Q841.A company needs to create and manage a portfolio of IT workloads that the company approves for use on AWS. Which AWS service provides this functionality?

A. AWS Config
B. AWS Service Catalog
C. AWS Systems Manager
D. AWS CloudFormation

Q842.Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?

A. Amazon Athena
B. Amazon Kendra
C. Amazon QuickSight
D. Amazon Redshift

Q843.A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings. Which cloud concept does this analysis demonstrate?

A. Auto scaling
B. Rightsizing
C. Load balancing
D. High availability

Q844.A company that has multiple AWS accounts wants to reduce its recurring cloud costs. The company is using AWS Organizations. Which AWS tool or feature will share volume pricing discounts and Savings Plans among accounts?

A. AWS Budgets
B. Consolidated billing
C. AWS credits
D. Cost allocation tags

Q845.A company needs to store source code. The source code must be accessible over the internet. Which AWS service should the company use to meet these requirements?

A. AWS CodeDeploy
B. AWS CodeStar
C. AWS CodeCommit
D. Amazon CodeGuru

Q846.A company is designing workloads in the AWS Cloud. The company wants the workloads to perform their intended function correctly and consistently throughout their lifecycle. Which pillar of the AWS Well-Architected Framework does this goal represent?

A. Operational excellence
B. Security
C. Reliability
D. Performance efficiency

Q847.A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating systems that host its applications. Which AWS service should the company use to meet these requirements?

A. Amazon DynamoDB
B. Amazon EC2
C. AWS Lambda
D. Amazon RDS

Q848.Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

A. Security awareness and training
B. Development of an IAM password policy
C. Patching of the guest operating system
D. Physical and environmental controls

Q849.A large company wants to track the combined AWS usage costs of all of its linked accounts. How can this be accomplished?

A. Use AWS Trusted Advisor to generate customized summary reports.
B. Use AWS Organizations to generate consolidated billing reports.
C. Use AWS Budgets to set utilization targets and receive summary reports.
D. Use the AWS Control Tower dashboard to get a summary report of all inked account costs.

Q850.A cloud practitioner needs to apply security rules to a subnet for Amazon EC2 instances. Which AWS service or feature can the cloud practitioner use to meet this requirement?

A. AWS WAF
B. Network ACLs
C. Security groups
D. AWS Managed Services (AMS)

Q851.A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?

A. AWS Key Management Service (AWS KMS)
B. AWS Certificate Manager (ACM)
C. AWS CloudHSM
D. AWS Systems Manager

Q852.Which AWS service should a cloud engineer use to view API calls to AWS services?

A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS Artifact

Q853.A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data daily. Which S3 storage class will meet those requirements MOST cost-effectively?

A. S3 Standard
B. S3 Glacier Deep Archive
C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
D. S3 Intelligent-Tiering

Q854.A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes. Which solution will meet these requirements?

A. Create a read replica of the DB instance.
B. Create a template of the DB instance by using AWS CloudFormation.
C. Take frequent snapshots of the DB instance. Store the snapshots in Amazon S3.
D. Modify the DB instance to be a Multi-AZ deployment.

Q855.A company has a business-critical Amazon RDS for MySQL DB instance that resides in a single Availability Zone. Which solution will improve the availability of the DB instance?

A. Convert the DB instance into a multi-Region deployment.
B. Create an Amazon Simple Queue Service (Amazon SQS) queue in the same AWS Region to manage writes to the DB instance.
C. Convert the DB instance into a Multi-AZ deployment.
D. Create an Amazon Simple Queue Service (Amazon SQS) queue in a different AWS Region to manage writes to the DB instance.

Q856.Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

A. Resource scalability
B. Performance efficiency
C. System elasticity
D. Agile development
E. Operational excellence

Q857.Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

A. Patch AWS network devices.
B. Set user password rules.
C. Provide physical security for compute resources.
D. Configure security groups.
E. Patch the operating system of an Amazon EC2 instance.

Q858.Which AWS service allows users to model and provision AWS resources using common programming languages?

A. AWS CloudFormation
B. AWS CodePipeline
C. AWS Cloud Development kit (AWS CDK)
D. AWS Systems Manager

Q859.A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week. Which solution will meet these requirements?

A. AWS Direct Connect
B. Amazon VPC
C. AWS Site-to-Site VPN
D. Edge location

Q860.A system administrator wants to allow IT department users to access the AWS CLI. What is the MINIMUM credential that is required to achieve this goal?

A. Multi-factor authentication (MFA) code
B. Key pair
C. IAM user name and password
D. AWS access keys

Q861.A company uses Amazon WorkSpaces. Which task is the responsibility of AWS, according to the AWS shared responsibility model?

A. Set up multi-factor authentication (MFA) for each WorkSpaces user account.
B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.
C. Provide security for WorkSpaces user accounts through AWS Identity and Access Management (IAM).
D. Configure AWS CloudTrail to log API calls and user activity.

Q862.A company has all of its servers in the us-east-1 Region. The company is considering the deployment of additional servers in a different Region. Which AWS tool should the company use to find pricing information for other Regions?

A. Cost Explorer
B. AWS Budgets
C. AWS Purchase Order Management
D. AWS Pricing Calculator

Q863.A company wants to build a new web application by using AWS services. The application must meet the on-demand load for periods of heavy activity. Which AWS services or resources provide the necessary workload adjustments to meet these requirements? (Choose two.)

A. Amazon Machine Image (AMI)
B. Amazon EC2 Auto Scaling
C. Amazon EC2 instance
D. AWS Lambda
E. EC2 Image Builder

Q864.A company wants to launch its web application in a second AWS Region. The company needs to determine which services must be regionally configured for this launch. Which AWS services can be configured at the Region level? (Choose two.)

A. Amazon EC2
B. Amazon Route 53
C. Amazon CloudFront
D. AWS WAF
E. Amazon DynamoDB

Q865.Which AWS Well-Architected Framework concept represents a system’s ability to remain functional when the system encounters operational problems?

A. Consistency
B. Elasticity
C. Durability
D. Latency

Q866.A company is migrating its data center to AWS. The company needs an AWS Support plan that provides chat access to a cloud support engineer 24 hours a day, 7 days a week. The company does not require access to infrastructure event management. What is the MOST cost-effective AWS Support plan that meets these requirements?

A. AWS Enterprise Support
B. AWS Business Support
C. AWS Developer Support
D. AWS Basic Support

Q867.A company has an application workload that is stateless by design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

A. On-Demand Instances
B. Spot Instances
C. Reserved Instances
D. Dedicated Instances

Q868.A company needs to connect on-premises applications to AWS Cloud storage by using industry-standard internet Small Computer Systems Interface (iSCSI) connectivity. Which AWS solution can the company use to meet this requirement?

A. AWS Storage Gateway file gateway
B. Amazon API Gateway
C. AWS Storage Gateway volume gateway
D. AWS Transit Gateway

Q869.A company is considering migration to the AWS Cloud. The company wants a fully managed service or feature that can transfer streaming data from multiple sources to an Amazon S3 bucket. Which AWS service or feature should the company use to meet these requirements?

A. AWS DataSync
B. Amazon Kinesis Data Firehose
C. S3 Select
D. AWS Transfer Family

Q870.A company wants to create a chatbot and integrate the chatbot with its current web application. Which AWS service will meet these requirements?

A. Amazon Kendra
B. Amazon Lex
C. Amazon Textract
D. Amazon Polly

Q871.A company wants to implement controls (guardrails) in a newly created AWS Control Tower landing zone. Which AWS services or features can the company use to create and define these controls (guardrails)? (Choose two.)

A. AWS Config
B. Service control policies (SCPs)
C. Amazon Guard Duly
D. AWS Identity and Access Management (1AM)
E. Security groups

Q872.A company’s headquarters is located on a different continent from where the majority of the company’s customers live. The company wants an AWS Cloud environment setup that will provide the lowest latency to the customers. Which solution will provide the LOWEST network latency between the AWS resources and the customers?

A. Place the resources in the AWS Region that is closest to the company’s headquarters. Move the resources to the Availability Zone that is closest to the customers.
B. Place all workloads in the AWS Region that is closest to the company’s headquarters.
C. Place all workloads in the AWS Region that is closest to the majority of customers.
D. Place the resources in AWS edge locations that are closest to the company’s headquarters.

Q873.A company needs to migrate its website from on premises to the AWS Cloud. The website must be hosted on hardware that is not shared with other companies. The company wants to use its existing per-socket, per-core software licenses. Which Amazon EC2 instance purchasing option will meet these requirements?

A. Dedicated Instance
B. Reserved Instance
C. Dedicated Host
D. On-Demand Instance

Q874.Which database engine is compatible with Amazon RDS?

A. Apache Cassandra
B. MongoDB
C. Neo4j
D. PostgreSQL

Q875.Which AWS service or feature is used to troubleshoot network connectivity issues between Amazon EC2 instances?

A. AWS Certificate Manager (ACM)
B. Internet gateway
C. VPC Flow Logs
D. AWS CloudHSM

Q876.A user discovered that an Amazon EC2 instance is missing an Amazon Elastic Block Store (Amazon EBS) data volume. The user wants to determine when the EBS volume was removed. Which AWS service will provide this information?

A. AWS Config
B. AWS Trusted Advisor
C. Amazon Timestream
D. Amazon QuickSight

Q877.A user needs a dedicated private connection between a colocation facility and a VPC. Which AWS service or feature should the user choose?

A. AWS VPN
B. AWS PrivateLink
C. AWS Direct Connect
D. AWS Client VPN

Q878.A company needs a solution that can provide automated notifications and perform automated actions if the company’s monthly AWS costs exceed a specific threshold. Which AWS service or tool provides this functionality?

A. AWS Budgets
B. AWS Cost Explorer
C. AWS Trusted Advisor
D. Amazon Inspector

Q879.A company needs to monitor compute usage and receive an email message notification every time an Amazon EC2 instance starts or stops. Which AWS service should the company use to meet these requirements?

A. Amazon EventBridge
B. Amazon WorkMail
C. Amazon Simple Email Service (Amazon SES)
D. AWS Trusted Advisor

Q880.A company wants to host its relational databases on AWS. The databases have predefined schemas that the company needs to replicate on AWS. Which AWS services could the company use for the databases? (Choose two.)

A. Amazon Aurora
B. Amazon RDS
C. Amazon DocumentDB (with MongoDB compatibility)
D. Amazon Neptune
E. Amazon DynamoDB

Q881.A company runs an ecommerce website that is hosted on AWS. External auditors have requested proof that the AWS services that the company uses are compliant with the Payment Card Industry Data Security Standard (PCI DSS). Which AWS service will provide this information?

A. AWS Certificate Manager (ACM)
B. AWS Artifact
C. AWS License Manager
D. AWS CloudTrail

Q882.An application is running on multiple Amazon EC2 instances. The company wants to make the application highly available by configuring a load balancer with requests forwarded to the EC2 instances based on URL paths. Which AWS load balancer will meet these requirements and take the LEAST amount of effort to deploy?

A. Network Load Balancer
B. Application Load Balancer
C. AWS OpsWorks Load Balancer
D. Custom Load Balancer on Amazon EC2

Q883.A developer is writing a program that must switch between multiple IAM roles. Which AWS services or features can the program use to meet this requirement? (Choose two.)

A. AWS CLI
B. AWS Security Token Service (AWS STS) API
C. IAM inline policies
D. AWS Organizations
E. AWS Trusted Advisor

Q884.A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet. Which AWS service will meet these requirements MOST cost-effectively?

A. Amazon Elastic Block Store (Amazon EBS)
B. Amazon S3
C. Amazon Elastic File System (Amazon EFS)
D. AWS Storage Gateway

Q885.What does the concept of agility mean in AWS Cloud computing? (Choose two.)

A. The speed at which AWS resources are implemented
B. The speed at which AWS creates new AWS Regions
C. The ability to experiment quickly
D. The elimination of wasted capacity
E. The low cost of entry into cloud computing

Q886.A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code. Which AWS service meets these requirements?

A. AWS Lambda
B. Amazon Simple Queue Service (Amazon SQS)
C. Amazon CloudWatch
D. Amazon EventBridge

Q887.Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

A. Amazon FSx for Lustre
B. AWS Storage Gateway volume gateway
C. AWS Storage Gateway file gateway
D. Amazon Elastic File System (Amazon EFS)

Q888.A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours. Which instance purchasing option will meet these requirements MOST cost-effectively?

A. Spot Instances
B. Reserved Instances
C. Dedicated Hosts
D. On-Demand Instances

Q889.A user is using AWS account root user credentials to try to close an AWS account that is managed by AWS Organizations. However, the attempt is unsuccessful. What could cause this attempt to be unsuccessful?

A. No multi-factor authentication (MFA) has been configured.
B. The root user is not specifically assigned to the administration group.
C. The root user’s password does not meet the minimum password complexity requirements.
D. The organizational administrator has used a service control policy (SCP) to limit the root user permissions.

Q890.A user is using AWS account root user credentials to try to close an AWS account that is managed by AWS Organizations. However, the attempt is unsuccessful. What could cause this attempt to be unsuccessful?

A. No multi-factor authentication (MFA) has been configured.
B. The root user is not specifically assigned to the administration group.
C. The root user’s password does not meet the minimum password complexity requirements.
D. The organizational administrator has used a service control policy (SCP) to limit the root user permissions.

Q891.A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type. Which AWS services can provide this information to the company? (Choose two.)

A. AWS Auto Scaling
B. AWS Control Tower
C. AWS Trusted Advisor
D. AWS Compute Optimizer
E. Amazon Forecast

Q892.What does the concept of agility mean in AWS Cloud computing? (Choose two.)

A. The speed at which AWS resources are implemented
B. The speed at which AWS creates new AWS Regions
C. The ability to experiment quickly
D. The elimination of wasted capacity
E. The low cost of entry into cloud computing

Q893.Which AWS network services or features allow CIDR block notation when providing an IP address range? (Choose two.)

A. Security groups
B. Amazon Machine Image (AMI)
C. Network access control list (network ACL)
D. AWS Budgets
E. Amazon Elastic Block Store (Amazon EBS)

Q894.A company wants to set AWS spending targets and track costs against those targets. Which AWS tool or feature should the company use to meet these requirements?

A. AWS Cost Explorer
B. AWS Budgets
C. AWS Cost and Usage Report
D. Savings Plans

Q895.A company needs to reserve a certain amount of Amazon EC2 compute resources in a specific Availability Zone within an AWS Region. Which purchasing option should the company use to meet this requirement?

A. EC2 Instance Savings Plans
B. Compute Savings Plans
C. Regional Reserved Instances
D. Zonal Reserved Instances

Q896.Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability

Q897.A company deployed an Amazon EC2 instance last week A developer realizes that the EC2 instance is no longer running. The developer reviews a list of provisioned EC2 instances, and the EC2 instance is no longer on the list. What can the developer do to generate a recent history of the EC2 instance?

A. Run Cost Explorer to identify the start time and end time of the EC2 instance
B. Use Amazon Inspector to find out when the EC2 instance was stopped
C. Perform a search in AWS CloudTrail to find all EC2 instance-related events
D. Use AWS Secrets Manager to display hidden termination logs of the EC2 instance

Q898.Which option is an AWS Cloud Adoption Framework (AWS CAF) foundational capability for the operations perspective?

A. Performance and capacity management
B. Application portfolio management
C. Identity and access management
D. Product management

Q899.A company needs to design a solution for the efficient use of compute resources for an enterprise workload. The company needs to make informed decisions as its technology needs evolve. Which pillar of the AWS Well-Architected Framework do these requirements represent?

A. Operational excellence
B. Performance efficiency
C. Cost optimization
D. Reliability

Q900.A company wants to set up a high-speed connection between its data center and its applications that run on AWS. The company must not transfer data over the internet. Which action should the company take to meet these requirements?

A. Transfer data to AWS by using AWS Snowball.
B. Transfer data to AWS by using AWS Storage Gateway.
C. Set up a VPN connection between the data center and an AWS Region.
D. Set up an AWS Direct Connect connection between the company network and AWS.