Cloud Technology and Services

499 soru

Soru 1Soru

A startup is deploying a critical database on AWS and is evaluating options for high availability and disaster recovery. The database must be resilient to localized physical events such as fires, earthquakes, or power grid failures in a metropolitan area, but the data must not leave the host country due to legal compliance. A developer suggests deploying a primary database instance in one AWS Region and a read replica in a different AWS Region within the same country, while another suggestion is to deploy the database across multiple Availability Zones within a single AWS Region. Which of the following statements correctly evaluates these proposals in the context of AWS Global Infrastructure design principles?

Cevabı ve açıklamayı göster

Cevap: Deploying across multiple Availability Zones in a single Region provides protection against localized physical events because Availability Zones are physically separated, isolated locations with independent power, cooling, and network connectivity, whereas deploying across different Regions introduces higher latency and is typically used for broader geographic disaster recovery.

Cevap

Deploying across multiple Availability Zones in a single Region provides protection against localized physical events because Availability Zones are physically separated, isolated locations with independent power, cooling, and network connectivity, whereas deploying across different Regions introduces higher latency and is typically used for broader geographic disaster recovery.
Deploying across multiple Availability Zones in a single Region provides high availability and fault tolerance against localized physical events because each Availability Zone is a physically isolated location with independent power, cooling, and networking. Because they are in the same Region, they are close enough to allow low-latency synchronous replication, while remaining in the same country to satisfy data residency regulations.

Adım Adım Çözüm

1
Analyze the requirement for resilience against localized physical events within a metropolitan area.
Identify that the system requires physical isolation with independent power, cooling, and network infrastructure.
This ensures that a localized failure (like a power outage or fire) in one facility does not cause a secondary failure in another facility.
2
Evaluate the physical separation of AWS Availability Zones (AZs).
Confirm that AZs are physically isolated locations within an AWS Region, engineered to be fault-isolated.
Deploying the database across multiple AZs meets the localized resilience requirement without crossing regional boundaries.
3
Evaluate the requirement for data residency within the host country.
Verify that an AWS Region is situated within a single country's borders, and its AZs are located in the same country.
This guarantees that data stays within the national borders, fulfilling the compliance requirement.
4
Compare the AZ deployment with cross-Region and Edge Location options.
Determine that cross-Region deployment increases latency and is for disaster recovery, while Edge Locations cannot run databases.
This validates that the multi-AZ single-Region approach is the only proposal that satisfies all constraints.

Anahtar Kavram

Physical isolation and logical boundaries of AWS Regions, Availability Zones, and Edge Locations.
Soru 2Soru

A cloud architect is reviewing the compute requirements for a media distribution platform. The platform has two distinct components:

1. A video rendering pipeline that requires deep customization of the underlying Linux kernel and direct access to physical GPU hardware resources.
2. A containerized metadata extraction service that runs on an event-driven basis in response to user uploads, with highly unpredictable traffic and a strict requirement to avoid managing host servers.

Which two of the following compute solutions should the architect select to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon EC2 instances configured with custom Amazon Machine Images (AMIs) to support the required custom operating system kernel and GPU access; AWS Fargate to run the containerized metadata extraction service dynamically without provisioning or managing host servers

Cevap

The architect should select Amazon EC2 instances configured with custom Amazon Machine Images (AMIs) to support the custom operating system and GPU requirements, and AWS Fargate to run the containerized metadata extraction service dynamically without provisioning or managing host servers.
Selecting Amazon EC2 with custom AMIs and AWS Fargate is correct because EC2 provides the administrative access needed to customize the operating system kernel and utilize physical GPU instances, while AWS Fargate provides a serverless compute engine to run containerized workloads dynamically without host management.

Adım Adım Çözüm

1
Analyze the video rendering pipeline requirements: deep kernel customization and direct GPU hardware access.
Identify that a service granting full control over the guest operating system (IaaS) and supporting GPU hardware instances is required. Amazon EC2 meets these criteria.
Serverless or fully managed services do not allow direct kernel configuration or physical hardware mappings.
2
Analyze the metadata extraction service requirements: containerized, event-driven, unpredictable usage, and no host server management.
Identify that a serverless container orchestration platform is required. AWS Fargate runs containers without requiring instance management.
AWS Fargate manages the underlying compute infrastructure automatically, scaling to meet demand without operational overhead.
3
Evaluate the remaining options against the AWS Shared Responsibility Model and service limitations.
Eliminate the option suggesting AWS patches EC2 guest operating systems, and eliminate AWS Lambda due to its inability to run custom kernels or access physical GPU hardware.
Operating system patching on EC2 is a customer responsibility, and Lambda does not support the rendering workload's hardware and kernel needs.

Anahtar Kavram

Selecting appropriate AWS compute services based on operational control, infrastructure management boundaries, and application architecture.
Soru 3Soru

A global media network is migrating its digital publishing platform to AWS. The network needs to ensure that its primary publishing database is resilient against localized disasters, such as power grid failures or flooding, within its main operating market. Additionally, the network must deliver static image and video assets to a worldwide audience with minimal delay. Which of the following AWS Global Infrastructure design decisions will meet these requirements? (Select TWO).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploying the primary database across multiple Availability Zones within a single AWS Region; Utilizing AWS Edge Locations to cache and serve static media assets globally

Cevap

Deploying the primary database across multiple Availability Zones within a single AWS Region, and utilizing AWS Edge Locations to cache and serve static media assets globally.
Deploying the primary database across multiple Availability Zones within a single AWS Region ensures high availability and resilience because each Availability Zone is physically isolated with independent infrastructure (power, cooling, network). Utilizing AWS Edge Locations to cache and serve static media assets globally reduces latency for international viewers by serving files from locations closer to them.

Adım Adım Çözüm

1
Analyze the high-availability requirement for the database.
Identify that protecting against localized disasters (power failures, flooding) within a market requires deploying resources across physically separated locations within the same region (Availability Zones).
Availability Zones are isolated locations within a geographic AWS Region that are connected through low-latency links but are on separate power and flood plains.
2
Analyze the low-latency content delivery requirement.
Identify that serving static images and videos to a worldwide audience with minimal delay requires caching content close to the users.
AWS Edge Locations cache content close to global end-users, reducing latency for static assets.

Anahtar Kavram

AWS Global Infrastructure components, specifically the distinction between AWS Regions, Availability Zones, and Edge Locations.
Soru 4Soru

A medical research company is designing a new cloud architecture on AWS to handle two distinct processing tasks:

1. A batch processing job that performs genome sequencing simulations. This job must run on a custom Linux distribution with a modified kernel and runs continuously for several days.
2. An image processing task that automatically runs whenever a patient uploads a medical scan to an Amazon S3 bucket. The execution time is less than a minute, and uploads occur sporadically throughout the day.

Which two AWS compute services should the company use to support these workloads? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic Compute Cloud (Amazon EC2); AWS Lambda

Cevap

Amazon Elastic Compute Cloud (Amazon EC2) and AWS Lambda are the correct selections.
Amazon Elastic Compute Cloud (Amazon EC2) is correct because it provides full administrative access and allows running custom operating system kernels, which is required for the genome sequencing simulations. AWS Lambda is correct because it is a serverless, event-driven service that automatically runs code in response to Amazon S3 uploads and scales dynamically.

Adım Adım Çözüm

1
Analyze the first requirement: genome sequencing simulations running on a custom Linux distribution with a modified kernel for several days.
Identify that this requires full control over the operating system and kernel-level customization, which is uniquely supported by virtual machines.
Managed or serverless services do not allow modification of the underlying operating system kernel.
2
Analyze the second requirement: image processing running sporadically in response to Amazon S3 uploads, executing in under a minute.
Identify that this requires an event-driven, serverless compute service that runs code only when triggered.
A serverless service provides a cost-effective, scalable, and zero-administration solution for short-lived, event-driven tasks.

Anahtar Kavram

Selecting appropriate AWS compute services based on operating system control requirements and execution patterns (continuous vs. event-driven).
Soru 5Soru

A company is building a batch processing solution for genetic sequencing data. The application requires direct access to GPU hardware, a customized Linux kernel with specific compliance patches, and runs jobs that can take up to 4 hours to complete. The workload is highly unpredictable, and the company wants to minimize costs by ensuring resources are only active during processing. Which AWS compute option best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon EC2 instances in an Auto Scaling group utilizing Spot Instances

Cevap

Amazon EC2 instances in an Auto Scaling group utilizing Spot Instances
Amazon EC2 is the correct choice because it provides virtual machines where the customer has full root access, enabling the use of custom kernels and direct GPU mapping. Since the job runs for 4 hours, it exceeds Lambda's limits. EC2 Auto Scaling allows the group to scale to zero instances to minimize costs, and Spot Instances offer deep discounts suitable for batch jobs.

Adım Adım Çözüm

1
Analyze the workload duration requirement.
The job takes up to 4 hours, which immediately rules out serverless functions like AWS Lambda due to their 15-minute execution limit.
Compute options must support long-running execution windows.
2
Evaluate operating system and hardware requirements.
The requirement for custom kernel compliance patches and direct GPU access rules out serverless container options like AWS Fargate, which abstract away the host OS and kernel management.
Administrative control over the OS kernel is a shared responsibility aspect that requires full virtual machine control (EC2).
3
Assess cost-optimization and scalability requirements.
Amazon EC2 Auto Scaling groups can scale to zero instances when no work is present, and utilizing Spot Instances matches the unpredictable, batch-processing nature of genetic sequencing at a highly discounted rate.
Minimizing idle costs requires dynamic scaling and leverage of excess AWS capacity pricing.

Anahtar Kavram

AWS Compute Service Selection based on compliance, hardware access, execution duration, and cost optimization
Soru 6Soru

A system administrator needs to perform two tasks: first, they want to deploy and update a collection of AWS resources in a repeatable way using templates; second, they need to run interactive queries and administrative commands directly from their local terminal. Which two AWS tools should the administrator use to perform these tasks? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS CloudFormation; AWS Command Line Interface (AWS CLI)

Cevap

AWS CloudFormation and AWS Command Line Interface (AWS CLI)
AWS CloudFormation allows administrators to define and provision AWS infrastructure using declarative templates, ensuring repeatable deployments. The AWS Command Line Interface (AWS CLI) allows users to run interactive administrative commands and query resources directly from their local terminal shell.

Adım Adım Çözüm

1
Identify the tool required for repeatable infrastructure deployment using templates.
AWS CloudFormation is the service designed for deploying resources via infrastructure as code templates.
It allows declaring resource state in templates and deploying them reliably.
2
Identify the tool required to run interactive commands and queries from a local terminal.
AWS Command Line Interface (AWS CLI) is the tool that enables running commands directly from a terminal shell.
It allows shell-based management and interactive querying of AWS resources.

Anahtar Kavram

Deployment and management tools in AWS including AWS CloudFormation for Infrastructure as Code and the AWS CLI for terminal-based operations.
Tahmini Süre:1m 0s
Soru 7Soru

A financial startup is planning to deploy its multi-tier application infrastructure on AWS. The startup has the following requirements:
1. The infrastructure must be defined as declarative templates that are version-controlled and can be repeated across development, testing, and production environments with zero manual intervention.
2. The application's custom Python code must programmatically interact with Amazon S3 to upload reports and write transactions to an Amazon DynamoDB table.

Which two AWS deployment and management methods or tools should the startup use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS CloudFormation to define and provision the infrastructure resources using template files; AWS SDK for Python (Boto3) to integrate programmatic AWS service calls directly inside the application code

Cevap

The correct options are the one indicating AWS CloudFormation to define and provision the infrastructure resources using templates, and the one indicating AWS SDK for Python (Boto3) to integrate programmatic service calls.
AWS CloudFormation is correct because it provides a template-based JSON/YAML declarative model to manage and version-control infrastructure as code, satisfying the requirement for zero manual intervention and repeatability. The AWS SDK for Python (Boto3) is correct because it provides native programming libraries to interact programmatically with AWS services (S3 and DynamoDB) from within custom application code.

Adım Adım Çözüm

1
Analyze the first requirement: deploying infrastructure using declarative templates that are version-controlled and repeatable across environments with zero manual intervention.
Identify AWS CloudFormation as the service designed for infrastructure as code (IaC) that meets these exact needs.
AWS CloudFormation allows developers to write JSON or YAML templates to provision resources consistently.
2
Analyze the second requirement: enabling custom Python code to programmatically interact with Amazon S3 and Amazon DynamoDB.
Identify the AWS SDK for Python (Boto3) as the programmatic API interface for custom application integration.
AWS SDKs are designed for applications to make API calls to AWS services, whereas the CLI and Console are intended for administrative and manual tasks respectively.

Anahtar Kavram

AWS CloudFormation is used for infrastructure as code to deploy repeatable environments, while the AWS SDK is used for writing custom code that programmatically interacts with AWS services.
Tahmini Süre:2m 0s
Soru 8Soru

A media company is building an online blogging platform on AWS. The platform requires a database tier to support two distinct use cases: first, it needs to store customer subscription details, billing history, and support complex SQL join queries for financial reports; second, it needs to store user session states, preferences, and unstructured comment metadata with single-digit millisecond latency. Which AWS database services should the company select to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Aurora; Amazon DynamoDB

Cevap

Amazon Aurora and Amazon DynamoDB should be selected.
Amazon Aurora provides a high-performance relational database engine compatible with MySQL and PostgreSQL, making it the ideal choice for structured data requiring ACID compliance, complex SQL queries, and transactional integrity, such as subscription billing. Amazon DynamoDB is a fully managed NoSQL database service that provides single-digit millisecond latency at any scale, making it ideal for high-throughput, unstructured data such as user sessions, preferences, and comments.

Adım Adım Çözüm

1
Analyze the first requirement: storing customer subscription details, billing history, and supporting complex SQL join queries.
Identify that a relational database (OLTP) is required for structured data and complex joins. Amazon Aurora fits this requirement.
Relational databases support ACID compliance and relational models necessary for billing and SQL operations.
2
Analyze the second requirement: storing user session states, preferences, and unstructured comment metadata with single-digit millisecond latency.
Identify that a highly scalable NoSQL database is required for unstructured data and low-latency access. Amazon DynamoDB fits this requirement.
DynamoDB is a fully managed NoSQL database designed for fast, predictable performance at scale.

Anahtar Kavram

Distinguishing between relational (OLTP) and non-relational (NoSQL) database services in AWS based on application requirements.
Soru 9Soru

A financial institution needs to retain historical transaction logs to meet regulatory compliance requirements. These logs are rarely accessed but must be kept secure for seven years. The institution can tolerate a retrieval time of 12 hours for any requested log. Which AWS storage service is the most cost-effective choice for this storage requirement?

Cevabı ve açıklamayı göster

Cevap: Amazon S3 Glacier Deep Archive

Cevap

Amazon S3 Glacier Deep Archive is the most cost-effective choice because it is specifically designed for long-term archival storage with retrieval times of up to 12 hours.
Amazon S3 Glacier Deep Archive is the correct choice because it is AWS's lowest-cost storage class, specifically optimized for archiving data that is rarely accessed and can tolerate retrieval times of up to 12 hours.

Adım Adım Çözüm

1
Analyze the workload requirements: long-term retention (7 years), rare access, high tolerance for retrieval latency (12 hours), and a primary focus on cost optimization.
The requirements point toward an archival storage solution rather than active performance-focused storage.
Identifying the data access patterns and latency tolerance helps narrow down the service class.
2
Compare the features and pricing of the available storage classes and services.
Amazon S3 Glacier Deep Archive provides the lowest storage cost on AWS with standard retrieval times within 12 hours.
This step determines the exact service that matches the cost-efficiency and retrieval-time requirements.

Anahtar Kavram

Selecting the appropriate AWS storage service based on access patterns, durability, retention length, and cost constraints.
Tahmini Süre:45s
Soru 10Soru

A company is migrating its application to AWS and requires a database solution that supports transactional SQL queries. Additionally, the company wants to minimize administrative overhead by ensuring that OS patching and database engine maintenance are handled by AWS. Which two of the following options represent correct services or architectural decisions for this setup? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploying Amazon Aurora to run the transactional database workloads; Selecting a managed service like Amazon RDS to offload database engine patching and OS maintenance to AWS

Cevap

The correct choices are deploying Amazon Aurora to run transactional database workloads and selecting a managed service like Amazon RDS to offload patching and OS maintenance to AWS.
Deploying Amazon Aurora and selecting Amazon RDS are correct because both are fully managed relational database services that support SQL queries and transactional workloads. As managed services, they automatically handle infrastructure provisioning, operating system patching, and database engine maintenance, reducing administrative overhead for the customer.

Adım Adım Çözüm

1
Identify the database type required by the application.
The application requires a database that supports transactional SQL queries, indicating a relational database.
Relational databases use SQL and are designed for transactional integrity, whereas NoSQL databases like DynamoDB are optimized for key-value or document structures.
2
Determine the administrative requirements for the database.
The database management tasks such as OS patching and database engine maintenance must be handled by AWS to minimize overhead.
Managed services like Amazon RDS and Amazon Aurora offload administrative tasks to AWS as part of the AWS Shared Responsibility Model.

Anahtar Kavram

AWS managed relational database services, such as Amazon RDS and Amazon Aurora, provide standard SQL transactional support while offloading database administration tasks (like OS patching and database engine updates) to AWS under the Shared Responsibility Model.
Soru 11Soru

A company is migrating a legacy retail web application to AWS. The application uses a traditional relational database that requires complex SQL transactional queries and table joins. The company wants a fully managed solution that reduces administrative tasks such as hardware provisioning, database setup, patching, and backups, while separating the database tier from the application tier to ensure high availability. Which database solution should the company choose?

Cevabı ve açıklamayı göster

Cevap: Amazon RDS

Cevap

Amazon RDS
Amazon RDS is the correct choice because it is a managed relational database service that supports SQL queries and table joins while automating database administration tasks such as backups, software patching, and hardware scaling.

Adım Adım Çözüm

1
Analyze the application's database requirements
The application requires a relational database that supports complex SQL queries and table joins.
This rules out non-relational database services such as key-value stores.
2
Evaluate the management and operational overhead requirements
The company wants a fully managed service to reduce administrative tasks like patching and backups.
This rules out self-managed options like hosting database engines directly on Amazon EC2 instances.
3
Select the appropriate managed AWS database service
Amazon RDS provides a fully managed relational database platform that automates provisioning, patching, and backups while separating the database from the application tier.
It matches both the relational nature of the workload and the requirement for reduced administrative overhead.

Anahtar Kavram

AWS managed relational database service selection versus self-managed or NoSQL alternatives.
Tahmini Süre:1m 30s
Soru 12Soru

An administrator needs to perform a one-time audit of the security group configurations for several Amazon EC2 instances. The administrator wants to visually review the inbound and outbound traffic rules through an interactive graphical interface in a web browser without writing scripts or using command-line commands. Which AWS tool or interface should the administrator use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: AWS Management Console

Cevap

AWS Management Console
The AWS Management Console is a web-based portal that provides a graphical user interface (GUI) for managing AWS resources. It is the most appropriate tool for an administrator who needs to visually inspect security group rules in a web browser without writing code or executing shell commands.

Adım Adım Çözüm

1
Analyze the requirements: the task is a one-time audit, requires a visual review of configurations (security group rules), must use a graphical web browser interface, and must avoid scripting or command-line commands.
Identified that the interface must be web-based, graphical, manual, and require no programming or terminal input.
This filters out tools that rely on scripting, coding, or text-based command execution.
2
Evaluate the available AWS interaction methods against these criteria: AWS Management Console is a web graphical user interface; AWS CLI is a command-line tool; AWS SDK is for programmatic code; AWS CloudFormation is for template-based infrastructure provisioning.
AWS Management Console is the only option that fits the requirement for an interactive graphical web interface for manual tasks.
Matching the user requirement to the correct AWS tool ensures operational efficiency for the specific task type.

Anahtar Kavram

AWS Management Console is the primary web-based graphical user interface used to access and manage AWS resources manually.
Soru 13Soru

An organization is designing a governance and monitoring strategy on AWS. They need to meet the following operational requirements:

1. Continuously evaluate and audit resource configurations against predefined security policies (such as verifying that all EBS volumes are encrypted).
2. Collect, track, and analyze performance metrics from their cloud resources, and configure automated alarms if utilization exceeds specific thresholds.

Which of the following AWS services should the organization select to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Config; Amazon CloudWatch

Cevap

AWS Config and Amazon CloudWatch
AWS Config allows organizations to continuously evaluate and audit their resource configurations against compliance rules, such as verifying encryption. Amazon CloudWatch collects, monitors, and analyzes operational metrics from resources, enabling users to set up real-time alarms for metric thresholds like high CPU usage.

Adım Adım Çözüm

1
Analyze the first requirement: continuously evaluating and auditing resource configurations against policies.
AWS Config is the designated service that tracks configuration history and evaluates compliance against custom or managed rules.
This addresses the auditing aspect of resource states, such as checking if storage volumes are encrypted.
2
Analyze the second requirement: collecting performance metrics and configuring alarms based on usage thresholds.
Amazon CloudWatch collects performance metrics (like CPU usage) and allows users to set up alerts via CloudWatch Alarms.
This addresses the operational monitoring and alerting requirements.
3
Evaluate the distractors to verify why they do not meet the core criteria.
AWS CloudTrail tracks actions but not performance metrics, AWS CloudFormation deploys resources but does not monitor them, and AWS Artifact delivers compliance agreements rather than configuration rules.
Ensures the selected pair is the only combination that fully addresses the scenario.

Anahtar Kavram

Understanding the difference between configuration compliance tools (AWS Config), performance monitoring systems (Amazon CloudWatch), and event audit logging (AWS CloudTrail).
Soru 14Soru

A company is migrating a containerized application to AWS. The application runs on multiple Amazon Elastic Container Service (Amazon ECS) tasks hosted on AWS Fargate. These tasks must concurrently share access to a common directory containing data files that are frequently updated. The storage solution must scale automatically as files are added or deleted, and must support standard Linux file system permissions. Which AWS storage service should the company select to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Amazon Elastic File System (Amazon EFS)

Cevap

Amazon Elastic File System (Amazon EFS)
The correct answer is Amazon Elastic File System (Amazon EFS) because it is a fully managed, serverless file storage service that supports the Network File System (NFSv4) protocol. It allows concurrent read and write access from multiple AWS Fargate tasks and supports standard Linux file system permissions (POSIX), scaling automatically as files are added or removed.

Adım Adım Çözüm

1
Analyze the requirements: concurrent shared access, automatic scaling, and support for standard Linux (POSIX) file system permissions.
Identify that the solution must be a shared file system (file storage) rather than block or object storage.
Block storage is typically restricted to a single instance, and object storage does not natively support standard POSIX file system permissions.
2
Evaluate the available AWS storage services against these requirements.
Select Amazon EFS because it offers elastic, serverless file storage that supports POSIX permissions and can be mounted concurrently by multiple Fargate tasks.
This matches all criteria: concurrent access, auto-scaling, and POSIX compliance.

Anahtar Kavram

AWS Shared File Storage vs Block and Object Storage
Tahmini Süre:1m 30s
Soru 15Soru

An enterprise wants to deploy a multi-tier web application on AWS with high availability. The database tier must replicate data synchronously to a standby instance in a separate, independent facility with its own power infrastructure, cooling, and network connectivity, located within the same geographic territory. Which of the following AWS Global Infrastructure components should the database instances be deployed across to achieve this configuration?

Cevabı ve açıklamayı göster

Cevap: Availability Zones

Cevap

Availability Zones
Availability Zones are distinct physical locations within an AWS Region. Each Availability Zone consists of one or more discrete data centers, each with redundant power, networking, and connectivity. Because they are close enough to be connected by low-latency, high-speed fiber networks, they support synchronous data replication for highly available database configurations, while remaining isolated from localized failures in other Availability Zones.

Adım Adım Çözüm

1
Analyze the requirements: high availability, synchronous database replication, and placement in separate, independent facilities within the same geographic territory.
The requirement calls for distinct physical facilities that are close enough to allow for low-latency synchronous replication, but isolated from local failures.
This establishes the criteria for the correct AWS infrastructure component.
2
Compare the options against the criteria.
Availability Zones are isolated physical locations within a single Region, interconnected by low-latency networks, which matches the criteria perfectly.
This identifies Availability Zones as the correct answer and eliminates the other options.

Anahtar Kavram

AWS Availability Zones provide physical isolation and low-latency connectivity within a Region to enable high availability and fault tolerance.
Tahmini Süre:1m 0s
Soru 16Soru

A company is planning to connect multiple Amazon Virtual Private Clouds (VPCs) in their AWS environment. Which of the following statements correctly describe the features of AWS Transit Gateway and VPC Peering? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway acts as a centralized hub to connect multiple VPCs and on-premises networks.; VPC Peering establishes a direct point-to-point routing connection between two VPCs.

Cevap

AWS Transit Gateway acts as a centralized hub to connect multiple VPCs and on-premises networks, and VPC Peering establishes a direct point-to-point routing connection between two VPCs.
The correct statements identify that AWS Transit Gateway simplifies multi-VPC networks by acting as a central hub, while VPC Peering provides direct, point-to-point connectivity between pairs of VPCs.

Adım Adım Çözüm

1
Analyze the connection requirements for multiple VPCs.
Identify that connecting multiple VPCs individually via point-to-point links (VPC Peering) leads to complex mesh networks, whereas a centralized router (AWS Transit Gateway) simplifies connectivity.
To distinguish between point-to-point and hub-and-spoke network architectures in AWS.
2
Evaluate the routing properties of VPC Peering.
Confirm that VPC Peering is non-transitive and only connects the two specific peering VPCs directly.
To identify valid communication paths in VPC peering arrangements.

Anahtar Kavram

VPC Peering vs. AWS Transit Gateway connectivity characteristics
Soru 17Soru

A global retail platform is expanding its customer support operations. The platform needs to implement two new features: a conversational chatbot to automatically answer frequently asked questions about order statuses, and a real-time text translation system to help support agents communicate with customers who speak different languages. Which two AWS services should the platform use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon Lex; Amazon Translate

Cevap

Amazon Lex and Amazon Translate
The correct services are Amazon Lex and Amazon Translate. Amazon Lex provides the automatic speech recognition and natural language understanding capabilities needed to build a conversational chatbot that can interact with users. Amazon Translate provides fast, high-quality, neural machine translation of text, which allows support agents to interact in real-time with customers who speak different languages.

Adım Adım Çözüm

1
Analyze the first requirement: building a conversational chatbot to answer frequently asked questions.
Identify that the primary AWS service for building conversational interfaces is Amazon Lex.
Amazon Lex uses the same conversational engine that powers Amazon Alexa, enabling natural language understanding and automated speech recognition.
2
Analyze the second requirement: translating customer and agent messages in real-time.
Identify that the primary AWS service for language translation is Amazon Translate.
Amazon Translate is designed specifically to translate text between languages, supporting multilingual communication for customer support.

Anahtar Kavram

Selecting appropriate AWS Machine Learning services based on business requirements for chatbots and translation.
Soru 18Soru

An online gaming company wants to design its architecture on AWS. The company has two key requirements:

1. It must deploy its database across multiple isolated locations within a single geographic area to ensure high availability and automatic failover.
2. It must replicate its critical data to a separate geographic location hundreds of miles away to comply with its disaster recovery policy.

Which of the following AWS Global Infrastructure components should the company use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Availability Zones; AWS Regions

Cevap

The correct options are Availability Zones and AWS Regions. Availability Zones provide isolated locations within a single geographic region for high availability and failover, whereas AWS Regions represent separate geographic areas hundreds of miles apart, suitable for disaster recovery requirements.
Availability Zones provide high availability and automatic failover by offering isolated datacenters within a single region, while AWS Regions are geographically separated by hundreds of miles, providing the distance needed to satisfy the disaster recovery requirement.

Adım Adım Çözüm

1
Analyze the first requirement: deploying a database across multiple isolated locations within a single geographic area for high availability.
Identify that Availability Zones are designed precisely for this purpose, providing isolated datacenters with low-latency connections within a single AWS Region.
Deploying across multiple Availability Zones protects against localized failures while maintaining sub-millisecond network latency.
2
Analyze the second requirement: replicating data to a separate geographic location hundreds of miles away for disaster recovery.
Identify that AWS Regions are geographically isolated areas separated by large distances, making them ideal for meeting strict disaster recovery and data residency policies.
Replicating data to another AWS Region protects against large-scale natural disasters that could impact an entire region.

Anahtar Kavram

AWS Global Infrastructure components, specifically the distinction and use cases for AWS Regions and Availability Zones.
Tahmini Süre:1m 30s
Soru 19Soru

A financial analytics firm is deploying 1515 virtual private clouds (VPCs) across multiple AWS accounts to isolate different customer datasets. The firm requires a simplified, central routing hub to enable communication between all VPCs. Furthermore, the security team needs to enforce traffic filtering at the boundary of each subnet to explicitly reject incoming requests from a list of known malicious IP ranges.

Which two AWS network services or configuration components should the firm implement to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: AWS Transit Gateway to act as a centralized router for interconnecting the VPCs; Network Access Control Lists (Network ACLs) configured with deny rules for the malicious IP ranges

Cevap

AWS Transit Gateway to act as a centralized router, and Network Access Control Lists (Network ACLs) configured with deny rules
AWS Transit Gateway simplifies the network topology by acting as a central hub that routes traffic between all 1515 VPCs, avoiding the need for a complex full mesh of point-to-point connections. Network ACLs operate at the subnet boundary and support explicit deny rules, which allows the security team to block traffic from the specified malicious IP ranges before it reaches any resources in the subnet.

Adım Adım Çözüm

1
Evaluate the multi-VPC routing requirement.
AWS Transit Gateway is identified as the optimal hub-and-spoke solution for scaling connections across 1515 VPCs.
Creating individual VPC Peering connections or VPN tunnels for 1515 VPCs introduces high management overhead and configuration complexity.
2
Evaluate the subnet-level traffic filtering requirement.
Network ACLs are chosen because they support explicit deny rules and apply at the subnet boundary.
Security Groups cannot satisfy this requirement because they only support allow rules and operate at the instance level.

Anahtar Kavram

Centralized multi-VPC routing using AWS Transit Gateway and subnet-level traffic filtering using stateless Network ACLs.
Tahmini Süre:2m 0s
Soru 20Soru

An enterprise has deployed 5050 Virtual Private Clouds (VPCs) across multiple AWS accounts to segment different business units. The network administration team wants to interconnect all of these VPCs to allow full communication between them. They need a solution that acts as a centralized cloud router to simplify the routing configuration and avoid managing a complex web of individual point-to-point connections.

Which AWS service or feature should the enterprise use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Transit Gateway

Cevap

Transit Gateway
Transit Gateway is the correct choice because it acts as a centralized cloud router. It allows organizations to connect multiple VPCs and on-premises networks to a single hub, greatly simplifying network architecture and routing management as the number of VPCs grows.

Adım Adım Çözüm

1
Analyze the business and technical requirements.
The requirement is to interconnect 5050 VPCs across multiple accounts using a centralized cloud router to avoid point-to-point mesh complexity.
This establishes that we need a hub-and-spoke networking model rather than peer-to-peer connection models.
2
Evaluate the available AWS networking options against the centralized hub requirement.
Transit Gateway acts as a central regional router to simplify multi-VPC connectivity, whereas VPC Peer Connections require complex mesh management for large numbers of VPCs.
This identifies the service designed specifically to solve the scalability issues of point-to-point routing.

Anahtar Kavram

Transit Gateway simplifies network topology by acting as a centralized hub that routes traffic between multiple Virtual Private Clouds (VPCs) and on-premises networks.
Sayfa 1 / 25Sonraki