A company is running its application in the AWS Cloud and wants to protect against a DDoS attack. The company’s security team wants near real-time visibility into DDoS attacks.
Which AWS service or traffic filter will meet these requirements with the MOST features for DDoS protection?

A. AWS Shield Advanced

B. AWS Shield

C. Amazon GuardDuty

D. Network ACLs

A company is using the AWS Free Tier for several AWS services for an application.
What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?

A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.

B. AWS Support will contact the company to set up standard service charges.

C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.

D. The company’s AWS account will be frozen and can be restarted after a payment plan is established.

A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration.
Which pillar of the AWS Well-Architected Framework does this plan represent?

A. Security

B. Performance efficiency

C. Operational excellence

D. Reliability

A company needs to connect multiple VPCs and on-premises networks through a single network connection to the AWS Cloud.
Which solution meets this requirement?

A. AWS Transit Gateway

B. AWS Direct Connect

C. VPC peering

D. AWS Client VPN

A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings.
Which cloud concept does this analysis demonstrate?

A. Auto scaling

B. Rightsizing

C. Load balancing

D. High availability

Which pillar of the AWS Well-Architected Framework is focused on the ability of a workload to perform its intended function correctly and consistently at the expected time?

A. Performance efficiency

B. Operational excellence

C. Reliability

D. Security

Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements?

A. Amazon Elastic Block Store (Amazon EBS) volume

B. AWS CloudFormation template

C. Amazon Elastic Block Store (Amazon EBS) snapshot

D. Amazon Machine Image (AMI)

Which AWS service is a continuous delivery and deployment solution?

A. AWS AppSync

B. AWS CodePipeline

C. AWS Cloud9

D. AWS CodeCommit

A company wants its Amazon EC2 instances to share the same geographic area but use multiple independent underlying power sources.
Which solution achieves this goal?

A. Use EC2 instances in a single Availability Zone.

B. Use EC2 instances in multiple AWS Regions.

C. Use EC2 instances in multiple Availability Zones in the same AWS Region.

D. Use EC2 instances in the same edge location and the same AWS Region.

Which perspective of the AWS Cloud Adoption Framework (AWS CAF) connects technology and business?

A. Operations

B. People

C. Security

D. Governance

Which AWS service, tool, or feature helps companies reduce costs by identifying underutilized Amazon EC2 instances?

A. Amazon Inspector

B. AWS Trusted Advisor

C. Consolidated billing

D. Cost Explorer

Which of the following acts as an instance-level firewall to control inbound and outbound access?

A. Network access control list

B. Security groups

C. AWS Trusted Advisor

D. Virtual private gateways

A company wants to rotate, manage, and retrieve credentials that are used to access databases in the company's AWS account.
Which AWS service can the company use to meet these requirements?

A. AWS Secrets Manager

B. AWS Security Hub

C. AWS Shield

D. AWS WAF

Which AWS tool or feature acts as a VPC firewall at the subnet level?

A. Security group

B. Network ACL

C. Traffic Mirroring

D. Internet gateway

A company needs a history report about how its Amazon EC2 instances were modified last month.
Which AWS service can be used to meet this requirement?

A. AWS Service Catalog

B. AWS Config

C. Amazon CloudWatch

D. AWS Artifact

A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources.
Which AWS service should the company use?

A. AWS Config

B. AWS Secrets Manager

C. AWS CloudTrail

D. AWS Trusted Advisor

Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

A. VPC Flow Logs

B. Amazon Inspector

C. VPC endpoint services

D. NAT gateway

Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and caches the data locally for low-latency access?

A. AWS Direct Connect

B. AWS Storage Gateway

C. Amazon S3

D. AWS Snowball Edge

Which AWS service offers a global content delivery network (CDN) that helps companies securely deliver websites, videos, applications, and APIs at high speeds with low latency?

A. Amazon EC2

B. Amazon CloudFront

C. Amazon CloudWatch

D. AWS CloudFormation

Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?

A. AWS Trusted Advisor

B. AWS Knowledge Center

C. AWS Support Center

D. AWS Artifact

Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances?

A. Amazon WorkSpaces

B. Amazon Elastic File System (Amazon EFS)

C. AWS Database Migration Service (AWS DMS)

D. AWS Snowball Edge

A company must compare the cost of running a MySQL database on an Amazon EC2 instance and Amazon RDS DB instance.
Which AWS service or tool should the company use?

A. AWS Budgets

B. AWS Control Tower

C. AWS Outposts

D. AWS Pricing Calculator

A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.
Which instance purchasing option will meet these requirements MOST cost-effectively?

A. Spot Instances

B. Reserved Instances

C. Dedicated Hosts

D. On-Demand Instances

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

A. Scale the number of EC2 instances in or out automatically, based on demand.

B. Use serverless EC2 instances.

C. Scale the size of EC2 instances up or down automatically, based on demand.

D. Transfer unused CPU resources between EC2 instances.

Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting?

A. AWS WAF

B. AWS Shield Advanced

C. Amazon GuardDuty

D. Amazon Detective

A company needs to set up a petabyte-scale data warehouse in the AWS Cloud.
Which AWS service will meet this requirement?

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Redshift

D. Amazon ElastiCache

A company has developed a distributed application that recovers gracefully from Interruptions. The application periodically processes large volumes of data by using multiple Amazon EC2 Instances. The application is sometimes idle for months.
Which EC2 instance purchasing option is MOST cost-effective for this use case?

A. Reserved Instances

B. Spot Instances

C. Dedicated Instances

D. On-Demand Instances

Which AWS service allows a user to provision a managed MySQL DB instance?

A. Amazon DynamoDB

B. Amazon Redshift

C. Amazon RDS

D. AWS Database Migration Service (AWS DMS)

A company is migrating to the AWS Cloud. The company requires consultative review and guidance for its applications during the migration. After the migration is complete, the company requires a response within 30 minutes if business-critical systems go down.
Which AWS Support plans meet these requirements? (Choose two.)

A. AWS Enterprise Support

B. AWS Enterprise On-Ramp Support

C. AWS Developer Support

D. AWS Basic Support

E. AWS Business Support

A company wants to use Amazon EC2 instances for a stable production workload that will run for 1 year.
Which instance purchasing option meets these requirements MOST cost-effectively?

A. Dedicated hosts

B. Reserved Instances

C. On-Demand Instances

D. Spot Instances

A company wants to build a new web application by using AWS services. The application must meet the on-demand load for periods of heavy activity.
Which AWS services or resources provide the necessary workload adjustments to meet these requirements? (Choose two.)

A. Amazon Machine Image (AMI)

B. Amazon EC2 Auto Scaling

C. Amazon EC2 instance

D. AWS Lambda

E. EC2 Image Builder

Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?

A. AWS Organizations

B. AWS Budgets

C. Cost Explorer

D. AWS Trusted Advisor

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.
Where can the company purchase the security solution?

A. AWS Partner Solutions Finder

B. AWS Support Center

C. AWS Management Console

D. AWS Marketplace

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.
Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

A. AWS

B. The company

C. AWS Marketplace partners

D. Third-party partners

Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

A. Amazon DynamoDB

B. AWS CodePipeline

C. AWS Batch

D. AWS Step Functions

Which AWS service gives users the ability to download compliance reports from third party auditors?

A. AWS Lambda

B. AWS Trusted Advisor

C. AWS Artifact

D. AWS Audit Manager

A company needs to securely store important credentials that an application uses to connect users to a database.
Which AWS service can meet this requirement with the MINIMAL amount of operational overhead?

A. AWS Key Management Service (AWS KMS)

B. AWS Config

C. AWS Secrets Manager

D. Amazon GuardDuty

A company needs a quick estimate of the cost to run 100 Amazon EC2 instances with AWS Business Support.
Which tool should the company use to generate the estimate?

A. AWS Budgets

B. AWS Cost and Usage Report

C. AWS Pricing Calculator

D. Cost Explorer

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.
Which cost is the company's direct responsibility?

A. Cost of application software licenses

B. Cost of the hardware infrastructure on AWS

C. Cost of power for the AWS servers

D. Cost of physical security for the AWS data center

Which AWS service can defend against DDoS attacks?

A. AWS Firewall Manager

B. AWS Shield Standard

C. AWS WAF

D. Amazon Inspector

Which AWS service, feature, or tool helps visualize the pattern of AWS spending?

A. Cost Explorer

B. Amazon DevPay

C. AWS CloudTrail

D. Consolidated billing

Which AWS services can a company use to transfer on-premises data to the AWS Cloud? (Choose two.)

A. AWS Snowcone

B. AWS Transit Gateway

C. AWS DataSync

D. AWS Backup

E. Amazon Connect

Which AWS Well-Architected Framework concept represents a system’s ability to remain functional when the system encounters operational problems?

A. Consistency

B. Elasticity

C. Durability

D. Latency

According to the AWS shared responsibility model which of the following are AWS responsibilities? (Choose two.)

A. Network infrastructure and virtualization of infrastructure

B. Security of application data

C. Guest operating systems

D. Physical security of hardware

E. Credentials and policies

Which design principle should be considered when architecting in the AWS Cloud?

A. Think of servers as non-disposable resources

B. Use synchronous integration of services

C. Design loosely coupled components

D. Implement the least permissive rules for security groups

Management at a large company wants to avoid long-term contracts and is interested in AWS to move from fixed costs to variable costs.
What is the value proposition of AWS for this company?

A. Economy of scale

B. Pay-as-you-go pricing

C. Volume discounts

D. Cost optimization

Which of the following is a component of the AWS Global Infrastructure?

A. Amazon Alexa

B. AWS Regions

C. Amazon Lightsail

D. AWS Organizations

Which AWS services can be used to store files? (Choose two.)

A. Amazon S3

B. AWS Lambda

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon SageMaker

E. AWS Storage Gateway

Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

A. Amazon VPC

B. AWS Shield

C. AWS Audit Manager

D. AWS Config

Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?

A. AWS CloudTrail

B. AWS Personal Health Dashboard

C. AWS Trusted Advisor

D. Amazon CloudWatch