DTDM - 23

A user is planning to migrate an application workload to the AWS Cloud.
Which control becomes the responsibility of AWS once the migration is complete?

• Patching the guest operating system

• Maintaining physical and environmental controls

• Protecting communications and maintaining zone security

• Patching specific applications

Which services can be used to deploy applications on AWS? (Choose two.)

• AWS Elastic Beanstalk

• AWS Config

• AWS OpsWorks

• AWS Application Discovery Service

• Amazon Kinesis

Which AWS service can be used to provide an on-demand, cloud-based contact center?

• AWS Direct Connect

• Amazon Connect

• AWS Support Center

• AWS Managed Services

What tool enables customers without an AWS account to estimate costs for almost all AWS services?

• Cost Explorer

• TCO Calculator

• AWS Budgets

• AWS Pricing Calculator

Which component must be attached to a VPC to enable inbound Internet access?

• NAT gateway

• VPC endpoint

• VPN connection

• Internet gateway

Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year?

• Spot Instance

• On-Demand Instance

• Partial Upfront Reserved Instance

• No Upfront Reserved Instance

A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage. Which set of tasks would meet this requirement?

• Add an Application Load Balancer in front of the EC2 instance

• Configure EC2 Auto Recovery to move the instance to another Availability Zone

• Migrate to Amazon RDS and enable Multi-AZ

• Enable termination protection for the EC2 instance to avoid outages

A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?

• Using an AWS IAM user policy

• Using an AWS Organizations service control policy (SCP)

• Using an AWS IAM account password policy

• Using an AWS Security Hub managed insight

Under the AWS shared responsibility model, which of the following is the customer's responsibility?

• Patching guest OS and applications

• Patching and fixing flaws in the infrastructure

• Physical and environmental controls

• Configuration of AWS infrastructure devices

Which of the following tasks is required to deploy a PCI-compliant workload on AWS?

• Use any AWS service and implement PCI controls at the application layer

• Use an AWS service that is in-scope for PCI compliance and raise an AWS support ticket to enable PCI compliance at the application layer

• Use any AWS service and raise an AWS support ticket to enable PCI compliance on that service

• Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer