You save $69.98
A customer wants automated account recommendations for security and cost best practices.
Which AWS concept, service, or approach best meets the need described?
Trusted Advisor evaluates selected account checks and is not the same as a complete security audit. For the described requirement, use AWS Trusted Advisor for eligible best-practice checks and recommendations.
Firewall Manager supports organization-level security-policy management for selected AWS protection services.
Inspector analyzes supported workloads for exposure and software vulnerabilities, not user login events.
AWS publishes security practices and service guidance through official documentation and blogs.
An operations team needs to simplify consistent access for employees in one job function.
Which observation would best confirm that the intended cloud outcome is being achieved?
IAM user groups let administrators attach permissions once for a collection of users.
Federation leverages an established identity provider to issue access without separate local passwords.
Secrets Manager is purpose-built for managing secret values instead of exposing credentials in source files.
STS role assumption permits controlled cross-account access without sharing long-lived access keys.
An in-memory application cache has a very large working set relative to computation demands.
Which observation would best confirm that the intended cloud outcome is being achieved?
Memory-optimized instance categories are designed for workloads needing substantial available RAM.
Fargate supplies the underlying capacity for containers used with supported ECS or EKS configurations.
A load balancer forwards requests to configured healthy application targets and supports availability.
Compute-optimized families provide a higher ratio of processing capacity for eligible CPU-bound tasks.
A sustainability program asks which Well-Architected pillar prioritizes reducing energy and resource waste.
Which observation would best confirm that the intended cloud outcome is being achieved?
Sustainability encourages efficient resource usage and avoiding unnecessary capacity and processing.
Cost optimization focuses on spending that delivers business value, including usage visibility and demand matching.
Reliability addresses fault recovery, capacity to meet demand, and resilient operation.
The security pillar focuses on protecting systems and data using appropriate identity and detection controls.
An application needs inbound rules that are stateful and attached to its EC2 instances.
Which observation would best confirm that the intended cloud outcome is being achieved?
Security groups are stateful controls associated with eligible network interfaces and resources.
Private subnets without direct internet routes help limit direct exposure of backend systems.
NAT gateways support outbound internet access through a public route while not providing unsolicited inbound initiation.
Direct Connect provides private dedicated connectivity rather than an ordinary public-internet VPN tunnel.
A cloud administrator needs a place to inspect service charges and billing statements.
Which AWS pricing, billing, or support approach best matches the requirement?
The AWS billing console provides cost and payment visibility rather than being a service deployment interface. For the described requirement, use the AWS Billing and Cost Management console for invoices and current account costs.
Cost allocation tags can group expenses in supported billing tools after appropriate activation.
AWS Budgets compares actual and forecast cost to budget thresholds and can notify stakeholders.
Cost Explorer supports cost and usage analysis and trends rather than provisioning resource changes.
An alerting app wants independent email and service consumers to receive a published event.
Which AWS concept, service, or approach best meets the need described?
SNS can distribute published messages to configured endpoints and subscribers. For the described requirement, use Amazon SNS for publish-subscribe notifications to multiple subscriptions.
EventBridge routes matching events from supported sources to configured destinations.
SQS stores messages for consumer processing and differs from a publish-subscribe notification topic.
Amazon Connect supports contact-center interactions and routing rather than bulk marketing email delivery.
A product team assumes a managed NoSQL service automatically selects the correct data retention policy.
Which AWS concept, service, or approach best meets the need described?
Managed database services reduce infrastructure work but do not determine the business sensitivity of stored records. For the described requirement, keep data classification and access authorization decisions with the customer for managed databases.
The model divides accountability rather than transferring all security decisions to one party.
AWS infrastructure availability does not transfer responsibility for defects in customer-owned business applications.
AWS operates physical infrastructure, whereas EC2 customer workloads retain OS and data responsibilities.
A cloud team wants to assign a centrally curated access policy from AWS rather than writing every statement itself.
Which AWS concept, service, or approach best meets the need described?
AWS managed policies are maintained by AWS; customer managed policies are created and governed by the customer. For the described requirement, use an AWS managed IAM policy where its permissions appropriately match the requirement.
Secrets Manager is purpose-built for managing secret values instead of exposing credentials in source files.
MFA adds a second authentication factor to protect against password-only compromise.
Root credentials are highly privileged and should not be shared or used for daily operational activities.
A manager wants a complete list of the Well-Architected pillars for a business architecture review.
Which AWS concept, service, or approach best meets the need described?
The pillars are operational excellence, security, reliability, performance efficiency, cost optimization and sustainability, not individual AWS services. For the described requirement, use the six Well-Architected pillars as cross-cutting architecture evaluation dimensions.
Performance efficiency concerns effective resource selection, adaptation and continued performance improvement.
The Framework is an ongoing design-assessment tool rather than a one-time certification of a deployment.
Selecting fit-for-purpose resources meets performance needs without automatically overprovisioning.
A compliance officer needs periodic control evidence across AWS environments rather than one static report.
Which AWS concept, service, or approach best meets the need described?
Audit Manager helps gather evidence against assessment controls but does not certify a customer's entire workload. For the described requirement, use AWS Audit Manager to collect supported evidence for customer audit assessments.
CloudTrail records supported API operations and identity context for audit and investigation.
Security Hub centralizes findings and security posture visibility instead of being a standalone packet firewall.
CloudWatch assesses metrics while notification integrations deliver the action signal to responders.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
