A company wants to visualize and manage AWS Cloud costs and usage for a specific period of time.
Which AWS service or feature will meet these requirements?
A. Cost Explorer
B. Consolidated billing
C. AWS Organizations
D. AWS Budgets
Show Answer
Correct Answer: A
Explanation: AWS Cost Explorer is the AWS service specifically designed to visualize, analyze, and manage AWS costs and usage over custom time periods. It provides charts, filtering, historical trends, and forecasting. AWS Budgets is for setting and tracking budget thresholds, while Consolidated Billing and AWS Organizations are for account management and aggregated billing rather than cost visualization.
Question 213
A company wants to transfer a virtual Windows Server 2022 that is currently running in its own data center to AWS. The company wants to automatically convert the existing server to run directly on AWS infrastructure instead of visualized hardware.
Which AWS service will meet these requirements?
A. AWS DataSync
B. AWS Database Migration Service (AWS DMS)
C. AWS Application Discovery Service
D. AWS Application Migration Service
Show Answer
Correct Answer: D
Explanation: AWS Application Migration Service (MGN) is designed to migrate physical or virtual servers from on-premises environments to AWS. It performs automated lift-and-shift server migration, converting the source server to run natively on AWS infrastructure as Amazon EC2 instances. AWS DataSync transfers data, AWS DMS migrates databases, and Application Discovery Service inventories and assesses on-premises environments rather than performing the migration.
Question 214
A company hosts a web application on AWS. The company has improved the availability of its application by provisioning multiple Amazon EC2 instances. The company wants to distribute its traffic across the EC2 instances while providing a single point of contact to the web clients.
Which AWS service can distribute the traffic to multiple EC2 instances as targets?
A. VPC endpoints
B. Application Load Balancer
C. NAT gateway
D. Internet gateway
Show Answer
Correct Answer: B
Explanation: An Application Load Balancer (ALB) distributes incoming HTTP/HTTPS traffic across multiple EC2 instances (targets) and provides a single endpoint for clients. VPC endpoints provide private connectivity to AWS services, a NAT gateway enables outbound internet access for private subnets, and an internet gateway connects a VPC to the internet but does not balance traffic.
Question 215
An administrator observed that multiple AWS resources were deleted yesterday.
Which AWS service will help identify the cause and determine which user deleted the resources?
A. AWS CloudTrail
B. Amazon Inspector
C. Amazon GuardDuty
D. AWS Trusted Advisor
Show Answer
Correct Answer: A
Explanation: AWS CloudTrail records AWS API activity and management events, including resource deletions, the identity (IAM user/role) that made the request, the time of the action, and related request details. This audit trail is used to determine who deleted resources and investigate the cause. Amazon Inspector assesses vulnerabilities, GuardDuty detects threats, and Trusted Advisor provides best-practice recommendations.
Question 216
A company wants to continuously improve processes and procedures to deliver business value.
Which pillar of the AWS Well-Architected Framework does this goal represent?
A. Performance efficiency
B. Operational excellence
C. Reliability
D. Sustainability
Show Answer
Correct Answer: B
Explanation: The AWS Well-Architected Framework's Operational Excellence pillar focuses on continuously improving processes and procedures, learning from operations, and delivering business value through ongoing refinement and automation.
Question 217
Which component must be attached to a VPC to enable inbound internet access?
A. NAT gateway
B. VPC endpoint
C. VPN connection
D. Internet gateway
Show Answer
Correct Answer: D
Explanation: An Internet Gateway (IGW) must be attached to a VPC to allow traffic between the VPC and the public internet. For inbound internet access, the VPC needs an attached IGW, appropriate route table entries, and security rules permitting the traffic. A NAT Gateway provides outbound internet access for private subnets, VPC endpoints provide private access to AWS services, and a VPN connection connects to on-premises networks rather than the public internet.
Question 218
An independent software vendor wants to deliver and share its custom Amazon Machine Images (AMIs) to prospective customers.
Which AWS service will meet these requirements?
A. AWS Marketplace
B. AWS Data Exchange
C. Amazon EC2
D. AWS Organizations
Show Answer
Correct Answer: A
Explanation: AWS Marketplace is the AWS service that independent software vendors use to distribute, share, and sell software products, including custom Amazon Machine Images (AMIs), to AWS customers. AWS Data Exchange is for data products, Amazon EC2 is the compute service that uses AMIs but is not a distribution marketplace, and AWS Organizations manages multiple AWS accounts.
Question 219
A company wants an Amazon S3 solution that provides access to object storage within single-digit milliseconds.
Which solution will meet these requirements?
A. S3 Express One Zone
B. S3 Standard
C. S3 Glacier Flexible Retrieval
D. S3 Glacier Instant Retrieval
Show Answer
Correct Answer: A
Explanation: Amazon S3 Express One Zone is specifically designed for latency-sensitive workloads and is purpose-built to provide consistent single-digit millisecond data access. While S3 Standard offers low-latency access, the explicit requirement for single-digit millisecond access aligns with S3 Express One Zone. Glacier Flexible Retrieval is archival storage with slow retrieval, and Glacier Instant Retrieval is for archive use cases rather than highest-performance object access.
Question 220
A company needs to convert video files and audio files to a format that will play on smartphones.
Which AWS service will meet this requirement?
A. Amazon Comprehend
B. Amazon Rekognition
C. Amazon Elastic Transcoder
D. Amazon Polly
Show Answer
Correct Answer: C
Explanation: Amazon Elastic Transcoder is the AWS service designed to convert (transcode) video and audio files stored in Amazon S3 into formats optimized for playback on devices such as smartphones, tablets, and web browsers. The other options provide natural language processing (Comprehend), image/video analysis (Rekognition), and text-to-speech (Polly).
Question 221
A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week.
Which solution will meet these requirements?
A. AWS Direct Connect
B. Amazon VPC
C. AWS Site-to-Site VPN
D. Edge location
Show Answer
Correct Answer: C
Explanation: AWS Site-to-Site VPN provides a secure IPSec connection from an on-premises network to AWS and can typically be provisioned quickly, often within days or less. AWS Direct Connect usually requires longer lead times for circuit provisioning. Amazon VPC is a networking construct, not an on-premises connectivity solution, and an Edge Location is used for services like CloudFront, not private network connectivity.
$19
Get all 713 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.