AWS Public vs Private Services

Which aspect of AWS services is primarily emphasized when distinguishing between public and private?

What does it mean for an AWS service to be 'public' in the context of networking?

What is a key characteristic of an AWS private service?

Besides networking, what other aspect governs access to AWS resources?

What is the primary function of the 'AWS public zone'?

If you are accessing an AWS public service, such as S3, from your home internet connection, what path does your communication take?

What is the purpose of an Internet Gateway (IGW) in the context of a VPC?

Which AWS service can be used to create a private network within AWS, allowing resources to communicate with each other in an isolated environment?

What are the three main network zones in AWS?

Which of the following is a characteristic of AWS Regions?

In AWS, what is the primary purpose of an Edge Location?

What should a solutions architect consider when designing a globally resilient application on AWS?

What is the key difference between an AWS Region and an Availability Zone (AZ)?

Which of the following services is an example of a globally resilient service in AWS?

What does it mean for an AWS service to be 'region resilient'?

What is the primary benefit of designing your application to span multiple Availability Zones within a single AWS Region?

What is a key characteristic of an 'AZ resilient' service in AWS?

A company wants to ensure that its application remains available even if an entire AWS Region experiences a major outage. Which architectural approach would be MOST suitable?

Your company is launching a new video streaming service and wants to ensure that content is delivered to users with the lowest possible latency. Which AWS service would be MOST suitable for this purpose?

What does geopolitical separation achieved by selecting a specific AWS region provide to a company?

An organization is planning to deploy a critical application that requires maximum fault tolerance and minimal downtime. Which of the following architectural strategies would BEST achieve this goal?

A company is designing a new application that must comply with strict data residency requirements, ensuring that all data remains within the European Union (EU). Which of the following strategies would BEST meet this requirement?

Given that AWS Regions are designed to be 100% isolated for fault tolerance, under what specific circumstance might an issue in one AWS Region directly impact resources in another AWS Region?

You are designing a multi-tier web application for a global audience, with the backend database hosted on Amazon RDS. The application requires low latency access to the database for users worldwide. Which of the following architectural choices would be MOST effective in minimizing latency for global users?

A company is migrating its on-premises infrastructure to AWS. They have a critical application that requires direct, low-latency access to a database running in an AWS VPC. However, due to regulatory compliance, they cannot use the public internet for this connection. Which of the following options would provide the MOST secure and reliable connection between their on-premises environment and the AWS VPC?

An organization's security policy mandates that all data stored in AWS must be encrypted at rest using keys managed exclusively by the organization. Which of the following approaches would BEST satisfy this requirement?

An architect is designing a highly available web application that must withstand the failure of an entire AWS Region with minimal downtime. They have implemented a multi-region architecture with active-active deployments in two Regions. Which of the following strategies would be MOST effective for routing traffic to the healthy Region in the event of a regional failure?

You are designing a system that processes highly sensitive data and requires the data to remain within a specific geographic boundary at all times. Which of the following actions would be MOST important to implement?

An organization has multiple AWS accounts managed under AWS Organizations. They need to ensure that all data stored in S3 buckets across all accounts is encrypted by default, without requiring individual account owners to configure it manually. Which of the following strategies would be MOST effective in achieving this goal?

A company stores highly sensitive data in Amazon S3 and needs to implement a solution that provides maximum security and control over access to the data. They want to ensure that even if an attacker gains access to their AWS account credentials, they cannot access the S3 data. Which of the following approaches would provide the GREATEST level of protection?

Suppose a catastrophic event causes irreversible damage to multiple AWS Availability Zones within a single region, including the physical destruction of data centers. Which AWS service, by fundamental design, would likely be the LEAST affected?

A clandestine organization seeks to establish an AWS presence with the HIGHEST possible degree of anonymity and resistance to legal discovery. They require compute resources, data storage, and network connectivity. Which action below provides the strongest guarantee against revealing their true identity and location to external investigators?

You are tasked with developing a system that automatically replicates data between Availability Zones (AZs) for disaster recovery. Your team has implemented a solution that successfully replicates data asynchronously from one AZ to another. However, you discover that the solution is introducing significant latency to the application. Which of the following strategies would you recommend to reduce the impact of replication latency while maintaining data durability?

You work for a financial institution with strict regulatory requirements for data sovereignty. You need to ensure that all customer data remains within the country's borders. You are using services like Amazon S3, Amazon EC2, and Amazon RDS. What is the MOST important design consideration to meet data sovereignty requirements?

There are three AWS services and you must choose one based on what the company needs. Which of these best fits the needs of the company? A fast transfer of information worldwide is needed.

When an Availability Zone (AZ) experiences a failure, what is the expected behavior of the other AZs within the same AWS Region?

Which statement accurately describes the primary function of a VPC in AWS?

If a company requires that their cloud infrastructure is compliant with regulations tied to a specific country, what AWS feature would assist them, and what does this feature provide?