Home/Directory/aws

aws Practice Questions

Page 6 of 12 (1149 total questions)

Scenario: You want to ensure that any change to a 'KMS Key Policy' requires an approval from a senior security engineer. Since KMS doesn't support approval rules directly, how can you implement this?
View Question & Answer ➔
An organization wants to implement 'Continuous Compliance' for their multi-account environment. They want a report that shows the compliance status of all accounts against the 'PCI DSS' standard. Which service provides this at scale?
View Question & Answer ➔
Which AWS tool provides a 'No-Code' experience to audit and evaluation your AWS environment against industry standards like 'NIST' or 'ISO' and provides a detailed compliance report?
View Question & Answer ➔
To protect your public-facing web applications from 'Session Hijacking' and other advanced attacks, you want to implement a solution that provides 'WAF' protection and integrates with 'Cognito' for user authentication. Solution ?
View Question & Answer ➔
An organization following SRE principles wants to implement 'Error Budgets' for their serverless microservices. They want to calculate the 'Success Rate' of their Lambda functions. Which CloudWatch feature facilitates this calculation across multiple services?
View Question & Answer ➔
Which AWS service allows you to centrally manage and evaluation your 'IAM' usage to identify 'Dormant' users and 'Unused' permissions across your entire organization?
View Question & Answer ➔
To improve the performance of your high-traffic web application which has globally distributed users, you decide to use 'AWS Global Accelerator'. How does it differ from a standard CloudFront setup?
View Question & Answer ➔
You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?
View Question & Answer ➔
Which AWS security service can automatically identify 'Personally Identifiable Information' (PII) in your S3 buckets and provide a risk assessment of your data exposure?
View Question & Answer ➔
Scenario: To minimize the risk of 'Accidental Resource Deletion' during a CloudFormation stack deletion, you want to ensure that specific resources (like S3 buckets or RDS instances) are retained. Which attribute should you add to the resource definition?
View Question & Answer ➔
Which AWS Systems Manager feature allows you to securely manage 'Patching' for your fleet of both Linux and Windows instances using a centralized policy and schedule?
View Question & Answer ➔
An organization wants to implement 'Canary' monitoring for their web endpoints. They want a script that simulates a user 'Logging In' and 'Adding a Product to Cart' every 5 minutes. Which service provides this feature?
View Question & Answer ➔
To improve the performance of your serverless microservices architecture, you decide to use 'AWS X-Ray' for distributed tracing. How do you instrument your Lambda function code?
View Question & Answer ➔
Which AWS service provides a 'No-Code' experience to visualize and troubleshoot application performance by aggregating traces from X-Ray and metrics from CloudWatch into a single 'Service Map'?
View Question & Answer ➔
Your organization wants to implement a 'Point-to-Point' integration between an Amazon SQS queue and an enrichment Lambda function without writing custom polling logic. Which AWS service provides this serverless integration with built-in filtering?
View Question & Answer ➔
An organization wants to schedule a recurring administrative task (e.g., triggering a Lambda every night at 2 AM) across thousands of different time zones globally. Which service is optimized for this high-scale scheduling?
View Question & Answer ➔
Your organization wants to stream CloudWatch metrics in real-time to a 3rd-party analytics platform with low latency. Which CloudWatch feature provides a managed, continuous stream of metric data to a destination like Kinesis Data Firehose?
View Question & Answer ➔
You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?
View Question & Answer ➔
An organization wants to perform 'A/B Testing' and 'Feature Flagging' for their new web application. They want a managed AWS service that can automatically handle traffic shifting and provide statistical analysis of the performance of different versions. Which service fits?
View Question & Answer ➔
To monitor the real-world performance of a web application from the perspective of actual users (e.g., page load times, JavaScript errors), which CloudWatch feature should you implement?
View Question & Answer ➔
Your team is running a large microservices architecture on Amazon EKS. They want a managed solution to collect, aggregate, and visualize container-level metrics (CPU, memory, networking) without managing a Prometheus server. Which feature should they enable?
View Question & Answer ➔
An organization wants to analyze why their AWS Lambda functions are experiencing occasional 'Cold Starts' and high latency. They want a managed service that automatically detects and visualizes performance bottlenecks in their serverless code. Which feature should they enable?
View Question & Answer ➔
Scenario: To minimize the time to debug 'Dependency Failures' in a complex application, you want a visualization that correlates traces, metrics, and logs in a single unified view. Solution ?
View Question & Answer ➔
Which CloudWatch Logs feature allows you to perform SQL-like queries across log groups to identify the 'Top 10 IP addresses' causing 403 errors in your VPC Flow Logs?
View Question & Answer ➔
An organization wants to track the 'Top Talkers' in their network (e.g., which users are consuming the most bandwidth) in real-time. Which CloudWatch feature identifies these 'high-cardinality' contributors?
View Question & Answer ➔
To reduce the cost of storing millions of log lines that are rarely accessed, you want to automatically transition logs from 'Standard' storage to 'Infrequent Access' or 'Archive' in CloudWatch. How can you implement this?
View Question & Answer ➔
Scenario: To minimize the risk of a 'Partial Outage' going unnoticed, you want to set up an alarm that triggers only if the 'Error Rate' exceeds 1% AND the 'Request Volume' is at least 100 requests per minute (to avoid false positives with low traffic). Solution ?
View Question & Answer ➔
You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?
View Question & Answer ➔
You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?
View Question & Answer ➔
To improve the observability of internet-facing applications, you want to monitor the internet traffic and identify performance issues caused by 'Internet Service Providers' (ISPs) between your users and AWS. Which service should you use?
View Question & Answer ➔
Your team wants to automate the creation of CI/CD pipelines for their serverless applications using 'SAM Pipelines'. Which command-line tool provides a guided experience to generate these pipeline configurations?
View Question & Answer ➔
Which AWS service allows you to centrally manage and automate the deployment of 'Service Control Policies' (SCPs) across multiple AWS accounts in an organization, ensuring that only specific actions (e.g., no deleting S3 buckets) are allowed?
View Question & Answer ➔
To ensure that all new AWS accounts created in your organization follow a baseline 'Security Configuration' (e.g., CloudTrail enabled, GuardDuty enabled), which AWS service should you use to automate the account provisioning process?
View Question & Answer ➔
An organization wants to implement 'Zero-Trust' security for their internal applications. They want to ensure that all traffic between their microservices is encrypted and authorized using mutually authenticated TLS (mTLS). Solution ?
View Question & Answer ➔
Which AWS tool provides a 'Low-Code' way to design and automate complex business logic workflows (e.g., processing insurance claims with multiple approval steps) using a visual designer?
View Question & Answer ➔
Your organization wants to implement 'Approval Rules' for pull requests in AWS CodeCommit. They want to ensure that any change to the 'Production' branch requires at least two approvals from a specific IAM group. How can you automate this enforcement?
View Question & Answer ➔
An organization wants to monitor the health of their containerized microservices running on Amazon ECS (Fargate). They want to receive an alert if the 'CPU Utilization' of any service exceeds 80% for more than 3 consecutive minutes. Which CloudWatch feature should they use?
View Question & Answer ➔
You need to monitor CPU utilization of your Amazon EC2 instances and set up alarms for automated actions. Which service should you use?
View Question & Answer ➔
Your application running on Amazon EC2 needs a central location for log aggregation and real-time analysis. Which Amazon CloudWatch capability should you use?
View Question & Answer ➔
To improve the security of their CI/CD pipeline, an architect recommends using 'VPC Endpoints' for all AWS Code* services to ensure traffic never leaves the AWS global network. Which type of VPC endpoint is used for CodePipeline and CodeBuild?
View Question & Answer ➔
Your team wants to implement 'Feature Toggles' for their application using AWS AppConfig. They want to ensure that a configuration change is rolled back automatically if it triggers a CloudWatch alarm during the deployment. Which AppConfig feature enables this?
View Question & Answer ➔
An organization wants to perform 'Canary' testing for their web application. They want to route 5% of global traffic to a new experimental region for 2 hours before deciding whether to failover completely. Which AWS service facilitates this global traffic shifting?
View Question & Answer ➔
Which AWS Systems Manager feature allows you to centrally manage and evaluate findings from multiple security services (GuardDuty, Inspector, Macie) and provides a 'Compliance Score' for your resources?
View Question & Answer ➔
Scenario: To minimize the risk of 'Configuration Drift' in your multi-account environment, you want a service that automatically scans your CloudFormation stacks and alerts you if any resources have been modified outside of CloudFormation. Solution ?
View Question & Answer ➔
Which AWS security service allows you to automatically audit and evaluate the IAM policies in your account to identify 'Over-privileged' roles and provide specific recommendations for downsizing permissions?
View Question & Answer ➔
An organization wants to use 'AWS Proton' to manage infrastructure for their serverless microservices. They want to ensure that when a developer updates a 'Service Template', it automatically triggers an update for all 'Service Instances'. How is this automated?
View Question & Answer ➔
Which AWS networking service allows you to create a secure, high-speed connection between your on-premises network and AWS over the internet with the ability to dynamically route traffic using BGP?
View Question & Answer ➔
You need to route traffic to Amazon EC2 instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?
View Question & Answer ➔
To improve the performance and cost of your web application for users worldwide, you decide to use a managed 'Service' that provides content caching at edge locations and can protect against DDoS attacks. Solution ?
View Question & Answer ➔
An organization following the 'Zero Trust' principle wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which AWS service fits?
View Question & Answer ➔
Scenario: To minimize the risk of an admin accidentally deleting a production stack, you want to ensure that no one can perform a 'Delete' operation without first removing a specific 'Stack Policy' from the resource. Solution ?
View Question & Answer ➔
Scenario: You want to monitor the 'End-to-End' performance of your web application from the perspective of real users globally. You want to see how long it takes for a page to load and identify any JavaScript errors on the client side. Solution ?
View Question & Answer ➔
Your organization wants to implement a 'Multi-Region' disaster recovery strategy for their DynamoDB-backed application. They require active-active replication with sub-second latency for global writes. Which feature should they use?
View Question & Answer ➔
An organization wants to reduce the 'Warm-up' time for their Auto Scaling group during sudden traffic spikes. They want to maintain a pool of pre-initialized instances that are stopped but can be started quickly. Which ASG feature should they use?
View Question & Answer ➔
To ensure that your CloudFront distribution remains available even if the primary S3 origin experiences a regional outage, how should you configure the origin settings?
View Question & Answer ➔
Which AWS networking service uses Anycast technology to provide two static IP addresses that act as a fixed entry point to your application endpoints (ALB, NLB, EC2) in multiple regions, improving availability and performance?
View Question & Answer ➔
An organization wants to ensure that all their critical EC2 instances are spread across different physical hardware racks within an Availability Zone to minimize the impact of a single rack failure. Which placement strategy should they use?
View Question & Answer ➔
Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?
View Question & Answer ➔
To implement a zero-downtime database migration from an on-premises Oracle database to Amazon Aurora, which service should you use to handle the continuous data replication?
View Question & Answer ➔
Which AWS security service allows you to centrally manage and automate security configuration checks for your enterprise using a set of best-practice 'Conformance Packs' and policies?
View Question & Answer ➔
To improve the 'Developer Experience' (DevEx), your organization wants to provide a self-service portal where developers can provision pre-approved 'Infrastructure' environments (e.g., a dev VPC with an EKS cluster). Which service fits?
View Question & Answer ➔
Which AWS security service can automatically detect 'Suspicious activity' in your AWS account (e.g., an EC2 instance communicating with a known command-and-control server) and provide detailed threat findings?
View Question & Answer ➔
Your organization wants to optimize the cost of their S3 storage by automatically moving objects that are not accessed frequently to a 'Lower Cost' storage tier. Which S3 feature should তারা ব্যবহার করবে?
View Question & Answer ➔
To ensure that your CI/CD pipeline can 'Roll Back' automatically if a deployment triggers a CloudWatch alarm, which CodeDeploy feature should you configure?
View Question & Answer ➔
An organization wants to implement 'Compliance as Code' and wants to ensure that all their S3 buckets have 'Versioning' and 'Encryption' enabled. Which service provides these continuous compliance checks at scale?
View Question & Answer ➔
Your organization wants to automatically detect potential security vulnerabilities and code quality issues in their Java/Python code during the 'Review' phase of a CodeCommit pull request. Which AWS service provides these AI-powered scans?
View Question & Answer ➔
Your organization wants to implement a 'Multi-Region' disaster recovery strategy for their application running on Amazon EKS. They want to ensure that they can quickly failover to another region with minimal manual intervention. Which AWS service facilitates this global networking?
View Question & Answer ➔
Which AWS development service provides a 'Cloud-Native' integrated development environment (IDE) that you can access from your browser and includes pre-configured tools for AWS development?
View Question & Answer ➔
Scenario: You want to monitor the health of your 'Hybrid Cloud' environment and receive alerts if any of your on-premises servers or AWS resources become unavailable. Which combination of services provides this unified monitoring?
View Question & Answer ➔
To improve the performance of your 'Serverless' application, you want to use 'AWS X-Ray' to identify bottlenecks in your Lambda functions. HowWeight-based sampling can be configured in X-Ray?
View Question & Answer ➔
Which AWS security service allows you to automatically audit and evaluate your AWS account against the 'CIS AWS Foundations Benchmark' and provide a detailed compliance report with remediation guidance?
View Question & Answer ➔
Your organization wants to implement 'Canary' testing for their web application. They want to route 5% of traffic to a new experimental region for 2 hours before deciding whether to failover completely. Which AWS service facilitates this global traffic shifting?
View Question & Answer ➔
To identify the root cause of a security anomaly detected by GuardDuty (e.g., an EC2 instance making unusual API calls), you want a service that automatically correlates data from VPC Flow Logs, CloudTrail, and GuardDuty into a graph-based visualization. Which service should you use?
View Question & Answer ➔
Your serverless application requires a specialized monitoring agent to run alongside your Lambda function code as a separate process. Which Lambda feature allows you to bundle and run these external processes without modifying your function's handler?
View Question & Answer ➔
An organization wants to use 'AWS AppConfig' to manage their application configurations. They want to ensure that any new configuration version is validated against a 'JSON Schema' before it can be deployed. How Weight-based routing can be implemented for 'Blue/Green' deployments within CloudMap?
View Question & Answer ➔
An organization wants to monitor the performance of their 'Elastic Beanstalk' environment, you want to enable 'Enhanced Health Reporting'. Where do you configure the specific metrics to be collected?
View Question & Answer ➔
To monitor the health of your 'Cross-Region' VPC Peering connections and receive alerts for high latency or packet loss, which CloudWatch feature provides a dedicated 'Network Roadmap' for your VPCs?
View Question & Answer ➔
Which AWS development service allows you to create 'Development Environments' that can be automatically paused when not in use to save cost, while preserving the state of your workspace and open files?
View Question & Answer ➔
Scenario: You want to ensure that all 'CloudFormation StackSets' deployments in your organization are restricted to specific 'AWS Regions' only. Which service and feature should you use to enforce this organizational guardrail?
View Question & Answer ➔
Which AWS security service allows you to automatically audit your S3 buckets for 'Sensitive Data' like Credit Card numbers and provides a managed way to classify and protect this data at scale?
View Question & Answer ➔
To improve the performance of your high-volume 'SQS' message processing, you want to implement 'Long Polling'. What configuration parameter should you adjust in the SQS queue?
View Question & Answer ➔
Which AWS service provides a managed 'Airflow' environment for orchestrating complex data pipelines using Python-based DAGs without managing the underlying infrastructure?
View Question & Answer ➔
Scenario: You want to monitor the 'API Calls' made by a specific IAM user over the last 24 hours to troubleshoot an unauthorized access error. Which service and feature should you primarily use?
View Question & Answer ➔
Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?
View Question & Answer ➔
An organization wants to implement 'Auto-Remediation' for their AWS resources. They want to ensure that if a public S3 bucket is detected, a Lambda function is immediately triggered to make it private. Which combination of services provides this native integration?
View Question & Answer ➔
Which AWS tool provides a 'No-Code' experience to identify and troubleshoot operational issues by aggregating alerts from CloudWatch, Config, and CloudTrail into a single 'Operational Hub'?
View Question & Answer ➔
To improve the security profile of your VPC, you want to block traffic from 'Known Malicious IP addresses' at the network level using a managed list. Which service and feature provides this?
View Question & Answer ➔
You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?
View Question & Answer ➔
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
View Question & Answer ➔
You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?
View Question & Answer ➔
A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?
View Question & Answer ➔
Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?
View Question & Answer ➔
You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?
View Question & Answer ➔
Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?
View Question & Answer ➔
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
View Question & Answer ➔
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
View Question & Answer ➔
A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?
View Question & Answer ➔
You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?
View Question & Answer ➔
Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?
View Question & Answer ➔
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
View Question & Answer ➔

← PreviousPage 6 of 12Next →

aws Practice Questions

Scenario: You want to ensure that any change to a 'KMS Key Policy' requires an approval from a senior security engineer. Since KMS doesn't support approval rules directly, how can you implement this?

An organization wants to implement 'Continuous Compliance' for their multi-account environment. They want a report that shows the compliance status of all accounts against the 'PCI DSS' standard. Which service provides this at scale?

Which AWS tool provides a 'No-Code' experience to audit and evaluation your AWS environment against industry standards like 'NIST' or 'ISO' and provides a detailed compliance report?

To protect your public-facing web applications from 'Session Hijacking' and other advanced attacks, you want to implement a solution that provides 'WAF' protection and integrates with 'Cognito' for user authentication. Solution ?

An organization following SRE principles wants to implement 'Error Budgets' for their serverless microservices. They want to calculate the 'Success Rate' of their Lambda functions. Which CloudWatch feature facilitates this calculation across multiple services?

Which AWS service allows you to centrally manage and evaluation your 'IAM' usage to identify 'Dormant' users and 'Unused' permissions across your entire organization?

To improve the performance of your high-traffic web application which has globally distributed users, you decide to use 'AWS Global Accelerator'. How does it differ from a standard CloudFront setup?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Which AWS security service can automatically identify 'Personally Identifiable Information' (PII) in your S3 buckets and provide a risk assessment of your data exposure?

Scenario: To minimize the risk of 'Accidental Resource Deletion' during a CloudFormation stack deletion, you want to ensure that specific resources (like S3 buckets or RDS instances) are retained. Which attribute should you add to the resource definition?

Which AWS Systems Manager feature allows you to securely manage 'Patching' for your fleet of both Linux and Windows instances using a centralized policy and schedule?

An organization wants to implement 'Canary' monitoring for their web endpoints. They want a script that simulates a user 'Logging In' and 'Adding a Product to Cart' every 5 minutes. Which service provides this feature?

To improve the performance of your serverless microservices architecture, you decide to use 'AWS X-Ray' for distributed tracing. How do you instrument your Lambda function code?

Which AWS service provides a 'No-Code' experience to visualize and troubleshoot application performance by aggregating traces from X-Ray and metrics from CloudWatch into a single 'Service Map'?

Your organization wants to implement a 'Point-to-Point' integration between an Amazon SQS queue and an enrichment Lambda function without writing custom polling logic. Which AWS service provides this serverless integration with built-in filtering?

An organization wants to schedule a recurring administrative task (e.g., triggering a Lambda every night at 2 AM) across thousands of different time zones globally. Which service is optimized for this high-scale scheduling?

Your organization wants to stream CloudWatch metrics in real-time to a 3rd-party analytics platform with low latency. Which CloudWatch feature provides a managed, continuous stream of metric data to a destination like Kinesis Data Firehose?

You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?

An organization wants to perform 'A/B Testing' and 'Feature Flagging' for their new web application. They want a managed AWS service that can automatically handle traffic shifting and provide statistical analysis of the performance of different versions. Which service fits?

To monitor the real-world performance of a web application from the perspective of actual users (e.g., page load times, JavaScript errors), which CloudWatch feature should you implement?

Your team is running a large microservices architecture on Amazon EKS. They want a managed solution to collect, aggregate, and visualize container-level metrics (CPU, memory, networking) without managing a Prometheus server. Which feature should they enable?

An organization wants to analyze why their AWS Lambda functions are experiencing occasional 'Cold Starts' and high latency. They want a managed service that automatically detects and visualizes performance bottlenecks in their serverless code. Which feature should they enable?

Scenario: To minimize the time to debug 'Dependency Failures' in a complex application, you want a visualization that correlates traces, metrics, and logs in a single unified view. Solution ?

Which CloudWatch Logs feature allows you to perform SQL-like queries across log groups to identify the 'Top 10 IP addresses' causing 403 errors in your VPC Flow Logs?

An organization wants to track the 'Top Talkers' in their network (e.g., which users are consuming the most bandwidth) in real-time. Which CloudWatch feature identifies these 'high-cardinality' contributors?

To reduce the cost of storing millions of log lines that are rarely accessed, you want to automatically transition logs from 'Standard' storage to 'Infrequent Access' or 'Archive' in CloudWatch. How can you implement this?

Scenario: To minimize the risk of a 'Partial Outage' going unnoticed, you want to set up an alarm that triggers only if the 'Error Rate' exceeds 1% AND the 'Request Volume' is at least 100 requests per minute (to avoid false positives with low traffic). Solution ?

You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?

To improve the observability of internet-facing applications, you want to monitor the internet traffic and identify performance issues caused by 'Internet Service Providers' (ISPs) between your users and AWS. Which service should you use?

Your team wants to automate the creation of CI/CD pipelines for their serverless applications using 'SAM Pipelines'. Which command-line tool provides a guided experience to generate these pipeline configurations?

Which AWS service allows you to centrally manage and automate the deployment of 'Service Control Policies' (SCPs) across multiple AWS accounts in an organization, ensuring that only specific actions (e.g., no deleting S3 buckets) are allowed?

To ensure that all new AWS accounts created in your organization follow a baseline 'Security Configuration' (e.g., CloudTrail enabled, GuardDuty enabled), which AWS service should you use to automate the account provisioning process?

An organization wants to implement 'Zero-Trust' security for their internal applications. They want to ensure that all traffic between their microservices is encrypted and authorized using mutually authenticated TLS (mTLS). Solution ?

Which AWS tool provides a 'Low-Code' way to design and automate complex business logic workflows (e.g., processing insurance claims with multiple approval steps) using a visual designer?

Your organization wants to implement 'Approval Rules' for pull requests in AWS CodeCommit. They want to ensure that any change to the 'Production' branch requires at least two approvals from a specific IAM group. How can you automate this enforcement?

An organization wants to monitor the health of their containerized microservices running on Amazon ECS (Fargate). They want to receive an alert if the 'CPU Utilization' of any service exceeds 80% for more than 3 consecutive minutes. Which CloudWatch feature should they use?

You need to monitor CPU utilization of your Amazon EC2 instances and set up alarms for automated actions. Which service should you use?

Your application running on Amazon EC2 needs a central location for log aggregation and real-time analysis. Which Amazon CloudWatch capability should you use?

To improve the security of their CI/CD pipeline, an architect recommends using 'VPC Endpoints' for all AWS Code* services to ensure traffic never leaves the AWS global network. Which type of VPC endpoint is used for CodePipeline and CodeBuild?

Your team wants to implement 'Feature Toggles' for their application using AWS AppConfig. They want to ensure that a configuration change is rolled back automatically if it triggers a CloudWatch alarm during the deployment. Which AppConfig feature enables this?

An organization wants to perform 'Canary' testing for their web application. They want to route 5% of global traffic to a new experimental region for 2 hours before deciding whether to failover completely. Which AWS service facilitates this global traffic shifting?

Which AWS Systems Manager feature allows you to centrally manage and evaluate findings from multiple security services (GuardDuty, Inspector, Macie) and provides a 'Compliance Score' for your resources?

Scenario: To minimize the risk of 'Configuration Drift' in your multi-account environment, you want a service that automatically scans your CloudFormation stacks and alerts you if any resources have been modified outside of CloudFormation. Solution ?

Which AWS security service allows you to automatically audit and evaluate the IAM policies in your account to identify 'Over-privileged' roles and provide specific recommendations for downsizing permissions?

An organization wants to use 'AWS Proton' to manage infrastructure for their serverless microservices. They want to ensure that when a developer updates a 'Service Template', it automatically triggers an update for all 'Service Instances'. How is this automated?

Which AWS networking service allows you to create a secure, high-speed connection between your on-premises network and AWS over the internet with the ability to dynamically route traffic using BGP?

You need to route traffic to Amazon EC2 instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?

To improve the performance and cost of your web application for users worldwide, you decide to use a managed 'Service' that provides content caching at edge locations and can protect against DDoS attacks. Solution ?

An organization following the 'Zero Trust' principle wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which AWS service fits?

Scenario: To minimize the risk of an admin accidentally deleting a production stack, you want to ensure that no one can perform a 'Delete' operation without first removing a specific 'Stack Policy' from the resource. Solution ?

Scenario: You want to monitor the 'End-to-End' performance of your web application from the perspective of real users globally. You want to see how long it takes for a page to load and identify any JavaScript errors on the client side. Solution ?

Your organization wants to implement a 'Multi-Region' disaster recovery strategy for their DynamoDB-backed application. They require active-active replication with sub-second latency for global writes. Which feature should they use?

An organization wants to reduce the 'Warm-up' time for their Auto Scaling group during sudden traffic spikes. They want to maintain a pool of pre-initialized instances that are stopped but can be started quickly. Which ASG feature should they use?

To ensure that your CloudFront distribution remains available even if the primary S3 origin experiences a regional outage, how should you configure the origin settings?

Which AWS networking service uses Anycast technology to provide two static IP addresses that act as a fixed entry point to your application endpoints (ALB, NLB, EC2) in multiple regions, improving availability and performance?

An organization wants to ensure that all their critical EC2 instances are spread across different physical hardware racks within an Availability Zone to minimize the impact of a single rack failure. Which placement strategy should they use?

Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?

To implement a zero-downtime database migration from an on-premises Oracle database to Amazon Aurora, which service should you use to handle the continuous data replication?

Which AWS security service allows you to centrally manage and automate security configuration checks for your enterprise using a set of best-practice 'Conformance Packs' and policies?

To improve the 'Developer Experience' (DevEx), your organization wants to provide a self-service portal where developers can provision pre-approved 'Infrastructure' environments (e.g., a dev VPC with an EKS cluster). Which service fits?

Which AWS security service can automatically detect 'Suspicious activity' in your AWS account (e.g., an EC2 instance communicating with a known command-and-control server) and provide detailed threat findings?

Your organization wants to optimize the cost of their S3 storage by automatically moving objects that are not accessed frequently to a 'Lower Cost' storage tier. Which S3 feature should তারা ব্যবহার করবে?

To ensure that your CI/CD pipeline can 'Roll Back' automatically if a deployment triggers a CloudWatch alarm, which CodeDeploy feature should you configure?

An organization wants to implement 'Compliance as Code' and wants to ensure that all their S3 buckets have 'Versioning' and 'Encryption' enabled. Which service provides these continuous compliance checks at scale?

Your organization wants to automatically detect potential security vulnerabilities and code quality issues in their Java/Python code during the 'Review' phase of a CodeCommit pull request. Which AWS service provides these AI-powered scans?

Your organization wants to implement a 'Multi-Region' disaster recovery strategy for their application running on Amazon EKS. They want to ensure that they can quickly failover to another region with minimal manual intervention. Which AWS service facilitates this global networking?

Which AWS development service provides a 'Cloud-Native' integrated development environment (IDE) that you can access from your browser and includes pre-configured tools for AWS development?

Scenario: You want to monitor the health of your 'Hybrid Cloud' environment and receive alerts if any of your on-premises servers or AWS resources become unavailable. Which combination of services provides this unified monitoring?

To improve the performance of your 'Serverless' application, you want to use 'AWS X-Ray' to identify bottlenecks in your Lambda functions. HowWeight-based sampling can be configured in X-Ray?

Which AWS security service allows you to automatically audit and evaluate your AWS account against the 'CIS AWS Foundations Benchmark' and provide a detailed compliance report with remediation guidance?

Your organization wants to implement 'Canary' testing for their web application. They want to route 5% of traffic to a new experimental region for 2 hours before deciding whether to failover completely. Which AWS service facilitates this global traffic shifting?

To identify the root cause of a security anomaly detected by GuardDuty (e.g., an EC2 instance making unusual API calls), you want a service that automatically correlates data from VPC Flow Logs, CloudTrail, and GuardDuty into a graph-based visualization. Which service should you use?

Your serverless application requires a specialized monitoring agent to run alongside your Lambda function code as a separate process. Which Lambda feature allows you to bundle and run these external processes without modifying your function's handler?

An organization wants to use 'AWS AppConfig' to manage their application configurations. They want to ensure that any new configuration version is validated against a 'JSON Schema' before it can be deployed. How Weight-based routing can be implemented for 'Blue/Green' deployments within CloudMap?

An organization wants to monitor the performance of their 'Elastic Beanstalk' environment, you want to enable 'Enhanced Health Reporting'. Where do you configure the specific metrics to be collected?

To monitor the health of your 'Cross-Region' VPC Peering connections and receive alerts for high latency or packet loss, which CloudWatch feature provides a dedicated 'Network Roadmap' for your VPCs?

Which AWS development service allows you to create 'Development Environments' that can be automatically paused when not in use to save cost, while preserving the state of your workspace and open files?

Scenario: You want to ensure that all 'CloudFormation StackSets' deployments in your organization are restricted to specific 'AWS Regions' only. Which service and feature should you use to enforce this organizational guardrail?