A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications.
Which AWS service will meet these requirements?
A. AWS Audit Manager
B. Amazon Cognito
C. AWS Security Hub
D. AWS IAM Identity Center (AWS Single Sign-On)
Show Answer
Correct Answer: D
Explanation: The requirement is to create workforce users and centrally manage their access across all AWS accounts and applications. AWS IAM Identity Center (formerly AWS Single Sign-On) is designed for workforce identity, providing centralized user management, single sign-on, and access control across multiple AWS accounts and integrated applications. Amazon Cognito is intended for customer or external application users, not workforce access management.
Question 323
A company wants to define a central data protection policy that works across AWS services for compute, storage, and database resources.
Which AWS service will meet this requirement?
A. AWS Batch
B. AWS Elastic Disaster Recovery
C. AWS Backup
D. Amazon FSx
Show Answer
Correct Answer: C
Explanation: AWS Backup provides a centralized, policy-based data protection service that works across AWS compute, storage, and database resources. It allows defining and enforcing backup policies, retention, lifecycle management, and monitoring in one place for services like EC2/EBS, RDS, DynamoDB, EFS, and more.
Question 324
A company is in the process of finding correct Amazon EC2 instance types and sizes to meet its performance and capacity requirements. The company wants to find the lowest possible cost.
Which option accurately characterizes the company's actions?
A. Auto Scaling
B. Storage tiering
C. Rightsizing
D. Instance scheduling
Show Answer
Correct Answer: C
Explanation: The action described—selecting the correct EC2 instance types and sizes to meet performance and capacity needs at the lowest possible cost—is known as rightsizing. Rightsizing focuses on matching resource capacity to actual workload requirements to avoid over-provisioning or underutilization, thereby optimizing costs.
Question 325
A company wants to migrate its on-premises NoSQL workload to Amazon DynamoDB.
Which AWS service will meet this requirement?
A. AWS Migration Hub
B. AWS Database Migration Service (AWS DMS)
C. Migration Evaluator
D. AWS Application Migration Service
Show Answer
Correct Answer: B
Explanation: AWS Database Migration Service (AWS DMS) is designed to migrate databases from on-premises or other environments to AWS. It supports migrating NoSQL databases and can use Amazon DynamoDB as a target, making it the appropriate service for moving an on‑premises NoSQL workload to DynamoDB.
Question 326
A company wants to use AWS Managed Services (AMS) for operational support and wants to understand the scope of AMS.
Which AMS feature will meet these requirements?
A. Landing zone and network management
B. Customer application development
C. DevSecOps pipeline configuration
D. Application log monitoring
Show Answer
Correct Answer: A
Explanation: AWS Managed Services (AMS) focuses on operating and managing AWS infrastructure on behalf of customers. Its core scope includes setting up and managing a secure landing zone, account governance, networking, security, compliance, and ongoing operational support. AMS does not provide customer application development, DevSecOps pipeline design, or application-level log analysis as primary features. Therefore, landing zone and network management best fits the AMS scope.
Question 327
Which AWS Cloud Adoption Framework (AWS CAF) capabilities belong to the governance perspective? (Choose two.)
A. Program and project management
B. Product management
C. Portfolio management
D. Risk management
E. Event management
Show Answer
Correct Answer: C, D
Explanation: In the AWS Cloud Adoption Framework, the Governance perspective focuses on ensuring effective oversight, value realization, and risk control. Its core capabilities include portfolio management and risk management, along with strategy management, investment and budgeting, and policy and compliance. Program and project management and event management belong to the Operations perspective, while product management aligns with the Business perspective.
Question 328
Which AWS Well-Architected Framework pillar focuses on structured and streamlined allocation of computing resources?
A. Reliability
B. Operational excellence
C. Performance efficiency
D. Sustainability
Show Answer
Correct Answer: C
Explanation: The Performance Efficiency pillar focuses on the efficient and optimized use of computing resources. It emphasizes selecting the right resource types and sizes, using elasticity, and continuously improving efficiency as demand and technology change, which directly aligns with structured and streamlined allocation of computing resources.
Question 329
A company needs to categorize and track AWS usage cost based on business categories.
Which AWS service or feature should the company use to meet these requirements?
A. Cost allocation tags
B. AWS Organizations
C. AWS Security Hub
D. AWS Cost and Usage Report
Show Answer
Correct Answer: A
Explanation: Cost allocation tags are specifically designed to categorize AWS resources using business-relevant labels (such as department, project, or cost center). Once activated, these tags allow AWS to track and report usage and costs by category, enabling accurate cost allocation and analysis across the organization.
Question 330
A company wants to use machine learning capabilities to analyze log data from its Amazon EC2 instances and efficiently conduct security investigations.
Which AWS service will meet these requirements?
A. Amazon Inspector
B. Amazon QuickSight
C. Amazon Detective - D Amazon GuardDuty
Show Answer
Correct Answer: C
Explanation: The requirement is to analyze log data from EC2 instances and efficiently conduct security investigations using machine learning. Amazon Detective is designed specifically for security investigations: it automatically collects log data from sources such as VPC Flow Logs, AWS CloudTrail, and GuardDuty findings, and applies machine learning, statistical analysis, and graph theory to help analyze activity and determine root cause. GuardDuty focuses on threat detection and alerting, not investigation. Therefore, Amazon Detective best meets the requirements.
Question 331
A company is launching a mobile app in the AWS Cloud. The company wants the app's users to sign in through social media identity providers (IdPs).
Which AWS service will meet this requirement?
A. AWS Lambda
B. Amazon Cognito
C. AWS Secrets Manager
D. Amazon CloudFront
Show Answer
Correct Answer: B
Explanation: Amazon Cognito is designed to handle authentication and user management for mobile and web applications. It natively supports federated sign-in with social identity providers such as Facebook, Google, and Amazon, as well as enterprise IdPs via SAML or OIDC. The other options do not provide end-user authentication with social media providers.
$19
Get all 715 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.