DTDM - 16

What will help a company perform a cost benefit analysis of migrating to the AWS Cloud?

• Cost Explorer

• AWS Total Cost of Ownership (TCO) Calculator

• AWS Simple Monthly Calculator

• AWS Trusted Advisor

Answer explanation

• - AWS TCO calculators allow you to estimate the cost savings when using AWS and provide a detailed set of reports that can be used in executive presentations.

• - The calculators also give you the option to modify assumptions that best meet your business needs.

Which of the following provides the ability to share the cost benefits of Reserved Instances across AWS accounts?

• AWS Cost Explorer between AWS accounts

• Linked accounts and consolidated billing

• Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instance Utilization Report

• Amazon EC2 Instance Usage Report between AWS accounts

Answer explanation

• - The way that Reserved Instance discounts apply to accounts in an organization’s consolidated billing family depends on whether Reserved Instance sharing is turned on or off for the account.

• - By default, Reserved Instance sharing for all accounts in an organization is turned on.

• - You can change this setting by Turning Off Reserved Instance Sharing for an account.

• - The capacity reservation for a Reserved Instance applies only to the account the Reserved Instance was purchased on, regardless of whether Reserved Instance sharing is turned on or off.

A company has multiple AWS accounts and wants to simplify and consolidate its billing process. Which AWS service will achieve this?

• AWS Cost and Usage Reports

• AWS Organizations

• AWS Cost Explorer

• AWS Budgets

Answer explanation

• - You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts.

• - Every organization in AWS Organizations has a master (payer) account that pays the charges of all the member (linked) accounts.

A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data.
Which of the following services will help fulfill this requirement?

• Amazon CloudFront

• AWS Direct Connect

• Amazon Route 53 global DNS

• Amazon Simple Storage Service (Amazon S3) transfer acceleration

Answer explanation

• Amazon CloudFront is a content delivery network (CDN) service that distributes data from multiple locations worldwide, providing low-latency access to end-users.

Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?

• On-premises

• Hybrid

• Cloud

• Platform as a service

Answer explanation

• - The cloud allows you to trade capital expenses (such as data centers and physical servers) for variable expenses, and only pay for IT as you consume it.

• - Plus, the variable expenses are much lower than what you would pay to do it yourself because of the economies of scale.

How is asset management on AWS easier than asset management in a physical data center?

• AWS provides a Configuration Management Database that users can maintain.

• AWS performs infrastructure discovery scans on the customer's behalf.

• Amazon EC2 automatically generates an asset report and places it in the customer's specified Amazon S3 bucket.

• Users can gather asset metadata reliably with a few API calls.

Answer explanation

• - AWS assets are centrally managed through an inventory management system that stores and tracks owner, location, status, maintenance, and descriptive information for AWS-owned

  assets.

• - Following procurement, assets are scanned and tracked, and assets undergoing maintenance are checked and monitored for ownership, status, and resolution.

What feature of Amazon RDS helps to create globally redundant databases?

• Snapshots

• Automatic patching and updating

• Cross-Region read replicas

• Provisioned IOPS

Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

• restricted access.

• as-needed access.

• least privilege access.

• token access.

Answer explanation

• - When you create IAM policies, follow the standard security advice of granting least privilege, or granting only the permissions required to perform a task.

• - Determine what users (and roles) need to do and then craft policies that allow them to perform only those tasks.

Which methods can be used to identify AWS costs by departments? (Choose two.)

• Enable multi-factor authentication for the AWS account root user.

• Create separate accounts for each department.

• Use Reserved Instances whenever possible.

• Use tags to associate each instance with a particular department.

• Pay bills using purchase orders.

Answer explanation

• - Tags are key-value pairs that allow you to organize your AWS resources into groups. You can use tags to:

• - Visualize information about tagged resources in one place, in conjunction with Resource Groups.

• - View billing information using Cost Explorer and the AWS Cost and Usage report.

• - Send notifications about spending limits using AWS Budgets.

• - Use logical groupings of your resources that make sense for your infrastructure or business.

• - For example, you could organize your resources by:

  • + Project

  • + Cost center

  • + Development environment

  • + Application

  • + Department

Under the AWS shared responsibility model, customer responsibilities include which one of the following?

• Securing the hardware, software, facilities, and networks that run all products and services.

• Providing certificates, reports, and other documentation directly to AWS customers under NDA.

• Configuring the operating system, network, and firewall.

• Obtaining industry certifications and independent third-party attestations.