Home/Directory/aws

aws Practice Questions

Page 5 of 12 (1149 total questions)

You are hosting a globally distributed application that requires a single static entry point to route users to the closest healthy region. The application uses HTTP/HTTPS traffic and requires SSL termination and WAF protection. Solution ?
View Question & Answer ➔
Which AWS security service allows you to automatically rotate your database passwords every 30 days and provides a managed way to inject these secrets into your Lambda functions without human intervention?
View Question & Answer ➔
An organization following 'Infrastructure as Code' principle wants to ensure that any change to the production environment's 'Config' settings requires an approval from a second administrator. Solution ?
View Question & Answer ➔
Which AWS monitoring tool allows you to perform complex, interactive analytics and SQL-based queries across millions of log records from various sources like CloudTrail, VPC Flow Logs, and application logs?
View Question & Answer ➔
An organization wants to implement 'Compliance as Code' and wants to ensure that any new EC2 instance created in their account is automatically checked for unauthorized open ports. Which service handles this automated setup?
View Question & Answer ➔
To improve the performance of your web application for users worldwide, you decide to use a managed 'Service' that provides content caching at edge locations and can protect against DDoS attacks. Solution ?
View Question & Answer ➔
An organization is using AWS Systems Manager to collect logs from thousands of EC2 instances. They want to set up an alert that triggers whenever the 'CPU utilization' of any instance stays above 90% for more than 5 minutes. What type of alert should they create?
View Question & Answer ➔
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
View Question & Answer ➔
To protect your AWS resources from being accessed by unauthorized users from the internet, you want to implement a solution that requires 'Multi-Factor Authentication' (MFA) and restricts access based on the user's source IP address. Which identity feature should you use?
View Question & Answer ➔
An organization wants to move their legacy .NET applications to AWS with minimal code changes. They want a managed platform that handles OS patching, scaling, and provides easy integration with active directory. Which service should they choose?
View Question & Answer ➔
How can you securely store and retrieve database connection strings in AWS so they are not hardcoded in your application's source code or configuration files?
View Question & Answer ➔
Your organization wants to optimize the cost of their dev/test environments. They want to ensure that all EC2 instances are automatically shut down at 6 PM and restarted at 8 AM daily. Which AWS Systems Manager feature handles this?
View Question & Answer ➔
An organization wants to analyze the network topology of their massive multi-account AWS environment. They want a visualization that shows how traffic is flowing between their VPCs, Transit Gateways, and Peering connections. Which tool should they use?
View Question & Answer ➔
Which AWS security service uses machine learning to identify data exfiltration patterns or unauthorized logins by analyzing VPC Flow Logs, CloudTrail, and DNS logs across your entire AWS organization?
View Question & Answer ➔
Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the 'IAM Policies' in production requires an approval from a second administrator in a ticket management system. Solution ?
View Question & Answer ➔
Your organization wants to automatically revert an AWS CloudFormation stack update if an 'HTTP 5xx' error spike is detected in the application's ELB metrics during the update. Which CloudFormation feature should be configured?
View Question & Answer ➔
An organization wants to implement 'Self-Healing' for their EC2 instances that are running in a private subnet. They want to ensure that if the 'StatusCheckFailed_System' metric triggers, the instance is automatically recovered with the same IP and metadata. Which service handles this?
View Question & Answer ➔
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
View Question & Answer ➔
In an SRE model, you want to track the 'Error Budget' for your microservices. Which tool provides the best aggregation of Service Level Indicators (SLIs) like latency and error rate to compute your SLO compliance?
View Question & Answer ➔
Your organization wants to automate the response to an 'Unauthorized EC2 Instance Termination' event detected via CloudTrail. They want to receive a notification and automatically launch a replacement instance. Which AWS service is best for orchestrating this response?
View Question & Answer ➔
To minimize the 'Blast Radius' of a potential compromise in a CI/CD pipeline, an architect recommends using 'Dynamic Credentials' for the build environment (CodeBuild). How can this be implemented?
View Question & Answer ➔
Which AWS service allows you to centrally manage and evaluate the configurations of your AWS resources across multiple accounts and regions, providing a 'Compliance Timeline' for each resource?
View Question & Answer ➔
Scenario: You are building a serverless data pipeline and want to ensure that if a Lambda function fails more than 3 times, the event is automatically sent to an SQS queue for manual investigation. Solution ?
View Question & Answer ➔
Which AWS security service can automatically detect 'Publicly Accessible' S3 buckets in your organization and trigger a Lambda function to immediately remove the public permission?
View Question & Answer ➔
To improve the performance and cost of your application which has unpredictable traffic spikes, you want to use an Auto Scaling policy that proactively scales capacity based on historical patterns. Which feature of ASG should you choose?
View Question & Answer ➔
Which AWS tool provides a 'No-Code' experience to identify and troubleshoot operational issues across all your AWS resources by aggregating alerts from CloudWatch, Config, and CloudTrail?
View Question & Answer ➔
An organization wants to analyze the performance of their SQL queries in Amazon Aurora to identify the slowest queries and see execution plans. Which feature of RDS provides this insight?
View Question & Answer ➔
A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?
View Question & Answer ➔
To protect against an entire regional outage, an architect decides to maintain a 'Pilot Light' DR strategy where the database is continuously replicated to a secondary region. Which AWS service facilitates this database replication for Amazon RDS?
View Question & Answer ➔
Which AWS service allows you to centrally manage and automate security configuration checks for your enterprise using a set of best-practice 'Conformance Packs' and policies?
View Question & Answer ➔
To automate the creation of hundreds of AWS accounts for different departments, an organization wants to use a service that provides a 'Landing Zone' and automatically applies governance guardrails. Which service should they use?
View Question & Answer ➔
Scenario: You want to ensure that any change to a production stack in CloudFormation triggers a Slack notification to your SRE team. Solution ?
View Question & Answer ➔
Which AWS tool provides a 'Health Dashboard' that alerts you to AWS infrastructure issues that might affect your specifically deployed resources (e.g., an underlying hardware failure on a specific host)?
View Question & Answer ➔
An organization following SRE principles wants to implement 'Canary' monitoring for their web endpoints to track user-experience metrics like Page Load Time from different global locations. Which service provides this feature?
View Question & Answer ➔
To improve the security and performance of a large fleet of web servers which spend most of their time processing HTTP requests, an organization decides to switch to ARM64-based virtual machines. Which AWS VM series should they choose?
View Question & Answer ➔
Which AWS security service allows you to perform automated security assessment of your EC2 instances to identify 'Network Reachability' and 'Host Vulnerabilities' (CVEs)?
View Question & Answer ➔
Scenario: To minimize the risk of a misconfiguration during a CloudFormation deployment, you want to ensure that a 'Stack Update' is automatically rolled back if a specific 'Wait Condition' is not met within 30 minutes. Solution ?
View Question & Answer ➔
You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?
View Question & Answer ➔
Which AWS service allows you to centrally manage and distribute 'Docker Images' across your organization and provides built-in vulnerability scanning for these images?
View Question & Answer ➔
To improve the performance and cost of a large fleet of virtual machines that are running MongoDB workloads, an organization decides to switch to 'NVMe-based' storage. Which EC2 instance series should they choose?
View Question & Answer ➔
Which AWS service provides a managed 'ETL' (Extract, Transform, Load) solution that can automatically discover and catalog metadata from your data lake in S3 and transform it for analysis?
View Question & Answer ➔
To automate the deployment of a serverless application consisting of dozens of Lambda functions and DynamoDB tables, which AWS CLI extension (or tool) should you use?
View Question & Answer ➔
An organization wants to track the 'Cost per Microservice' in their Kubernetes cluster running on Amazon EKS. Which feature or tool provides this granular cost visibility?
View Question & Answer ➔
Which AWS service provides a 'No-Code' experience to identify and troubleshoot operational issues across all your AWS resources by aggregating alerts from CloudWatch, Config, and CloudTrail?
View Question & Answer ➔
An organization wants to perform 'Stress Testing' on their EC2 fleet by simulating a network outage or instance failure to verify their system's resilience. Which AWS service provides these managed 'Fault Injection' capabilities?
View Question & Answer ➔
To improve the performance of an application which has highly variable traffic, you want to scale your EC2 fleet based on a custom metric like 'Number of messages in SQS queue'. How should you configure this?
View Question & Answer ➔
Which AWS security service allows you to automatically detect 'Sensitive Data' (like PII or credit card numbers) in your S3 buckets at scale?
View Question & Answer ➔
Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?
View Question & Answer ➔
Scenario: To minimize the risk of a single point of failure in your global application, you want to route users to the healthiest and closest region using Anycast technology. Solution ?
View Question & Answer ➔
Your organization wants to implement 'Attribute-based Access Control' (ABAC) in AWS to simplify permission management. They want to ensure that developers can only start/stop virtual machines that have a 'ProjectID' tag matching the 'ProjectID' tag on the developer's IAM user. Which IAM policy condition key enables this dynamic comparison?
View Question & Answer ➔
An enterprise wants to implement 'Service Control Policies' (SCPs) in AWS Organizations to prevent any user (including the root user) from deleting the 'CloudTrail' logs in any member account. How should this SCP be applied?
View Question & Answer ➔
To ensure that all data stored in Amazon S3 is encrypted using 'Customer-Managed Keys' (CMK) in AWS KMS, which AWS service can be used to automatically identify and block the creation of non-compliant buckets?
View Question & Answer ➔
Your organization wants to automate the 'Rotation' of an IAM Access Key for a developer whose keys have not been changed in 90 days. Which combination of AWS services is best for this automation?
View Question & Answer ➔
An organization wants to centrally manage and evaluation findings from multiple security services (GuardDuty, Inspector, Macie) across hundreds of AWS accounts. Which service provides this unified dashboard?
View Question & Answer ➔
To protect against a large-scale Ransomware attack that modifies or deletes objects in your S3 buckets, which feature should you enable to ensure that data remains immutable for a specified period?
View Question & Answer ➔
Scenario: To minimize the risk of data exfiltration, you want to ensure that all communication between your private subnet and S3 stays within the AWS network and does not use the public internet. Solution ?
View Question & Answer ➔
Which AWS service allows you to automatically audit and evaluate the IAM policies in your account to identify 'Over-privileged' roles and provide specific recommendations for downsizing permissions?
View Question & Answer ➔
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
View Question & Answer ➔
To ensure that all AWS accounts created in your organization have a specific 'Security Admin' role with a trust relationship to your central security account, which feature of AWS Organizations should you use?
View Question & Answer ➔
Scenario: To minimize the risk of an 'Insider Threat' accidentally deleting a production database, you want to require 'MFA' for any delete operation performed via the AWS CLI or SDK. How can you enforce this?
View Question & Answer ➔
Which AWS service provides a 'No-Code' experience to audit and evaluation your AWS environment against industry standards like 'NIST' or 'PCI DSS' and provides a detailed compliance report?
View Question & Answer ➔
To protect your application from 'DDoS' attacks that target the 'Transport' and 'Network' layers (L3/L4), which AWS service provides 'Automatic' mitigation as part of its standard offering?
View Question & Answer ➔
An organization following 'Infrastructure as Code' wants to ensure that any change to the production environment's 'Config' settings requires an approval from a second administrator. Solution ?
View Question & Answer ➔
Which AWS security service allows you to automatically rotate your database passwords every 30 days and provides a managed way to inject these secrets into your application without human intervention?
View Question & Answer ➔
Which AWS Systems Manager feature allows you to perform an interactive shell session on an EC2 instance without opening port 22 (SSH) or using an IGW?
View Question & Answer ➔
Your organization wants to implement 'CloudFormation Macros' to automatically inject common security groups into every template deployed in the account. Which AWS service is used to host the logic for these macros?
View Question & Answer ➔
An organization wants to use 'CodeBuild Report Groups' to aggregate and visualize the results of their JUnit tests across multiple build projects. How do they specify the test files in the buildspec.yml?
View Question & Answer ➔
Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?
View Question & Answer ➔
To reduce the cost of X-Ray tracing for a high-volume application while still capturing statistically significant data, which X-Ray feature should you use to adjust the data collection rate dynamically?
View Question & Answer ➔
To improve the performance profile of an application which has highly variable traffic, you want to scale your EC2 fleet based on a custom metric like 'Number of messages in SQS queue'. How should you configure this?
View Question & Answer ➔
Which ALERT service allows you to automatically detect 'Suspicious activity' in your AWS account by analyzing CloudTrail, VPC Flow Logs, and DNS logs across your entire AWS organization using AI?
View Question & Answer ➔
An organization wants to implement 'Zero Trust' networking for their hybrid cloud environment and wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which AWS service fits?
View Question & Answer ➔
Scenario: To minimize the risk of an admin accidentally deleting a production resource group (stack), you want to ensure that no one can perform a 'Delete' operation without first removing a specific 'Stack Policy' from the resource. Solution ?
View Question & Answer ➔
Which AWS security service allow you to automatically check if any IAM roles in your organization have been compromised by analyzing billions of signals daily to detect 'Impossible Travel' or 'Leaked Credentials'?
View Question & Answer ➔
An organization following the 'Least Privilege' principle wants to ensure that developers can only provision EC2 instances if they apply a 'CostCenter' tag. How should they implement this organizational control?
View Question & Answer ➔
Which AWS tool provides a 'Developer Roadmap' to identify and troubleshoot issues in your application by correlating logs, traces, and metrics into a single unified dashboard?
View Question & Answer ➔
To improve the performance of your global application, you want to maintain a 'Multi-Region Active-Active' architecture. Which AWS service is essential for globally distributing and load-balancing traffic across regions?
View Question & Answer ➔
Which AWS security service allows you to automatically evaluate your AWS account against the 'CIS AWS Foundations Benchmark' and provide a detailed compliance report with remediation guidance?
View Question & Answer ➔
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?
View Question & Answer ➔
An organization building a serverless data pipeline wants to ensure that all data stored in S3 is automatically encrypted at rest and that every 'Decrypt' operation by an engineer is logged for auditing. Solution ?
View Question & Answer ➔
Scenario: To minimize the risk of a misconfiguration during a CloudFormation deployment, you decide to use a 'Stack Policy' that explicitly denies all update actions for your production RDS instances. Solution ?
View Question & Answer ➔
Which AWS service provides a 'No-Code' experience to identify and troubleshoot operational issues by aggregating alerts from CloudWatch, Config, and CloudTrail into a single 'Operational Hub'?
View Question & Answer ➔
Your organization wants to deploy an application across 50 AWS accounts using AWS CodePipeline. They want to ensure that a central 'Release' account manages the pipeline, and artifacts are stored in a central S3 bucket accessible by all member accounts. Which combination of S3 bucket policies and IAM roles is required?
View Question & Answer ➔
An organization wants to use AWS CodeDeploy to manage deployments to their on-premises Windows servers. They want to ensure that the deployment process is identical to their EC2 deployments. Which component must be installed on the on-premises servers?
View Question & Answer ➔
To implement a 'GitOps' workflow for a serverless application, you want a specific AWS CodeCommit branch to automatically trigger a CodePipeline only when a file matching the pattern 'infra/*.yml' is modified. How can you implement this filtering logic?
View Question & Answer ➔
Your organization wants to share 'IAM Roles' and 'CloudWatch Alarms' across 100 accounts in a specific Organizational Unit (OU). They want new accounts added to the OU to automatically receive these resources. Solution ?
View Question & Answer ➔
Which AWS service allows you to centrally manage and share 'SAML' and 'OIDC' identities (like Azure AD or Okta) across multiple AWS accounts, providing a unified single sign-on experience for developers?
View Question & Answer ➔
Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Amazon EC2 instance type is optimized for this?
View Question & Answer ➔
Scenario: To minimize the risk of a 'Deployment Stagnation' (where a failed deployment leaves the environment in an inconsistent state), you want to ensure that CodeDeploy automatically rolls back to the last known healthy version if any life-cycle hook fails. Solution ?
View Question & Answer ➔
An organization wants to implement 'Infrastructure as Code' for their multi-region AWS environment. They want to use a tool that allow them to deploy CloudFormation stacks into hundreds of accounts across multiple regions with a single operation. Which feature should they use?
View Question & Answer ➔
Your team is using AWS CodeDeploy to update a 'Lambda' function. They want to ensure that a 'Validation' function runs after the traffic is fully shifted to the new version. Which AppSpec hook should they use?
View Question & Answer ➔
An organization wants to use 'AWS Systems Manager Automation' to automatically fix 'Non-Compliant' S3 buckets detected by AWS Config. How do they pass the 'ResourceID' from Config to the Automation document?
View Question & Answer ➔
To implement 'Feature Flags' in an application running on EC2, you decide to use AWS AppConfig. You want to ensure that the application receives updates without polling a central API constantly. Which method should the application use?
View Question & Answer ➔
Which AWS service allows you to centrally manage 'SSH Keys' for your EC2 fleet and provides an audit log of who accessed which instance and when?
View Question & Answer ➔
Scenario: You are using AWS OpsWorks for Chef to manage your application servers. You want to run a specific recipe only when a new instance 'Joins' the stack. Which lifecycle event should you use?
View Question & Answer ➔
An organization wants to use 'AWS CloudMap' to provide service discovery for their containerized microservices. How weight-based routing can be implemented for 'Blue/Green' deployments within CloudMap?
View Question & Answer ➔
To monitor the performance of your 'Elastic Beanstalk' environment, you want to enable 'Enhanced Health Reporting'. Where do you configure the specific metrics to be collected?
View Question & Answer ➔
Your application requires persistent block storage that survives Amazon EC2 instance termination. Which service should you use?
View Question & Answer ➔
You need to create a backup of your Amazon EBS volume for disaster recovery. What feature should you use?
View Question & Answer ➔
Which AWS security service allows you to automatically assess your ECR container images for software vulnerabilities whenever they are pushed to the registry?
View Question & Answer ➔

← PreviousPage 5 of 12Next →

aws Practice Questions

You are hosting a globally distributed application that requires a single static entry point to route users to the closest healthy region. The application uses HTTP/HTTPS traffic and requires SSL termination and WAF protection. Solution ?

Which AWS security service allows you to automatically rotate your database passwords every 30 days and provides a managed way to inject these secrets into your Lambda functions without human intervention?

An organization following 'Infrastructure as Code' principle wants to ensure that any change to the production environment's 'Config' settings requires an approval from a second administrator. Solution ?

Which AWS monitoring tool allows you to perform complex, interactive analytics and SQL-based queries across millions of log records from various sources like CloudTrail, VPC Flow Logs, and application logs?

An organization wants to implement 'Compliance as Code' and wants to ensure that any new EC2 instance created in their account is automatically checked for unauthorized open ports. Which service handles this automated setup?

To improve the performance of your web application for users worldwide, you decide to use a managed 'Service' that provides content caching at edge locations and can protect against DDoS attacks. Solution ?

An organization is using AWS Systems Manager to collect logs from thousands of EC2 instances. They want to set up an alert that triggers whenever the 'CPU utilization' of any instance stays above 90% for more than 5 minutes. What type of alert should they create?

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

To protect your AWS resources from being accessed by unauthorized users from the internet, you want to implement a solution that requires 'Multi-Factor Authentication' (MFA) and restricts access based on the user's source IP address. Which identity feature should you use?

An organization wants to move their legacy .NET applications to AWS with minimal code changes. They want a managed platform that handles OS patching, scaling, and provides easy integration with active directory. Which service should they choose?

How can you securely store and retrieve database connection strings in AWS so they are not hardcoded in your application's source code or configuration files?

Your organization wants to optimize the cost of their dev/test environments. They want to ensure that all EC2 instances are automatically shut down at 6 PM and restarted at 8 AM daily. Which AWS Systems Manager feature handles this?

An organization wants to analyze the network topology of their massive multi-account AWS environment. They want a visualization that shows how traffic is flowing between their VPCs, Transit Gateways, and Peering connections. Which tool should they use?

Which AWS security service uses machine learning to identify data exfiltration patterns or unauthorized logins by analyzing VPC Flow Logs, CloudTrail, and DNS logs across your entire AWS organization?

Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the 'IAM Policies' in production requires an approval from a second administrator in a ticket management system. Solution ?

Your organization wants to automatically revert an AWS CloudFormation stack update if an 'HTTP 5xx' error spike is detected in the application's ELB metrics during the update. Which CloudFormation feature should be configured?

An organization wants to implement 'Self-Healing' for their EC2 instances that are running in a private subnet. They want to ensure that if the 'StatusCheckFailed_System' metric triggers, the instance is automatically recovered with the same IP and metadata. Which service handles this?

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

In an SRE model, you want to track the 'Error Budget' for your microservices. Which tool provides the best aggregation of Service Level Indicators (SLIs) like latency and error rate to compute your SLO compliance?

Your organization wants to automate the response to an 'Unauthorized EC2 Instance Termination' event detected via CloudTrail. They want to receive a notification and automatically launch a replacement instance. Which AWS service is best for orchestrating this response?

To minimize the 'Blast Radius' of a potential compromise in a CI/CD pipeline, an architect recommends using 'Dynamic Credentials' for the build environment (CodeBuild). How can this be implemented?

Which AWS service allows you to centrally manage and evaluate the configurations of your AWS resources across multiple accounts and regions, providing a 'Compliance Timeline' for each resource?

Scenario: You are building a serverless data pipeline and want to ensure that if a Lambda function fails more than 3 times, the event is automatically sent to an SQS queue for manual investigation. Solution ?

Which AWS security service can automatically detect 'Publicly Accessible' S3 buckets in your organization and trigger a Lambda function to immediately remove the public permission?

To improve the performance and cost of your application which has unpredictable traffic spikes, you want to use an Auto Scaling policy that proactively scales capacity based on historical patterns. Which feature of ASG should you choose?

Which AWS tool provides a 'No-Code' experience to identify and troubleshoot operational issues across all your AWS resources by aggregating alerts from CloudWatch, Config, and CloudTrail?

An organization wants to analyze the performance of their SQL queries in Amazon Aurora to identify the slowest queries and see execution plans. Which feature of RDS provides this insight?

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

To protect against an entire regional outage, an architect decides to maintain a 'Pilot Light' DR strategy where the database is continuously replicated to a secondary region. Which AWS service facilitates this database replication for Amazon RDS?

Which AWS service allows you to centrally manage and automate security configuration checks for your enterprise using a set of best-practice 'Conformance Packs' and policies?

To automate the creation of hundreds of AWS accounts for different departments, an organization wants to use a service that provides a 'Landing Zone' and automatically applies governance guardrails. Which service should they use?

Scenario: You want to ensure that any change to a production stack in CloudFormation triggers a Slack notification to your SRE team. Solution ?

Which AWS tool provides a 'Health Dashboard' that alerts you to AWS infrastructure issues that might affect your specifically deployed resources (e.g., an underlying hardware failure on a specific host)?

An organization following SRE principles wants to implement 'Canary' monitoring for their web endpoints to track user-experience metrics like Page Load Time from different global locations. Which service provides this feature?

To improve the security and performance of a large fleet of web servers which spend most of their time processing HTTP requests, an organization decides to switch to ARM64-based virtual machines. Which AWS VM series should they choose?

Which AWS security service allows you to perform automated security assessment of your EC2 instances to identify 'Network Reachability' and 'Host Vulnerabilities' (CVEs)?

Scenario: To minimize the risk of a misconfiguration during a CloudFormation deployment, you want to ensure that a 'Stack Update' is automatically rolled back if a specific 'Wait Condition' is not met within 30 minutes. Solution ?

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Which AWS service allows you to centrally manage and distribute 'Docker Images' across your organization and provides built-in vulnerability scanning for these images?

To improve the performance and cost of a large fleet of virtual machines that are running MongoDB workloads, an organization decides to switch to 'NVMe-based' storage. Which EC2 instance series should they choose?

Which AWS service provides a managed 'ETL' (Extract, Transform, Load) solution that can automatically discover and catalog metadata from your data lake in S3 and transform it for analysis?

To automate the deployment of a serverless application consisting of dozens of Lambda functions and DynamoDB tables, which AWS CLI extension (or tool) should you use?

An organization wants to track the 'Cost per Microservice' in their Kubernetes cluster running on Amazon EKS. Which feature or tool provides this granular cost visibility?

Which AWS service provides a 'No-Code' experience to identify and troubleshoot operational issues across all your AWS resources by aggregating alerts from CloudWatch, Config, and CloudTrail?

An organization wants to perform 'Stress Testing' on their EC2 fleet by simulating a network outage or instance failure to verify their system's resilience. Which AWS service provides these managed 'Fault Injection' capabilities?

To improve the performance of an application which has highly variable traffic, you want to scale your EC2 fleet based on a custom metric like 'Number of messages in SQS queue'. How should you configure this?

Which AWS security service allows you to automatically detect 'Sensitive Data' (like PII or credit card numbers) in your S3 buckets at scale?

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Scenario: To minimize the risk of a single point of failure in your global application, you want to route users to the healthiest and closest region using Anycast technology. Solution ?

An enterprise wants to implement 'Service Control Policies' (SCPs) in AWS Organizations to prevent any user (including the root user) from deleting the 'CloudTrail' logs in any member account. How should this SCP be applied?

To ensure that all data stored in Amazon S3 is encrypted using 'Customer-Managed Keys' (CMK) in AWS KMS, which AWS service can be used to automatically identify and block the creation of non-compliant buckets?

Your organization wants to automate the 'Rotation' of an IAM Access Key for a developer whose keys have not been changed in 90 days. Which combination of AWS services is best for this automation?

An organization wants to centrally manage and evaluation findings from multiple security services (GuardDuty, Inspector, Macie) across hundreds of AWS accounts. Which service provides this unified dashboard?

To protect against a large-scale Ransomware attack that modifies or deletes objects in your S3 buckets, which feature should you enable to ensure that data remains immutable for a specified period?

Scenario: To minimize the risk of data exfiltration, you want to ensure that all communication between your private subnet and S3 stays within the AWS network and does not use the public internet. Solution ?

Which AWS service allows you to automatically audit and evaluate the IAM policies in your account to identify 'Over-privileged' roles and provide specific recommendations for downsizing permissions?

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

To ensure that all AWS accounts created in your organization have a specific 'Security Admin' role with a trust relationship to your central security account, which feature of AWS Organizations should you use?

Scenario: To minimize the risk of an 'Insider Threat' accidentally deleting a production database, you want to require 'MFA' for any delete operation performed via the AWS CLI or SDK. How can you enforce this?

Which AWS service provides a 'No-Code' experience to audit and evaluation your AWS environment against industry standards like 'NIST' or 'PCI DSS' and provides a detailed compliance report?

To protect your application from 'DDoS' attacks that target the 'Transport' and 'Network' layers (L3/L4), which AWS service provides 'Automatic' mitigation as part of its standard offering?

An organization following 'Infrastructure as Code' wants to ensure that any change to the production environment's 'Config' settings requires an approval from a second administrator. Solution ?

Which AWS security service allows you to automatically rotate your database passwords every 30 days and provides a managed way to inject these secrets into your application without human intervention?

Which AWS Systems Manager feature allows you to perform an interactive shell session on an EC2 instance without opening port 22 (SSH) or using an IGW?

Your organization wants to implement 'CloudFormation Macros' to automatically inject common security groups into every template deployed in the account. Which AWS service is used to host the logic for these macros?

An organization wants to use 'CodeBuild Report Groups' to aggregate and visualize the results of their JUnit tests across multiple build projects. How do they specify the test files in the buildspec.yml?

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

To reduce the cost of X-Ray tracing for a high-volume application while still capturing statistically significant data, which X-Ray feature should you use to adjust the data collection rate dynamically?

To improve the performance profile of an application which has highly variable traffic, you want to scale your EC2 fleet based on a custom metric like 'Number of messages in SQS queue'. How should you configure this?

Which ALERT service allows you to automatically detect 'Suspicious activity' in your AWS account by analyzing CloudTrail, VPC Flow Logs, and DNS logs across your entire AWS organization using AI?

An organization wants to implement 'Zero Trust' networking for their hybrid cloud environment and wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which AWS service fits?

Scenario: To minimize the risk of an admin accidentally deleting a production resource group (stack), you want to ensure that no one can perform a 'Delete' operation without first removing a specific 'Stack Policy' from the resource. Solution ?

Which AWS security service allow you to automatically check if any IAM roles in your organization have been compromised by analyzing billions of signals daily to detect 'Impossible Travel' or 'Leaked Credentials'?

An organization following the 'Least Privilege' principle wants to ensure that developers can only provision EC2 instances if they apply a 'CostCenter' tag. How should they implement this organizational control?

Which AWS tool provides a 'Developer Roadmap' to identify and troubleshoot issues in your application by correlating logs, traces, and metrics into a single unified dashboard?

To improve the performance of your global application, you want to maintain a 'Multi-Region Active-Active' architecture. Which AWS service is essential for globally distributing and load-balancing traffic across regions?

Which AWS security service allows you to automatically evaluate your AWS account against the 'CIS AWS Foundations Benchmark' and provide a detailed compliance report with remediation guidance?

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?

An organization building a serverless data pipeline wants to ensure that all data stored in S3 is automatically encrypted at rest and that every 'Decrypt' operation by an engineer is logged for auditing. Solution ?