- (Exam Topic 3)
A company needs the historical cost and service usage details of its Amazon EC2 instances. Which AWS service or tool will provide this information?
Correct Answer:
C
AWS Cost Explorer helps you visualize, understand, and manage your AWS costs and usage over a daily or monthly granularity. You can also access your data with further granularity by enabling hourly and resource level granularity.
- (Exam Topic 1)
Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?
Correct Answer:
C
- (Exam Topic 1)
Which of the following are aspects of the AWS shared responsibility model? (Select TWO.)
Correct Answer:
AC
AWS responsibility “Security of the Cloud” - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services.
Customer responsibility “Security in the Cloud” – Customer responsibility will be determined by the AWS Cloud services that a customer selects. This determines the amount of configuration work the customer must perform as part of their security responsibilities. For example, a service such as Amazon Elastic Compute Cloud (Amazon EC2) is categorized as Infrastructure as a Service (IaaS) and, as such, requires the customer to perform all of the necessary security configuration and management tasks. Customers that deploy an Amazon EC2 instance are responsible for management of the guest operating system (including updates and security patches), any application software or utilities installed by the customer on the instances, and the configuration of the AWS-provided firewall (called a security group) on each instance. For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms, and customers access the endpoints to store and retrieve data. Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.
Shared_Responsibility_Model_V2
- (Exam Topic 2)
A company needs to perform queries and interactively search and analyze log data. Which AWS service or feature will meet this requirement?
Correct Answer:
C
- (Exam Topic 3)
An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously.
Which AWS storage service should be used?
Correct Answer:
B
Amazon EFS provides secure access for thousands of connections for Amazon EC2 instances and on-premises servers, as well as AWS compute services, including ECS, EKS, AWS Fargate, and AWS Lambda, simultaneously using a traditional file permissions model, file locking capabilities, and hierarchical directory structure via the NFSv4 protocol. Amazon EC2 instances can access your file system across AZs, regions, and VPCs, while on-premises servers can access using AWS Direct Connect or AWS VPN.
