Which AWS tool or feature acts as a VPC firewall at the subnet level?

A. Security group
B. Network ACL
C. Traffic Mirroring
D. Internet gateway

Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?

A. Security
B. Operational excellence
C. Performance efficiency
D. Cost optimization

Which AWS service helps protect against DDoS attacks?

A. AWS Shield
B. Amazon Inspector
C. Amazon GuardDuty
D. Amazon Detective

A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.
Which Amazon EC2 purchasing option will be MOST cost-effective?

A. All Upfront Reserved Instances
B. Partial Upfront Reserved Instances
C. Dedicated Instances
D. On-Demand Instances

Which of the following acts as an instance-level firewall to control inbound and outbound access?

A. Network access control list
B. Security groups
C. AWS Trusted Advisor
D. Virtual private gateways

A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible increments.
Which pillar of the AWS Well-Architected Framework does this design support?

A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability

Which of the following is a recommended design principle for AWS Cloud architecture?

A. Design tightly coupled components.
B. Build a single application component that can handle all the application functionality.
C. Make large changes on fewer iterations to reduce chances of failure.
D. Avoid monolithic architecture by segmenting workloads.

A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.
Which AWS service should the company use to meet these requirements?

A. AWS IoT Greengrass
B. AWS Lambda
C. AWS Outposts
D. AWS Snowball Edge

Which AWS services make use of global edge locations? (Choose two.)

A. AWS Fargate
B. Amazon CloudFront
C. AWS Global Accelerator
D. AWS Wavelength
E. Amazon VPC

Which AWS service is used to provide encryption for Amazon EBS?

A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS KMS
D. AWS Config