Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)

A. Secure the virtualization layer.

B. Encrypt data and maintain data integrity.

C. Patch the Amazon RDS operating system.

D. Maintain identity and access management controls.

E. Secure Availability Zones.

An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost-effective manner.
Which AWS Cloud features will help the company meet this requirement? (Choose two.)

A. Cross-Region workload deployment

B. Pay-as-you-go pricing

C. Built-in AWS CloudTrail audit capabilities

D. Auto Scaling policies

E. Centralized logging

A company plans to perform a one-time migration of a large dataset with millions of files from its on-premises data center to the AWS Cloud.
Which AWS service should the company use for the migration?

A. AWS Database Migration Service (AWS DMS)

B. AWS DataSync

C. AWS Migration Hub

D. AWS Application Migration Service

A company wants to add a conversational chatbot to its website.
Which AWS service can the company use to meet this requirement?

A. Amazon Textract

B. Amazon Lex

C. AWS Glue

D. Amazon Rekognition

Which AWS network services or features allow CIDR block notation when providing an IP address range? (Choose two.)

A. Security groups

B. Amazon Machine Image (AMI)

C. Network access control list (network ACL)

D. AWS Budgets

E. Amazon Elastic Block Store (Amazon EBS)

Which AWS service or feature can be used to monitor for potential disk write spikes on a system that is running on Amazon EC2?

A. AWS CloudTrail

B. AWS Health Dashboard

C. AWS Trusted Advisor

D. Amazon CloudWatch

A company wants to develop an accessibility application that will convert text into audible speech.
Which AWS service will meet this requirement?

A. Amazon MQ

B. Amazon Polly

C. Amazon Neptune

D. Amazon Timestream

A company has applications that control on-premises factory equipment.
Which AWS service should the company use to run these applications with the LEAST latency?

A. AWS Outposts

B. Amazon EC2

C. AWS Lambda

D. AWS Fargate

A company needs to set up dedicated network connectivity between its on-premises data center and the AWS Cloud. The network cannot use the public internet.
Which AWS service or feature will meet these requirements?

A. AWS Transit Gateway

B. AWS VPN

C. Amazon CloudFront

D. AWS Direct Connect

Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on organizing an inventory of data products in a data catalog?

A. Operations

B. Governance

C. Business

D. Platform

A company needs to use dashboards and charts to analyze insights from business data.
Which AWS service will provide the dashboards and charts for these insights?

A. Amazon Macie

B. Amazon Aurora

C. Amazon QuickSight

D. AWS CloudTrail

A company runs its production workload in the AWS Cloud. The company needs to choose one of the AWS Support Plans.
Which of the AWS Support Plans will meet these requirements at the LOWEST cost?

A. Developer

B. Enterprise On-Ramp

C. Enterprise

D. Business

What is the primary use case for Amazon GuardDuty?

A. Prevention of DDoS attacks

B. Protection against SQL injection attacks

C. Automatic monitoring for threats to AWS workloads

D. Automatic provisioning of AWS resources

Which VPC component can a company use to set up a virtual firewall at the Amazon EC2 instance level?

A. Network ACL

B. Security group

C. Route table

D. NAT gateway

A developer needs to interact with AWS by using the AWS CLI.
Which security feature or AWS service must be provisioned in the developer's account to meet this requirement?

A. User name and password

B. AWS Systems Manager

C. Root password access

D. AWS access key

A food delivery company needs to block users in certain countries from accessing its website.
Which AWS service should the company use to meet this requirement?

A. AWS WAF

B. AWS Control Tower

C. Amazon Fraud Detector

D. Amazon Pinpoint

A company needs to use Amazon S3 to store audio files that are each 5 megabytes in size. The company will rarely access the files, but the company must be able to retrieve the files immediately.
Which S3 storage class will meet these requirements MOST cost-effectively?

A. S3 Standard

B. S3 Standard-Infrequent Access (S3 Standard-IA)

C. S3 Glacier Flexible Retrieval

D. S3 Glacier Deep Archive

A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week.
Which solution will meet these requirements?

A. AWS Direct Connect

B. Amazon VPC

C. AWS Site-to-Site VPN

D. Edge location

What is a customer responsibility under the AWS shared responsibility model when using AWS Lambda?

A. Maintenance of the underlying Lambda hardware.

B. Maintenance of the Lambda networking infrastructure.

C. The code and libraries that run in the Lambda functions.

D. The Lambda server software.

Which tasks are the responsibility of AWS according to the AWS shared responsibility model? (Choose two.)

A. Configure AWS Identity and Access Management (IAM).

B. Configure security groups on Amazon EC2 instances.

C. Secure the access of physical AWS facilities.

D. Patch applications that run on Amazon EC2 instances.

E. Perform infrastructure patching and maintenance.

A company's compliance officer wants to review the AWS Service Organization Control (SOC) reports.
Which AWS service or feature should the compliance officer use to complete this task?

A. AWS Artifact

B. AWS Concierge Support

C. AWS Support

D. AWS Trusted Advisor

A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources.
Which AWS service should the company use?

A. AWS Config

B. AWS Secrets Manager

C. AWS CloudTrail

D. AWS Trusted Advisor

Which AWS service or feature allows a company to have its own logically isolated section of the AWS Cloud?

A. AWS VPN

B. Availability Zones

C. Amazon Virtual Private Cloud (Amazon VPC)

D. AWS Regions

A company has a website on AWS. The company wants to deliver the website to a worldwide audience and provide low-latency response times for global users.
Which AWS service will meet these requirements?

A. AWS CloudFormation

B. Amazon CloudFront

C. Amazon ElastiCache

D. Amazon DynamoDB

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)

A. Control access to AWS service APIs and to other specific resources.

B. Provide intelligent threat detection and continuous monitoring.

C. Protect the AWS environment using multi-factor authentication (MFA).

D. Grant users access to AWS data centers.

E. Provide firewall protection for applications from common web attacks.

Why are AWS CloudFormation templates used?

A. To reduce provisioning time by using automation.

B. To transfer existing infrastructure to another company.

C. To reuse on-premises infrastructure in the AWS Cloud.

D. To deploy large infrastructure with no cost implications.

A company is using AWS Identity and Access Management (IAM).
Who can manage the access keys of the AWS account root user?

A. IAM users in the same account that have been granted permission

B. IAM roles in any account that have been granted permission

C. IAM users and roles that have been granted permission

D. The AWS account owner

Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

A. Third-party vendors

B. Customers

C. Reseller partners

D. Internet providers

A company needs an event history of which AWS resources the company has created.
Which AWS service will provide this information?

A. Amazon CloudWatch

B. AWS CloudTrail

C. Amazon Aurora

D. Amazon EventBridge

A company wants to run relationship databases in the AWS Cloud. The company wants to use a managed service that will install the database and run regular software updates.
Which AWS service will meet these requirements?

A. Amazon S3

B. Amazon RDS

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon DynamoDB

Which AWS service provides a fully managed graph database for highly connected datasets?

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Neptune

D. Amazon Aurora

A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks.
Which AWS service will meet these requirements?

A. AWS Shield Standard

B. AWS Firewall Manager

C. AWS Shield Advanced

D. Amazon GuardDuty

A company wants to update its online data processing application by implementing container-based services that run for 4 hours at a time. The company does not want to provision or manage server instances.
Which AWS service will meet these requirements?

A. AWS Lambda

B. AWS Fargate

C. Amazon EC2

D. AWS Elastic Beanstalk

Which AWS service enables users to create copies of resources across AWS Regions?

A. Amazon ElastiCache

B. AWS CloudFormation

C. AWS CloudTrail

D. AWS Systems Manager

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

A. Apply guest operating system patches to Amazon EC2 instances.

B. Provide monitoring of human resources information management (HRIM) systems.

C. Perform automated backups of Amazon RDS instances.

D. Optimize the costs of running AWS services.

A user needs to perform a one-time backup of an Amazon Elastic Block Store (Amazon EBS) volume that is attached to an Amazon EC2 instance.
What is the MOST operationally efficient way to perform this backup?

A. Attach another EBS volume to the EC2 instance, and copy the contents.

B. Copy the EBS volume to a server that is running outside AWS and is connected with AWS Direct Connect.

C. Create an EBS snapshot of the volume.

D. Create a custom script to copy the EBS file contents to Amazon S3.

A company needs to purchase Amazon EC2 instances to support an application that will run continuously for more than 1 year.
Which EC2 instance purchasing option meets these requirements MOST cost-effectively?

A. Dedicated Instances

B. Spot Instances

C. Reserved Instances

D. On-Demand Instances

A developer who has no AWS Cloud experience wants to use AWS technology to build a web application.
Which AWS service should the developer use to start building the application?

A. Amazon SageMaker

B. AWS Lambda

C. Amazon Lightsail

D. Amazon Elastic Container Service (Amazon ECS)

Which programming languages does AWS Cloud Development Kit (AWS CDK) currently support? (Choose two.)

A. Python

B. Swift

C. TypeScript

D. Ruby

E. PHP

A company wants to manage access and permissions for its third-party software as a service (SaaS) applications. The company wants to use a portal where end users can access assigned AWS accounts and AWS Cloud applications.
Which AWS service should the company use to meet these requirements?

A. Amazon Cognito

B. AWS IAM Identity Center (AWS Single Sign-On)

C. AWS Identity and Access Management (IAM)

D. AWS Directory Service for Microsoft Active Directory

Which AWS service or feature gives users the ability to provision AWS infrastructure programmatically?

A. AWS Cloud Development Kit (AWS CDK)

B. Amazon CodeGuru

C. AWS Config

D. AWS CodeCommit

Which AWS service is designed for users running workloads that include a NoSQL database?

A. Amazon RDS

B. Amazon S3

C. Amazon Redshift

D. Amazon DynamoDB

A company is running big data analytics and massive parallel computations on its AWS test and development servers. The company can tolerate occasional downtime.
What is the MOST cost-effective Amazon EC2 purchasing option for the company to use?

A. On-Demand Instances

B. Spot Instances

C. Reserved Instances

D. Savings Plans

A company runs Amazon EC2 instances in a research lab. The instances run for 3 hours each week and cannot be interrupted.
What is the MOST cost-effective instance purchasing option to meet these requirements?

A. Compute Savings Plan

B. On-Demand Instances

C. Convertible Reserved Instances

D. Spot Instances

A new AWS user needs to interact with AWS Support by using API calls.
Which AWS Support plan will meet this requirement MOST cost-effectively?

A. AWS Basic Support

B. AWS Developer Support

C. AWS Business Support

D. AWS Enterprise Support

A company migrated to the AWS Cloud. Now the company pays for services on an as-needed basis.
Which advantage of cloud computing is the company benefiting from?

A. Stop spending money running and maintaining data centers

B. Increase speed and agility

C. Go global in minutes

D. Trade fixed expense for variable expense

A company will run a predictable compute workload on Amazon EC2 instances for the next 3 years. The workload is critical for the company. The company wants to optimize costs to run the workload.
Which solution will meet these requirements?

A. Spot Instances

B. Dedicated Hosts

C. Savings Plans

D. On-Demand Instances

A company wants to estimate the cost for its AWS architecture solution before migration.
Which AWS service or feature will meet this requirement?

A. Amazon Detective

B. AWS Budgets

C. AWS Resource Explorer

D. AWS Pricing Calculator

A company wants to centrally manage its employee's access to multiple AWS accounts.
Which AWS service or feature should the company use to meet this requirement?

A. AWS Identity and Access Management Access Analyzer

B. AWS Secrets Manager

C. AWS IAM Identity Center

D. AWS Security Token Service (AWS STS)

A university receives a grant to conduct research by using AWS services. The research team needs to make sure the grant money lasts for the entire school year. The team has decided on a monthly allocation that adds up to the total grant amount.
Which AWS service or feature will notify the team if spending exceeds the planned amount?

A. AWS Budgets

B. Cost Explorer

C. Cost allocation tags

D. Cost categories