{"id":80689,"date":"2023-03-02T22:13:17","date_gmt":"2023-03-03T03:43:17","guid":{"rendered":"https:\/\/www.whizlabs.com\/blog\/?p=80689"},"modified":"2024-04-16T10:42:41","modified_gmt":"2024-04-16T05:12:41","slug":"aws-cloud-practitioner-certification-questions","status":"publish","type":"post","link":"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/","title":{"rendered":"30+ Free Questions on AWS Cloud Practitioner Certification Exam [ Updated &#8211; 2024 ]"},"content":{"rendered":"<p>Are you looking for free questions and answers to prepare for the <a href=\"https:\/\/www.whizlabs.com\/aws-certified-cloud-practitioner\/\" target=\"_blank\" rel=\"noopener\">AWS Certified Cloud Practitioner<\/a> exam?<\/p>\n<p>Here are our <strong>newly updated 30+ Free questions<\/strong> on the AWS cloud practitioner certification exam which are very similar to the practice test as well as the real exam.<\/p>\n<p>The AWS Cloud Practitioner Certification exam is designed to validate an individual&#8217;s understanding of the AWS Cloud and its core services. It covers a broad range of topics related to the AWS Cloud, including:<\/p>\n<ul>\n<li>AWS Cloud concepts, such as the global infrastructure and security<\/li>\n<li>AWS Cloud value proposition<\/li>\n<li>AWS Cloud services and pricing<\/li>\n<li>AWS Cloud architecture and security best practices<\/li>\n<\/ul>\n<p><em><strong>Latest updates:<\/strong> The AWS Certified Cloud Practitioner exam CLF-C01 will be available only on or before September 18, 2023. The updated version of AWS Certified Cloud Practitioner exam CLF-C02 version starts on September 19, 2023.<\/em><\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_76 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #ea7e02;color:#ea7e02\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #ea7e02;color:#ea7e02\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Why_do_we_provide_AWS_Cloud_Practitioner_practice_exam_questions_for_free\" >Why do we provide AWS Cloud Practitioner practice exam questions for free?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#AWS_Cloud_Practitioner_Exam_Questions_CLF-C02\" >AWS Cloud Practitioner Exam Questions CLF-C02<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts\" >Domain: Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Billing_and_Pricing\" >Domain : Billing and Pricing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-2\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-2\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-3\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-4\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts-2\" >Domain : Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Billing_and_Pricing-2\" >Domain : Billing and Pricing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-5\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-6\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-3\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-4\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-7\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-5\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-8\" >Domain : Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-6\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-7\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts-3\" >Domain : Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts-4\" >Domain : Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts-5\" >Domain : Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Billing_and_Pricing-3\" >Domain : Billing and Pricing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-8\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-9\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-10\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-11\" >Domain : Technology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts-6\" >Domain : Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Billing_and_Pricing-4\" >Domain : Billing and Pricing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Concepts-7\" >Domain : Cloud Concepts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Billing_and_Pricing-5\" >Domain: Billing and Pricing\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-12\" >Domain: Technology\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Technology-13\" >Domain: Technology\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#_Domain_Security\" >\u00a0Domain: Security\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Security-9\" >Domain: Security\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-2\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-40\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-3\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-41\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-4\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-42\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-5\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-43\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-6\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-44\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-7\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-45\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-8\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-46\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-9\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-47\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Domain_Cloud_Technology_and_Services-10\" >Domain: Cloud Technology and Services<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-48\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloud-practitioner-certification-questions\/#Summary\" >Summary:<\/a><\/li><\/ul><\/nav><\/div>\n<h3><span class=\"ez-toc-section\" id=\"Why_do_we_provide_AWS_Cloud_Practitioner_practice_exam_questions_for_free\"><\/span>Why do we provide AWS Cloud Practitioner practice exam questions for free?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>AWS Certified Cloud Practitioner exams are designed to test and recognize your skills on AWS cloud infrastructure, compliance and security, user management, value propositions, and operating\/deploying principles in the AWS cloud environment.<\/p>\n<p>We are giving it for free to help you in passing the AWS cloud practitioner exam just like your colleagues. It&#8217;s a free takeaway from the Whizlabs team for <a href=\"https:\/\/www.whizlabs.com\/blog\/aws-jobs-freshers\/\" target=\"_blank\" rel=\"nofollow noopener\">AWS Job seekers<\/a> during this year 2024.<\/p>\n<p>Overall, providing AWS Cloud Practitioner practice exam questions (CLF-C02) for free serves both the interests of AWS and the individuals preparing for the certification exams. It&#8217;s a win-win situation that promotes learning, skill development, and community engagement.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"AWS_Cloud_Practitioner_Exam_Questions_CLF-C02\"><\/span>AWS Cloud Practitioner Exam Questions CLF-C02<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>You can find a lot of <a href=\"https:\/\/www.whizlabs.com\/aws-certified-cloud-practitioner\/\" target=\"_blank\" rel=\"nofollow noopener\">video courses on AWS cloud practitioner exam<\/a> to learn the exam objectives. And now, it&#8217;s the time to test your hard-earned AWS skills by studying the exam simulator questions on AWS certified cloud practitioner exam.<\/p>\n<p>Our AWS certified experts even curated these <a href=\"https:\/\/www.whizlabs.com\/blog\/hands-on-labs-aws-certified-cloud-practitioner\/\" target=\"_blank\" rel=\"noopener\">AWS simulator questions<\/a> carefully which are based on the latest syllabus and very relevant to the real AWS Cloud Practitioner exam.<\/p>\n<p>This list of free aws questions on AWS certified cloud practitioner exams can help you in up-skilling the knowledge gaps. Once you have spent some time learning these AWS questions on Cloud Practitioner certification, you can face the real exam with more confidence and ensure passing it in your first attempt itself.<\/p>\n<p><em>Let&#8217;s get started!<\/em><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-90496 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/10\/CLF-C02-Exam-Details.webp\" alt=\"clf-c02\" width=\"900\" height=\"500\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/10\/CLF-C02-Exam-Details.webp 900w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/10\/CLF-C02-Exam-Details-300x167.webp 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/10\/CLF-C02-Exam-Details-768x427.webp 768w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/10\/CLF-C02-Exam-Details-150x83.webp 150w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts\"><\/span>Domain: Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q 1: According to AWS, what is the benefit of Elasticity?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> Minimize storage requirements by reducing logging and auditing activities<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Create systems that scale to the required capacity based on changes in demand<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> Enable AWS to automatically select the most cost-effective services.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> Accelerate the design process because recovery from failure is automated, reducing the need for testing<\/span><\/p>\n<p><b>Answer \u2013 B<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The concept of Elasticity is the means of an application having the ability to scale up and scale down based on demand. An example of such a service is the Autoscaling service<\/span><\/p>\n<p><b>For more information on AWS Autoscaling service, please refer to the below URL:\u00a0<\/b><a href=\"https:\/\/aws.amazon.com\/autoscaling\/\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/aws.amazon.com\/autoscaling\/<\/span><\/a><\/p>\n<p><b>A, C and D are incorrect. <\/b><span style=\"font-weight: 400;\">Elasticity will not have positive effects on storage, cost or design agility.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Billing_and_Pricing\"><\/span>Domain : Billing and Pricing<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q2: Which tool can you use to forecast your AWS spending?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> AWS Organizations<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> Amazon Dev Pay<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> AWS Trusted Advisor<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> AWS Cost Explorer<\/span><\/p>\n<p><b>Answer \u2013 D<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The AWS Documentation mentions the following.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Cost Explorer is a free tool that you can use to view your costs. You can view data up to the last 12 months. You can forecast how much you are likely to spend for the next 12 months and get recommendations for what Reserved Instances to purchase. You can use Cost Explorer to see patterns in how much you spend on AWS resources over time, identify areas that need further inquiry, and see trends that you can use to understand your costs. You also can specify time ranges for the data and view time data by day or by month.<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-84646 size-full\" title=\"AWS cost explorer tool\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool.webp\" alt=\"AWS cost explorer tool\" width=\"985\" height=\"495\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool.webp 985w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool-300x151.webp 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool-768x386.webp 768w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool-836x420.webp 836w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool-640x322.webp 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool-681x342.webp 681w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-cost-explorer-tool-150x75.webp 150w\" sizes=\"(max-width: 985px) 100vw, 985px\" \/><\/p>\n<p><b>For more information on the AWS Cost Explorer, please refer to the below URL:\u00a0<\/b><a href=\"http:\/\/docs.aws.amazon.com\/awsaccountbilling\/latest\/aboutv2\/cost-explorer-what-is.html\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">http:\/\/docs.aws.amazon.com\/awsaccountbilling\/latest\/aboutv2\/cost-explorer-what-is.html<\/span><\/a><\/p>\n<p><b>A, B and C are incorrect. <\/b><span style=\"font-weight: 400;\">These services do not relate to billing and cost.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q3: A business analyst would like to move away from creating complex database queries and static spreadsheets when generating regular reports for high-level management. They would like to publish insightful, graphically appealing reports with interactive dashboards. Which service can they use to accomplish this?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> Amazon QuickSight<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> Business intelligence on Amazon Redshift<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> Amazon CloudWatch dashboards<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> Amazon Athena integrated with Amazon Glue<\/span><br \/>\n<b><\/b><\/p>\n<p><b>Correct Answer \u2013 A<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon QuickSight is the most appropriate service in the scenario. It is a fully-managed service that allows for insightful business intelligence reporting with creative data delivery methods, including graphical and interactive dashboards. QuickSight includes machine learning that allows users to discover inconspicuous trends and patterns on their datasets.<\/span><\/p>\n<figure id=\"attachment_84647\" aria-describedby=\"caption-attachment-84647\" style=\"width: 1052px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-84647 size-full\" title=\"AWS Quick Sight\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight.webp\" alt=\"AWS Quick Sight\" width=\"1052\" height=\"647\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight.webp 1052w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-300x185.webp 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-1024x630.webp 1024w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-768x472.webp 768w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-683x420.webp 683w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-640x394.webp 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-681x419.webp 681w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-quick-sight-150x92.webp 150w\" sizes=\"(max-width: 1052px) 100vw, 1052px\" \/><figcaption id=\"caption-attachment-84647\" class=\"wp-caption-text\">AWS Quick Sight tool | Source: aws.amazon.com\/quicksight<\/figcaption><\/figure>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Option B is INCORRECT.<\/b><span style=\"font-weight: 400;\"> Amazon Redshift service is a data warehouse and will not meet the requirements of interactive dashboards and dynamic means of delivering reports.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Option C is INCORRECT.<\/b><span style=\"font-weight: 400;\"> Amazon CloudWatch dashboards will not accomplish the requirements of the scenario. They are used to monitor AWS system resources and infrastructure services, though they are customizable and present information graphically.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Option D is INCORRECT.<\/b><span style=\"font-weight: 400;\"> Amazon Athena is a query service that allows for easy data analysis in Amazon S3 by using standard SQL. The service does not meet the requirements of the scenario.\u00a0<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-2\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q4. What is the AWS feature that enables fast, easy and secure transfers of files over long distances between your client and your Amazon S3 bucket?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> File Transfer<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> HTTP Transfer<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> Amazon S3 Transfer Acceleration<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> S3 Acceleration<\/span><\/p>\n<p><b>Answer \u2013 C<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The AWS Documentation mentions the following.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront\u2019s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For more information on S3 transfer acceleration, please visit the Link:\u00a0<\/span><a href=\"http:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/dev\/transfer-acceleration.html\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">http:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/dev\/transfer-acceleration.html<\/span><\/a><\/p>\n<p><b>Options A, B and D are incorrect<\/b><span style=\"font-weight: 400;\">. These features deal with transferring data but not between clients and an S3 bucket.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q5: What best describes the &#8220;Principle of Least Privilege&#8221;? Choose the correct answer from the options given below.<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> All users should have the same baseline permissions granted to them to use basic AWS services.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> Users should be granted permission to access only resources they need to do their assigned job.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> Users should submit all access requests in written form so that there is a paper trail of who needs access to different AWS resources.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> Users should always have a little more permission than they need.<\/span><\/p>\n<p><b>Answer \u2013 B<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The principle means giving a user account only those privileges which are essential to perform its intended function. For example, a user account for the sole purpose of creating backups does not need to install the software. Hence, it has rights only to run backup and backup-related applications.\u00a0<\/span><\/p>\n<p>For more information on the principle of least privilege, please refer to the following link: <a href=\"https:\/\/en.wikipedia.org\/wiki\/Principle_of_least_privilege\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/en.wikipedia.org\/wiki\/Principle_of_least_privilege<\/span><\/a><\/p>\n<p><b>Options A, C, and D are incorrect. <\/b><span style=\"font-weight: 400;\">These actions would not adhere to the Principle of Least Privilege.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-2\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q6: A web administrator maintains several public and private web-based resources for an organisation. Which service can they use to keep track of the expiry dates of SSL\/TLS certificates as well as updating and renewal?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> AWS Data Lifecycle Manager<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> AWS License Manager<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> AWS Firewall Manager<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> AWS Certificate Manager<\/span><\/p>\n<p><b>Correct Answer \u2013 D<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The AWS Certificate Manager allows the web administrator to maintain one or several SSL\/TLS certificates, both private and public certificates including their update and renewal so that the administrator does not worry about the imminent expiry of certificates.\u00a0<\/span><a href=\"https:\/\/aws.amazon.com\/certificate-manager\/\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/aws.amazon.com\/certificate-manager\/<\/span><\/a><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Option A is INCORRECT<\/b><span style=\"font-weight: 400;\">. The AWS Lifecycle Manager creates life cycle policies for specified resources to automate operations. <\/span><a href=\"https:\/\/docs.aws.amazon.com\/dlm\/?id=docs_gateway\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/dlm\/?id=docs_gateway<\/a><\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Option B is INCORRECT.<\/b><span style=\"font-weight: 400;\"> AWS License Manager serves the purpose of differentiating, maintaining third-party software provisioning vendor licenses. It also decreases the risk of license expirations and the penalties. <\/span><a href=\"https:\/\/docs.aws.amazon.com\/license-manager\/?id=docs_gateway\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/license-manager\/?id=docs_gateway<\/a><\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Option C is INCORRECT.<\/b><span style=\"font-weight: 400;\"> AWS Firewall Manager aids in the administration of Web Application Firewall (WAF), by presenting a centralised point of setting firewall rules across different web resources. <\/span><a href=\"https:\/\/docs.aws.amazon.com\/firewall-manager\/?id=docs_gateway\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/firewall-manager\/?id=docs_gateway<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-3\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q7: Which of the following is the responsibility of the customer to ensure the availability and backup of the EBS volumes?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> Delete the data and create a new EBS volume.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> Create EBS snapshots.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> Attach new volumes to EC2 Instances.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> Create copies of EBS Volumes.<\/span><\/p>\n<p><b>Answer \u2013 B<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Snapshots are <\/span><i><span style=\"font-weight: 400;\">incremental<\/span><\/i><span style=\"font-weight: 400;\"> backups, which means that only the blocks on the device that have changed after your most recent snapshot are saved.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When you create an EBS volume based on a snapshot, the new volume begins as an exact replica of the original volume that was used to create the snapshot. The replicated volume loads data in the background so that you can begin using it immediately.<\/span><\/p>\n<figure id=\"attachment_84648\" aria-describedby=\"caption-attachment-84648\" style=\"width: 671px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-84648 size-full\" title=\"Amazon EBS snapshots\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-ebs-snapshots.webp\" alt=\"Amazon EBS snapshots\" width=\"671\" height=\"589\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-ebs-snapshots.webp 671w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-ebs-snapshots-300x263.webp 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-ebs-snapshots-478x420.webp 478w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-ebs-snapshots-640x562.webp 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/aws-ebs-snapshots-150x132.webp 150w\" sizes=\"(max-width: 671px) 100vw, 671px\" \/><figcaption id=\"caption-attachment-84648\" class=\"wp-caption-text\">Amazon EBS snapshots | Source: aws.amazon.com<\/figcaption><\/figure>\n<p><b>Option A is incorrect<\/b><span style=\"font-weight: 400;\"> because there is no need for backup of the volumes if data is already deleted.<\/span><\/p>\n<p><b>Option C is incorrect <\/b><span style=\"font-weight: 400;\">because attaching more EBS volumes doesn&#8217;t ensure availability, if there is no snapshot then the volume cannot be available to a different availability zone.<\/span><\/p>\n<p><b>Option D is incorrect<\/b><span style=\"font-weight: 400;\"> EBS volumes cannot be copied, they can only be replicated using snapshots.<\/span><\/p>\n<p>For more information on EBS Snapshots, please refer to the below URL:<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/EBSSnapshots.html\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/EBSSnapshots.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-4\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q8:\u00a0Which of the following services can be used as an application firewall in AWS?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> AWS Snowball<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> AWS WAF<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> AWS Firewall<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> AWS Protection<\/span><br \/>\n<b><\/b><\/p>\n<p><b>Answer &#8211; B<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The AWS Documentation mentions the following:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront or an Application Load Balancer. AWS WAF also lets you control access to your content.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">AWS Snowball, a part of the AWS Snow Family, is an edge computing, data migration, and edge storage device that comes in two options. Snowball Edge Storage Optimized devices provide both block storage and Amazon S3-compatible object storage, and 40 vCPUs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For more information on AWS WAF, please refer to the below URL:<\/span><a href=\"https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/waf-chapter.html\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/waf-chapter.html<\/span><\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/snowball\/?whats-new-cards.sort-by=item.additionalFields.postDateTime&amp;whats-new-cards.sort-order=desc\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/aws.amazon.com\/snowball\/?whats-new-cards.sort-by=item.additionalFields.postDateTime&amp;whats-new-cards.sort-order=desc<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts-2\"><\/span>Domain : Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q9:\u00a0Your design team is planning to design an application that will be hosted on the AWS Cloud. One of their main non-functional requirements is given below:<\/strong><br \/>\n<strong>Reduce inter-dependencies so failures do not impact other components.<\/strong><br \/>\n<strong>Which of the following concepts does this requirement relate to?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> Integration<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> Decoupling<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> Aggregation<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> Segregation<\/span><\/p>\n<p><b>Answer \u2013 B<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The entire concept of decoupling components ensures that the different components of applications can be managed and maintained separately. If all components are tightly coupled, the entire application would go down when one component goes down. Hence it is always a better practice to decouple application components.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For more information on a decoupled architecture, please refer to the below URL:\u00a0<\/span><a href=\"http:\/\/whatis.techtarget.com\/definition\/decoupled-architecture\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">http:\/\/whatis.techtarget.com\/definition\/decoupled-architecture<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Billing_and_Pricing-2\"><\/span>Domain : Billing and Pricing<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q10:\u00a0A manufacturing firm has recently migrated their application servers to the Amazon EC2 instance. The IT Manager is looking for the details of upcoming scheduled maintenance activities which AWS would be performing on AWS resources, that may impact the services on these EC2 instances.<\/strong><\/p>\n<p><strong>Which of the following services can alert you about the changes that can affect resources in your account?\u00a0<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>A.<\/strong> AWS Organizations<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong> AWS Personal Health Dashboard<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C.<\/strong> AWS Trusted Advisor<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D.<\/strong> AWS Service Health Dashboard<\/span><\/p>\n<p><b>Answer \u2013 B<\/b><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS Personal Health Dashboard provides alerts for AWS services availability &amp; performance which may impact resources deployed in your account. Customers get emails &amp; mobile notifications for scheduled maintenance activities which might impact services on these AWS resources.\u00a0 <\/span><b>\u00a0<\/b><\/p>\n<p><b>Option A is incorrect <\/b><span style=\"font-weight: 400;\">as AWS Organizations do not provide any notifications for scheduled maintenance activities.<\/span><\/p>\n<p><b>Option C is incorrect <\/b><span style=\"font-weight: 400;\">as AWS Trusted Advisor will provide notification on AWS resources created within the account for cost optimization, security, fault tolerance, performance, and service limits. It will not provide notification for scheduled maintenance activities performed by AWS on its resources.\u00a0\u00a0<\/span><\/p>\n<p><b>Option D is incorrect<\/b><span style=\"font-weight: 400;\"> as Service Health Dashboard displays the general status of all AWS services &amp; will not display scheduled maintenance activities.<\/span><\/p>\n<p>For more information on the AWS Organizations, please refer to the below URL:\u00a0<a href=\"https:\/\/aws.amazon.com\/premiumsupport\/technology\/personal-health-dashboard\/\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">https:\/\/aws.amazon.com\/premiumsupport\/technology\/personal-health-dashboard\/<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-5\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q11: Which of the following AWS services can be used to retrieve configuration changes made to AWS resources causing operational issues?<\/strong><\/p>\n<p><strong>A.<\/strong> Amazon Inspector<br \/>\n<strong>B.<\/strong> AWS CloudFormation<br \/>\n<strong>C.<\/strong> AWS Trusted Advisor<br \/>\n<strong>D.<\/strong> AWS Config<\/p>\n<p><strong>Answer \u2013 D<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>AWS Config can be used to audit, evaluate configurations of AWS resources. If there are any operational issues, AWS config can be used to retrieve configurational changes made to AWS resources that may have caused these issues.<\/p>\n<ul>\n<li><strong>Option A is incorrect<\/strong> as Amazon Inspector can be used to analyze potential security threats for an Amazon EC2 instance against an assessment template with predefined rules. It does not provide historical data for configurational changes done to AWS resources.<\/li>\n<li><strong>Option B is incorrect<\/strong> as AWS CloudFormation provided templates to provision and configure resources in AWS.<\/li>\n<li><strong>Option C is incorrect<\/strong> as AWS Trusted Advisor can help optimize resources with AWS cloud with respect to cost, security, performance, fault tolerance, and service limits. It does not provide historical data for configurational changes done to AWS resources.<\/li>\n<\/ul>\n<p>For more information on AWS Config, refer to the following URL:<a href=\"https:\/\/aws.amazon.com\/config\/faq\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/config\/latest\/developerguide\/WhatIsConfig.html<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-6\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q12: An organization runs several EC2 instances inside a VPC using three subnets, one for Development, one for Test, and one for Production. The Security team has some concerns about the VPC configuration. It requires restricting communication across the EC2 instances using Security Groups.<\/strong><\/p>\n<p><strong>Which of the following options is true for Security Groups related to the scenario?<\/strong><\/p>\n<p><strong>A.<\/strong> You can change a Security Group associated with an instance if the instance is in the running state.<br \/>\n<strong>B.<\/strong> You can change a Security Group associated with an instance if the instance is in the hibernate state.<br \/>\n<strong>C.<\/strong> You can change a Security Group only if there are no instances associated to it.<br \/>\n<strong>D.<\/strong> The only Security Group you can change is the Default Security Group.<\/p>\n<p><strong>Answer: A<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<ul>\n<li><strong>Option A is CORRECT <\/strong>because the AWS documentation mentions it in the section called \u201cChanging an Instance\u2019s Security Group\u201d using the following sentence: \u201cAfter you launch an instance into a VPC, you can change the security groups that are associated with the instance. You can change the security groups for an instance when the instance is in the running or stopped state.\u201d<\/li>\n<li><strong>Option B is incorrect <\/strong>as You can change the security groups for an instance when the instance is in the running or stopped state, not hibernate state.<\/li>\n<li><strong>Option C is incorrect <\/strong>because there have to be some instances associated.<\/li>\n<li><strong>Option D is incorrect <\/strong>because other security groups can also be changed.<\/li>\n<\/ul>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/en_pv\/vpc\/latest\/userguide\/VPC_SecurityGroups.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/en_pv\/vpc\/latest\/userguide\/VPC_SecurityGroups.html<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-3\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q13: Which of the following features of Amazon RDS allows for better availability of databases? Choose the answer from the options given below.<\/strong><\/p>\n<p><strong>A.<\/strong> VPC Peering<br \/>\n<strong>B.<\/strong> Multi-AZ<br \/>\n<strong>C.<\/strong> Read Replicas<br \/>\n<strong>D.<\/strong> Data encryption<\/p>\n<p><strong>Answer \u2013 B<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>The AWS Documentation mentions the following.<\/p>\n<p>If you are looking to use replication to increase database availability while protecting your latest database updates against unplanned outages, consider running your DB instance as a Multi-AZ deployment.<\/p>\n<p>For more information on AWS RDS, please visit the FAQ Link:<a href=\"https:\/\/aws.amazon.com\/rds\/faqs\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/rds\/faqs\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-4\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q14: Your company wants to move an existing Oracle database to the AWS Cloud. Which of the following services can help facilitate this move?<\/strong><\/p>\n<p><strong>A.<\/strong> AWS Database Migration Service<br \/>\n<strong>B.<\/strong> AWS VM Migration Service<br \/>\n<strong>C.<\/strong> AWS Inspector<br \/>\n<strong>D.<\/strong> AWS Trusted Advisor<\/p>\n<p><strong>Answer &#8211; A<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>The AWS Documentation mentions the following.<\/p>\n<p>AWS Database Migration Service helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. The AWS Database Migration Service can migrate your data to and from the most widely used commercial and open-source databases.<\/p>\n<p>For more information on AWS Database migration, please refer to the below URL:<a href=\"https:\/\/aws.amazon.com\/dms\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/dms\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-7\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q15: Which of the following services allows you to analyze EC2 Instances against pre-defined security templates to check for vulnerabilities?<\/strong><\/p>\n<p><strong>A.<\/strong> AWS Trusted Advisor<br \/>\n<strong>B.<\/strong> AWS Inspector<br \/>\n<strong>C.<\/strong> AWS WAF<br \/>\n<strong>D.<\/strong> AWS Shield<\/p>\n<p><strong>Answer \u2013 B<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>The AWS Documentation mentions the following.<\/p>\n<p>Amazon Inspector enables you to analyze the behavior of your AWS resources and helps you to identify potential security issues. Using Amazon Inspector, you can define a collection of AWS resources that you want to include in an assessment target. You can then create an <em>assessment template<\/em> and launch a security <em>assessment run<\/em> of this target.<\/p>\n<p>For more information on AWS Inspector, please refer to the below URL:<a href=\"https:\/\/docs.aws.amazon.com\/inspector\/latest\/userguide\/inspector_introduction.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/inspector\/latest\/userguide\/inspector_introduction.html<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-5\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q16: A website for an international sport governing body would like to serve its content to viewers from different parts of the world in their vernacular language. Which of the following services provide location-based web personalization using geolocation headers?<\/strong><\/p>\n<p><strong>A.<\/strong> Amazon CloudFront<br \/>\n<strong>B.<\/strong> Amazon EC2 Instance<br \/>\n<strong>C.<\/strong> Amazon Lightsail<br \/>\n<strong>D.<\/strong> Amazon Route 53<\/p>\n<p><strong>Answer \u2013 A<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>Amazon CloudFront supports country-level location-based web content personalization with a feature called Geolocation Headers.<\/p>\n<p>You can configure CloudFront to add additional geolocation headers that provide more granularity in your caching and origin request policies. The new headers give you more granular control of cache behavior and your origin access to the viewer\u2019s country name, region, city, postal code, latitude, and longitude, all based on the viewer\u2019s IP address.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-84649 size-full\" title=\"Amazon CloudFront with Geolocation Headers\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16.webp\" alt=\"CloudFront Distribution\" width=\"909\" height=\"544\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16.webp 909w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16-300x180.webp 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16-768x460.webp 768w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16-702x420.webp 702w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16-640x383.webp 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16-681x408.webp 681w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc16-150x90.webp 150w\" sizes=\"(max-width: 909px) 100vw, 909px\" \/><\/p>\n<ul>\n<li><strong>Option B is INCORRECT<\/strong> because EC2 is just a distractor, not suitable for routing and delivery.<\/li>\n<li><strong>Option C is INCORRECT<\/strong> because Amazon Lightsail will primarily allow for developing, deploying, and hosting websites and web applications. The service will not meet the requirements of the scenario.<\/li>\n<li><strong>Option D is INCORRECT<\/strong> because the geolocation routing policy of Route53 allows different resources to serve content based on the origin of the request. Route 53 does not use geolocation headers.<\/li>\n<\/ul>\n<p><strong>References:<\/strong><\/p>\n<p><a href=\"https:\/\/aws.amazon.com\/about-aws\/whats-new\/2020\/07\/cloudfront-geolocation-headers\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/about-aws\/whats-new\/2020\/07\/cloudfront-geolocation-headers\/<\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/leverage-amazon-cloudfront-geolocation-headers-for-state-level-geo-targeting\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/leverage-amazon-cloudfront-geolocation-headers-for-state-level-geo-targeting\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-8\"><\/span>Domain : Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q17: Which of the following can be used to protect against DDoS attacks? Choose 2 answers from the options given below.<\/strong><\/p>\n<p><strong>A.<\/strong> AWS EC2<br \/>\n<strong>B.<\/strong> AWS RDS<br \/>\n<strong>C.<\/strong> AWS Shield<br \/>\n<strong>D.<\/strong> AWS Shield Advanced<\/p>\n<p><strong>Answer \u2013 C and D<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>The AWS Documentation mentions the following:<\/p>\n<p>AWS Shield &#8211; All AWS customers benefit from the automatic protections of AWS Shield Standard, at no additional charge. AWS Shield Standard defends against most common, frequently occurring network and transport layer DDoS attacks that target your web site or applications<\/p>\n<p>AWS Shield Advanced &#8211; For higher levels of protection against attacks targeting your web applications running on Amazon EC2, Elastic Load Balancing (ELB), CloudFront, and Route 53 resources, you can subscribe to AWS Shield Advanced. AWS Shield Advanced provides expanded DDoS attack protection for these resources.<\/p>\n<p>For more information on AWS Shield, please refer to the below URL:<a href=\"https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/ddos-overview.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/ddos-overview.html<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-6\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q18: Which of the following are the recommended resources to be deployed in the\u00a0 Amazon VPC private subnet?<\/strong><\/p>\n<p><strong>A.<\/strong> NAT Gateways<br \/>\n<strong>B.<\/strong> Bastion Hosts<br \/>\n<strong>C.<\/strong> Database Servers<br \/>\n<strong>D.<\/strong> Internet Gateways<\/p>\n<p><strong>Answer \u2013 C<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>As Database servers contain confidential information, so for a security perspective, it should be deployed in a <strong>Private Subnet<\/strong>.<\/p>\n<p>Amazon Virtual Private Cloud (Amazon VPC) enables the user to launch AWS resources into a virtual network that a user has defined.<\/p>\n<p><strong>Option A is incorrect<\/strong> because NAT devices (<strong>NAT Gateway, Nat Instance<\/strong>) allow instances in private subnets to connect to the internet, other VPCs, or on-premises networks. It is deployed in a public subnet.<\/p>\n<p><strong>Option B is incorrect<\/strong> because <strong>bastion host<\/strong> is a server whose purpose is to provide access (SSH access) to a private network from an external network, such as the Internet. It is deployed in a public subnet.<\/p>\n<p><strong>Option D is incorrect<\/strong> because an <strong>Internet Gateway <\/strong>is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet.<\/p>\n<p>For more information on AWS VPC, please refer to the below URL:<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_Networking.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_Networking.html<\/a><br \/>\n<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_Internet_Gateway.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_Internet_Gateway.html<\/a><br \/>\n<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-nat.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-nat.html<\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/blogs\/security\/how-to-record-ssh-sessions-established-through-a-bastion-host\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/blogs\/security\/how-to-record-ssh-sessions-established-through-a-bastion-host\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-7\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q19: A company wants to utilize AWS storage. For them, low storage cost is paramount. The data is rarely retrieved and a data retrieval time of 13-14 hours is acceptable for them. What is the best storage option to use?<\/strong><\/p>\n<p><strong>A.<\/strong> Amazon S3 Glacier<br \/>\n<strong>B.<\/strong> S3 Glacier Deep Archive<br \/>\n<strong>C.<\/strong> Amazon EBS volumes<br \/>\n<strong>D.<\/strong> AWS CloudFront<\/p>\n<p><strong>Answer \u2013 B<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p><strong>S3 Glacier Deep Archive<\/strong> offers the lowest cost storage in the cloud, at prices lower than storing and maintaining data in on-premises magnetic tape libraries or archiving data offsite.<\/p>\n<p>It expands our data archiving offerings, enabling you to select the optimal storage class based on storage and retrieval costs, and retrieval times.<\/p>\n<p><strong>Option B is correct <\/strong>because S3 Glacier Deep Archive offers low-cost storage and retrieval time doesn&#8217;t matter for the company. If the question asks for fast retrieval time then S3 Glacier would be correct.<\/p>\n<p><strong>Option A is incorrect <\/strong>because S3 Glacier is not cheaper than S3 Glacier Deep Archive.<\/p>\n<p><strong>Options C and D are incorrect <\/strong>because they are not suitable for data archive and faster retrieval. Also, the CloudFront is not for storage.<\/p>\n<p>With <strong>S3 Glacie<\/strong>r, customers can store their data cost-effectively for months, years, or even decades. S3 Glacier enables customers to offload the administrative burdens of operating and scaling storage to AWS, so they don&#8217;t have to worry about capacity planning, hardware provisioning, data replication, hardware failure detection, and recovery, or time-consuming hardware migrations.<\/p>\n<ul>\n<li><strong>Amazon S3 Glacier <\/strong>for archiving data that might infrequently need to be restored within a few hours<\/li>\n<li><strong>S3 Glacier Deep Archive <\/strong>for archiving long-term backup cycle data that might infrequently need to be restored within 12 hours<\/li>\n<\/ul>\n<table width=\"624\">\n<tbody>\n<tr>\n<td width=\"214\"><strong>Storage class<\/strong><\/td>\n<td width=\"122\"><strong>Expedited<\/strong><\/td>\n<td width=\"144\"><strong>Standard<\/strong><\/td>\n<td width=\"144\"><strong>Bulk<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"214\">Amazon S3 Glacier<\/td>\n<td width=\"122\">1\u20135 minutes<\/td>\n<td width=\"144\">3\u20135 hours<\/td>\n<td width=\"144\">5\u201312 hours<\/td>\n<\/tr>\n<tr>\n<td width=\"214\">S3 Glacier Deep Archive<\/td>\n<td width=\"122\">Not available<\/td>\n<td width=\"144\">Within 12 hours<\/td>\n<td width=\"144\">Within 48 hours<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Reference:<\/strong><\/p>\n<p><a href=\"https:\/\/aws.amazon.com\/documentation\/glacier\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/amazonglacier\/latest\/dev\/introduction.html<\/a><br \/>\n<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/backup-recovery\/amazon-s3-glacier.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/backup-recovery\/amazon-s3-glacier.html<\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/s3\/storage-classes\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/s3\/storage-classes\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts-3\"><\/span>Domain : Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q20: Which AWS service provides a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability?<\/strong><\/p>\n<p><strong>A.<\/strong> AWS RDS<br \/>\n<strong>B.<\/strong> DynamoDB<br \/>\n<strong>C.<\/strong> Oracle RDS<br \/>\n<strong>D.<\/strong> Elastic Map Reduce<\/p>\n<p><strong>Answer: &#8211; B<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>DynamoDB is a fully managed NoSQL offering provided by AWS. It is now available in most regions for users to consume.<\/p>\n<p>For more information on AWS DynamoDB, please refer to the below URL:<a href=\"http:\/\/docs.aws.amazon.com\/amazondynamodb\/latest\/developerguide\/Introduction.html\" target=\"_blank\" rel=\"nofollow noopener\">http:\/\/docs.aws.amazon.com\/amazondynamodb\/latest\/developerguide\/Introduction.html<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts-4\"><\/span>Domain : Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q21: For which of the following AWS resources, the Customer is responsible for the infrastructure-related security configurations?<\/strong><\/p>\n<p><strong>A.<\/strong> Amazon RDS<br \/>\n<strong>B.<\/strong> Amazon DynamoDB<br \/>\n<strong>C.<\/strong> Amazon EC2<br \/>\n<strong>D.<\/strong> AWS Fargate<\/p>\n<p><strong>Answer: C<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>Amazon EC2 is an Infrastructure as a Service (IaaS) for which customers are responsible for the security and the management of guest operating systems.<\/p>\n<ul>\n<li><strong>Options A, B, and D are incorrect <\/strong>as all these resources are part of abstracted services for which AWS is responsible for the security, &amp; infrastructure layer. Customers are responsible for data that is saved on these resources.<\/li>\n<\/ul>\n<p>For more information on the Shared responsibility model, refer to the following URL:<a href=\"https:\/\/aws.amazon.com\/compliance\/shared-responsibility-model\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/compliance\/shared-responsibility-model\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts-5\"><\/span>Domain : Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q22: In the shared responsibility model for infrastructure services, such as Amazon Elastic Compute Cloud, which of the below two are customers responsibility?<\/strong><\/p>\n<p><strong>A.<\/strong> Network infrastructure<br \/>\n<strong>B.<\/strong> Amazon Machine Images (AMIs)<br \/>\n<strong>C.<\/strong> Virtualization infrastructure<br \/>\n<strong>D.<\/strong> Physical security of hardware<br \/>\n<strong>E.<\/strong> Policies and configuration<\/p>\n<p><strong>Answer: B, E<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<p>In the shared responsibility model, AWS is primarily responsible for \u201cSecurity of the Cloud.\u201d The customer is responsible for \u201cSecurity in the Cloud.\u201d In this scenario, the mentioned AWS product is IAAS (Amazon EC2) and AWS manages the security of the following assets:<\/p>\n<p>&#8211; Facilities<\/p>\n<p>&#8211; Physical security of hardware<\/p>\n<p>&#8211; Network infrastructure<\/p>\n<p>&#8211; Virtualization infrastructure<\/p>\n<p>Customers are responsible for the security of the following assets:<\/p>\n<p>&#8211; Amazon Machine Images (AMIs)<\/p>\n<p>&#8211; Operating systems<\/p>\n<p>&#8211; Applications<\/p>\n<p>&#8211; Data in transit<\/p>\n<p>&#8211; Data at rest<\/p>\n<p>&#8211; Data stores<\/p>\n<p>&#8211; Credentials<\/p>\n<p>&#8211; Policies and configuration<\/p>\n<ul>\n<li><strong>Option A is incorrect. <\/strong>Refer to the explanation above and link in the references for more details.<\/li>\n<li><strong>Option B is Correct. <\/strong>Refer to the explanation above and link in the references for more details.<\/li>\n<li><strong>Option C is incorrect. <\/strong>Refer to the explanation above and link in the references for more details.<\/li>\n<li><strong>Option D is incorrect. <\/strong>Refer to the explanation above and link in the references for more details.<\/li>\n<li><strong>Option E is correct. <\/strong>Refer to the explanation above and link in the references for more details.<\/li>\n<\/ul>\n<p><strong>References:<\/strong><\/p>\n<p><a href=\"https:\/\/docs.aws.amazon.com\/wellarchitected\/latest\/security-pillar\/welcome.html\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/wellarchitected\/latest\/security-pillar\/welcome.html<\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/architecture\/well-architected\/?wa-lens-whitepapers.sort-by=item.additionalFields.sortDate&amp;wa-lens-whitepapers.sort-order=desc\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/architecture\/well-architected\/?wa-lens-whitepapers.sort-by=item.additionalFields.sortDate&amp;wa-lens-whitepapers.sort-order=desc<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Billing_and_Pricing-3\"><\/span>Domain : Billing and Pricing<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q23: AWS offers two savings plans to enable more savings and flexibility for its customers, namely, compute saving plans and EC2 Instance Savings plans.<\/strong><\/p>\n<p><strong>Which of the below statement is FALSE regarding Saving Plans?<\/strong><\/p>\n<p><strong>A.<\/strong> Capacity Reservations are not provided with Saving Plans.<br \/>\n<strong>B.<\/strong> Savings Plans are available for all the regions.<br \/>\n<strong>C.<\/strong> Savings plans will apply on \u2018On-Demand Capacity Reservations\u2019 that customers can allocate for their needs.<br \/>\n<strong>D.<\/strong> The prices for Savings Plans do not change based on the amount of hourly commitment.<\/p>\n<p><strong>Answer: B<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<ul>\n<li><strong>Option A<\/strong> is <strong>INCORRECT<\/strong>. The given statement is True.<\/li>\n<li><strong>Option B<\/strong> is <strong>CORRECT<\/strong>. The given statement is False. For China Regions, savings plans are not available.<\/li>\n<li><strong>Option C<\/strong> is <strong>INCORRECT<\/strong>. The given statement is True.<\/li>\n<li><strong>Option D<\/strong> is <strong>INCORRECT<\/strong>. The given statement is True.<\/li>\n<\/ul>\n<p><strong>Reference:\u00a0<\/strong><a href=\"https:\/\/docs.aws.amazon.com\/savingsplans\/latest\/userguide\/what-is-savings-plans.html#sp-ris\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/docs.aws.amazon.com\/savingsplans\/latest\/userguide\/what-is-savings-plans.html#sp-ris<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-8\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q24: Which of the below-listed services is a region-based AWS service?<\/strong><\/p>\n<p><strong>A.<\/strong> AWS IAM<br \/>\n<strong>B.<\/strong> Amazon EFS<br \/>\n<strong>C.<\/strong> Amazon Route 53<br \/>\n<strong>D.<\/strong> Amazon CloudFront<\/p>\n<p><strong>Answer: B<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<ul>\n<li><strong>Option A<\/strong> is <strong>INCORRECT<\/strong>. AWS IAM is a global service.<\/li>\n<li><strong>Option B<\/strong> is <strong>CORRECT<\/strong>. EFS is a regional service.<\/li>\n<li><strong>Option C<\/strong> is <strong>INCORRECT<\/strong>. Route 53 is a global service.<\/li>\n<li><strong>Option D<\/strong> is <strong>INCORRECT<\/strong>. Amazon Cloudfront is a global service.<\/li>\n<\/ul>\n<p><strong>References:<\/strong><\/p>\n<p><a href=\"https:\/\/aws.amazon.com\/efs\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/efs\/<\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/about-aws\/global-infrastructure\/regional-product-services\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/about-aws\/global-infrastructure\/regional-product-services\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-9\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q25: Which of the following LightSail Wizard allows the customers to \u201ccreate a copy of the LightSail instance in EC2\u201d?<\/strong><\/p>\n<p><strong>A.<\/strong> LightSail Backup<br \/>\n<strong>B.<\/strong> LightSail Copy<br \/>\n<strong>C.<\/strong> Upgrade to EC2<br \/>\n<strong>D.<\/strong> LightSail-EC2 snapshot<\/p>\n<p><strong>Answer:<\/strong> <strong>C<\/strong><\/p>\n<p><b>Explanation :\u00a0<\/b><\/p>\n<ul>\n<li><strong>Option A<\/strong> is <strong>INCORRECT<\/strong>. LightSail Backup is an invalid option.<\/li>\n<li><strong>Option B<\/strong> is <strong>INCORRECT<\/strong>. LightSail Copy is an invalid option.<\/li>\n<li><strong>Option C<\/strong> is <strong>CORRECT<\/strong>. \u201cUpgrade to EC2\u201d is the feature that allows customers to \u201ccreate a copy of the LightSail instance in EC2\u201d.<br \/>\nTo get started, you need to export your Lightsail instance manual snapshot. You&#8217;ll then use the Upgrade to EC2 wizard to create an instance in EC2.<br \/>\nCustomers who are comfortable with EC2 can then use the EC2 creation wizard or API to create a new EC2 instance as they would from an existing EC2 AMI.<\/li>\n<li><strong>Option D<\/strong> is <strong>INCORRECT<\/strong>. A LightSail-EC2 snapshot is an invalid option.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"alignnone wp-image-84650 size-full\" title=\"Instance in EC2 Console\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25.webp\" alt=\"LightSail instance in EC2\" width=\"1146\" height=\"280\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25.webp 1146w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25-300x73.webp 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25-1024x250.webp 1024w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25-768x188.webp 768w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25-640x156.webp 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25-681x166.webp 681w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/cc25-150x37.webp 150w\" sizes=\"(max-width: 1146px) 100vw, 1146px\" \/><\/p>\n<p><strong>Reference:<\/strong><\/p>\n<p><a href=\"https:\/\/lightsail.aws.amazon.com\/ls\/docs\/en_us\/articles\/amazon-lightsail-exporting-snapshots-to-amazon-ec2\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/lightsail.aws.amazon.com\/ls\/docs\/en_us\/articles\/amazon-lightsail-exporting-snapshots-to-amazon-ec2<\/a><br \/>\n<a href=\"https:\/\/aws.amazon.com\/lightsail\/features\/upgrade-to-ec2\/\" target=\"_blank\" rel=\"nofollow noopener\">https:\/\/aws.amazon.com\/lightsail\/features\/upgrade-to-ec2\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-10\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q26 : Which of the following features of Amazon Connect helps better customer engagement on AWS Cloud ?<\/strong><\/p>\n<p><strong>A. <\/strong>Push Notification<br \/>\n<strong>B. <\/strong>High Quality Audio<br \/>\n<strong>C. <\/strong>Mailbox Simulator<br \/>\n<strong>D. <\/strong>Reputation Dashboard<\/p>\n<p><strong>Correct Answer: B<\/strong><\/p>\n<p>Amazon Connect is an omnichannel cloud contact centre which can be setup easily &amp; with low cost. It has following features which helps to provide customers a superior service ,<\/p>\n<ol>\n<li>Telephone as a service<\/li>\n<li>High quality Audio<\/li>\n<li>Omnichannel routing<\/li>\n<li>Web &amp; Mobile Chat<\/li>\n<li>Task management<\/li>\n<li>Contact Centre automation<\/li>\n<li>Rules Engine.<\/li>\n<\/ol>\n<p><strong>Option A is incorrect<\/strong> as Push Notification is not a feature of Amazon Connect. It\u2019s one of the features of Amazon Pinpoint.<br \/>\n<strong>Option C is incorrect<\/strong> as Mailbox Simulator is not a feature of Amazon Connect. It\u2019s one of the features of Amazon SES.<br \/>\n<strong>Option D is incorrect <\/strong>as Reputation Dashboard is not a feature of Amazon Connect. It\u2019s one of the features of Amazon SES.<\/p>\n<p>For more information on Amazon Connect, refer to the following URL: <a href=\"https:\/\/aws.amazon.com\/connect\/features\/\" target=\"_blank\" rel=\"nofollow noopener\" data-cke-saved-href=\"https:\/\/aws.amazon.com\/connect\/features\/\" data-cke-saved->https:\/\/aws.amazon.com\/connect\/features\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-11\"><\/span>Domain : Technology<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q27: A large IT company is looking to enable its large user base to remotely access Linux desktops from any location. Which service can be used for this purpose ?<\/strong><\/p>\n<p><strong>A. <\/strong>Amazon Cognito<br \/>\n<strong>B. <\/strong>Amazon AppStream 2.0<br \/>\n<strong>C. <\/strong>Amazon WorkSpaces<br \/>\n<strong>D. <\/strong>Amazon WorkLink<\/p>\n<p><strong>Correct Answer: C<\/strong><\/p>\n<p>Amazon WorkSpaces provides a secure managed service for virtual desktops for remote users. It supports both Windows &amp; Linux based virtual desktops for a large number of users.<\/p>\n<p><strong>Option A is incorrect <\/strong>as Amazon Cognito can be used to control access to AWS resources from an application.<br \/>\n<strong>Option B is incorrect <\/strong>as Amazon AppStream 2.0 can be used to provide access to applications or a non-persistent desktop from any location.<br \/>\n<strong>Option D is incorrect <\/strong>as Amazon WorkLink can be used by internal employees to securely access internal websites &amp; applications using mobile phones.<\/p>\n<p>For more information on Amazon WorkSpaces, refer to the following URL: <a href=\"https:\/\/aws.amazon.com\/workspaces\/features\/?nc=sn&amp;loc=2\" target=\"_blank\" rel=\"nofollow noopener\" data-cke-saved-href=\"https:\/\/aws.amazon.com\/workspaces\/features\/?nc=sn&amp;loc=2\" data-cke-saved->https:\/\/aws.amazon.com\/workspaces\/features\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts-6\"><\/span>Domain : Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q28 : Users in the Developer Team need to deploy a multi-tier web application. Which service can be used to create a customized portfolio that will help users for quick deployment?<\/strong><\/p>\n<p><strong>A. <\/strong>AWS Config<br \/>\n<strong>B. <\/strong>AWS Code Deploy<br \/>\n<strong>C. <\/strong>AWS Service Catalog<br \/>\n<strong>D. <\/strong>AWS Cloud Formation<\/p>\n<p><strong>Correct Answer: C<\/strong><\/p>\n<p>AWS Service Catalog can be used to create &amp; deploy portfolio of products within AWS infrastructure. This helps to create consistent resources within AWS infrastructure with quick deployment. These catalogues can be used for deployment of single resource or a multi-tier web application consisting of web, application, &amp; database layer resources.<\/p>\n<p><strong>Option A is incorrect <\/strong>as AWS config is used for evaluating configuration on the resources deployed in AWS cloud. It will not help for creating portfolios of resources for quick deployment.<br \/>\n<strong>Option B is incorrect<\/strong> as AWS CodeDeploy is a managed service for automating software deployment on AWS resources &amp; on-premise systems. It is not suitable for creating portfolios of resources for quick deployment.<br \/>\n<strong>Option D is incorrect<\/strong> as AWS CloudFormation is a service for provisioning AWS resources using templates.<\/p>\n<p>For more information on AWS Service Catalog, refer to the following URL: <a href=\"https:\/\/aws.amazon.com\/servicecatalog\/features\/\" target=\"_blank\" rel=\"nofollow noopener\" data-cke-saved-href=\"https:\/\/aws.amazon.com\/servicecatalog\/features\/\" data-cke-saved->https:\/\/aws.amazon.com\/servicecatalog\/features\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Billing_and_Pricing-4\"><\/span>Domain : Billing and Pricing<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q29 : A large Oil &amp; gas company is planning to deploy a high-volume application on multiple Amazon EC2 instances.\u00a0 Which of the following can help to reduce operational expenses?<\/strong><\/p>\n<p><strong>A. <\/strong>Deploy Amazon EC2 instance with Auto-scaling<br \/>\n<strong>B. <\/strong>Deploy Amazon EC2 instance in multiple AZ\u2019s<br \/>\n<strong>C. <\/strong>Deploy Amazon EC2 instance with Amazon instance store-backed AMI<br \/>\n<strong>D. <\/strong>Deploy Amazon EC2 instance with Cluster placement group<\/p>\n<p><strong>Correct Answer: A<\/strong><\/p>\n<p>Using Amazon EC2 Auto-Scaling helps to match the workload on the application with the optimum number of the Amazon EC2 instance. Due to this, during low load on application, Amazon EC2 instances are terminated which reduces operational cost.<\/p>\n<p><strong>Option B is incorrect <\/strong>as deploying an Amazon EC2 instance in a multiple AZ might enhance application availability but will not reduce operational expenses.<br \/>\n<strong>Option C is incorrect <\/strong>as deploying an Amazon EC2 instance with Amazon instance store-backed AMI incur charges for Amazon EC2 instance usage &amp; storing AMI in Amazon S3. There will be no impact on operational expense using this AMI type.<br \/>\n<strong>Option D is incorrect <\/strong>as deploying an Amazon EC2 instance in a cluster placement group will help to have low latency between instances but will not reduce operational expenses.<\/p>\n<p>For more information on reducing cost using AWS cloud , refer to the following URL: <a href=\"https:\/\/aws.amazon.com\/economics\/\" target=\"_blank\" rel=\"nofollow noopener\" data-cke-saved-href=\"https:\/\/aws.amazon.com\/economics\/\" data-cke-saved->https:\/\/aws.amazon.com\/economics\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Concepts-7\"><\/span>Domain : Cloud Concepts<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q30 : Which of the following activities are within the scope of AWS Support?<\/strong><\/p>\n<p><strong>A. <\/strong>Troubleshooting API issues<br \/>\n<strong>B. <\/strong>Code Development<br \/>\n<strong>C. <\/strong>Debugging custom software<br \/>\n<strong>D. <\/strong>Third-party application configuration on AWS resources<br \/>\n<strong>E. <\/strong>Database query tuning<\/p>\n<p><strong>Correct Answers: A and D<\/strong><\/p>\n<p>As a part of AWS Support following activities are performed,<\/p>\n<ol>\n<li>Queries regarding all AWS Services &amp; features.<\/li>\n<li>Best Practices to integrate, deploy &amp; manage applications in the AWS cloud.<\/li>\n<li>Troubleshooting API &amp; SDK issues.<\/li>\n<li>Troubleshooting operational issues.<\/li>\n<li>Issues related to any AWS Tools.<\/li>\n<li>Problems detected by EC2 health checks<\/li>\n<li>Third-Party application configuration on AWS resources &amp; products.<\/li>\n<\/ol>\n<p>AWS Support does not include:<\/p>\n<ul>\n<li>Code development<\/li>\n<li>Debugging custom software<\/li>\n<li>Performing system administration tasks<\/li>\n<li>Database query tuning<\/li>\n<li>Cross-Account Support<\/li>\n<\/ul>\n<p><strong>Option B is incorrect <\/strong>as Code Development is not in the scope of AWS Support. This needs to be taken care of by the customer.<br \/>\n<strong>Option C is incorrect <\/strong>as Debugging custom software is not in the scope of AWS Support. This needs to be taken care of by the customer.<br \/>\n<strong>Option E is incorrect <\/strong>as Database query tuning is not in the scope of AWS Support. This needs to be taken care of by the customer.<\/p>\n<p>For more information on AWS Support, refer to the following URL: <a href=\"https:\/\/aws.amazon.com\/premiumsupport\/\" target=\"_blank\" rel=\"nofollow noopener\" data-cke-saved-href=\"https:\/\/aws.amazon.com\/premiumsupport\/\" data-cke-saved->https:\/\/aws.amazon.com\/premiumsupport\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Billing_and_Pricing-5\"><\/span><b><span data-contrast=\"auto\">Domain: <\/span><\/b><b><span data-contrast=\"none\">Billing and Pricing<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q31: I have a huge amount of data (images, documents). I want to store them on AWS storage service S3 and know how S3 is priced to make informed decisions. Which of the following is accounted as a cost for S3 storage? Select TWO.\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\"><strong>A.<\/strong> While uploading data to an S3 bucket<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>B.<\/strong> Lifecycle transition requests<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>C.<\/strong> Outbound data transfer from S3 in US-West to an EC2 instance in US-West<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>D.<\/strong> Outbound data transfer to Amazon CloudFront<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>E.<\/strong> Outbound data transfer from S3 in US-East to an EC2 instance in US-West<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Correct Answers: B and E<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Explanation:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option A is incorrect.<\/span><\/b><span data-contrast=\"auto\"> Data transferred in from the internet to S3 does not incur any charges.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option B is CORRECT.<\/span><\/b><span data-contrast=\"auto\"> Lifecycle data transfers between the storage classes can be considered as GET\/PUT operations from the source storage class to the target storage class which will incur cost.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option C is incorrect.<\/span><\/b><span data-contrast=\"auto\"> Outbound data transfers from S3 within the same Region (including a different AWS account) do\u202fnot incur any charges.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option D is incorrect.<\/span><\/b><span data-contrast=\"auto\"> Data transferred out to Amazon CloudFront performed as a request by CloudFront to the Origin server (S3) for caching content does not incur any charges.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option E is CORRECT <\/span><\/b><span data-contrast=\"auto\">since the Outbound data transfer is done out of the region where the S3 bucket resides.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">References:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><a href=\"https:\/\/aws.amazon.com\/s3\/pricing\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">https:\/\/aws.amazon.com\/s3\/pricing\/<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><a href=\"http:\/\/pragmaticnotes.com\/2020\/04\/22\/s3-to-glacier-lifecycle-transition-see-if-its-worth-it\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">http:\/\/pragmaticnotes.com\/2020\/04\/22\/s3-to-glacier-lifecycle-transition-see-if-its-worth-it\/<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-12\"><\/span><b><span data-contrast=\"auto\">Domain: <\/span><\/b><b><span data-contrast=\"none\">Technology<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q32: I am using the Amazon Simple Notification Service to send notifications to alert admins whenever the CPU utilization of an EC2 instance crosses 70%. Which of the following can be subscribers to an SNS Topic? (Select TWO)\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\"><strong>A.<\/strong> Email<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>B.<\/strong> Amazon S3<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>C.<\/strong> AWS Lambda<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>D.<\/strong> Amazon CloudWatch<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>E.<\/strong> Amazon DynamoDB streams<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Correct Answers: A and\u202fC<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Explanation:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">SNS is extremely useful for the fan-out types of applications, i.e., multiple clients that push messages to an SNS topic &amp; multiple listeners can be notified when a message arrives at the Topic.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option A is CORRECT. <\/span><\/b><span data-contrast=\"auto\">SNS messages can be sent to registered addresses as Email (text-based or Object) who act as subscribers to the notification<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option B is incorrect.<\/span><\/b><span data-contrast=\"auto\"> S3 acts as a publisher of SNS notifications.\u202fWhen a file is uploaded to S3, it can publish an event that can then be subscribed to &amp; acted upon<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option C is CORRECT.<\/span><\/b><span data-contrast=\"auto\"> A lambda function can subscribe to an SNS Topic and can act on any events that are published to that Topic. An S3 PUT or CREATE event for uploading documents can have a Lambda subscriber that can pull out metadata information contained within the documents &amp; store it in a Dynamo DB database.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option D is incorrect. <\/span><\/b><span data-contrast=\"auto\">CloudWatch will act as a publisher of events using alarms. Getting back to our scenario, we can set CloudWatch alarms on the CPU utilization metrics of the EC2 instance. The alarms can then be published to an SNS Topic for notifying users.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option E is incorrect.<\/span><\/b><span data-contrast=\"auto\"> Dynamo DB streams are events that are emitted when record modifications occur on a Dynamo DB table like INSERT, UPDATE, etc. They are extremely useful to create informative dashboards in real-time. Dynamo DB streams can trigger a lambda function that can publish a message to an SNS Topic. So we can see here that Dynamo DB stream acts as a publisher of events.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">References:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><a href=\"https:\/\/docs.aws.amazon.com\/sns\/latest\/dg\/welcome.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">https:\/\/docs.aws.amazon.com\/sns\/latest\/dg\/welcome.html<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><a href=\"https:\/\/youtu.be\/PsJsP-7cydk\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">https:\/\/docs.aws.amazon.com\/sns\/latest\/dg\/sns-create-subscribe-endpoint-to-topic.html<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Technology-13\"><\/span><b><span data-contrast=\"auto\">Domain: <\/span><\/b><b><span data-contrast=\"none\">Technology<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q 33: I require different levels of access for my application that is installed on an EC2 instance. I have configured an ENI for the same purpose. Which of the following statement is incorrect?\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\">A. I can detach the primary ENI of my EC2 instance and connect it to another instance for moving its Elastic IP<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">B. I can configure a Security Group for my ENI and restrict traffic to the EC2 instance<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">C. I can detach a secondary ENI containing a Private IP from one EC2 instance and attach it to another<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">D. I can attach an Elastic IP to an EC2 instance in another subnet by releasing it from the ENI in the current subnet to which it is currently attached to<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Correct Answer:<\/span><\/b> <b><span data-contrast=\"auto\">A<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Explanation:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option A is CORRECT.<\/span><\/b><span data-contrast=\"auto\"> The primary ENI of an instance cannot be detached from the instance. By default, the primary ENI is created with the creation of the EC2 instance &amp; deleted when the instance is terminated<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option B is incorrect <\/span><\/b><span data-contrast=\"auto\">since an EC2 instance may require restricted access to certain IP addresses. This can be achieved by creating a new ENI &amp; attaching a Public IP &amp; Security Group restricting permissions.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option C is incorrect.<\/span><\/b><span data-contrast=\"auto\"> Secondary ENI\u2019s that are created can be detached from the instance to which it is attached to &amp; attached to another instance within the same subnet. The Private IP then gets allocated to the second instance to which it is attached currently<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option D is incorrect. <\/span><\/b><span data-contrast=\"auto\">ENI\u2019s are subnet specific. So for attaching an Elastic IP to an instance in a different subnet, I need to first release it to the pool by dissociating it from an attached instance. This way, I can attach the Elastic IP to an instance in a different subnet.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">References:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/using-eni.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/using-eni.html<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"_Domain_Security\"><\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><b><span data-contrast=\"auto\">Domain: <\/span><\/b><b><span data-contrast=\"none\">Security<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q 34: To make programmatic calls to AWS, a user was provided an access key ID and secret access key. However, the user has now forgotten the shared credentials and cannot make the required programmatic calls.\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\">How can an access key ID and secret access key be provided to the user?<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">A. Use the \u201cForgot Password\u201d Option<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">B. Use \u201cCreate New Access Key\u201d by logging in to AWS Management Console as the root user<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">C. Credentials cannot be generated<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">D. Raise a ticket with AWS Support<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Correct Answer: B<\/span><\/b><b><span data-contrast=\"none\">\u00a0<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Explanation:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option A<\/span><\/b> <b><span data-contrast=\"auto\">is INCORRECT<\/span><\/b><span data-contrast=\"auto\">. This is an invalid option.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option B<\/span><\/b> <b><span data-contrast=\"auto\">is CORRECT<\/span><\/b><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option C is<\/span><\/b> <b><span data-contrast=\"auto\">INCORRECT<\/span><\/b><span data-contrast=\"auto\">. This is an incorrect option. We can create a new access key by logging in to Management Console as a root user.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option D is INCORRECT<\/span><\/b><span data-contrast=\"auto\">. This is an incorrect option. We can create a new access key by logging in to Management Console as a root user.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Reference:<\/span><\/b> <a href=\"https:\/\/docs.aws.amazon.com\/general\/latest\/gr\/aws-sec-cred-types.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">\u202f<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/docs.aws.amazon.com\/general\/latest\/gr\/aws-sec-cred-types.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">https:\/\/docs.aws.amazon.com\/general\/latest\/gr\/aws-sec-cred-types.html<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Security-9\"><\/span><b><span data-contrast=\"auto\">Domain: <\/span><\/b><b><span data-contrast=\"none\">Security<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q 34: Which of the following statements accurately describe\u202fa function of AWS Secrets Manager? [Select Two]\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\">A. Encrypts authentication information in code, ensuring that it is unreadable, that is, not in plain-text.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">B. Replaces the need to hardcode\u202fauthentication credentials in code.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">C. Makes it possible to include an API call in code that retrieves authentication information from a central repository.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">D. Automatically rotates and updates the code in the application build, ensuring that repositories are kept up to date.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">E. Facilitates the embedding of authentication information in code during runtime.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Correct Answer: B and C<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Explanation:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">AWS Secrets Manager allows users to replace authentication information in code with an API call to Secrets Manager. This API call then retrieves the secret programmatically. This safeguards the secret from being compromised since the secret is removed from the code. AWS Secrets Manager automatically rotates the secret in accordance with specified schedules which allows the implementation of more secure short-term secrets.\u202fThese, in turn, reduce the risk of authentication information in code being compromised.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option A is INCORRECT <\/span><\/b><span data-contrast=\"auto\">because AWS Secrets Manager does not encrypt authentication information whilst it is in the code.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option D is INCORRECT <\/span><\/b><span data-contrast=\"auto\">because AWS Secrets Manager does not automatically rotate or update the application code. Rather, it automatically rotates the secret in accordance with specified schedules.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option E is INCORRECT <\/span><\/b><span data-contrast=\"auto\">because AWS Secrets Manager does not facilitate embedding authentication information in code during runtime. Developers do not need to hard-code authentication information in code.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Reference:<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/docs.aws.amazon.com\/secretsmanager\/latest\/userguide\/intro.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">https:\/\/docs.aws.amazon.com\/secretsmanager\/latest\/userguide\/intro.html<\/span><\/a><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q35. Which of the following statements accurately describes AWS IQ?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A. AWS IQ is an artificial intelligence service that predicts cloud infrastructure costs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">B. AWS IQ is a service that offers free cloud computing resources to AWS customers.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">C. AWS IQ is a platform that connects AWS customers with certified freelancers, experts, and consulting firms for various AWS-related tasks.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">D. AWS IQ is a hardware appliance for secure data storage in AWS data centers.<\/span><\/p>\n<p><strong>Correct Answer: C<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> AWS IQ is a platform that connects AWS customers with certified freelancers, experts, and consulting firms for various AWS-related tasks. This platform helps customers find and engage experts to assist with their specific AWS projects and tasks, making it a valuable resource for AWS customers looking for professional assistance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because AWS IQ is not an artificial intelligence service for predicting cloud infrastructure costs. It is a platform for connecting customers with experts.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because AWS IQ does not offer free cloud computing resources. It is a marketplace for connecting customers with experts and involves payment for the services provided.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because AWS IQ is not a hardware appliance for data storage but rather a platform for connecting customers with AWS experts.<\/span><\/p>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/aws-iq\/latest\/user-guide\/what-is-aws-iq.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/aws-iq\/latest\/user-guide\/what-is-aws-iq.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-2\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q36. You are developing a web application that requires real-time collaboration features and seamless integration with AWS services for the backend. Which AWS service should you consider for simplifying the development and implementation of these features?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A. AWS AppSync<\/span><\/p>\n<p><span style=\"font-weight: 400;\">B. AWS Amplify<\/span><\/p>\n<p><span style=\"font-weight: 400;\">C. Amazon RDS<\/span><\/p>\n<p><span style=\"font-weight: 400;\">D. AWS Device Farm<\/span><\/p>\n<p><strong>Correct Answer: B<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> AWS Amplify is a framework that simplifies the development of web and mobile applications by providing tools and services to streamline the process. It enables seamless integration with various AWS services for the backend, making it a suitable choice for simplifying the development and implementation of real-time collaboration features in web applications.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because AWS AppSync, while capable of handling real-time data synchronization, is primarily designed for applications using GraphQL APIs, and it may not be the most straightforward choice for the above scenario.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because Amazon RDS is a managed database service used to simplify the process of setting up, operating, and scaling relational databases in the cloud.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because AWS Device Farm is a testing service for mobile and web applications on real devices.<\/span><\/p>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/amplify\/latest\/userguide\/welcome.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/amplify\/latest\/userguide\/welcome.html<\/span><\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-3\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q37: You are working on a software development project that involves managing and distributing software packages and dependencies across your development team. You need a secure and scalable solution for storing and sharing these artifacts. Which AWS service should you consider for this purpose?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A. AWS CodeCommit<\/span><\/p>\n<p><span style=\"font-weight: 400;\">B. AWS CodeStar<\/span><\/p>\n<p><span style=\"font-weight: 400;\">C. AWS CodeBuild<\/span><\/p>\n<p><span style=\"font-weight: 400;\">D. AWS CodeArtifact<\/span><\/p>\n<p><strong>Correct Answer: D<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> AWS CodeArtifact is designed for secure and scalable artifact management, making it an excellent choice for storing and sharing software packages and dependencies.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because AWS CodeCommit is a managed source code repository service, primarily used for version control and collaboration on source code. It&#8217;s not designed for storing and managing software artifacts and dependencies.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because AWS CodeStar is a developer tool that simplifies the setup and management of development projects, including integration with AWS services like CodeCommit, CodeBuild, and CodeDeploy.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because AWS CodeBuild is designed to compile, build, and test code in a scalable and efficient manner, helping development teams automate and streamline their build and deployment processes.<\/span><\/p>\n<p><strong>Reference:<\/strong><a href=\"https:\/\/aws.amazon.com\/codeartifact\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/aws.amazon.com\/codeartifact\/<\/span><\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-4\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q38: You are tasked with building and deploying a machine-learning model to predict customer preferences for an e-commerce platform. Which AWS service provides end-to-end machine learning capabilities?<\/strong><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">A. Amazon SageMaker<\/span><\/p>\n<p><span style=\"font-weight: 400;\">B. Amazon Lex<\/span><\/p>\n<p><span style=\"font-weight: 400;\">C. Amazon Polly<\/span><\/p>\n<p><span style=\"font-weight: 400;\">D. Amazon Kendra<\/span><\/p>\n<p><strong>Correct Answer: A<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> Amazon SageMaker is the correct choice for building and deploying machine learning models with end-to-end capabilities. It covers the entire machine-learning workflow, including data preprocessing, and model training.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because Amazon Lex is a service for building conversational interfaces using chatbots and voice-enabled applications. It is not designed for building and deploying machine learning models for predicting customer preferences.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because Amazon Polly is a service that converts text into lifelike speech. It is not used for machine learning model development or predictive analytics.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because Amazon Kendra is a service for building intelligent search capabilities into applications. While it is valuable for search and retrieval tasks, it is not designed for building machine learning models for predictive analytics.<\/span><\/p>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/sagemaker\/latest\/dg\/whatis.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/sagemaker\/latest\/dg\/whatis.html<\/span><\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-5\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q39: In a customer support application, there is a need for a chatbot to assist users in finding quick answers to frequently asked questions. Which AWS service is suitable for building this chatbot with natural language understanding capabilities?<\/strong><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">A. Amazon Rekognition <\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">B. Amazon Lex<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">C. Amazon Polly<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">D. Amazon Kendra<\/span><\/p>\n<p><strong>Correct Answer: B<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> Amazon Lex is the correct choice for developing a chatbot with natural language understanding capabilities. It enables the creation of conversational interfaces and chatbots that can comprehend and respond to user queries in natural language.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because Amazon Rekognition is a service for image and video analysis, primarily used for tasks like object recognition and facial analysis. It is not intended for chatbot development or natural language understanding.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because Amazon Polly is a service that converts text into lifelike speech but does not provide natural language understanding capabilities or chatbot development features.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because Amazon Kendra is an intelligent search service designed to provide highly accurate and efficient search capabilities for documents and data. It does not focus on chatbot development or natural language understanding.<\/span><\/p>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/lex\/latest\/dg\/what-is.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/lex\/latest\/dg\/what-is.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-6\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q40: What role does Amazon AppStream play in helping organizations?<\/strong><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">A. It provides cloud-based virtual machines for running containerized applications.<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">B. It automates and manages AWS resource provisioning.<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">C. It delivers desktop applications securely to users via streaming.<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">D. It hosts websites and web applications with high availability.<\/span><\/p>\n<p><strong>Correct Answer: C<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> Amazon AppStream is designed to securely stream desktop applications to users over the internet. It allows you to deliver software applications to a variety of devices, making them accessible from anywhere while maintaining data security.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because the description aligns more with services like Amazon EC2 or AWS Fargate, which provide virtual machines or containerized application execution, rather than AppStream&#8217;s focus on desktop application streaming.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because This aligns more with services like AWS CloudFormation or AWS Elastic Beanstalk, which are used for automating and managing AWS resource provisioning but are not related to desktop application streaming.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because High-availability hosting of websites and web applications is typically associated with services like AWS Elastic Load Balancing, AWS Auto Scaling, and Amazon S3 static website hosting, but it is not the primary purpose of Amazon AppStream.\u00a0<\/span><\/p>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/appstream2\/latest\/developerguide\/what-is-appstream.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/appstream2\/latest\/developerguide\/what-is-appstream.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-7\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q41: You are developing a mobile application that requires real-time data synchronization and offline access to your backend data. Which AWS service should you consider for building the GraphQL API to meet these requirements?\u00a0\u00a0<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A. AWS Amplify<\/span><\/p>\n<p><span style=\"font-weight: 400;\">B. AWS Device Farm<\/span><\/p>\n<p><span style=\"font-weight: 400;\">C. Amazon AppStream<\/span><\/p>\n<p><span style=\"font-weight: 400;\">D. AWS AppSync<\/span><\/p>\n<p><strong>Correct Answer: D<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> AWS AppSync is the correct choice for building a GraphQL API that provides real-time data synchronization and offline access capabilities for mobile and web applications. It allows you to connect to various data sources and enables offline access through data caching.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because AWS Amplify is a development framework and library for building web and mobile applications, including features for authentication and data access.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because AWS Device Farm is a testing service for mobile and web applications on real devices. It is unrelated to building GraphQL APIs or providing real-time data synchronization and offline access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because AWS AppStream is a service for securely streaming desktop applications to users over the internet.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Reference:<\/strong> <\/span><a href=\"https:\/\/docs.aws.amazon.com\/appsync\/latest\/devguide\/what-is-appsync.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/appsync\/latest\/devguide\/what-is-appsync.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-8\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q42: In a software development project, a team needs a service to automate the compilation and testing of code changes in a continuous integration (CI) environment. Which AWS service is suitable for this purpose?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A. AWS CodeBuild<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">B. AWS CodeDeploy<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">C. AWS CodePipeline<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">D. AWS CodeCommit<\/span><\/p>\n<p><strong>Correct Answer: A<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> AWS CodeBuild is the appropriate choice for automating the compilation and testing of code changes in a CI (continuous integration) environment. It is a fully managed build service that can compile your source code, run tests, and produce build artifacts.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because AWS CodeDeploy is a service used for automating software deployments to various compute targets, such as EC2 instances, and Lambda functions. It is not designed for the compilation and testing of code changes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because AWS CodePipeline is a CI\/CD service used for orchestrating and automating the delivery of software changes. While it can include CodeBuild as a build step, its primary focus is on the entire CI\/CD pipeline, not just the build process.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because AWS CodeCommit is a managed source code repository service for version control and collaboration on source code. It is not a build service like CodeBuild.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Reference:<\/strong> <\/span><a href=\"https:\/\/docs.aws.amazon.com\/codebuild\/latest\/userguide\/welcome.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/codebuild\/latest\/userguide\/welcome.html<\/span><\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-9\"><\/span><b>Domain: Cloud Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q43: In a production environment, there is a requirement to automate the entire process of managing and delivering changes, including building, testing, and deploying resources. Which AWS service should be considered to create an end-to-end continuous integration and continuous deployment (CI\/CD) pipeline?<\/strong><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">A.AWS CodeDeploy<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">B. AWS CodeBuild<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">C. AWS CodePipeline<\/span><\/p>\n<p><span style=\"font-size: 16px; font-weight: 400;\">D. AWS CodeCommit<\/span><\/p>\n<p><strong>Correct Answer: C<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> AWS CodePipeline is the appropriate choice for creating a streamlined, end-to-end CI\/CD pipeline. It enables you to automate the entire process of managing and delivering changes, including building, testing, and deploying resources, facilitating a seamless and efficient CI\/CD workflow.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option A is incorrect<\/strong> because AWS CodeDeploy is a service used for automating software deployments to various compute targets, such as EC2 instances, Lambda functions. It is not designed to handle the complete CI\/CD pipeline like CodePipeline.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because AWS CodeBuild is a managed build service used for compiling source code and running tests. While it is a crucial component of the CI\/CD pipeline, it does not cover the entire CI\/CD workflow as CodePipeline does.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because AWS CodeCommit is a managed source code repository service for version control and collaboration on source code.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Reference:<\/strong> <\/span><a href=\"https:\/\/docs.aws.amazon.com\/codepipeline\/latest\/userguide\/welcome.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/codepipeline\/latest\/userguide\/welcome.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Cloud_Technology_and_Services-10\"><\/span><b>Domain:<\/b> Cloud<b> Technology and Services<\/b><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Q44: In a remote work scenario, your organization needs to provide a virtual desktop experience for employees, allowing them to access their desktop environments securely from anywhere. Which AWS service should you consider for this purpose?<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A) Amazon WorkSpaces<\/span><\/p>\n<p><span style=\"font-weight: 400;\">B) Amazon WorkSpaces Web<\/span><\/p>\n<p><span style=\"font-weight: 400;\">C) Amazon AppStream 2.0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">D) AWS Device Farm<\/span><\/p>\n<p><strong>Correct Answer: A<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Explanation:<\/strong> Amazon WorkSpaces is a service that provides a virtual desktop experience to employees, enabling them to access their desktop environments securely from anywhere with an internet connection. It offers a fully managed, scalable, and secure solution for remote desktop access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option B is incorrect<\/strong> because Amazon WorkSpaces Web is an economical, comprehensively supervised, Linux-centric solution, crafted to streamline secure web-based entry to internal websites and software-as-a-service (SaaS) applications through web browsers. It does not have the capability to provide a virtual desktop experience to users.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option C is incorrect<\/strong> because Amazon AppStream 2.0 is a service for streaming desktop applications to users, but it is not primarily focused on providing full virtual desktop environments like Amazon WorkSpaces. It&#8217;s more suitable for streaming specific applications rather than complete desktops.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><strong>Option D is incorrect<\/strong> because AWS Device Farm is a testing service for mobile and web applications on real devices.<\/span><\/p>\n<p><strong>Reference: <\/strong><a href=\"https:\/\/docs.aws.amazon.com\/workspaces\/latest\/adminguide\/amazon-workspaces.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/workspaces\/latest\/adminguide\/amazon-workspaces.html<\/span><\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary:<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>We hope the above list of questions on AWS Cloud Practitioner exams are helpful for you. AWS CCP (Certified Cloud Practitioner) is a foundational exam in which even a beginner interested to pursue their career in AWS cloud can attempt this exam.<\/p>\n<p>It is strongly recommended to ensure that you have covered all the objectives of the AWS certification exam, so that you can pass the exam at ease and in your first attempt. Hence, keep practicing until you are confident to take the real exams. You can also try Whizlabs newly updated practice test, Video Course, <a href=\"https:\/\/www.whizlabs.com\/labs\/library\" target=\"_blank\" rel=\"noopener\">Hands-on labs<\/a>, <a href=\"https:\/\/www.whizlabs.com\/aws-sandbox\/\" target=\"_blank\" rel=\"noopener\">AWS Sandbox<\/a> on AWS Certified Cloud Practitioner exam.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Are you looking for free questions and answers to prepare for the AWS Certified Cloud Practitioner exam? Here are our newly updated 30+ Free questions on the AWS cloud practitioner certification exam which are very similar to the practice test as well as the real exam. The AWS Cloud Practitioner Certification exam is designed to validate an individual&#8217;s understanding of the AWS Cloud and its core services. It covers a broad range of topics related to the AWS Cloud, including: AWS Cloud concepts, such as the global infrastructure and security AWS Cloud value proposition AWS Cloud services and pricing AWS [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":86699,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[3923,4819],"class_list":["post-80689","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aws-certifications","tag-aws-cloud-practitioner-exam","tag-free-questions-for-aws-cloud-practitioner-certification-exam"],"uagb_featured_image_src":{"full":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions.webp",2560,1440,false],"thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-150x150.webp",150,150,true],"medium":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-300x169.webp",300,169,true],"medium_large":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-768x432.webp",768,432,true],"large":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-1024x576.webp",1024,576,true],"1536x1536":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-1536x864.webp",1536,864,true],"2048x2048":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-2048x1152.webp",2048,1152,true],"profile_24":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions.webp",24,14,false],"profile_48":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions.webp",48,27,false],"profile_96":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions.webp",96,54,false],"profile_150":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions.webp",150,84,false],"profile_300":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions.webp",300,169,false],"tptn_thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-250x250.webp",250,250,true],"web-stories-poster-portrait":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-640x853.webp",640,853,true],"web-stories-publisher-logo":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-96x96.webp",96,96,true],"web-stories-thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/01\/AWS_Cloud_Practitioner_Certification_Free_questions-150x84.webp",150,84,true]},"uagb_author_info":{"display_name":"Krishna Srinivasan","author_link":"https:\/\/www.whizlabs.com\/blog\/author\/krishna\/"},"uagb_comment_info":15497,"uagb_excerpt":"Are you looking for free questions and answers to prepare for the AWS Certified Cloud Practitioner exam? Here are our newly updated 30+ Free questions on the AWS cloud practitioner certification exam which are very similar to the practice test as well as the real exam. The AWS Cloud Practitioner Certification exam is designed to&hellip;","_links":{"self":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/80689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/comments?post=80689"}],"version-history":[{"count":69,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/80689\/revisions"}],"predecessor-version":[{"id":94582,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/80689\/revisions\/94582"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media\/86699"}],"wp:attachment":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media?parent=80689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/categories?post=80689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/tags?post=80689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}