A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks.
How can this be resolved?

A. Enable AWS Shield Advanced.

B. Create a custom IAM policy.

C. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace.

D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key.

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)

A. configure the AWS provided security group firewall.

B. Classify company assets in the AWS Cloud.

C. Determine which Availability Zones to use for Amazon S3 buckets.

D. Patch or upgrade Amazon DynamoD

E. Select Amazon EC2 instances to run AWS Lambda on.

Which task is the customer's responsibility, according to the AWS shared responsibility model?

A. Patch a guest operating system that is deployed on an Amazon EC2 instance.

B. Control physical access to an AWS data center.

C. Control access to AWS underlying hardware.

D. Patch a host operating system that is deployed on Amazon S3.

Which of the following is a fully managed graph database service on AWS?

A. Amazon Aurora

B. Amazon FSx

C. Amazon DynamoDB

D. Amazon Neptune

A company wants a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads.
Which AWS service will meet these requirements?

A. AWS Artifact

B. AWS Backup

C. AWS Batch

D. AWS Shield

Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on organizing an inventory of data products in a data catalog?

A. Operations

B. Governance

C. Business

D. Platform

A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch. Which AWS Support plan offers guidance and support for this kind of event at no additional charge?

A. AWS Business Support

B. AWS Basic Support

C. AWS Developer Support

D. AWS Enterprise Support

A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket.
Which S3 feature will meet this requirement?

A. S3 Versioning

B. S3 Transfer Acceleration

C. S3ACLs

D. S3 Intelligent-Tiering

A user needs to perform a one-time backup of an Amazon Elastic Block Store (Amazon EBS) volume that is attached to an Amazon EC2 instance.
What is the MOST operationally efficient way to perform this backup?

A. Attach another EBS volume to the EC2 instance, and copy the contents.

B. Copy the EBS volume to a server that is running outside AWS and is connected with AWS Direct Connect.

C. Create an EBS snapshot of the volume.

D. Create a custom script to copy the EBS file contents to Amazon S3.

A company wants to deploy an application in multiple Availability Zones in a single AWS Region.
Which benefit will this deployment provide to the company?

A. Improved connection performance for global customers

B. Resilient architecture and a highly available solution

C. Reduced overall data storage costs

D. Ability to shut down an Availability Zone during periods of low demand

A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy, manage, and decommission AWS resources.
Which AWS service will meet these requirements?

A. Amazon CloudWatch

B. AWS Service Catalog

C. Amazon GuardDuty

D. AWS Security Hub

A company wants to migrate a company’s on-premises container infrastructure to the AWS Cloud. The company wants to prevent unplanned administration and operation cost and adapt to a serverless architecture.
Which AWS service will meet these requirements?

A. Amazon Connect

B. AWS Fargate

C. Amazon Lightsail

D. Amazon EC2

A company wants to migrate its on-premises SQL Server database to the AWS Cloud. The company wants AWS to handle the day-to-day administration of the database.
Which AWS service will meet the company's requirements?

A. Amazon EC2 for Microsoft SQL Server

B. Amazon DynamoDB

C. Amazon RDS

D. Amazon Aurora

Which option is an advantage of AWS Cloud computing that minimizes variable costs?

A. High availability

B. Economies of scale

C. Global reach

D. Agility

A company needs to block SQL injection attacks.
Which AWS service or feature can meet this requirement?

A. AWS WAF

B. AWS Shield

C. Network ACLs

D. Security groups

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

A. Speed of innovation

B. Resource elasticity

C. Decoupled architecture

D. Global deployment

A company wants to deploy a web application as a containerized application. The company wants to use a managed service that can automatically create container images from source code and deploy the containerized application.
Which AWS service will meet these requirements?

A. AWS Elastic Beanstalk

B. Amazon Elastic Container Service (Amazon ECS)

C. AWS App Runner

D. Amazon EC2

A user wants to invoke an AWS Lambda function when an Amazon EC2 instance enters the “stopping” state.
Which AWS service is appropriate for this use case?

A. Amazon EventBridge

B. AWS Config

C. Amazon Simple Notification Service (Amazon SNS)

D. AWS CloudFormation

A company is running a reporting web server application on Amazon EC2 instances. The application runs once every week and once again at the end of the month. The EC2 instances can be shut down when they are not in use.
What is the MOST cost-effective billing model for this use case?

A. Standard Reserved Instances

B. Convertible Reserved Instances

C. On-Demand Capacity Reservations

D. On-Demand Instances

A company has a compute workload that is steady, predictable, and uninterruptible. Which Amazon EC2 instance purchasing options meet these requirements MOST cost-effectively? (Choose two.)

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Saving Plans

E. Dedicated Hosts

A company that operates on-premises servers decides to start a new line of business. The company determines that additional servers are required for the new workloads.
Which advantage of cloud computing can help the company to provision additional infrastructure as quickly as possible?

A. Benefit from massive economies of scale

B. Increase speed and agility

C. Trade fixed expense for variable expense

D. Go global in minutes

A company wants durable storage for static content and in nitely scalable data storage infrastructure at the lowest cost.
Which AWS service should the company choose?

A. Amazon Elastic Block Store (Amazon EBS)

B. Amazon S3

C. AWS Storage Gateway

D. Amazon Elastic File System (Amazon EFS)

Which AWS service supports a company's ability to treat infrastructure as code?

A. AWS CodeDeploy

B. AWS Elastic Beanstalk

C. Amazon API Gateway

D. AWS CloudFormation

Which AWS service allows for file sharing between multiple Amazon EC2 instances?

A. AWS Direct Connect

B. AWS Snowball Edge

C. AWS Backup

D. Amazon Elastic File System (Amazon EFS)

A company is designing workloads in the AWS Cloud. The company wants the workloads to perform their intended function correctly and consistently throughout their lifecycle.
Which pillar of the AWS Well-Architected Framework does this goal represent?

A. Operational excellence

B. Security

C. Reliability

D. Performance efficiency

Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

A. Amazon Aurora

B. Amazon DynamoDB

C. Amazon RDS

D. Amazon Redshift

Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?

A. Use a monolithic design.

B. Design for automation.

C. Design for single points of failure.

D. Loosely couple components.

Which actions are best practices for an AWS account root user? (Choose two.)

A. Share root user credentials with team members.

B. Create multiple root users for the account, separated by environment.

C. Enable multi-factor authentication (MFA) on the root user.

D. Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.

E. Use programmatic access instead of the root user and password.

Which of the following AWS services are serverless? (Choose two.)

A. AWS Outposts

B. Amazon EC2

C. Amazon Elastic Kubernetes Service (Amazon EKS)

D. AWS Fargate

E. AWS Lambda

Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)

A. Maintain the configuration of infrastructure devices.

B. Maintain patching and updates within the hardware infrastructure.

C. Maintain the configuration of guest operating systems and applications.

D. Manage decisions involving encryption options.

E. Maintain infrastructure hardware.

A company has multiple AWS accounts. The company needs to receive a consolidated bill from AWS and must centrally manage security and compliance.
Which AWS service or feature should the company use to meet these requirements?

A. AWS Cost and Usage Report

B. AWS Organizations

C. AWS Config

D. AWS Security Hub

A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed.
Which AWS service should the company use to meet these requirements?

A. AWS Config

B. Amazon Rekognition

C. AWS CloudTrail

D. Amazon Simple Notification Service (Amazon SNS)

A company needs to purchase Amazon EC2 instances to support an application that will run continuously for more than 1 year.
Which EC2 instance purchasing option meets these requirements MOST cost-effectively?

A. Dedicated Instances

B. Spot Instances

C. Reserved Instances

D. On-Demand Instances

A company wants to implement detailed tracking of its cloud costs by department and project.
Which AWS feature or service should the company use?

A. Consolidated billing

B. Cost allocation tags

C. AWS Marketplace

D. AWS Budgets

A company wants to migrate its on-premises NoSQL workload to Amazon DynamoDB.
Which AWS service will meet this requirement?

A. AWS Migration Hub

B. AWS Database Migration Service (AWS DMS)

C. Migration Evaluator

D. AWS Application Migration Service

A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks.
Which AWS service will meet these requirements?

A. AWS Shield Standard

B. AWS Firewall Manager

C. AWS Shield Advanced

D. Amazon GuardDuty

According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.)

A. Network infrastructure and virtualization of infrastructure

B. Security of application data

C. Guest operating systems

D. Physical security of hardware

E. Credentials and policies

A company has temporary workload that is also variable. The company needs to use Amazon EC2 instances for the workload. The EC2 instances need to handle short bursts of work that cannot stop before finishing.
Which purchase option will meet these requirements?

A. Spot Instances

B. On-Demand Instances

C. Savings Plan

D. Reserved Instances

Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

A. Amazon Route 53

B. Amazon Macie

C. AWS Direct Connect

D. AWS PrivateLink

Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

A. IAM access and secret keys are static, so there is no need to rotate them.

B. The customer is responsible for rotating keys.

C. AWS will rotate the keys whenever required.

D. The AWS Support team will rotate keys when requested by the customer.

A company wants to migrate all of its on-premises infrastructure to the AWS Cloud. Before migration, the company wants estimate of costs for running its as-is infrastructure.
Which AWS service or principle should the company use to meet this requirement?

A. AWS Pricing Calculator

B. AWS Well-Architected Framework

C. AWS shared responsibility model

D. AWS Cloud Adoption Framework (AWS CAF)

Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

A. AWS Pricing Calculator

B. AWS Compute Optimizer

C. AWS App Runner

D. AWS Systems Manager

Which VPC component can a company use to set up a virtual firewall at the Amazon EC2 instance level?

A. Network ACL

B. Security group

C. Route table

D. NAT gateway

A user has a stateful workload that will run on Amazon EC2 for the next 3 years.
What is the MOST cost-effective pricing model for this workload?

A. On-Demand Instances

B. Reserved Instances

C. Dedicated Instances

D. Spot Instances

A company needs to continuously run an experimental workload on an Amazon EC2 instance and stop the instance after 12 hours.
Which instance purchasing option will meet this requirement MOST cost-effectively?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Dedicated Instances

Which AWS service uses AWS Compute Optimizer to provide sizing recommendations based on workload metrics?

A. Amazon EC2

B. Amazon RDS

C. Amazon Lightsail

D. AWS Step Functions

A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years. What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?

A. Spot Instances

B. On-Demand Instances

C. Savings Plans

D. Dedicated Hosts

A library wants to automate the classification of electronic books based on the contents of the books.
Which AWS service should the library use to meet this requirement?

A. Amazon Redshift

B. Amazon CloudSearch

C. Amazon Comprehend

D. Amazon Aurora

Which cloud concept is demonstrated by using AWS Compute Optimizer?

A. Security validation

B. Rightsizing

C. Elasticity

D. Global reach

An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.
Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?

A. Amazon Simple Queue Service (Amazon SQS)

B. Amazon Simple notification Service (Amazon SNS)

C. AWS Systems Manager

D. Amazon CloudWatch alarm