QUESTION 121
Which AWS service provides an automated security assessment of applications deployed on AWS?

A. AWS Shield
B. AWS Identity and Access Management (IAM)
C. AWS CloudTrail
D. Amazon Inspector

Correct Answer: D

QUESTION 122
Which AWS service or feature constantly inspects an AWS environment and provides recommendations to improve system availability and performance, and to reduce costs?

A. Amazon GuardDuty
B. AWS Config
C. AWS Trusted Advisor
D. AWS well-Architected Reviews

Correct Answer: C

QUESTION 123
Which type of policy is used to deny or allow access to all users in AWS Organizations?

A. An IAM inline policy
B. An Amazon S3 bucket policy
C. A service control policy (SCP)
D. A resource-based policy

Correct Answer: C

QUESTION 124
What is AWS responsible for according to the AWS shared responsibility model? (Select TWO.)

A. Client-side data encryption
B. Amazon EC2 guest operating systems
C. The compute infrastructure
D. Availability Zones
E. Customer data

Correct Answer: CD

QUESTION 125
A company must keep records of all resource changes that are made through the AWS Management Console and AWS APls. Which AWS service should the company use to meet this requirement?

A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS X-Ray
D. Amazon Inspector

Correct Answer: B

QUESTION 126
Which AWS service uses global edge locations?

A. AWS Fargate
B. Amazon CloudFront
C. AWS Outposts
D. Amazon VPC

Correct Answer: B

QUESTION 127
An AWS user wants to validate when tag keys are missing from AWS resources. Which service will meet this requirement?

A. AWS Security Hub
B. Amazon Macie
C. AWS CloudTrail
D. AWS Cost Explorer

Correct Answer: A

QUESTION 128
A company wants to use an Amazon EC2 instance that has a pre-installed third-party firewall. Which AWS service or feature can provide this solution?

A. Security groups
B. AWS Marketplace
C. AWS Systems Manager
D. AWS Certificate Manager (ACM)

Correct Answer: B

QUESTION 129
A company runs an uninterruptible Amazon EC2 workload on AWS 24 hours a day, 7 days a week. The company will require the same instance family and instance type to run the workdoad for the next 12 months. Which combination of purchasing options should the company choose to MOST optimize costs? (Select TWO.)

A. Standard Reserved Instance
B. Convertible Reserved Instance
C. Compute Savings Plan
D. Spot Instance
E. All Upfront payment

Correct Answer: AE

QUESTION 130
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?

A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership

Correct Answer: C

QUESTION 131
A company wants to detect potential security threats and unauthorized behavior in the company’s AWS environment.Which AWS service will meet these requirements?

A. AWS Identity and Access Management (IAM)
B. Amazon GuardDuty
C. AWS Key Management Service (AWS KMS)
D. AWS Certificate Manager (ACM)

Correct Answer: B

QUESTION 132
A company needs to migrate terabytes of data to AWS from a location that does not have internet connectivity.Which AWS service will meet this requirement?

A. AWS Database Migration Service (AWS DMS)
B. AWS Snowball
C. AWS Direct Connect
D. AWS Global Accelerator

Correct Answer: B

QUESTION 133
A company is planning to migrate its workloads to AWS. The company wants step-by-step guidance for how to plan and track workload migration.l Which AWS solution will meet this requirement?

A. AWS Application Migration Service
B. AWS Systems Manager
C. AWS Migration Hub Journeys
D. AWS CloudFormation

Correct Answer: C

QUESTION 134
Companies that manage variable workloads benefit from elasticity on AWS. Which statement explains this benefit?

A. Applications run slower during low-traffic periods
B. Companies must manually provision resources.
C. Companies can automatically scale resources up or down to meet demand
D. Companies pay for maximum capacity at all times.

Correct Answer: C

QUESTION 135
Which cost-effective benefit do users gain when they run applications on AWS?

A. The ability to scale capacity up and down as needed.
B. The ability to use AWS Support to develop and manage application code.
C. The option to provision large resources to handle traffic increases.
D. The option to make long-term contractual commitments to rent hardware.

Correct Answer: A

QUESTION 136
A company runs its workdoads on premises. The company wants to compare the cost of running its workloads on premises with the cost of running the workloads on AWS.Which AWS service will meet this requirement?

A. AWS Cost Explorer
B. AWS Budgets
C. AWS Pricing Calculator
D. AWS Trusted Advisor

Correct Answer: C

QUESTION 137
A company has Amazon Elastic Block Store (EBS) volumes with low utilization. The company wants to receive recommendations for reducing costs through rightsizing.Which AWS service will meet this requirement?

A. AWS CloudTrail
B. AWS Cost Explorer
C. AWS Config
D. AWS Compute Optimizer

Correct Answer: D

QUESTION 138
How does AWS Cloud computing help businesses reduce costs? (Select TWO.)

A. AWS charges the same prices for services in every AWS Region.
B. AWS enables capacity to be adjusted on demand.
C. AWS offers discounts for Amazon EC2 instances that remain idle for more than 1 week.
D. AWS does not charge for data sent from the AWS Cloud to the internet.
E. AWS eliminates many of the costs of building and maintaining on-premises data centers.

Correct Answer: BE

QUESTION 139
A company needs to process large amounts of data without managing infrastructure. Which AWS service will meet these requirements?

A. Amazon EC2
B. Amazon WorkSpaces
C. AWS Batch
D. Amazon RDS

Correct Answer: C

QUESTION 140
A company wants to migrate a monolithic application to the AWS Cloud. The company wants to rewrite the application into microservices. Which migration strategy will meet these requirements?

A. Rehost
B. Replatform
C. Refactor
D. Repurchase

Correct Answer: C