Q171. A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)
A. AWS Command Line Interface (AWS CLI)
B. AWS Key Management Sen/ice (AWS KMS)
C. AWS Management Console
D. AWS Resource Access Manager (AWS RAM)
E. AWS Secrets Manager
Answer
A, C
Q172. A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?
A. Contact AWS Support.
B. Download reports from AWS Artifact.
C. Download reports from AWS Security Hub.
D. Contact an AWS technical account manager (TAM).
Answer
B
Q173. An ecommerce company wants to distribute traffic between the Amazon EC2 instances that host its website. Which AWS service or resource will meet these requirements?
A. Application Load Balancer
B. AWS WAF
C. AWS CloudHSM
D. AWS Direct Connect
Answer
A
Q174. A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?
A. AWS
B. The company
C. AWS Marketplace partners
D. Third-party partners
Answer
B
Q175. A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic. Which AWS service will meet these requirements?
A. Amazon GuardDuty
B. AWS WAF
C. Amazon Macie
D. AWS Shield
Answer
B
Q176. A company wants to maintain bandwidth throughput and provide a more consistent network experience than public internet-based connections. Which AWS service should the company choose?
A. AWS VPN
B. AWS Direct Connect
C. Amazon Connect
D. Amazon CloudFront
Answer
B
Q177. A company has temporary workload that is also variable. The company needs to use Amazon EC2 instances for the workload. The EC2 instances need to handle short bursts of work that cannot stop before finishing. Which purchase option will meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Savings Plan
D. Reserved Instances
Answer
B
Q178. A company needs to use SQL syntax to perform a direct query of objects in an Amazon S3 bucket. Which AWS service can the company use to meet this requirement?
A. AWS Glue
B. Amazon Athena
C. AWS Lambda
D. Amazon Kinesis
Answer
B
Q179. A company runs Amazon EC2 instances in a research lab. The instances run for 3 hours each week and cannot be interrupted. What is the MOST cost-effective instance purchasing option to meet these requirements?
A. Compute Savings Plan
B. On-Demand Instances
C. Convertible Reserved Instances
D. Spot Instances
Answer
B
Q180. A new AWS user needs to interact with AWS Support by using API calls. Which AWS Support plan will meet this requirement MOST cost-effectively?
A. AWS Basic Support
B. AWS Developer Support
C. AWS Business Support
D. AWS Enterprise Support
Answer
B