You save $69.98
A business needs a unified view of security findings across several enabled security services.
Which AWS concept, service, or approach best meets the need described?
Security Hub centralizes findings and security posture visibility instead of being a standalone packet firewall. For the described requirement, use AWS Security Hub to collect and prioritize supported security findings.
Compliance frameworks impose customer-specific obligations even if AWS has underlying security certifications.
AWS Config records supported resource configurations and evaluates them against configured compliance rules.
Inspector identifies vulnerabilities and related exposure in supported compute resources.
A legacy monolith requires a new architecture before it can meet future scale and resilience goals.
Which AWS concept, service, or approach best meets the need described?
Refactoring involves significant application design changes to exploit cloud-native capabilities. For the described requirement, use refactoring when the migration intentionally changes the application's architecture.
Rehosting preserves much of the existing application architecture during the initial relocation.
AWS CAF considers business risk, efficiency, revenue opportunity and broader transformation outcomes.
Replatforming changes selected platform components while retaining the application's fundamental design.
A development department finds idle test servers consuming electricity for most of the month.
Which AWS concept, service, or approach best meets the need described?
Elastic self-service consumption can improve efficiency when unnecessary resources are stopped or released. For the described requirement, deprovision idle cloud resources so charges better reflect the actual work performed.
Variable pricing links many cloud expenses to provisioned capacity and consumption while owned equipment has upfront fixed costs.
Provisioning through AWS APIs and consoles improves agility by reducing procurement delays for new environments.
Metered cloud consumption lowers initial capital outlay and supports experiments with uncertain future demand.
A regulated buyer assumes that a provider report eliminates its need to assess access, retention and customer encryption.
Which AWS concept, service, or approach best meets the need described?
Provider reports describe AWS controls, whereas application-specific obligations still need customer evidence. For the described requirement, use shared-responsibility control mapping alongside AWS Artifact evidence.
Inspector identifies vulnerabilities and related exposure in supported compute resources.
AWS Artifact provides on-demand access to relevant compliance documentation rather than inspecting customer application logs.
GuardDuty analyzes supported data sources to identify suspicious activity rather than performing a general resource inventory.
A storage team wants objects moved from frequent access to colder tiers as they age.
Which AWS concept, service, or approach best meets the need described?
S3 Lifecycle automates supported tier changes and expirations based on defined rules. For the described requirement, configure S3 Lifecycle transitions for eligible objects based on age and requirements.
S3 archival classes trade access characteristics for lower storage costs on eligible archived data.
S3 stores objects in buckets and is not mounted like an ordinary instance block device.
Storage Gateway connects local storage protocols and caching patterns to AWS cloud storage services.
A manager requests basic read-only resource access and wants to follow least privilege.
Which AWS concept, service, or approach best meets the need described?
IAM policies express permitted actions on supported resources; broad wildcard privileges are usually unnecessary. For the described requirement, grant only the required IAM permissions using a narrowly scoped policy.
STS role assumption permits controlled cross-account access without sharing long-lived access keys.
Identity Center manages workforce assignments and federation rather than sharing static IAM user credentials.
Root credentials are highly privileged and should not be shared or used for daily operational activities.
A startup blames the cloud provider for a software defect introduced in its code release.
Which AWS concept, service, or approach best meets the need described?
AWS infrastructure availability does not transfer responsibility for defects in customer-owned business applications. For the described requirement, recognize customer ownership of deployed application behavior and software configuration.
AWS is responsible for facilities, hardware and underlying infrastructure used to provide its cloud services.
AWS manages the execution infrastructure but cannot automatically enforce application business logic or secure customer code.
Customer OS patching is greater for EC2 than Lambda, while code and data responsibilities remain with the customer.
A cloud operator wants to identify vulnerable software packages on EC2 workloads.
Which observation would best confirm that the intended cloud outcome is being achieved?
Inspector identifies vulnerabilities and related exposure in supported compute resources.
CloudWatch assesses metrics while notification integrations deliver the action signal to responders.
GuardDuty analyzes supported data sources to identify suspicious activity rather than performing a general resource inventory.
Security Hub centralizes findings and security posture visibility instead of being a standalone packet firewall.
A cloud review identifies recurring manual mistakes during routine operational changes across applications.
Which observation would best confirm that the intended cloud outcome is being achieved?
Operational excellence emphasizes runbooks, feedback, monitoring and continually refining operational processes.
Cost optimization focuses on spending that delivers business value, including usage visibility and demand matching.
Sustainability encourages efficient resource usage and avoiding unnecessary capacity and processing.
Security addresses protection from unauthorized access; reliability concerns continuing and recovering service delivery.
A company runs noncritical batch processing that can be retried if capacity is interrupted.
Which observation would best confirm that the intended cloud outcome is being achieved?
Spot capacity can be discounted but may be reclaimed with interruption notices and is unsuitable for uninterrupted critical jobs.
Savings Plans trade a spend commitment for discounted eligible compute usage and differ in flexibility by plan type.
Data leaving AWS can incur transfer charges based on service and path, while ordinary ingress pricing often differs.
Reserved Instance pricing offers commitment-based discounts subject to instance attributes and purchasing terms.
A company needs to move a large archive when network transfer would take many weeks.
Which AWS concept, service, or approach best meets the need described?
AWS Snowball supports bulk data movement using shipped devices for constrained-network migration cases. For the described requirement, use AWS Snowball to transfer large data sets with a physical appliance where online transfer is impractical.
Application retirement eliminates the maintenance and migration burden for systems no longer needed.
AWS CAF considers business risk, efficiency, revenue opportunity and broader transformation outcomes.
AWS DMS helps move databases and replicate changes rather than serving as a general file-transfer service.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
