1. Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2?

2. Which of the following services gives you access to all AWS auditor-issued reports and certifications?

3. A user is planning to migrate an application workload to the AWS Cloud. Which control becomes the responsibility of AWS once the migration is complete?

4. What are the main differences between an IAM user and an IAM role in AWS? (Choose TWO)

5. A financial services company decides to migrate one of its applications to AWS. The application deals with sensitive data, such as credit card information, and must run on a PCI-compliant environment. Which of the following is the company's responsibility when building a PCI-compliant environment in AWS? (Choose TWO)

6. Which of the following AWS services integrates with AWS Shield and AWS Web Application Firewall (AWS WAF) to protect against network and application layer DDoS attacks?

7. Which of the following steps should be taken by a customer when conducting penetration testing on AWS?

8. Which database service should you use if your application and data schema require "joins" or complex transactions?

9. What does Amazon GuardDuty do to protect AWS accounts and workloads?

10. AWS provides disaster recovery capability by allowing customers to deploy infrastructure into multiple [...].

11. Which AWS service provides the EASIEST way to set up and manage a secure, well-architected, multi-account AWS environment?

12. Which AWS service offers persistent storage for a file system?

13. Which AWS service can be used to manually launch instances based on resource requirements?

14. What are some of the benefits of using On-Demand EC2 instances? (Choose TWO)

15. A company is running a large web application that needs to always be available. The application tends to slow down when CPU usage is greater than 60%. How can they track when CPU usage goes above 60% for any of the EC2 Instances in their account?

16. How many Availability Zones should compute resources be provisioned across to achieve high availability?

17. Which is a recommended pattern for designing a highly available architecture on AWS?

18. Which element of the AWS global infrastructure consists of one or more discrete data centers each with redundant power networking and connectivity which are housed in separate facilities?

19. Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Select TWO)

20. What is the main benefit of attaching security groups to an Amazon RDS instance?

21. Which AWS service delivers data, videos, applications, and APIs to users globally with low latency and high transfer speeds?

22. Which of the following is a benefit of the "Loose Coupling" architecture principle?

23. Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?

24. Engineers are wasting a lot of time and effort managing batch computing software in traditional data centers. Which of the following AWS services allows them to easily run thousands of batch computing jobs?

25. What does the AWS "Business" support plan provide? (Choose TWO)

26. Which of the following Cloud Computing deployment models eliminates the need to run and maintain physical data centers?

27. Which of the following compute resources are serverless? (Choose TWO)

28. What is the recommended storage option when hosting an often-changing database on an Amazon EC2 instance?

29. You have just finished writing your application code. Which service can be used to automate the deployment and scaling of your application?

30. The AWS account administrator of your company has been fired. With the permissions granted to him as an administrator, he was able to create multiple IAM user accounts and access keys. Additionally, you are not sure whether he has access to the AWS root account or not. What should you do immediately to protect your AWS infrastructure? (Choose TWO)

31. Which of the following AWS Support Plans gives you 24/7 access to Cloud Support Engineers via email & phone? (Choose TWO)

32. Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

33. What should you consider when storing data in Amazon Glacier?

34. Which statement is true in relation to security in AWS?

35. What is the Amazon ElastiCache service used for? (Choose TWO)

36. What is the benefit of Amazon EBS volumes being automatically replicated within the same availability zone?

37. Which of the following services is used when encrypting EBS volumes?

38. A company needs to host a big data application on AWS using EC2 instances. Which of the following AWS Storage services would they choose to automatically get high throughput to multiple compute nodes?

39. What can you use to assign permissions directly to an IAM user?

40. You are planning to launch an advertising campaign over the coming weekend to promote a new digital product. It is expected that there will be heavy spikes in load during the campaign period, and you can't afford any downtime. You need additional compute resources to handle the additional load. What is the most cost-effective EC2 instance purchasing option for this job?

41. What are the benefits of the AWS Marketplace service? (Choose TWO)

42. What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Choose two.)

43. Which of the following actions may reduce Amazon EBS costs? (Choose TWO)

44. Which component must be attached to a VPC to enable inbound Internet access?

45. Which of the following requires an access key ID and a secret access key to get long-lived programmatic access to AWS resources? (Choose TWO)

46. Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?

47. Which of the following common IT tasks can AWS cover to free up company IT resources? (Select TWO)

48. How can you increase your application's fault-tolerance while it is being hosted in AWS?

49. How does AWS notify customers about security and privacy events pertaining to AWS services?

50. Which of the following makes it easier for you to categorize, manage and filter your resources?

51. The AWS Cloud's multiple Regions are an example of:

52. Which pillar of the AWS Well-Architected Framework provides recommendations to help customers select the right compute resources based on workload requirements?

53. The elasticity of the AWS Cloud enables customers to save costs when compared to traditional hosting providers. What can AWS customers do to benefit from the elasticity of the AWS Cloud? (Choose TWO)

54. You are working as a site reliability engineer (SRE) in an AWS environment, which of the following services helps monitor your applications?

55. Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.)

56. You have multiple standalone AWS accounts and you want to decrease your AWS monthly charges. What should you do?

57. How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center?

58. What is the maximum amount of data that can be stored in S3 in a single AWS account?

59. Which statement is true regarding AWS pricing? (Choose TWO)

60. Each AWS Region is composed of multiple Availability Zones. Which of the following best describes what an Availability Zone is?

61. A company wants to use Amazon Elastic Container Service (Amazon ECS) to run its containerized applications. For compliance reasons, the company wants to retain complete visibility and control over the underlying server cluster. Which Amazon ECS launch type will satisfy these requirements?

62. Amazon EC2 instances are conceptually very similar to traditional servers. However, using Amazon EC2 server instances in the same manner as traditional hardware server instances is only a starting point. What are the main benefits of using the AWS EC2 instances instead of traditional servers? (Choose TWO)

63. What factors determine how you are charged when using AWS Lambda? (Choose TWO)

64. Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Select TWO)

65. You have been tasked with auditing the security of your VPC. As part of this process, you need to start by analyzing what inbound and outbound traffic is allowed on your EC2 instances. What two parts of the VPC do you need to check to accomplish this task?