A company is building a web application using AWS.
Which AWS service will help prevent network layer DDoS attacks against the web application?
A. AWS WAF
B. AWS Firewall Manager
C. Amazon GuardDuty
D. AWS Shield
Show Answer
Correct Answer: D
Explanation: AWS Shield is the AWS managed service specifically designed to protect applications and AWS resources from Distributed Denial of Service (DDoS) attacks, including network (Layers 3 and 4) attacks. AWS WAF protects against application-layer (Layer 7) threats, Firewall Manager centrally manages firewall policies, and GuardDuty detects threats rather than providing DDoS protection.
Question 193
A company needs to provide customer service by using voice calls and web chat features.
Which AWS service should the company use to meet these requirements?
A. Amazon Aurora
B. Amazon Connect
C. Amazon WorkSpaces
D. AWS Organizations
Show Answer
Correct Answer: B
Explanation: Amazon Connect is AWS's fully managed cloud contact center service that supports customer service through voice calls and web chat. The other options do not provide contact center functionality: Amazon Aurora is a database, Amazon WorkSpaces is a virtual desktop service, and AWS Organizations is for multi-account management.
Question 194
Which of the following are economic benefits of using the AWS Cloud? (Choose two.)
A. Consumption-based pricing
B. Perpetual licenses
C. Economies of scale
D. AWS Enterprise Support at no additional cost
E. Bring-your-own-hardware model
Show Answer
Correct Answer: A, C
Explanation: The AWS Cloud provides economic benefits through consumption-based pricing (pay only for the resources you use) and economies of scale, where AWS's large-scale infrastructure lowers costs that are passed on to customers. Perpetual licenses are not an AWS Cloud economic benefit, Enterprise Support is a paid offering, and AWS does not use a bring-your-own-hardware model.
Question 195
A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data daily.
Which S3 storage class will meet these requirements MOST cost-effectively?
A. S3 Standard
B. S3 Glacier Deep Archive
C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
D. S3 Intelligent-Tiering
Show Answer
Correct Answer: D
Explanation: S3 Intelligent-Tiering is the most cost-effective choice when a dataset contains objects with different or changing access patterns, such as some accessed daily and others yearly. It automatically moves objects between frequent and infrequent access tiers based on access patterns while maintaining immediate retrieval, avoiding the need to manually separate data. S3 Standard stores all data at the highest storage cost, Glacier Deep Archive is intended for archival data with long retrieval times, and One Zone-IA is for infrequently accessed data in a single Availability Zone and is not appropriate for data accessed daily.
Question 196
A company wants to run CPU-intensive workload across multiple Amazon EC2 instances.
Which EC2 instance type should the company use to meet this requirement?
A. General purpose instances
B. Compute optimized instances
C. Memory optimized instances
D. Storage optimized instances
Show Answer
Correct Answer: B
Explanation: Compute optimized instances are designed for compute-bound, CPU-intensive workloads. They provide high-performance processors and a high ratio of vCPUs to memory, making them the appropriate choice for applications that require significant CPU resources. General purpose instances balance CPU, memory, and networking; memory optimized instances target large in-memory datasets; storage optimized instances are designed for high sequential read/write or IOPS workloads.
Question 197
A company needs to identify who accessed an AWS service and what action was performed for a given time period.
Which AWS service should the company use to meet this requirement?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Security Hub
D. Amazon Inspector
Show Answer
Correct Answer: B
Explanation: AWS CloudTrail records AWS API activity, including who made requests, what actions were performed, and when they occurred. This makes it the appropriate service for auditing access and actions over a specified time period.
Question 198
A company is running a reporting web server application on Amazon EC2 instances. The application runs once every week and once again at the end of the month. The EC2 instances can be shut down when they are not in use.
What is the MOST cost-effective billing model for this use case?
A. Standard Reserved Instances
B. Convertible Reserved Instances
C. On-Demand Capacity Reservations
D. On-Demand Instances
Show Answer
Correct Answer: D
Explanation: On-Demand Instances are the most cost-effective choice for infrequent, intermittent workloads that can be stopped when not in use. Reserved Instances require a long-term commitment and are economical only with sustained usage. On-Demand Capacity Reservations reserve capacity rather than reduce cost and can incur charges even when instances are not running, so they are not the most cost-effective option here.
Question 199
Which pillar of the AWS Well-Architected Framework aligns with the ability to make frequent, small, and reversible changes to AWS Cloud architecture?
A. Security
B. Cost optimization
C. Operational excellence
D. Performance efficiency
Show Answer
Correct Answer: C
Explanation: The AWS Well-Architected Framework's Operational Excellence pillar emphasizes operations as code, frequent, small, reversible changes, continuous improvement, and refining procedures to support efficient and reliable workloads.
Question 200
A company wants to use a managed service to identify and protect sensitive data that is stored in Amazon S3.
Which AWS service will meet these requirements?
A. AWS IAM Access Analyzer
B. Amazon GuardDuty
C. Amazon Inspector
D. Amazon Macie
Show Answer
Correct Answer: D
Explanation: Amazon Macie is the AWS managed data security and privacy service that automatically discovers, classifies, and helps protect sensitive data stored in Amazon S3 using machine learning and pattern matching. IAM Access Analyzer analyzes resource access, GuardDuty detects threats, and Inspector assesses vulnerabilities—not sensitive data classification.
Question 201
A company wants to deploy an application that stores data in a relational database. The company wants database tasks, such as automated backups and database snapshots, to be managed by AWS.
Which AWS service will meet these requirements?
A. Amazon DocumentDB
B. Amazon RDS
C. Amazon Elastic Block Store (Amazon EBS)
D. Amazon S3
Show Answer
Correct Answer: B
Explanation: Amazon RDS is AWS's managed relational database service. It automates operational tasks such as automated backups, database snapshots, patching, and maintenance. Amazon DocumentDB is a managed document database (NoSQL), Amazon EBS is block storage rather than a managed database service, and Amazon S3 is object storage.
$19
Get all 713 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.