You save $69.98
A small team wants managed runtime capacity for its containers rather than operating a worker-node fleet.
Which observation would best confirm that the intended cloud outcome is being achieved?
Fargate supplies the underlying capacity for containers used with supported ECS or EKS configurations.
Lambda executes functions on demand and manages underlying compute for the customer.
Memory-optimized instance categories are designed for workloads needing substantial available RAM.
Auto Scaling can increase and decrease EC2 instance count based on configured policies and signals.
A developer wants AWS-managed data streaming for application clickstream events.
Which observation would best confirm that the intended cloud outcome is being achieved?
Kinesis provides streaming-data services rather than a long-term relational warehouse.
Athena supports serverless interactive SQL analysis of data stored in S3.
Lex provides bot-building features including speech and natural-language intent processing.
SageMaker AI provides managed capabilities for training and hosting ML models.
A user can sign in successfully but receives AccessDenied for a needed S3 action.
Which AWS concept, service, or approach best meets the need described?
Sign-in success is not sufficient; identity and resource policies and explicit denies influence authorization. For the described requirement, review the IAM policy and applicable authorization controls for the requested action.
MFA adds a second authentication factor to protect against password-only compromise.
Authentication establishes who the principal is; authorization evaluates what the principal may do.
Role separation prevents business users from inheriting broad resource modification permissions.
A trainee wants to distinguish subnet network ACLs from stateful instance security groups.
Which AWS concept, service, or approach best meets the need described?
Network ACLs evaluate inbound and outbound subnet traffic independently and are stateless. For the described requirement, use VPC network ACL rules for stateless subnet-level traffic controls.
AWS VPN establishes encrypted tunnels between customer networks and AWS network endpoints.
A VPC contains configured networking components such as subnets, routes and gateways.
Direct Connect provides private dedicated connectivity rather than an ordinary public-internet VPN tunnel.
A service owner asks what identity feature determines whether a resource request is authorized.
Which AWS concept, service, or approach best meets the need described?
Sign-in success is not sufficient; identity and resource policies and explicit denies influence authorization. For the described requirement, review the IAM policy and applicable authorization controls for the requested action.
Identity Center manages workforce assignments and federation rather than sharing static IAM user credentials.
MFA adds a second authentication factor to protect against password-only compromise.
Role separation prevents business users from inheriting broad resource modification permissions.
A small team wants managed runtime capacity for its containers rather than operating a worker-node fleet.
Which AWS concept, service, or approach best meets the need described?
Fargate supplies the underlying capacity for containers used with supported ECS or EKS configurations. For the described requirement, choose AWS Fargate as serverless compute capacity for supported containers.
EC2 provides virtual machine capacity while the customer manages the installed operating system and applications.
Auto Scaling can increase and decrease EC2 instance count based on configured policies and signals.
Memory-optimized instance categories are designed for workloads needing substantial available RAM.
A business lacks current incentives and approvals for cloud change and asks about readiness before migration.
Which observation would best confirm that the intended cloud outcome is being achieved?
AWS CAF considers business risk, efficiency, revenue opportunity and broader transformation outcomes.
AWS DMS helps move databases and replicate changes rather than serving as a general file-transfer service.
Application retirement eliminates the maintenance and migration burden for systems no longer needed.
AWS Snowball supports bulk data movement using shipped devices for constrained-network migration cases.
A retailer stores confidential documents in an Amazon S3 bucket and assumes AWS chooses who can read them.
Which AWS concept, service, or approach best meets the need described?
AWS secures the service infrastructure while customers control authorization and exposure of their S3 objects. For the described requirement, assign S3 data access controls and bucket permission configuration to the customer.
Customer OS patching is greater for EC2 than Lambda, while code and data responsibilities remain with the customer.
AWS certification of infrastructure does not automatically make customer configurations or data practices compliant.
Managed database services reduce infrastructure work but do not determine the business sensitivity of stored records.
A finance team needs to inspect historic spending by service and identify a rising cost trend.
Which observation would best confirm that the intended cloud outcome is being achieved?
Cost Explorer supports cost and usage analysis and trends rather than provisioning resource changes.
Cost allocation tags can group expenses in supported billing tools after appropriate activation.
Cost and Usage reports provide granular cost and usage data for analysis rather than a simple monthly invoice summary.
AWS Budgets compares actual and forecast cost to budget thresholds and can notify stakeholders.
A finance team has predictable hourly spending but expects to change instance families over time.
Which observation would best confirm that the intended cloud outcome is being achieved?
Savings Plans trade a spend commitment for discounted eligible compute usage and differ in flexibility by plan type.
On-Demand billing allows eligible EC2 capacity without an upfront duration commitment, though its unit price may be higher.
Data leaving AWS can incur transfer charges based on service and path, while ordinary ingress pricing often differs.
Capacity Reservations address eligible instance-capacity availability rather than inherently reducing the cost of the instances.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
