You save $69.98
A business faces potential volumetric attacks against a public AWS service endpoint.
Which observation would best confirm that the intended cloud outcome is being achieved?
Shield is focused on denial-of-service defense whereas IAM evaluates principal permissions.
Firewall Manager supports organization-level security-policy management for selected AWS protection services.
Trusted Advisor evaluates selected account checks and is not the same as a complete security audit.
Protective filters block matching traffic; detection services report suspicious activity for investigation.
A manufacturer is considering moving dozens of applications and lacks an inventory of business criticality.
Which AWS concept, service, or approach best meets the need described?
Early portfolio and dependency discovery reduces unplanned migration sequencing and operational disruption. For the described requirement, assess and prioritize the application portfolio before selecting migration waves.
AWS CAF addresses broader transformation readiness and governance instead of only transferring virtual machines.
Rehosting preserves much of the existing application architecture during the initial relocation.
Refactoring involves significant application design changes to exploit cloud-native capabilities.
A department is moving away from a custom email solution to a subscription-based SaaS product.
Which observation would best confirm that the intended cloud outcome is being achieved?
Repurchasing substitutes a new product licensing and delivery model for a legacy implementation.
Rehosting preserves much of the existing application architecture during the initial relocation.
AWS DMS helps move databases and replicate changes rather than serving as a general file-transfer service.
AWS CAF addresses broader transformation readiness and governance instead of only transferring virtual machines.
A database team wants a compute instance category prioritizing RAM capacity for an application.
Which AWS concept, service, or approach best meets the need described?
Memory-optimized instance categories are designed for workloads needing substantial available RAM. For the described requirement, select a memory-optimized EC2 instance family for memory-heavy workloads.
Lightsail offers simplified VPS plans with predictable bundles for straightforward applications.
Lambda executes functions on demand and manages underlying compute for the customer.
Amazon ECS manages placement and service operation of containers in an AWS-native orchestration model.
A manager asks for a framework principle covering confidentiality and access control of AWS resources.
Which observation would best confirm that the intended cloud outcome is being achieved?
The security pillar focuses on protecting systems and data using appropriate identity and detection controls.
Cost optimization focuses on spending that delivers business value, including usage visibility and demand matching.
Performance efficiency concerns effective resource selection, adaptation and continued performance improvement.
Selecting fit-for-purpose resources meets performance needs without automatically overprovisioning.
A company needs to route business events from AWS services and SaaS sources according to rules.
Which observation would best confirm that the intended cloud outcome is being achieved?
EventBridge routes matching events from supported sources to configured destinations.
SQS stores messages for consumer processing and differs from a publish-subscribe notification topic.
IoT Core supports communication between approved devices and cloud services.
Amazon Connect supports contact-center interactions and routing rather than bulk marketing email delivery.
A serverless team claims that removing servers also removes its obligation to write secure function code.
Which observation would best confirm that the intended cloud outcome is being achieved?
AWS manages the execution infrastructure but cannot automatically enforce application business logic or secure customer code.
The model divides accountability rather than transferring all security decisions to one party.
AWS is responsible for facilities, hardware and underlying infrastructure used to provide its cloud services.
AWS secures the service infrastructure while customers control authorization and exposure of their S3 objects.
An administrator is choosing between an AWS-maintained policy and an internally defined custom one.
Which AWS concept, service, or approach best meets the need described?
AWS managed policies are maintained by AWS; customer managed policies are created and governed by the customer. For the described requirement, use an AWS managed IAM policy where its permissions appropriately match the requirement.
Role separation prevents business users from inheriting broad resource modification permissions.
Federation leverages an established identity provider to issue access without separate local passwords.
Identity Center manages workforce assignments and federation rather than sharing static IAM user credentials.
A streaming analytics team needs to ingest high-throughput event records as they arrive.
Which AWS concept, service, or approach best meets the need described?
Kinesis provides streaming-data services rather than a long-term relational warehouse. For the described requirement, use Amazon Kinesis for supported real-time streaming data ingestion and processing.
Athena supports serverless interactive SQL analysis of data stored in S3.
SageMaker AI provides managed capabilities for training and hosting ML models.
Lex provides bot-building features including speech and natural-language intent processing.
A directory team asks which approach avoids duplicating staff passwords as local IAM users.
Which AWS concept, service, or approach best meets the need described?
Federation leverages an established identity provider to issue access without separate local passwords. For the described requirement, use federated workforce sign-in through IAM Identity Center or configured federation.
MFA adds a second authentication factor to protect against password-only compromise.
Identity Center manages workforce assignments and federation rather than sharing static IAM user credentials.
Sign-in success is not sufficient; identity and resource policies and explicit denies influence authorization.
A security team wants to train new staff to separate security of the cloud from security in the cloud.
Which AWS concept, service, or approach best meets the need described?
The model divides accountability rather than transferring all security decisions to one party. For the described requirement, apply the shared responsibility distinction: AWS protects underlying infrastructure; customers protect their cloud use.
AWS secures the service infrastructure while customers control authorization and exposure of their S3 objects.
AWS is responsible for facilities, hardware and underlying infrastructure used to provide its cloud services.
AWS certification of infrastructure does not automatically make customer configurations or data practices compliant.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
