A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address.
Which AWS service will meet these requirements?

A. AWS DataSync

B. AWS Application Migration Service

C. AWS Application Discovery Service

D. AWS Database Migration Service (AWS DMS)

A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations.
Which AWS service should the company use to meet this requirement?

A. Amazon VPC

B. Amazon GuardDuty

C. Amazon Cognito

D. AWS IAM Identity Center

A company has batch workloads that need to run for short periods of time on Amazon EC2. The workloads can handle interruptions and can start again from where they ended.
What is the MOST cost-effective EC2 instance purchasing option to meet these requirements?

A. Reserved Instances

B. Spot Instances

C. Dedicated Instances

D. On-Demand Instances

A company is launching a mobile app in the AWS Cloud. The company wants the app's users to sign in through social media identity providers (IdPs).
Which AWS service will meet this requirement?

A. AWS Lambda

B. Amazon Cognito

C. AWS Secrets Manager

D. Amazon CloudFront

A company needs the ability to acquire resources when the resources are needed. The company also needs the ability to release the resources when the resources are no longer needed.
Which AWS concept represents the company's goals?

A. Scalability

B. Sustainability

C. Elasticity

D. Operational excellence

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

A. Database backups

B. Database software patches

C. Operating system patches

D. Operating system installations

A company has an AWS Business Support plan. The company needs to gain access to the AWS DDoS Response Team (DRT) to help mitigate DDoS events.
Which AWS service or resource must the company use to meet these requirements?

A. AWS Shield Standard

B. AWS Enterprise Support

C. AWS WAF

D. AWS Shield Advanced

Which AWS service is a fully managed NoSQL database service?

A. Amazon RDS

B. Amazon Redshift

C. Amazon DynamoDB

D. Amazon Aurora

A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch. Which AWS Support plan offers guidance and support for this kind of event at no additional charge?

A. AWS Business Support

B. AWS Basic Support

C. AWS Developer Support

D. AWS Enterprise Support

A company plans to launch an ecommerce website that contains many images for a product catalog. The company wants to keep the cost of running the website within a specific budget.
Which AWS service or tool should the company use to monitor the ongoing costs of the website?

A. AWS Cost Explorer

B. AWS SDKs

C. EC2 Image Builder

D. AWS CloudFormation

Which of the following is a fully managed graph database service on AWS?

A. Amazon Aurora

B. Amazon FSx

C. Amazon DynamoDB

D. Amazon Neptune

Which options are AWS Cloud Adoption Framework (AWS CAF) cloud transformation journey recommendations? (Choose two.)

A. Envision phase

B. Align phase

C. Assess phase

D. Mobilize phase

E. Migrate and modernize phase

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.
Which recommendation complies with IAM security best practices?

A. Use the account root user access keys for administrative tasks.

B. Grant broad permissions so that all company employees can access the resources they need.

C. Turn on multi-factor authentication (MFA) for added security during the login process.

D. Avoid rotating credentials to prevent issues in production applications.

Which AWS services or features give users the ability to create a network connection between two VPCs? (Choose two.)

A. VPC endpoints

B. Amazon Route 53

C. VPC peering

D. AWS Direct Connect

E. AWS Transit Gateway

A company needs Amazon EC2 instances for a workload that can tolerate interruptions.
Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

A. Spot Instances

B. Convertible Reserved Instances

C. Standard Reserved Instances

D. Dedicated Hosts

Which AWS service provides on-premises applications with low-latency access to data that is stored in the AWS Cloud?

A. Amazon CloudFront

B. AWS Storage Gateway

C. AWS Backup

D. AWS DataSync

A company purchased Amazon EC2 Standard Reserved Instances (RIs) for a workload in the AWS Cloud. The company needs to move part of the workload to an instance family that does not match the instance family of these Standard RIs.
How can the company take advantage of the Standard RIs that it no longer needs?

A. Contact the AWS Support team, and ask the team to sell the Standard RIs

B. Sell the Standard RIs on the Amazon EC2 Reserved Instance Marketplace

C. Sell the Standard RIs as a third-party seller on the AWS Marketplace

D. Convert the Standard RIs to Savings Plans

Which of the following services can be used to block network traffic to an instance? (Choose two.)

A. Security groups

B. Amazon Virtual Private Cloud (Amazon VPC) flow logs

C. Network ACLs

D. Amazon CloudWatch

E. AWS CloudTrail

A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks. Which pillar of the AWS Well-Architected Framework is supported by these goals?

A. Reliability

B. Security

C. Operational excellence

D. Performance efficiency

A company wants to securely access an Amazon S3 bucket from an Amazon EC2 instance without accessing the internet.
What should the company use to accomplish this goal?

A. VPN connection

B. Internet gateway

C. VPC endpoint

D. NAT gateway

Which AWS service or feature provides a firewall at the subnet level within a VPC?

A. Security group

B. Network ACL

C. Elastic network interface

D. AWS WAF

Which AWS service uses edge locations to cache content?

A. Amazon Kinesis

B. Amazon Simple Queue Service (Amazon SQS)

C. Amazon CloudFront

D. Amazon Route 53

A company needs to create and publish interactive business intelligence dashboards. The dashboards require insights that are powered by machine learning.
Which AWS service or tool will meet these requirements?

A. AWS Glue Studio

B. Amazon QuickSight

C. Amazon Redshift

D. Amazon Athena

Which AWS service supports user sign-up functionality and authentication to mobile and web applications?

A. Amazon Cognito

B. AWS Config

C. Amazon GuardDuty

D. AWS Systems Manager

A company runs MySQL database workloads on self-managed servers in an on-premises data center. The company wants to migrate the database workloads to an AWS managed service.
Which migration strategy should the company use?

A. Rehost

B. Repurchase

C. Refactor

D. Replatform

A company is using the AWS Free Tier for several AWS services for an application.
What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?

A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.

B. AWS Support will contact the company to set up standard service charges.

C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.

D. The company’s AWS account will be frozen and can be restarted after a payment plan is established.

A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS.
Which migration strategy should the company use?

A. Rehost

B. Replatform

C. Repurchase

D. Refactor

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)

A. Control access to AWS service APIs and to other specific resources.

B. Provide intelligent threat detection and continuous monitoring.

C. Protect the AWS environment using multi-factor authentication (MFA).

D. Grant users access to AWS data centers.

E. Provide firewall protection for applications from common web attacks.

A company wants an AWS service that can automate software deployment in Amazon EC2 instances and on-premises instances.
Which AWS service will meet this requirement?

A. AWS CodeCommit

B. AWS CodeBuild

C. AWS CodeDeploy

D. AWS CodePipeline

A company wants to establish a schedule for rotating database user credentials. Which AWS service will support this requirement with the LEAST amount of operational overhead?

A. AWS Systems Manager

B. AWS Secrets Manager

C. AWS License Manager

D. AWS Managed Services

Which AWS service should a company use to organize, characterize, and search large numbers of images?

A. Amazon Transcribe

B. Amazon Rekognition

C. Amazon Aurora

D. Amazon QuickSight

A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance and security.
Which AWS service can the company use to meet these requirements?

A. AWS Shield

B. AWS WAF

C. AWS Trusted Advisor

D. AWS Service Catalog

Which AWS service or feature gives users the ability to connect VPCs and on-premises networks to a central hub?

A. Virtual private gateway

B. AWS Transit Gateway

C. Internet gateway

D. Customer gateway

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.
Which S3 feature should the company use to meet these requirements?

A. S3 Lifecycle rules

B. S3 Versioning

C. S3 bucket policies

D. S3 server-side encryption

A company needs a threat detection service that will continuously monitor its AWS accounts, workloads, and Amazon S3 buckets for malicious activity and unauthorized behavior.
Which AWS service meets these requirements?

A. AWS Shield

B. AWS Firewall Manager

C. Amazon GuardDuty

D. Amazon Inspector

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)

A. They are stateless.

B. They are stateful.

C. They evaluate all rules before allowing traffic.

D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

E. They operate at the instance level.

Which option is a benefit of using AWS for cloud computing?

A. Trade variable expense for fixed expense

B. Pay-as-you-go pricing

C. Decreased speed and agility

D. Spending money running and maintaining data centers

A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.
Which AWS service will meet these requirements?

A. Amazon GuardDuty

B. AWS WAF

C. Amazon Macie

D. AWS Shield

An AWS user wants to proactively detect when an instance or account might be compromised or if there are threats from attacks.
Which AWS service should the user choose?

A. Amazon GuardDuty

B. AWS WAF

C. AWS Shield

D. Amazon Inspector

A company plans to onboard new employees that will be working remotely. The company needs to set up Windows virtual desktops to create a working environment for the new employees. The employees must be able access the working environment from anywhere and by using their computer or a web browser.
Which AWS service or feature will meet these requirements?

A. Dedicated Hosts

B. AWS Global Accelerator

C. Amazon Workspaces

D. Amazon CloudFront

Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries?

A. Pay-as-you-go pricing

B. Capacity forecasting

C. Economies of scale

D. Global reach

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

A. Speed of innovation

B. Resource elasticity

C. Decoupled architecture

D. Global deployment

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

A. EC2 Image Builder

B. Amazon Machine Image (AMI)

C. AWS Launch Wizard

D. AWS Elastic Beanstalk

Which pillar of the AWS Well-Architected Framework focuses on the ability to recover automatically from service interruptions?

A. Security

B. Performance efficiency

C. Operational excellence

D. Reliability

A user has a stateful workload that will run on Amazon EC2 for the next 3 years.
What is the MOST cost-effective pricing model for this workload?

A. On-Demand Instances

B. Reserved Instances

C. Dedicated Instances

D. Spot Instances

Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?

A. VPC Flow Logs

B. Amazon Inspector

C. VPC route tables

D. AWS CloudTrail

Which of the following are advantages of moving to the AWS Cloud? (Choose two.)

A. The ability to turn over the responsibility for all security to AWS.

B. The ability to use the pay-as-you-go model.

C. The ability to have full control over the physical infrastructure.

D. No longer having to guess what capacity will be required.

E. No longer worrying about users access controls.

A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?

A. The ability the ensure high availability by deploying workloads to multiple regions

B. A pay-as-you-go model for many services and resources

C. The ability to transfer infrastructure management to the AWS Cloud

D. The ability to provision and deprovision resources quickly with minimal effort

Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)

A. AWS VPN

B. Elastic Load Balancing

C. AWS Direct Connect

D. VPC peering

E. Amazon CloudFront

A company wants to implement detailed tracking of its cloud costs by department and project.
Which AWS feature or service should the company use?

A. Consolidated billing

B. Cost allocation tags

C. AWS Marketplace

D. AWS Budgets