You save $69.98
A compliance officer needs periodic control evidence across AWS environments rather than one static report.
Which AWS concept, service, or approach best meets the need described?
Audit Manager helps gather evidence against assessment controls but does not certify a customer's entire workload. For the described requirement, use AWS Audit Manager to collect supported evidence for customer audit assessments.
CloudTrail records supported API operations and identity context for audit and investigation.
Security Hub centralizes findings and security posture visibility instead of being a standalone packet firewall.
CloudWatch assesses metrics while notification integrations deliver the action signal to responders.
A service owner asks what identity feature determines whether a resource request is authorized.
Which observation would best confirm that the intended cloud outcome is being achieved?
Sign-in success is not sufficient; identity and resource policies and explicit denies influence authorization.
STS role assumption permits controlled cross-account access without sharing long-lived access keys.
Federation leverages an established identity provider to issue access without separate local passwords.
Root credentials are highly privileged and should not be shared or used for daily operational activities.
A regulated organization wants to compare its control requirements against AWS compliance evidence.
Which observation would best confirm that the intended cloud outcome is being achieved?
Compliance frameworks impose customer-specific obligations even if AWS has underlying security certifications.
Inspector identifies vulnerabilities and related exposure in supported compute resources.
AWS Config records supported resource configurations and evaluates them against configured compliance rules.
CloudWatch assesses metrics while notification integrations deliver the action signal to responders.
An engineering group wants cloud infrastructure definitions reviewed as text in version control.
Which observation would best confirm that the intended cloud outcome is being achieved?
CloudFormation describes AWS resources declaratively and supports repeatable stack deployment.
AWS SDKs provide language-specific clients for application interactions with AWS APIs.
AWS CLI provides a command-based interface to AWS APIs and supports repeatable workflows.
Hybrid deployments combine local infrastructure with cloud services instead of requiring full relocation.
A product manager asks which AWS service handles conversational intents for an application.
Which observation would best confirm that the intended cloud outcome is being achieved?
Lex provides bot-building features including speech and natural-language intent processing.
QuickSight provides managed visualization and analytical dashboard capabilities.
Athena supports serverless interactive SQL analysis of data stored in S3.
SageMaker AI provides managed capabilities for training and hosting ML models.
A developer needs guidance on storing credentials safely rather than embedding them in code repositories.
Which observation would best confirm that the intended cloud outcome is being achieved?
Secrets Manager is purpose-built for managing secret values instead of exposing credentials in source files.
STS role assumption permits controlled cross-account access without sharing long-lived access keys.
Unused permanent keys expand the credential attack surface without supporting an active business function.
AWS managed policies are maintained by AWS; customer managed policies are created and governed by the customer.
A business discovers an obsolete application with no owner or remaining users during migration discovery.
Which observation would best confirm that the intended cloud outcome is being achieved?
Application retirement eliminates the maintenance and migration burden for systems no longer needed.
Replatforming changes selected platform components while retaining the application's fundamental design.
AWS CAF addresses broader transformation readiness and governance instead of only transferring virtual machines.
Early portfolio and dependency discovery reduces unplanned migration sequencing and operational disruption.
A company needs to route business events from AWS services and SaaS sources according to rules.
Which AWS concept, service, or approach best meets the need described?
EventBridge routes matching events from supported sources to configured destinations. For the described requirement, use Amazon EventBridge for rule-based event routing to selected targets.
SNS can distribute published messages to configured endpoints and subscribers.
Amazon SES supports sending emails and is distinct from contact-center voice workflows.
Amazon Connect supports contact-center interactions and routing rather than bulk marketing email delivery.
A cloud administrator needs a place to inspect service charges and billing statements.
Which observation would best confirm that the intended cloud outcome is being achieved?
The AWS billing console provides cost and payment visibility rather than being a service deployment interface.
Cost and Usage reports provide granular cost and usage data for analysis rather than a simple monthly invoice summary.
Pricing Calculator models estimated charges for configured usage assumptions before deployment.
Consolidated billing enables central management of multiple account bills and eligible shared pricing benefits.
A business wants an alternative to an internet-based encrypted tunnel for its long-term hybrid network link.
Which AWS concept, service, or approach best meets the need described?
Direct Connect provides private dedicated connectivity rather than an ordinary public-internet VPN tunnel. For the described requirement, use AWS Direct Connect for a dedicated connection to AWS where available.
Network ACLs evaluate inbound and outbound subnet traffic independently and are stateless.
Private subnets without direct internet routes help limit direct exposure of backend systems.
AWS VPN establishes encrypted tunnels between customer networks and AWS network endpoints.
An organization wants to cut cost by consolidating lightly used physical machines into flexible cloud resources.
Which observation would best confirm that the intended cloud outcome is being achieved?
Shared infrastructure can avoid some overprovisioning associated with dedicated underused local equipment.
License ownership and eligible product rules determine whether a bring-your-own-license option is suitable.
Discounted commitment models may reduce eligible usage rates while increasing obligations when demand changes.
Cloud choices vary in who manages software, patching and operations, affecting labor and maintenance cost.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
