Examkin

Tüm alıştırma soruları

1473 soru

Tüm türler1,473Çoktan seçmeli755Çoklu seçim693Eşleştirme25
Soru 1401Soru →

A startup is deploying a web-based platform with two virtual networks: one for their frontend web servers and one for their backend database. They want to enable private, low-latency communication between these two virtual networks without routing traffic through the public internet. At the same time, they need to restrict database access so that only the frontend web servers can communicate with the database instances on port 3306, while automatically allowing returning traffic. Which two AWS network or security features should the company implement to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: VPC Peering; Security Groups

Cevap

VPC Peering and Security Groups
VPC Peering is correct because it connects two VPCs directly, privately, and with minimal latency. Security Groups are correct because they control traffic statefully at the instance level and allow referencing the frontend instances' security group as the source.

Adım Adım Çözüm

1
Analyze the connection requirement.
The company needs a simple, private, low-latency connection between exactly two virtual networks (VPCs) without internet traversal.
VPC Peering is the most direct and cost-effective method to connect two VPCs. AWS Transit Gateway is designed for larger, complex hub-and-spoke multi-VPC networks and is unnecessary here.
2
Analyze the traffic restriction and security requirements.
The company needs to restrict traffic specifically to database instances on port 3306 based on the frontend source, and ensure returning traffic is automatically allowed.
Security Groups operate statefully at the instance level, allowing returning traffic automatically and allowing the frontend security group to be referenced as the source. Network ACLs operate at the subnet level, are stateless, and cannot reference other security groups.

Anahtar Kavram

AWS hybrid and inter-VPC network connectivity combined with stateful instance-level security filtering.
Soru 1402Soru →

A financial technology company manages separate AWS accounts for its customer-facing mobile application, core banking ledger, and data analytics platform. To simplify administrative overhead and leverage volume discounts, the company decides to create an organization in AWS Organizations and enable consolidated billing. Which two of the following are benefits of this configuration? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A single payment method is used to pay for all linked accounts, resulting in a single monthly invoice for the organization.; AWS combines the usage of all member accounts in the organization to qualify for volume-pricing discounts on services like Amazon S3.

Cevap

The correct benefits of enabling consolidated billing in AWS Organizations are: (1) using a single payment method to pay for all linked accounts, resulting in a single monthly invoice, and (2) combining usage across all member accounts to qualify for volume-pricing discounts.
Consolidated billing in AWS Organizations provides two major benefits. First, it simplifies payment by consolidating the invoices of all linked accounts into a single monthly bill paid by a single payment method from the management account. Second, it allows the organization to benefit from volume-pricing discounts by aggregating usage (such as S3 storage volume or EC2 usage hours) across all member accounts.

Adım Adım Çözüm

1
Analyze the financial and operational capabilities of AWS Organizations consolidated billing.
Identify that consolidated billing provides a central management invoice and pools service usage for tiered discounts.
This establishes the valid pricing and operational advantages of consolidation.
2
Evaluate the distractors against AWS service limits and capabilities.
Eliminate options involving setting budgets with Service Control Policies, transforming OpEx to CapEx, or automatically deleting member root account credentials.
SCPs restrict API actions but do not manage alerts or costs; AWS remains an OpEx model; and root user accounts are not deleted when joining an organization.

Anahtar Kavram

Consolidated billing features and boundaries within AWS Organizations
Tahmini Süre:1m 30s
Soru 1403Soru →

A hospitality company wants to analyze audio recordings from its guest feedback kiosks located in hotel lobbies. The company needs to convert the spoken audio feedback into written text and then analyze the text to identify brand names and determine the guests' sentiment. Which two AWS services should the company use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Transcribe; Amazon Comprehend

Cevap

Amazon Transcribe and Amazon Comprehend
To satisfy the requirements, the company should first use Amazon Transcribe to convert the spoken audio from the feedback kiosks into written text. Next, they should use Amazon Comprehend to analyze the resulting text to identify specific entities (such as brand names) and detect the overall sentiment of the guest feedback.

Adım Adım Çözüm

1
Determine the service needed to convert the guest audio recordings into written text.
Amazon Transcribe is selected.
Amazon Transcribe converts speech to text, which generates the required transcripts from the audio files.
2
Determine the service needed to analyze the generated text transcripts for brand names and customer sentiment.
Amazon Comprehend is selected.
Amazon Comprehend is designed to analyze text data for entities (like brand names) and sentiment (positive, negative, neutral, or mixed).

Anahtar Kavram

Selecting and combining pre-trained AWS AI/ML services to solve speech-to-text and natural language processing business requirements.
Soru 1404Soru →

A software development firm runs integration tests on Amazon EC2 instances. These tests are triggered automatically throughout the day whenever developers commit code. Each test run takes between 15 to 45 minutes to complete. The testing environment must start immediately upon trigger and cannot tolerate any interruptions during execution. Which Amazon EC2 pricing model is the most cost-effective for this workload?

Cevabı ve açıklamayı göster

Cevap: On-Demand Instances

Cevap

On-Demand Instances
On-Demand Instances are the most appropriate choice because they provide reliable compute capacity with no long-term commitment. They start immediately upon request, are billed per second (with a 60-second minimum), and will not be interrupted by AWS during the test execution, perfectly matching the requirements of short-term, unpredictable, and non-interruptible workloads.

Adım Adım Çözüm

1
Analyze the workload requirements: it runs sporadically throughout the day for short durations (15 to 45 minutes), requires immediate availability, and cannot tolerate interruptions.
This eliminates options that allow resource interruption or require continuous, long-term resource commitments.
Understanding constraints is critical to matching the workload to the correct pricing model.
2
Evaluate the pricing options against these requirements: Spot Instances can be interrupted, and Reserved Instances or Savings Plans require a 1-year or 3-year commitment which leads to paying for idle time.
On-Demand Instances provide immediate availability, guarantee no interruptions, and charge only for the exact seconds the instance runs.
On-Demand matches the requirement for reliable, short-term, and irregular compute capacity.

Anahtar Kavram

Selecting the optimal Amazon EC2 pricing model based on workload patterns and constraints

Alternatif Yöntem

Analyzing the trade-off between flexible consumption and long-term commitment helps identify On-Demand as the only model that offers per-second billing with guaranteed availability and zero interruption risk.
Tahmini Süre:1m 30s
Soru 1405Soru →

A government agency is migrating its national census processing system to AWS. The agency is legally mandated to ensure that all census database records remain strictly within the country's geographic boundaries. Additionally, the system architecture must be designed to withstand the complete failure of an entire physical data center facility without any service interruption.

Which of the following deployment strategies best satisfies these requirements?

Cevabı ve açıklamayı göster

Cevap: Distributing the database instances across multiple Availability Zones within a single AWS Region located in the host country.

Cevap

Distributing the database instances across multiple Availability Zones within a single AWS Region located in the host country.
Distributing the database across multiple Availability Zones within a single AWS Region satisfies both constraints. Availability Zones are physically separated and isolated from one another within a Region, protecting the system from a localized physical disaster. By keeping the deployment within a single AWS Region inside the host country, the data residency requirement is strictly met.

Adım Adım Çözüm

1
Identify the compliance and resilience requirements from the scenario.
The system needs to keep all data within the national borders (data residency) and survive a complete data center outage (high availability/disaster recovery).
Establishing clear constraints prevents selecting options that violate legal compliance or fail to provide redundant physical infrastructure.
2
Evaluate the options against the data residency constraint.
Using multiple AWS Regions or replicating logs to another country violates the residency mandate, while using a single Region inside the country maintains compliance.
AWS Regions are geographically isolated, and data replication does not occur across Regions unless explicitly configured by the customer.
3
Evaluate the remaining options against the high availability and physical disaster recovery constraint.
Availability Zones are physically distinct, isolated locations within a Region designed to withstand localized disasters. Using multiple Availability Zones provides high availability, whereas Edge Locations or a single Local Zone do not support multi-data-center database replication.
A single Region contains multiple Availability Zones, allowing the agency to build a highly available architecture without transferring data across country borders.

Anahtar Kavram

AWS Global Infrastructure design for high availability and compliance, specifically the difference between Regions and Availability Zones.
Tahmini Süre:1m 15s
Soru 1406Soru →

An international e-learning platform is optimizing its deployment on AWS. The platform has two key requirements: first, it must store user profile data in a database designed to withstand the complete failure of an entire data center facility without data loss; second, it must minimize latency for students downloading course syllabus PDF documents from different continents. Which of the following AWS infrastructure solutions should the company utilize to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Replicating the database across multiple Availability Zones within the same AWS Region.; Storing and caching the syllabus documents in AWS Edge Locations globally.

Cevap

Replicating the database across multiple Availability Zones within the same AWS Region, and storing and caching the syllabus documents in AWS Edge Locations globally.
Replicating the database across multiple Availability Zones within a single AWS Region ensures high availability because Availability Zones are physically separated, isolated data centers connected by low-latency networks, allowing synchronous failover. Caching static documents at AWS Edge Locations utilizes the global Amazon CloudFront network to deliver content from locations physically closer to users, thereby minimizing latency.

Adım Adım Çözüm

1
Analyze the database resilience requirement.
Identify that a database must survive the loss of an entire data center facility.
AWS Availability Zones consist of one or more discrete data centers with redundant power, networking, and connectivity, designed for high availability and synchronous replication within a Region.
2
Analyze the global document retrieval latency requirement.
Identify that files need to be retrieved with minimum latency by users distributed across different continents.
AWS Edge Locations cache content close to end users globally using Amazon CloudFront, reducing latency for static file downloads.

Anahtar Kavram

AWS Global Infrastructure components serve different design objectives: Availability Zones provide high availability and isolation within a single Region, while Edge Locations provide low-latency global content delivery.
Tahmini Süre:1m 30s
Soru 1407Soru →

A healthcare provider is deploying a telemedicine application on AWS. The application must be designed for high availability and fault tolerance, ensuring that if a physical data center experiences a power outage, the application continues to run without downtime. The system must also support synchronous database replication within the same geographical territory.

Which AWS Global Infrastructure component should the company use to distribute their application instances to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Availability Zones

Cevap

Availability Zones
Availability Zones are the correct choice because they are physically isolated locations within an AWS Region, designed to protect applications from local power or cooling outages while remaining close enough to support synchronous data replication and high availability.

Adım Adım Çözüm

1
Identify the core requirement for high availability and physical redundancy within a single geographical territory.
The requirement demands physical isolation to survive localized power outages while supporting synchronous replication (low latency).
This helps narrow down infrastructure options that are close enough for low latency but physically isolated.
2
Compare AWS Regions, Availability Zones, Edge Locations, and AWS Outposts.
Availability Zones are distinct groups of physical data centers within a Region, connected by low-latency links. AWS Regions represent separate geographic territories. Edge Locations cache content but do not run applications. AWS Outposts are on-premises.
Choosing the correct component ensures the system meets the high availability and synchronous replication requirements.

Anahtar Kavram

AWS Global Infrastructure components, specifically the distinction between Regions, Availability Zones, Edge Locations, and hybrid options.
Tahmini Süre:1m 0s
Soru 1408Soru →

A cloud administrator is configuring network security for Amazon EC2 instances. The administrator needs to ensure that when inbound web traffic is allowed on port 443, the corresponding outbound response traffic is automatically permitted to return to the client without requiring an explicit outbound rule. Which AWS security feature should the administrator use to achieve this stateful behavior?

Cevabı ve açıklamayı göster

Cevap: A Security Group

Cevap

A Security Group
A Security Group is a stateful firewall that controls inbound and outbound traffic for Amazon EC2 instances. Because it is stateful, if an inbound rule allows traffic (such as on port 443), the corresponding outbound response traffic is automatically permitted to return, regardless of any outbound rules.

Adım Adım Çözüm

1
Identify the requirement for stateful behavior where inbound allowed traffic automatically permits returning outbound response traffic.
The security resource must track the state of connections at the instance level.
Stateful firewalls automatically allow response traffic, whereas stateless firewalls require rules in both directions.
2
Evaluate the available options to determine which one is a stateful security feature at the instance level.
Security Groups are stateful and operate at the instance level, whereas Network ACLs are stateless and operate at the subnet level.
This matches the requirement to allow return traffic automatically without explicit outbound rules.

Anahtar Kavram

Stateful vs Stateless Network Filtering in AWS
Soru 1409Soru →

An online education platform wants to automatically scan uploaded student profile pictures to identify and flag inappropriate or unsafe content before the images are published. The platform wants to use a pre-trained, fully managed AWS service to achieve this without building custom machine learning models. Which AWS service should the platform use for this capability?

Cevabı ve açıklamayı göster

Cevap: Amazon Rekognition

Cevap

Amazon Rekognition
The correct answer is Amazon Rekognition. This service provides pre-trained computer vision capabilities that allow developers to automate image and video analysis, including content moderation to flag inappropriate or unsafe images, without needing machine learning expertise or custom model development.

Adım Adım Çözüm

1
Analyze the business requirement and data type.
The platform needs to analyze images (profile pictures) to identify unsafe or inappropriate content.
Identifying the target data type (images) filters out machine learning services that only process text or audio.
2
Identify the model training constraint.
The service must be fully managed, pre-trained, and require no custom model building or training.
This rules out Amazon SageMaker, which is designed for building, training, and deploying custom models from scratch.
3
Select the correct managed AWS service for computer vision.
Amazon Rekognition is selected as it offers pre-trained computer vision models, including content moderation for images.
Amazon Rekognition directly fulfills the requirement of analyzing image content using built-in, pre-trained models.

Anahtar Kavram

AWS Machine Learning Services categorization and use cases
Tahmini Süre:1m 0s
Soru 1410Soru →

An online educational institute wants to expand its reach by making its English-recorded lecture videos accessible to global students. The institute requires a solution that can automatically convert the audio from the lectures into text transcripts and then translate those English text transcripts into Spanish and French. Which two AWS services should the institute use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Transcribe; Amazon Translate

Cevap

The institute should use Amazon Transcribe to convert the lecture audio into text transcripts, and Amazon Translate to convert those transcripts into Spanish and French.
The organization needs to perform speech-to-text transcription and language translation. Amazon Transcribe is the managed service that converts speech to text, and Amazon Translate is the managed service designed for translating text from one language to another.

Adım Adım Çözüm

1
Identify the service needed to convert audio lectures into text transcripts.
Amazon Transcribe is identified as the service that converts speech to text.
The requirement is to automatically convert the audio from the lectures into text transcripts.
2
Identify the service needed to translate the text transcripts from English to Spanish and French.
Amazon Translate is identified as the neural machine translation service that translates text.
The requirement is to translate the English text transcripts into Spanish and French.

Anahtar Kavram

AWS Machine Learning services specialize in different modalities; speech-to-text requires Amazon Transcribe, while language translation requires Amazon Translate.
Tahmini Süre:1m 30s
Soru 1411Soru →

A retail corporation is expanding its AWS infrastructure and now manages twenty Virtual Private Clouds (VPCs) across multiple departments. To optimize operations, the network engineering team wants to implement a centralized network hub to route traffic between all VPCs and their on-premises data center without establishing complex point-to-point connections. At the same time, the security team requires the ability to block traffic from specific external IP addresses at the boundary of each subnet.

Which two AWS features or services should the corporation implement to satisfy both the routing and security requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway; Network Access Control Lists (NACLs)

Cevap

AWS Transit Gateway and Network Access Control Lists (NACLs)
AWS Transit Gateway acts as a central hub to connect multiple VPCs and on-premises networks, simplifying routing compared to point-to-point peering. Network Access Control Lists (NACLs) operate at the subnet level and allow explicit deny rules to block specific IP addresses.

Adım Adım Çözüm

1
Analyze the routing requirement.
The company needs a centralized hub to route traffic across twenty VPCs and on-premises without complex point-to-point connections.
AWS Transit Gateway is designed precisely for this hub-and-spoke architecture, replacing complex VPC peering meshes.
2
Analyze the security requirement.
The company needs to block traffic from specific IP addresses at the subnet level.
Network Access Control Lists (NACLs) operate at the subnet boundary and support explicit 'deny' rules, which is necessary to block specific IP addresses. Security groups only support 'allow' rules and operate at the instance level.

Anahtar Kavram

AWS Network Services (Transit Gateway and NACLs)
Soru 1412Soru →

An entertainment company wants to run a real-time video processing application that requires single-digit millisecond latency for users in a metropolitan area where AWS does not have a full Region. The company wants to deploy compute and storage resources close to these users without owning or operating any physical on-premises infrastructure. Which AWS global infrastructure component should the company use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS Local Zones

Cevap

AWS Local Zones
AWS Local Zones allow developers to run compute, storage, and database services close to end-users in specific metropolitan areas. This satisfies the requirement of achieving single-digit millisecond latency for video processing workloads while shifting the physical infrastructure management entirely to AWS.

Adım Adım Çözüm

1
Analyze the constraint regarding physical on-premises infrastructure.
AWS Outposts is eliminated because it requires installing and managing physical hardware within the customer's own facility.
The company wants to deploy resources without owning or operating physical infrastructure.
2
Evaluate the workload requirement to run compute and storage applications against latency-reducing components.
AWS Edge Locations are eliminated because they are content delivery network (CDN) cache endpoints and do not support running arbitrary compute workloads.
The application requires running real-time video processing compute resources.
3
Differentiate between mobile network latency components and general metropolitan latency components.
AWS Wavelength is eliminated as it is specific to 5G mobile network carriers, leaving AWS Local Zones as the correct solution.
AWS Local Zones extend AWS Regions to metropolitan areas to run general latency-sensitive workloads close to local users.

Anahtar Kavram

AWS Local Zones
Soru 1413Soru →

A healthcare provider is migrating its patient record system to AWS. To comply with national regulations, all patient data must remain physically within a specific country's borders. Additionally, the application must be designed to remain fully operational even if an entire data center facility experiences a physical power outage. Which of the following AWS Global Infrastructure configurations best meets both the data residency and high availability requirements?

Cevabı ve açıklamayı göster

Cevap: Deploying the application in a single AWS Region located in the target country, distributing the workload across multiple Availability Zones.

Cevap

Deploying the application in a single AWS Region located in the target country, distributing the workload across multiple Availability Zones.
Deploying the application in a single AWS Region located within the target country satisfies the data residency requirement because AWS does not replicate data outside of a selected Region unless configured by the customer. Distributing the application across multiple Availability Zones within that Region satisfies the high availability requirement, as each Availability Zone consists of one or more physical data centers designed to be isolated from failures in other zones.

Adım Adım Çözüm

1
Analyze the data residency constraint.
The application and all its data must reside within a single country's borders. This means the deployment must be contained within an AWS Region that is physically located inside that country.
Deploying resources across multiple regions internationally would violate data sovereignty regulations.
2
Analyze the high availability constraint.
The application must survive the outage of an entire data center facility. This requires distributing the application across multiple Availability Zones within the chosen AWS Region.
Each Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity.

Anahtar Kavram

AWS Regions provide data residency boundaries, while Availability Zones within a region provide fault isolation and high availability.
Tahmini Süre:1m 0s
Soru 1414Soru →

A biotechnology startup runs genomic sequencing batch jobs that take 4 to 6 hours to complete. The sequencing application is designed to automatically checkpoint its progress every 15 minutes, allowing any interrupted job to resume from the last saved state without data loss. The startup needs to run these jobs at the lowest possible cost. Which Amazon EC2 pricing model is the most cost-effective choice for this workload?

Cevabı ve açıklamayı göster

Cevap: Spot Instances

Cevap

Spot Instances
Spot Instances are ideal for workloads that have flexible start and end times, can withstand interruptions, and require low cost. Because the genomic sequencing jobs checkpoint their progress every 15 minutes, they can easily recover from an interruption when AWS reclaims the capacity, allowing the startup to take advantage of the substantial discounts (up to 90% off) offered by Spot Instances.

Adım Adım Çözüm

1
Analyze the workload characteristics described in the scenario.
The genomic sequencing batch jobs are flexible in timing, take 4 to 6 hours, and are fault-tolerant because they save checkpoints every 15 minutes. This means they can be interrupted and resumed without significant loss of progress.
Understanding the tolerance for interruptions is key to selecting the correct EC2 pricing model.
2
Compare the cost-effectiveness and operational behavior of EC2 pricing models against these characteristics.
Spot Instances utilize spare EC2 capacity at steep discounts but can be reclaimed by AWS with a 2-minute warning. Since the application checkpoints every 15 minutes, it can handle reclaim events gracefully, making Spot Instances the lowest-cost option.
Selecting the option that matches the highest discount with the workload's ability to tolerate interruptions.

Anahtar Kavram

AWS Pricing Models
Soru 1415Soru →

A real estate agency wants to add an interactive virtual assistant to its property portal. The assistant must understand natural language text inputs from users to answer FAQs about property listings and help users book appointments for property viewings. Which AWS service should the agency use to build this conversational chatbot?

Cevabı ve açıklamayı göster

Cevap: Amazon Lex

Cevap

Amazon Lex
Amazon Lex is the correct service because it provides natural language understanding and automatic speech recognition to build conversational interfaces (chatbots) that can understand user intent and execute tasks like booking appointments.

Adım Adım Çözüm

1
Identify the core requirement of the scenario.
The requirement is to build an interactive virtual assistant (chatbot) that understands natural language text inputs to answer questions and book appointments.
Clarifying the specific business need allows selection of the appropriate specialized AWS machine learning service.
2
Evaluate the capabilities of the available AWS machine learning services.
Amazon Lex is designed specifically for building conversational interfaces using voice and text, whereas other options perform tasks like text-to-speech (Amazon Polly), speech-to-text (Amazon Transcribe), or text analysis (Amazon Comprehend).
Selecting the service that natively supports dialog management and intent recognition is required to meet the objective.

Anahtar Kavram

AWS Machine Learning Services for conversational interfaces
Tahmini Süre:1m 0s
Soru 1416Soru →

An organization is designing a security strategy for its Amazon Virtual Private Cloud (Amazon VPC) to defend against network-level attacks. The security team requires a stateless traffic filtering mechanism that can evaluate rules at the boundary of a subnet. Which Amazon VPC feature should the security team implement to satisfy this requirement?

Cevabı ve açıklamayı göster

Cevap: Network Access Control Lists

Cevap

Network Access Control Lists
Network Access Control Lists (NACLs) act as a firewall for associated subnets, controlling both inbound and outbound traffic at the subnet boundary. They are stateless, meaning that return traffic must be explicitly allowed by rules.

Adım Adım Çözüm

1
Analyze the requirements in the scenario: the firewall mechanism must be 'stateless' and operate at the 'subnet boundary'.
Identified key constraints: stateless filtering and subnet-level placement.
This narrows down the AWS networking features to those operating at the subnet level rather than the instance level.
2
Compare the features of Security Groups and Network Access Control Lists (NACLs).
Security Groups are stateful and operate at the instance level, whereas Network Access Control Lists (NACLs) are stateless and operate at the subnet level.
Since the requirement specifies stateless filtering at the subnet boundary, Network Access Control Lists are the correct choice.

Anahtar Kavram

Understanding the difference between stateful instance-level security groups and stateless subnet-level Network Access Control Lists (NACLs).
Soru 1417Soru →

An educational technology company is planning to deploy two distinct workloads on Amazon EC2:
1. A production student portal application that must run continuously 24/724/7 and exhibits stable, predictable usage throughout the school year.
2. A machine learning model training job that runs periodically, can be safely paused and resumed, and needs the absolute lowest cost compute options.

Which two Amazon EC2 pricing models should the company select to run these workloads in the most cost-effective manner?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reserved Instances for the continuous student portal application; Spot Instances for the periodic machine learning training job

Cevap

Reserved Instances for the continuous student portal application and Spot Instances for the periodic machine learning training job
For the continuous and predictable student portal application, Reserved Instances provide a significant discount (up to 72%72\%) in exchange for a one-year or three-year commitment. For the periodic and interruptible machine learning model training job, Spot Instances offer the lowest cost (up to a 90%90\% discount) because they utilize unused EC2 capacity and can be reclaimed by AWS with a two-minute warning.

Adım Adım Çözüm

1
Analyze the student portal application workload requirements.
The application requires constant 24/724/7 availability with a predictable load pattern.
Predictable, steady-state workloads benefit most from the significant discounts provided by Reserved Instances or Savings Plans in exchange for a commitment.
2
Analyze the machine learning model training workload requirements.
The training job is periodic, flexible, and can tolerate interruptions.
Spot Instances are the most cost-effective option for fault-tolerant, flexible workloads because they offer up to a 90%90\% discount compared to On-Demand rates.

Anahtar Kavram

AWS EC2 pricing models selection based on workload requirements
Soru 1418Soru →

A company is launching a new online training platform to serve customers globally. The platform's architecture must support two key requirements: first, it must remain operational even if an entire physical data center facility experiences a failure; second, it must deliver cached video thumbnails and static assets to users worldwide with the lowest possible latency. Which of the following AWS global infrastructure components should be utilized to satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Availability Zones; Edge Locations

Cevap

The correct components are Availability Zones and Edge Locations.
The system requirements are satisfied by combining Availability Zones for data center fault tolerance and Edge Locations for low-latency global content delivery. Availability Zones ensure that application workloads continue to run if a single physical data center fails, and Edge Locations cache static assets near global users to minimize latency.

Adım Adım Çözüm

1
Analyze the requirement for resilience against a physical data center failure.
Identify that Availability Zones are designed to isolate outages, as each zone consists of one or more distinct data center facilities with independent infrastructure.
This guarantees that if one data center experiences an outage, instances running in a different Availability Zone in the same region can continue to function.
2
Analyze the requirement for delivering cached static assets globally with minimal latency.
Identify that Edge Locations are used by Amazon CloudFront to cache media and web assets closer to users worldwide.
This reduces the distance request data travels, thereby minimizing latency for the global user base.

Anahtar Kavram

AWS Global Infrastructure components are designed for specific purposes: AWS Regions provide geographic separation, Availability Zones provide high availability and fault tolerance within a Region, Edge Locations cache content close to global users, and Local Zones place compute resources close to metropolitan areas.
Tahmini Süre:1m 30s
Soru 1419Soru →

A gaming studio is launching several multiplayer games, with each game development team operating in its own AWS account. The studio's finance team wants to consolidate billing to streamline payments and optimize costs, while the security team needs to enforce security baselines across all accounts. Which TWO statements correctly describe the behavior or features of AWS Organizations and consolidated billing in this scenario? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The usage of all member accounts is aggregated on a single monthly invoice, allowing the studio to benefit from volume-based pricing discounts across services like Amazon S3.; Service Control Policies (SCPs) can be applied to restrict which AWS services and actions can be accessed by the individual game development accounts.

Cevap

The usage of all member accounts is aggregated on a single monthly invoice to qualify for volume discounts, and Service Control Policies (SCPs) are used to restrict the maximum permissions of the member accounts.
The correct options are the ones stating that usage is aggregated on a single invoice to receive volume pricing discounts and that Service Control Policies (SCPs) can be used to restrict services and actions. Consolidated billing aggregates S3 and other usage across all member accounts to calculate volume discounts. SCPs act as central permission guardrails for member accounts.

Adım Adım Çözüm

1
Analyze the billing requirements for consolidated accounts.
Usage across all accounts (such as Amazon S3 storage) is combined on a single invoice, allowing the organization to qualify for volume-pricing discounts as a single entity.
AWS treats all accounts in an organization as a single account for billing purposes, aggregating usage to reach volume tiers.
2
Analyze the security and governance requirements.
SCPs can be applied at the root, OU, or account level to restrict maximum permissions, serving as security guardrails.
SCPs set permission boundaries but do not grant permissions; they ensure member accounts do not violate security guidelines.

Anahtar Kavram

AWS Organizations consolidated billing features and Service Control Policies (SCPs) guardrails
Soru 1420Soru →

A sovereign wealth fund based in Singapore is migrating its core financial reporting platform to AWS. To comply with national data sovereignty laws, all financial records must reside physically within Singapore. Additionally, the platform must be highly available and resilient against localized power grid or cooling failures. Which of the following infrastructure designs satisfies these requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy the application across multiple Availability Zones within the Singapore Region.

Cevap

Deploy the application across multiple Availability Zones within the Singapore Region.
The correct architecture uses multiple Availability Zones within the Singapore Region. This keeps the data within the national boundary of Singapore to satisfy compliance laws, while leveraging the physical separation, independent power, and cooling of multiple Availability Zones to ensure high availability and disaster resilience.

Adım Adım Çözüm

1
Analyze the business requirements for data residency and physical isolation.
The application must keep all data physically inside Singapore and must survive a localized power or cooling failure at a facility.
This establishes constraints: the data must remain in the Singapore Region, and the deployment must span multiple isolated infrastructure boundaries.
2
Map these constraints to AWS Global Infrastructure components.
An AWS Region provides a defined geographic boundary (Singapore), while Availability Zones (AZs) within that Region provide isolated locations with redundant power, networking, and connectivity.
Using multiple AZs in the Singapore Region ensures that if one AZ suffers a facility outage, the application remains operational in another AZ, all while keeping the data within Singapore's physical borders.

Anahtar Kavram

AWS Regions provide data sovereignty and residency boundaries, while Availability Zones provide fault isolation and high availability within a Region.
ÖncekiSayfa 71 / 74Sonraki
Tüm alıştırma soruları — AWS Certified Cloud Practitioner | Examkin