Question 1

- (Topic 2)

A company migrated its core application onto multiple workloads in the AWS Cloud. The company wants to improve the application's reliability. Which cloud design principle should the company implement to achieve this goal?

Accepted Answer

Decoupling the components of an application means reducing the dependencies and interactions between them, which can improve the application's reliabil scalability, and performance. Decoupling can be achieved by using services such as Amazon Simple Queue Service (Amazon SQS), Amazon Simple Notification Service (Amazon SNS), and AWS Lambda1

Question 2

- (Topic 2)

Which tasks are the responsibility of AWS according to the AWS shared responsibility model? (Select TWO.)

Accepted Answer

The tasks that are the responsibility of AWS according to the AWS shared responsibility model are securing the access of physical AWS facilities and pe infrastructure patching and maintenance. The AWS shared responsibility model defines the division of responsibilities between AWS and the customer for s and compliance. AWS is responsible for the security of the cloud, which includes the physical security of the hardware, software, networking, and facili the AWS services. AWS is also responsible for the maintenance and patching of the infrastructure that supports the AWS services. The customer is respons the security in the cloud, which includes the configuration and management of the AWS resources and applications that they use. Configuring AWS Identity Access Management (IAM), configuring security groups on Amazon EC2 instances, and patching applications that run on Amazon EC2 instances are tasks that are the responsibility of the customer, not AWS.

Question 3

- (Topic 2)

A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud. Which AWS service should the company use to reduce management overhead for this environment?

Accepted Answer

Amazon Relational Database Service (Amazon RDS) is the AWS service that the company should use to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud. Amazon RDS is a fully managed service that provides a scalable, secure, and high-performance relational databa platform. Amazon RDS supports several database engines, including Microsoft SQL Server. Amazon RDS reduces the management overhead for the database environment by taking care of tasks such as provisioning, patching, backup, recovery, and monitoring. For more information, see What is Amazon Relationa Database Service (Amazon RDS)? and Amazon RDS for SQL Server.

Question 4

- (Topic 2)

A company is preparing to launch a redesigned website on AWS. Users from around the world will download digital handbooks from the website. Which AWS solution should the company use to provide these static files securely?

Accepted Answer

Amazon CloudFront with Amazon S3 is a solution that allows you to provide static files securely to users from around the world. Amazon CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer within a developer-friendly environment. Amazon S3 is an object storage service that offers industry-leading scalability, data availability, security, a You can use Amazon S3 to store and retrieve any amount of data from anywhere. You can also configure Amazon S3 to work with Amazon CloudFront to distribute your content to edge locations near your users for faster delivery and lower latency. Amazon Kinesis Data Streams is a service that enables y custom applications that process or analyze streaming data for specialized needs. This option is not relevant for providing static files securely. Amazo instances with an Application Load Balancer is a solution that allows you to distribute incoming traffic across multiple targets, such as EC2 instances, Availability Zones. This option is suitable for dynamic web applications, but not necessary for static files. Amazon Elastic File System (Amazon EFS) is

## Certshared now are offering 100% pass ensure AWS-Certified-Cloud-Practitioner dumps!

that provides a simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on- premises resources. This option is not r providing static files securely.

Question 5

- (Topic 2)

A company wants an in-memory data store that is compatible with open source in the cloud.

Which AWS service should the company use?

Accepted Answer

Amazon ElastiCache is a fully managed in-memory data store service that is compatible with open source engines such as Redis and Memcached1. It provide fast and scalable performance for applications that require high throughput and low latency1. Amazon DynamoDB is a fully managed NoSQL database service provides consistent and single-digit millisecond latency at any scale2. Amazon EBS is a block storage service that provides persistent and durable stora volumes for Amazon EC2 instances3. Amazon Redshift is a fully managed data warehouse service that allows users to run complex analytic queries using SQL

Question 6

- (Topic 1)

Which AWS service or tool does AWS Control Tower use to create resources?

Accepted Answer

AWS Control Tower uses AWS CloudFormation to create resources in your landing zone. AWS CloudFormation is a service that helps you model and set up you AWS resources using templates. AWS Control Tower supports creating AWS::ControlTower::EnabledControl resources in AWS CloudFormation. Therefore, the correct answer is A. You can learn more about AWS Control Tower and AWS CloudFormation from this page.

Question 7

- (Topic 1)

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

Accepted Answer

Resource elasticity is an AWS value proposition that describes a user's ability to scale infrastructure based on demand. Resource elasticity means that can provision or deprovision resources quickly and easily, without any upfront commitment or long-term contract. Resource elasticity can help the user o cost and performance of the application, as well as respond to changing business needs and customer expectations. Resource elasticity can be achieved by services such as Amazon EC2, Amazon S3, Amazon RDS, Amazon DynamoDB, Amazon ECS, and AWS Lambda. [AWS Cloud Value Framework] AWS Certified Cloud Practitioner - aws.amazon.com

Question 8

- (Topic 1)

A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.

Which AWS services can provide this information to the company? {Select TWO.)

Accepted Answer

AWS Trusted Advisor and AWS Compute Optimizer are the AWS services that can provide information to the company about whether its newly imported Amazon EC2 instances are the appropriate size and type. AWS Trusted Advisor is an online tool that provides best practices recommendations in five categories: optimization, performance, security, fault tolerance, and service limits. AWS Trusted Advisor can help users identify underutilized or idle EC2 instance suggest ways to reduce costs and improve performance. AWS Compute Optimizer is a service that analyzes the configuration and utilization metrics of EC2 instances and delivers recommendations for optimal instance types, sizes, and configurations. AWS Compute Optimizer helps users improve performance, red costs, and eliminate underutilized resources

NEW QUESTION 9

- (Topic 1)

A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.

Which AWS service or feature will meet this requirement?

- A. Routing tables
- B. Network access control lists (network ACLs)
- C. Security groups
- D. Amazon GuardDuty

- [ ] Answer: C

## Explanation:

Security groups are the service or feature that meets the requirement of establishing a security layer in a VPC that will act as a firewall to control Security groups are stateful firewalls that control the inbound and outbound traffic at the instance level. You can assign one or more security groups t instance in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. Security groups are associat network interfaces, and therefore apply to all the instances in the subnets that use those network interfaces. Routing tables are used to direct traffic subnets and gateways, not to filter traffic. Network ACLs are stateless firewalls that control the inbound and outbound traffic at the subnet level, but granular and more cumbersome to manage than security groups. Amazon GuardDuty is a threat detection service that monitors your AWS account and workloads for malicious or unauthorized activity, not a firewall service.

Question 9

- (Topic 1)

A cloud engineer needs to download AWS security and compliance documents for an upcoming audit. Which AWS service can provide the documents?

Accepted Answer

AWS Artifact is the AWS service that can provide security and compliance documents for an upcoming audit. AWS Artifact is a self-service portal that al to access and download AWS compliance reports and agreements. These documents provide evidence of AWS's compliance with global, regional, and industryspecific security standards and regulations

Question 10

- (Topic 1)

Which AWS service or tool provides users with the ability to monitor AWS service quotas?

Accepted Answer

The correct answer is C because AWS Trusted Advisor is an AWS service or tool that provides users with the ability to monitor AWS service quotas. AWS T Advisor is an online tool that provides users with real-time guidance to help them provision their resources following AWS best practices. One of the ca checks that AWS Trusted Advisor performs is service limits, which monitors the usage of each AWS service and alerts users when they are close to reachin default limit. The other options are incorrect because they are not AWS services or tools that provide users with the ability to monitor AWS service quo CloudTrail is a service that enables users to track user activity and API usage across their AWS account. AWS Cost and Usage Reports is a tool that enab users to access comprehensive information about their AWS costs and usage. AWS Budgets is a tool that enables users to plan their service usage, costs, reservations. Reference: [AWS Trusted Advisor FAQs]