, database, and other select services close to large population, industry, and IT centers. This allows customers to run applications that require single-digit millisecond latency for local end-users without needing to host or manage their own physical data center infrastructure.

Adım Adım Çözüm

1
Analyze the business requirements: single-digit millisecond latency in a metropolitan area without an AWS Region, running standard EC2 instances, and no on-premises physical hardware management.
Identify that the solution must be a fully managed AWS infrastructure offering that brings compute resources close to a specific geographic city outside of standard AWS Regions.
This filters out options requiring on-premises hardware management or those that are only situated within main Regions.
2
Compare the characteristics of AWS Local Zones, Edge Locations, Outposts, and Availability Zones against the requirements.
AWS Local Zones extend AWS Regions to place resources like EC2 closer to metropolitan areas, fitting all criteria. Edge Locations do not run standard EC2 instances, Outposts require customer physical facilities, and Availability Zones are constrained to the parent Region's geography.
To select the specific AWS global infrastructure component that perfectly aligns with low latency, managed infrastructure, and metropolitan placement.

Anahtar Kavram

AWS Local Zones allow running latency-sensitive application components close to end-users in metropolitan areas without deploying on-premises hardware.
ÖncekiSayfa 70 / 74Sonraki