New Updated AWS SAA-C02 Exam Material in November

dumps2021-12-20T09:17:31+08:00

AWS Certified Solutions Architect-Associate SAA-C02 exam material is online. AWS certification SAA-C02 exam format is Multiple choice and Multiple response. With studying all of SAA-C02 exam updated material, you can pass the test easily. Free updated AWS SAA-C02 exam material is available below.

Page 1 of 15

1. A company maintains about 300 TB in Amazon S3 Standard storage month after month. The S3 objects are each typically around 50 GB in size and are frequently replaced with multipart uploads by their global application. The number and size of S3 objects remain constant but the company's S3 storage costs are increasing each month

How should a solutions architect reduce costs in this situation?

Switch from multipart uploads to Amazon S3 Transfer Acceleration

Enable an S3 Lifecycle policy that deletes incomplete multipart uploads

Configure S3 inventory to prevent objects from being archived too quickly

Configure Amazon CloudFront to reduce the number of objects stored in Amazon S3

2. A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries.

Which policy should be used to meet this requirement?

Simple routing policy

Latency routing policy

Multivalue routing policy

Geolocation routing policy

3. A social media company is building a feature tor its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users.

Which solution meets these requirements with the MOST scalability?

Upload files from the user's browser to the application servers Transfer the files to an Amazon S3 bucket.

Provision an AWS Storage Gateway file gateway. Upload files directly from the user's browser to the file gateway.

Generate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket

Provision an Amazon Elastic File System (Amazon EFS) file system. Upload files directly from the user's browser to the file system.

4. A company processes images into thumbnails and returns an email confirmation to the end user upon completion. The company's existing solution is facing performance bottlenecks and scalability issues. The company wants to migrate this process to AWS and implement a solution that requires the least possible configuration

Which solution meets these requirements?

Use Amazon S3 to store images and send notifications to AWS Lambda Configure an AWS Lambda function to process the images into thumbnails, store the thumbnails in Amazon S3, and send an email confirmation through Amazon Simple Email Service (Amazon SES)

Use Amazon S3 to store images and send notifications to Amazon Simple Queue Service (Amazon SQS) Configure an Amazon EC2 instance to poll the SQS queue to process the images into thumbnails, store the thumbnails in Amazon S3, and send an email confirmation through Amazon Simple Email Service (Amazon SES)

Use Amazon S3 to store images and send notifications to Amazon Simple Notification Service (Amazon SNS) Configure Amazon SNS to invoke an AWS Lambda function to process the images into thumbnails, store the thumbnails in Amazon S3, and send an email confirmation through Amazon Simple Email Service (Amazon SES).

Use Amazon S3 to store images and send notifications to Amazon Simple Queue Service (Amazon SQS) Configure an AWS Lambda function to retrieve the messages from the SQS queue process the images into thumbnails, store the thumbnails in Amazon S3, and send an email confirmation through Amazon Simple Email Service (Amazon SES)

5. A company runs a multi-tier web application that hosts news content. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones and use an Amazon Aurora database A solutions architect needs to make the application more resilient to periodic increases in request rates.

Which architecture should the solutions architect implement? (Select TWO.)

Add AWS Shield

Add Aurora Replicas.

Add AWS Direct Connect

Add AWS Global Accelerator.

Add an Amazon CloudFront distribution in front of the Application Load Balancer

6. A company uses Amazon Redshift for to data warehouse. The company wants to ensure high durability for its data in case of any component failure.

What should a solution architect recommend?

Enable concurrency scaling

Enable cross-Region snapshots

Increase the data retention period

Deploy Amazon Redshift in Multi-AZ

7. A company needs to provide its employees with secure access to confidential and sensitive files. The company wants to ensure that the tiles can be accessed only by authorized users. The files must be downloaded securely to the employees' devices.

The tiles are stored in an on-premises Windows file server. However, due to an increase in remote usage, the file server is running out of capacity.

Which solution will meet these requirements?

Migrate the file server to an Amazon EC2 instance in a public subnet. Configure the security group to limit inbound traffic to the employees' IP addresses.

Migrate the files to an Amazon FSx for Windows File Server file system. Integrate the Amazon FSx file system with the on-premises Active Directory. Configure AWS Client VP

Migrate the tiles to Amazon S3, and create a private VPC endpoint. Create a signed URL to allow download.

Migrate the tiles to Amazon S3, and create a public VPC endpoint. Allow employees to sign on with AWS Single Sign-On.

8. A solutions architect is designing a shared storage solution for a web application that is deployed across multiple Availability Zones. The web application runs on Amazon EC2 instances that are in an Auto Scaling group. The company plans to make frequent changes to the content. The solution must have strong consistency in returning the new content as soon as the changes occur.

Which solutions meet these requirements? (Select TWO.)

Use AWS Storage Gateway Volume Gateway Internet Small Computer Systems Interface (ISCSI) block storage that is mounted to the individual EC2 instances.

Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on the individual EC2 instances.

Create a shared Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on the individual EC2 instances.

Use AWS DataSync to perform continuous synchronization of data between EC2 hosts in the Auto Scaling group.

Create an Amazon S3 bucket to store the web content. Set the metadata for the Cache-Control header to no-cache. Use Amazon CloudFront to deliver the content.

9. A company hosts a three-tier web application that includes a PostgreSQL database. The database stores the metadata from documents. The company searches the metadata for key terms to retrieve documents that the company reviews in a report each month. The documents are stored in Amazon S3. The documents are usually written only once, but they are updated frequency. The reporting process takes a few hours with the use of relational queries. The reporting process must not affect any document modifications or the addition of new documents.

What are the MOST operationally efficient solutions that meet these requirements? (Select TWO)

Set up a new Amazon DocumentDB (with MongoDB compatibility) cluster that includes a read replica Scale the read replica to generate the reports.

Set up a new Amazon RDS for PostgreSQL Reserved Instance and an On-Demand read replica Scale the read replica to generate the reports

Set up a new Amazon Aurora PostgreSQL DB cluster that includes a Reserved Instance and an Aurora Replica issue queries to the Aurora Replica to generate the reports.

Set up a new Amazon RDS for PostgreSQL Multi-AZ Reserved Instance Configure the reporting module to query the secondary RDS node so that the reporting module does not affect the primary node

Set up a new Amazon DynamoDB table to store the documents Use a fixed write capacity to support new document entries Automatically scale the read capacity to support the reports

10. A company recently expanded globally and wants to make its application accessible to users in those geographic locations. The application is deployed on Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group. The company needs the ability to shift traffic from resources in one region to another.

What should a solutions architect recommend?

Configure an Amazon Route 53 latency routing policy.

Configure an Amazon Route 53 geolocation routing policy.

Configure an Amazon Route 53 geoproximity routing policy.

Configure an Amazon Route 53 multivalue answer routing policy.

Page 2 of 15

11. The application's traffic is often low. but it occasionally grows significantly. During these sudden increases in traffic, DynamoDB returns throttling errors. The result is that error pages are displayed to end users.

What should a solutions architect do to reduce these errors?

Change the DynamoDB table to use on-demand capacity mode.

Create a DynamoDB read replica to scale the read traffic horizontally.

Purchase DynamoDB reserved capacity of 1,000 RCUs and 500 WCUs.

Configure the application to use strongly consistent reads for DynamoDB queries.

12. A company wants to use high performance computing (HPC) infrastructure on AWS for financial risk modelling. The company's HPC workloads run on Linux. Each HPC workflow runs on hundreds of Amazon EC2 Spot Instances, is short-lived, and generates thousands of output files that are ultimately stored in persistent storage for analytics and long-term future use.

The company seeks a cloud storage solution that permits the copying of on-premises data to long-term persistent storage to make data available for processing by all EC2 instances. The solution should also be a high performance file system that is integrated with persistent storage to read and write datasets and output files

Which combination of AWS services meets these requirements?

Amazon FSx for Lustre integrated with Amazon S3

Amazon FSx for Windows File Server integrated with Amazon S3

Amazon S3 Glacier integrated with Amazon Elastic Block Store (Amazon EBS)

Amazon S3 bucket with a VPC endpoint integrated with an Amazon Elastic Block Store (Amazon EBS) General Purpose SSD(gp2) volume

13. A solutions architect must transfer 750 TB of data from an on-premises network-attached file system to Amazon S3 Glacier. The migration must not saturate the on-premises 10 Mbps internet connection.

Which solution will meet these requirements?

Create an AWS Site-to-Site VPN tunnel to an S3 bucket Transfer the files directly by using the AWS CL

Order 10 AWS Snowball Edge Storage Optimized devices, and select an S3 Glacier vault as the destination.

Mount the network-attached file system to an S3 bucket, and copy the files directly. Create an S3 Lifecycle policy to transition the S3 objects to S3 Glacier.

Order 10 AWS Snowball Edge Storage Optimized devices, and select an S3 bucket as the destination. Create an S3 Lifecycle policy to transition the S3 objects to S3 Glacier.

14. A solution architect has created two IAM policies. Policy1 and Policy2. Both policies are attached to an IAM group.

A cloud engineer is added as an IAM user to the IAM group.

Which action will the cloud engineer be able to perform?

Deleting IAM users

Deleting directories

Deleting Amazon EC2 instances

Deleting logs from Amazon CloudWatch Logs

15. A solutions architect is designing a security solution for a company that wants to provide developers with individual AWS accounts through AWS Organizations, while also maintaining standard security controls Because the individual developers will have AWS account root user-level access to their own accounts, the solutions architect wants to ensure that the mandatory AWS CloudTrail configuration that is applied to new developer accounts is not modified.

Which action meets these requirements?

Create an IAM policy that prohibits changes to CloudTrail, and attach it to the root user

Create a new trail in CloudTrail from within the developer accounts with the organization trails option enabled.

Create a service control policy (SCP) the prohibits changes to CloudTrail, and attach it the developer accounts

Create a service-linked role for CloudTrail with a policy condition that allows changes only from an Amazon Resource Name (ARN) in the master account

16. A company is planning to host its compute-intensive applications on Amazon EC2 instances. The majority of the network traffic will be between these applications. The company needs a solution that minimizes latency and maximizes network throughput. The underlying hardware for the EC2 instances must not be shared with any other company

Which solution will meet these requirements?

Launch EC2 instances as Dedicated Hosts in a cluster placement group

Launch EC2 instances as Dedicated Hosts in a partition placement group

Launch EC2 instances as Dedicated Instances in a cluster placement group

Launch EC2 instances as Dedicated Instances in a partition placement group

17. A company is building a mobile app on AWS. The company wants to expand its reach to millions of users. The company needs to build a platform so that authorized users can watch the company's content on their mobile devices

What should a solutions architect recommend to meet these requirements?

Publish content to a public Amazon S3 bucket. Use AWS Key Management Service (AWS KMS) keys to stream content.

Set up IPsec VPN between the mobile app and the AWS environment to stream content

Use Amazon CloudFront Provide signed URLs to stream content.

Set up AWS Client VPN between the mobile app and the AWS environment to stream content.

18. A company is adopting serverless architecture. The company's solutions architect wants to modernize an application that has source data in csv format A large team of developers needs to use the application to run SQL queries and reports on demand by joining data across multiple tables

Which combination of actions will meet these requirements MOST cost-effectively? (Select TWO)

Store the source data in Amazon S3

Load the source data into Amazon RDS

Run on-demand reports and queries by using Amazon Athena

Run on-demand reports and queries by using Amazon QuickSight

Run on-demand reports and queries by using Amazon DynamoDB

19. A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS CloudFormation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials.

Which solution meets these requirements with the LEAST operational effort?

Create a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.

Create a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store. Configure the EC2 instances to retrieve the database credentials from Parameter Store.

Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.

Configure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the IAM user with the EC2 instances to allow applications on the instances to access the database.

20. A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available Users must be able to download, modify, and upload documents.

Which combination of actions should be taken to meet these requirements? (Select TWO.)

Enable a read-only bucket ACL

Enable versioning on the bucket.

Attach an IAM policy to the bucket

Enable MFA Delete on the bucket.

Encrypt the bucket using AWS KM

Page 3 of 15

21. An Amazon EC2 administrator created the following policy associated with an IAM group containing several users

What is the effect of this policy?

Users can terminate an EC2 instance in any AWS Region except us-east-1.

Users can terminate an EC2 instance with the IP address 10 100 100 1 in the us-east-1 Region

Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.100.254.

Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100 100 254

22. A company has an on-premises data center that is running out of storage capacity. The company wants to migrate its storage infrastructure to AWS while minimizing bandwidth costs. The solution must allow for immediate retrieval of data at no additional cost.

How can these requirements be met?

Deploy Amazon S3 Glacier Vault and enable expedited Enable provisioned retrieved capacity for the workload.

Deploy AWS Storage Gateway using cached volumes. Use Storage GATEWAY store data in Amazon retaining copies of frequently accessed data subnets locally.

Deploy AWS Storage gateway using stored volume to store data locally Use Storage gateway asynchronously back up point-in-time snapshots of the data Amazon S3.

Deploy AWS Direct Connects to connect with on-premises data center. Configure AWS Storage gateway to store data locally use storage gateway to asynchronously back up point-in-time snapshot of data Amazon S3.

23. A company receives data from millions of users totalling about 1 TB each day. The company providers its users with usage report going back 12 months. All usage data must be stored for at least 5 years to comply with regularly and auditing requirement?

Which storage solution is MOST cost-effective?

Store the data in Amazon S3 Standard Set a lifecycle Set a lifecycle rule to transmission the data S3 Glacier Deep after 1 year. Set a lifecycle rule to data the data after 5 years.

Store the data in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) Set a lifecycle rule to transition the data to S3 Glacier after 1 year set the lifecycle rule to delete the data after 5 years.

Store the data in Amazon Standard Set a lifecycle rule to transmission the data to S3 Standard-infrequence Access (S3 Standard-IA) after 1 year Set a lifecycle rule to delete the data after 5 years.

Store the data in Amazon S3 Standard Set a lifecycle rule to transition the data to S3 Zone-Infrequent Access (S3 One Zones-IA) after 1 year. Set a lifecycle rule to delete the data after 5 years.

24. A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The website has a mix of dynamic and static content. Users around the globe are reporting that the website is slow

Which set of actions will improve website performance for users worldwide?

Create an Amazon CloudFront distribution and configure the ALB as an origin. Then update the Amazon Route 53 record to point to the CloudFront distribution

Create a latency-based Amazon Route 53 record for the AL

Then launch new EC2 instances with larger instance sizes and register the instances with the ALB

Launch new EC2 instances hosting the same web application in different Regions closer to the users. Then register the instances with the same ALB using cross-Region VPC peering.

Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances. Then update an Amazon Route 53 record to point to the S3 buckets.

25. A company runs its Infrastructure on AWS and has a registered base of 700.000 users for res document management application. The company intends to create a product that converts large pdf files to jpg Imago files. The .pdf files average 5 MB in size. The company needs to store the original files and the converted files. A solutions architect must design a scalable solution to accommodate demand that will grow rapidly over lime.

Which solution meets these requirements MOST cost-effectively?

Save the pdf files to Amazon S3 Configure an S3 PUT event to invoke an AWS Lambda function to convert the files to jpg format and store them back in Amazon S3

Save the pdf files to Amazon DynamoD

Use the DynamoDB Streams feature to invoke an AWS Lambda function to convert the files to jpg format and store them hack in DynamoDB

Upload the pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances. Amazon Elastic Block Store (Amazon EBS) storage and an Auto Scaling group. Use a program In the EC2 instances to convert the files to jpg format Save the .pdf files and the .jpg files In the EBS store.

Upload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances, Amazon Elastic File System (Amazon EPS) storage, and an Auto Scaling group. Use a program in the EC2 instances to convert the file to jpg format Save the pdf files and the jpg files in the EBS store.

26. A media streaming company collects real-time data and stores it in a disk-optimized database system. The company is not getting the expected throughput and wants an m-memory database storage solution that performs faster and provides high availability using data replication.

Which database should a solutions architect recommend?

Amazon RDS for MySQL

Amazon RDS for PostgreSQL

Amazon ElastiCache for Redis

Amazon ElastiCache for Memcached

27. A pharmaceutical company is developing a new drug. The volume of data that the company generates has grown exponentially over the past few months. The company's researchers regularly require a subset of the entire dataset to be immediately available with minimal lag. However, the entire dataset does not need to be accessed on a daily basis. All the data currently resides in on-premises storage arrays, and the company wants to reduce ongoing capital expenses.

Which storage solution should a solutions architect recommend to meet these requirements?

Run AWS DataSync as a scheduled cron job to migrate the data to an Amazon S3 bucket on an ongoing basis.

Deploy an AWS Storage Gateway file gateway with an Amazon S3 bucket as the target storage. Migrate the data to the Storage Gateway appliance.

Deploy an AWS Storage Gateway volume gateway with cached volumes with an Amazon S3 bucket as the target storage. Migrate the data to the Storage Gateway appliance.

Configure an AWS Site-to-Site VPN connection from the on-premises environment to AW

Migrate data to an Amazon Elastic File System (Amazon EFS) file system.

28. A company copies 200 TB of data from a recent ocean survey onto AWS Snowball Edge Storage Optimized devices. The company has a high performance computing (HPC) cluster that is hosted on AWS to look for oil and gas deposits A solutions architect must provide the cluster with consistent sub-millisecond latency and high-throughput access to the data on the Snowball Edge Storage Optimized devices. The company is sending the devices back to AWS

Which solution will meet these requirements?

Create an Amazon S3 bucket Import the data into the S3 bucket Configure an AWS Storage Gateway file gateway to use the S3 bucket Access the file gateway from the HPC cluster instances

Create an Amazon S3 bucket Import the data into the S3 bucket Configure an Amazon FSx for Lustre file system and integrate it with the S3 bucket Access the FSx for Lustre file system from the HPC cluster instances

Create an Amazon S3 bucket and an Amazon Elastic File System (Amazon EFS) file system Import the data into the S3 bucket Copy the data from the S3 bucket to the EFS file system Access the EFS file system from the HPC cluster instances

Create an Amazon FSx for Lustre file system Import the data directly into the FSx for Lustre file system Access the FSx for Lustre file system from the HPC cluster instances

29. A company runs a web-based portal that provides users with global breaking news local alerts, and weather updates. The portal delivers each user a personalized view by using a mixture of static and dynamic content Content is served over HTTPS through an API server running on an Amazon EC2 instance behind an Application Load Balancer (ALB). The company wants the portal to provide this content to its users across the world as quickly as possible

How should a solutions architect design the application to ensure the LEAST amount of latency for all users?

Deploy the application stack in a single AWS Region Use Amazon CloudFront to serve all static and dynamic content by specifying the ALB as an origin

Deploy the application stack in two AWS Regions Use an Amazon Route 53 latency routing policy to serve all content from the ALB in the closest Region

Deploy the application stack in a single AWS Region Use Amazon CloudFront to serve the static content Serve the dynamic content directly from the ALB

Deploy the application stack in two AWS Regions Use an Amazon Route 53 geolocation routing policy to serve all content from the ALB in the closest Region

30. An ecommerce company is running a multi-tier application on AWS. The front-end and backend tiers run on Amazon EC2, and the database runs on Amazon RDS for MYSQL. The backend tier communities with the RDS instance. There are frequent calls to return identical database from the database that are causing performance slowdowns.

Which action should be taken to improve the performance of the backend?

Implement Amazon SNS to store the database calls.

Implement Amazon ElasticCache to cache the large database.

Implement an RDS for MySQL read replica to cache database calls.

Implement Amazon Kinesis Data Firehose to stream the calls to the database.

Page 4 of 15

31. An application allows users at a company's headquarters to access product data. The product data is stored in an Amazon RDS MySQL DB instance. The operations team has isolated an application performance slowdown and wants to separate read traffic from write traffic A solutions architect needs to optimize the application's performance quickly

What should the solutions architect recommend?

Change the existing database to a Multi-AZ deployment Serve the read requests from the primary Availability Zone

Change the existing database to a Multi-AZ deployment. Serve the read requests from the secondary Availability Zone

Create read replicas for the database Configure the read replicas with half of the compute and storage resources as the source database

Create read replicas for the database Configure the read replicas with the same compute and storage resources as the source database

32. A leasing company generates and emails PDF statements every month for all its customers. Each statement is about 400 KB in size Customers can download their statements from the website for up to 30 days from when the statements were generated At the end of their 3-year lease, the customers are emailed a ZIP file that contains all the statements

What is the MOST cost-effective storage solution for this situation?

Store the statements using the Amazon S3 Standard storage class Create a lifecycle policy to move the statements to Amazon S3 Glacier storage after 1 day.

Store the statements using the Amazon S3 Glacier storage class Create a lifecycle policy to move the statements to Amazon S3 Glacier Deep Archive storage after 30 days.

Store the statements using the Amazon S3 Standard storage class Create a lifecycle policy to move the statements to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) storage after 30 days.

Store the statements using the Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Create a lifecycle policy to move the statements to Amazon S3 Glacier storage after 30 days.

33. A company has a large Microsoft SharePoint deployment running on-premises that requires Microsoft Windows shared file storage. The company wants to migrate this workload to the AWS Cloud and is considering various storage options. The storage solution must be highly available and integrated with Active Directory for access control

Which solution will satisfy these requirements?

Configure Amazon EFS storage and set the Active Directory domain for authentication

Create an SMB Me share on an AWS Storage Gateway tile gateway in two Availability Zones

Create an Amazon S3 bucket and configure Microsoft Windows Server to mount it as a volume

Create an Amazon FSx for Windows File Server file system on AWS and set the Active Directory domain for authentication

34. A company runs an application on an Amazon EC2 instances backed by Amazon Elastic Block Store (Amazon EBS). The instances needs to be available for 12 hours daily. The company wants to save costs by making the instance outside the window required for the application. However, the contents of the memory must be preserved whenever the instance is unavailable.

What should a solutions architect do lo meet this requirement?

Stop the instance outside the application's availability window Start up the instance again when required

Hibernate the instance outside the application's availability window Start up the instance again when required

Use Auto Scaling to scale down the instance outside the application's availability window Scale up the instance when required.

Terminate the instance outside the application's availability window Launch the instance by using a preconfigured Amazon Machine Image (AMI) when required

35. A monolithic application was recently migrated to AWS and is now running on a single Amazon EC2 instance Due to application limitations it is not possible to use automatic scaling to scale out the application. The chief technology officer (CTO) wants an automated solution to restore the EC2 instance in the unlikely event the underlying hardware fails

What would allow foe automatic recovery of the EC2 instance as quickly as possible?

Configure an Amazon CloudWatch alarm that triggers the recovery of the EC2 instance if it becomes impaired

Configure an Amazon CloudWatch alarm to trigger an SNS message that alerts the CTO when the EC2 instance is impaired

Configure AWS CloudTrail to monitor the health of the EC2 instance, and if it becomes impaired trigger instance recovery

Configure an Amazon EventBridge event to trigger an AWS Lambda function once an hour that checks the health of the EC2 instance and triggers instance recovery if the EC2 instance is unhealthy

36. A company's infrastructure consists of hundreds of Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) storage. A solutions architect must ensure that every EC2 instance can be recovered after a disaster

What should the solutions architect do to meet this requirement with the LEAST amount of effort?

Take a snapshot of the EBS storage that is attached to each EC2 instance Create an AWS CloudFormation template to launch new EC2 instances from the EBS storage.

Take a snapshot of the EBS storage that is attached to each EC2 instance. Use AWS Elastic Beanstalk to set the environment based on the EC2 template and attach the EBS storage.

Use AWS Backup to set up a backup plan for the entire group of EC2 instances. Use the AWS Backup API or the AWS CLI to speed up the restore process for multiple EC2 instances

Create an AWS Lambda function to take a snapshot of the EBS storage that is attached to each EC2 instance and copy the Amazon Machine Images (AMIs). Create another Lambda function to perform the restores with the copied AMIs and attach the EBS storage.

37. A company uses an application to present metrics from sporting events to the public. The application must scale quickly during live events and must store these metrics for log-term reporting purposes.

The company’s architecture includes the following:

* Amazon EC2 instances that run in an Auto Scaling group in private subnets

* A network Load Balancer That runs in public subnets

* A MongoDB database cluster that runs across multiple EC2 instances

A solutions architect must implement a solution that minimizes operational overhead. The solution alto must be able to Kale automatically.

What should the solutions architect set up to meet these requirements?

An Amazon DynamoDB database

An Amazon ROS for MySQL D6 instance

EC2 instances that run MySQL

Amazon Redshift

38. A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company's security policy requires that all website traffic be inspected by AWS WAF.

How should the solutions architect comply with these requirements?

Configure an S3 bucket policy to accept requests coming from the AWS WAF Amazon Resource Name (ARN) only.

Configure Amazon CloudFront to forward all incoming requests to AWS WAF before requesting content from the S3 origin.

Configure a security group that allows Amazon CloudFront IP addresses to access Amazon S3 only. Associate AWS WAF to CloudFront.

Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucket Enable AWS WAF on the distribution

39. A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to be need with as little latency as possible. A possible architect needs design an optimal solution that requires minimal application changes.

Which method should the solution architect select?

Configure amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use DAX endpoint.

AddDynamoDB read replicas to handle the increased read lead the application to point to the read endpoint for the read replicas.

Double the number of read capacity units for the new messages table in DynamoD

Continue to use the existing DynamoDB endpoint.

Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint of DynamoD

40. A security learn needs to enforce the rotation of all IAM users' access keys every 90 days If an access key Is found to be older, the key must be made inactive and removed A solutions architect must create a solution that will check for and remediate any keys older than 90 days

Which solution meets these requirements with the LEAST operational effort?

Create an AWS Config rule to check for the key age Configure the AWS Config rule to run an AWS Batch job to remove the key

Create an Amazon EventBridge (Amazon CloudWatch Events) rule to check for the key age Configure the rule to run an AWS Batch job to remove the key

Create an AWS Config rule to check for the key age Define an Amazon EventBridge (Amazon CloudWatch Events) rule to schedule an AWS Lambda function to remove the key

Create an Amazon EventBridge (Amazon CloudWatch Events) rule to check for the key age Define an EventBridge (CloudWatch Events) rule to run an AWS Batch job to remove the key

Page 5 of 15

41. An online learning company is migrating to the AWS Cloud. The company maintains its student records in a PostgreSQL database. The company needs a solution in which its data is available and online across multiple AWS Regions at all times.

Which solution will meet these requirements with the LEAST amount of operational overhead?

Migrate the PostgreSQL database to a PostgreSQL cluster on Amazon EC2 instances

Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance with the Multi-AZ feature turned on

Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance Create a read replica in another Region

Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance Set up DB snapshots to be copied to another Region.

42. A company has been running a web application with an Oracle relational database in an on-premises data center for the past 15 years. The company must migrate the database to AWS. The company needs to reduce operational overhead without having to modify the application's code.

Which solution meets these requirements?

Use AWS Database Migration Service (AWS DMS) to migrate the database servers to Amazon RD

servers.

Use AWS Database Migration Service (AWS DMS) to migrate the database servers to Amazon DynamoD

Use an AWS Snowball Edge Storage Optimized device to migrate the data from Oracle to Amazon Aurora.

43. A company recently started using Amazon Aurora as the data store for its global ecommerce application When large reports are run developers report that the ecommerce application is performing poorly After reviewing metrics in Amazon CloudWatch, a solutions architect finds that the ReadlOPS and CPU Utilization metrics are spiking when monthly reports run.

What is the MOST cost-effective solution?

Migrate the monthly reporting to Amazon Redshift.

Migrate the monthly reporting to an Aurora Replica

Migrate the Aurora database to a larger instance class

Increase the Provisioned IOPS on the Aurora instance

44. A bicycle sharing company is developing a multi-tier architecture to track the location of its bicycles during peak operating hours. The company wants to use these data points in its existing analytics platform A solutions architect must determine the most viable multi-tier option to support this architecture. The data points must be accessible from the REST API.

Which action meets these requirements for storing and retrieving location data?

Use Amazon Athena with Amazon S3

Use Amazon API Gateway with AWS Lambda

Use Amazon QuickSight with Amazon Redshift.

Use Amazon API Gateway with Amazon Kinesis Data Analytics

45. A company has a data ingestion workflow that consists the following:

✑ An Amazon Simple Notification Service (Amazon SNS) topic for notifications about new data deliveries

✑ An AWS Lambda function to process the data and record metadata

The company observes that the ingestion workflow fails occasionally because of network connectivity issues. When such a failure occurs, the Lambda function does not ingest the corresponding data unless the company manually reruns the job.

Which combination of actions should a solutions architect take to ensure that the Lambda function ingests all data in the future? (Select TWO.)

Configure the Lambda function In multiple Availability Zones.

Create an Amazon Simple Queue Service (Amazon SQS) queue, and subscribe It to me SNS topic.

Increase the CPU and memory that are allocated to the Lambda function.

Increase provisioned throughput for the Lambda function.

Modify the Lambda function to read from an Amazon Simple Queue Service (Amazon SQS) queue

46. A company serves content to its subscribers across the world using an application running on AWS. The application has several Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB) Due to a recent change in copyright restrictions, the chief information officer (CiO) wants to block access for certain countries.

Which action will meet these requirements?

Modify the ALB security group to deny incoming traffic from blocked countries

Modify the security group for EC2 instances to deny incoming traffic from blocked countries

Use Amazon CloudFront to serve the application and deny access to blocked countries

Use ALB listener rules to return access dented responses to incoming traffic from blocked countries

47. A company hosts a multi-tier web application on Amazon Linux Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The company observes that the Auto Scaling group launches more On-Demand Instances when the application's end users access high volumes of static web content. The company wants to optimize cost

What should a solutions architect do to redesign the application MOST cost-effectively?

Update the Auto Scaling group to use Reserved Instances instead of On-Demand Instances

Update the Auto Scaling group to scale by launching Spot Instances instead of On-Demand Instances

Create an Amazon CloudFront distribution to host the static web contents from an Amazon S3 bucket

Create an AWS Lambda function behind an Amazon API Gateway API to host the static website contents

48. A company is investigating potential solutions to collect process, and store users' service usage data. The company needs to create an analytics capability so that the company can use standard SQL queries to gather operational insights quickly. The solution must be highly available. The solution also must ensure atomicity, consistency, isolation and durability (ACID) compliance in the data tier

Which solution meets these requirements?

Use an Amazon Timestream database.

Use an Amazon Neptune database in a Multi-AZ design

Use a fully managed Amazon RDS for MySQL database in a Multi-AZ design

Deploy PostgreSQL on an Amazon EC2 instance that uses Amazon Elastic Block Store (Amazon EBS) Throughput Optimized HDD (st1) storage

49. An application development team is designing a microservice that will convert large images to smaller compressed images When a user uploads an image through the web interface the microservice should store the image in an Amazon S3 bucket process and compress the image with an AWS Lambda function, and store the image in its compressed form m a different S3 bucket

A solutions architect needs to design a solution that uses durable stateless components to process the images automatically

Which combination of actions will meet these requirements ? (Select TWO)

Create an Amazon Simple Queue Service (Amazon SQS) queue Configure the S3 bucket to send a notification to the SQS queue when an image is uploaded to the S3 bucket

Configure the Lambda function to use the Amazon Simple Queue Service (Amazon SQS) queue as the invocation source When the SQS message is successfully processed, delete the message in the queue

Configure the Lambda function to monitor the S3 bucket for new uploads When an uploaded image is detected write the file name to a text file in memory and use the text file to keep track of the images that were processed

Launch an Amazon EC2 instance to monitor an Amazon Simple Queue Service (Amazon SQS) queue When items are added to the queue log the file name in a text file on the EC2 instance and invoke the Lambda function

Configure an Amazon EventBridge (Amazon CloudWatch Events) event to monitor the S3 bucket When an image is uploaded send an alert to an Amazon Simple Notification Service (Amazon SNS) topic with the application owner's email address for further processing

50. A company previously migrated its data warehouse solution to AWS. The company also has an AWS Direct Conned connection Corporate office users query the data warehouse using a visualization tool. The average size of a query returned by the data warehouse is 50 MB and each webpage sent by the visualization tool is approximately 500 KB Result sets returned by the data warehouse are not cached

Which solution provides the LOWEST data transfer egress cost for the company?

Host the visualization tool on premises and query the data warehouse directly over the internet

Host the visualization tool m the same AWS Region as the data warehouse Access it over the internet

Host the visualization tool on premises and query me data warehouse directly over a Direct Conned connection at a location in the same AWS Region

Host the visualization tool in the same AWS Region as the data warehouse and access it over a Direct Conned connection at a location in the same Region

Page 6 of 15

51. A company wants to use AWS Systems Manager to manage a fleet ol Amazon EC2 instances. According to the company's security requirements, no EC2 instances can have internet access. A solutions architect needs to design network connectivity from the EC2 instances to Systems Manager while fulfilling this security obligation.

Which solution will meet these requirements?

Deploy the EC2 instances into a private subnet with no route to the internet.

Configure an interface VPC endpoint for Systems Manager. Update routes to use the endpoint.

Deploy a NAT gateway into a public subnet. Configure private subnets with a default route to the NAT gateway.

Deploy an internet gateway. Configure a network ACL to deny traffic to all destinations except Systems Manager.

52. A company wants to migrate its accounting system from an on-premises data center to the AWS Cloud m a single AWS Region. Data security and an immutable audit log are the top priorities. The company must monitor all AWS activities for compliance auditing. The company that enabled AWS CloudTrail but wants to make sure it meets meat requirements

Which actions should a solutions architect take lo protect and secure CloudTrail? (Select TWO.)

Enable CloudTrail log file validation.

Enable the CloudTrail Proceeding Library.

Enable logging of Insights events in CloudTrail.

Enable custom logging from the on-premises resources

Create an AWS Config rule to monitor whether CloudTrail is configured to use server-side encryption with AWS KMS managed encryption keys (SSE-KMS)

53. A company recently migrated a legacy application from an on-premises data center to AWS. The application is running on an Amazon EC2 instance. The EC2 instance is deployed in a private subnet in a VPC without inbound internet access. The application support team requires SSH access to the operating system to perform periodic maintenance

Which solution provides secure access with the LEAST operational effort?

Configure AWS Client VPN to access the VPC Update the EC2 instance security group inbound rules to allow access from Client VPN

Configure AWS Site-to-Site VPN to access the VPC Update the EC2 instance security group inbound rules to allow access from Site-to-Site VPN

Attach the AmazonSSMManagedlnstanceCore IAM policy to the EC2 instance role Use AWS Systems Manager Session Manager to enable SSH connection.

Deploy a bastion host in a public subnet Allow SSH access to the bastion host from the internet Update the EC2 instance security group inbound rules to allow access from the bastion host

54. A company has a service that reads and writes large amounts of data from an Amazon S3 bucket in the same AWS Region. The service is deployed on Amazon EC2 instances within the private subnet of a VPC. The service communicates with Amazon S3 over a NAT gateway in the public subnet However, the company wants a solution that will reduce the data output costs.

Which solution will meet these requirements MOST cost-effectively?

Provision a dedicated EC2 NAT instance in the public subnet. Configure the route table for the private subnet to use the elastic network interface of this instance as the destination for all S3 traffic

Provision a dedicated EC2 NAT instance in the private subnet. Configure the route table for the public subnet to use the elastic network interface of this instance as the destination for all S3 traffic.

Provision a VPC gateway endpoint. Configure the route table for the private subnet to use the gateway endpoint as the route for all S3 traffic.

Provision a second NAT gateway. Configure the route table foe the private subnet to use this NAT gateway as the destination for all S3 traffic.

55. A company has a customer relationship management (CRM) application that stores data in an Amazon RDS DB instance that runs Microsoft SQL Server. The company's IT staff has administrative access to the database. The database contains sensitive data. The company wants to ensure that the data is not accessible to the IT staff and that only authorized personnel can view the data.

What should a solutions architect do to secure the data?

Use client-side encryption with an Amazon RDS managed key.

Use client-side encryption with an AWS Key Management Service (AWS KMS) customer managed key.

Use Amazon RDS encryption with an AWS Key Management Service (AWS KMS) default encryption key.

Use Amazon RDS encryption with an AWS Key Management Service (AWS KMS) customer managed key.

56. Which AWS service can a company use to store and manage Docker images?

Amazon DynamoDB

Amazon Kinesis Data Streams

Amazon Elastic Container Registry (Amazon ECR)

Amazon Elastic File System (Amazon EFS)

57. A company stores can wordings on a monthly basis Users access lie recorded files randomly within 1year of recording, but users rarely access the files after 1year. The company wants to optimize its solution by allowing only files that ant newer than 1year old to be queried and retrieved as quickly as possible. A delay in retrieving older fees is acceptable

Which solution meets these requirements MOST cost-effectively?

Store individual files in Amazon S3 Glacier Store search metadata in object tags that are created in S3 Glacier Query the S3 Glacier tags to retrieve the files from S3 Glacier.

Store individual files in Amazon S3. Use S3 Lifecycle polices to move the ties to S3 Glacier after 1year. Query and retrieve the files that are in Amazon S3 by using Amazon Athena. Query and retrieve the files that are in S3 Glacier by using S3 Glacier Select.

Store Individual files In Amazon S3 Store search metadata for each archive In Amazon S3 Use S3 Lifecycle policies to move the ties to S3 Glacier after 1 year Query and retrieve tie flies by searching for metadata from Amazon S3.

Store individual files in Amazon S3 Use S3 Lifecycle policies to move the files to S3 Glacier after 1 year. Store search metadata in Amazon RDS Query the Sea from Amazon RDS Retrieve the files from Amazon S3 or S3 Glacier

58. A company has a Microsoft NET application that runs on an on-premises Windows Server. The application stores data by using an Oracle Database Standard Edition server. The company is planning a migration to AWS and wants to minimize development changes while moving the application. The AWS application environment should be highly available.

Which combination of actions should the company take to meet these requirements? (Select TWO.)

Refactor the application as serverless with AWS Lambda functions running NET Core.

Rehost the application in AWS Elastic Beanstalk with the .NET platform in a Multi-AZ deployment.

Replatform the application to run on Amazon EC2 with the Amazon Linus Amazon Machine Image (AMI).

Use AWS Database Migration Service (AWS DMS) to migrate from the Oracle database to Amazon DynamoDB in a Multi-AZ deployment.

Use AWS Database Migration Service (AWS DMS) to migrate from the Oracle database to Oracle on Amazon RDS in a Multi-AZ deployment.

59. The following IAM policy is attached to an IAM group.

This is the only policy applied to the group.

What are the effective IAM permissions of this policy for group members?

Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

Group members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

Group members are allowed the ec2 Stoplnstances and ec2. TerminateInstances permissions for all Regions when logged in with multi-factor authentication (MFA) Group members are permitted any other Amazon EC2 action.

Group members are allowed the ec2 Stoplnstances and ec2. Terminateinstances permissions for the us-east-1 Region only when logged in with multi-factor authentication (MFA) Group members are permitted any other Amazon EC2 action within the us-east-1 Region.

60. A company uses a payment processing system that requires messages for a particular payment ID to be received in the same order that they were sent Otherwise, the payments might be processed incorrectly.

Which actions should a solutions architect take to meet this requirement? (Select TWO.)

Write the messages to an Amazon DynamoDB table with the payment ID as the partition key

Write the messages to an Amazon Kinesis data stream with the payment ID as the partition key.

Write the messages to an Amazon ElastiCache for Memcached cluster with the payment ID as the key

Write the messages to an Amazon Simple Queue Service (Amazon SQS) queue Set the message attribute to use the payment ID

Write the messages to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the message group to use the payment I

Page 7 of 15

61. A solution architect has created a new AWS account and must secure AWS account root user access.

Which combination of actions mil accomplish this? (Select TWO )

Ensure the root user uses a strong password

Enable multi-factor authentication to the root user

Store root user access keys m an encrypted Amazon S3 bucket

Add the root user to a group containing administrative permissions

Apply the required permissions to the root user with an inline policy document

62. A company runs a photo processing application mat needs to frequently upload and download pictures from Amazon S3 buckets that are located in the same AWS Region A solutions architect has noticed an increased cost in data transfer lees and needs to implement a solution to reduce these costs

How can the solutions architect meet this requirement?

Deploy Amazon API Gateway into a public subnet and adjust the route table to route S3 calls through it

Deploy a NAT gateway into a public subnet and attach an endpoint policy that allows access to the S3 buckets

Deploy the application into a public subnet and allow it to route through an internet gateway to access the S3 buckets

Deploy an S3 VPC gateway endpoint into the VPC and attach an endpoint policy that allows access to the S3 buckets

63. A company hosts its enterprise content management platform in one AWS Region but needs to operate the platform across multiple Regions. The company has an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that runs its microservices. The EKS cluster stores and retrieves objects from Amazon S3. The EKS cluster also stores and retrieves metadata from Amazon DynamoDB

Which combination of steps should a solutions architect take to deploy the platform across multiple Regions? (Select TWO.)

Replicate the EKS cluster with cross-Region replication.

Use Amazon API Gateway to create a global endpoint to the EKS cluster

Use AWS Global Accelerator endpoints to distribute the traffic to multiple Regions

Use Amazon S3 access points to give access to the objects across multiple Regions Configure DynamoDB Accelerator (DAX) Connect DAX to the relevant tables.

Deploy an EKS cluster and an S3 bucket in another Region Configure cross-Region replication on both S3 buckets Turn on global tables for DynamoDB

64. A company is building a new data analysis application that will ingest large volumes of data into an Amazon S3 bucket. The company is concerned that sensitive information, such as personally identifiable information (Pll). might be included in some of the data that is ingested. The company needs a solution that will scan for sensitive data and log the findings.

What should a solutions architect recommend to meet these requirements?

Deploy Amazon Inspector to scan the ingested data Configure Amazon Inspector to log findings to Amazon CloudWatch if Amazon Inspector finds any sensitive data.

Deploy Amazon QuickSight to scan the ingested data. Configure QuickSight to log findings to Amazon CloudWatch if QuickSight finds any sensitive data.

Create a series of AWS Lambda functions to call Amazon GuardDuty to perform scans of the ingested data. If GuardDuty finds any sensitive data, invoke a Lambda function to write findings to Amazon CloudWatch.

Create a series of AWS Lambda functions to call Amazon Macie to perform scans of the ingested data. If Macie finds any sensitive data, invoke a Lambda function to write findings to Amazon CloudWatch.

65. A customer is running an application on Amazon EC2 instances hosted in a private subnet of a VPC. The EC2 instances are configured in an Auto Scaling group behind an Elastic Load Balancer (ELB). The EC2 instances use a NAT gateway outbound internet access However, the EC2 instances are not able to connect to the public internet to download software updates.

The ELB is not configured with a proper health check.

The route tables in the VPC are configured incorrectly.

The EC2 instances are not associated with an Elastic IP address.

The security group attached to the NAT gateway is configured incorrectly.

The outbound rules on the security group attachment to the EC2 instances are configured incorrectly.

66. A website runs a web application that receives a burst of traffic each day at noon. The users upload new pictures and context daily, but have complaining of timeout. The architect uses Amazon EC2 Auto Scaling groups, and the custom application consistently takes 1 minutes to initiate upon boot up before responding to user requests.

How should a solutions architect redesign the architect to better respond to changing traffic?

Configure a Network Load Balancer with a slow start configuration.

Configure AWS ElastiCache for Redis to offload direct requests to the servers.

Configure an Auto Scaling step scaling policy with an instance warmup condition.

Configure Amazon CloudFront to use an Application Load Balancer as the origin.

67. A company is designing a new web service that will run on Amazon EC2 instances behind an Elastic Load Balancer. However many of the web service clients can only reach IP addresses whitelisted on their firewalls.

What should a solutions architect recommend to meet the clients' needs?

A Network Load Balancer with an associated Elastic IP address

An Application Load Balancer with an associated Elastic IP address.

An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address

An EC2 instance with a public IP address running as a proxy in front of the load balancer.

68. A solutions architect It designing a VPC with public and private subnets. The VPC and subnets use IPv4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability An internet gateways used to provide internet access for the public subnets. The private subnets require access to the internet to allow Amazon BC2 Instances to download software updates.

What should the solutions architect do to enable internet access for the private subnets?

Create three NAT gateways, one for each public subnet in each AZ Create a private route table for each AZ that forwards non-VPC traffic to tie NAT gateway m its A

Create three NAT instances, one for each private subnet in each AZ Create a private route table for each AZ that forwards non-VPC traffic to the NAT instance in its A

Create a second internet gateway on one of the private subnets. Update the route table for the private subnets that forward non-VPC trade to the private Internet gateway.

Create an egress-only internet gateway on one of the pubic subnets. Update the route table for the private subnets that forward non-VPC traffic to the egress-only internet gateway.

69. A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses. Downtime is not acceptable for the website.

Which actions should the solutions architect take to protect the website from such an attack? (Select TWO.)

Use AWS Shield Advanced to stop the DDoS attack.

Configure Amazon GuardDuty to automatically block the attackers.

Configure the website to use Amazon CloudFront for both static and dynamic content.

Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.

Use EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization

70. A solutions architect plans to convert a company's monolithic web application into a multi-tier application. The company wants to avoid managing its own Infrastructure. The minimum requirements for the web application are high availability, scalability, and regional low latency during peak hours. The solution should also store and retrieve data with millisecond latency using the application's API.

Which solution meets these requirements?

Use AWS Fargate to host the web application with backend Amazon RDS Multi-AZ DB instances

Use Amazon API Gateway with an edge-optimized API endpoint. AWS Lambda for compute, and Amazon DynamoDB as the data store

Use an Amazon Route 53 routing policy with geolocation that points to an Amazon S3 bucket with static website hosting and Amazon DynamoDB as the data store

Use an Amazon CloudFront distribution that points to an Elastic Load Balancer with an Amazon EC2 Auto Scaling group, along with Amazon RDS Multi-AZ DB instances

Page 8 of 15

71. A company's database is hosted on an Amazon Aurora MySQL DB cluster in the us-east-1 Region. The database is 4 TB in size. The company needs to expand its disaster recovery strategy to the us-west-2 Region. The company must have the ability to fail over to us-west-2 with a recovery time objective (RTO) of 15 minutes.

What should a solutions architect recommend to meet these requirements?

Create a Multi-Region Aurora MySQL DB cluster in us-east-1 and us-west-2 Use an Amazon Route 53 health check to monitor us-east-1 and fail over to us-west-2 upon failure

Take a snapshot of the DB cluster in us-east-1. Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function upon receipt of resource events Configure the Lambda function to copy the snapshot to us-west-2 and restore the snapshot in us-west-2 when failure is detected.

Create an AWS CloudFormation script to create another Aurora MySQL DB cluster in us-west-2 in case of failure Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function upon receipt of resource events. Configure the Lambda function to deploy the AWS CloudFormation stack in us-west-2 when failure is detected.

Recreate the database as an Aurora global database with the primary DB cluster in us-east-1 and a secondary DB cluster in us-west-2 Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function upon receipt of resource events Configure the Lambda function to promote the DB cluster in us-west-2 when failure is detected.

72. A company is running a multi-tier recommence web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ OB instance. Amazon ROS is configured with the latest generation DB instance with 2.000 GB of storage In a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBSl volume. The database performance affects the application during periods high demand.

A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20.000.

What should a solutions architect do to improve the application performance?

Replace the volume with a magnetic volume.

Increase the number of IOPS on the gp3 volume.

Replace the volume with a Provisioned IOPS SSD (Io2) volume.

Replace the 2.000 GB gp3 volume with two 1.000 GB gp3 volumes

73. A company wants to minimize cost by moving infrequently accessed audit archives to low-cost storage.

Which AWS service should the company use for this storage?

AWS Backup

Amazon S3 Glacier

AWS Snowball

AWS Storage Gateway

74. A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account.

Which solution will meet these requirement in the MOST secure manner?

Apply an S3 bucket pokey that grants road access to the S3 bucket

Apply an IAM role to the Lambda function Apply an IAM policy to the role to grant read access to the S3 bucket

Embed an access key and a secret key In the Lambda function's coda to grant the required IAM permissions for read access to the S3 bucket

Apply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to all S3 buckets In the account

75. A company has 150 TB of archived image data stored on-premises that needs to be moved to the AWS Cloud within the next month. The company's current network connection allows up to 100 Mbps uploads for this purpose during the night only.

What is the MOST cost-effective mechanism to move this data and meet the migration deadline?

Use AWS Snowmobile to ship the data to AW

Order multiple AWS Snowball devices to ship the data to AW

Enable Amazon S3 Transfer Acceleration and securely upload the data.

Create an Amazon S3 VPC endpoint and establish a VPN to upload the data

76. A company has a three-tier environment on AWS that ingests sensor data from its users' devices. The traffic flows through a Network Load Balancer (NIB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier that makes database calls

What should a solutions architect do to improve the security of data in transit to the web tier?

Configure a TLS listener and add the server certificate on the NLB

Configure AWS Shield Advanced and enable AWS WAF on the NLB

Change the load balancer to an Application Load Balancer and attach AWS WAF to it

Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances using AWS Key Management Service (AWS KMS)

77. A company wants to host a web application on AWS that will communicate to a database within a VPC. The application should be highly available.

What should a solutions architect recommend?

Create two Amazon EC2 instances to host the web servers behind a load balancer and then deploy the database on a large instance

Deploy a load balancer in multiple Availability Zones with an Auto Scaling group for the web servers, and then deploy Amazon RDS in multiple Availability Zones

Deploy a load balancer in the public subnet with an Auto Scaling group for the web servers, and then deploy the database on an Amazon EC2 instance in the private subnet

Deploy two web servers with an Auto Scaling group, configure a domain that points to the two web servers, and then deploy a database architecture in multiple Availability Zones

78. A company must save ail the email messages that its employees send to customers for a period of 12 months. The messages are stored m a binary format and vary m size from 1 KB to 20 KB. The company has selected Amazon S3 as the storage service for the messages

Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO)

Create an S3 bucket policy that denies the s3 Delete Object action.

Create an S3 lifecycle configuration that deletes the messages after 12 months.

Upload the messages to Amazon S3 Use S3 Object Lock in governance mode

Upload the messages to Amazon S3. Use S3 Object Lock in compliance mode.

Use S3 Inventory Create an AWS Batch job that periodically scans the inventory and deletes the messages after 12 months

79. A solutions architect needs to design a network that will allow multiple Amazon EC2 instances to access a common data source used for mission-critical data that can be accessed by all the EC2 instances simultaneously. The solution must be highly scalable, easy to implement, and support the NFS protocol

Which solution meets these requirements?

Create an Amazon EFS file system Configure a mount target in each Availability Zone. Attach each instance to the appropriate mount target

Create an additional EC2 instance and configure it as a file server Create a security group that allows communication between the instances and apply that to the additional instance.

Create an Amazon S3 bucket with the appropriate permissions Create a role in AWS IAM that grants the correct permissions to the S3 bucket. Attach the role to the EC2 instances that need access to the data

Create an Amazon EBS volume with the appropriate permissions. Create a role in AWS IAM that grants the correct permissions to the EBS volume. Attach the role to the EC2 instances that need access to the data.

80. A company is automating an order management application. The company's development team has decided to use SFTP to transfer and store the business-critical information files. The files must be encrypted and must be highly available. The files also must be automatically deleted a month after they are created.

Which solution meets these requirements with the LEAST operational overhead?

Configure an Amazon S3 bucket with encryption enabled. Use AWS transfer for SFTP to securely transfer the files to the S3 bucket Apply an AWS Transfer for SFTP file retention policy to delete the files after a month

Install an SFTP service on an Amazon EC2 instance Mount an Amazon Elastic File System (Amazon EFS) file share on the EC2 instance. Enable cron to delete the files after a month

Configure an Amazon Elastic File System (Amazon EFS) file system with encryption enabled. Use AWS Transfer for SFTP to securely transfer the files to the EFS file system. Apply an EFS lifecycle policy to automatically delete the files after a month.

Configure an Amazon S3 bucket with encryption enabled. Use AWS Transfer for SFTP to securely transfer the files to the S3 bucket. Apply S3 Lifecycle rules to automatically delete the files after a month.

Page 9 of 15

81. A company's production application runs online transaction processing (OLTP) transactions on an Amazon RDS MySQL DB instance. The company is launching a new reporting tool that will access the same data. The reporting tool must be highly available and not impact the performance of the production application

How can this be achieved'?

Create hourly snapshots of the production RDS DB instance

Create a Multi-AZ RDS Read Replica of the production RDS DB instance

Create multiple RDS Read Replicas of the production RDS DB instance Place the Read Replicas in an Auto Scaling group

Create a Single-AZ RDS Read Replica of the production RDS DB instance Create a second Single-AZ RDS Read Replica from the replica

82. A company runs an AWS Lambda function in private subnets in a VPC. The subnets have a default route to the internet through an Amazon EC2 NAT instance. The Lambda function processes input data and saves its output as an object to Amazon S3 intermittently the Lambda function times out while trying to upload the object because of saturated traffic on the NAT instance's network. The company wants to access Amazon S3 without traversing the internet

Which solution will meet these requirements?

Replace the fcC2 NAT instance with an AWS managed NAT gateway

Increase the size of the EC2 NAT instance in the VPC to a network optimized instance type

Provision a gateway endpoint for Amazon S3 in the VPC Update the route tables of the subnets accordingly

Provision a transit gateway Place transit gateway attachments in the private subnets where the Lambda function is running

83. A company has an on-premises MySQL database used by the global tales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrate wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users In the future.

Which service should a solutions architect recommend?

Amazon Aurora MySQL

Amazon Aurora Serverless tor MySQL

Amazon Redshift Spectrum

Amazon RDS for MySQL

84. A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard A solutions architect needs to design a solution that can handle large traffic spikes process the mobile game updates in order of receipt and store the processed updates in a highly available database. The company also wants to minimize the management overhead required to maintain the solution

What should the solutions architect do to meet these requirements?

Push score updates to Amazon Kinesis Data Streams Process the updates in Kinesis Data Streams with AWS Lambda Store the processed updates in Amazon DynamoDB

Push score updates to Amazon Kinesis Data Streams Process the updates with a fleet of Amazon EC2 instances set up for Auto Scaling Store the processed updates in Amazon Redshifi

Push score updates to an Amazon Simple Notification Service (Amazon SNS) topic Subscribe an AWS Lambda function to the SNS topic to process the updates Store the processed updates in a SQL database running on Amazon EC2

Push score updates to an Amazon Simple Queue Service (Amazon SQS) queue Use a fleet of Amazon EC2 instances with Auto Scaling to process the updates in the SQS queue Store the processed updates in an Amazon RDS Multi-AZ DB instance

85. A development team stores its Amazon RDS MySQL DB instance user name and password credentials in a configuration file. The configuration file is stored as plaintext on the root device volume of the team's Amazon EC2 instance When the team's application needs to reach the database it reads the file and loads the credentials into the code. The team has modified the permissions of the configuration file so that only the application can read its content A solutions architect must design a more secure solution

What should the solutions architect do to meet this requirement1?

Store the configuration file in Amazon S3 Grant the application access to read the configuration file

Create an IAM role with permission to access the database Attach this IAM role to the EC2 instance

Enable SSL connections on the database instance Alter the database user to require SSL when logging in.

Move the configuration file to an EC2 instance store, and create an Amazon Machine Image (AMI) of the instance. Launch new instances from this AMI

86. A company wants to use an AWS Region as a disaster recovery location for its on-premises infrastructure. The company has 10 TB of existing data and the on-premises data center has a 1Gbps internet connection A solution architect must find a solution so the company can have its existing data on AWS in 72 hours without transmitting it using an unencrypted channel.

Which solution should the solutions architect select

Send the initial 10 TB of data to AWS using FT

Send the initial 10 TB of data lo AWS using AWS Snowball.

Establish a VPN connection between Amazon VPC and the company's data center

Establish an AWS Direct Connect connection between Amazon VPC and the company's data canter

87. A solution architect is designing an application for a two-step order across. The first step is synhronous and must return to the user with little latency. The second step takes longer so it will be implemented in a separate component. Orders must be processed exacity once and in the order in which they are received.

How should the solutions architect integrate these components?

Use Amazon SQS FIFO queues

Use an AWS Lambda function along with Amazon SQS standard queues.

Create an SNS topic and subscribe an Amazon SQS FIFO queue to that topic.

Create an SNS topic subscribe an Amazon SQS Standard queue to that topic.

88. A company is hosting multiple websites for several lines of business under its registered parent domain Users accessing these websites will be routed to appropriate backend Amazon EC2 instances based on the subdomain. The websites host static webpages images, and server-side scripts like PHP and JavaScript.

Some of the websites experience peak access during the first two hours of business with constant usage throughout the rest of the day A solutions architect needs to design a solution that will automatically adjust capacity to these traffic patterns while keeping costs low.

Which combination of AWS services or features will meet these requirements? (Select TWO)

AWS Batch

Network Load Balancer

Application Load Balancer

Amazon EC2 Auto Scaling

Amazon S3 website hosting

89. A company plans to store sensitive user data on Amazon S3 internal security compliance requirement mandate encryption of data before secured it to Amazon S3.

What should a solutions architect recommend to safely these requirements?

Server-side encryption with customer-provided encryption keys.

Client-side encryption with Amazon S3 managed encryption keys.

Service-side encryption with keys stored in AWS Management Service (AWS KMS)

Server-side encryption with a master stored in AWS Management Service (AWS KMS)

90. A solutions architect needs to design a nighty available application consisting of web. application and database tiers HTTPS content delivery should be as close to the edge as possible with the least delivery time

Which solution meets these requirements and is MOST secure?

Configure a public Application Load Balancer (ALB) with multiple redundant Amazon EC2 instances in public subnets Configure Amazon CloudFront to deliver HTTPS content using the public ALB as the origin

Configure a public Application Load Balancer with multiple redundant Amazon EC2 instances in private subnets Configure Amazon CloudFront to deliver HTTPS content using the EC2 instances as the origin

Configure a public Application Load Balancer (ALB) with multiple redundant Amazon EC2 instances in private subnets Configure Amazon CloudFront to deliver HTTPS content using the public ALB as the origin

Configure a public Application Load Balancer with multiple redundant Amazon EC2 instances in public subnets Configure Amazon CloudFront to deliver HTTPS content using the EC2 instances as the origin

Page 10 of 15

91. A company wants to run an in-memory database for a latency-sensitive application that runs on Amazon EC2 instances. The application processes more than 100,000 transactions each minute and requires high network throughput. A solutions architect needs to provide a cost-effective network design that minimizes data transfer charges.

Which solution meets these requirements?

Launch all EC2 instances in the same Availability Zone within the same AWS Region. Specify a placement group with cluster strategy when launching EC2 instances.

Launch all EC2 instances in different Availability Zones within the same AWS Region. Specify a placement group with partition strategy when launching EC2 instances.

Deploy an Auto Scaling group to launch EC2 instances in different Availability Zones based on a network utilization target.

Deploy an Auto Scaling group with a step scaling policy to launch EC2 instances in different Availability Zones.

92. A solutions architect must provide a fully managed replacement for an on-premises solution that allows employees and partners to exchange files. The solution must be easily accessible to employees connecting from on-premises systems, remote employees, and external partners

Which solution meets these requirements?

Use AWS Transfer for SFTP to transfer files into and out of Amazon S3.

Use AWS Snowball Edge for local storage and large-scale data transfers

Use Amazon FSx to store and transfer files to make them available remotely.

Use AWS Storage Gateway to create a volume gateway to store and transfer files to Amazon S3

93. A company manages its own Amazon EC2 instances that run MySQL databases. The company is manually managing replication and scaling as demand increases or decreases. The company needs a new solution that simplifies the process of adding or removing compute capacity to or from its database tier as needed. The solution also must offer improved performance, scaling, and durability with minimal effort from operations

Which solution meets these requirements'?

Migrate the databases to Amazon Aurora Serverless for Aurora MySQL

Migrate the databases to Amazon Aurora Serverless for Aurora PostgreSQL

Combine the databases into one larger MySQL database Run the larger database on larger EC2 instances

Create an EC2 Auto Scaling group for the database tier Migrate the existing databases to the new environment

94. A company has an application that uses Amazon Elastic File System (Amazon EFS) to store data. The files are 1 GB in size or larger and are accessed often only for the first few days after creation. The application data is shared across a cluster of Linux servers. The company wants to reduce storage costs for the application.

What should a solutions architect do to meet these requirements?

Implement Amazon FSx and mount the network drive on each server

Move the files from Amazon EFS and store them locally on each Amazon EC2 instance

Configure a lifecycle policy to move the files to the EFS Infrequent Access (IA) storage class after 7 days.

Move the files to Amazon S3 with S3 Lifecycle policies enabled. Rewrite the application to support mounting the S3 bucket

95. A company runs demonstration environments for its customers on Amazon EC2 instances. Each environment is isolated in its own VPC. The company's operations team needs to be notified when RDP or SSH access to an environment has been established.

What should a solutions architect recommend to meet these requirements?

Configure Amazon CloudWatch Application Insights to create AWS Systems Manager Opsltems when RDP or SSH access is detected.

Configure the EC2 instances with an IAM instance profile that has an IAM role with the AmazonSSMManagedlnstanceCore policy attached.

Publish VPC flow logs to Amazon CloudWatch Logs. Create required metric filters. Create an Amazon CloudWatch metric alarm with a notification action for when the alarm is in the ALARM state.

Configure an Amazon EventBridge (Amazon CloudWatch Events) rule to listen for events of type EC2 Instance State-change Notification. Configure an Amazon Simple Notification Service (Amazon SNS) topic as a target. Subscribe the operations team to the topic.

96. A company is developing a serverless web application that gives users the ability to interact with real-time analytics from online games. The data from the games must be streamed in real time. The company needs a durable, low-latency database option for user data. The company does not know how many users will use the application Any design considerations must provide response times of single-digit milliseconds as the application scales.

Which combination of AWS services will meet these requirements? (Select TWO.)

Amazon CloudFront

Amazon DynamoDB

Amazon Kinesis

Amazon RDS

AWS Global Accelerator

97. A company is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data in Amazon RDS MySQL Multi-AZ DB instances. The EC2 instances are in public subnets, and the RDS DB instances are in private subnets. The security team has mandated that the DB instances be secured against web-based attacks.

What should a solutions architect recommend?

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer Configure the EC2 instance iptables rules to drop suspicious web traffic. Create a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances.

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Move DB instances to the same subnets that EC2 instances are located in. Create a security group for the DB instances Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances.

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Create a security group for the web application servers and a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the web application server security group

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Configure the Auto Scaling group to automatically create new DB instances under heavy traffic. Create a security group for the RDS DB instances. Configure the RDS security group to only allow port 3306 inbound.

98. An application uses an Amazon RDS MySQL DB instance. The RDS database is becoming low on disk space A solutions architect wants to increase the disk space without downtime.

Which solution meets these requirements with the LEAST amount of effort?

Enable storage autoscaling in RDS

Increase the RDS database instance size

Change the RDS database instance storage type to Provisioned lOPS

Back up the RDS database increase the storage capacity restore the database and stop the previous instance

99. A company is implementing new data retention policies for all databases that run on Amazon RDS DB instances. The company must retain daily backups for a minimum period of 2 years. The backups must be consistent and restorable.

Which solution should a solutions architect recommend to meet these requirements?

Create a backup vault in AWS Backup to retain RDS backups. Create a new backup plan with a daily schedule and an expiration period of 2 years after creation. Assign the RDS DB instances to the backup plan.

Configure a backup window for the RDS DB Instances for daily snapshots. Assign a snapshot retention policy of 2 years to each RDS DB instance. Use Amazon Data Lifecycle Manager (Amazon DLM)

to schedule snapshot deletions.

Configure database transaction logs to be automatically backed up to Amazon CloudWatch Logs with an expiration period of 2 years

Configure an AWS Database Migration Service (AWS DMS) replication task. Deploy a replication instance, and configure a change data capture (CDC) task to stream database changes to Amazon S3 as the target Configure S3 Lifecycle policies to delete the snapshots after 2 years.

100. A company needs to store data from its healthcare application. The application's data frequently changes. A new regulation requires audit access at all levels of the stored data.

The company hosts the application on an on-premises infrastructure that is running out of storage capacity. A solutions architect must securely migrate the existing data to AWS while satisfying the new regulation.

Which solution will meet these requirements?

Use AWS DataSync to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.

Use AWS Snowcone to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.

Use Amazon S3 Transfer Acceleration to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.

Use AWS Storage Gateway to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.

Page 11 of 15

101. A company needs the ability to analyze the log files of its proprietary application. The logs are stored in JSON format in an Amazon S3 bucket Queries will be simple and will run on-demand A solutions architect needs to perform the analysis with minimal changes to the existing architecture

What should the solutions architect do to meet these requirements with the LEAST amount of operational overhead?

Use Amazon Redshift to load all the content into one place and run the SQL queries as needed

Use Amazon CloudWatch Logs to store the logs Run SQL queries as needed from the Amazon CloudWatch console

Use Amazon Athena directly with Amazon S3 to run the queries as needed

Use AWS Glue to catalog the logs Use a transient Apache Spark cluster on Amazon EMR to run the SQL queries as needed

102. A company has a financial application that produces reports. The reports average 50 KB in size and are stored in Amazon S3. The reports are frequently accessed during the first week after production and must be stored for several years. The reports must be retrievable within 6 hours

Which solution meets these requirements MOST cost-effectively1?

Use S3 Standard Use an S3 Lifecycle rule to transition the reports to S3 Glacier after 7 days.

Use S3 Standard Use an S3 Lifecycle rule to transition the reports to S3 Standard-Infrequent Access (S3 Standard-IA) after 7 days

Use S3 Intelligent-Tiering Configure S3 Intelligent-Tiering to transition the reports to S3 Standard-Infrequent Access (S3 Standard-IA) and S3 Glacier

Use S3 Standard Use an S3 Lifecycle rule to transition the reports to S3 Glacier Deep Archive after 7 days

103. A solutions architect Is designing a new API using Amazon API Gateway that will receive requests from users. The volume of requests is highly variable: several hours can pass

without receiving a single request. The data processing will take place asynchronously, but should be completed within a few seconds after a request la made.

Which compute service should the solutions architect have the API invoke to deliver the requirements at the lowest cost?

An AWS Glue job

An AWS Lambda function

A containerized service hosted in Amazon Elastic Kubemetes Service {Amazon EKS)

A containerized service hosted in Amazon ECS with Amazon EC2

104. A company is developing a video conversion application hosted on AWS. The application will be available in two tiers: a free tier and a paid tier. Users in the paid tier will have their videos converted first and then the free tier users will have their videos converted

Which solution meets these requirements and is MOST cost-effective?

One FIFO queue for the paid tier and one standard queue for the free tier

A single FIFO Amazon Simple Queue Service (Amazon SQS) queue for all file types

A single standard Amazon Simple Queue Service (Amazon SQS) queue for all file types

Two standard Amazon Simple Queue Service (Amazon SQS) queues with one for the paid tier and one for the free tier

105. A recently created startup built a three-tier web application. The front end nas static content. The application layer is based on mtcroservtces User data is stored as JSON documents that need to be accessed with low latency. The company expects regular traffic to be tow during the first year with peaks in traffic when it publicizes new features every month. The startup team needs to minimize operational overhead costs

What should a solutions architect recommend to accomplish this?

Use Amazon S3 static website hosting to store and serve the front end Use AWS Elastic Beanstalk tor the application layer Use Amazon DynamoDB to store user data

Use Amazon S3 static website hosting to store and serve the front end Use Amazon Elastic Kubernetes Service (Amazon EKSJ for the application layer Use Amazon DynamoDB lo store user data

Use Amazon S3 static website hosting to store and serve the front end Use Amazon API Gateway and AWS Lambda function for the application layer Use Amazon DynamoDB to store user data

Use Amazon S3 static website hosting to store and serve the front end Use Amazon API Gateway and AWS Lambda function for the application layer Use Amazon RDS with read replicas to store user data

106. A company has developed a new content-sharing application that runs on Amazon Elastic Container Service (Amazon ECS). The application runs on Amazon Linux Docker tasks that use the Amazon EC2 launch type.

The application requires a storage solution that has the following characteristics:

• Accessibility (or multiple ECS tasks through bind mounts

• Resiliency across Availability Zones

• Burslable throughput of up to 3 Gbps

• Ability to be scaled up over time

Which storage solution meets these requirements?

Launch an Amazon FSx for Windows File Server Multi-AZ instance. Configure the ECS task definitions to mount the Amazon FSx instance volume at launch.

Launch an Amazon Elastic File System (Amazon EFS) instance. Configure the ECS task definitions to mount the EFS Instance volume at launch.

Create a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume with Multi-Attach set to enabled. Attach the EBS volume to the ECS EC2 instance Configure ECS task definitions to mount the EBS instance volume at launch.

Launch an EC2 instance with several Provisioned IOPS SSD (k>2) Amazon Elastic Block Store (Amazon EBS) volumes attached m a RAID 0 configuration. Configure the EC2 instance as an NFS storage server. Configure ECS task definitions to mount the volumes at launch.

107. A company is building a web application that serves a content management system. The content management system runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances run in an Auto Scaling group across multiple Availability Zones Users are constantly adding and updating files blogs and other website assets in the content management system

A solutions architect must implement a solution in which all the EC2 instances share up-to-date website content with the least possible lag time

Which solution meets these requirements?

Update the EC2 user data in the Auto Scaling group lifecycle policy to copy the website assets from the EC2 instance that was launched most recently Configure the ALB to make changes to the website assets only m the newest EC2 instance

Copy the website assets to an Amazon Elastic File System (Amazon EFS) file system Configure each EC2 instance to mount the EPS file system locally Configure the website hosting application to reference the website assets that are stored in the EFS file system

Copy the website assets to an Amazon S3 bucket Ensure that each EC2 instance downloads the website assets from the S3 bucket to the attacneo Amazon Elastic Block Store (Amazon EBS) volume Run the S3 sync command once each hour to keep files up to date

Restore an Amazon Elastic Block Store (Amazon EBS) snapshot with the website assets Attach the EBS snapshot as a secondary EBS volume when a new EC2 instance is launched Configure the website hosting application to reference the website assets that are stored in the secondary EBS volume

108. A company runs an application on a group of Amazon Linux EC2 instances. For compliance reasons, the company must retain all application log files for 7 years. The log files will be analyzed by a reporting tool that must be able to access all the files concurrently.

Which storage solution meets these requirements MOST cost-effectively?

Amazon Elastic Block Store (Amazon EBS)

Amazon Elastic File System (Amazon EFS)

Amazon EC2 instance store

Amazon S3

109. A company wants to provide users with access lo AWS resources. The company has 1.500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network However, the company does not want users to have to maintain another identity to access the resources A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources

What should the solutions architect do to meet these requirements?

Create an IAM user for each user in the company Attach the appropriate policies to each user

Use Amazon Cognito with an Active Directory user pool Create rotes with the appropriate policies attached

Define cross-account roles with the appropriate policies attached Map the roles to the Active Directory groups

Configure Security Assertion Markup Language (SAML) 2 0-based federation Create roles with the appropriate policies attached Map the roles to the Active Directory groups

110. A company recently migrated a message processing system to AWS. The system receives messages into an ActiveMQ queue running on an Amazon EC2 instance. Messages are processed by a consumer application running on Amazon EC2. The consumer application processes the messages and writes results to a MySQL database funning on Amazon EC2. The company wants this application to be highly available with tow operational complexity

Which architecture otters the HGHEST availability?

Add a second ActiveMQ server to another Availably Zone Add an additional consumer EC2 instance in another Availability Zone. Replicate the MySQL database to another Availability Zone.

Use Amazon MO with active/standby brokers configured across two Availability Zones Add an additional consumer EC2 instance in another Availability Zone. Replicate the MySQL database to another Availability Zone.

Use Amazon MO with active/standby blotters configured across two Availability Zones. Add an additional consumer EC2 instance in another Availability Zone. Use Amazon ROS tor MySQL with Multi-AZ enabled.

Use Amazon MQ with active/standby brokers configured across two Availability Zones Add an Auto Scaling group for the consumer EC2 instances across two Availability Zones. Use Amazon RDS (or MySQL with Multi-AZ enabled.

Page 12 of 15

111. A company allows users to upload and store photos through its website. The website has users from all around the world. All images that users upload are stored in a centralized Amazon S3 bucket. The company wants to increase the speed in which its entire user base can upload photos through the website.

What should a solutions architect recommend to meet these requirements?

Create an Amazon CloudFront distribution. Use the Amazon S3 Standard storage class to store files

Create an Amazon CloudFront distribution. Configure the distribution settings and origin.

Configure S3 Transfer Acceleration on the S3 bucket Use the standard S3 endpoint to upload files

Configure S3 Transfer Acceleration on the S3 bucket Use the S3 Accelerate endpoint to upload files

112. A company is deploying a two-tier web application in a VPC. The web tier is using an Amazon EC2 Auto Scaling group with public subnets that span multiple Availability Zones. The database tier consists of an Amazon RDS for MySQL DB instance in separate private subnets. The web tier requires access to the database to retrieve product information.

The web application is not working as intended. The web application reports that it cannot connect to the database. The database is confirmed to be up and running. All configurations for the network ACLs. security groups, and route tables are still in their default states.

What should a solutions architect recommend to fix the application?

Add an explicit rule to the private subnet's network ACL to allow traffic from the web tier's EC2 instances.

Add a route in the VPC route table to allow traffic between the web tier's EC2 instances and Ihe database tier.

Deploy the web tier's EC2 instances and the database tier's RDS instance into two separate VPCs. and configure VPC peering.

Add an inbound rule to the security group of the database tier's RDS instance to allow traffic from the web tier's security group.

113. A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard A solutions architect needs to design a solution that can handle large traffic spikes process the mobile game updates in order of receipt and store the processed updates in a highly available database. The company also wants to minimize the management overhead required to maintain the solution

What should the solutions architect do to meet these requirements?

Push score updates to Amazon Kinesis Data Streams Process the updates in Kinesis Data Streams with AWS Lambda Store the processed updates in Amazon DynamoDB

Push score updates to Amazon Kinesis Data Streams Process the updates with a fleet of Amazon EC2 instances set up for Auto Scaling Store the processed updates in Amazon Redshifi

Push score updates to an Amazon Simple Notification Service (Amazon SNS) topic Subscnbe an AWS Lambda function to the SNS topic to process the updates Store the processed updates in a SQL database running on Amazon EC2

114. A company wants to migrate its MySQL database from on premises to AWS. The company recently experienced a database outage that significantly impacted the business To ensure this does not happen again the company wants a reliable database solution on AWS that minimizes data loss and stores every transaction on at least two nodes

Which solution meets these requirements?

Create an Amazon RDS DB instance with synchronous replication to three nodes in three Availability Zones.

Create an Amazon RDS MySQL DB instance with Multi-AZ functionality enabled to synchronously replicate the data.

Create an Amazon RDS MySQL DB instance and then create a read replica in a separate AWS Region that synchronously replicates the data.

Create an Amazon EC2 instance with a MySQL engine installed that triggers an AWS Lambda function to synchronously replicate the data to an Amazon RDS MySQL DB instance

115. A company runs an application on Amazon EC2 instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region.

Which solution should be implemented to ensure that there are no disruptions to internet connectivity?

Deploy a NAT instance in a private subnet of each Availability Zone.

Deploy a NAT gateway in a public subnet of each Availability Zone

Deploy a transit gateway in a private subnet of each Availability Zone.

Deploy an internet gateway in a public subnet of each Availability Zone

116. A company hosts multiple production applications. One of the applications consists of resources from Amazon EC2. AWS Lambda. Amazon RDS. Amazon Simple Notification Service (Amazon SNS), and Amazon Simple Queue Service (Amazon SOS) across multiple AWS Regions. All company resources are tagged with a tag name of "application"

and a value that corresponds to each application. A solutions architect must provide the quickest solution for identifying all of the tagged components.

Which solution meets these requirements?

Use AWS CloudTrail to generate a list of resources with the application tag.

Use the AWS CLI to query each service across all Regions to report the tagged components.

Run a query in Amazon CloudWatch Logs Insights to report on the components with the application tag.

Run a query with the AWS Resource Groups Tag Editor to report on the resources globally with the application tag.

117. A medical records company is hosting an application on Amazon EC2 instances. The application processes customer data files that are stored on Amazon S3. The EC2 instances are hosted in public subnets. The EC2 instances access Amazon S3 over the internet, but they do not require any other network access.

A new requirement mandates that the network traffic for file transfers take a private route and not be sent over the internet.

Which change to the network architecture should a solutions architect recommend to meet this requirement"?

Create a NAT gateway. Configure the route table for the public subnets to send traffic to Amazon S3 through the NAT gateway.

Configure the security group for the EC2 instances to restrict outbound traffic so that only traffic to the S3 prefix list is permitted.

Move the EC2 instances to private subnets. Create a VPC endpoint for Amazon S3, and link the endpoint to the route table for the private subnets

Remove the internet gateway from the VP

Set up an AWS Direct Connect connection, and route traffic to Amazon S3 over the Direct Connect connection.

118. A company has an internet-facing application that runs on premises. The application contains mostly user-generated content. The data is stored in an on-premises network-attached storage system. The company wants to archive this data annually and has chosen to move the archival data to Amazon S3. The company needs a solution to migrate the archival data into an S3 bucket.

Which solution will meet these requirements?

Use AWS Storage Gateway Volume Gateway. Cache the data, and then replicate the data from the on-premises environment to Amazon S3.

Use AWS DataSync. Create a configuration to replicate the data from the on-premises environment to Amazon S3.

Use AWS Transfer Family. Use an SFTP client to serially transfer the data from the on-premises environment to Amazon S3.

Use Amazon S3 Transfer Acceleration. Use a third-party backup utility to replicate the data from the on-premises environment to Amazon S3.

119. A company hosls historical weather records in Amazon S3. The records are downloaded from the company's website by way of a URL that resolves to a domain name Users all over the world access this content through subscriptions A third-party provider hosts the company's root domain name, but the company recently migrated some of its services to Amazon Route 53. The company wants to consolidate contracts, reduce latency for users, and reduce costs related to serving the application to subscribers

Which solution meets these requirements?

Create a web distribution on Amazon CloudFront to serve the S3 content for the application Create a CNAME record in a Route 53 hosted zone that points to the CloudFront distribution, resolving to the application's URL domain name.

Create a web distribution on Amazon CloudFront to serve the S3 content for the application. Create an ALIAS record in the Amazon Route 53 hosted zone that points to the CloudFront distribution, resolving to the application's URL domain name.

Create an A record in a Route 53 hosted zone for the application. Create a Route 53 traffic policy for the web application, and configure a geolocation rule Configure health checks to check the health of the endpoint and route DNS queries to other endpoints if an endpoint is unhealthy.

Create an A record in a Route 53 hosted zone for the application Create a Route 53 traffic policy for the web application, and configure a geoproximity rule. Configure health checks to check the health of the endpoint and route DNS queries to other endpoints if an endpoint is unhealthy

120. A company must migrate 20 TB of data from a data centre to the AWS Cloud within 30 days. The company's network bandwidth is limited to 15 Mbps and cannot exceed 70% utilization.

What should a solutions architect do to meet these requirements?

Use AWS Snowball.

Use AWS DataSync

Use a secure VPN connection.

Use Amazon S3 Transfer Acceleration

Page 13 of 15

121. A company has no existing file share services. A new project requires access to file storage that is mountable as a drive for on-premises desktops. The file server must authenticate users to an Active Directory domain before they are able to access the storage.

Which service will allow Active Directory users to mount storage as a drive on their desktops?

Amazon S3 Glacier

AWS DataSync

AWS Snowball Edge

AWS Storage Gateway

122. A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture. The company plans to create many new AWS accounts for different business units. The company needs to authenticate access to these AWS accounts by using a centralized corporate directory service

Which combination of actions should a solutions architect recommend to meet these requirements? (Select TWO)

Create a new organization in AWS Organizations with all features turned on Create the new AWS accounts in the organization

Set up an Amazon Cognito identity pool Configure AWS Single Sign-On to accept Amazon Cognito authentication

Configure a service control policy (SCP) to manage the AWS accounts Add AWS Single Sign-On to AWS Directory Service

Create a new organization in AWS Organizations Configure the organization's authentication mechanism to use AWS Directory Service directly

Set up AWS Single Sign-On (AWS SSO) in the organization Configure AWS SSO and integrate it with the company's corporate directory service

123. A company wants its public web application to run on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application must use a publicly trusted SSL certificate.

Which solution will meet these requirements MOST cost-effectively?

Provision a public SSL/TLS certificate through AWS Certificate Manager (ACM). Configure the new certificate on the HTTPS listener for the AL

Use AWS Certificate Manager Private Certificate Authonty to issue an SSL/TLS certificate. Configure the new certificate on the HTTPS listener for the AL

Create a self-signed certificate on one of the EC2 instances in the Auto Scaling group. Export the certificate, and configure it on the HTTPS listener for the AL

Deploy an EC2-hosted certificate authority (CA). Import a trusted root certificate. Issue a new SSL/TLS certificate. Configure the new certificate on the HTTPS listener for the AL

124. A company has an application that ingests incoming messages Dozens of other applications and microservices then quickly consume these messages. The number of messages vanes drastically and sometimes increases suddenly to 100 000 each second. The company wants to decouple the solution and increase scalability.

Which solution meets these requirements?

Persist the messages to Amazon Kinesis Data Analytics Configure the consumer applications to read and process the messages

Deploy the ingestion application on Amazon EC2 instances m an Auto Scaling group to scale the number of EC2 instances based on CPU metrics

Write the messages to Amazon Kinesis Data Streams with a single shard Use an AWS Lambda function to preprocess messages and store them in Amazon DynamoDB Configure the consumer applications to read from DynamoDB to process the messages

Publish the messages to an Amazon Simple Notification Service (Amazon SNS) topic with multiple Amazon Simple Queue Service (Amazon SQS) subscriptions Configure the consumer applications to process the messages from the queues

125. A company wants to track its daily AWS resource usage to avoid reaching service quotas unexpectedly. The company needs to receive notifications when any service quota is exceeded

Which combination of actions should a solutions architect take to meet this requirement? (Select TWO.)

Configure Amazon Simple Notification Service (Amazon SNS) as the target to send notifications

Use the DescribeTrustedAdvisorChecks API operation to get AWS Trusted Advisor Service Limits checks every 24 hours

Create an AWS Lambda function that runs every 24 hours and refreshes the AWS Trusted Advisor Service Limits checks

Use AWS Config to monitor the AWS resources service quotas and create a periodic invocation for an AWS Lambda function.

Use Amazon EventBridge (Amazon CloudWatch Events) to capture the events. Configure Amazon Simple Notification Service (Amazon SNS) as the target

126. A law firm needs to share information with the public. The information includes hundreds of files that must be publicly readable. Modifications or deletions of the files by anyone before a designated future date are prohibited.

Which solution will meet these requirements in the MOST secure way?

Upload all tiles to an Amazon S3 bucket that is configured for static website hosting. Grant read-only IAM permissions to any AWS principals that access the S3 bucket until the designated date.

Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated dale. Configure the S3 bucket for static website hosting Set an S3 bucket policy to allow read-only access to the objects.

Create a new Amazon S3 bucket with S3 Versioning enabled Configure an event trigger to run an AWS Lambda function in case of object modification or deletion Configure the Lambda function to replace the objects with the original versions from a private S3 bucket

Upload all files to an Amazon S3 bucket that is configured for static website hosing. Select the folder that contains the files. Use S3 Object Lock with a retention period m accordance with the designated date Grant read-only IAM permissions to any AWS principals that access the S3 bucket

127. A company runs an internal browser-based application. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins although it runs well by mid-morning.

How should the scaling be changed to address the staff complaints and keep costs to a minimum'?

Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens

Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.

Implement a target tracking action triggered at a lower CPU threshold, and decrease the cooldown period.

Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens

128. A company is running an ASP.NET MVC application on a single Amazon EC2 instance. A recent increase in application traffic is causing slow response times for users during lunch hours. The company needs to resolve this concern with the least amount of configuration.

What should a solutions architect recommend to meet these requirements?

Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling and time-based scaling to handle scaling during lunch hours

Move the application to Amazon Elastic Container Service (Amazon ECS) Create an AWS Lambda function to handle scaling during lunch hours.

Move the application to Amazon Elastic Container Service (Amazon ECS). Configure scheduled scaling for AWS Application Auto Scaling during lunch hours.

Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling, and create an AWS Lambda function to handle scaling during lunch hours.

129. A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies.

How should a solution architect address this issue?

Create an Amazon SNS topic to send an alert every time a developer create a new policy.

Use service control policies to disable IAM across all account in the organizational unit.

Prevent the developers from attaching any policies and duties to the security option team.

Set an IAM permission boundary on the developer IAM role that explicitly dries of attaching the administrator policy

130. A company is running a mission-critical application on Amazon EC2 instances henna an Application Load Balancer. The instances run in an Auto Scaling group in a single AWS Region. The application is using a database in Ama2on Aurora as the data tier. A recent audit revealed that the current deployment of Aurora is not highly available.

What should a solutions architect do to improve the availability of the database

Configure an Aurora Replica

Configure storage replication.

Configure storage auto scaling.

Configure cross-Region replication

Page 14 of 15

131. A solutions architect is designing a new hybrid architecture to extend a company s on-

premises infrastructure to AWS. The company requires a highly available connection with consistent low latency to an AWS Region. The company needs to minimize costs and is willing to accept slower traffic if the primary connection fails

What should the solutions architect do to meet these requirements?

Provision an AWS Direct Connect connection to a Region Provision a VPN connection as a backup if the primary Direct Connect connection fails.

Provision a VPN tunnel connection to a Region for private connectivity. Provision a second VPN tunnel for private connectivity and as a backup if the primary VPN connection fails

Provision an AWS Direct Connect connection to a Region Provision a second Direct Connect connection to the same Region as a backup if the primary Direct Connect connection fails.

Provision an AWS Direct Connect connection to a Region Use the Direct Connect failover attribute from the AWS CLI to automatically create a backup connection if the primary Direct Connect connection fails.

132. A company wants to improve the availability and performance of its hybrid application. The application consists of a stateful TCP-based workload hosted on Amazon EC2 instances in different AWS Regions and a stateless UDP-based workload hosted on premises.

Which combination of actions should a solutions architect take to improve availability and performance? (Select TWO.)

Create an accelerator using AWS Global Accelerator. Add the load balancers as endpoints.

Create an Amazon CloudFront distribution with an origin that uses Amazon Route 53 latency-based routing to route requests to the load balancers.

Configure two Application Load Balancers in each Region. The first will route to the EC2 endpoints, and the second will route to the on-premises endpoints.

Configure a Network Load Balancer in each Region to address the EC2 endpoints. Configure a Network Load Balancer in each Region that routes to the on-premises endpoints.

Configure a Network Load Balancer in each Region to address the EC2 endpoints. Configure an Application Load Balancer in each Region that routes to the on-premises endpoints.

133. A company is building ils web application by using contains on AWS. The company requires three instances of the web application to run at all times. The application must be highly available and must be able to scale to meet increases In demand

Which solution meets these requirements?

Use the AWS Fargate launch type to create an Amazon Elastic Contain« Service (Amazon ECS) dust« Create a task definition for the web application Create an ECS service that ha6 a desired count of three tasks.

Use the Amazon EC2 launch type to create an Amazon Elastic Contain« Service (Amazon ECS) cluster that has three container Instances in one Availability Zone Create a task definition for the web application Place one task for each container instance.

Use the AWS Fargate launch type to create an Amazon Elastic Contain« Service (Amazon ECS) cluster that has three container instances in three different Availability Zones Create a task definition for the web application Create an ECS service that has a desired count of three tasks

Use the Amazon EC2 launch type to create an Amazon Elastic Contain« Service (Amazon ECS) duster that has one container instance in two different Availability Zones. Ceate definition for the web application Place two tasks on one container instance Place one task on the remaining container instance

134. A large international university has deployed all of its compute services in the AWS Cloud. These services include Amazon EC2. Amazon RDS. and Amazon DynamoDB. The university currently relies on many custom scripts to back up its infrastructure. However, the university wants to centralize management and automate data backups as much as possible by using AWS native options.

Which solution will meet these requirements?

Use third-party backup software with an AWS Storage Gateway tape gateway virtual tape library.

Use AWS Backup to configure and monitor all backups for the services in use.

Use AWS Config to set lifecycle management to take snapshots of all data sources on a schedule.

Use AWS Systems Manager State Manager to manage the configuration and monitoring of backup tasks.

135. A company has thousands of edge devices that collectively generate 1 TB of status averts each day Each alert s approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis

The company wants a highly available solution However the company needs to minimize costs and does not want to manage additional infrastructure Additionally, the company

wants to keep 14 days of data available for immediate analysis and archive any data older than 14 days

What is the MOST operationally efficient solution that meets these requirements^

Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts Create a script on the EC2 instances that will store tne alerts m an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon Elasticsearch Service (Amazon ES) duster Set up the Amazon ES cluster to take manual snapshots every day and delete data from the duster that is older than 14 days

Create an Amazon Simple Queue Service (Amazon SQS i standard queue to ingest the alerts and set the message retention period to 14 days Configure consumers to poll the SQS queue check the age of the message and analyze the message data as needed If the message is 14 days old the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue

136. A solutions architect finds that an Amazon Aurora cluster with On-Demand Instance pricing is being underutilized for a blog application. The application is used only for a few minutes several times each day for reads

What should a solutions architect do to optimize utilization MOST cost-effectively?

Enable Auto Scaling on the original Aurora database

Convert the original Aurora database to Aurora parallel query

Convert the original Aurora database to an Aurora global database

Convert the original Aurora database to Amazon Aurora Serverless

137. A company is migrating a large, mission-critical database to AWS. A solutions architect has decided to use an Amazon RDS for MySQL Multi-AZ DB instance that Is deployed with 80,000 Provisioned IOPS for storage. The solutions architect is using AWS Database Migration Service (AWS DMS) to perform the data migration. The migration is taking longer than expected, and the company wants to speed up the process. The company's network team has ruled out bandwidth as a limiting factor.

Which actions should the solutions architect take to speed up the migration? (Select TWO.)

Disable Multi-AZ on the target DB instance.

Create a new DMS instance that has a larger instance size.

Turn off logging on the target DB instance until the initial load is complete.

Restart the DMS task on a new DMS instance with transfer acceleration enabled.

Change the storage type on the target DB instance to Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp2).

138. A company collects 10 GB of telemetry data dairy from various machines. The company stores the data in an Amazon S3 bucket in a source data account.

The company has hired several consuming agencies to use this data for analysis. Each agency needs read access to the data for its analysis. The company must share the data from tie source data account by choosing a solution that maximizes security and operational efficiency.

Which solution will meet these requirements?

Configure S3 global tables to replicate data tor each agency

Make the S3 bucket public for a limited time Inform only the agencies

Configure cross-account access for the S3 bucket to the accounts that the agencies own.

Set up an IAM user for each analyst In the source data account Grant each user access to the S3 bucket

139. An application runs on Amazon EC2 instances across multiple Availability Zones. The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer. The application performs best when the CPU utilization of the EC2 instances is at or near 40%.

What should a solutions architect do to maintain the desired performance across all instances in the group?

Use a simple scaling policy to dynamically scale the Auto Scaling group

Use a target tracking policy to dynamically scale the Auto Scaling group

Use an AWS Lambda function to update the desired Auto Scaling group capacity.

Use scheduled scaling actions to scale up and scale down the Auto Scaling group

140. A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code. The database credentials needs to be removed from the Lambda source code. The credentials must then be securely stored and rotated on a on-going basis to meet security policy requirements.

What should a solutions architect recommend meet these requirements?

Store the password in AWS CloudHS

Associate the Lambda function with a role that can review the password from CloudHSM given key I

Store the password in AWS Secrets Manager. A associate the Lambda function with a role that can retrieve the password from secrets Manager given its secret I

Move the database password to an environment variable associate the Lambda function Retrieve the password from the environment variable upon execution.

Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key I

Page 15 of 15

141. A company has deployed a multiplayer game for mobile devices. The game requires live location tracking of players based on latitude and longitude. The data store for the game must support rapid updates and retrieval of locations.

The game uses an Amazon RDS for PostgreSQL DB instance with read replicas to store the location data. During peak usage periods, the database is unable to maintain the performance that is needed for reading and writing updates. The game's user base is increasing rapidly.

What should a solutions architect do to improve the performance of the data tier?

Take a snapshot of the existing DB instance. Restore the snapshot with Multi-AZ enabled.

Migrate from Amazon RDS to Amazon Elasticsearch Service (Amazon ES) with Kibana.

Deploy Amazon DynamoDB Accelerator (DAX) in front of the existing DB instance. Modify the game to use DA

Deploy an Amazon ElastiCache for Redis cluster in front of the existing DB instance. Modify the game to use Redis.

142. A company is hosting a web application from an Amazon S3 bucket. The application uses Amazon Cognito as an identity provider lo authenticate users and return a JSON Web Token (JWT) that provides access to protected resources that am restored in another S3 bucket.

Upon deployment of the application, users report errors and are unable to access the protected content. A solutions architect must resolve this issue by providing proper permissions so that users can access the protected content.

Which solution meets these requirements?

Update the Amazon Cognito identity pool to assume the proper IAM role for access to the protected consent.

Update the S3 ACL to allow the application to access the protected content

Redeploy the application to Amazon 33 to prevent eventually consistent reads m the S3 bucket from affecting the ability of users to access the protected content.

Update the Amazon Cognito pool to use custom attribute mappings within tie Identity pool and grant users the proper permissions to access the protected content

143. A company has a highly dynamic batch processing job that uses many Amazon EC2 instances to complete it. The job is stateless in nature, can be started and stopped at any given time with no negative impact, and typically takes upwards of 60 minutes total to complete. The company has asked a solutions architect to design a scalable and cost-effective solution that meets the requirements of the job.

What should the solutions architect recommend?

Implement EC2 Spot Instances

Purchase EC2 Reserved Instances

Implement EC2 On-Demand Instances

Implement the processing on AWS Lambda

144. A company stores project information in a shared spreadsheet. The company wants to create a web application to replace the spreadsheet. The company has chosen Amazon DynamoDB to store the spreadsheet's data and is designing the web application to display the project information that is obtained from DynamoDB.

A solutions architect must design the web application's backend by using managed services that require minimal operational maintenance.

Which architectures meet these requirements? (Select TWO.)

An Amazon API Gateway REST API accesses the project information that is in DynamoD

An Elastic Load Balancer forwards requests to a target group with DynamoDB set up as the target.

An Amazon API Gateway REST API invokes an AWS Lambda function. The Lambda function accesses DynamoD

An Amazon Route 53 hosted zone routes requests to an AWS Lambda endpoint to invoke a Lambda function that accesses DynamoD

An Elastic Load Balancer forwards requests to a target group of Amazon EC2 instances. The EC2 instances run an application that accesses DynamoD

145. A company is using AWS to design a web application that will process insurance quotes Users will request quotes from the application Quotes must be separated by quote type, must be responded to within 24 hours, and must not get lost. The solution must maximize operational efficiency and must minimize maintenance.

Which solution meets these requirements?

Create multiple Amazon Kinesis data streams based on the quote type Configure the web application to send messages to the proper data stream Configure each backend group of application servers to use the Kinesis Client Library (KCL) to pool messages from its own data stream

Create an AWS Lambda function and an Amazon Simple Notification Service (Amazon SNS) topic for each quote type Subscribe the Lambda function to its associated SNS topic Configure the application to publish requests tot quotes to the appropriate SNS topic

Create a single Amazon Simple Notification Service (Amazon SNS) topic Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type Configure each backend application server to use its own SQS queue

Create multiple Amazon Kinesis Data Firehose delivery streams based on the quote type to deliver data streams to an Amazon Elasucsearch Service (Amazon ES) cluster Configure the application to send messages to the proper delivery stream Configure each backend group of application servers to search for the messages from Amazon ES and process them accordingly

146. A company is running a two-tier ecommerce website using AWS services. The current architecture uses a public-facing Elastic Load Balancer that sends traffic to Amazon EC2 instances in a prrvate subnet. The static content is hosted on EC2 instances and the dynamic content is retneved from a MySQL database. The application is running in the United States. The company recently started selling to users in Europe and Australia. A solutions architect needs to design a solution so their international users have an improved browsing experience

Which solution is MOST cost-effective?

Host the entire website on Amazon S3.

Use Amazon CloudFront and Amazon S3 to host static images

Increase the number of public load balancers and EC2 instances

Deploy the two-tier website in AWS Regions in Europe and Australia.

147. A company has two VPCs that are located in the us-west-2 Region within the same AWS account. The company needs to allow network traffic between these VPCs. Approximately 500 GB of data transfer will occur between the VPCs each month.

What is the MOST cost-effective solution to connect these VPCs'?'

Implement AWS Transit Gateway to connect the VPCs Update the route tables of each VPC to use the transit gateway for inter-VPC communication

Implement an AWS Site-to-Stte VPN tunnel between the VPCs. Update the route tables of each VPC to use the VPN tunnel for inter-VPC communication

Set up a VPC peering connection between the VPCs. Update the route tables of each VPC to use the VPC peering connection for inter-VPC communication.

Set up a 1 GB AWS Direct Connect connection between the VPCs. Update the route tables of each VPC to use the Direct Connect connection for inter-VPC communication.

148. A company is upgrading its critical web-based application. The application is hosted on Amazon EC2 instances that are part of an Auto Scaling group behind an Application Load Balancer (ALB). The company wants to test the new configurations with a specific amount of traffic before the company begins to route all traffic to the upgraded application.

How should a solutions architect design the architecture to meet these requirements?

Create a new launch template. Associate the new launch template with the Auto Scaling group. Attach the Auto Scaling group to the AL

Distribute traffic by using redirect rules.

Create a new launch template. Create an additional Auto Scaling group. Associate the new launch template with the additional Auto Scaling group. Attach the additional Auto Scaling group to the AL

Distribute traffic by using weighted target groups.

Create a new launch template. Create an additional Auto Scaling group. Associate the new launch template with the additional Auto Scaling group. Create an additional AL

Attach the additional Auto Scaling group to the additional AL

Use an Amazon Route 53 failover routing policy to route traffic.

Create a new launch template. Create an additional Auto Scaling group. Associate the new launch template with the additional Auto Scaling group. Create an additional AL

Attach the additional Auto Scaling group to the additional AL

Use an Amazon Route 53 weighted routing policy to route traffic.

149. Application developers have noticed that a production application is very slow when business reporting users run large production reports against the Amazon RDS instance backing the application. The CPU and memory utilization metrics for the RDS instance do not exceed 60% while the reporting queries are running. The business reporting users must be able to generate reports without affecting the application's performance.

Which action will accomplish this?

Increase the size of the RDS instance

Create a read replica and connect the application to it

Enable multiple Availability Zones on the RDS instance

Create a read replica and connect the business reports to it

New Updated AWS SAA-C02 Exam Material in November

New Updated AWS SAA-C02 Exam Material in November

Share this post

Leave a Reply Cancel reply

Related Posts