You save $69.98
A privacy lead asks which AWS service can identify sensitive data such as personally identifiable information in S3.
Which AWS concept, service, or approach best meets the need described?
Macie assists with sensitive-data discovery, unlike CloudTrail which records resource API activity. For the described requirement, use Amazon Macie to discover sensitive data in supported S3 data.
Compliance frameworks impose customer-specific obligations even if AWS has underlying security certifications.
Inspector identifies vulnerabilities and related exposure in supported compute resources.
CloudTrail records supported API operations and identity context for audit and investigation.
A new AWS customer wants authoritative technical steps for using a specific supported cloud service.
Which AWS pricing, billing, or support approach best matches the requirement?
AWS documentation is the primary provider-maintained reference for supported service behavior. For the described requirement, consult official AWS documentation for service descriptions and usage guidance.
Trusted Advisor assesses selected account conditions rather than providing a general-purpose support ticket inbox.
AWS re:Post provides community-style knowledge sharing and is not a substitute for a contractual support case.
Support Center provides case management according to the account's plan and support entitlement.
A product needs managed web-request filtering for malicious SQL injection signatures.
Which AWS concept, service, or approach best meets the need described?
WAF inspects HTTP requests with web ACL rules and complements rather than replaces network-layer controls. For the described requirement, identify AWS WAF as the web-request filtering service for supported front ends.
AWS Marketplace lists third-party offerings and procurement options alongside AWS service integrations.
AWS publishes security practices and service guidance through official documentation and blogs.
Security Hub provides central visibility into supported findings and controls instead of replacing every scanner.
A finance company asks how managed cloud resources could reduce exposure to an individual hardware room outage.
Which observation would best confirm that the intended cloud outcome is being achieved?
Cloud providers operate distributed infrastructure, but customers must select suitable services and fault-isolation designs.
Many AWS services can be used without buying underlying equipment; cost commitments vary by pricing option.
Variable pricing links many cloud expenses to provisioned capacity and consumption while owned equipment has upfront fixed costs.
AWS supplies resilient infrastructure options but application architecture and chosen deployment patterns still affect availability.
An application team plans to optimize a migrated service by replacing self-managed infrastructure with a managed service.
Which AWS concept, service, or approach best meets the need described?
Replatforming changes selected platform components while retaining the application's fundamental design. For the described requirement, use replatforming to make targeted managed-service improvements during migration.
AWS Snowball supports bulk data movement using shipped devices for constrained-network migration cases.
AWS DMS helps move databases and replicate changes rather than serving as a general file-transfer service.
Repurchasing substitutes a new product licensing and delivery model for a legacy implementation.
A data owner wants a report about potential confidential data exposure in S3 object stores.
Which AWS concept, service, or approach best meets the need described?
Macie assists with sensitive-data discovery, unlike CloudTrail which records resource API activity. For the described requirement, use Amazon Macie to discover sensitive data in supported S3 data.
An organization trail helps collect supported account activity across participating AWS Organizations accounts.
AWS Artifact provides on-demand access to relevant compliance documentation rather than inspecting customer application logs.
GuardDuty analyzes supported data sources to identify suspicious activity rather than performing a general resource inventory.
A web application repeatedly retrieves the same database records and wants a fast in-memory cache.
Which observation would best confirm that the intended cloud outcome is being achieved?
ElastiCache supports low-latency in-memory access and can reduce load on a persistent system of record.
Aurora is AWS's managed relational engine designed for cloud operation and supported compatibility.
AWS SCT helps assess and convert database schema objects during migration between different engines.
Amazon Redshift is designed for analytics and warehouse workloads rather than conventional app transactions.
A trainee wants to distinguish subnet network ACLs from stateful instance security groups.
Which observation would best confirm that the intended cloud outcome is being achieved?
Network ACLs evaluate inbound and outbound subnet traffic independently and are stateless.
Security groups are stateful controls associated with eligible network interfaces and resources.
AWS VPN establishes encrypted tunnels between customer networks and AWS network endpoints.
A VPC contains configured networking components such as subnets, routes and gateways.
A company wants a logically isolated network for its AWS application resources.
Which observation would best confirm that the intended cloud outcome is being achieved?
A VPC contains configured networking components such as subnets, routes and gateways.
AWS VPN establishes encrypted tunnels between customer networks and AWS network endpoints.
Private subnets without direct internet routes help limit direct exposure of backend systems.
Direct Connect provides private dedicated connectivity rather than an ordinary public-internet VPN tunnel.
A finance analyst wants a long-term purchasing option for stable compatible instance demand.
Which observation would best confirm that the intended cloud outcome is being achieved?
Reserved Instance pricing offers commitment-based discounts subject to instance attributes and purchasing terms.
Savings Plans trade a spend commitment for discounted eligible compute usage and differ in flexibility by plan type.
Spot capacity can be discounted but may be reclaimed with interruption notices and is unsuitable for uninterrupted critical jobs.
Lower storage rates can involve retrieval fees, time delays or duration requirements depending on class.
A business needs a unified view of security findings across several enabled security services.
Which AWS concept, service, or approach best meets the need described?
Security Hub centralizes findings and security posture visibility instead of being a standalone packet firewall. For the described requirement, use AWS Security Hub to collect and prioritize supported security findings.
Compliance frameworks impose customer-specific obligations even if AWS has underlying security certifications.
AWS Config records supported resource configurations and evaluates them against configured compliance rules.
Inspector identifies vulnerabilities and related exposure in supported compute resources.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
