JK0-023 Exam Discussions & Posts
Dany Gynes
Commented on May 18, 2025
this is amazing, a lot of questions I have seen in the real exam when I failed, I will prepare now from here again.
UNITED STATES
Pawan
Commented on May 18, 2025
Good questions for exam preparation
Anonymous
BayeFall
Commented on May 17, 2025
Very helpful. Thank you for sharing. I just passed the exam.
FRANCE
Lidia Parker
Commented on May 17, 2025
This is so useful. I hope I clear my exam which is two weeks from now!
Anonymous
leo
Commented on May 17, 2025
Good luck for veryone
UNITED STATES
s a
Commented on May 17, 2025
good so far
Anonymous
GPNK
Commented on May 17, 2025
Preparing for exam
JAPAN
Manz
Commented on May 16, 2025
Very useful
NEW ZEALAND
sean
Commented on May 16, 2025
I am learning a lot
Anonymous
Luciano Nicolás Loyola
Commented on May 16, 2025
I agree with Abid Hussain Ali Imam by saying that Question 28 should have "A" as the correct answer
Anonymous
sean
Commented on May 16, 2025
great questions
Anonymous
Chigs
Commented on May 16, 2025
So far so good. Hopefully it helps proves handy on the exam. I'd be back to give recommendation.
EUROPEAN UNION
M
Commented on May 16, 2025
Excellent study material
5 questions are full interactive simulation questions where you need to read logs and determine root cause.
Most questions are direct questions and easy to answer if know how the terminology is used.
I had plenty of time answer them all and 30 min to review again.
UNITED STATES
NSPK
Commented on May 16, 2025
Q27. Ans:- D (Using Kinesis Data Streams + Kinesis Data Firehose + Amazon Redshift is the most efficient and least operationally intensive way to implement real-time analytics using AWS managed services.)
Anonymous
Khoshal
Commented on May 16, 2025
I am happy to report that I passed the AZ-104 exam.
India
Jayme
Commented on May 16, 2025
QUESTION: 48
Answer is A not C
Why A is correct:
ALB terminates SSL at the front, using ACM-provided certificate.
SSL certificate is exported and installed on EC2s, so each EC2 also speaks HTTPS.
Traffic is encrypted both ways (client ? ALB and ALB ? EC2) — end-to-end encryption is ensured.
Why C is incorrect:
C: Sounds similar to A, but mentions a third-party SSL certificate, which adds unnecessary complexity. Also, ACM can’t export certificates for use outside of AWS — only imported certificates can be exported.
Anonymous
Viks
Commented on May 15, 2025
Are these question still valid?
Thanks
CANADA
priya
Commented on May 15, 2025
An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.
Which EC2 purchasing option will meet these requirements MOST cost-effectively?
Reserved Instances
Dedicated Hosts
Spot Instances
On-Demand Instances
the answer should be Reserved instance. Please update
UNITED KINGDOM
NSPK
Commented on May 15, 2025
Q22. Ans: - AWS Glue Workflows
Anonymous
Homan
Commented on May 15, 2025
@Gct, to be honest with you I did not want to take the chance and fail. Because the free version gives you access to half of the questions. The full version has all of the questions from the Microsoft Question Bank. So it is up to you.
Anonymous
gct
Commented on May 15, 2025
Can we pass the exam with free questions ?
INDIA
Kanchan
Commented on May 15, 2025
These Dumps are helpful , will Return later and let you know if i pass the exams , but great for revison
Anonymous
Jayme
Commented on May 15, 2025
QUESTION: 44
Answer is A not B
Why A is correct:
AWS Lambda function URLs allow you to directly invoke a Lambda function without needing API Gateway or any other proxy.
Fully serverless and easy to manage.
Minimal setup: just assign a URL to each Lambda function and update Git server webhooks.
Lowest operational overhead — no need to manage gateways, load balancers, or containers.
Why B is more overhead
B. API Gateway HTTP API + Lambda:
Also serverless, but adds API Gateway as an additional layer, increasing configuration and cost compared to Lambda function URLs.
Anonymous
Jayme
Commented on May 15, 2025
QUESTION: 43
The Answer is D not C
Why D is correct:
Service Control Policies (SCPs) are enforced at the organization level via AWS Organizations.
Denying the action ec2:AuthorizeSecurityGroupIngress based on a condition (i.e., aws:SourceIp == 0.0.0.0/0) ensures:
No such rule can be created — proactive control.
Applied to all accounts in the NonProd OU centrally.
No need for Lambda functions, event triggers, or post-creation rollbacks — meaning lowest operational overhead.
C is incorrect
C. SCP allowing non-0.0.0.0/0:
You can't allow specific condition-based actions in SCPs. SCPs are deny-based only (allow by omission).
Anonymous
Black
Commented on May 15, 2025
Passed yesterday with score of 773.
this dump is roughly 50% valid for unpaid version. I got 3 PBQ which are host infections and autoscaling and one new i have not seen before.
Question: Recent system breach due to password, choose the best password practices and what mitigation will prevent it from happening again?
Password protection standard: Reuse, Complexity, Length, Expiration, Age (you can choose any possible combination, no limit)
Answer: Reuse, Expiration, length (as per comptia, age and complexity are not best password practices)
Mitigation: FIDO Hardware, PIN, Password, SMS OTP
Answer: FIDO Hardware
I came across one youtube channel a few days before my exams. He thoroughly explains every PBQs. All his questions are literally form dumps. I HIGHLY recommend to check it out.
https://www.youtube.com/@MohammadLotfiA
Anonymous
Jayme
Commented on May 15, 2025
QUESTION: 28
Answer is C not A
To accurately track costs for resources across AWS Organizations using user-defined tags, the following must happen:
1. Activate the tag ("costCenter") in each member account:
Tags must be activated at the account level for them to be used in billing and cost allocation.
Without activation, AWS will not include them in the Cost and Usage Reports (CUR).
2. Generate the AWS Cost and Usage Report (CUR) from the management account:
The management account in AWS Organizations is the only one that can see the full consolidated billing data across accounts.
CUR includes tag breakdowns (if tags are activated in member accounts).
3. Use tag breakdowns in the CUR:
This allows precise cost allocation based on the costCenter=compliance tag.
Anonymous
RR
Commented on May 15, 2025
Q.NO 43 answer need to be corrected
Answer is stash
Anonymous
RR
Commented on May 15, 2025
Q.NO 38 answer needs correction
right ans is script include
Anonymous
CV
Commented on May 15, 2025
I would also go with A - GAN for 55. This generates new data with the same statistics as the training set. Whereas Residual Neural Network is more a deep learning architecture.
Anonymous
Nagendra
Commented on May 15, 2025
Hello Team, Thank you very much for the free dumps ad helping us in achieving this certification. I really appreciate your kindness and support.
Anonymous
Abid Hussain Ali Imam
Commented on May 15, 2025
Question 28 correct answer is Option 'A'
To meet the requirements of:
Single sign-on across all AWS accounts
Centralized identity management using AWS Organizations
Continuing to manage users and groups in an on-premises self-managed Microsoft Active Directory
The best solution is to use AWS IAM Identity Center (formerly AWS SSO) integrated with AWS Directory Service for Microsoft Active Directory (Enterprise Edition). Then, establish a one-way trust (from AWS to on-premises AD) so AWS can use your on-prem users and groups for authentication and authorization.
Why this is correct:
One-way forest/domain trust is the supported and secure method to connect self-managed AD to AWS Directory Service.
AWS IAM Identity Center (SSO) works seamlessly with AWS Organizations for central access management across accounts.
On-prem AD remains the source of truth for identity management.
PAKISTAN
Joe
Commented on May 14, 2025
Thanks for the great work
UNITED STATES
Rachel
Commented on May 14, 2025
This was a life saver, Thank you
Anonymous
Yagami
Commented on May 14, 2025
Great practice material
Anonymous