I part Cloud(Final)

Which statement is an advantage of the platform as a service (PaaS) cloud service model?

• A: PaaS is the most similar to traditional on-premises models for IT resources

• B: PaaS provides the greatest level of control over IT resources

• C: PaaS avoids the need to manage operating systems

• D: PaaS reduces the need to handle application deployments

How does cloud computing improve a company's ability to provision resources to meet capacity demands compared to on-premises computing:

• A: Cloud resources can be cost forecasted

• B: Cloud resources can be locked down to the resource level

• C: Cloud resources can experience peaks and valleys in usage

• D: Cloud resources can scale up or down based on demand

Which statements about how a company would use AWS Organizations are accurate? (Select TWO)

• A: A company can use AWS Organizations consolidated identity and access management (IAM) feature to replace the existing IAM system for an individual account

• B: A company can benefit from volume discounts with consolidated billing

• C: A company can only manage AWS Organizations through the AWS Management Console

• D: A company can consolidate and centrally manage multiple AWS accounts

• E: A company can use AWS Organizations to create security groups that control access to resources

Which factors are considered in calculating the total cost of ownership (TCO) for the AWS Cloud? (Select TWO.)

• A: The number of users that need to be migrated to the cloud

• B: The number to groups that need to be migrated to the cloud

• D: The amount of storage that needs to be migrated to the cloud

• E: The number of roles that need to be migrated to the cloud

• C: The number of servers that need to be migrated

An AWS account administrator wants to grant temporary cross-account access that allows external users to access specific resources within their own account. Which action would align with the best practice of using temporary sessions:

• A: Create a new AWS Identity and Access Management (IAM) user account for each user that needs access

• B: Create an AWS Identity and Access Management (IAM) group, grant resource permissions to the group, then add IAM users to the group

• C: Create an AWS Identity and Access Management (IAM) role that can be assumed by external users and grant it permissions to the specific resources

• D: Create an AWS Identity and Access Management (IAM) policy that allows external users to access the specifc resources

Which statement about AWS Regions is true?

• A: Using a Region as close as possible to users can reduce latency

• B: Data stored in an AWS Region isn't subject to geographical compliance requirements

• C: All available Regions are enabled by default in an AWS account

• D: All AWS accounts can access all AWS Regions

A company must produce reports of any changes to its Amazon EC2 instance settings. Which AWS service should they use?

• A: AWS Config

• B: AWS Cloudtrail

• C: AWS Artifact

• D: Amazon CloudWatch

A network administrator wants to configure a public subnet and route incoming and outgoing traffic to and from an Amazon EC2 instance in the public subnet to the public internet. Which virtual private cloud (VPC) feature should they use?

• A: A network access control list (ACL)

• B: A network address translation (NAT) gateway

• C: An internet gateway

• D: VPC sharing

Which configuration represents a valid use of security groups in a virtual private cloud (VPC)?
Хз что тут но точно NOT B and NOT A

• A: Limit inbound access to the private subnet of the VPC

• B: Set a deny rule that prevents outbound traffic from an Amazon EC2 instance in a VPC

• C: Set a deny rule that prevents access to the subnet from the public internet.

• D: Limit outbound traffic from an Amazon EC2 instance in the VPC to a specific database server

A Company needs to run a short script each time a new item is added to an Amazon S3 bucket. Which compute option meets the need with the least amount of resource provisioning

• A: Set up the script to run in a container, and deploy the container on Amazon Elastic Container Service (Amazon ECS)

• B: Create an AWS Lambda function to run the script whenever a new item is added to the bucket

• C: Set up a small Amazon EC2 instance that runs code to check for new uploads to the bucket and runs the script

• D: Write a batch job to run the script on all new items overnight when there's less competition for resources. Run the batch on Spot Instances