You save $69.98
An application uses a third-party integration that asks for its AWS access key in plain text.
Which observation would best confirm that the intended cloud outcome is being achieved?
Secrets Manager is purpose-built for managing secret values instead of exposing credentials in source files.
IAM user groups let administrators attach permissions once for a collection of users.
IAM roles supply temporary credentials for authorized workloads and avoid hard-coded long-term keys.
Identity Center manages workforce assignments and federation rather than sharing static IAM user credentials.
A finance team wants to know why shared cloud infrastructure can lower the unit cost of computing.
Which AWS concept, service, or approach best meets the need described?
Cloud providers spread infrastructure investment and operating efficiencies across many customers. For the described requirement, recognize economies of scale from large shared cloud provider operations.
Discounted commitment models may reduce eligible usage rates while increasing obligations when demand changes.
Cloud choices vary in who manages software, patching and operations, affecting labor and maintenance cost.
Right-sizing reduces waste by matching provisioned resource size to the work performed.
An international streaming service needs to enter a new region with minimal physical infrastructure investment.
Which AWS concept, service, or approach best meets the need described?
Regional AWS infrastructure lets customers choose appropriate geographic placement subject to service availability and compliance. For the described requirement, use AWS geographic footprint to expand service presence without constructing private facilities.
Metered cloud consumption lowers initial capital outlay and supports experiments with uncertain future demand.
Provisioning through AWS APIs and consoles improves agility by reducing procurement delays for new environments.
Elasticity aligns provisioned resources with current need instead of maintaining permanent peak-sized local capacity.
A developer needs temporary permission for an application running on an EC2 instance to call an AWS API.
Which AWS concept, service, or approach best meets the need described?
IAM roles supply temporary credentials for authorized workloads and avoid hard-coded long-term keys. For the described requirement, attach a suitable IAM role to the workload for temporary credentials.
Secrets Manager is purpose-built for managing secret values instead of exposing credentials in source files.
MFA adds a second authentication factor to protect against password-only compromise.
STS role assumption permits controlled cross-account access without sharing long-lived access keys.
A business needs disaster recovery in a separate geographic location from its primary AWS workload.
Which observation would best confirm that the intended cloud outcome is being achieved?
Using different AWS Regions can reduce dependence on one geographic Region when application design supports recovery.
Choosing Region determines the geographic location of many deployed resources and data residency choices.
Edge locations serve nearby delivery needs; Availability Zones host fault-isolated regional workloads.
A Region is a geographic AWS area containing multiple isolated Availability Zones.
A platform team asks for outbound connectivity from a private subnet while keeping the instances nonpublic.
Which AWS concept, service, or approach best meets the need described?
NAT gateways support outbound internet access through a public route while not providing unsolicited inbound initiation. For the described requirement, use a NAT gateway to provide appropriate outbound connections from private IPv4 subnets.
Network ACLs evaluate inbound and outbound subnet traffic independently and are stateless.
A VPC contains configured networking components such as subnets, routes and gateways.
Direct Connect provides private dedicated connectivity rather than an ordinary public-internet VPN tunnel.
A new cloud learner confuses shared public infrastructure with public visibility of tenant data.
Which AWS concept, service, or approach best meets the need described?
AWS public cloud is provider-operated multi-tenant infrastructure; customer data access still depends on security controls. For the described requirement, differentiate public cloud infrastructure from customer authorization and data-exposure settings.
AWS CLI provides a command-based interface to AWS APIs and supports repeatable workflows.
CloudFormation describes AWS resources declaratively and supports repeatable stack deployment.
The console offers a graphical interface appropriate for human-directed AWS service inspection.
A project requires encryption of an S3 application dataset and asks who chooses business-appropriate keys and policies.
Which AWS concept, service, or approach best meets the need described?
AWS offers encryption features, but customers must choose appropriate configuration and manage access and key permissions. For the described requirement, assign selection and governance of customer encryption settings and data access to the customer.
AWS manages the execution infrastructure but cannot automatically enforce application business logic or secure customer code.
AWS infrastructure availability does not transfer responsibility for defects in customer-owned business applications.
RDS reduces customer responsibility for host and engine administration compared with hosting a database directly on EC2.
A trainee needs a credible source for cloud security advice rather than an unrelated public forum comment.
Which observation would best confirm that the intended cloud outcome is being achieved?
AWS publishes security practices and service guidance through official documentation and blogs.
Firewall Manager supports organization-level security-policy management for selected AWS protection services.
Protective filters block matching traffic; detection services report suspicious activity for investigation.
Trusted Advisor evaluates selected account checks and is not the same as a complete security audit.
An application team plans to optimize a migrated service by replacing self-managed infrastructure with a managed service.
Which observation would best confirm that the intended cloud outcome is being achieved?
Replatforming changes selected platform components while retaining the application's fundamental design.
Refactoring involves significant application design changes to exploit cloud-native capabilities.
Early portfolio and dependency discovery reduces unplanned migration sequencing and operational disruption.
Rehosting preserves much of the existing application architecture during the initial relocation.
An organization wants to migrate an application without changing its core architecture during the first phase.
Which observation would best confirm that the intended cloud outcome is being achieved?
Rehosting preserves much of the existing application architecture during the initial relocation.
Refactoring involves significant application design changes to exploit cloud-native capabilities.
AWS CAF addresses broader transformation readiness and governance instead of only transferring virtual machines.
Application retirement eliminates the maintenance and migration burden for systems no longer needed.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
