According to the AWS shared responsibility model, which task is the customer's responsibility?
A. Maintaining the infrastructure needed to run AWS Lambda
B. Updating the operating system of Amazon DynamoDB instances
C. Maintaining Amazon S3 infrastructure
D. Updating the guest operating system on Amazon EC2 instances
Show Answer
Correct Answer: D
Explanation: Under the AWS shared responsibility model, AWS manages the underlying infrastructure and managed services, while customers are responsible for what runs inside their EC2 instances. This includes installing, patching, and updating the guest operating system on Amazon EC2. The other options describe responsibilities that remain with AWS, such as maintaining Lambda, DynamoDB, and S3 infrastructure.
Question 243
A company is building a new application on AWS. The company needs the application to remain available if an individual application component fails.
Which design principle should the company use to meet this requirement?
A. Disposable resources
B. Automation
C. Rightsizing
D. Loose coupling
Show Answer
Correct Answer: D
Explanation: The requirement is that the application remains available when an individual component fails. Designing with loose coupling ensures that components are independent, so a failure in one does not cascade to others. This improves fault tolerance and availability. The other options (disposable resources, automation, rightsizing) support operational efficiency or cost optimization but do not directly address isolation of failures between components.
Question 244
A company wants to design its cloud architecture so that it can support development innovations, and continuously improve processes and procedures.
This is an example of which pillar of the AWS Well-Architected Framework?
A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability
Show Answer
Correct Answer: C
Explanation: The Operational Excellence pillar focuses on supporting development and innovation, performing operations as code, and continuously improving processes and procedures. The keywords in the question—"support development innovations" and "continuously improve processes and procedures"—directly align with this pillar.
Question 245
A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use.
Which AWS feature or service will meet this requirement?
A. AWS Cost and Usage Reports
B. IAM credential reports
C. Detailed Billing Reports - D AWS Cost Explorer reports
Show Answer
Correct Answer: B
Explanation: IAM credential reports provide account-wide information about all IAM users, including whether they have MFA devices enabled, the type of MFA, and credential status. This directly satisfies the requirement to list MFA status for all users. The other options are billing or cost-related services and do not report on IAM security credentials.
Question 246
Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?
A. Amazon FSx for Lustre
B. AWS Storage Gateway volume gateway
C. AWS Storage Gateway file gateway
D. Amazon Elastic File System (Amazon EFS)
Show Answer
Correct Answer: C
Explanation: The requirement is to use file protocols such as NFS to store and retrieve objects directly in Amazon S3. AWS Storage Gateway **file gateway** is specifically designed for this purpose: it presents an NFS (or SMB) file interface while storing data as objects in S3.
Amazon FSx for Lustre can integrate with S3, but it is a high‑performance file system for HPC workloads and does not act as a general gateway that exposes S3 as NFS storage. Amazon EFS is a native file system, not object storage, and the Storage Gateway volume gateway exposes block storage, not object access. Therefore, the correct answer is C.
Question 247
A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy, manage, and decommission AWS resources.
Which AWS service will meet these requirements?
A. Amazon CloudWatch
B. AWS Service Catalog
C. Amazon GuardDuty
D. AWS Security Hub
Show Answer
Correct Answer: B
Explanation: AWS Service Catalog is a centralized governance service that allows organizations to define approved products, configurations, and lifecycle rules. It controls who can deploy, manage, and decommission AWS resources while enforcing organizational standards and compliance. The other options focus on monitoring or security findings rather than resource governance.
Question 248
A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet.
Which AWS service or feature can the company use to meet these requirements?
A. Network ACL
B. AWS WAF
C. Route table
D. Security group
Show Answer
Correct Answer: D
Explanation: A security group is an instance-level virtual firewall that controls inbound and outbound traffic for a specific EC2 instance. It does not affect other instances in the same subnet, unlike network ACLs which operate at the subnet level. AWS WAF applies to web applications, and route tables control routing, not firewall rules.
Question 249
A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud.
Which of the following are benefits of building this app in the AWS Cloud? (Choose two.)
A. A large, upfront capital expense and low variable expenses
B. Increased speed for trying out new projects
C. Complete control over the physical security of the infrastructure
D. Flexibility to scale up in minutes as the application becomes popular
E. Ability to pick the specific data centers that will host the application servers
Show Answer
Correct Answer: B, D
Explanation: Building in the AWS Cloud provides faster experimentation and innovation because resources can be provisioned quickly without long procurement cycles (B). It also offers elastic scalability, allowing the application to scale up or down in minutes as demand changes (D). The other options describe on‑premises characteristics (A, C) or are incorrect because customers do not choose exact AWS data centers, only regions and availability zones (E).
Question 250
A systems administrator wants to monitor the CPU utilization of a company's Amazon EC2 instances.
Which AWS service can provide this information?
A. AWS Config
B. AWS Trusted Advisor
C. AWS CloudTrail
D. Amazon CloudWatch
Show Answer
Correct Answer: D
Explanation: Amazon CloudWatch provides monitoring and observability for AWS resources, including real-time and historical CPU utilization metrics for Amazon EC2 instances. The other services do not provide performance monitoring metrics.
Question 251
A user wants to invoke an AWS Lambda function when an Amazon EC2 instance enters the “stopping” state.
Which AWS service is appropriate for this use case?
A. Amazon EventBridge
B. AWS Config
C. Amazon Simple Notification Service (Amazon SNS)
D. AWS CloudFormation
Show Answer
Correct Answer: A
Explanation: Amazon EventBridge can listen to EC2 state-change events, such as an instance entering the "stopping" state, and trigger targets like AWS Lambda functions. It is specifically designed for event-driven architectures and integrates natively with EC2 and Lambda. AWS Config tracks configuration changes, SNS is for message notifications without native EC2 state rules, and CloudFormation is for infrastructure provisioning, not runtime events.
$19
Get all 715 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.