AWS CP TCS 10

Treating infrastructure as code in the AWS Cloud allows users to:

• automate migration of on-premises hardware to AWS data centers.

• let a third party automate an audit of the AWS infrastructure.

• turn over application code to AWS so it can run on the AWS infrastructure.

• automate the infrastructure provisioning process.

Which AWS service can a company use to securely store and encrypt passwords for a database

• • AWS Shield

• • AWS Secrets Manager

• • AWS Identity and Access Management (IAM)

• • Amazon Cognito

Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

• • AWS Secrets Manager

• • Amazon Cognito

• • Amazon Macie

• • AWS Trusted Advisor

A company wants to migrate its high performance computing (HPC) application to Amazon EC2 instances. The application has multiple components. The application must have fault tolerance and must have the ability to fail over automatically.

Which AWS infrastructure solution will meet these requirements with the LEAST latency between components?

• • Multiple AWS Regions

• • Multiple edge locations

• • Multiple Availability Zones

• • Regional edge caches

A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS.

Which AWS service should the company use?

• • Amazon GuardDuty

• • Amazon Inspector

• • AWS Shield Advanced

• • Amazon Macie

A company needs to identify who accessed an AWS service and what action was performed for a given time period.

Which AWS service should the company use to meet this requirement?

• • Amazon CloudWatch

• • AWS CloudTrail

• • AWS Security Hub

• • Amazon Inspector

A company is reviewing its operating policies.

Which policy complies with guidance in the security pillar of the AWS Well-Architected Framework?

• • Ensure that employees have access to all company data.

• • Expand employees' permissions as they gain more experience.

• • Grant all privileges and access to all users.

• • Apply security requirements at all layers of a process.

A company needs to maximize its ability to adapt to changing business needs without overcommitting its budget.

Which strategy should the company implement to meet these requirements?

• • Optimize operations

• • Use Savings Plans

• • Use pay-as-you-go pricing

• • Pay less by using more

A company needs to store data from a recommendation engine in a database.

Which AWS service provides this functionality with the LEAST operational overhead?

• • Amazon RDS for PostgreSQL

• • Amazon DynamoDB

• • Amazon Neptune

• • Amazon Aurora

Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

• • AWS Pricing Calculator

• • AWS Compute Optimizer

• • AWS App Runner

• • AWS Systems Manager