QUESTION #1

A company plans to use an Amazon Snowball Edge device to transfer files to

the AWS Cloud.
Which activities related to a Snowball Edge device are available to the
company at no cost?

 A. Use of the Snowball Edge appliance for a 10-day period

 B. The transfer of data out of Amazon S3 and to the Snowball Edge
appliance
 C. The transfer of data from the Snowball Edge appliance into Amazon
S3 
 D. Daily use of the Snowball Edge appliance after 10 days

QUESTION #2

A company has deployed applications on Amazon EC2 instances. The

company needs to assess application vulnerabilities and must identify
infrastructure deployments that do not meet best practices.
Which AWS service can the company use to meet these requirements?

 A. AWS Trusted Advisor

 B. Amazon Inspector
 C. AWS Config
 D. Amazon GuardDuty

QUESTION #3

A company has a centralized group of users with large file storage

requirements that have exceeded the space available on premises. The
company wants to extend its file storage capabilities for this group while
retaining the performance benefit of sharing content locally.
What is the MOST operationally efficient AWS solution for this scenario?

 A. Create an Amazon S3 bucket for each user. Mount each bucket by

using an S3 file system mounting utility.
 B. Configure and deploy an AWS Storage Gateway file gateway.
Connect each user’s workstation to the file gateway.
 C. Move each user’s working environment to Amazon WorkSpaces. Set
up an Amazon WorkDocs account for each user.
 D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block
Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume
directly with the users.
QUESTION #4

According to security best practices, how should an Amazon EC2 instance be

given access to an Amazon S3 bucket?

 A. Hard code an IAM user’s secret key and access key directly in the
application, and upload the file.
 B. Store the IAM user’s secret key and access key in a text file on the
EC2 instance, read the keys, then upload the file.
 C. Have the EC2 instance assume a role to obtain the privileges to
upload the file.
 D. Modify the S3 bucket policy so that any service can upload to it at any
time.

QUESTION #5

Which option is a customer responsibility when using Amazon DynamoDB

under the AWS Shared Responsibility Model?

 A. Physical security of DynamoDB

 B. Patching of DynamoDB
 C. Access to DynamoDB tables
 D. Encryption of data at rest in DynamoDB

QUESTION #6

Which option is a perspective that includes foundational capabilities of the

AWS Cloud Adoption Framework (AWS CAF)?

 A. Sustainability
 B. Performance efficiency
 C. Governance
 D. Reliability

QUESTION #7

A company is running and managing its own Docker environment on Amazon

EC2 instances. The company wants an alternative to help manage cluster
size, scheduling, and environment maintenance.
Which AWS service meets these requirements?
  A. AWS Lambda
 B. Amazon RDS
 C. AWS Fargate
 D. Amazon Athena

QUESTION #8

A company wants to run a NoSQL database on Amazon EC2 instances.

Which task is the responsibility of AWS in this scenario?

 A. Update the guest operating system of the EC2 instances.

 B. Maintain high availability at the database layer.
 C. Patch the physical infrastructure that hosts the EC2 instances.
 D. Configure the security group firewall.

QUESTION #9

Which AWS services or tools can identify rightsizing opportunities for Amazon
EC2 instances? (Choose two.)

 A. AWS Cost Explorer

 B. AWS Billing Conductor
 C. Amazon CodeGuru
 D. Amazon SageMaker
 E. AWS Compute Optimizer

QUESTION #10

Which of the following are benefits of using AWS Trusted Advisor? (Choose
two.)

 A. Providing high-performance container orchestration

 B. Creating and rotating encryption keys
 C. Detecting underutilized resources to save costs
 D. Improving security by proactively monitoring the AWS environment
 E. Implementing enforced tagging across AWS resources
QUESTION #11

Which of the following is an advantage that users experience when they

move on-premises workloads to the AWS Cloud?

 A. Elimination of expenses for running and maintaining data centers

 B. Price discounts that are identical to discounts from hardware
providers
 C. Distribution of all operational controls to AWS
 D. Elimination of operational expenses

QUESTION #12

A company wants to manage deployed IT services and govern its

infrastructure as code (IaC) templates.
Which AWS service will meet this requirement?

 A. AWS Resource Explorer

 B. AWS Service Catalog
 C. AWS Organizations
 D. AWS Systems Manager

QUESTION #13

Which AWS service or tool helps users visualize, understand, and manage
spending and usage over time?

 A. AWS Organizations
 B. AWS Pricing Calculator
 C. AWS Cost Explorer
 D. AWS Service Catalog

QUESTION #14

A company is using a central data platform to manage multiple types of data

for its customers. The company wants to use AWS services to discover,
transform, and visualize the data.
Which combination of AWS services should the company use to meet these
requirements? (Choose two.)
  A. AWS Glue
 B. Amazon Elastic File System (Amazon EFS)
 C. Amazon Redshift
 D. Amazon QuickSight
 E. Amazon Quantum Ledger Database (Amazon QLDB)

QUESTION #15

A global company wants to migrate its third-party applications to the AWS

Cloud. The company wants help from a global team of experts to complete
the migration faster and more reliably in accordance with AWS internal best
practices.
Which AWS service or resource will meet these requirements?

 A. AWS Support
 B. AWS Professional Services
 C. AWS Launch Wizard
 D. AWS Managed Services (AMS)

QUESTION #16

An e-learning platform needs to run an application for 2 months each year.

The application will be deployed on Amazon EC2 instances. Any application
downtime during those 2 months must be avoided.
Which EC2 purchasing option will meet these requirements MOST cost-
effectively?

 A. Reserved Instances
 B. Dedicated Hosts
 C. Spot Instances
 D. On-Demand Instances

QUESTION #17

A developer wants to deploy an application quickly on AWS without manually

creating the required resources.
Which AWS service will meet these requirements?

 A. Amazon EC2
 B. AWS Elastic Beanstalk
  C. AWS CodeBuild
 D. Amazon Personalize

QUESTION #18

A company is storing sensitive customer data in an Amazon S3 bucket. The

company wants to protect the data from accidental deletion or overwriting.
Which S3 feature should the company use to meet these requirements?

 A. S3 Lifecycle rules
 B. S3 Versioning
 C. S3 bucket policies
 D. S3 server-side encryption

QUESTION #19

Which AWS service provides the ability to manage infrastructure as code?

 A. AWS CodePipeline
 B. AWS CodeDeploy
 C. AWS Direct Connect
 D. AWS CloudFormation

QUESTION #20

An online gaming company needs to choose a purchasing option to run its

Amazon EC2 instances for 1 year. The web traffic is consistent, and any
increases in traffic are predictable. The EC2 instances must be online and
available without any disruption.
Which EC2 instance purchasing option will meet these requirements MOST
cost-effectively?

 A. On-Demand Instances
 B. Reserved Instances
 C. Spot Instances
 D. Spot Fleet
QUESTION #21

Which AWS service or feature allows a user to establish a dedicated network

connection between a company’s on-premises data center and the AWS
Cloud?

 A. AWS Direct Connect

 B. VPC peering
 C. AWS VPN
 D. Amazon Route 53

QUESTION #22

Which option is a physical location of the AWS global infrastructure?

 A. AWS DataSync
 B. AWS Region
 C. Amazon Connect
 D. AWS Organizations

QUESTION #23

A company wants to protect its AWS Cloud information, systems, and assets
while performing risk assessment and mitigation tasks.
Which pillar of the AWS Well-Architected Framework is supported by these
goals?

 A. Reliability
 B. Security
 C. Operational excellence
 D. Performance efficiency

QUESTION #24

What is the purpose of having an internet gateway within a VPC?

 A. To create a VPN connection to the VPC

 B. To allow communication between the VPC and the internet
 C. To impose bandwidth constraints on internet traffic
 D. To load balance traffic from the internet across Amazon EC2 instances
QUESTION #25

A company is running a monolithic on-premises application that does not

scale and is difficult to maintain. The company has a plan to migrate the
application to AWS and divide the application into microservices.
Which best practice of the AWS Well-Architected Framework is the company
following with this plan?

 A. Integrate functional testing as part of AWS deployment.

 B. Use automation to deploy changes.
 C. Deploy the application to multiple locations.
 D. Implement loosely coupled dependencies.

QUESTION #26

A company has an AWS account. The company wants to audit its password
and access key rotation details for compliance purposes.
Which AWS service or tool will meet this requirement?

 A. IAM Access Analyzer

 B. AWS Artifact
 C. IAM credential report
 D. AWS Audit Manager

QUESTION #27

A company wants to receive a notification when a specific AWS cost

threshold is reached.
Which AWS services or tools can the company use to meet this requirement?
(Choose two.)

 A. Amazon Simple Queue Service (Amazon SQS)

 B. AWS Budgets
 C. Cost Explorer
 D. Amazon CloudWatch
 E. AWS Cost and Usage Report

QUESTION #28
Which AWS service or resource provides answers to the most frequently
asked security-related questions that AWS receives from its users?

 A. AWS Artifact
 B. Amazon Connect
 C. AWS Chatbot
 D. AWS Knowledge Center

QUESTION #29

Which tasks are customer responsibilities, according to the AWS shared

responsibility model? (Choose two.)

 A. Configure the AWS provided security group firewall.

 B. Classify company assets in the AWS Cloud.
 C. Determine which Availability Zones to use for Amazon S3 buckets.
 D. Patch or upgrade Amazon DynamoDB.
 E. Select Amazon EC2 instances to run AWS Lambda on.

QUESTION #30

Which of the following are pillars of the AWS Well-Architected Framework?

(Choose two.)

 A. Availability
 B. Reliability
 C. Scalability
 D. Responsive design
 E. Operational excellence

QUESTION #31

Which AWS service or feature is used to send both text and email messages
from distributed applications?

 A. Amazon Simple Notification Service (Amazon SNS)

 B. Amazon Simple Email Service (Amazon SES)
 C. Amazon CloudWatch alerts
 D. Amazon Simple Queue Service (Amazon SQS)
QUESTION #32

A user needs programmatic access to AWS resources through the AWS CLI or
the AWS API.
Which option will provide the user with the appropriate access?

 A. Amazon Inspector
 B. Access keys
 C. SSH public keys
 D. AWS Key Management Service (AWS KMS) keys

QUESTION #33

A company runs thousands of simultaneous simulations using AWS Batch.

Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.
Which pricing model enables the company to optimize costs and meet these
requirements?

 A. Reserved Instances
 B. Spot Instances
 C. On-Demand Instances
 D. Dedicated Instances

QUESTION #34

What does the concept of agility mean in AWS Cloud computing? (Choose
two.)

 A. The speed at which AWS resources are implemented

 B. The speed at which AWS creates new AWS Regions
 C. The ability to experiment quickly
 D. The elimination of wasted capacity
 E. The low cost of entry into cloud computing

QUESTION #35

A company needs to block SQL injection attacks.

Which AWS service or feature can meet this requirement?
  A. AWS WAF
 B. AWS Shield
 C. Network ACLs
 D. Security groups

QUESTION #36

Which AWS service or feature identifies whether an Amazon S3 bucket or an

IAM role has been shared with an external entity?

 A. AWS Service Catalog

 B. AWS Systems Manager
 C. AWS IAM Access Analyzer
 D. AWS Organizations

QUESTION #37

A cloud practitioner needs to obtain AWS compliance reports before

migrating an environment to the AWS Cloud.
How can these reports be generated?

 A. Contact the AWS Compliance team.

 B. Download the reports from AWS Artifact.
 C. Open a case with AWS Support.
 D. Generate the reports with Amazon Macie.

QUESTION #38

An ecommerce company has migrated its IT infrastructure from an on-

premises data center to the AWS Cloud.
Which cost is the company’s direct responsibility?

 A. Cost of application software licenses

 B. Cost of the hardware infrastructure on AWS
 C. Cost of power for the AWS servers
 D. Cost of physical security for the AWS data center

QUESTION #39
A company is setting up AWS Identity and Access Management (IAM) on an
AWS account.
Which recommendation complies with IAM security best practices?

 A. Use the account root user access keys for administrative tasks.
 B. Grant broad permissions so that all company employees can access
the resources they need.
 C. Turn on multi-factor authentication (MFA) for added security during
the login process.
 D. Avoid rotating credentials to prevent issues in production applications.

QUESTION #40

Elasticity in the AWS Cloud refers to which of the following? (Choose two.)

 A. How quickly an Amazon EC2 instance can be restarted

 B. The ability to rightsize resources as demand shifts
 C. The maximum amount of RAM an Amazon EC2 instance can use
 D. The pay-as-you-go billing model
 E. How easily resources can be procured when they are needed

QUESTION #41

Which service enables customers to audit API calls in their AWS accounts?

 A. AWS CloudTrail
 B. AWS Trusted Advisor
 C. Amazon Inspector
 D. AWS X-Ray

QUESTION #42

What is a customer responsibility when using AWS Lambda according to the

AWS shared responsibility model?

 A. Managing the code within the Lambda function

 B. Confirming that the hardware is working in the data center
 C. Patching the operating system
 D. Shutting down Lambda functions when they are no longer in use
QUESTION #43

A company has 5 TB of data stored in Amazon S3. The company plans to

occasionally run queries on the data for analysis.
Which AWS service should the company use to run these queries in the
MOST cost-effective manner?

 A. Amazon Redshift
 B. Amazon Athena
 C. Amazon Kinesis
 D. Amazon RDS

QUESTION #44

Which AWS service can be used at no additional cost?

 A. Amazon SageMaker
 B. AWS Config
 C. AWS Organizations
 D. Amazon CloudWatch

QUESTION #45

Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the
people perspective?

 A. Data architecture
 B. Event management
 C. Cloud fluency
 D. Strategic partnership

QUESTION #46

A company wants to make an upfront commitment for continued use of its

production Amazon EC2 instances in exchange for a reduced overall cost.
Which pricing options meet these requirements with the LOWEST cost?
(Choose two.)
  A. Spot Instances
 B. On-Demand Instances
 C. Reserved Instances
 D. Savings Plans
 E. Dedicated Hosts

QUESTION #47

A company wants to migrate its on-premises relational databases to the AWS

Cloud. The company wants to use infrastructure as close to its current
geographical location as possible.
Which AWS service or resource should the company use to select its Amazon
RDS deployment area?

 A. Amazon Connect
 B. AWS Wavelength
 C. AWS Regions
 D. AWS Direct Connect

QUESTION #48

A company is exploring the use of the AWS Cloud, and needs to create a cost
estimate for a project before the infrastructure is provisioned.
Which AWS service or feature can be used to estimate costs before
deployment?

 A. AWS Free Tier

 B. AWS Pricing Calculator
 C. AWS Billing and Cost Management
 D. AWS Cost and Usage Report

QUESTION #49

A company is building an application that needs to deliver images and videos

globally with minimal latency.
Which approach can the company use to accomplish this in a cost effective
manner?

 A. Deliver the content through Amazon CloudFront.

  B. Store the content on Amazon S3 and enable S3 cross-region
replication.
 C. Implement a VPN across multiple AWS Regions.
 D. Deliver the content through AWS PrivateLink.

QUESTION #50

Which option is a benefit of the economies of scale based on the advantages

of cloud computing?

 A. The ability to trade variable expense for fixed expense

 B. Increased speed and agility
 C. Lower variable costs over fixed costs
 D. Increased operational costs across data centers

QUESTION #51

Which of the following is a software development framework that a company

can use to define cloud resources as code and provision the resources
through AWS CloudFormation?

 A. AWS CLI
 B. AWS Developer Center
 C. AWS Cloud Development Kit (AWS CDK)
 D. AWS CodeStar

QUESTION #52

A company is developing an application that uses multiple AWS services. The

application needs to use temporary, limited-privilege credentials for
authentication with other AWS APIs.
Which AWS service or feature should the company use to meet these
authentication requirements?

 A. Amazon API Gateway

 B. IAM users
 C. AWS Security Token Service (AWS STS)
 D. IAM instance profiles
QUESTION #53

Which AWS service is a cloud security posture management (CSPM) service

that aggregates alerts from various AWS services and partner products in a
standardized format?

 A. AWS Security Hub

 B. AWS Trusted Advisor
 C. Amazon EventBridge
 D. Amazon GuardDuty

QUESTION #54

Which AWS service is always provided at no charge?

 A. Amazon S3
 B. AWS Identity and Access Management (IAM)
 C. Elastic Load Balancers
 D. AWS WAF

QUESTION #55

To reduce costs, a company is planning to migrate a NoSQL database to

AWS.
Which AWS service is fully managed and can automatically scale throughput
capacity to meet database workload demands?

 A. Amazon Redshift
 B. Amazon Aurora
 C. Amazon DynamoDB
 D. Amazon RDS

QUESTION #56

A company is using Amazon DynamoDB.

Which task is the company’s responsibility, according to the AWS shared
responsibility model?

 A. Patch the operating system.

 B. Provision hosts.
  C. Manage database access permissions.
 D. Secure the operating system.

QUESTION #57

A company has a test AWS environment. A company is planning on testing

an application within AWS. The application testing can be interrupted and
does not need to run continuously.
Which Amazon EC2 purchasing option will meet these requirements MOST
cost-effectively?

 A. On-Demand Instances
 B. Dedicated Instances
 C. Spot Instances
 D. Reserved Instances

QUESTION #58

Which AWS service gives users the ability to discover and protect sensitive
data that is stored in Amazon S3 buckets?

 A. Amazon Macie
 B. Amazon Detective
 C. Amazon GuardDuty
 D. AWS IAM Access Analyzer

QUESTION #59

Which of the following services can be used to block network traffic to an

instance? (Choose two.)

 A. Security groups
 B. Amazon Virtual Private Cloud (Amazon VPC) flow logs
 C. Network ACLs
 D. Amazon CloudWatch
 E. AWS CloudTrail

QUESTION #60
Which AWS service can identify when an Amazon EC2 instance was
terminated?

 A. AWS Identity and Access Management (IAM)

 B. AWS CloudTrail
 C. AWS Compute Optimizer
 D. Amazon EventBridge

QUESTION #61

Which of the following is a fully managed MySQL-compatible database?

 A. Amazon S3
 B. Amazon DynamoDB
 C. Amazon Redshift
 D. Amazon Aurora

QUESTION #62

Which AWS service supports a hybrid architecture that gives users the ability
to extend AWS infrastructure, AWS services, APIs, and tools to data centers,
co-location environments, or on-premises facilities?

 A. AWS Snowmobile
 B. AWS Local Zones
 C. AWS Outposts
 D. AWS Fargate

QUESTION #63

Which AWS service can run a managed PostgreSQL database that provides
online transaction processing (OLTP)?

 A. Amazon DynamoDB
 B. Amazon Athena
 C. Amazon RDS
 D. Amazon EMR
QUESTION #64

A company wants to provide managed Windows virtual desktops and

applications to its remote employees over secure network connections.
Which AWS services can the company use to meet these requirements?
(Choose two.)

 A. Amazon Connect
 B. Amazon AppStream 2.0
 C. Amazon WorkSpaces
 D. AWS Site-to-Site VPN
 E. Amazon Elastic Container Service (Amazon ECS)

QUESTION #65

A company wants to monitor for misconfigured security groups that are

allowing unrestricted access to specific ports.
Which AWS service will meet this requirement?

 A. AWS Trusted Advisor

 B. Amazon CloudWatch
 C. Amazon GuardDuty
 D. AWS Health Dashboard

QUESTION #66

Which AWS service is a key-value database that provides sub-millisecond

latency on a large scale?

 A. Amazon DynamoDB
 B. Amazon Aurora
 C. Amazon DocumentDB (with MongoDB compatibility)
 D. Amazon Neptune

QUESTION #67

A company is deploying a machine learning (ML) research project that will

require a lot of compute power over several months. The ML processing jobs
do not need to run at specific times.
Which Amazon EC2 instance purchasing option will meet these requirements
at the lowest cost?

 A. On-Demand Instances
 B. Spot Instances
 C. Reserved Instances
 D. Dedicated Instances

QUESTION #68

Which AWS services or features provide disaster recovery solutions for

Amazon EC2 instances? (Choose two.)

 A. EC2 Reserved Instances

 B. EC2 Amazon Machine Images (AMIs)
 C. Amazon Elastic Block Store (Amazon EBS) snapshots
 D. AWS Shield
 E. Amazon GuardDuty

QUESTION #69

Which AWS service provides command line access to AWS tools and
resources directly from a web browser?

 A. AWS CloudHSM
 B. AWS CloudShell
 C. Amazon WorkSpaces
 D. AWS Cloud Map

QUESTION #70

A network engineer needs to build a hybrid cloud architecture connecting on-

premises networks to the AWS Cloud using AWS Direct Connect. The
company has a few VPCs in a single AWS Region and expects to increase the
number of VPCs to hundreds over time.
Which AWS service or feature should the engineer use to simplify and scale
this connectivity as the VPCs increase in number?

 A. VPC endpoints
 B. AWS Transit Gateway
  C. Amazon Route 53
 D. AWS Secrets Manager

QUESTION #71

A company wants to assess its operational readiness. It also wants to identify

and mitigate any operational risks ahead of a new product launch.
Which AWS Support plan offers guidance and support for this kind of event at
no additional charge?

 A. AWS Business Support

 B. AWS Basic Support
 C. AWS Developer Support
 D. AWS Enterprise Support

QUESTION #72

A company wants to establish a schedule for rotating database user

credentials.
Which AWS service will support this requirement with the LEAST amount of
operational overhead?

 A. AWS Systems Manager

 B. AWS Secrets Manager
 C. AWS License Manager
 D. AWS Managed Services

QUESTION #73

Which AWS service or feature can be used to create a private connection

between an on-premises workload and an AWS Cloud workload?

 A. Amazon Route 53
 B. Amazon Macie
 C. AWS Direct Connect
 D. AWS PrivateLink
QUESTION #74

Which AWS service is used to provide encryption for Amazon EBS?

 A. AWS Certificate Manager

 B. AWS Systems Manager
 C. AWS KMS
 D. AWS Config

QUESTION #75

A company wants to manage its AWS Cloud resources through a web

interface.
Which AWS service will meet this requirement?

 A. AWS Management Console

 B. AWS CLI
 C. AWS SDK
 D. AWS Cloud9

QUESTION #76

Which of the following are advantages of the AWS Cloud? (Choose two.)

 A. Trade variable expenses for capital expenses

 B. High economies of scale
 C. Launch globally in minutes
 D. Focus on managing hardware infrastructure
 E. Overprovision to ensure capacity

QUESTION #77

Which AWS Cloud benefit is shown by an architecture’s ability to withstand

failures with minimal downtime?

 A. Agility
 B. Elasticity
 C. Scalability
 D. High availability
QUESTION #78

A developer needs to maintain a development environment infrastructure

and a production environment infrastructure in a repeatable fashion.
Which AWS service should the developer use to meet these requirements?

 A. AWS Ground Station

 B. AWS Shield
 C. AWS IoT Device Defender
 D. AWS CloudFormation

QUESTION #79

Which task is the customer’s responsibility, according to the AWS shared

responsibility model?

 A. Maintain the security of the AWS Cloud.

 B. Configure firewalls and networks.
 C. Patch the operating system of Amazon RDS instances.
 D. Implement physical and environmental controls.

QUESTION #80

Which AWS service helps deliver highly available applications with fast
failover for multi-Region and Multi-AZ architectures?

 A. AWS WAF
 B. AWS Global Accelerator
 C. AWS Shield
 D. AWS Direct Connect

QUESTION #81

A company has a set of ecommerce applications. The applications need to be

able to send messages to each other.
Which AWS service meets this requirement?
  A. AWS Auto Scaling
 B. Elastic Load Balancing
 C. Amazon Simple Queue Service (Amazon SQS)
 D. Amazon Kinesis Data Streams

QUESTION #82

What are the benefits of consolidated billing for AWS Cloud services?
(Choose two.)

 A. Volume discounts
 B. A minimal additional fee for use
 C. One bill for multiple accounts
 D. Installment payment options
 E. Custom cost and usage budget creation

QUESTION #83

A user wants to review all Amazon S3 buckets with ACLs and S3 bucket
policies in the S3 console.
Which AWS service or resource will meet this requirement?

 A. S3 Multi-Region Access Points

 B. S3 Storage Lens
 C. AWS IAM Identity Center (AWS Single Sign-On)
 D. Access Analyzer for S3

QUESTION #84

What is the best resource for a user to find compliance-related information

and reports about AWS?

 A. AWS Artifact
 B. AWS Marketplace
 C. Amazon Inspector
 D. AWS Support

QUESTION #85
Which AWS service enables companies to deploy an application close to end
users?

 A. Amazon CloudFront
 B. AWS Auto Scaling
 C. AWS AppSync
 D. Amazon Route 53

QUESTION #86

Which AWS service or feature improves network performance by sending

traffic through the AWS worldwide network infrastructure?

 A. Route table
 B. AWS Transit Gateway
 C. AWS Global Accelerator
 D. Amazon VPC

QUESTION #87

Which AWS service provides highly durable object storage?

 A. Amazon S3
 B. Amazon Elastic File System (Amazon EFS)
 C. Amazon Elastic Block Store (Amazon EBS)
 D. Amazon FSx

QUESTION #88

Which responsibility belongs to AWS when a company hosts its databases on

Amazon EC2 instances?

 A. Database backups
 B. Database software patches
 C. Operating system patches
 D. Operating system installations

QUESTION #89
Which of the following are advantages of moving to the AWS Cloud? (Choose
two.)

 A. The ability to turn over the responsibility for all security to AWS.
 B. The ability to use the pay-as-you-go model.
 C. The ability to have full control over the physical infrastructure.
 D. No longer having to guess what capacity will be required.
 E. No longer worrying about users access controls.

QUESTION #90

Which AWS service is a hybrid cloud storage service that provides on-
premises users access to virtually unlimited cloud storage?

 A. AWS DataSync
 B. Amazon S3 Glacier
 C. AWS Storage Gateway
 D. Amazon Elastic Block Store (Amazon EBS)

QUESTION #91

A company plans to migrate to AWS and wants to create cost estimates for
its AWS use cases.
Which AWS service or tool can the company use to meet these
requirements?

 A. AWS Pricing Calculator

 B. Amazon CloudWatch
 C. AWS Cost Explorer
 D. AWS Budgets

QUESTION #92

Which tool should a developer use to integrate AWS service features directly
into an application?

 A. AWS Software Development Kit

 B. AWS CodeDeploy
 C. AWS Lambda
 D. AWS Batch
QUESTION #93

Which of the following is a recommended design principle of the AWS Well-

Architected Framework?

 A. Reduce downtime by making infrastructure changes infrequently and

in large increments.
 B. Invest the time to configure infrastructure manually.
 C. Learn to improve from operational failures.
 D. Use monolithic application design for centralization.

QUESTION #94

Using AWS Identity and Access Management (IAM) to grant access only to
the resources needed to perform a task is a concept known as:

 A. restricted access.
 B. as-needed access.
 C. least privilege access.
 D. token access.

QUESTION #95

Which AWS service or tool can be used to set up a firewall to control traffic
going into and coming out of an Amazon VPC subnet?

 A. Security group
 B. AWS WAF
 C. AWS Firewall Manager
 D. Network ACL

QUESTION #96

A company wants to operate a data warehouse to analyze data without

managing the data warehouse infrastructure.
Which AWS service will meet this requirement?

 A. Amazon Aurora
 B. Amazon Redshift Serverless
 C. AWS Lambda
  D. Amazon RDS

QUESTION #97

How does AWS Cloud computing help businesses reduce costs? (Choose
two.)

 A. AWS charges the same prices for services in every AWS Region.
 B. AWS enables capacity to be adjusted on demand.
 C. AWS offers discounts for Amazon EC2 instances that remain idle for
more than 1 week.
 D. AWS does not charge for data sent from the AWS Cloud to the
internet.
 E. AWS eliminates many of the costs of building and maintaining on-
premises data centers.

QUESTION #98

A company wants to grant users in one AWS account access to resources in

another AWS account. The users do not currently have permission to access
the resources.
Which AWS service will meet this requirement?

 A. IAM group
 B. IAM role
 C. IAM tag
 D. IAM Access Analyzer

QUESTION #99

Which task is the responsibility of AWS when using AWS services?

 A. Management of IAM user permissions

 B. Creation of security group rules for outbound access
 C. Maintenance of physical and environmental controls
 D. Application of Amazon EC2 operating system patches

QUESTION #100
A company wants to automate infrastructure deployment by using
infrastructure as code (IaC). The company wants to scale production stacks
so the stacks can be deployed in multiple AWS Regions.
Which AWS service will meet these requirements?

 A. Amazon CloudWatch
 B. AWS Config
 C. AWS Trusted Advisor
 D. AWS CloudFormation

QUESTION #101

Which option is an AWS Cloud Adoption Framework (AWS CAF) platform

perspective capability?

 A. Data architecture
 B. Data protection
 C. Data governance
 D. Data science

QUESTION #102

A company is running a workload in the AWS Cloud.

Which AWS best practice ensures the MOST cost-effective architecture for
the workload?

 A. Loose coupling
 B. Rightsizing
 C. Caching
 D. Redundancy

QUESTION #103

A company is using a third-party service to back up 10 TB of data to a tape

library. The on-premises backup server is running out of space. The company
wants to use AWS services for the backups without changing its existing
backup workflows.
Which AWS service should the company use to meet these requirements?
  A. Amazon Elastic Block Store (Amazon EBS)
 B. AWS Storage Gateway
 C. Amazon Elastic Container Service (Amazon ECS)
 D. AWS Lambda

QUESTION #104

Which AWS tool gives users the ability to plan their service usage, service
costs, and instance reservations, and also allows them to set custom alerts
when their costs or usage exceed established thresholds?

 A. Cost Explorer
 B. AWS Budgets
 C. AWS Cost and Usage Report
 D. Reserved Instance reporting

QUESTION #105

Which tasks are the customer’s responsibility, according to the AWS shared
responsibility model? (Choose two.)

 A. Establish the global infrastructure.

 B. Perform client-side data encryption.
 C. Configure IAM credentials.
 D. Secure edge locations.
 E. Patch Amazon RDS DB instances.

QUESTION #106

A developer has been hired by a large company and needs AWS credentials.
Which are security best practices that should be followed? (Choose two.)

 A. Grant the developer access to only the AWS resources needed to

perform the job.
 B. Share the AWS account root user credentials with the developer.
 C. Add the developer to the administrator’s group in AWS IAM.
 D. Configure a password policy that ensures the developer’s password
cannot be changed.
 E. Ensure the account password policy requires a minimum length.
QUESTION #107

A company has multiple AWS accounts that include compute workloads that
cannot be interrupted. The company wants to obtain billing discounts that
are based on the company’s use of AWS services.
Which AWS feature or purchasing option will meet these requirements?

 A. Resource tagging
 B. Consolidated billing
 C. Pay-as-you-go pricing
 D. Spot Instances

QUESTION #108

A user wants to allow applications running on an Amazon EC2 instance to

make calls to other AWS services. The access granted must be secure.
Which AWS service or feature should be used?

 A. Security groups
 B. AWS Firewall Manager
 C. IAM roles
 D. IAM user SSH keys

QUESTION #109

A company wants a fully managed Windows file server for its Windows-based
applications.
Which AWS service will meet this requirement?

 A. Amazon FSx
 B. Amazon Elastic Kubernetes Service (Amazon EKS)
 C. Amazon Elastic Container Service (Amazon ECS)
 D. Amazon EMR

QUESTION #110

A company wants to migrate its NFS on-premises workload to AWS.

Which AWS Storage Gateway type should the company use to meet this
requirement?
  A. Tape Gateway
 B. Volume Gateway
 C. Amazon FSx File Gateway
 D. Amazon S3 File Gateway

QUESTION #111

A company needs to track the activity in its AWS accounts, and needs to
know when an API call is made against its AWS resources.
Which AWS tool or service can be used to meet these requirements?

 A. Amazon CloudWatch
 B. Amazon Inspector
 C. AWS CloudTrail
 D. AWS IAM

QUESTION #112

A company has an uninterruptible application that runs on Amazon EC2

instances. The application constantly processes a backlog of files in an
Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected
to continue to grow for years.
What is the MOST cost-effective EC2 instance purchasing model to meet
these requirements?

 A. Spot Instances
 B. On-Demand Instances
 C. Savings Plans
 D. Dedicated Hosts

QUESTION #113

A company wants an AWS service to provide product recommendations

based on its customer data.
Which AWS service will meet this requirement?

 A. Amazon Polly
 B. Amazon Personalize
 C. Amazon Comprehend
 D. Amazon Rekognition
QUESTION #114

A company is planning its migration to the AWS Cloud. The company is

identifying its capability gaps by using the AWS Cloud Adoption Framework
(AWS CAF) perspectives.
Which phase of the cloud transformation journey includes these identification
activities?

 A. Envision
 B. Align
 C. Scale
 D. Launch

QUESTION #115

A social media company wants to protect its web application from common
web exploits such as SQL injections and cross-site scripting.
Which AWS service will meet these requirements?

 A. Amazon Inspector
 B. AWS WAF
 C. Amazon GuardDuty
 D. Amazon CloudWatch

QUESTION #116

Which fully managed AWS service assists with the creation, testing, and
management of custom Amazon EC2 images?

 A. EC2 Image Builder

 B. Amazon Machine Image (AMI)
 C. AWS Launch Wizard
 D. AWS Elastic Beanstalk

QUESTION #117

A company wants an automated process to continuously scan its Amazon

EC2 instances for software vulnerabilities.
Which AWS service will meet these requirements?
  A. Amazon GuardDuty
 B. Amazon Inspector
 C. Amazon Detective
 D. Amazon Cognito

QUESTION #118

A company needs to perform data processing once a week that typically

takes about 5 hours to complete.
Which AWS service should the company use for this workload?

 A. AWS Lambda
 B. Amazon EC2
 C. AWS CodeDeploy
 D. AWS Wavelength

QUESTION #119

Which AWS service or feature provides log information of the inbound and
outbound traffic on network interfaces in a VPC?

 A. Amazon CloudWatch Logs

 B. AWS CloudTrail
 C. VPC Flow Logs
 D. AWS Identity and Access Management (IAM)

QUESTION #120

A company wants to design a centralized storage system to manage the

configuration data and passwords for its critical business applications.
Which AWS service or capability will meet these requirements MOST cost-
effectively?

 A. AWS Systems Manager Parameter Store

 B. AWS Secrets Manager
 C. AWS Config
 D. Amazon S3

QUESTION #121
A company plans to deploy containers on AWS. The company wants full
control of the compute resources that host the containers. Which AWS
service will meet these requirements?

 A. Amazon Elastic Kubernetes Service (Amazon EKS)

 B. AWS Fargate
 C. Amazon EC2
 D. Amazon Elastic Container Service (Amazon ECS)

QUESTION #122

Which AWS service or feature allows users to create new AWS accounts,
group multiple accounts to organize workflows, and apply policies to groups
of accounts?

 A. AWS Identity and Access Management (IAM)

 B. AWS Trusted Advisor
 C. AWS CloudFormation
 D. AWS Organizations

QUESTION #123

A company wants to store and retrieve files in Amazon S3 for its existing on-
premises applications by using industry-standard file system protocols.
Which AWS service will meet these requirements?

 A. AWS DataSync
 B. AWS Snowball Edge
 C. Amazon S3 File Gateway
 D. AWS Transfer Family

QUESTION #124

A company wants to block SQL injection attacks.

Which AWS service or feature should the company use to meet this
requirement?

 A. AWS WAF
 B. Network ACLs
 C. Security groups
  D. AWS Certificate Manager (ACM)

QUESTION #125

A company wants a unified tool to provide a consistent method to interact

with AWS services.
Which AWS service or tool will meet this requirement?

 A. AWS CLI
 B. Amazon Elastic Container Service (Amazon ECS)
 C. AWS Cloud9
 D. AWS Virtual Private Network (AWS VPN)

QUESTION #126

A company needs to evaluate its AWS environment and provide best practice
recommendations in five categories: cost, performance, service limits, fault
tolerance and security.
Which AWS service can the company use to meet these requirements?

 A. AWS Shield
 B. AWS WAF
 C. AWS Trusted Advisor
 D. AWS Service Catalog

QUESTION #127

Which perspective in the AWS Cloud Adoption Framework (AWS CAF)

includes capabilities for configuration management and patch management?

 A. Platform
 B. Operations
 C. Security
 D. Governance

QUESTION #128

A company has a compute workload that is steady, predictable, and

uninterruptible.
Which Amazon EC2 instance purchasing options meet these requirements
MOST cost-effectively? (Choose two.)

 A. On-Demand Instances
 B. Reserved Instances
 C. Spot Instances
 D. Saving Plans
 E. Dedicated Hosts

QUESTION #129

Which Amazon EC2 pricing model is the MOST cost efficient for an
uninterruptible workload that runs once a year for 24 hours?

 A. On-Demand Instances
 B. Reserved Instances
 C. Spot Instances
 D. Dedicated Instances

QUESTION #130

Which option is a shared responsibility between AWS and its customers

under the AWS shared responsibility model?

 A. Configuration of Amazon EC2 instance operating systems

 B. Application file system server-side encryption
 C. Patch management
 D. Security of the physical infrastructure

QUESTION #131

A company wants to migrate its on-premises workloads to the AWS Cloud.

The company wants to separate workloads for chargeback to different
departments.
Which AWS services or features will meet these requirements? (Choose two.)

 A. Placement groups
 B. Consolidated billing
 C. Edge locations
 D. AWS Config
  E. Multiple AWS accounts

QUESTION #132

Which task is a responsibility of AWS, according to the AWS shared

responsibility model?

 A. Enable client-side encryption for objects that are stored in Amazon S3.
 B. Configure IAM security policies to comply with the principle of least
privilege.
 C. Patch the guest operating system on an Amazon EC2 instance.
 D. Apply updates to the Nitro Hypervisor.

QUESTION #133

Which option is a benefit of using AWS for cloud computing?

 A. Trade variable expense for fixed expense

 B. Pay-as-you-go pricing
 C. Decreased speed and agility
 D. Spending money running and maintaining data centers

QUESTION #134

Which option is an AWS Cloud Adoption Framework (AWS CAF) business

perspective capability?

 A. Culture evolution
 B. Event management
 C. Data monetization
 D. Platform architecture

QUESTION #135

A company is assessing its AWS Business Support plan to determine if the

plan still meets the company’s needs. The company is considering switching
to AWS Enterprise Support.
Which additional benefit will the company receive with AWS Enterprise
Support?
  A. A full set of AWS Trusted Advisor checks
 B. Phone, email, and chat access to cloud support engineers 24 hours a
day, 7 days a week
 C. A designated technical account manager (TAM) to assist in monitoring
and optimization
 D. A consultative review and architecture guidance for the company’s
applications

QUESTION #136

Which pricing model will interrupt a running Amazon EC2 instance if capacity
becomes temporarily unavailable?

 A. On-Demand Instances
 B. Standard Reserved Instances
 C. Spot Instances
 D. Convertible Reserved Instances

QUESTION #137

Which options are AWS Cloud Adoption Framework (AWS CAF) security
perspective capabilities? (Choose two.)

 A. Observability
 B. Incident and problem management
 C. Incident response
 D. Infrastructure protection
 E. Availability and continuity

QUESTION #138

A company wants to run its workload on Amazon EC2 instances for more
than 1 year. This workload will run continuously.

Which option offers a discounted hourly rate compared to the hourly rate of
On-Demand Instances?

 A. AWS Graviton processor

 B. Dedicated Hosts
 C. EC2 Instance Savings Plans
  D. Amazon EC2 Auto Scaling instances

QUESTION #139

Which characteristic of the AWS Cloud helps users eliminate underutilized

CPU capacity?

 A. Agility
 B. Elasticity
 C. Reliability
 D. Durability

QUESTION #140

Which AWS services can a company use to achieve a loosely coupled

architecture? (Choose two.)

 A. Amazon WorkSpaces
 B. Amazon Simple Queue Service (Amazon SQS)
 C. Amazon Connect
 D. AWS Trusted Advisor
 E. AWS Step Functions

QUESTION #141

Which AWS Cloud service can send alerts to customers if custom spending
thresholds are exceeded?

 A. AWS Budgets
 B. AWS Cost Explorer
 C. AWS Cost Allocation Tags
 D. AWS Organizations

QUESTION #142

A company plans to migrate to the AWS Cloud. The company wants to use
the AWS Cloud Adoption Framework (AWS CAF) to define and track business
outcomes as part of its cloud transformation journey.

Which AWS CAF governance perspective capability will meet these

requirements?

 A. Benefits management
 B. Risk management
 C. Application portfolio management
 D. Cloud financial management

QUESTION #143

A company needs to quickly and securely move files over long distances
between its client and an Amazon S3 bucket.

Which S3 feature will meet this requirement?

 A. S3 Versioning
 B. S3 Transfer Acceleration
 C. S3ACLs
 D. S3 Intelligent-Tiering

QUESTION #144

A company needs to continuously run an experimental workload on an

Amazon EC2 instance and stop the instance after 12 hours.

Which instance purchasing option will meet this requirement MOST cost-
effectively?

 A. On-Demand Instances
 B. Reserved Instances
 C. Spot Instances
 D. Dedicated Instances

QUESTION #145

Which cloud transformation journey phase of the AWS Cloud Adoption

Framework (AWS CAF) focuses on demonstrating how the cloud helps
accelerate business outcomes?
  A. Scale
 B. Envision
 C. Align
 D. Launch

QUESTION #146

Which option is a customer responsibility under the AWS shared

responsibility model?

 A. Maintenance of underlying hardware of Amazon EC2 instances

 B. Application data security
 C. Physical security of data centers
 D. Maintenance of VPC components

QUESTION #147

A company wants its Amazon EC2 instances to operate in a highly available

environment, even if there is a natural disaster in a particular geographic
area.

Which approach will achieve this goal?

 A. Use EC2 instances in multiple AWS Regions.

 B. Use EC2 instances in multiple Amazon CloudFront locations.
 C. Use EC2 instances in multiple edge locations.
 D. Use EC2 instances in AWS Local Zones.

QUESTION #148

A company wants to modernize and convert a monolithic application into

microservices. The company wants to move the application to AWS.

Which migration strategy should the company use?

 A. Rehost
 B. Replatform
 C. Repurchase
 D. Refactor
QUESTION #149

A systems administrator created a new IAM user for a developer and

assigned the user an access key instead of a user name and password. What
is the access key used for?

 A. To access the AWS account as the AWS account root user

 B. To access the AWS account through the AWS Management Console
 C. To access the AWS account through a CLI
 D. To access all of a company’s AWS accounts

QUESTION #150

Which option is an environment that consists of one or more data centers?

 A. Amazon CloudFront
 B. Availability Zone
 C. VPC
 D. AWS Outposts

QUESTION #151

A company is moving an on-premises data center to the AWS Cloud. The

company must migrate 50 petabytes of file storage data to AWS with the
least possible operational overhead.

Which AWS service or resource should the company use to meet these
requirements?

 A. AWS Snowmobile
 B. AWS Snowball Edge
 C. AWS Data Exchange
 D. AWS Database Migration Service (AWS DMS)

QUESTION #152
A company has an application with robust hardware requirements. The
application must be accessed by students who are using lightweight, low-
cost laptops.

Which AWS service will help the company deploy the application without
investing in backend infrastructure or high-end client hardware?

 A. Amazon AppStream 2.0

 B. AWS AppSync
 C. Amazon WorkLink
 D. AWS Elastic Beanstalk

QUESTION #153

A company wants to query its server logs to gain insights about its
customers’ experiences.

Which AWS service will store this data MOST cost-effectively?

 A. Amazon Aurora
 B. Amazon Elastic File System (Amazon EFS)
 C. Amazon Elastic Block Store (Amazon EBS)
 D. Amazon S3

QUESTION #154

Which of the following is a recommended design principle for AWS Cloud

architecture?

 A. Design tightly coupled components.

 B. Build a single application component that can handle all the
application functionality.
 C. Make large changes on fewer iterations to reduce chances of failure.
 D. Avoid monolithic architecture by segmenting workloads.

QUESTION #155

Which AWS service helps users audit API activity across their AWS account?

 A. AWS CloudTrail
  B. Amazon Inspector
 C. AWS WAF
 D. AWS Config

QUESTION #156

Which task is a customer’s responsibility, according to the AWS shared

responsibility model?

 A. Management of the guest operating systems

 B. Maintenance of the configuration of infrastructure devices
 C. Management of the host operating systems and virtualization
 D. Maintenance of the software that powers Availability Zones

QUESTION #157
A COMPANY WANTS TO AUTOMATICALLY ADD AND REMOVE AMAZON EC2 INSTANCES. THE
COMPANY WANTS THE EC2 INSTANCES TO ADJUST TO VARYING WORKLOADS
DYNAMICALLY.

WHICH SERVICE OR FEATURE WILL MEET THESE REQUIREMENTS?

 A. Amazon DynamoDB
 B. Amazon EC2 Spot Instances
 C. AWS Snow Family
 D. Amazon EC2 Auto Scaling

QUESTION #158

A user wants to securely automate the management and rotation of

credentials that are shared between applications, while spending the least
amount of time on managing tasks.

Which AWS service or feature can be used to accomplish this?

 A. AWS CloudHSM
 B. AWS Key Management Service (AWS KMS)
 C. AWS Secrets Manager
 D. Server-side encryption
QUESTION #159

Which security service automatically recognizes and classifies sensitive data

or intellectual property on AWS?

 A. Amazon GuardDuty
 B. Amazon Macie
 C. Amazon Inspector
 D. AWS Shield

QUESTION #160

Which actions are best practices for an AWS account root user? (Choose
two.)

 A. Share root user credentials with team members.

 B. Create multiple root users for the account, separated by environment.
 C. Enable multi-factor authentication (MFA) on the root user.
 D. Create an IAM user with administrator privileges for daily
administrative tasks, instead of using the root user.
 E. Use programmatic access instead of the root user and password.

QUESTION #161

A company is running a critical workload on an Amazon RDS DB instance.

The company needs the DB instance to be highly available with a recovery
time of less than 5 minutes.

Which solution will meet these requirements?

 A. Create a read replica of the DB instance.

 B. Create a template of the DB instance by using AWS CloudFormation.
 C. Take frequent snapshots of the DB instance. Store the snapshots in
Amazon S3.
 D. Modify the DB instance to be a Multi-AZ deployment.

QUESTION #162
A company plans to migrate its application to AWS and run the application
on Amazon EC2 instances. The application will have continuous usage for 1
year.

Which EC2 instance purchasing option will meet these requirements MOST
cost-effectively?

 A. Reserved Instances
 B. Spot Instances
 C. On-Demand Instances
 D. Dedicated Hosts

QUESTION #163

A company needs to transfer data between an Amazon S3 bucket and an on-

premises application.

Who is responsible for the security of this data, according to the AWS shared
responsibility model?

 A. The company
 B. AWS
 C. Firewall vendor
 D. AWS Marketplace partner

QUESTION #164

Which pillar of the AWS Well-Architected Framework refers to the ability of a

system to recover from infrastructure or service disruptions and dynamically
acquire computing resources to meet demand?

 A. Security
 B. Reliability
 C. Performance efficiency
 D. Cost optimization

QUESTION #165

A company wants to identify Amazon S3 buckets that are shared with

another AWS account.
Which AWS service or feature will meet these requirements?

 A. AWS Lake Formation

 B. IAM credential report
 C. Amazon CloudWatch
 D. IAM Access Analyzer

QUESTION #166

Which AWS service gives users the ability to build interactive business
intelligence dashboards that include machine learning insights?

 A. Amazon Athena
 B. Amazon Kendra
 C. Amazon QuickSight
 D. Amazon Redshift

QUESTION #167

Which of the following is an AWS value proposition that describes a user’s

ability to scale infrastructure based on demand?

 A. Speed of innovation
 B. Resource elasticity
 C. Decoupled architecture
 D. Global deployment

QUESTION #168

Which action is a security best practice for access to sensitive data that is
stored in an Amazon S3 bucket?

 A. Enable S3 Cross-Region Replication (CRR) on the S3 bucket.

 B. Use IAM roles for applications that require access to the S3 bucket.
 C. Configure AWS WAF to prevent unauthorized access to the S3 bucket.
 D. Configure Amazon GuardDuty to prevent unauthorized access to the
S3 bucket.
QUESTION #169

A company wants to know more about the benefits offered by cloud

computing. The company wants to understand the operational advantage of
agility. How does AWS provide agility for users?

 A. The ability the ensure high availability by deploying workloads to

multiple regions
 B. A pay-as-you-go model for many services and resources
 C. The ability to transfer infrastructure management to the AWS Cloud
 D. The ability to provision and deprovision resources quickly with
minimal effort

QUESTION #170

A company needs a central user portal so that users can log in to third-party
business applications that support Security Assertion Markup Language
(SAML) 2.0.

Which AWS service will meet this requirement?

 A. AWS Identity and Access Management (IAM)

 B. Amazon Cognito
 C. AWS IAM Identity Center (AWS Single Sign-On)
 D. AWS CLI

QUESTION #171

Which AWS service should users use to learn about AWS service availability
and operations?

 A. Amazon EventBridge
 B. AWS Service Catalog
 C. AWS Control Tower
 D. AWS Health Dashboard

QUESTION #172
Which AWS service or tool can be used to capture information about inbound
and outbound traffic in an Amazon VPC?

 A. VPC Flow Logs

 B. Amazon Inspector
 C. VPC endpoint services
 D. NAT gateway

QUESTION #173

What is the customer ALWAYS responsible for managing, according to the

AWS shared responsibility model?

 A. Software licenses
 B. Networking
 C. Customer data
 D. Encryption keys

QUESTION #174

Which AWS service can be used to retrieve compliance reports on demand?

 A. AWS Secrets Manager

 B. AWS Artifact
 C. AWS Security Hub
 D. AWS Certificate Manager

QUESTION #175

Which AWS service enables users to check for vulnerabilities on Amazon EC2
instances by using predefined assessment templates?

 A. AWS WAF
 B. AWS Trusted Advisor
 C. Amazon Inspector
 D. AWS Shield

QUESTION #176
A company plans to migrate to the AWS Cloud. The company is gathering
information about its on-premises infrastructure and requires information
such as the hostname, IP address, and MAC address.

Which AWS service will meet these requirements?

 A. AWS DataSync
 B. AWS Application Migration Service
 C. AWS Application Discovery Service
 D. AWS Database Migration Service (AWS DMS)

QUESTION #177

Which action will help increase security in the AWS Cloud?

 A. Enable programmatic access for all IAM users.

 B. Use IAM users instead of IAM roles to delegate permissions.
 C. Rotate access keys on a reoccurring basis.
 D. Use inline policies instead of customer managed policies.

QUESTION #178

A company is planning to migrate its application to the AWS Cloud.

Which AWS tool or set of resources should the company use to analyze and
assess its readiness for migration?

 A. AWS Cloud Adoption Framework (AWS CAF)

 B. AWS Pricing Calculator
 C. AWS Well-Architected Framework
 D. AWS Budgets

QUESTION #179

Which of the following describes some of the core functionality of Amazon

S3?

 A. Amazon S3 is a high-performance block storage service that is

designed for use with Amazon EC2.
  B. Amazon S3 is an object storage service that provides high-level
performance, security, scalability, and data availability.
 C. Amazon S3 is a fully managed, highly reliable, and scalable file
storage system that is accessible over the industry-standard SMB
protocol.
 D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS
Cloud services and on-premises resources.

QUESTION #180

Which AWS benefit is demonstrated by on-demand technology services that

enable companies to replace upfront fixed expenses with variable expenses?

 A. High availability
 B. Economies of scale
 C. Pay-as-you-go pricing
 D. Global reach

QUESTION #171
Which AWS service should users use to learn about AWS service availability
and operations?

 A. Amazon EventBridge

 B. AWS Service Catalog

 C. AWS Control Tower

 D. AWS Health Dashboard

QUESTION #172
Which AWS service or tool can be used to capture information about inbound
and outbound traffic in an Amazon VPC?

 A. VPC Flow Logs

  B. Amazon Inspector

 C. VPC endpoint services

 D. NAT gateway

QUESTION #173
What is the customer ALWAYS responsible for managing, according to the
AWS shared responsibility model?

 A. Software licenses

 B. Networking

 C. Customer data

 D. Encryption keys

QUESTION #174
Which AWS service can be used to retrieve compliance reports on demand?

 A. AWS Secrets Manager

 B. AWS Artifact

 C. AWS Security Hub

 D. AWS Certificate Manager

QUESTION #175
Which AWS service enables users to check for vulnerabilities on Amazon EC2
instances by using predefined assessment templates?

 A. AWS WAF

 B. AWS Trusted Advisor

 C. Amazon Inspector
  D. AWS Shield

QUESTION #176
A company plans to migrate to the AWS Cloud. The company is gathering
information about its on-premises infrastructure and requires information
such as the hostname, IP address, and MAC address.

Which AWS service will meet these requirements?

 A. AWS DataSync

 B. AWS Application Migration Service

 C. AWS Application Discovery Service

 D. AWS Database Migration Service (AWS DMS)

QUESTION #177
Which action will help increase security in the AWS Cloud?

 A. Enable programmatic access for all IAM users.

 B. Use IAM users instead of IAM roles to delegate permissions.

 C. Rotate access keys on a reoccurring basis.

 D. Use inline policies instead of customer managed policies.

QUESTION #178
A company is planning to migrate its application to the AWS Cloud.

Which AWS tool or set of resources should the company use to analyze and
assess its readiness for migration?

 A. AWS Cloud Adoption Framework (AWS CAF)

 B. AWS Pricing Calculator

  C. AWS Well-Architected Framework

 D. AWS Budgets

QUESTION #179
Which of the following describes some of the core functionality of Amazon
S3?

 A. Amazon S3 is a high-performance block storage service that is

designed for use with Amazon EC2.

 B. Amazon S3 is an object storage service that provides high-level

performance, security, scalability, and data availability.

 C. Amazon S3 is a fully managed, highly reliable, and scalable file

storage system that is accessible over the industry-standard SMB
protocol.

 D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS
Cloud services and on-premises resources.

QUESTION #180
Which AWS benefit is demonstrated by on-demand technology services that
enable companies to replace upfront fixed expenses with variable expenses?

 A. High availability

 B. Economies of scale

 C. Pay-as-you-go pricing

 D. Global reach