영문판3
Which task does AWS perform automatically?
Encrypt data that is stored in Amazon DynamoDB. All the data stored in DynamoDB are encrypted automatically
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources.
Which AWS service or feature can be used to meet these requirements?
AWS Outposts. AWS LocalZones only support in local not on premise
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
AWS Systems Manager Session Manager is a new interactive shell and CLI that helps to provide secure, access-controlled, and audited Windows and Linux EC2 instance management. Session Manager removes the need to open inbound ports, manage SSH keys, or use bastion hosts.
A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.
Which best practice for cost governance does this example show?
Architecture optimization에 cost 절감이 포함됨.
Which AWS service or feature is used to send both text and email messages from distributed applications?
Amazon Simple Notification Service (Amazon SNS)
Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?
Testing recovery procedures
A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated. The data needs to be available for retrieval within seconds.
Which S3 storage class meets these requirements MOST cost-effectively?
백업도 가능해야하고 빠른 접근이 필요하므로 Standard IA가 맞음. Glacier는 접근 속도가 느림..
규정 준수 확인은 AWS Compliance Program
Amazon Cognito
Amazon Cognito를 사용하면 사용자 가입 및 로그인 기능을 추가하고 웹 및 모바일 애플리케이션에 대한 액세스를 제어할 수 있습니다. Amazon Cognito는 수백만 명의 사용자 규모로 확장되고 소셜 및 엔터프라이즈 아이덴티티 페더레이션을 지원하며 고급 보안 기능으로 소비자와 비즈니스를 보호하는 ID 스토어를 제공합니다. Amazon Cognito는 개방형 ID 표준을 기반으로 구축되었기 때문에 다양한 규정 준수 규제를 지원하고 프런트엔드 및 백엔드 개발 리소스와 통합됩니다.
A company's web application requires AWS credentials and authorizations to use an AWS service.
Which IAM entity should the company use as best practice?
IAM role
A company is creating a document that defines the operating system patch routine for all the company's systems.
Which AWS resources should the company include in this document? (Choose two.)
사용자에 의해 ec2, rds 패치가 가능하다..
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications.
Which AWS Support plan will meet these requirements at the LOWEST cost?
Level Developer support
Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?
"AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components."
Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3?
데이터 보호 포함이니까 Guard Duty
자동화 보안 -> introspector
A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user.
What should the company do to meet these data storage requirements with the LEAST amount of operational overhead?
Amazon DynamoDB Global Tables은 Amazon Web Services (AWS)에서 제공하는 관리형 NoSQL 데이터베이스 서비스인 DynamoDB의 기능 중 하나입니다. 이 서비스는 글로벌 분산 데이터베이스를 쉽게 설정하고 관리할 수 있도록 도와줍니다. DynamoDB Global Tables을 사용하면 여러 지역에 걸쳐 데이터를 자동으로 동기화하고 고 가용성을 보장할 수 있습니다.
Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?
어떤 권한을 AWS가 전적으로 책임지냐는 뜻으로 보임
Physical and environmental controls
A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection.
Which AWS service should the company use to meet these requirements?
AWS Direct Connect
aws간 전송은 data sync
A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a strong IT support team and does not need concierge support.
Which AWS Support plan will meet these requirements at the LOWEST cost?
Concierge 팀이 필요 없으므로 Enterprise는 아님 따라서 business
What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)
The date and time when an IAM user's password was last used to sign in to the AWS Management Console. IS MFA been enabled for an user
Amazon Textract 은 스캔한 파일에서 텍스트 추출에 용이함
