QUESTION 181
A company migrates to AWS and deploys an application to Amazon EC2 instances. The EC2 instances are over-provisioned. Average CPU utilization of the EC2 instances is 30%. The company wants to minimize expenses. Which solution will meet this requirement?

A. Move all workloads to a single medium instance to reduce management overhead.
B. Provision the highest performance instances for all workloads.
C. Rightsize the instances to match performance and capacity requirements.
D. Decouple the application into smaller, independent services.

Correct Answer: C

QUESTION 182
Which responsibility belongs to AWS according to the shared responsibility model?

A. Configuring user access policies
B. Encrypting client-side application data
C. Maintaining the physical security of AWS infrastructure
D. Configuring password policies for IAM users

Correct Answer: C

QUESTION 183
A company is setting up a web application to be hosted on Amazon EC2 instances. Which AWS service or feature is required to restrict access at the EC2 instance level?

A. Network ACLs
B. Security groups
C. AWS Shield
D. AWS WAF

Correct Answer: B

QUESTION 184
A company wants to connect workloads that run on AWS to workloads that run on premises. Which deployment model will meet this requirement?

A. Hybrid cloud
B. Private cloud
C. Cloud only
D. Community cloud

Correct Answer: A

QUESTION 185
What is the LEAST expensive AWS Support plan that includes infrastructure event management without additional cost?

A. AWS Business Support
B. AWS Enterprise Support
C. AWS Developer Support
D. AWS Basic Support

Correct Answer: B

QUESTION 186
A company needs to migrate a containerized application from an on-premises data center to an AWS managed container service. Which AWS service should the company use for the containerized application?

A. AWS AppSync
B. Amazon EC2
C. Amazon Lightsail
D. Amazon Elastic Kubernetes Service (Amazon EKS)

Correct Answer: D

QUESTION 187
A company plans to migrate its on-premises infrastructure to the AWS Cloud. Which statement describes the business value of this plan?

A. The company can make enterprise applications available on mobile devices automatically.
B. The company can adjust costs for a scalable system to match performance needs.
C. The company can eliminate the need to plan for high availability and disaster recovery.
D. The company can reconfigure modernized applications automatically.

Correct Answer: B

QUESTION 188
A company wants to automatically deploy and manage its AWS infrastructure by using a template to define resources. Which AWS service will meet these requirements?

A. Amazon CloudWatch
B. AWS CloudFormation
C. AWS CloudTrail
D. AWS Elastic Beanstalk

Correct Answer: B

QUESTION 189
Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?

A. Enable S3 Cross-Region Replication (CRR) on the S3 bucket.
B. Use IAM roles for applications that require access to the S3 bucket.
C. Configure AWS WAF to prevent unauthorized access to the S3 bucket.
D. Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.

Correct Answer: B

QUESTION 190
Which action can a company takes to enhance the security of its root user account?

A. Share the root credentials with developers.
B. Use the root user for administrative tasks.
C. Enable multi-factor authentication (MFA) on the root user account.
D. Remove the root user and use only IAM roles.

Correct Answer: C

QUESTION 191
A company wants to determine whether an Amazon Elastic Block Store (Amazon EBS) volume configuration is set up efficiently based on volume usage. Which AWS service will meet this requirement?

A. AWS Control Tower
B. AWS Compute Optimizer
C. AWS Service Catalog
D. AWS CloudTrail

Correct Answer: B

QUESTION 192
A company wants to detect unused user permissions across the company’s AWS environment. Which AWS service or feature will meet these requirements?

A. AWS Identity and Access Management Access Analyzer findings
B. AWS Organizations service control policies (SCPs)
C. AWS Config managed rules
D. AWS Trusted Advisor

Correct Answer: D

QUESTION 193
What is AWS responsible for according to the AWS shared responsibility model?

A. The management of customer data encryption
B. The physical security of data centers
C. The administration of password management policies
D. The security of hosted applications

Correct Answer: B

QUESTION 194
A company wants to build and deploy applications that will serve users from around the world. The applications must perform with singe-digit millisecond latency.Which AWS service or resource will meet these requirements?

A. AWS Direct Connect
B. AWS Global Accelerator
C. AWS Config
D. Security groups

Correct Answer: B

QUESTION 195
Which task requires a user to sign in as the AWS account root user?

A. The deletion of IAM users
B. The deletion of an AWS account
C. The creation of an organization in AWS Organizations
D. The deletion of Amazon EC2 instances

Correct Answer: B

QUESTION 196
Which AWS service uses edge locations to reduce application latency and improve application performance?
A. Amazon Route 53
B. AWS Direct Connect
C. Amazon Connect
D. Amazon CloudFront

Correct Answer: D

QUESTION 197
A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud. Which AWS service will meet these requirements?

A. Amazon Inspector
B. Amazon Macie
C. Amazon GuardDuty
D. AWS Audit Manager

Correct Answer: B

QUESTION 198
Which responsibilities do the customer and AWS share according to the AWS shared responsibility model?

A. Physical security for data centers
B. AWS Region availability
C. Data encryption at rest
D. Networking hardware maintenance

Correct Answer: C

QUESTION 199
Which VPC component provides a layer of security at the subnet level?

A. Security groups
B. Network ACLs
C. NAT gateways
D. Route tables

Correct Answer: B

QUESTION 200
Which of the following is a capability of the AWS Cloud?

A. Unlimited access to free resources across all AWS services
B. Automatic refunds for unused resources at the end of each billing cycle
C. A cost allocation strategy that aligns with business needs
D. Reduction of operational overhead by eliminating the need for a monitoring service

Correct Answer: C