SOPHOS CERTIFIED ENGINEER EXAM QUESTIONS WITH VERIFIED
ANSWERS ALREADY GRADED A+
A web service that logs AWS KMS API calls and tracks the
AWS CloudTrail
deletion and rotation of CMKs.
A count of the total number of requests that are pending
SurgeQueueLength
submission to a registered instance.
Highly available File Server that supports SMB and manages
Multi-AZ Amazon FSx
file permissions using Windows Access Control List (ACL).
A CloudFormation template that can be reused for multiple
Nested Stacks environments. If the
template has been updated, all the stack that is referencing it will
automatically use the updated configuration.
AWS Service Catalog TagOption Enforces the tagging of all instances that will be launched in the VPC.
library
Automates the process of patching managed instances with
AWS Systems Manager Patch
Manager security-related updates.
Amazon Athena Analyzes the data hosted in Amazon S3 using standard SQL.
Amazon Cognito User Pools Enables authentication to AWS services using Active Directory
Federation Services.
Route 53 Geoproximity routing Ensures that users are consistently directed to the AWS region nearest
policy to them.
A service that enables you to easily rotate, manage, and retrieve
AWS Secrets Manager
database credentials, API keys, and other secrets throughout
their lifecycle.
Enables private connectivity to services hosted in AWS, from within
VPC endpoint your VPC
without using an Internet Gateway, VPN, Network Address
Translation (NAT) devices, or firewall proxies.
Provides protection against SYN floods, DNS query floods,
AWS Shield Standard
UDP reflection attacks, and other DDoS attacks to your
AWS workloads at absolutely no cost
Image Builder Helps you build your own custom EC2 images for Linux and Windows
A service that accelerates transferring large amounts of data
AWS Snowball
into and out of AWS using physical storage appliances,
bypassing the Internet.
AWS Control Tower Allows you to set up and govern a secure, multi-account AWS
environment
, A service that allows you to build event-driven applications at
Amazon EventBridge
scale across AWS, existing systems, or SaaS applications.
A fully managed Pub/Sub service for Application-to-
Amazon SNS
Application (A2A) and Application-to-Person (A2P)
messaging.
A fully managed message queuing for microservices,
Amazon SQS
distributed systems, and serverless applications.
Provides the most detailed information about your AWS Bill
and can generate reports with hourly, daily, or monthly
AWS Cost and Usage Report
granularity. Reports are stored in your selected S3 bucket and
can be analyzed using Amazon Athena, Amazon Redshift or
Amazon QuickSight
An easy-to-use interface that lets you visualize your AWS
AWS Cost Explorer
costs and provides a set of ready-to-use default reports to
help you get started.
A flexible pricing model that can help you reduce your bill by
Savings Plans up to 72% compared to On-Demand prices, in exchange for
a one- or three-year hourly spend
commitment.
Helps you identify resources shared with external principals
IAM Access Analyzer
by using logic-based reasoning to analyze the resource-based
policies in your AWS environment
An Amazon EFS performance mode that is designed for
Max I/O
highly parallelized workloads that can tolerate high latencies
ANSWERS ALREADY GRADED A+
A web service that logs AWS KMS API calls and tracks the
AWS CloudTrail
deletion and rotation of CMKs.
A count of the total number of requests that are pending
SurgeQueueLength
submission to a registered instance.
Highly available File Server that supports SMB and manages
Multi-AZ Amazon FSx
file permissions using Windows Access Control List (ACL).
A CloudFormation template that can be reused for multiple
Nested Stacks environments. If the
template has been updated, all the stack that is referencing it will
automatically use the updated configuration.
AWS Service Catalog TagOption Enforces the tagging of all instances that will be launched in the VPC.
library
Automates the process of patching managed instances with
AWS Systems Manager Patch
Manager security-related updates.
Amazon Athena Analyzes the data hosted in Amazon S3 using standard SQL.
Amazon Cognito User Pools Enables authentication to AWS services using Active Directory
Federation Services.
Route 53 Geoproximity routing Ensures that users are consistently directed to the AWS region nearest
policy to them.
A service that enables you to easily rotate, manage, and retrieve
AWS Secrets Manager
database credentials, API keys, and other secrets throughout
their lifecycle.
Enables private connectivity to services hosted in AWS, from within
VPC endpoint your VPC
without using an Internet Gateway, VPN, Network Address
Translation (NAT) devices, or firewall proxies.
Provides protection against SYN floods, DNS query floods,
AWS Shield Standard
UDP reflection attacks, and other DDoS attacks to your
AWS workloads at absolutely no cost
Image Builder Helps you build your own custom EC2 images for Linux and Windows
A service that accelerates transferring large amounts of data
AWS Snowball
into and out of AWS using physical storage appliances,
bypassing the Internet.
AWS Control Tower Allows you to set up and govern a secure, multi-account AWS
environment
, A service that allows you to build event-driven applications at
Amazon EventBridge
scale across AWS, existing systems, or SaaS applications.
A fully managed Pub/Sub service for Application-to-
Amazon SNS
Application (A2A) and Application-to-Person (A2P)
messaging.
A fully managed message queuing for microservices,
Amazon SQS
distributed systems, and serverless applications.
Provides the most detailed information about your AWS Bill
and can generate reports with hourly, daily, or monthly
AWS Cost and Usage Report
granularity. Reports are stored in your selected S3 bucket and
can be analyzed using Amazon Athena, Amazon Redshift or
Amazon QuickSight
An easy-to-use interface that lets you visualize your AWS
AWS Cost Explorer
costs and provides a set of ready-to-use default reports to
help you get started.
A flexible pricing model that can help you reduce your bill by
Savings Plans up to 72% compared to On-Demand prices, in exchange for
a one- or three-year hourly spend
commitment.
Helps you identify resources shared with external principals
IAM Access Analyzer
by using logic-based reasoning to analyze the resource-based
policies in your AWS environment
An Amazon EFS performance mode that is designed for
Max I/O
highly parallelized workloads that can tolerate high latencies
