Question #1
A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users.
The company must ensure that all users can view these videos with low latency.
Which AWS service should the company use to meet this requirement?
A. AWS Auto Scaling
B. Amazon Kinesis Video Streams
C. Elastic Load Balancing
D. Amazon CloudFront
Correct Answer: D
Question # 2
A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration.
Which pillar of the AWS Well-Architected Framework does this plan represent?
A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability
Correct Answer: B
Question # 3
A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by
shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application.
Which AWS solution should the company use to meet these requirements?
A. Amazon EC2 On-Demand Instances
B. AWS Lambda
C. Amazon EC2 Reserved Instances
D. Amazon EC2 Spot Instances
Correct Answer: B
Question # 4
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.
Which AWS service or feature will help the company with its migration?
A. AWS Trusted Advisor
B. AWS Consulting Partners
C. AWS Artifacts
D. AWS Managed Services
Correct Answer: B
Question # 5
A company needs to simultaneously process hundreds of requests from different users.
Which combination of AWS services should the company use to build an operationally efficient solution?
A. Amazon Simple Queue Service (Amazon SQS) and AWS Lambda
B. AWS Data Pipeline and Amazon EC2
C. Amazon Kinesis and Amazon Athena
D. AWS Amplify and AWS AppSync
Correct Answer: A
Question # 6
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.)
A. EC2 includes operating system patch management.
B. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM).
C. EC2 has a 100% service level agreement (SLA).
D. EC2 has a flexible, pay-as-you-go pricing model.
E. EC2 has automatic storage cost optimization.
Correct Answer: BD
Question #7
A company’s on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days.
Which benefit has this company experienced by moving to the AWS Cloud?
A. Elasticity
B. Flexibility
C. Agility
D. Resilience
Correct Answer: C
Question # 8
A company is developing a mobile app that needs a high-performance NoSQL database.
Which AWS services could the company use for this database? (Choose two.)
A. Amazon Aurora
B. Amazon RDS
C. Amazon Redshift
D. Amazon DocumentDB (with MongoDB compatibility)
E. Amazon DynamoDB
Correct Answer: DE
Question # 9
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
A. They are stateless.
B. They are stateful.
C. They evaluate all rules before allowing traffic.
D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
E. They operate at the instance level.
Correct Answer: AD
Question # 10
Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?
A. Use a monolithic design.
B. Design for automation.
C. Design for single points of failure.
D. Loosely couple components.
Correct Answer: D
Question #11
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?
A. AWS Shield
B. Amazon Macie
C. AWS Network Firewall
D. Amazon Cognito
Correct Answer: B
Question # 12
A company wants to launch its workload on AWS and requires the system to automatically recover from failure.
Which pillar of the AWS Well-Architected Framework includes this requirement?
A. Cost optimization
B. Operational excellence
C. Performance efficiency
D. Reliability
Correct Answer: D
Question 13
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of
AWS accounts, apply service control policies (SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Organizations
B. Cost Explorer
C. AWS Budgets
D. AWS Trusted Advisor
Correct Answer: A
Question #14
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency.
Which AWS service or feature should the company use to meet these requirements?
A. Availability Zones
B. AWS Local Zones
C. AWS Wavelength
D. AWS Outposts
Correct Answer: D
Question # 15
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity.
The company needs to collect, format, and process the data at sea and move the data to AWS later.
Which AWS service should the company use to meet these requirements?
A. AWS IoT Core
B. Amazon Lightsail
C. AWS Storage Gateway
D. AWS Snowball Edge
Correct Answer:D
Question # 16
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers.
Which AWS service will meet these requirements?
A. Amazon Elastic Transcoder
B. Amazon Comprehend
C. AWS Glue
D. Amazon Rekognition
Correct Answer: A
Question # 17
A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget oncloud resources only as the company uses the resources.
Which advantage of the AWS Cloud matches the company’s requirements?
A. Reliability
B. Global reach
C. Economies of scale
D. Pay-as-you-go pricing
Correct Answer: D
Question # 18
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
A. VPC Flow Logs
B. Amazon Inspector
C. VPC endpoint services
D. NAT gateway
Correct Answer: A
Question # 19
Which AWS services make use of global edge locations? (Choose two.)
A. AWS Fargate
B. Amazon CloudFront
C. AWS Global Accelerator
D. AWS Wavelength
E. Amazon VPC
Correct Answer: BC
Question # 20
A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.
Which Amazon EC2 purchasing option will be MOST cost-effective?
A. All Upfront Reserved Instances
B. Partial Upfront Reserved Instances
C. Dedicated Instances
D. On-Demand Instances
Correct Answer: A
Question # 21
Which AWS service can be used to decouple applications?
A. AWS Config
B. Amazon Simple Queue Service (Amazon SQS)
C. AWS Batch
D. Amazon Simple Email Service (Amazon SES)
Correct Answer: B
Question # 22
What is the purpose of having an internet gateway within a VPC?
A. To create a VPN connection to the VPC
B. To allow communication between the VPC and the internet
C. To impose bandwidth constraints on internet traffic
D. To load balance traffic from the internet across Amazon EC2 instances
Correct Answer: B
Question # 23
Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources?
A. Objects; access control lists (ACLs)
B. Subnets; internet gateways
C. Access policies; buckets
D. Groups; roles
Correct Answer: B
Question # 24
What is the total amount of storage offered by Amazon S3?
A. 100MB
B. 5 GB
C. 5 TB
D. Unlimited
Correct Answer: D
Question # 25
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Queue Service (Amazon SQS)
C. AWS CodeBuild
D. Amazon S3
E. Amazon DynamoDB
Correct Answer: DE
Question # 26
A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy\ applications that run on
Amazon EC2 instances.
Which pillar of the AWS Well-Architected Framework does this action cover?
A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability
Correct Answer: D
Question # 27
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.
Which AWS service can the company use to trace user requests as they move through the application’s components?
A. AWS CloudTrail
B. Amazon CloudWatch
C. Amazon Inspector
D. AWS X-Ray
Correct Answer: D
Question # 28
Which AWS service monitors AWS accounts for security threats?
A. Amazon GuardDuty
B. AWS Secrets Manager
C. Amazon Cognito
D. AWS Certificate Manager (ACM)
Correct Answer: A
Question # 29
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources.
Which AWS service or feature can be used to meet these requirements?
A. AWS Local Zones
B. Availability Zones
C. AWS Outposts
D. AWS Wavelength Zones
Correct Answer: C
Question # 30
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
A. EC2 key pairs
B. AWS Systems Manager Session Manager
C. AWS Identity and Access Management (IAM)
D. Network ACLs
Correct Answer: B
Question # 31
Which AWS service or feature is used to send both text and email messages from distributed applications?
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Email Service (Amazon SES)
C. Amazon CloudWatch alerts
D. Amazon Simple Queue Service (Amazon SQS)
Correct Answer: A
Question # 32
A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application.
What can the company do to meet this requirement?
A. Set up invoiced billing.
B. Use AWS Artifact.
C. Set budgets in Cost Explorer.
D. Create cost allocation tags.
Correct Answer: D
Question # 33
Which task is an AWS responsibility when a workload is running in Amazon RDS?
A. Creating the database table
B. Updating the database schema
C. Installing the database engine
D. Dropping the database records
Correct Answer: C
Question # 34
An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost- effective manner.
Which AWS Cloud features will help the company meet this requirement? (Choose two.)
A. Cross-Region workload deployment
B. Pay-as-you-go pricing
C. Built-in AWS CloudTrail audit capabilities
D. Auto Scaling policies
E. Centralized logging
Correct Answer: BD
Question # 35
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege.
Which AWS service or feature should the company use to enforce this principle?
A. Security groups
B. AWS Shield
C. AWS Global Accelerator
D. AWS Direct Connect gateway
Correct Answer: A
Question # 36
Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?
A. Security groups
B. Amazon Route 53
C. AWS Direct Connect
D. Amazon VPC
Correct Answer: A
Question # 37
A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances.
Which AWS service or feature should the company use to meet this requirement?
A. AWS Trusted Advisor
B. Security groups
C. Amazon Macie
D. Amazon Inspector
Correct Answer: D
Question # 38
Which task is a customer’s responsibility, according to the AWS shared responsibility model?
A. Management of the guest operating systems
B. Maintenance of the configuration of infrastructure devices
C. Management of the host operating systems and virtualization
D. Maintenance of the software that powers Availability Zones
Correct Answer: A
Question #39
A company deployed an application on an Amazon EC2 instance. The application ran as expected for 6 months in the past week, users havereported latency issues. A system administrator found that the CPU utilization was at 100% during business hours. The company wants a scalable solution to meet demand.
Which AWS service or feature should the company use to handle the load for its application during periods of high demand?
A. Auto Scaling groups
B. AWS Global Accelerator
C. Amazon Route 53
D. An Elastic IP address
Correct Answer: A
Question # 40
Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
A. Control access to AWS service APIs and to other specific resources.
B. Provide intelligent threat detection and continuous monitoring.
C. Protect the AWS environment using multi-factor authentication (MFA).
D. Grant users access to AWS data centers.
E. Provide firewall protection for applications from common web attacks.
Correct Answer: AC
Question # 41
Which of the following is a benefit of decoupling an AWS Cloud architecture?
A. Reduced latency
B. Ability to upgrade components independently
C. Decreased costs
D. Fewer components to manage
Correct Answer: B
Question # 42
A company accepts enrollment applications on handwritten paper forms. The company uses a manual process to enter the form data into its backend systems.
The company wants to automate the process by scanning the forms and capturing the enrollment data from scanned PDF files.
Which AWS service should the company use to build this process?
A. Amazon Rekognition
B. Amazon Textract
C. Amazon Transcribe
D. Amazon Comprehend
Correct Answer: B
Question # 43
Which AWS service is used to host static websites?
A. Amazon S3
B. Amazon Elastic Block Store (Amazon EBS)
C. AWS CloudFormation
D. Amazon Elastic File System (Amazon EFS)
Correct Answer: A
Question # 44
A company’s IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters.
The company wants to move this workload to AWS so that these tasks will be completed automatically.
What should the company do to meet these requirements?
A. Deploy MySQL database server clusters on Amazon EC2 instances.
B. Use Amazon RDS with a MySQL database.
C. Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.
D. Migrate all the MySQL database data to Amazon S3.
Correct Answer: B
Question #45
Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Choose two.)
A. VPC endpoint
B. Virtual private gateway
C. AWS Shield Standard
D. AWS Config
E. AWS WAF
Correct Answer: C
Question # 46
A company wants to add facial identification to its user verification process on an application.
Which AWS service should the company use to meet this requirement?
A. Amazon Polly
B. Amazon Transcribe
C. Amazon Lex
D. Amazon Rekognition
Correct Answer: D
Question # 47
Which AWS service monitors CPU utilization on Amazon EC2 instances?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS Config
D. Amazon CloudWatch
Correct Answer: D
Question # 48
A company uses Amazon EC2 instances to run its web application. The company uses On-Demand Instances and Spot Instances. The company needs to visualize its monthly spending on both types of instances.
Which AWS service or feature will meet this requirement?
A. AWS Cost Explorer
B. AWS Budgets
C. Amazon CloudWatch
D. AWS Cost Categories
Correct Answer: A
Question # 49
Which of the following describes AWS Local Zones?
A. A cluster of data centers in one geographic location
B. A site used by Amazon CloudFront to cache frequently accessed content
C. An extension of an AWS Region to more granular locations
D. One or more data centers with redundant power and networking
Correct Answer: C
Question #50
A company has a complex AWS architecture. The company needs assistance from a dedicated technical professional who can suggest strategies regarding incidents, trade-offs, support, and risk management.
Which AWS Support plan will provide the required support?
A. AWS Business Support
B. AWS Enterprise Support
C. AWS Developer Support
D. AWS Basic Support
Correct Answer: B