- (Exam Topic 3)
According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

1. A. Amazon DynamoDB
2. B. Amazon EC2 instances
3. C. Amazon RDS instances
4. D. Amazon S3

Correct Answer: B

- (Exam Topic 3)
Which AWS services or resources can a company use directly on its on-premises servers? (Choose two.)

1. A. AWS OpsWorks
2. B. AWS CloudFormation
3. C. AWS Storage Gateway
4. D. Application Load Balancer
5. E. Amazon Cognito

Correct Answer: AC
AWS OpsWorks- They work great with EC2 & On-Premises VM AWS Storage Gateway is a set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage. https://aws.amazon.com/storagegateway/

- (Exam Topic 1)
A system automatically recovers from failure when a company launches its workload on the AWS Cloud services platform. Which pillar of the AWS Well-Architected Framework does this situation demonstrate?

1. A. Reliability
2. B. Cost optimization
3. C. Performance efficiency
4. D. Operational excellence.

Correct Answer: A
https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/
Built around six pillars—operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability—AWS Well-Architected provides a consistent approach for customers and partners to evaluate architectures and implement scalable designs.
Reliability
The Reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when it’s expected to. This includes the ability to operate and test the workload through its total lifecycle. You can find prescriptive guidance on implementation in the Reliability Pillar whitepaper.

- (Exam Topic 3)
A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with distributed denial of service (DDoS) attacks.
Which AWS service will meet these requirements?

1. A. AWS WAF
2. B. AWS Shield Standard
3. C. Amazon Macie
4. D. AWS Shield Advanced

Correct Answer: D
https://aws.amazon.com/shield/faqs/

- (Exam Topic 1)
A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.
Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

1. A. EC2 hypervisor
2. B. Security patching of the guest operating system
3. C. Network connectivity of the host server
4. D. Uptime service level agreement (SLA) for the EC2 instances

Correct Answer: B