A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance state changes to RUNNING.
Which AWS service can the company use to meet this requirement?
Answer : C
Amazon EventBridge Overview:
EventBridge is a serverless event bus that enables applications to react to changes in AWS resources.
It supports routing events such as EC2 state changes to various targets, including AWS Step Functions.
How EventBridge Meets the Requirement:
EventBridge can capture the EC2 instance state change event and trigger the execution of a Step Functions workflow.
The integration is seamless and supports workflows triggered by multiple event sources.
Why Other Options Are Incorrect:
A . Amazon SageMaker: Used for building, training, and deploying machine learning models; not related to event triggers.
B . Amazon Connect: A cloud-based contact center service; unrelated to event triggers.
D . AWS Fargate: A compute engine for containers; does not manage events or invoke workflows.
Which AWS service or tool can a company use to set up consolidated billing?
Answer : B
AWS Organizations Overview:
AWS Organizations allows a company to manage multiple AWS accounts under a single organization.
Through the feature of consolidated billing, a company can receive a single bill for all linked accounts.
Key Features of Consolidated Billing in AWS Organizations:
Aggregates usage across accounts to take advantage of volume pricing discounts.
Provides detailed cost reports for individual linked accounts.
Simplifies payment processing by centralizing billing.
Why Other Options Are Incorrect:
A . AWS Billing and Cost Management console: Used for managing budgets and payments but does not set up consolidated billing.
C . AWS Cost and Usage Report: Provides detailed cost and usage reports but does not set up consolidated billing.
D . AWS Systems Manager: Focuses on operational management, not billing.
A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.
Which AWS service can the company use to meet this goal?
Answer : D
AWS Certificate Manager (ACM) Overview:
ACM simplifies the process of provisioning, managing, and deploying SSL/TLS certificates.
These certificates are used to secure HTTPS connections, ensuring encrypted communication between clients and servers.
How ACM Meets the Goal:
Provides free public SSL/TLS certificates.
Automates certificate renewals and deployment with services like Elastic Load Balancing and Amazon CloudFront.
Reduces the operational overhead of managing SSL/TLS certificates.
Why Other Options Are Incorrect:
A . AWS WAF: Focuses on application-layer protection (e.g., SQL injection, cross-site scripting) but does not handle SSL/TLS encryption.
B . AWS Shield: Provides protection against DDoS attacks, not encryption.
C . Amazon VPC: Used for networking and security at the infrastructure level but does not manage SSL/TLS certificates.
For which use case are Amazon EC2 On-Demand Instances MOST cost-effective?
Answer : B
On-Demand Instances are most cost-effective for short-term, steady, and unpredictable workloads. Using them for a one-month testing period allows flexibility without a long-term commitment. For long-term workloads (like a year or more), Reserved Instances or Savings Plans would be more cost-effective. Spot Instances are better for interruptible, flexible workloads.
A company will run a predictable compute workload on Amazon EC2 Instances for the next 3 years. The workload is critical for the company. The company wants to optimize costs to run the workload.
Which solution will meet these requirements?
Answer : C
Savings Plans offer cost savings for predictable, steady workloads over a one or three-year term, with flexibility in instance family and size, making them suitable for critical workloads on EC2 instances that will run for a long term like three years. Spot Instances are more cost-effective but not suitable for critical, predictable workloads due to potential interruptions. Dedicated Hosts and On-Demand Instances would be more costly.
Which AWS service gives users the ability to deploy highly repeatable infrastructure configurations?
Answer : A
AWS CloudFormation allows users to define and deploy infrastructure as code, creating highly repeatable and consistent configurations across environments. It uses templates to automate the provisioning and management of resources. CodeDeploy focuses on application deployment, and Systems Manager offers operational management, but neither provides templated infrastructure deployment at the same level as CloudFormation.
Which AWS service or resource can a company use to deploy AWS WAF rules?
Answer : B
Application Load Balancer (ALB) integrates with AWS WAF to deploy and manage WAF rules for incoming traffic. ALB can route HTTP and HTTPS traffic and apply WAF rules to protect applications from common web exploits. Network Load Balancer does not support AWS WAF, and Trusted Advisor does not deploy WAF rules.