A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?
A. Amazon CloudWatch B. Amazon Inspector C. AWS CloudTrail D. AWS IAM
Answer: C Explanation: AWS CloudTrail is the service that can be used to meet these requirements.AWS CloudTrail is a service that records AWS API calls for your account and delivers logfiles to you. The recorded information includes the identity of the API caller, the time of theAPI call, the source IP address of the API caller, the request parameters, and the responseelements returned by the AWS service1. You can use CloudTrail to track the activity in yourAWS accounts, such as who made an API call, when it was made, and what resourceswere affected. You can also use CloudTrail to monitor the compliance, security, andgovernance of your AWS environment2. The other services are not designed to track theactivity and API calls in your AWS accounts. Amazon CloudWatch is a service thatmonitors and collects metrics, logs, and events from your AWS resources and applications. You can use CloudWatch to set alarms, visualize data, and automate actionsbased on predefined thresholds or rules3. Amazon Inspector is a service that helps youimprove the security and compliance of your applications running on AWS. Inspectorautomatically assesses applications for exposure, vulnerabilities, and deviations from bestpractices4. AWS IAM is a service that enables you to manage access to AWS services andresources securely. IAM allows you to create and manage AWS users and groups, and usepermissions to allow and deny their access to AWS resources. References: AWSCloudTrail, AWS CloudTrail – Capture AWS API Activity, Amazon CloudWatch, AmazonInspector, [AWS IAM]
Question # 12
Which AWS service enables companies to deploy an application dose to end users?
A. Amazon CloudFront B. AWS Auto Scaling C. AWS AppSync D. Amazon Route S3
Answer: A Explanation:Amazon CloudFront is a fast content delivery network (CDN) service that securely deliversdata, videos, applications, and APIs to customers globally with low latency, high transferspeeds, all within a developer-friendly environment. CloudFront enables companies todeploy an application close to end users by caching the application’s content at edgelocations that are geographically closer to the users. This reduces the network latency andimproves the user experience. CloudFront also integrates with other AWS services, suchas Amazon S3, Amazon EC2, AWS Lambda, AWS Shield, and AWS WAF, to provide asecure and scalable solution for delivering applications12. References:What Is Amazon CloudFront? - Amazon CloudFront Amazon CloudFront Features - Amazon CloudFront
Question # 13
A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?
A. AWS Lambda B. Amazon EC2 C. AWS CodeDeploy D. AWS Wavelength
Answer: B Explanation: Amazon EC2 is the most suitable AWS service for this workload. AmazonEC2 provides secure, resizable compute capacity in the cloud. You can launch virtualservers, called instances, and configure them according to your needs. You can choosefrom different instance types, sizes, and families, and pay only for the resources youuse. Amazon EC2 also offers features such as auto scaling, load balancing, securitygroups, and placement groups to optimize your performance, availability, andsecurity1. Amazon EC2 is ideal for workloads that require consistent and reliable computepower, such as data processing, web hosting, gaming, and high-performance computing2.The other services are not suitable for this workload. AWS Lambda is a serverless computeservice that lets you run code without provisioning or managing servers. You pay only forthe compute time you consume. Lambda is best for short-lived, stateless, and event-drivenworkloads that can be completed in under 15 minutes3. AWS CodeDeploy is a deploymentservice that automates application deployments to Amazon EC2 instances, on-premises instances, serverless Lambda functions, or Amazon ECS services. CodeDeploy is not acompute service, but a tool to help you update your applications with minimal downtime4.AWS Wavelength is a service that delivers ultra-low latency applications for 5G devices.Wavelength embeds AWS compute and storage services at the edge oftelecommunications providers’ 5G networks. Wavelength is designed for mobile edgecomputing, such as interactive gaming, video streaming, and augmentedreality. References: Amazon EC2, Amazon EC2 Use Cases, AWS Lambda, AWSCodeDeploy, [AWS Wavelength]
Question # 14
Which AWS service or tool gives users the ability to connect with AWS and deploy resources programmatically?
A. Amazon quickSight B. AWS PrivateLink C. AWS Direct Connect D. AWS SDKs
Answer: D Explanation: AWS SDKs are a set of tools that allow users to connect with AWS anddeploy resources programmatically. AWS SDKs provide libraries, code samples,documentation, and other resources to help users write code that interacts with AWS APIs.AWS SDKs support various programming languages, such as Java, Python, Ruby, .NET,Node.js, Go, and more. AWS SDKs make it easier for users to access AWS services, suchas Amazon S3, Amazon EC2, Amazon DynamoDB, AWS Lambda, and more, from theirapplications. AWS SDKs also handle tasks such as authentication, error handling, retries,and data serialization, so users can focus on their application logic .The other options are not AWS services or tools that give users the ability to connect withAWS and deploy resources programmatically. Amazon QuickSight is a businessintelligence service that lets users create and share interactive dashboards andvisualizations1. AWS PrivateLink is a service that enables users to securely accessservices hosted on AWS in a scalable and cost-effective manner2. AWS Direct Connect isa service that establishes a dedicated network connection between a user’s premises andAWS3.
Question # 15
Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?
A. AWS Budgets B. AWS Cost Explorer C. AWS Cost Allocation Tags D. AWS Organizations
Answer: A Explanation: AWS Budgets is a service that allows you to set custom budgets for yourAWS costs and usage, and receive alerts via email or Amazon SNS notifications if youexceed or are forecasted to exceed your budgeted amount1. You can create budgetsbased on different dimensions, such as service, linked account, tag, or purchase option,and define various types of alerts, such as actual, forecasted, or RI utilization alerts2. Youcan also configure custom actions to automatically execute remediation tasks or workflowswhen a budget threshold is breached3. AWS Budgets is the only service among theoptions that can send alerts to customers if custom spending thresholds are exceeded. Theother options are not AWS services that provide this functionality.
Question # 16
Which AWS feature provides a no-cost platform for AWS users to join community groups, ask questions, find answers, and read community-generated articles about best practices?
A. AWS Knowledge Center B. AWS re:Post C. AWS 10 D. AWS Enterprise Support
Answer: B Explanation: AWS re:Post is a no-cost platform for AWS users to join community groups,ask questions, find answers, and read community-generated articles about best practices.AWS re:Post is a social media platform that connects AWS users with each other and withAWS experts. Users can create posts, comment on posts, follow topics, and join groupsrelated to AWS services, solutions, and use cases. AWS re:Post also features live eventfeeds, community stories, and AWS Hero profiles. AWS re:Post is a great way to learn fromthe AWS community, share your knowledge, and get inspired. References:AWS re:PostJoin the Conversation
Question # 17
Which AWS service provides command line access to AWS tools and resources directly (torn a web browser?
A. AWS CIoudHSM B. AWS CloudShell C. Amazon Workspaces D. AWS Cloud Map
Answer: B Explanation: AWS CloudShell is the service that provides command line access to AWStools and resources directly from a web browser. AWS CloudShell is a browser-based shellthat makes it easy to securely manage, explore, and interact with your AWS resources. Itcomes pre-authenticated with your console credentials and common development andadministration tools are pre-installed, so no local installation or configuration is required.You can open AWS CloudShell from the AWS Management Console with a single click andstart running commands and scripts using the AWS Command Line Interface (AWS CLI),Git, or SDKs. AWS CloudShell also provides persistent home directories with 1 GB ofstorage per AWS Region12. The other services do not provide command line access toAWS tools and resources directly from a web browser. AWS CloudHSM is a service thathelps you meet corporate, contractual and regulatory compliance requirements for datasecurity by using dedicated Hardware Security Module (HSM) appliances within the AWSCloud3. Amazon WorkSpaces is a service that provides a fully managed, secure Desktopas-a-Service (DaaS) solution that runs on AWS4. AWS Cloud Map is a service that makesit easy for your applications to discover and connect to each other using logical names andattributes5. References: AWS CloudShell, AWS CloudShell – Command-Line Access toAWS Resources, AWS CloudHSM, Amazon WorkSpaces, AWS Cloud Map
Question # 18
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB B. Amazon Athena C. Amazon RDS D. Amazon EMR
Answer: C Explanation: Amazon RDS is a fully managed relational database service that supports several database engines, including PostgreSQL. Amazon RDS can run a managedPostgreSQL database that provides online transaction processing (OLTP), which is a typeof database workload that handles frequent read and write operations on small amounts ofdata. Amazon RDS for PostgreSQL offers high performance, availability, scalability,security, and compatibility with the PostgreSQL community edition. Amazon RDS alsoprovides automated backups, point-in-time recovery, encryption, monitoring, andmaintenance for PostgreSQL databases. References:Hosted PostgreSQL - Amazon RDS for PostgreSQLOLTP Database, MySQL And PostgreSQL Managed Database - Amazon AuroraPostgreSQL options on AWS: Self- managed, managed, and serverless
Question # 19
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups B. Database software patches C. Operating system patches D. Operating system installations
Answer: C Explanation: When a company hosts its databases on Amazon EC2 instances, AWS andthe customer share the responsibility for the security and management of the databaseenvironment. According to the AWS shared responsibility model, AWS is responsible forthe security of the cloud, while the customer is responsible for the security in the cloud.This means that AWS is responsible for protecting the infrastructure that runs the EC2instances, such as the hardware, software, networking, and facilities. The customer isresponsible for properly configuring the security of the provided service, such as the guestoperating system, the database software, the data, and the network traffic12.One of the tasks that belongs to AWS when a company hosts its databases on AmazonEC2 instances is operating system patches. AWS provides regular updates and patches tothe operating system of the EC2 instances, which are applied automatically by default. Thecustomer can also choose to manually apply the patches or schedule them for a specifictime window3. Operating system patches are important for maintaining the security andperformance of the EC2 instances and the databases running on them.The other tasks that belong to AWS when a company hosts its databases on Amazon EC2instances are:Operating system installations: AWS provides a variety of operating systemoptions for the EC2 instances, such as Linux, Windows, and Amazon Linux. Thecustomer can choose the operating system that best suits their database needsand AWS will install it on the EC2 instances4.Server maintenance: AWS performs regular maintenance and repairs on thephysical servers that host the EC2 instances, ensuring that they are in optimal condition and have adequate power, cooling, and network connectivity5.Hardware lifecycle: AWS manages the lifecycle of the hardware that supports theEC2 instances, such as replacing faulty components, upgrading equipment, anddecommissioning old servers.The tasks that do not belong to AWS when a company hosts its databases on AmazonEC2 instances are:Database backups: The customer is responsible for backing up their data anddatabases on the EC2 instances, using tools such as Amazon S3, Amazon EBSsnapshots, or AWS Backup. Database backups are essential for data protectionand recovery in case of failures or disasters.Database software patches: The customer is responsible for applying patches andupdates to the database software on the EC2 instances, such as MySQL,PostgreSQL, Oracle, or SQL Server. Database software patches are important forfixing bugs, improving features, and addressing security vulnerabilities.Database software install: The customer is responsible for installing the databasesoftware on the EC2 instances, choosing the version and configuration that meetstheir requirements. AWS provides some preconfigured AMIs (Amazon MachineImages) that include common database software, or the customer can use theirown custom AMIs.References:Shared Responsibility Model - Amazon Web Services (AWS)Shared responsibility model - Amazon Web Services: Risk and CompliancePatching Amazon EC2 instances - AWS Systems ManagerAmazon EC2 FAQs - Amazon Web ServicesMaintenance and Retirements - Amazon Elastic Compute Cloud[Hardware Lifecycle - Amazon Web Services (AWS)][Backing Up Your Data - Amazon Web Services (AWS)][Database Patching - Amazon Web Services (AWS)][Installing Database Software on Amazon EC2 Instances - Amazon Web Services(AWS)]
Question # 20
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion Which AWS service should the developer use to meet these requirements?
A. AWS Ground Station B. AWS Shield C. AWS loT Device Defender D. AWS CloudFormation
Answer: D Explanation: AWS CloudFormation is a service that allows developers to model andprovision their AWS infrastructure in a repeatable and declarative way, using code andtemplates. AWS CloudFormation enables developers to define the resources they need fortheir development and production environments, such as compute, storage, network, andapplication services, and automate their creation and configuration. AWS CloudFormationalso provides features such as change sets, nested stacks, and rollback triggers to helpdevelopers manage and update their infrastructure safely and efficiently12. References: AWS CloudFormationWhat is AWS CloudFormation?