You save $69.98
A service owner wants to know whether an AWS resource drifted from an approved configuration.
Which AWS concept, service, or approach best meets the need described?
AWS Config records supported resource configurations and evaluates them against configured compliance rules. For the described requirement, use AWS Config for resource configuration history and rule compliance evaluation.
Macie assists with sensitive-data discovery, unlike CloudTrail which records resource API activity.
Stored-object encryption protects persisted content; transport encryption protects communication between endpoints.
An organization trail helps collect supported account activity across participating AWS Organizations accounts.
A fleet of private EC2 instances needs to make outbound internet requests without accepting unsolicited inbound sessions.
Which AWS concept, service, or approach best meets the need described?
NAT gateways support outbound internet access through a public route while not providing unsolicited inbound initiation. For the described requirement, use a NAT gateway to provide appropriate outbound connections from private IPv4 subnets.
Security groups are stateful controls associated with eligible network interfaces and resources.
AWS VPN establishes encrypted tunnels between customer networks and AWS network endpoints.
Network ACLs evaluate inbound and outbound subnet traffic independently and are stateless.
A firm owns eligible host-bound software licenses and needs host-level placement visibility.
Which AWS pricing, billing, or support approach best matches the requirement?
Dedicated Hosts provide single-customer physical server tenancy and host-level allocation features for supported licensing needs. For the described requirement, evaluate EC2 Dedicated Hosts where dedicated physical server control is required.
Reserved Instance pricing offers commitment-based discounts subject to instance attributes and purchasing terms.
Savings Plans trade a spend commitment for discounted eligible compute usage and differ in flexibility by plan type.
Data leaving AWS can incur transfer charges based on service and path, while ordinary ingress pricing often differs.
A small office wants a hybrid storage interface without relocating all local file consumers at once.
Which AWS concept, service, or approach best meets the need described?
Storage Gateway connects local storage protocols and caching patterns to AWS cloud storage services. For the described requirement, use AWS Storage Gateway for supported on-premises-to-cloud hybrid storage access.
Instance store is physically attached ephemeral storage and must not hold data requiring persistence through host loss.
S3 Lifecycle automates supported tier changes and expirations based on defined rules.
EFS provides elastic shared file access rather than an individual EC2 block disk.
A product stores session metadata that does not require traditional relational joins.
Which AWS concept, service, or approach best meets the need described?
DynamoDB is a managed NoSQL database suited to key-based access and flexible item structures. For the described requirement, choose Amazon DynamoDB for a managed key-value and document database workload.
AWS DMS assists database replication and migration between supported sources and targets.
AWS SCT helps assess and convert database schema objects during migration between different engines.
Aurora is AWS's managed relational engine designed for cloud operation and supported compatibility.
A developer wants to adjust selected components during migration without rewriting the complete application.
Which AWS concept, service, or approach best meets the need described?
Replatforming changes selected platform components while retaining the application's fundamental design. For the described requirement, use replatforming to make targeted managed-service improvements during migration.
AWS Snowball supports bulk data movement using shipped devices for constrained-network migration cases.
AWS DMS helps move databases and replicate changes rather than serving as a general file-transfer service.
Refactoring involves significant application design changes to exploit cloud-native capabilities.
A large firm needs centralized assignment and sign-in for approved teams across AWS Organizations accounts.
Which observation would best confirm that the intended cloud outcome is being achieved?
Identity Center manages workforce assignments and federation rather than sharing static IAM user credentials.
Sign-in success is not sufficient; identity and resource policies and explicit denies influence authorization.
Authentication establishes who the principal is; authorization evaluates what the principal may do.
Root credentials are highly privileged and should not be shared or used for daily operational activities.
A cloud risk team asks whether AWS compliance reports prove that every business application configuration is safe.
Which observation would best confirm that the intended cloud outcome is being achieved?
Provider reports describe AWS controls, whereas application-specific obligations still need customer evidence.
CloudWatch assesses metrics while notification integrations deliver the action signal to responders.
CloudTrail records supported API operations and identity context for audit and investigation.
Inspector identifies vulnerabilities and related exposure in supported compute resources.
An executive asks whether the customer must hire security guards for the facilities housing its AWS workloads.
Which AWS concept, service, or approach best meets the need described?
AWS is responsible for facilities, hardware and underlying infrastructure used to provide its cloud services. For the described requirement, recognize physical data-center security as AWS's responsibility under security of the cloud.
RDS reduces customer responsibility for host and engine administration compared with hosting a database directly on EC2.
Managed database services reduce infrastructure work but do not determine the business sensitivity of stored records.
The service provider operates the network infrastructure but customers determine network access rules for workloads.
A customer asks for the AWS protection service targeting application-layer HTTP exploit requests.
Which observation would best confirm that the intended cloud outcome is being achieved?
WAF inspects HTTP requests with web ACL rules and complements rather than replaces network-layer controls.
Inspector analyzes supported workloads for exposure and software vulnerabilities, not user login events.
AWS Marketplace lists third-party offerings and procurement options alongside AWS service integrations.
AWS publishes security practices and service guidance through official documentation and blogs.
A team wants a framework pillar for eliminating unnecessary cloud spend while preserving required outcomes.
Which observation would best confirm that the intended cloud outcome is being achieved?
Cost optimization focuses on spending that delivers business value, including usage visibility and demand matching.
Performance efficiency concerns effective resource selection, adaptation and continued performance improvement.
The security pillar focuses on protecting systems and data using appropriate identity and detection controls.
Selecting fit-for-purpose resources meets performance needs without automatically overprovisioning.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
