Fundamental, iam and vpc

A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet. Which AWS service or feature can the company use to meet these requirements?

• A. Network ACL

• B. AWS WAF

• C. Route table

• D. Security group

Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

• A. Patching of the guest operating system

• B. Security awareness and training

• C. Physical and environmental controls

• D. Development of an IAM password policy

A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads. Which benefit of the AWS Cloud does this scenario describe?

• A. Global deployments in minutes

• B. Cost savings

• C. Agility

• D. Elasticity

Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

• A. High availability

• B. Economies of scale

• C. Pay-as-you-go pricing

• D. Global reach

Which phase describes agility as a benefit of building in the AWS Cloud?

• A. The ability to pay only when computing resources are consumed, based on the volume of resources that are consumed

• B. The ability to eliminate guessing about infrastructure capacity needs

• C. The ability to support innovation through a reduction in the time that is required to make IT resources available to developers

• D. The ability to deploy an application in multiple AWS Regions around the world in minutes

A company wants to build a new architecture with AWS services. The company needs to compare service costs at various scales. Which AWS service, tool, or feature should the company use to meet this requirement?

• A. AWS Compute Optimizer

• B. AWS Pricing Calculator

• C. AWS Trusted Advisor

• D. Cost Explorer right sizing recommendations

A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?

• A. Create an IAM role with the required permissions. Attach the role to the EC2 instance.

• B. Create an IAM user and use its access key and secret access key in the application.

• C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance

• D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user

A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice. Which benefit of the AWS Cloud describes these abilities?

• A. Reliability

• B. Economy of scale

• C. Elasticity

• D. Pay-as-you-go pricing

Which duty is a responsibility of AWS under the AWS shared responsibility model?

• A. Identity and access management (IAM)

• B. Server-side encryption (SSE)

• C. Firewall configuration

• D. Maintaining physical hardware

A company has an application workload that is stateless be design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

• A. On-Demand Instances

• B. Spot Instances

• C. Reserved Instances

• D. Dedicated Instances