A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?
Correct Answer: B
Question 247
An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks. Which AWS service will provide this information?
Correct Answer: A
Explanation AWS Artifact is the service that will provide the information about whether a specific AWS service is compliant with specific compliance frameworks. AWS Artifact is a self-service portal that allows you to access, review, and download AWS security and compliance reports and agreements. You can use AWS Artifact to verify the compliance status of AWS services across various regions and compliance programs, such as ISO, PCI, SOC, FedRAMP, HIPAA, and more12
Question 248
A company is running a workload in the AWS Cloud. Which AWS best practice ensures the MOST cost-effective architecture for the workload?
Correct Answer: B
The AWS best practice that ensures the most cost-effective architecture for the workload is rightsizing. Rightsizing means selecting the most appropriate instance type or resource configuration that matches the needs of the workload. Rightsizing can help optimize performance and reduce costs by avoiding over- provisioning or under-provisioning of resources1. Loose coupling, caching, and redundancy are other AWS best practices that can improve the scalability, availability, and performance of the workload, but they do not necessarily ensure the most cost-effective architecture.
Question 249
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?
Correct Answer: A
Explanation Creating an IAM role with the required permissions and attaching the role to the EC2 instance is the most operationally efficient solution to delegate permissions. An IAM role is an entity that defines a set of permissions for making AWS service requests. An IAM role can be assumed by an EC2 instance to access other AWS resources, such as Amazon S3 and Amazon DynamoDB, without having to store any credentials on the instance. This solution is more secure and scalable than using IAM users and their access keys. For more information, see [IAM Roles for Amazon EC2] and [Using an IAM Role to Grant Permissions to Applications Running on Amazon EC2 Instances].
Question 250
A company has data lakes designed for high performance computing (HPC) workloads. Which Amazon EC2 instance type should the company use to meet these requirements?
Correct Answer: B
For high performance computing (HPC) workloads, compute resources play a critical role in delivering the necessary processing power and efficiency. HPC workloads are typically computationally intensive, often requiring a large number of CPU cycles to solve complex problems. These workloads benefit most from instances that provide powerful processors and high clock speeds, which is whyCompute optimized instances (Answer B)are the best choice in this scenario. Why Compute Optimized Instances (C Instances)? Designed for Compute-Intensive Tasks: Compute optimized instances in Amazon EC2, such as the C6i or C5 series, are designed to offer high compute performance, low cost, and consistent CPU power. These instances are ideal for workloads like HPC, which require a high level of processing per second. High Performance CPUs: The compute optimized instance family typically uses the latest-generation processors, such as AWS Graviton2 or Intel Xeon Scalable processors, which provide a higher number of virtual CPUs (vCPUs) and increased clock speeds compared to other instance types. This matches the need for HPC workloads to maximize throughput and minimize compute times. Use Case Alignment: HPC workloads such as genomic research, computational fluid dynamics (CFD), financial modeling, and 3D rendering require high levels of CPU-bound tasks. Compute optimized instances provide the best CPU-to-memory ratio to handle these efficiently, leading to faster processing times and cost efficiency. Comparison with Other Instance Types: A: General Purpose Instances: These are versatile and balanced instances (e.g., T3 or M6i) that are suitable for various workloads but do not provide the specialized compute performance required for HPC. They offer a balanced mix of compute, memory, and networking but are not optimal for HPC workloads where computational power is critical. C: Memory Optimized Instances: While these instances (e.g., R5, X1) are ideal for memory-intensive workloads such as in-memory databases (e.g., SAP HANA) or real-time data analytics, they do not provide the specialized compute power necessary for HPC tasks that require heavy CPU processing. D: Storage Optimized Instances: These instances (e.g., I3, D3) are designed for workloads that need high disk throughput, like big data or transactional databases. While these are excellent for storage-heavy applications, they are not optimized for compute-intensive HPC workloads. Amazon EC2 Compute Optimized Family (C Instances) C6i Instances: Based on 3rd Gen Intel Xeon Scalable processors, C6i instances offer up to 15% better price /performance compared to previous generation C5 instances. These are ideal for high compute and HPC workloads. C5 Instances: These are built for compute-intensive workloads like batch processing, distributed analytics, and high-performance web servers. They offer a high level of sustained CPU performance. AWS Reference Links: Amazon EC2 Instance Types Amazon EC2 Compute Optimized Instances HPC on AWS In conclusion,Compute optimized instances (B)are the best choice for HPC workloads due to their high compute performance, optimized CPU architecture, and suitability for computationally intensive tasks.
