A company wants a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads.
Which AWS service will meet these requirements?

A. AWS Artifact

B. AWS Backup

C. AWS Batch

D. AWS Shield

A company is planning to migrate its application to the AWS Cloud.
Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?

A. AWS Cloud Adoption Framework (AWS CAF)

B. AWS Pricing Calculator

C. AWS Well-Architected Framework

D. AWS Budgets

A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use.
Which AWS feature or service will meet this requirement?

A. AWS Cost and Usage Reports

B. IAM credential reports

C. Detailed Billing Reports -D AWS Cost Explorer reports

A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.
Which approach will achieve this goal?

A. Use EC2 instances in multiple AWS Regions.

B. Use EC2 instances in multiple Amazon CloudFront locations.

C. Use EC2 instances in multiple edge locations.

D. Use EC2 instances in AWS Local Zones.

Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?

A. Use a monolithic design.

B. Design for automation.

C. Design for single points of failure.

D. Loosely couple components.

An administrator observed that multiple AWS resources were deleted yesterday.
Which AWS service will help identify the cause and determine which user deleted the resources?

A. AWS CloudTrail

B. Amazon Inspector

C. Amazon GuardDuty

D. AWS Trusted Advisor

Which AWS service can be used at no additional cost?

A. Amazon SageMaker

B. AWS config

C. AWS Organizations

D. Amazon CloudWatch

A user needs to perform a one-time backup of an Amazon Elastic Block Store (Amazon EBS) volume that is attached to an Amazon EC2 instance.
What is the MOST operationally efficient way to perform this backup?

A. Attach another EBS volume to the EC2 instance, and copy the contents.

B. Copy the EBS volume to a server that is running outside AWS and is connected with AWS Direct Connect.

C. Create an EBS snapshot of the volume.

D. Create a custom script to copy the EBS file contents to Amazon S3.

A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.
Which pricing options meet these requirements with the LOWEST cost? (Choose two.)

A. Spot Instances

B. On-Demand Instances

C. Reserved Instances

D. Savings Plans

E. Dedicated Hosts

A company wants an AWS service to provide product recommendations based on its customer data.
Which AWS service will meet this requirement?

A. Amazon Polly

B. Amazon Personalize

C. Amazon Comprehend

D. Amazon Rekognition

An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.
Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?

A. Amazon Simple Queue Service (Amazon SQS)

B. Amazon Simple notification Service (Amazon SNS)

C. AWS Systems Manager

D. Amazon CloudWatch alarm

A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure.
Which AWS service or feature should be used?

A. Security groups

B. AWS Firewall Manager

C. IAM roles

D. IAM user SSH keys

Which of the following is a recommended design principle of the AWS Well-Architected Framework?

A. Reduce downtime by making infrastructure changes infrequently and in large increments.

B. Invest the time to configure infrastructure manually.

C. Learn to improve from operational failures.

D. Use monolithic application design for centralization.

Which of the following is an advantage that the AWS Cloud provides to users?

A. Users eliminate the need to guess about infrastructure capacity requirements.

B. Users decrease their variable costs by maintaining sole ownership of IT hardware.

C. Users maintain control of underlying IT infrastructure hardware.

D. Users maintain control of operating systems for managed services.

Which AWS service or tool gives users the ability to connect with AWS and deploy resources programmatically?

A. Amazon QuickSight

B. AWS PrivateLink

C. AWS Direct Connect

D. AWS SDKs

Which of the following is a characteristic of the AWS account root user?

A. The root user is the only user that can be configured with multi-factor authentication (MFA).

B. The root user is the only user that can access the AWS Management Console.

C. The root user is the first sign-in identity that is available when an AWS account is created.

D. The root user has a password that cannot be changed.

Which mechanism allows developers to access AWS services from application code?

A. AWS Software Development Kit

B. AWS Management Console

C. AWS CodePipeline

D. AWS config

Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?

A. Amazon Athena

B. AWS Glue

C. Amazon S3

D. AWS Snowball Edge

Which AWS service is a relational database compatible with MySQL and PostgreSQL?

A. Amazon Redshift

B. Amazon DynamoDB

C. Amazon Aurora

D. Amazon Neptune

Which Amazon EC2 Reserved Instances term commitment will give users the MOST cost savings?

A. 1 year

B. 2 years

C. 3 years

D. 5 years

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

A. AWS Service Catalog

B. AWS Systems Manager

C. AWS IAM Access Analyzer

D. AWS Organizations

A company needs to host a web server on Amazon EC2 instances for at least 1 year. The web server cannot tolerate interruption.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. On-Demand Instances

B. Partial Upfront Reserved Instances

C. Spot Instances

D. No Upfront Reserved Instances

A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.
Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

A. Amazon S3 Select

B. Amazon Athena

C. Amazon Redshift

D. Amazon EC2

What does Amazon CloudFront provide?

A. Automatic scaling for all resources to power an application from a single unified interface

B. Secure delivery of data, videos, applications, and APIs to users globally with low latency

C. Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo DNS, geoproximity, and weighted round robin

D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and AWS Lambda functions

A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.
Which AWS service or capability will meet these requirements?

A. Amazon S3

B. AWS Systems Manager Parameter Store

C. AWS Secrets Manager

D. AWS CloudTrail

Which pillar of the AWS Well-Architected Framework aligns with the ability to make frequent, small, and reversible changes to AWS Cloud architecture?

A. Security

B. Cost optimization

C. Operational excellence

D. Performance efficiency

A company must archive its documents by using a write-once, read-many (WORM) model to meet legal and compliance obligations.
Which feature of Amazon S3 can the company use to meet this requirement?

A. S3 Versioning

B. S3 bucket policy

C. S3 Glacier Vault Lock

D. S3 multi-factor authentication (MFA) delete

Which AWS service is used to provide encryption for Amazon EBS?

A. AWS certificate Manager

B. AWS Systems Manager

C. AWS KMS

D. AWS config

A developer wants AWS users to access AWS services by using temporary security credentials.
Which AWS service or feature should the developer use to provide these credentials?

A. IAM policies

B. IAM user groups

C. AWS Security Token Service (AWS STS)

D. AWS IAM Identity Center (AWS Single Sign-On)

A company wants to run a graph query that provides credit card users’ names, addresses, and transactions. The company wants the graph to show if the names, addresses, and transactions indicates possible fraud.
Which AWS database service will meet these requirements?

A. Amazon DocumentDB (with MongoDB compatibility)

B. Amazon Timestream

C. Amazon DynamoDB

D. Amazon Neptune

A company is using the AWS Free Tier for several AWS services for an application.
What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?

A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.

B. AWS Support will contact the company to set up standard service charges.

C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.

D. The company’s AWS account will be frozen and can be restarted after a payment plan is established.

A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud.
Which of the following are benefits of building this app in the AWS Cloud? (Choose two.)

A. A large, upfront capital expense and low variable expenses

B. Increased speed for trying out new projects

C. Complete control over the physical security of the infrastructure

D. Flexibility to scale up in minutes as the application becomes popular

E. Ability to pick the specific data centers that will host the application servers

A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management.
Which AWS service will meet these requirements?

A. Amazon DocumentDB (with MongoDB compatibility)

B. Amazon Redshift

C. Amazon Neptune

D. Amazon ElastiCache

Which AWS service can migrate Amazon EC2 instances from one AWS Region to another?

A. AWS Application Migration Service

B. AWS Database Migration Service (AWS DMS)

C. AWS DataSync

D. AWS Migration Hub

Which task is the customer's responsibility, according to the AWS shared responsibility model?

A. Patch a guest operating system that is deployed on an Amazon EC2 instance.

B. Control physical access to an AWS data center.

C. Control access to AWS underlying hardware.

D. Patch a host operating system that is deployed on Amazon S3.

A developer needs to use a standardized template to create copies of a company's AWS architecture for development, test, and production environments.
Which AWS service should the developer use to meet this requirement?

A. AWS Cloud Map

B. AWS CloudFormation

C. Amazon Cloud Front

D. AWS CloudTrail

Which task can a company perform by using security groups in the AWS Cloud?

A. Allow access to an Amazon EC2 instance through only a specific port.

B. Deny access to malicious IP addresses at a subnet level.

C. Protect data that is cached by Amazon CloudFront.

D. Apply a stateless firewall to an Amazon EC2 instance.

A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure.
Which AWS service will meet this requirement?

A. Amazon Aurora

B. Amazon Redshift Serverless

C. AWS Lambda

D. Amazon RDS

In which situations should a company create an IAM user instead of an IAM role?

A. When an application that runs on Amazon EC2 instances requires access to other AWS services

B. When the company creates AWS access credentials for individuals

C. When the company creates an application that runs on a mobile phone that makes requests to AWS

D. When the company needs to add users to IAM groups

E. When users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time

A company hosts a web application on AWS. The company has improved the availability of its application by provisioning multiple Amazon EC2 instances. The company wants to distribute its traffic across the EC2 instances while providing a single point of contact to the web clients.
Which AWS service can distribute the traffic to multiple EC2 instances as targets?

A. VPC endpoints

B. Application Load Balancer

C. NAT gateway

D. Internet gateway

A company wants to run a simulation for 3 years without interruptions.
Which Amazon EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. Spot Instances

B. Reserved Instances

C. Dedicated Hosts

D. On-Demand Instances

Which AWS service provides DNS resolution?

A. Amazon CloudFront

B. Amazon VPC

C. Amazon Route 53

D. AWS Direct Connect

Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

A. Elasticity

B. Cost savings

C. Agility

D. Reliability

A company has batch workloads that need to run for short periods of time on Amazon EC2. The workloads can handle interruptions and can start again from where they ended.
What is the MOST cost-effective EC2 instance purchasing option to meet these requirements?

A. Reserved Instances

B. Spot Instances

C. Dedicated Instances

D. On-Demand Instances

A company is planning to migrate to the AWS Cloud. The company is conducting organizational transformation and wants to become more responsive to customer inquiries and feedback.
Which task should the company perform to meet these requirements, according to the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

A. Realign teams to focus on products and value streams.

B. Create new value propositions with new products and services.

C. Use agile methods to rapidly iterate and evolve.

D. Use a new data and analytics platform to create actionable insights.

E. Migrate and modernize legacy infrastructure.

A user needs a relational database but does not have the resources to manage the hardware, resiliency, and replication.
Which AWS service option meets the user's requirements?

A. Run MySQL on Amazon Elastic Container Service (Amazon ECS).

B. Run MySQL on Amazon EC2.

C. Choose Amazon RDS for MySQL.

D. Choose Amazon ElastiCache for Redis.

A company has multiple SQL-based databases located in a data center. The company needs to migrate all database servers to the AWS Cloud to reduce the cost of operating physical servers.
Which AWS service or resource will meet these requirements with the LEAST operational overhead?

A. Amazon EC2 instances

B. Amazon RDS

C. Amazon DynamoDB

D. OpenSearch

A company's application is running on Amazon EC2 instances. The company is planning a partial migration to a serverless architecture in the next year and wants to pay for resources up front.
Which AWS purchasing option will optimize the company's costs?

A. Convertible Reserved Instances

B. Spot Instances

C. EC2 Instance Savings Plans

D. Compute Savings Plan

A company wants to centrally manage its employee's access to multiple AWS accounts.
Which AWS service or feature should the company use to meet this requirement?

A. AWS Identity and Access Management Access Analyzer

B. AWS Secrets Manager

C. AWS IAM Identity Center

D. AWS Security Token Service (AWS STS)

A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships.
Which AWS service can the company use to meet this requirement?

A. AWS Direct Connect

B. AWS Transit Gateway

C. Amazon Connect

D. Amazon Route 53