400-420

Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?

• AWS Trusted Advisor
• AWS Knowledge Center
• AWS Support Center
• AWS Artifact

Which AWS service or feature can a company use to estimate AWS costs before provisioning workloads?

• AWS Pricing Calculator
• AWS Cost and Usage Report
• Cost Explorer
• AWS Budgets

An application that is hosted on Amazon EC2 has a steady and consistent workload. The application will operate for at least 1 year. What is the MOST cost-effective instance purchasing option to meet these requirements?

• Spot Instances
• Reserved Instances
• On-Demand Instances
• Dedicated Hosts

A company needs to use dashboards and charts to analyze insights from business data. Which AWS service will provide the dashboards and charts for these insights?

• Amazon Macie
• Amazon Aurora
• Amazon QuickSight
• AWS CloudTrail

Which of the following are security principles in the AWS Well-Architected Framework? (Choose two.)

• Analyze and attribute expenditures.
• Monitor, alert, and audit actions and changes to AWS resources.
• Deploy globally in minutes.
• Protect data in transit and at rest.
• Perform operations as code.

A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks. Which benefit of the AWS Cloud does this scenario demonstrate?

• Cost savings
• Improved operational resilience
• Increased business agility
• Enhanced security

A company wants to design a reliable web application that is hosted on Amazon EC2. Which approach will achieve this goal?

• Launch large EC2 instances in the same Availability Zone
• Spread EC2 instances across more than one security group
• Spread EC2 instances across more than one Availability Zone.
• Use an Amazon Machine Image (AMI) from AWS Marketplace

Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?

• AWS Secrets Manager
• Amazon Inspector
• AWS CodeDeploy
• AWS Certificate Manager (ACM)

A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious. Which AWS service should the company use to meet this requirement?

• AWS Shield Advanced
• Amazon Route 53
• Amazon GuardDuty
• AWS Network Firewall

A company wants to build an application that uses AWS Lambda to run Python code. Under the AWS shared responsibility model, which tasks will be the company's responsibility? (Choose two.)

• Management of the underlying infrastructure
• Management of the operating system.
• Writing the business logic code.
• Installation of the computer language runtime.
• Providing AWS Identity and Access Management (1AM) access to the Lambda service.