A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships. Which AWS service can the company use to meet this requirement?
Correct Answer: B
AWS Transit Gateway acts as a cloud router for connecting multiple VPCs and on-premises networks, simplifying network management by creating a hub-and-spoke model for routing traffic. Direct Connect provides a private connection to AWS but does not function as a central router. Amazon Connect is unrelated, and Route 53 is for DNS services, not VPC connectivity.
Question 272
Which option is a customer responsibility under the AWS shared responsibility model?
Correct Answer: B
The option that is a customer responsibility under the AWS shared responsibility model is B. Application data security. According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, while the customer is responsible for the security in the cloud.This means that AWS manages the security of the underlying infrastructure, such as the hardware, software, networking, and facilities that run the AWS services, while the customer manages the security of their applications, data, and resources that they use on top of AWS12. Application data security is one of the customer responsibilities under the AWS shared responsibility model. This means that the customer is responsible for protecting their application data from unauthorized access, modification, deletion, or leakage.The customer can use various AWS services and features to help withapplication data security, such as encryption, key management, access control, logging, and auditing12. Maintenance of underlying hardware of Amazon EC2 instances is not a customer responsibility under the AWS shared responsibility model. This is part of the AWS responsibility to secure the cloud.AWS manages the physical servers that host the Amazon EC2 instances and ensures that they are updated, patched, and replaced as needed13. Physical security of data centers is not a customer responsibility under the AWS shared responsibility model. This is also part of the AWS responsibility to secure the cloud.AWS operates and controls the facilities where the AWS services are hosted and ensures that they are protected from unauthorized access, environmental hazards, fire, and theft14. Maintenance of VPC components is not a customer responsibility under the AWS shared responsibility model. This is a shared responsibility between AWS and the customer.AWS provides the VPC service and ensures that it is secure and reliable, while the customer configures and manages their own VPCs and related components,such as subnets, route tables, security groups, network ACLs, gateways, and endpoints15. References: 1:Shared Responsibility Model - Amazon Web Services (AWS)2:AWS Cloud Computing - W3Schools3: [Amazon EC2 FAQs - Amazon Web Services]4: [AWS Security - Amazon Web Services]5: [Amazon Virtual Private Cloud (VPC) - Amazon Web Services]
Question 273
A company wants to migrate its server-based applications to the AWS Cloud. The company wants to determine the total cost of ownership for its compute resources that will be hosted on the AWS Cloud. Which combination of AWS services or tools will meet these requirements?
Correct Answer: A,D
AWS Pricing Calculator and AWS Application Discovery Service are the best combination of AWS services or tools to meet the requirements of determining the total cost of ownership for compute resources that will be hosted on the AWS Cloud. AWS Pricing Calculator is a tool that enables you to estimate the cost of using AWS services based on your usage scenarios and requirements. You can use AWS Pricing Calculator to compare the costs of running your applications on-premises or on AWS, and to optimize your AWS spending. AWS Application Discovery Service is a service that helps you plan your migration to the AWS Cloud by collecting and analyzing information about your on-premises servers, applications, and dependencies. You can use AWS Application Discovery Service to identify the inventory of your on-premises infrastructure, group servers by applications, and estimate the performance and resource utilization of your applications45
Question 274
A company stores data in an Amazon S3 bucket. Which task is the responsibility of AWS?
Correct Answer: D
According to the AWS Shared Responsibility Model, AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud, including Amazon S3. This infrastructure includes hardware, software, networking, and facilities that run AWS services. * A. Configure an S3 Lifecycle policy: Incorrect, as configuring S3 Lifecycle policies to manage object lifecycle (e.g., transitioning objects to different storage classes or deleting them after a certain period) is the customer's responsibility. * B. Activate S3 Versioning: Incorrect, as enabling S3 Versioning is a customer responsibility for managing data protection. * C. Configure S3 bucket policies: Incorrect, as setting and managing S3 bucket policies to control access is the customer's responsibility. AWS Cloud References: * AWS Shared Responsibility Model * Amazon S3
Question 275
A company wants to design a reliable web application that is hosted on Amazon EC2. Which approach will achieve this goal?
Correct Answer: C
The approach that will achieve the goal of designing a reliable web application that is hosted on Amazon EC2 is to spread EC2 instances across more than one Availability Zone. An Availability Zone is a physically isolated location within an AWS Region that has its own power, cooling, and network connectivity. By spreading EC2 instances across multiple Availability Zones, users can increase the fault tolerance and availability of their web applications, as well as reduce latency for end users2. Launching large EC2 instances in the same Availability Zone, spreading EC2 instances across more than one security group, or using an Amazon Machine Image (AMI) from AWS Marketplace are not sufficient to ensure reliability, as they do not provide redundancy or resilience in case of an outage in one Availability Zone.
