You save $69.98
A company wants to grant many employees the same set of IAM permissions without attaching copies individually.
Which AWS concept, service, or approach best meets the need described?
IAM user groups let administrators attach permissions once for a collection of users. For the described requirement, use an IAM user group to manage shared permissions for IAM users.
MFA adds a second authentication factor to protect against password-only compromise.
Secrets Manager is purpose-built for managing secret values instead of exposing credentials in source files.
IAM policies express permitted actions on supported resources; broad wildcard privileges are usually unnecessary.
A team wants authorized service requests to run in a repeatable application automation pipeline.
Which AWS concept, service, or approach best meets the need described?
AWS APIs can be called by scripts and tools to standardize supported tasks at scale. For the described requirement, choose programmatic APIs for repeatable cloud-service workflows.
AWS SDKs provide language-specific clients for application interactions with AWS APIs.
Hybrid deployments combine local infrastructure with cloud services instead of requiring full relocation.
CloudFormation describes AWS resources declaratively and supports repeatable stack deployment.
A team wants a framework pillar for eliminating unnecessary cloud spend while preserving required outcomes.
Which AWS concept, service, or approach best meets the need described?
Cost optimization focuses on spending that delivers business value, including usage visibility and demand matching. For the described requirement, use the cost optimization pillar to examine expenditures and avoid waste.
Security addresses protection from unauthorized access; reliability concerns continuing and recovering service delivery.
The Framework is an ongoing design-assessment tool rather than a one-time certification of a deployment.
The pillars are operational excellence, security, reliability, performance efficiency, cost optimization and sustainability, not individual AWS services.
A team wants a managed relational database for transactions and SQL queries.
Which observation would best confirm that the intended cloud outcome is being achieved?
Amazon RDS operates supported relational databases with managed infrastructure and routine platform tasks.
DynamoDB is a managed NoSQL database suited to key-based access and flexible item structures.
Amazon Redshift is designed for analytics and warehouse workloads rather than conventional app transactions.
ElastiCache supports low-latency in-memory access and can reduce load on a persistent system of record.
A company asks how AWS protects its applications against common volumetric DDoS attacks.
Which AWS concept, service, or approach best meets the need described?
AWS Shield is specifically designed for DDoS defenses; it is not the primary identity authorization service. For the described requirement, use AWS Shield capabilities for network and application DDoS protection.
AWS WAF evaluates layer-7 web requests using rules instead of replacing VPC network routing.
Security Hub centralizes findings and security posture visibility instead of being a standalone packet firewall.
Audit Manager helps gather evidence against assessment controls but does not certify a customer's entire workload.
A company needs an external identity to access an AWS role for a bounded period.
Which AWS concept, service, or approach best meets the need described?
STS role assumption permits controlled cross-account access without sharing long-lived access keys. For the described requirement, use an appropriately trusted cross-account IAM role and temporary credentials.
IAM roles supply temporary credentials for authorized workloads and avoid hard-coded long-term keys.
Unused permanent keys expand the credential attack surface without supporting an active business function.
Root credentials are highly privileged and should not be shared or used for daily operational activities.
A retail site needs to reduce repeated primary-database reads for frequently accessed product data.
Which AWS concept, service, or approach best meets the need described?
ElastiCache supports low-latency in-memory access and can reduce load on a persistent system of record. For the described requirement, use Amazon ElastiCache as a managed in-memory caching layer.
AWS SCT helps assess and convert database schema objects during migration between different engines.
Aurora is AWS's managed relational engine designed for cloud operation and supported compatibility.
AWS DMS assists database replication and migration between supported sources and targets.
A retailer stores confidential documents in an Amazon S3 bucket and assumes AWS chooses who can read them.
Which observation would best confirm that the intended cloud outcome is being achieved?
AWS secures the service infrastructure while customers control authorization and exposure of their S3 objects.
AWS infrastructure availability does not transfer responsibility for defects in customer-owned business applications.
The service provider operates the network infrastructure but customers determine network access rules for workloads.
AWS operates physical infrastructure, whereas EC2 customer workloads retain OS and data responsibilities.
An IT team needs centrally managed backup schedules across several supported AWS services.
Which AWS concept, service, or approach best meets the need described?
AWS Backup centralizes backup configuration for supported AWS resource types. For the described requirement, use AWS Backup to manage supported service backups and retention plans.
FSx for Windows File Server is a managed file option for Windows-compatible shared access.
S3 archival classes trade access characteristics for lower storage costs on eligible archived data.
Instance store is physically attached ephemeral storage and must not hold data requiring persistence through host loss.
A database hosted on EC2 requires attachable block storage that persists independently of an instance stop.
Which AWS concept, service, or approach best meets the need described?
EBS supplies block volumes for compatible EC2 instances rather than shared internet-facing object buckets. For the described requirement, use Amazon EBS for persistent EC2-attached block storage.
S3 archival classes trade access characteristics for lower storage costs on eligible archived data.
FSx for Windows File Server is a managed file option for Windows-compatible shared access.
S3 stores objects in buckets and is not mounted like an ordinary instance block device.
An application must continue serving requests despite failure of an individual instance or location.
Which AWS concept, service, or approach best meets the need described?
Reliability addresses fault recovery, capacity to meet demand, and resilient operation. For the described requirement, use the reliability pillar to design recovery and consistent service availability.
Security addresses protection from unauthorized access; reliability concerns continuing and recovering service delivery.
The Framework is an ongoing design-assessment tool rather than a one-time certification of a deployment.
Cost optimization focuses on spending that delivers business value, including usage visibility and demand matching.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
