Exam Bundle

Amazon RDS provides managed relational database engines. This does not address the need for A business intelligence team wants to run large-scale structured analytical queries on consolidated data. The appropriate Amazon Redshift applies because Redshift is designed for scalable analytic SQL warehousing rather than primary transactional OLTP workloads.

Amazon ElastiCache: ElastiCache supplies managed in-memory caching engines for high-speed access to frequently used data. This does not address the need for A business intelligence team wants to run large-scale structured analytical queries on consolidated data. The appropriate Amazon Redshift applies because Redshift is designed for scalable analytic SQL warehousing rather than primary transactional OLTP workloads.

Amazon DynamoDB provides managed key-value and document NoSQL storage. This does not address the need for A business intelligence team wants to run large-scale structured analytical queries on consolidated data. The appropriate Amazon Redshift applies because Redshift is designed for scalable analytic SQL warehousing rather than primary transactional OLTP workloads.

Amazon Route 53 provides managed DNS services. That does not meet the requirement: A team must define a logically isolated virtual network for AWS workloads.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. That does not meet the requirement: A team must define a logically isolated virtual network for AWS workloads.

AWS IAM manages identity permissions and principals. That does not meet the requirement: A team must define a logically isolated virtual network for AWS workloads.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. This does not address the need for A team must define a logically isolated virtual network for AWS workloads. The appropriate Amazon VPC applies because VPC provides a logically isolated network with controllable IP addressing, routing and security controls.

AWS IAM manages identity permissions and principals. This does not address the need for A team must define a logically isolated virtual network for AWS workloads. The appropriate Amazon VPC applies because VPC provides a logically isolated network with controllable IP addressing, routing and security controls.

Amazon Route 53 provides managed DNS services. This does not address the need for A team must define a logically isolated virtual network for AWS workloads. The appropriate Amazon VPC applies because VPC provides a logically isolated network with controllable IP addressing, routing and security controls.

AWS IAM manages identity permissions and principals. That does not meet the requirement: Consider this AWS requirement: An enterprise needs subnets and routing rules for its cloud application's private networking.

Amazon Route 53 provides managed DNS services. That does not meet the requirement: Consider this AWS requirement: An enterprise needs subnets and routing rules for its cloud application's private networking.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. That does not meet the requirement: Consider this AWS requirement: An enterprise needs subnets and routing rules for its cloud application's private networking.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. This does not address the need for An enterprise needs subnets and routing rules for its cloud application's private networking. The appropriate Amazon VPC applies because VPC provides a logically isolated network with controllable IP addressing, routing and security controls.

Amazon Route 53 provides managed DNS services. This does not address the need for An enterprise needs subnets and routing rules for its cloud application's private networking. The appropriate Amazon VPC applies because VPC provides a logically isolated network with controllable IP addressing, routing and security controls.

AWS IAM manages identity permissions and principals. This does not address the need for An enterprise needs subnets and routing rules for its cloud application's private networking. The appropriate Amazon VPC applies because VPC provides a logically isolated network with controllable IP addressing, routing and security controls.

IAM identity policy: Authorizes API actions and does not filter subnet network packets. That does not meet the requirement: An EC2 instance requires stateful network access rules applied to its network interfaces.

Network ACL: Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed. That does not meet the requirement: An EC2 instance requires stateful network access rules applied to its network interfaces.

AWS Shield provides DDoS protection against supported traffic attacks. That does not meet the requirement: An EC2 instance requires stateful network access rules applied to its network interfaces.

AWS Shield provides DDoS protection against supported traffic attacks. This does not address the need for An EC2 instance requires stateful network access rules applied to its network interfaces. The appropriate Security group applies because Security groups are stateful virtual firewalls for supported network interfaces and resources.

Network ACL: Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed. This does not address the need for An EC2 instance requires stateful network access rules applied to its network interfaces. The appropriate Security group applies because Security groups are stateful virtual firewalls for supported network interfaces and resources.

IAM identity policy: Authorizes API actions and does not filter subnet network packets. This does not address the need for An EC2 instance requires stateful network access rules applied to its network interfaces. The appropriate Security group applies because Security groups are stateful virtual firewalls for supported network interfaces and resources.

Network ACL: Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed. That does not meet the requirement: A technical reviewer evaluates this need: A systems team wants instance-level allowed inbound connections with return traffic automatically tracked.

IAM identity policy: Authorizes API actions and does not filter subnet network packets. That does not meet the requirement: A technical reviewer evaluates this need: A systems team wants instance-level allowed inbound connections with return traffic automatically tracked.

AWS Shield provides DDoS protection against supported traffic attacks. That does not meet the requirement: A technical reviewer evaluates this need: A systems team wants instance-level allowed inbound connections with return traffic automatically tracked.

AWS Shield provides DDoS protection against supported traffic attacks. This does not address the need for A systems team wants instance-level allowed inbound connections with return traffic automatically tracked. The appropriate Security group applies because Security groups are stateful virtual firewalls for supported network interfaces and resources.

Network ACL: Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed. This does not address the need for A systems team wants instance-level allowed inbound connections with return traffic automatically tracked. The appropriate Security group applies because Security groups are stateful virtual firewalls for supported network interfaces and resources.

IAM identity policy: Authorizes API actions and does not filter subnet network packets. This does not address the need for A systems team wants instance-level allowed inbound connections with return traffic automatically tracked. The appropriate Security group applies because Security groups are stateful virtual firewalls for supported network interfaces and resources.

Security group: Filters supported resource network traffic using stateful rules. That does not meet the requirement: A VPC design needs a subnet-level stateless packet filter with allow and deny rules.

IAM group: Collects IAM user identities, not network-facility availability. That does not meet the requirement: A VPC design needs a subnet-level stateless packet filter with allow and deny rules.

AWS WAF: Filters HTTP(S) web requests by configured rules. That does not meet the requirement: A VPC design needs a subnet-level stateless packet filter with allow and deny rules.

IAM group: Collects IAM user identities, not network-facility availability. This does not address the need for A VPC design needs a subnet-level stateless packet filter with allow and deny rules. The appropriate Network ACL applies because Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed.

AWS WAF: Filters HTTP(S) web requests by configured rules. This does not address the need for A VPC design needs a subnet-level stateless packet filter with allow and deny rules. The appropriate Network ACL applies because Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed.

Security group: Filters supported resource network traffic using stateful rules. This does not address the need for A VPC design needs a subnet-level stateless packet filter with allow and deny rules. The appropriate Network ACL applies because Network ACLs operate at subnet boundaries and are stateless, so return traffic must also be allowed.