A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimize cost and maximize flexibility.
Which Amazon EC2 instance type should the company use to meet these requirements?

A. On-Demand Instances

B. Spot Instances

C. Reserved Instances

D. Dedicated Hosts

A company is creating a document that defines the operating system patch routine for all the company's systems.
Which AWS resources should the company include in this document? (Choose two.)

A. Amazon EC2 instances

B. AWS Lambda functions

C. AWS Fargate tasks

D. Amazon RDS instances

E. Amazon Elastic Container Service (Amazon ECS) instances

Which design principles are included in the reliability pillar of the AWS Well-Architected Framework? (Choose two.)

A. Automatically recover from failure.

B. Grant everyone access to increase AWS service quotas.

C. Stop guessing capacity.

D. Design applications to run in a single Availability Zone.

E. Plan to increase AWS service quotas first in a secondary AWS Region.

Which AWS service gives a company the ability to use a private, dedicated connection between a VPC and an on-premises data center?

A. AWS Direct Connect

B. Amazon API Gateway

C. AWS Systems Manager

D. AWS Cloud Formation

A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application.
To which AWS service could the company migrate the database?

A. Amazon Athena

B. Amazon DynamoDB

C. Amazon RDS

D. Amazon DocumentDB (with MongoDB compatibility)

A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps.
Which AWS service should the company use?

A. Amazon GuardDuty

B. AWS Trusted Advisor

C. AWS Management Console

D. AWS Systems Manager

Which AWS service is used to host static websites?

A. Amazon S3

B. Amazon Elastic Block Store (Amazon EBS)

C. AWS CloudFormation

D. Amazon Elastic File System (Amazon EFS)

A company wants to manage its infrastructure as code in the AWS Cloud.
Which AWS service meets this requirement?

A. AWS CloudFormation

B. AWS Elastic Beanstalk

C. AWS Cloud9

D. AWS CloudShell

A company wants to build a data analytics application that uses Amazon Redshift. The company needs a cost estimate for its future Amazon Redshift usage.
Which AWS tool will provide a high-level cost estimation?

A. AWS Budgets

B. AWS Pricing Calculator

C. AWS Cost Explorer

D. Saving Plans

Which AWS service or feature can a company use to estimate AWS costs before provisioning workloads?

A. AWS Pricing Calculator

B. AWS Cost and Usage Report

C. Cost Explorer

D. AWS Budgets

What should a user do if the user loses an IAM secret access key?

A. Retrieve the secret access key by using the IAM console.

B. Create a new user with a new access key and a new secret access key.

C. Rotate the secret access key.

D. Request a new secret access key from AWS Support.

Which of the following is a characteristic of the AWS account root user?

A. The root user is the only user that can be configured with multi-factor authentication (MFA).

B. The root user is the only user that can access the AWS Management Console.

C. The root user is the first sign-in identity that is available when an AWS account is created.

D. The root user has a password that cannot be changed.

A company needs to use dashboards and charts to analyze insights from business data.
Which AWS service will provide the dashboards and charts for these insights?

A. Amazon Macie

B. Amazon Aurora

C. Amazon QuickSight

D. AWS CloudTrail

A user wants to identify any security group that is allowing unrestricted incoming SSH traffic.
Which AWS service can be used to accomplish this goal?

A. Amazon Cognito

B. AWS Shield

C. Amazon Macie

D. AWS Trusted Advisor

A company needs to install an application in a Docker container.
Which AWS service eliminates the need to provision and manage the container hosts?

A. AWS Fargate

B. Amazon FSx for Windows File Server

C. Amazon Elastic Container Service (Amazon ECS)

D. Amazon EC2

Which service enables customers to audit API calls in their AWS accounts?

A. AWS CloudTrail

B. AWS Trusted Advisor

C. Amazon Inspector

D. AWS X-Ray

Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.)

A. Amazon Route 53

B. Amazon CloudFront

C. AWS Transfer Family

D. AWS Site-to-Site VPN

E. Amazon API Gateway

Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?

A. AWS Secrets Manager

B. Amazon Inspector

C. AWS CodeDeploy

D. AWS Certificate Manager (ACM)

A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional.
What is the best cloud architecture to address this consistently growing demand?

A. Run the application on a bigger EC2 instance size.

B. Switch to an EC2 instance family that better matches batch requirements.

C. Distribute the application across multiple EC2 instances and run the workload in parallel.

D. Run the application on a bare metal EC2 instance.

Which AWS service monitors CPU utilization on Amazon EC2 instances?

A. AWS CloudTrail

B. Amazon Inspector

C. AWS Config

D. Amazon CloudWatch

Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)

A. Secure the virtualization layer.

B. Encrypt data and maintain data integrity.

C. Patch the Amazon RDS operating system.

D. Maintain identity and access management controls.

E. Secure Availability Zones.

A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.
Which AWS service or program should the company use to determine which AWS services meet the regional requirements?

A. AWS Audit Manager

B. AWS Shield

C. AWS Compliance Program

D. AWS Artifact

Which duty is a responsibility of AWS under the AWS shared responsibility model?

A. Identity and access management

B. Server-side encryption (SSE)

C. Firewall configuration

D. Maintaining physical hardware

A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice.
Which benefit of the AWS Cloud describes these abilities?

A. Reliability

B. Economy of scale

C. Elasticity

D. Pay-as-you-go pricing

A company wants to build an application that uses AWS Lambda to run Python code.
Under the AWS shared responsibility model, which tasks will be the company's responsibility? (Choose two.)

A. Management of the underlying infrastructure

B. Management of the operating system.

C. Writing the business logic code.

D. Installation of the computer language runtime.

E. Providing AWS Identity and Access Management (1AM) access to the Lambda service.

A company needs to audit its AWS resources. The company must document any changes that have been made to the resources.
Which AWS service will meet these requirements?

A. AWS Artifact

B. AWS Config

C. Amazon Inspector

D. Amazon CloudWatch

Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

A. Sustainability

B. Cost optimization

C. Operational excellence

D. Reliability

A company wants to use guidelines from the AWS Well-Architected Framework to limit human error and facilitate consistent responses to events.
Which of the following is a Well-Architected design principle that will meet these requirements?

A. Use AWS Code Deploy.

B. Perform operations as code.

C. Migrate workloads to a Dedicated Host.

D. Use AWS Compute Optimizer.

Which component of the AWS global infrastructure is made up of one or more discrete data centers that have redundant power, networking, and connectivity?

A. AWS Region

B. Availability Zone

C. Edge location

D. AWS Outposts

A company is planning a migration to the AWS Cloud and wants to examine the costs that are associated with different workloads.
Which AWS tool will meet these requirements?

A. AWS Budgets

B. AWS Cost Explorer

C. AWS Pricing Calculator

D. AWS Cost and Usage Report

A user needs a dedicated private connection between a colocation facility and a VPC.
Which AWS service or feature should the user choose?

A. AWS VPN

B. AWS PrivateLink

C. AWS Direct Connect

D. AWS Client VPN

A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. Standard Reserved Instances

B. On-Demand Instances

C. Spot Instances

D. Convertible Reserved Instances

Which AWS service gives users the ability to combine existing accounts into a centrally managed hierarchy?

A. AWS Organizations

B. AWS Identity and Access Management (IAM)

C. AWS Config

D. Amazon Inspector

A company needs to store data from a recommendation engine in a database.
Which AWS service provides this functionality with the LEAST operational overhead?

A. Amazon RDS for PostgreSQL

B. Amazon DynamoDB

C. Amazon Neptune

D. Amazon Aurora

A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application.
What can the company do to meet this requirement?

A. Set up invoiced billing.

B. Use AWS Artifact.

C. Set budgets in Cost Explorer.

D. Create cost allocation tags.

A user wants to transport data between AWS and an on-premises environment using a private network connection.
Which AWS service or feature can be used to meet these requirements?

A. NAT gateway

B. AWS Direct Connect

C. Amazon VPC

D. Internet gateway

What is an AWS responsibility under the AWS shared responsibility model?

A. Configure the security group rules that determine which ports are open on an Amazon EC2 Linux instance.

B. Ensure the security of the internal network in the AWS data centers.

C. Patch the guest operating system with the latest security patches on Amazon EC2.

D. Turn on server-side encryption for Amazon S3 buckets.

Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3?

A. S3 Cross-Region Replication

B. S3 Transfer Acceleration

C. S3 Event Notifications

D. S3 Standard-Infrequent Access (S3 Standard-IA)

A company has multiple departments. The company must charge each department for its exact AWS Cloud usage, including data transfer costs.
How can the company determine these costs by department?

A. Use one AWS account for each department.

B. Use cost allocation tags on services that are used the most often.

C. Use AWS Trusted Advisor.

D. Use Savings Plans.

Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

A. AWS Cost and Usage Report

B. AWS Organizations

C. Cost Explorer

D. AWS Budgets

Which AWS Cloud design principle is a company using when the company implements AWS CloudTrail?

A. Activate traceability.

B. Use serverless compute architectures.

C. Perform operations as code.

D. Go global in minutes.

Which task can only an AWS account root user perform?

A. Changing the AWS Support plan

B. Deleting AWS resources

C. Creating an Amazon EC2 instance key pair

D. Configuring AWS WAF

An online retail company recently deployed a production web application. The system administrator needs to block common attack patterns such as SQL injection and cross-site scripting.
Which AWS service should the administrator use to address these concerns?

A. AWS WAF

B. Amazon VPC

C. Amazon GuardDuty

D. Amazon CloudWatch

What does the concept of agility mean in AWS Cloud computing? (Choose two.)

A. The speed at which AWS resources are implemented

B. The speed at which AWS creates new AWS Regions

C. The ability to experiment quickly

D. The elimination of wasted capacity

E. The low cost of entry into cloud computing

A company wants to run Amazon EC2 instances in locations that are near the company’s global users.
Which aspect of the AWS environment will support this requirement?

A. Availability Zone

B. Edge locations

C. AWS Regions

D. Regional edge caches

Which benefit of cloud computing gives a company the ability to deploy applications to users all over the world through a network of AWS Regions, Availability Zones, and edge locations?

A. Economy of scale

B. Global reach

C. Agility

D. High availability

Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

A. Amazon FSx for Lustre

B. AWS Storage Gateway volume gateway

C. AWS Storage Gateway file gateway

D. Amazon Elastic File System (Amazon EFS)

A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.
Which AWS solution should the company use to meet this requirement?

A. AWS Config

B. AWS software development kits (SDKs)

C. AWS Service Catalog

D. AWS AppSync

How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?

A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required.

B. Companies can expand into new geographic regions.

C. Companies can access a range of technologies to experiment and innovate quickly.

D. Companies can pay for IT resources only when they use the resources.

A company wants to design its cloud architecture so that its workloads are resilient, can consistently perform their intended functions correctly, and can recover from failure quickly.
Which pillar of the AWS Well-Architected Framework does this architecture represent?

A. Security

B. Performance efficiency

C. Operational excellence

D. Reliability