A company wants to use the AWS Cloud as an offsite backup location for its on-premises infrastructure. Which AWS service will meet this requirement MOST cost-effectively?
Correct Answer: A
Amazon S3 is the most cost-effective service for storing offsite backups of on-premises infrastructure. Amazon S3 offers low-cost, durable, and scalable storage that can be accessed from anywhere over the internet. Amazon S3 also supports lifecycle policies, versioning, encryption, and cross-region replication to optimize the backup and recovery process. Amazon EFS, Amazon FSx, and Amazon EBS are more suitable for storing data that requires high performance, low latency, and frequent access12
Question 27
Which pillar of the AWS Well-Architected Framework focuses on the ability to recover automatically from service Interruptions?
Correct Answer: D
Question 28
Which AWS service can a company use to securely store and encrypt passwords for a database?
Correct Answer: B
AWS Secrets Manager is an AWS service that can be used to securely store and encrypt passwords for a database. It allows users to manage secrets, such as database credentials, API keys, and tokens, in a centralized and secure way. It also provides features such as automatic rotation, fine-grained access control, and auditing. AWS Shield is an AWS service that provides protection against Distributed Denial of Service (DDoS) attacks for AWS resources and services. It does not store or encrypt passwords for a database. AWS Identity and Access Management (IAM) is an AWS service that allows users to manage access to AWS resources and services. It can be used to create users, groups, roles, and policies that control who can do what in AWS. It does not store or encrypt passwords for a database. Amazon Cognito is an AWS service that provides user identity and data synchronization for web and mobile applications. It can be used to authenticate and authorize users, manage user profiles, and sync user data across devices. It does not store or encrypt passwords for a database.
Question 29
Which AWS service or tool gives a company the ability to release application changes in an automated way?
Correct Answer: C
AWS CodeDeployis a fully managed deployment service that automates software deployments to a variety of compute services such as Amazon EC2, AWS Lambda, and on-premises servers. CodeDeploy makes it easy to release new features, helps avoid downtime during application deployment, and handles the complexity of updating applications in a scalable and reliable manner. Why other options are not suitable: A: Amazon AppFlow: A service to automate data flows between AWS and SaaS applications, not for application deployment. C: AWS PrivateLink: A service to securely access AWS services from your virtual private cloud (VPC), not related to application deployments. D: Amazon EKS Distro: A Kubernetes distribution for running Kubernetes clusters, not specifically designed for automated deployments. References: AWS CodeDeploy Documentation
Question 30
Which AWS service can generate information that can be used by external auditors?
Correct Answer: C
AWS Config enables users to assess, audit, and evaluate the configurations of AWS resources. It provides information that can be used by external auditors to ensure compliance with various regulatory requirements by tracking changes and maintaining configuration history. Amazon Cognito, FSx, and Inspector do not provide detailed configuration tracking for audit purposes.
