SAA-C02 AWS Certified Solutions Architect-Associate Free Dumps

dumps2021-12-20T09:17:03+08:00

AWS Certfified Solutions Architect-Associate SAA-C02 exam is for anyone with one or more years of hands-on experience designing available, cost-efficient, fault-tolerant, and scalable distributed systems on AWS. There are 65 questions in real AWS certification SAA-C02 exam, and you have 130 minutes to complete all the questions. SAA-C02 exam cost is $150. The exam languages are English, French, German, and so on. Free AWS Certified SAA-C02 exam dumps are available below.

Page 1 of 13

1. A company hosts an application on AWS. The application interacts with an Amazon DynamoDB table that has 10 read capacity units (RCUs) Data from Amazon CloudWatch alarms shows that throttling is occurring on read requests to the DynamoDB table. The company needs to prevent this issue from happening in the future as the application continues to grow.

What should a solutions architect recommend to meet these requirements?

Add an Elastic Load Balancer in front of the DynamoDB table.

Change the RCUs for the DynamoDB table to 20.

Provision 20 write capacity units (WCUs) for the DynamoDB table to offset the throttling on read requests.

Enable auto scaling for the DynamoDB table

2. A medical records company is hosting an application on Amazon EC2 instances. The application processes customer data files that are stored on Amazon S3. The EC2 instances are hosted in public subnets. The EC2 instances access Amazon S3 over the internet, but they do not require any other network access.

A new requirement mandates that the network traffic for file transfers take a private route and not be sent over the internet.

Which change to the network architecture should a solutions architect recommend to meet this requirement"?

Create a NAT gateway. Configure the route table for the public subnets to send traffic to Amazon S3 through the NAT gateway.

Configure the security group for the EC2 instances to restrict outbound traffic so that only traffic to the S3 prefix list is permitted.

Move the EC2 instances to private subnets. Create a VPC endpoint for Amazon S3, and link the endpoint to the route table for the private subnets

Remove the internet gateway from the VP

Set up an AWS Direct Connect connection, and route traffic to Amazon S3 over the Direct Connect connection.

3. A solutions architect must provide a fully managed replacement for an on-premises solution that allows employees and partners to exchange files. The solution must be easily accessible to employees connecting from on-premises systems, remote employees, and external partners

Which solution meets these requirements?

Use AWS Transfer for SFTP to transfer files into and out of Amazon S3.

Use AWS Snowball Edge for local storage and large-scale data transfers

Use Amazon FSx to store and transfer files to make them available remotely.

Use AWS Storage Gateway to create a volume gateway to store and transfer files to Amazon S3

4. A solutions architect is planning the deployment of a new static website. The solution must minimize costs and provide at least 99% availability

Which solution meets these requirements?

Deploy the application to an Amazon S3 bucket in one AWS Region that has versioning disabled

Deploy the application to Amazon EC2 instances that run in two AWS Regions and two Availability Zones

Deploy the application to an Amazon S3 bucket that has versioning and cross-Region replication enabled

Deploy the application to an Amazon EC2 instance that runs in one AWS Region and one Availability Zone.

5. A company is preparing to deploy a data lake on AWS A solutions architect must define the encryption strategy for data at rest in Amazon S3.

The company's security policy states

• Keys must be rotated every 90 days

• Strict separation of duties between key users and key administrators must be implemented

• Auditing key usage must be possible

What should the solutions architect recommend?

Server-side encryption with AWS KMS managed keys (SSE-KMS) with customer managed customer master keys (CMKs)

Server-side encryption with AWS KMS managed keys (SSE-KMS) with AWS managed customer master keys (CMKs)

Server-side encryption with Amazon S3 managed keys (SSE-S3) with customer managed customer master keys (CMKs)

Server-side encryption with Amazon S3 managed keys (SSE-S3) with AWS managed customer master keys (CMKs)

6. A company runs an application on an Amazon EC2 instances backed by Amazon Elastic Block Store (Amazon EBS). The instances needs to be available for 12 hours daily. The company wants to save costs by making the instance outside the window required for the application. However, the contents of the memory must be preserved whenever the instance is unavailable.

What should a solutions architect do lo meet this requirement?

Stop the instance outside the application's availability window Start up the instance again when required

Hibernate the instance outside the application's availability window Start up the instance again when required

Use Auto Scaling to scale down the instance outside the application's availability window Scale up the instance when required.

Terminate the instance outside the application's availability window Launch the instance by using a preconfigured Amazon Machine Image (AMI) when required

7. A company hosts its static website content from an Amazon S3 bucket in the us-east-1 Region Content is made available through an Amazon CloudFront origin pointing to that bucket Cross-Region replication is set up to create a second copy of the bucket in the ap-southeast-1 Region Management wants a solution that provides greater availability for the website

Which combination of actions should a solutions architect take to increase availability'? (Select TWO.

Add both buckets to the CloudFront origin

Configure failover routing in Amazon Route 53

Create a record in Amazon Route 53 pointing to the replica bucket

Create an additional CloudFront origin pointing to the ap-southeast-1 bucket

Set up a CloudFront origin group with the us-east-1 bucket as the primary and the ap-southeast-1 bucket as the secondary

8. A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies.

How should a solution architect address this issue?

Create an Amazon SNS topic to send an alert every time a developer create a new policy.

Use service control policies to disable IAM across all account in the organizational unit.

Prevent the developers from attaching any policies and duties to the security option team.

Set an IAM permission boundary on the developer IAM role that explicitly dries of attaching the administrator policy

9. A company wants to build a scalable key management Infrastructure to support developers who need to encrypt data in their applications.

What should a solutions architect do to reduce the operational burden?

Use multifactor authentication (MFA) to protect the encryption keys.

Use AWS Key Management Service (AWS KMS) to protect the encryption keys

Use AWS Certificate Manager (ACM) to create, store, and assign the encryption keys

Use an IAM policy to limit the scope of users who have access permissions to protect the encryption keys

10. A company is running a photo hosting service in the us-east-1 Region. The service enables users across multiple countries to upload and view photos. Some photos are heavily viewed tor months, and others are viewed for less than a week. The application allows uploads of up to 20 MB for each photo. The service uses the photo metadata to determine which photos to display to each user.

Which solution provides the appropriate user access MOST cost-effectively?

Store the photos in Amazon DynamoD

Turn on DynamoDB Accelerator (DAX) to cache frequently viewed items.

Store the photos In the Amazon S3 Intelligent-Tiering storage class. Store the photo metadata and its S3 location in DynamoD

Store the photos in the Amazon S3 Standard storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Use the object tags to keep track of metadata.

Store the photos in the Amazon S3 Glacier storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Glacier Deep Archive storage class. Store the photo metadata and its S3 location in Amazon Elasticsearch Service (Amazon ES).

Page 2 of 13

11. A company has an Amazon S3 bucket that contains mission-critical data. The company wants to ensure this data is protected from accidental deletion. The data should still be accessible, and a user should be able to delete the data internationally.

Which combination of steps should a solutions architect take to accomplish this? (Select TWO.)

Enable versioning on the S3 bucket.

Enable MFA Delete on the S3 bucket.

Create a bucket policy on the S3 bucket

Enable default encryption on the S3 bucket.

Create a lifecycle policy for the objects in the S3 bucket.

12. A solutions architect is deploying a distributed database on multiple Amazon EC2 instances. The database stores all data on multiple instances so it can withstand the loss of an instance. The database requires block storage with latency and throughput to support several million transactions per second per server.

Which storage solution should the solutions architect use?

Amazon EBS

Amazon EC2 instance store

Amazon EFS

Amazon S3

13. A media streaming company collects real-time data and stores it in a disk-optimized database system. The company is not getting the expected throughput and wants an m-memory database storage solution that performs faster and provides high availability using data replication.

Which database should a solutions architect recommend?

Amazon RDS for MySQL

Amazon RDS for PostgreSQL

Amazon ElastiCache for Redis

Amazon ElastiCache for Memcached

14. A company has developed a new content-sharing application that runs on Amazon Elastic Container Service (Amazon ECS). The application runs on Amazon Linux Docker tasks that use the Amazon EC2 launch type.

The application requires a storage solution that has the following characteristics:

• Accessibility (or multiple ECS tasks through bind mounts

• Resiliency across Availability Zones

• Burslable throughput of up to 3 Gbps

• Ability to be scaled up over time

Which storage solution meets these requirements?

Launch an Amazon FSx for Windows File Server Multi-AZ instance. Configure the ECS task definitions to mount the Amazon FSx instance volume at launch.

Launch an Amazon Elastic File System (Amazon EFS) instance. Configure the ECS task definitions to mount the EFS Instance volume at launch.

Create a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume with Multi-Attach set to enabled. Attach the EBS volume to the ECS EC2 instance Configure ECS task definitions to mount the EBS instance volume at launch.

Launch an EC2 instance with several Provisioned IOPS SSD (k>2) Amazon Elastic Block Store (Amazon EBS) volumes attached m a RAID 0 configuration. Configure the EC2 instance as an NFS storage server. Configure ECS task definitions to mount the volumes at launch.

15. A company wants to use an AWS Region as a disaster recovery location for its on-premises infrastructure. The company has 10 TB of existing data and the on-premises data center has a 1Gbps internet connection A solution architect must find a solution so the company can have its existing data on AWS in 72 hours without transmitting it using an unencrypted channel.

Which solution should the solutions architect select?

Send the initial 10 TB of data to AWS using FT

Send the initial 10 TB of data lo AWS using AWS Snowball.

Establish a VPN connection between Amazon VPC and the company's data center

Establish an AWS Direct Connect connection between Amazon VPC and the company's data canter

16. A company has enabled AWS CloudTrail logs to deliver log files to an Amazon S3 bucket for each of its developer accounts. The company has created a central AWS account for streamlining management and audit reviews. An internal auditor needs to access the CloudTrail logs yet access needs to be restricted for all developer account users. The solution must be secure and optimized

How should a solutions architect meet these requirements?

Configure an AWS Lambda function m each developer account to copy the log files to the central account Create an 1AM role in the central account for the auditor Attach an 1AM policy providing read-only permissions to the bucket

Configure CloudTrail from each developer account to deliver the log files to an S3 bucket m the central account Create an 1AM user in the central account for the auditor Attach an 1AM policy providing full permissions to the bucket

Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account Create an 1AM role in the central account for the auditor Attach an I AM policy providing read-only permissions to the bucket

Configure an AWS Lambda function in the central account to copy the log files from the S3 bucket m each developer account Create an 1AM user m the central account for the auditor Attach an 1AM policy providing full permissions to the bucket

17. A company has a web application hosted over 10 Amazon EC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application. The networking team finds that some DNS queries return IP addresses of unhealthy instances resulting in the timeout error

What should a solutions architect implement to overcome these timeout errors?

Create a Route 53 simple routing policy record for each EC2 instance Associate a health check with each record

Create a Route 53 failover routing policy record for each EC2 instance Associate a hearth check with each record

Create an Amazon CloudFront distribution with EC2 instances as its origin Associate a health check with the EC2 instances

Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances Route to the ALB from Route 53

18. A company has designed an application where users provide small sets of textual data by calling a public API. The application runs on AWS and includes a public Amazon API Gateway API that forwards requests to an AWS Lambda function for processing. The Lambda function then writes the data to an Amazon Aurora Serverless database for consumption . The company is concerned that it could lose some user data it a Lambda function fails to process the request property or reaches a concurrency limit.

What should a solutions architect recommend to resolve this concern?

Split the existing Lambda function into two Lambda functions Configure one function to receive API Gateway requests and put relevant items into Amazon Simple Queue Service (Amazon SQS) Configure the other function to read items from Amazon SQS and save the data into Aurora

Configure the Lambda function to receive API Gateway requests and write relevant items to Amazon ElastiCache Configure ElastiCache to save the data into Aurora

Increase the memory for the Lambda function Configure Aurora to use the Multi-AZ feature

Split the existing Lambda function into two Lambda functions Configure one function to receive API Gateway requests and put relevant items into Amazon Simple Notification Service (Amazon SNS) Configure the other function to read items from Amazon SNS and save the data into Aurora

19. A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries.

Which policy should be used to meet this requirement?

Simple routing policy

Latency routing policy

Multivalue routing policy

Geolocation routing policy

20. A company is automating an order management application. The company's development team has decided to use SFTP to transfer and store the business-critical information files. The files must be encrypted and must be highly available. The files also must be automatically deleted a month after they are created.

Which solution meets these requirements with the LEAST operational overhead?

Configure an Amazon S3 bucket with encryption enabled. Use AWS transfer for SFTP to securely transfer the files to the S3 bucket Apply an AWS Transfer for SFTP file retention policy to delete the files after a month

Install an SFTP service on an Amazon EC2 instance Mount an Amazon Elastic File System (Amazon EFS) file share on the EC2 instance. Enable cron to delete the files after a month

Configure an Amazon Elastic File System (Amazon EFS) file system with encryption enabled. Use AWS Transfer for SFTP to securely transfer the files to the EFS file system. Apply an EFS lifecycle policy to automatically delete the files after a month.

Configure an Amazon S3 bucket with encryption enabled. Use AWS Transfer for SFTP to securely transfer the files to the S3 bucket. Apply S3 Lifecycle rules to automatically delete the files after a month.

Page 3 of 13

21. An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table.

What is me MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?

Use a VPC endpoint for DynamoDB

Use a NAT gateway in a public subnet

Use a NAT instance in a private subnet

Use the internet gateway attached to the VPC

22. A company's website is used to sell products to the public. The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) There is also an Amazon CloudFront distribution and AWS WAF Is being used to protect against SQL injection attacks. The ALB is the origin for the CloudFront distribution A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website

What should a solutions architect do to protect the application?

Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address

Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address

Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the malicious IP address

Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the malicious IP address

23. A company observes an increase in Amazon EC2 costs in its most recent bill. The billing team notices unwanted vertical scaling of instance types for a couple of EC2 instances A solutions architect needs to create a graph comparing the last 2 months of EC2 costs and perform an in-depth analysis to identify the root cause of the vertical scaling

How should the solutions architect generate the information with the LEAST operational overhead?

Use AWS Budgets to create a budget report and compare EC2 costs based on instance types

Use Cost Explorer's granular filtering feature to perform an in-depth analysis of EC2 costs based on instance types

Use graphs from the AWS Billing and Cost Management dashboard to compare EC2 costs based on instance types for the last 2 months

Use AWS Cost and Usage Reports to create a report and send it to an Amazon S3 bucket Use Amazon QuickSight with Amazon S3 as a source to generate an interactive graph based on instance types.

24. A social media company is building a feature tor its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users.

Which solution meets these requirements with the MOST scalability?

Upload files from the user's browser to the application servers Transfer the files to an Amazon S3 bucket.

Provision an AWS Storage Gateway file gateway. Upload files directly from the user's browser to the file gateway.

Generate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket

Provision an Amazon Elastic File System (Amazon EFS) file system. Upload files directly from the user's browser to the file system.

25. A company wants to automate the security assessment of its Amazon EC2 instances. The company needs to validate and demonstrate that it is meeting security and compliance standards throughout the development process.

What should a solutions architect do to meet these requirements?

Use Amazon Macie to automatically discover, classify and protect the EC2 instances

Use Amazon GuardDuty on the EC2 instances to publish Amazon Simple Notification Service (Amazon SNS) notifications

Use Amazon Inspector with Amazon CloudWatch to publish Amazon Simple Notification Service (Amazon SNS) notifications

Use Amazon EventBridge (Amazon CloudWatch Events) to detect and react to changes in the status of AWS Trusted Advisor checks

26. A development team stores its Amazon RDS MySQL DB instance user name and password credentials in a configuration file. The configuration file is stored as plaintext on the root device volume of the team's Amazon EC2 instance When the team's application needs to reach the database it reads the file and loads the credentials into the code. The team has modified the permissions of the configuration file so that only the application can read its content A solutions architect must design a more secure solution

What should the solutions architect do to meet this requirement1?

Store the configuration file in Amazon S3 Grant the application access to read the configuration file

Create an 1AM role with permission to access the database Attach this 1AM role to the EC2 instance

Enable SSL connections on the database instance Alter the database user to require SSL when logging in.

Move the configuration file to an EC2 instance store, and create an Amazon Machine Image (AMI) of the instance. Launch new instances from this AMI

27. A solutions architect is designing a multi-Region disaster recovery solution (or an application that will provide public API access. The application will use Amazon EC2 instances with a userdata script to load application code and an Amazon RDS for MySQL database. The Recovery Time Objective (RTO) is 3 hours and the Recovery Point Objective (RPO) is 24 hours

Which architecture would meet these requirements at the LOWEST cost/?

Use an Application Load Balancer for Region failover Deploy new EC2 instances with the userdata script Deploy separate RDS instances in each Region

Use Amazon Route 53 for Region failover Deploy new EC2 instances with the userdata script Create a read replica of the RDS instance in a backup Region

Use Amazon API Gateway tor the public APIs and Region failover Deploy new EC2 instances with the userdata script Create a MySQL read replica of the RDS instance in a backup Region

Use Amazon Route 53 for Region failover Deploy new EC2 instances with the userdata script for APIs, and create a snapshot of the RDS instance daily for a backup Replicate the snapshot to a backup Region

28. An application allows users at a company's headquarters to access product data. The product data is stored in an Amazon RDS MySQL DB instance. The operations team has isolated an application performance slowdown and wants to separate read traffic from write traffic A solutions architect needs to optimize the application's performance quickly

What should the solutions architect recommend?

Change the existing database to a Multi-AZ deployment Serve the read requests from the primary Availability Zone

Change the existing database to a Multi-AZ deployment. Serve the read requests from the secondary Availability Zone

Create read replicas for the database Configure the read replicas with half of the compute and storage resources as the source database

Create read replicas for the database Configure the read replicas with the same compute and storage resources as the source database

29. A company recently deployed a new auditing system to centralize information about operating system versions patching and installed software for Amazon EC2 instances. A solutions architect must ensure all instances provisioned through EC2 Auto Scaling groups successfully send reports to the auditing system as soon as they are launched and terminated

Which solution achieves these goals MOST efficiently?

Use a scheduled AWS Lambda function and run a script remotely on all EC2 instances to send data to the audit system.

Use EC2 Auto Scaling lifecycle hooks to run a custom script to send data to the audit system when instances are launched and terminated

Use an EC2 Auto Scaling launch configuration to run a custom script through user data to send data to the audit system when instances are launched and terminated

Run a custom script on the instance operating system to send data to the audit system Configure the script to be invoked by the EC2 Auto Scaling group when the instance starts and is terminated

30. A company runs a static website through its on-premises data center. The company has multiple servers that handle all of its traffic, but on busy days, services are interrupted and the website becomes unavailable. The company wants to expand its presence globally and plans to triple its website traffic.

What should a solutions architect recommend to meet these requirements?

Migrate the website content to Amazon S3 and host the website on Amazon CloudFront.

Migrate the website content to Amazon EC2 instances with public Elastic IP addresses in multiple AWS Regions.

Migrate the website content to Amazon EC2 instances and vertically scale as the load increases.

Use Amazon Route 53 to distribute the loads across multiple Amazon CloudFront distributions for each AWS Region that exists globally.

Page 4 of 13

31. A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources. The data is in JSON format and Ingestion rates can be as high as 1 MB/s. When an EC2 instance is rebooted, the data in-flight is lost. The company's data science team wants to query Ingested data In near-real time.

Which solution provides near-real -time data querying that is scalable with minimal data loss?

Publish data to Amazon Kinesis Data Streams Use Kinesis data Analytics to query the data.

Publish data to Amazon Kinesis Data Firehose with Amazon Redshift as the destination Use Amazon Redshift to query the data

Store ingested data m an EC2 Instance store Publish data to Amazon Kinesis Data Firehose with Amazon S3 as the destination. Use Amazon Athena to query the data.

Store ingested data m an Amazon Elastic Block Store (Amazon EBS) volume Publish data to Amazon ElastiCache tor Red Subscribe to the Redis channel to query the data

32. A solutions architect needs to design a network that will allow multiple Amazon EC2 instances to access a common data source used for mission-critical data that can be accessed by all the EC2 instances simultaneously. The solution must be highly scalable, easy to implement, and support the NFS protocol

Which solution meets these requirements?

Create an Amazon EFS file system Configure a mount target in each Availability Zone. Attach each instance to the appropriate mount target

Create an additional EC2 instance and configure it as a file server Create a security group that allows communication between the instances and apply that to the additional instance.

Create an Amazon S3 bucket with the appropriate permissions Create a role in AWS IAM that grants the correct permissions to the S3 bucket. Attach the role to the EC2 instances that need access to the data

Create an Amazon EBS volume with the appropriate permissions. Create a role in AWS IAM that grants the correct permissions to the EBS volume. Attach the role to the EC2 instances that need access to the data.

33. Some of the company’s customers are retrieving records frequently, leading to an increase in costs for the company. The company wants to limit retrieved requests in the future. The company also wants to ensure that if one customer reaches its retrieval limit other customers will not affected.

Which solution will meet these requirements?

Set up server-side throttling limits for API Gateway.

Limit DynamoDB read throughput on the table lo an amount that results m the maximum cost that the company is willing to incur.

Set up a usage plan for API Gateway Implement throttling limits tor each customer. and distribute API keys to each customer

Set up AWS Budgets. Monitor the usage of API Gateway and DynamoDB Configure an alarm to provide an alert when the cost exceeds a certain threshold each month

34. A company hosts an application used to upload files to an Amazon S3 bucket Once uploaded, the files are processed to extract metadata which takes less than 5 seconds. The volume and frequency of the uploads vanes from a few files each hour to hundreds of concurrent uploads. The company has asked a solutions architect to design a cost-effective architecture that will meet these requirements.

What should the solutions architect recommend?

Configure AWS CloudTrail trails to log S3 API calls Use AWS AppSync to process the files

Configure an object-created event notification within the S3 bucket to invoke an AWS Lambda function to process the files

Configure Amazon Kinesis Data Streams to process and send data to Amazon S3 Invoke an AWS Lambda function to process the files

Configure an Amazon Simple Notification Service (Amazon SNS) topic to process the files uploaded to Amazon S3. Invoke an AWS Lambda function to process the files

35. A company wants to monitor its AWS costs for financial review. The cloud operations team is designing an architecture in the AWS Organizations management account to query AWS Cost and Usage Reports for all member accounts. The team must run this query once a month and provide a detailed analysis of the bill.

Which solution is the MOST scalable and cost-effective way to meet these requirements?

Enable Cost and Usage Reports in the management account. Deliver reports to Amazon Kinesis. Use Amazon EMR for analysis.

Enable Cost and Usage Reports in the management account. Deliver the reports to Amazon S3. Use Amazon Athena for analysis.

Enable Cost and Usage Reports for member accounts. Deliver the reports to Amazon S3. Use Amazon Redshift for analysis.

Enable Cost and Usage Reports for member accounts. Deliver the reports to Amazon Kinesis. Use Amazon QuickSight for analysis.

36. A company has applications that are deployed in multiple AWS Regions. The applications use an architecture that is based on Amazon EC2, Amazon Elastic Block Store (Amazon EBS), Amazon Elastic File System (Amazon EFS). and Amazon DynamoDB

The company lacks a mechanism for centralized data backup. A solutions architect must centralize data backup with the least possible operational effort.

What should the solutions architect do to meet these requirements?

Tag all resources by project Use AWS Systems Manager to set up snapshots by project and set DynamoDB incremental backups.

Tag all resources by project. Create backup plans in AWS Backup to back up the data by tag name according to each project's needs.

Tag all resources by project Create an AWS Lambda function to run on schedule and take snapshots of each EC2 instance. EBS volume, and EFS file system by project Configure the function to invoke DynamoDB on-demand backup.

Use AWS CloudFormation to create a template for every new project so that all resources can be recreated at any time. Set the template to take daily snapshots of each EC2 instance r EBS volume and EFS file system Set the template to use DynamoDB on- demand backup for daily backups

37. A company runs a stateless web application in production on a group of Amazon EC2 On-Demand Instances behind an Application Load Balancer. The application experiences heavy usage during an 8-hour period each business day. Application usage is moderate and steady overnight Application usage is low during weekends.

The company wants to minimize its EC2 costs without affecting the availability of the application.

Which solution will meet these requirements?

Use Spot Instances for the entire workload.

Use Reserved instances for the baseline level of usage Use Spot Instances for any additional capacity that the application needs.

Use On-Demand Instances for the baseline level of usage. Use Spot Instances for any additional capacity that the application needs

Use Dedicated Instances for the baseline level of usage. Use On-Demand Instances for any additional capacity that the application needs

38. A company is designing a new web service that will run on Amazon EC2 instances behind an Elastic Load Balancer. However many of the web service clients can only reach IP addresses whitelisted on their firewalls.

What should a solutions architect recommend to meet the clients' needs?

A Network Load Balancer with an associated Elastic IP address

An Application Load Balancer with an associated Elastic IP address.

An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address

An EC2 instance with a public IP address running as a proxy in front of the load balancer.

39. A company needs to store 160TB of data for an indefinite of time. The company must be able to use standard SQL and business intelligence tools to query all of the data. The data will be queried no more than twice each month.

What is the MOST cost-effective solution that meets these requirements?

Store the data in Amazon Aurora Serverles with MySQ

Use an SQL client to query the data.

Store the data in Amazon S3. Use AWS Glue. Amazon Athena. IDBC and COBC drivers to query the data.

Store the data in an Amazon EMR cluster with EMR File System (EMRFS) as the storage layer use Apache Presto to query the data.

Store a subnet of the data in Amazon Redshift, and store the remaining data in Amazon S3. Use Amazon Redshift Spectrum to query the S3 data.

40. A company's security policy requires that all AWS API activity in its AWS accounts be recorded for periodic auditing. The company needs to ensure that AWS CloudTrail is enabled on all of its current and future AWS accounts using AWS Organizations

Which solution is MOST secure?

At the organization's root, define and attach a service control policy (SCP) that permits enabling CloudTrail only

Create 1AM groups in the organization's management account as needed Define and attach an 1AM policy to the groups that prevents users from disabling CloudTrail

Organize accounts into organizational units (OUs) At the organization's root define and attach a service control policy (SCP) that prevents users from disabling CloudTrail

Add all existing accounts under the organization's root Define and attach a service control policy (SCP) to every account that prevents users from disabling CloudTrail

Page 5 of 13

41. A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard A solutions architect needs to design a solution that can handle large traffic spikes process the mobile game updates in order of receipt and store the processed updates in a highly available database. The company also wants to minimize the management overhead required to maintain the solution

What should the solutions architect do to meet these requirements?

Push score updates to Amazon Kinesis Data Streams Process the updates in Kinesis Data Streams with AWS Lambda Store the processed updates in Amazon DynamoDB

Push score updates to Amazon Kinesis Data Streams Process the updates with a fleet of Amazon EC2 instances set up for Auto Scaling Store the processed updates in Amazon Redshifi

Push score updates to an Amazon Simple Notification Service (Amazon SNS) topic Subscribe an AWS Lambda function to the SNS topic to process the updates Store the processed updates in a SQL database running on Amazon EC2

Push score updates to an Amazon Simple Queue Service (Amazon SQS) queue Use a fleet of Amazon EC2 instances with Auto Scaling to process the updates in the SQS queue Store the processed updates in an Amazon RDS Multi-AZ DB instance

42. A solutions architect is designing the cloud architecture for a new application being deployed on AWS. The process should run in parallel while adding and removing application nodes as needed based on the number of fobs to be processed. The processor application is stateless. The solutions architect must ensure that the application is loosely copied and the job items are durably stored

Which design should the solutions architect use?

Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch configuration that uses the AMI Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to add and remove nodes based on CPU usage

Create an Amazon SQS queue to hold the jobs that need to be processed Create an Amazon Machine image (AMI) that consists of the processor application Create a launch configuration that uses the AM' Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to add and remove nodes based on network usage

Create an Amazon SQS queue to hold the jobs that needs to be processed Create an Amazon Machine image (AMI) that consists of the processor application Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of items in the SQS queue

Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of messages published to the SNS topic

43. A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS CloudFormation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials.

Which solution meets these requirements with the LEAST operational effort?

Create a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.

Create a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store. Configure the EC2 instances to retrieve the database credentials from Parameter Store.

Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.

Configure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the 1AM user with the EC2 instances to allow applications on the instances to access the database.

44. A solution architect has configured the following IAM policy.

Which action will be allowed by the policy?

An AWS Lambda function can be deleted from any network.

An AWS Lambda function can be created from any network.

An AWS Lambda function can be deleted from the 100.220.0.0/20 network.

An AWS Lambda function can be deleted from the 220.100.16.0/20 network

45. A company plant to host a survey website on AWS. The company anticipates an unpredictable amount of traffic This traffic results m asynchronous updates to the database. The company wants to ensure mat writes to the database hosted on AWS do not gel dropped

How should the company write its application to hand to these database requests?

Configure the application to publish to an Amazon Simple Notification Service (Amazon SNS) topic Subscribe the database to the SNS topic.

Configure the application to subscribe to an Amazon Simple Notification Service (Amazon SNS) topic. Publish the database updates to the SNS topic

Use Amazon Simple Queue Service (Amazon SOS) FIFO queues to queue the database connection until the database has resources to wrist the data.

Use Amazon Simple Queue Service (Amazon SOS) FIFO queues tor capturing the writes and draining the queue as each write is made to the database.

46. A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available Users must be able to download, modify, and upload documents.

Which combination of actions should be taken to meet these requirements? (Select TWO.)

Enable a read-only bucket ACL

Enable versioning on the bucket.

Attach an IAM policy to the bucket

Enable MFA Delete on the bucket.

Encrypt the bucket using AWS KM

47. A company is building a media sharing application and decides to use Amazon S3 for storage When a media file is uploaded, the company starts a multi-step process to create thumbnails identity objects in the images transcode videos into standard formats and resolutions and extract and store the metadata to an Amazon DynamoDB table. The metadata is used for searching and navigation . The amount of traffic is variable. The solution must be able to scale to handle spikes in load without unnecessary expenses

What should a solutions architect recommend to support this workload?

Build the processing into the website or mobile app used to upload the content to Amazon S3 Save the required data to the DynamoDB table when the objects are uploaded

Trigger AWS Step Functions when an object is stored in the S3 bucket Have the Step Functions perform the steps needed to process the object and then write the metadata to the DynamoDB table

Trigger an AWS Lambda function when an object is stored in the S3 bucket Have the Lambda function start AWS Batch to perform the steps to process the object Place the object data m the DynamoDB table when complete

Trigger an AWS Lambda function to store an initial entry in the DynamoDB table when an object is uploaded to Amazon S3 Use a program running on an Amazon EC2 instance in an Auto Scaling group to poll the index for unprocessed items, and use the program to perform the processing

48. A company has recently updated its internal security standards. The company must now ensure all Amazon S3 buckets and Amazon Elastic Block Store (Amazon EBS) volumes are encrypted with keys created and periodically rotated by internal security specialists. The company is looking for a native, software-based AWS service to accomplish this goal

What should a solutions architect recommend as a solution?

Use AWS Secrets Manager with customer master keys (CMKs) to store master key material and apply a routine to create a new CMK periodically and replace it m AWS Secrets Manager

Use AWS Key Management Service (AWS KMS) with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in AWS KM

Use an AWS CloudHSM cluster with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in the CloudHSM cluster nodes

Use AWS Systems Manager Parameter Store with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in the Parameter Store

49. A company is developing an Internal application that uses a PostgreSQL database. The company has decided to host the database on Amazon Aurora. The application does not need to be highly available but data must be stored in multiple Availability Zones to maximize durability.

Which database configuration meets these requirements MOST cost-effectively?

An Aurora PostgreSQL DB cluster with a single D8 Instance

An Aurora PostgreSQL DB cluster with a primary DB instance and a read replica

An Aurora PostgreSQL DB cluster with Multi-AZ deployment enabled

An Aurora PostgreSQL global database cluster

50. A company hosts historical weather records in Amazon S3. The records are downloaded from the company's website by way of a URL that resolves to a domain name Users all over the world access this content through subscriptions. A third-party provider hosts the company's root domain name, but the company recently migrated some of its services to Amazon Route 53. The company wants to consolidate contracts, reduce latency for users, and reduce costs related to serving the application to subscribers.

Which solution meets these requirements?

Create a web distribution on Amazon CloudFront to serve the S3 content for the application Create a CNAME record in a Route 53 hosted zone that points to the CloudFront distribution, resolving to the application's URL domain name.

Create a web distribution on Amazon CloudFront to serve the S3 content for the application Create an ALIAS record in the Amazon Route 53 hosted zone that points to the CloudFront distribution, resolving to the application's URL domain name.

Create an A record in a Route 53 hosted zone for the application. Create a Route 53 traffic policy for the web application, and configure a geolocation rule. Configure health checks to check the health of the endpoint and route DNS queries to other endpoints if an endpoint is unhealthy.

Create an A record in a Route 53 hosted zone for the application. Create a Route 53 traffic policy for the web application, and configure a geoproximity rule. Configure health checks to check the health of the endpoint and route DNS queries to other endpoints if an endpoint is unhealthy

Page 6 of 13

51. A company is rebelling its data canter and wants to securely transfer 50 TB of data lo AWS *ilhm 2 weeks. The existing data center has a Site-to-Site VPN connection to AWS that is 90 % utilized

Which AWS service should a solutions architect use to meet these requirements?

AWS DataSync with a VPC endpoint

AWS Direct Conned

AWS Snowball Edge Storage Optimized

AWS Storage Gateway

52. A company is planning to build a new web application on AWS. The company expects predictable traffic most of the year and very high traffic on occasion. The web application needs to be highly available and fault tolerant with minimal latency.

What should a solutions architect recommend to meet these requirements?

Use an Amazon Route 53 routing policy to distribute requests to two AWS Regions each with one Amazon EC2 instance

Use Amazon EC2 instances in an Auto Scaling group with an Application Load Balancer across multiple Availability Zones

Use Amazon EC2 instances in a cluster placement group with an Application Load Balancer across multiple Availability Zones

Use Amazon EC2 instances in a cluster placement group and include the cluster placement group within a new Auto Scaling group

53. A company has multiple AWS accounts for various departments. One of the departments wants to share an Amazon S3 bucket with all other departments.

Which solution will require the LEAST amount of effort?

Enable cross-account S3 replication for the bucket

Create a pre-signed URL for the bucket and share it with other departments

Set the S3 bucket policy to allow cross-account access to other departments

Create 1AM users for each of the departments and configure a read-only 1AM policy

54. A recently created startup built a three-tier web application. The front end nas static content. The application layer is based on mtcroservtces User data is stored as JSON documents that need to be accessed with low latency. The company expects regular traffic to be tow during the first year with peaks in traffic when it publicizes new features every month. The startup team needs to minimize operational overhead costs

What should a solutions architect recommend to accomplish this?

Use Amazon S3 static website hosting to store and serve the front end Use AWS Elastic Beanstalk tor the application layer Use Amazon DynamoDB to store user data

Use Amazon S3 static website hosting to store and serve the front end Use Amazon Elastic Kubernetes Service (Amazon EKSJ for the application layer Use Amazon DynamoDB lo store user data

Use Amazon S3 static website hosting to store and serve the front end Use Amazon API Gateway and AWS Lambda function for the application layer Use Amazon DynamoDB to store user data

Use Amazon S3 static website hosting to store and serve the front end Use Amazon API Gateway and AWS Lambda function for the application layer Use Amazon RDS with read replicas to store user data

55. A company wants to move a multi-tiered application from on premises to the AWS Cloud to improve the application’s performance. The application consists of application tiers that communicate with each other by way of

Which solution moots these and is the MOST operationally efficient?

Use Amazon API Gateway and direct transactions to the AWS Lambda functions as the application layer Use Amazon Simple Queue Service (Amazon SOS) as the communication layer between application services.

Use Amazon CloudWatch metrics to analyze the application performance history to determine the servers' peak utilization during the performance failures Increase the size or the application servers Amazon EC2 instance to meet the peak requirements

Use Amazon Simple Notification Service (Amazon SNS) to handle the messaging between application servers running on Amazon EC2 m an Auto Scaling group Use Amazon CloudWatch to monitor the SNS queue length and scale up and down as required.

Use Amazon Simple Queue Service (Amazon SOS) to handle the messaging between application servers running on Amazon EC2 In an Auto Seeing group Use Amazon CloudWatch to monitor the SOS queue length and scale up when communication failures are detected.

56. A company has a website hosted on AWS. The website is behind an Application Load Balancer (ALB) that is configured to handle HTTP and HTTPS separately. The company wants to forward all requests to the website so that the requests will use HTTPS.

What should a solutions architect do to meet this requirement?

Update the ALB's network ACL to accept only HTTPS traffic

Create a rule that replaces the HTTP in the URL with HTTP

Create a listener rule on the ALB to redirect HTTP traffic to HTTP

Replace the ALB with a Network Load Balancer configured to use Server Name Indication (SNI).

57. A company is planning to migrate a business-critical dataset to Amazon S3. The current solution design uses a single S3 bucket in the us-east-1 Region with versioning enabled to store the dataset. The company's disaster recovery policy states that all data must be in multiple AWS Regions.

How should a solutions architect design the S3 solution?

Create an additional S3 bucket in another Region and configure cross-Region replication.

Create an additional S3 bucket in another Region and configure cross-origin resource sharing (CORS)

Create an additional S3 bucket with versioning in another Region and configure cross-Region replication

Create an additional S3 bucket with versioning in another Region and configure cross-origin resource sharing (CORS)

58. A company runs an online marketplace web application on AWS. The application serves hundreds of thousands of users during peak hours. The company needs a scalable, near-real-time solution to share the details of millions of financial transactions with several other internal applications Transactions also need to be processed to remove sensitive data before being stored in a document database for low-latency retrieval

What should a solutions architect recommend to meet these requirements?

Store the transactions data into Amazon DynamoDB Set up a rule in DynamoDB to remove sensitive data from every transaction upon write Use DynamoDB Streams to share the transactions data with other applications

Stream the transactions data into Amazon Kinesis Data Firehose to store data in Amazon DynamoDB and Amazon S3 Use AWS Lambda integration with Kinesis Data Firehose to remove sensitive data. Other applications can consume the data stored in Amazon S3

Stream the transactions data into Amazon Kinesis Data Streams Use AWS Lambda integration to remove sensitive data from every transaction and then store the transactions data in Amazon DynamoDB Other applications can consume the transactions data off the Kinesis data stream.

Store the batched transactions data in Amazon S3 as files. Use AWS Lambda to process every file and remove sensitive data before updating the files in Amazon S3. The Lambda function then stores the data in Amazon DynamoDB Other applications can consume transaction files stored in Amazon S3.

59. A company is running a media store across multiple Amazon EC2 instances distnbuted across multiple Availability Zones in a single VPC. The company wants a high-performing solution to share data between all the EC2 instances, and prefers to keep the data within the VPC only

What should a solutions architect recommend?

Create an Amazon S3 bucket and call the service APIs from each instance's application.

Create an Amazon S3 bucket and configure all instances to access it as a mounted volume

Configure an Amazon Elastic Block Store (Amazon EBS) volume and mount it across ail instances.

Configure an Amazon Elastic File System (Amazon EPS) file system and mount it across all instances

60. What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?

Update the bucket policy to deny if the PutObject does not have an s3 x-amz-acl header set

Update the bucket policy to deny if the PutObject does not have an s3:x-amz-aci header set to private.

Update the bucket policy to deny if the PutObject does not have an aws SecureTransport header set to true

Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.

Page 7 of 13

61. A company has created a multi-tier application for its ecommerce website. The website uses an Application Load Balancer that resides in the public subnets, a web tier in the public subnets, and a MySQL cluster hosted on Amazon EC2 instances in the private subnets. The MySQL database needs to retrieve product catalog and pricing information that is hosted on the internet by a third-party provider A solutions architect must devise a strategy that maximizes security without increasing operational overhead

What should the solutions architect do to meet these requirements?

Deploy a NAT instance in the VPC Route all the internet-based traffic through the NAT instance

Deploy a NAT gateway in the public subnets. Modify the private subnet route table to direct all internet-bound traffic to the NAT gateway.

Configure an internet gateway and attach it to the VPC Modify the private subnet route table to direct internet-bound traffic to the internet gateway

Configure a virtual private gateway and attach it to the VPC Modify the private subnet route table to direct internet-bound traffic to the virtual private gateway.

62. A company wants to migrate its accounting system from an on-premises data center to the AWS Cloud m a single AWS Region. Data security and an immutable audit log are the top priorities. The company must monitor all AWS activities for compliance auditing. The company that enabled AWS CloudTrail but wants to make sure it meets meat requirements

Which actions should a solutions architect take lo protect and secure CloudTrail? (Select TWO.)

Enable CloudTrail log file validation.

Enable the CloudTrail Proceeding Library.

Enable logging of Insights events in CloudTrail.

Enable custom logging from the on-premises resources

Create an AWS Config rule to monitor whether CloudTrail is configured to use server-side encryption with AWS KMS managed encryption keys (SSE-KMS)

63. A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimum latency to clinics across the country for their on-premises file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic.

What should a solutions architect recommend to meet these requirements?

Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic.

Migrate the files to each clinic's on-premises applications by using AWS DataSync for processing

Deploy an AWS Storage Gateway volume gateway as a virtual machine (VM) on premises at each clinic.

Attach an Amazon Elastic File System (Amazon EFS) file system to each clinic's on-premises servers

64. A company is building a new furniture inventory application. The company has deployed the application on a fleet of Amazon EC2 instances across multiple Availability Zones. The EC2 instances run behind an Application Load Balancer (ALB) in their VPC

A solutions architect has observed that incoming traffic seems to favor one EC2 instance resulting in latency for some requests

What should the solutions architect do to resolve this issue?

Disable session affinity (sticky sessions) on the ALB

Replace the ALB with a Network Load Balancer

increase the number of EC2 instances in each Availability Zone

Adjust the frequency of the health checks on the ALB's target group

65. A company runs a web-based portal that provides users with global breaking news local alerts, and weather updates. The portal delivers each user a personalized view by using a mixture of static and dynamic content Content is served over HTTPS through an API server running on an Amazon EC2 instance behind an Application Load Balancer (ALB). The company wants the portal to provide this content to its users across the world as quickly as possible

How should a solutions architect design the application to ensure the LEAST amount of latency for all users?

Deploy the application stack in a single AWS Region Use Amazon CloudFront to serve all static and dynamic content by specifying the ALB as an origin

Deploy the application stack in two AWS Regions Use an Amazon Route 53 latency routing policy to serve all content from the ALB in the closest Region

Deploy the application stack in a single AWS Region Use Amazon CloudFront to serve the static content Serve the dynamic content directly from the ALB

Deploy the application stack in two AWS Regions Use an Amazon Route 53 geolocation routing policy to serve all content from the ALB in the closest Region

66. A trucking company is deploying an application that will track the GPS coordinates of all the company's trucks. The company needs a solution that will generate real-time statistics based on metadata lookups with high read throughput and microsecond latency. The database must be fault tolerant and must minimize operational overhead and development effort.

Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

Use Amazon DynamoDB as the database.

Use Amazon Aurora MySQL as the database.

Use Amazon RDS for MySQL as the database.

Use Amazon ElastiCache as the caching layer.

Use Amazon DynamoDB Accelerator (DAX) as the caching layer.

67. A company runs a web application that is backed by Amazon RDS. A new database administrator caused data loss by accidentally editing information in a database table To help recover from this type of incident, the company wants the ability to restore the database to its state from 5 minutes before any change within the last 30 days.

Which feature should the solutions architect include in the design to meet this requirement?

Read replicas

Manual snapshots

Automated backups

Multi-AZ deployments

68. A company wants to enforce strict security guidelines on accessing AWS Cloud resources as the company migrates production workloads from its data centers. Company management wants all users to receive permissions according to their job roles and functions.

Which solution meets these requirements with the LEAST operational overhead?

Create an AWS Single Sign-On deployment. Connect to the on-premises Active Directory to centrally manage users and permissions across the company

Create an IAM role for each job function. Require each employee to call the stsiAssumeRole action in the AWS Management Console to perform their job role.

Create individual IAM user accounts for each employee Create an 1AM policy for each job function, and attach the policy to all IAM users based on their job role.

Create individual IAM user accounts for each employee. Create 1AM policies for each job function. Create IAM groups, and attach associated policies to each group. Assign the IAM users to a group based on their Job role.

69. A company runs an application on a group of Amazon Linux EC2 instances. For compliance reasons, the company must retain all application log files for 7 years. The log files will be analyzed by a reporting tool that must be able to access all the files concurrently.

Which storage solution meets these requirements MOST cost-effectively?

Amazon Elastic Block Store (Amazon EBS)

Amazon Elastic File System (Amazon EFS)

Amazon EC2 instance store

Amazon S3

70. A company is hosting a web application on AWS using a single Amazon EC2 instance that stores user-uploaded documents in an Amazon EBS volume. For better scalability and availability, the company duplicated the architecture and created a second EC2 instance and EBS volume in another Availability Zone placing both behind an Application Load Balancer After completing this change, users reported that, each time they refreshed the website, they could see one subset of their documents or the other, but never all of the documents at the same time.

What should a solutions architect propose to ensure users see all of their documents at once?

Copy the data so both EBS volumes contain all the documents.

Configure the Application Load Balancer to direct a user to the server with the documents

Copy the data from both EBS volumes to Amazon EFS Modify the application to save new documents to Amazon EPS

Configure the Application Load Balancer to send the request to both servers Return each document from the correct server.

Page 8 of 13

71. An application runs on Amazon EC2 instances across multiple Availability Zones. The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer. The application performs best when the CPU utilization of the EC2 instances is at or near 40%.

What should a solutions architect do to maintain the desired performance across all instances in the group?

Use a simple scaling policy to dynamically scale the Auto Scaling group

Use a target tracking policy to dynamically scale the Auto Scaling group

Use an AWS Lambda function to update the desired Auto Scaling group capacity.

Use scheduled scaling actions to scale up and scale down the Auto Scaling group

72. A company is using a VPC that is provisioned with a 10.10.1.0/24 CIDR block Because of continued growth IP address space in this block might be depleted soon. A solutions architect must add more IP address capacity to the VPC

Which solution will meet these requirements with the LEAST operational overhead?

Create a new VPC Associate a larger CIDR block

Add a secondary CIDR block of 10 10 2 0/24 to the VPC

Resize the existing VPC CIDR block from 10 10 1.0/24 to 10 10.1.0

Establish VPC peering with a new VPC that has a CIDR block of 10.10 1.0/16

73. A company has created an isolated backup of its environment in another Region. The application is running in warm standby mode and is fronted by an Application Load Balancer (ALB). The current failover process is manual and requires updating a DNS alias record to point to the secondary ALB in another Region

What should a solutions architect do to automate the failover process?

Enable an ALB health check

Enable an Amazon Route 53 health check

Create a CNAME record on Amazon Route 53 pointing to the ALB endpoint.

Create conditional forwarding rules on Amazon Route 53 pointing to an internal BIND DNS server

74. A company build an application that gives users the ability to check in to places they visit, rank the places, and add reviews about their experiences. The application is successful and is experiencing a rapid increase in the number of users every month.

The company uses a single Amazon RDS for MySQL DB instance for its database. The company fears that the database might not be able to handle the load for the upcoming month because the DB instance has activated alarms that are related to resource exhaustion.

A solutions architect must design a solution that prevents service interruptions at the database layer. The solutions architect also must minimize any changes to code.

Which solution meets these requirements?

Create RDS read replicas. Redirect read-only traffic to the read replica endpoints

Create an Amazon EMR cluster. Migrate the data to a Hadoop Distributed File System (HDFS) with a replication factor of 3.

Create an Amazon ElastiCache cluster. Redirect all read-only traffic to the cluster. Set up the cluster to be deployed in three Availability Zones

Turn on the Multi-AZ feature for the DB instance. Redirect read-only traffic to the standby replica endpoint.

75. A company uses on-premises servers to host Its application. The company is running out of storage capacity. The applications use both block storage and NFS storage. The company needs a high-performing solution that supports local caching without re-architecting its existing applications

Which combination of actions should a solutions architect take to meet these requirements'? (Select TWO.)

Mount Amazon S3 as a file system to the on-premises servers

Deploy an AWS Storage Gateway Me gateway to replace NFS storage

Deploy AWS Snowball Edge to provision NFS mounts to on-premises servers

Deploy an AWS Storage Gateway volume gateway to replace the block storage

Deploy Amazon Elastic File System (Amazon EFS) volumes and mount them to on- premises servers

76. A company recently implemented hybrid cloud connectivity using AWS Direct Connect and is migrating data to Amazon S3. The company is looking for a fully managed solution that will automate and accelerate the replication of data between the on-premises storage systems and AWS storage services.

Which solution should a solutions architect recommend to keep the data private?

Deploy an AWS DataSync agent for the on-premises environment Configure a sync job to replicate the data and connect it with an AWS service endpoint

Deploy an AWS DataSync agent for the on-premises environment. Schedule a batch job to replicate point-in-time snapshots to AW

Deploy an AWS Storage Gateway volume gateway for the on-premises environment. Configure it to store data locally, and asynchronously back up point-in-time snapshots to AW

Deploy an AWS Storage Gateway file gateway for the on-premises environment Configure it to store data locally, and asynchronously back up point-m-time snapshots to AW

77. A company is developing a file-sharing application that will use an Amazon S3 bucket for storage. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL

What should a solutions architect do to meet these requirements?

Write individual policies for each S3 bucket to grant read permission for only CloudFront access.

Create an 1AM user Grant the user read permission to objects in the S3 bucket Assign the user to CloudFront

Write an S3 bucket policy that assigns the CloudFront distribution ID as the Principal and assigns the target S3 bucket as the Amazon Resource Name (ARN)

Create an origin access identity (OAI). Assign the OAI to the CloudFront distribution Configure the S3 bucket permissions so that only the OAI has read permission

78. 1.The application's traffic is often low. but it occasionally grows significantly. During these sudden increases in traffic, DynamoDB returns throttling errors. The result is that error pages are displayed to end users.

What should a solutions architect do to reduce these errors?

Change the DynamoDB table to use on-demand capacity mode.

Create a DynamoDB read replica to scale the read traffic horizontally.

Purchase DynamoDB reserved capacity of 1,000 RCUs and 500 WCUs.

Configure the application to use strongly consistent reads for DynamoDB queries.

79. A company runs an online ticketing application with backend services that run on Amazon EC2 instances. The EC2 instances belong to an Auto Scaling group and run behind an Application Load Balancer. The application experiences periods of high user traffic when a popular event is posted online. The company wants a solution that will be able to handle increases in user traffic without affecting the user experience.

What should a solutions architect do to meet these requirements?

Configure a scheduled scaling policy for peak hours with a recurrence schedule set to every day.

Configure a target tracking scaling policy that uses the average aggregate CPU utilization target metric.

Configure a step scaling policy that is based on an Amazon CloudWatch alarm that monitors CPU utilization.

Configure an Application Load Balancer health check that increases the Auto Scaling group capacity whenever the application returns HTTP 503 error codes.

80. A solutions architect must migrate a Windows Internet Information Services (IIS) web application to AWS. The application currently relies on a file share hosted in the user's on-premises network-attached storage (NAS). The solutions architect has proposed migrating the MS web servers to Amazon EC2 instances in multiple Availability Zones that are connected to the storage solution, and configuring an Elastic Load Balancer attached to the instances

Which replacement to the on-premises file share is MOST resilient and durable?

Migrate the file share to Amazon RDS

Migrate the file share to AWS Storage Gateway

Migrate the file share to Amazon FSx for Windows File Server

Migrate the file share to Amazon Elastic File System (Amazon EFS)

Page 9 of 13

81. An application runs on Amazon EC2 instances across multiple Availability Zones. The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer. The application performs best when the CPU utilization of the EC2 instances is at or near 40%.

What should a solutions architect do to maintain the desired performance across all instances in the group?

Use a simple scaling policy to dynam

Amazon DynamoDB global tables

Amazon RDS for MySQL with Multi-AZ enabled

Amazon RDS for MySQL with a cross-Region snapshot copy

82. A company wants to perform an online migration of active datasets from an on-premises NFS server to an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET Data integrity verification is required during the transfer and at the end of the transfer. The data also must he encrypted . A solutions architect is using an AWS solution to migrate the data.

Which solution meets these requirements?

AWS Storage Gateway file gateway

S3 Transfer Acceleration

AWS DataSync

AWS Snowhall Edge Storage Optimized

83. A company wants to use high performance computing (HPC) infrastructure on AWS for financial risk modelling. The company's HPC workloads run on Linux. Each HPC workflow runs on hundreds of Amazon EC2 Spot Instances, is short-lived, and generates thousands of output files that are ultimately stored in persistent storage for analytics and long-term future use.

The company seeks a cloud storage solution that permits the copying of on-premises data to long-term persistent storage to make data available for processing by all EC2 instances. The solution should also be a high performance file system that is integrated with persistent storage to read and write datasets and output files

Which combination of AWS services meets these requirements?

Amazon FSx for Lustre integrated with Amazon S3

Amazon FSx for Windows File Server integrated with Amazon S3

Amazon S3 Glacier integrated with Amazon Elastic Block Store (Amazon EBS)

Amazon S3 bucket with a VPC endpoint integrated with an Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp2) volume

84. A company wants to migrate its MySQL database from on premises to AWS. The company recently experienced a database outage that significantly impacted the business To ensure this does not happen again the company wants a reliable database solution on AWS that minimizes data loss and stores every transaction on at least two nodes

Which solution meets these requirements?

Create an Amazon RDS DB instance with synchronous replication to three nodes in three Availability Zones.

Create an Amazon RDS MySQL DB instance with Multi-AZ functionality enabled to synchronously replicate the data.

Create an Amazon RDS MySQL DB instance and then create a read replica in a separate AWS Region that synchronously replicates the data.

Create an Amazon EC2 instance with a MySQL engine installed that triggers an AWS Lambda function to synchronously replicate the data to an Amazon RDS MySQL DB instance

85. A company runs an internet-facing web application on AWS. The company uses Amazon Route 53 for DNS management and has a public hosted zone lo route traffic from the internet to the application. The company wants to tog DNS response codes to help system administrators perform any root cause analysis in the future.

Which solution will meet these requirements?

Use Route 53 to configure query togging

Use AWS CloudTrail lo record ail Route 53 queries

Use Amazon CloudWatch to record and process Route 53 metrics

Use AWS Trusted Advisor to perform on-demand root cause analysis

86. A company runs an application using Amazon ECS. The application creates resized versions of an original Image and then makes Amazon S3 API calls to store the resized images in Amazon S3

How can a solutions architect ensure that the application has permission to access Amazon S3?

Update the S3 role in AWS 1AM to allow read/write access from Amazon ECS and then relaunch the container.

Create an 1AM role with S3 permissions and then specify that role as the taskRoleArn in the task definition.

Create a security group that allows access from Amazon ECS to Amazon S3 and update the launch configuration used by the ECS cluster.

Create an 1AM user with S3 permissions, and then relaunch the Amazon EC2 instances for the ECS cluster while logged in as this account.

87. A company is running a three-tier web application to process credit card payments. The front-end user interface consists of static webpages. The application tier can have long-runmng processes. The database tier uses MySQL

The application is currently running on a single general purpose large Amazon EC2 instance A solutions architect needs to decouple the services to make the web application highly available

Which solution would provide the HIGHEST availability?

Move static assets to Amazon CloudFront Leave the application in EC2 in an Auto Scaling group Move the database to Amazon RDS to deploy Multi-AZ

Move static assets and the application into a medium EC2 instance Leave the database on me large instance Place both instances in an Auto Scaling group

Move static assets to Amazon S3 Move the application to AWS Lambda with the concurrency limit set Move the database to Amazon DynamoDB with on-demand enabled

Move static assets to Amazon S3 Move the application to Amazon Elastic Container Service (Amazon ECS) containers with Auto Scaling enabled Move the database to Amazon RDS to deploy Multi-AZ

88. A website runs a web application that receives a burst of traffic each day at noon. The users upload new pictures and context daily, but have complaining of timeout. The architect uses Amazon EC2 Auto Scaling groups, and the custom application consistently takes 1 minutes to initiate upon boot up before responding to user requests.

How should a solutions architect redesign the architect to better respond to changing traffic?

Configure a Network Load Balancer with a slow start configuration.

Configure AWS ElastiCache for Redis to offload direct requests to the servers.

Configure an Auto Scaling step scaling policy with an instance warmup condition.

Configure Amazon CloudFront to use an Application Load Balancer as the origin.

89. A solutions architect wants all new users to have specific complexity requirements and mandatory rotation periods tor 1AM user passwords.

What should the solutions architect do to accomplish this?

Set an overall password policy for the entire AWS account

Set a password policy for each IAM user in the AWS account

Use third-party vendor software to set password requirements

Attach an Amazon CloudWatch rule to the Create_newuser event to set the password with the appropriate requirements

90. A company wants to run a hybrid workload for data processing. The data needs to be accessed by on-premises applications for local data processing using an NFS protocol and must also be accessible from the AWS Cloud for further analytics and batch processing

Which solution will meet these requirements?

Use an AWS Storage Gateway file gateway to provide file storage to AWS: then perform analytics on this data in the AWS Cloud

Use an AWS Storage Gateway tape gateway to copy the backup of the local data to AW

then perform analytics on this data in the AWS Cloud.

Use an AWS Storage Gateway volume gateway in a stored volume configuration to regularly take snapshots of the local data, then copy the data to AW

Use an AWS Storage Gateway volume gateway in a cached volume configuration to back up all the local storage in the AWS Cloud, then perform analytics on this data in the cloud.

Page 10 of 13

91. An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about 300 MB of data each month. The data is stored in JSON format. The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.

Which solution meets these requirements MOST cost-effectively?

Amazon Elasticsearch Service (Amazon ES)

Amazon S3 Glacier

Amazon S3 Standard

Amazon RDS for PostgreSQL

92. A company has hired a solutions architect to design a reliable architecture for its application. The application consists of one Amazon RDS DB instance and two manually provisioned Amazon EC2 instances that run web servers. The EC2 instances are located in a single Availability Zone.

What should the solutions architect do to maximize reliability of the application Infrastructure?

Delete one EC2 instance and enable termination protection on the other EC2 instance. Update the DB instance to De multi-AZ, and enable deletion protection.

Update the DB instance to be Multi-A

and enable deletion protection. Place the EC2 instances behind an Application Load Balancer, and run them in an EC2 Auto Scaling group across multiple Availability Zones

Create an additional DB instance along with an Amazon API Gateway and an AWS Lambda function. Configure the application to invoke the Lambda function through API Gateway Have the Lambda function write the data to the two DB instances.

Place the EC2 instances in an EC2 Auto Scaling group that has multiple subnets located in multiple Availability Zones. Use Spot Instances instead of On-Demand Instances. Set up Amazon CloudWatch alarms to monitor the health of the instances. Update the DB instance to be Multi-AZ, and enable deletion protection.

93. A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The website has a mix of dynamic and static content. Users around the globe are reporting that the website is slow

Which set of actions will improve website performance for users worldwide?

Create an Amazon CloudFront distribution and configure the ALB as an origin. Then update the Amazon Route 53 record to point to the CloudFront distribution

Create a latency-based Amazon Route 53 record for the AL

Then launch new EC2 instances with larger instance sizes and register the instances with the ALB

Launch new EC2 instances hosting the same web application in different Regions closer to the users. Then register the instances with the same ALB using cross-Region VPC peering.

Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances. Then update an Amazon Route 53 record to point to the S3 buckets.

94. A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ DB instance. The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently

Which solution meets these requirements?

Store the database user credentials in AWS Secrets Manager Grant the necessary 1AM permissions to allow the web servers to access AWS Secrets Manager

Store the database user credentials in AWS Systems Manager OpsCenter Grant the necessary IAM permissions to allow the web servers to access OpsCenter

Store the database user credentials in a secure Amazon S3 bucket Grant the necessary 1AM permissions to allow the web servers to retrieve credentials and access the database.

Store the database user credentials in files encrypted with AWS Key Management Service (AWS KMS) on the web server file system. The web server should be able to decrypt the files and access the database

95. A solutions architect is designing the architecture for a software demonstration environment. The environment will run on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The system will experience significant increases in traffic during working hours but Is not required to operate on weekends.

Which combination of actions should the solutions architect take to ensure that the system can scale to meet demand? (Select TWO)

Use AWS Auto Scaling to adjust the ALB capacity based on request rate

Use AWS Auto Scaling to scale the capacity of the VPC internet gateway

Launch the EC2 instances in multiple AWS Regions to distribute the load across Regions

Use a target tracking scaling policy to scale the Auto Scaling group based on instance CPU utilization

Use scheduled scaling to change the Auto Scaling group minimum, maximum, and desired capacity to zero for weekends Revert to the default values at the start of the week

96. A company needs to provide its employees with secure access to confidential and sensitive files. The company wants to ensure that the tiles can be accessed only by authorized users. The files must be downloaded securely to the employees' devices.

The tiles are stored in an on-premises Windows file server. However, due to an increase in remote usage, the file server is running out of capacity.

Which solution will meet these requirements?

Migrate the file server to an Amazon EC2 instance in a public subnet. Configure the security group to limit inbound traffic to the employees' IP addresses.

Migrate the files to an Amazon FSx for Windows File Server file system. Integrate the Amazon FSx file system with the on-premises Active Directory. Configure AWS Client VP

Migrate the tiles to Amazon S3, and create a private VPC endpoint. Create a signed URL to allow download.

Migrate the tiles to Amazon S3, and create a public VPC endpoint. Allow employees to sign on with AWS Single Sign-On.

97. A solutions architect is creating a new VPC design There are two public subnets for the load balancer, two private subnets for web servers and two private subnets for MySQL. The web servers use only HTTPS. The solutions architect has already created a security group tor the load balancer allowing port 443 from 0 0 0 0/0 Company policy requires that each resource has the teas! access required to still be able to perform its tasks

Which additional configuration strategy should the solutions architect use to meet these requirements?

Create a security group for the web servers and allow port 443 from 0 00 0/0 Create a security group for the MySQL servers and allow port 3306 from the web servers security group

Create a network ACL for the web servers and allow port 443 from 0 0 0 0*0 Create a network ACL (or the MySQL servers and allow port 3306 from the web servers security group

Create a security group for the web servers and allow port 443 from the load balancer Create a security group for the MySQL servers and allow port 3306 from the web servers security group

Create a network ACL 'or the web servers and allow port 443 from the load balancer Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group

98. A company hosts an application on multiple Amazon EC2 instances. The application processes messages from an Amazon SQS queue writes to an Amazon RDS table and deletes the message from the queue Occasional duplicate records are found in the RDS table. The SQS queue does not contain any duplicate messages.

What should a solutions architect do to ensure messages are being processed once only?

Use the CreateQueue API call to create a new queue

Use the Add Permission API call to add appropriate permissions

Use the ReceiveMessage API call to set an appropriate wail time

Use the ChangeMessageVisibility APi call to increase the visibility timeout

99. A company is deploying an application that processes large quantities of data in batches as needed. The company plans to use Amazon EC2 instances for the workload. The network architecture must support a highly scalable solution and prevent groups of nodes from sharing the same underlying hardware.

Which combination of network solutions will meet these requirements? (Select TWO.)

Create Capacity Reservations for the EC2 instances to run in a placement group

Run the EC2 instances in a spread placement group.

Run the EC2 instances in a cluster placement group.

Place the EC2 instances in an EC2 Auto Scaling group.

Run the EC2 instances in a partition placement group.

100. A company hosts its product information webpages on AWS. The existing solution uses multiple Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group. The website also uses a custom DNS name and communicates with HTTPS only using a dedicated SSL certificate. The company is planning a new product launch and wants to be sure that users from around the world have the best possible experience on the new website

What should a solutions architect do to meet these requirements?

Redesign the application to use Amazon CloudFront

Redesign the application to use AWS Elastic Beanstalk

Redesign the application to use a Network Load Balancer.

Redesign the application to use Amazon S3 static website hosting

Page 11 of 13

101. A company recently launched its website to servo content to its global user base. The company wants to store and accelerate the delivery of static content to its users by leveraging Amazon CloudFront with an Amazon EC2 instance attached as its origin

How should a solutions architect optimize high availability tor the application?

Use lambda@Edge for CloudFront

Use Amazon S3 Transfer Acceleration for CloudFront

Configure another EC2 instance m a different Availability Zone as part of the origin group

Configure another EC2 instance as part of the origin server cluster in the same Availability Zone

102. A company used an AWS Direct Connect connection to copy 1 PB of data from a colocation facility to an Amazon S3 bucket in the us-east-1 Region. The company now wants to copy the data to another S3 bucket in the us-weet-2 Region.

Which solution will meet this requirement?

Use an AWS Snowball Edge Storage Optimized device to copy the data from the colocation facility to ua-weet-2

Use the S3 console to copy the data horn the source S3 bucket to the target S3 bucket.

Use S3 Transfer Acceleration and the S3 copy-object command to copy the data from the source S3 bucket to the target S3 bucket

Add an S3 Cross-Region Replication configuration to copy the data from the source S3 bucket to the target S3 bucket.

103. A company hosts its multi-tier, public web application in the AWS Cloud. The web application runs on Amazon EC2 instances and its database runs on Amazon RDS. The company is anticipating a large increase in sales during an upcoming holiday weekend A solutions architect needs to build a solution to analyze the performance of the web application with a granularity of no more than 2 minutes.

What should the solutions architect do to meet this requirement?

Send Amazon CloudWatch logs to Amazon Redshift Use Amazon QuickSight to perform further analysis

Enable detailed monitoring on all EC2 instances. Use Amazon CloudWatch metrics to perform further analysis.

Create an AWS Lambda function to fetch EC2 logs from Amazon CloudWatch Logs. Use Amazon CloudWatch metrics to perform further analysis

Send EC2 logs to Amazon S3. Use Amazon Redshift to fetch logs from the S3 bucket to process raw data for further analysis with Amazon QuickSight

104. A company is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data in Amazon RDS MySQL Multi-AZ DB instances. The EC2 instances are in public subnets, and the RDS DB instances are in private subnets. The security team has mandated that the DB instances be secured against web-based attacks.

What should a solutions architect recommend?

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer Configure the EC2 instance iptables rules to drop suspicious web traffic. Create a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances.

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Move DB instances to the same subnets that EC2 instances are located in. Create a security group for the DB instances Configure the RDS security group to only allow port 3306 inbound from the individual EC2 instances.

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Create a security group for the web application servers and a security group for the DB instances. Configure the RDS security group to only allow port 3306 inbound from the web application server security group

Ensure the EC2 instances are part of an Auto Scaling group and are behind an Application Load Balancer. Use AWS WAF to monitor inbound web traffic for threats Configure the Auto Scaling group to automatically create new DB instances under heavy traffic. Create a security group for the RDS DB instances. Configure the RDS security group to only allow port 3306 inbound.

105. A company's web application is running on Amazon EC2 instances behind an application Load Balancer. The company changed its policy., which now requires the application to be accessed from one specific country only.

Which configuration will meet this requirement?

Configure the security group for the EC2 Instances

Configure the security group on the Application Load Balancer

Configure AWS WAF on the Application Load Balancer in a VPC

Configure the network ACL for the subnet that contains the EC2 instances

106. A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and Introduce unfair advantages to some prayers. The application la deployed In a very AWS Region. It runs on Amazon FC2 Instances Vial are part of Auto Scaling groups configured behind Application Load Balancers (ALBs) A solutions architect needs to implement a mechanism to monitor the hearth of the application and redirect traffic to healthy endpoints.

Which solution meets these requirements?

Configure an accelerator In AWS Global Accelerator Add a listens for the port that the application listens on. and attach it to a Regional endpoint m each Region Add the ALB as the endpoint

Create an Amazon CloudFron4t distribution and specify the ALB as the origin server Configure the cache behaviour to use origin cache headers Use AWS Lambda functions to optimize the traffic

Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure tie cache behaviour to use origin cache headers Use AWS Lambda functions to optimize the traffic

Configure an Amazon DynamoDB database to serve as the data store tor the application Create a DynamoDB Accelerator (DAX) cluster to act as the m-memory cache for DynamoDB hosting the application data

107. A company receives structured and semi-structured data from various sources once every day A solutions architect needs to design a solution that leverages big data processing frameworks. The data should be accessible using SQL queries and business intelligence tools

What should the solutions architect recommend to build the MOST high-performing solution?

Use AWS Glue to process data and Amazon S3 to store data

Use Amazon EMR to process data and Amazon Redshift lo store data

Use Amazon EC2 to process data and Amazon Elastic Block Store (Amazon EBS) to store data

Use Amazon Kinesis Data Analytics to process data and Amazon Elastic File System (Amazon EFS) to store data

108. A company requires that all version of object in its Amazon S3 bucket be retained. Current object versions will be frequently accessed during the first 30 days, after which they will be rarely accessed and must be retrievable within 5 minutes. Previous object versions need to be kept forever, will be rarely accessed, and can be retrieved within 1 week. All store solutions must be highly available and highly durable

What should a solutions architect recommend to meet these requirements in the MOST costs-effective manner?

Create an S3 lifecycle policy tor the bucket that moves current object versions horn S3 Standard storage lo S3 Glacier after 30 days and moves previous object versions to S3 Glacier after 1 day

Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 Glacier after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day.

Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 standard-infrequent Access (S3 Standard-IA) after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day.

Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day

109. Application developers have noticed that a production application is very slow when business reporting users run large production reports against the Amazon RDS instance backing the application. The CPU and memory utilization metrics for the RDS instance do not exceed 60% while the reporting queries are running. The business reporting users must be able to generate reports without affecting the application's performance.

Which action will accomplish this?

Increase the size of the RDS instance

Create a read replica and connect the application to it

Enable multiple Availability Zones on the RDS instance

Create a read replica and connect the business reports to it

110. A three-tier web application processes orders from customers. The web tier consists of Amazon EC2 instances behind an Application Load Balancer, a middle tier of three EC2 instances decoupled from the web tier using Amazon SQS. and an Amazon DynamoDB backend At peak times customers who submit orders using the site have to wait much longer than normal to receive confirmations due to lengthy processing times A solutions architect needs to reduce these processing times

Which action will be MOST effective in accomplishing this?

Replace the SQS queue with Amazon Kinesis Data Firehose

Use Amazon ElastiCache for Redis in front of the DynamoDB backend tier

Add an Amazon CloudFront distribution to cache the responses for the web tier.

Use Amazon EC2 Auto Scaling to scale out the middle tier instances based on the SQS queue depth

Page 12 of 13

111. The financial application at a company stores monthly reports in an Amazon S3 bucket. The vice president of finance has mandated that ail access to these reports be logged and that any modifications to the tog files be detected

Which actions can a solutions architect take to meet these requirements?

Use S3 server access togging on the bucket that houses the reports with the read and write data events and log file validation options enabled

Use S3 server access logging on the bucket that houses the reports with the read and write management events and log file validation options enabled

Use AWS CloudTrail to create a new trail Configure the trail to log read and write data events on the S3 bucket that houses the reports Log these events to a new bucket and enable log file validation

Use AWS CloudTrail to create a new trail Configure the trail to log read and write management events on the S3 bucket that houses the reports Log these events to a new bucket, and enable log file validation.

112. A solution architect is designing a new service behind API Gateway. The request pattern for the service will be unpredictable and can change suddenly from 0 request to over 500 per second. The total size of the data that needs to be persisted database is currently less than 1 GB unpredictable future growth. Date can be queried using sampling key Cvalue request.

Which combination of AWS services would meet these requirements? (Select TWO.)

AWS Fargete

AWS Lambda

Amazon DynamoDB

Amazon EC2 Auto Scaling

MySQL-compatible Amazon Aurora

113. A company has developed a microservices application. It uses a client-facing API with Amazon API Gateway and multiple internal services hosted on Amazon EC2 instances to process user requests. The API is designed to support unpredictable surges in traffic, but internal services may become overwhelmed and unresponsive for a period of time during surges A solutions architect needs to design a more reliable solution that reduces errors when internal services become unresponsive or unavailable

Which solution meets these requirements?

Use AWS Auto Scaling to scale up internal services when there is a surge in traffic

Use different Availability Zones to host internal services. Send a notification to a system administrator when an internal service becomes unresponsive.

Use an Elastic Load Balancer to distribute the traffic between internal services Configure Amazon CloudWatch metrics to monitor traffic to internal services.

Use Amazon Simple Queue Service (Amazon SQS) to store user requests as they arrive. Change the internal services to retrieve the requests from the queue for processing.

114. A company operates a two-tier application for image processing. The application uses two Availability Zones, each with one public subnet and one private subnet. An Application Load Balancer (ALB) for the web tier uses the public subnets. Amazon EC2 instances for the application tier use the private subnets.

Users report that the application is running more slowly than expected. A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses. A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution.

What should the solutions architect recommend to meet this requirement?

Modify the inbound security group for the web tier. Add a deny rule for the IP addresses that are consuming resources.

Modify the network ACL for the web tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources.

Modify the inbound security group for the application tier. Add a deny rule for the IP addresses that are consuming resources.

Modify the network ACL for the application tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources.

115. A company has an automobile sales website that stores its listings m a database on Amazon RDS When an automobile is sold the listing needs to be removed from the website and the data must be sent to multiple target systems.

Which design should a solutions architect recommend?

Create an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS> queue for the targets to consume

Create an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS) FIFO queue for the targets to consume

Subscribe to an RDS event notification and send an Amazon Simple Queue Service (Amazon SQS) queue fanned out to multiple Amazon Simple Notification Service (Amazon SNS) topics Use AWS Lambda functions to update the targets

Subscribe to an RDS event notification and send an Amazon Simple Notification Service (Amazon SNS) topic fanned out to multiple Amazon Simple Queue Service (Amazon SQS) queues Use AWS Lambda functions to update the targets

116. A company currently has 250 TB of backup files stored in Amazon S3 in a vendor's proprietary format. Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3. The company wants to minimize the data transfer charges associated with this conversion

What should a solutions architect do to accomplish this?

Install the conversion software as an Amazon S3 batch operation so the data is transformed without leaving Amazon S3

Install the conversion software onto an on-premises virtual machine. Perform the transformation and re-upload the files to Amazon S3 from the virtual machine.

Use AWS Snowball Edge devices to export the data and install the conversion software onto the devices. Perform the data transformation and re-upload the files to Amazon S3 from the Snowball Edge devices

Launch an Amazon EC2 instance in the same Region as Amazon S3 and install the conversion software onto the instance. Perform the transformation and re-upload the files to Amazon S3 from the EC2 instance.

117. A company has thousands of edge devices that collectively generate 1 TB of status averts each day Each alert s approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis . The company wants a highly available solution However the company needs to minimize costs and does not want to manage additional infrastructure Additionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older than 14 days

What is the MOST operationally efficient solution that meets these requirements?

Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days B Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts Create a script on the EC2 instances that will store tne alerts m an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon Elasticsearch Service (Amazon ES) duster Set up the Amazon ES cluster to take manual snapshots every day and delete data from the duster that is older than 14 days

Create an Amazon Simple Queue Service (Amazon SQS i standard queue to ingest the alerts and set the message retention period to 14 days Configure consumers to poll the SQS queue check the age of the message and analyze the message data as needed If the message is 14 days old the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue

118. A company is concerned about the security of its public web application due to recent web attacks. The application uses an Application Load Balancer (ALB). A solutions architect must reduce the risk of DDoS attacks against the application

What should the solutions architect do to meet this requirement?

Add an Amazon Inspector agent to the ALB

Configure Amazon Made to prevent attacks.

Enable AWS Shield Advanced to prevent attacks.

Configure Amazon GuardDuty to monitor the ALB

119. A company operates an ecommerce website on Amazon EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group. The site is experiencing performance issues related to a high request rate from illegitimate external systems with changing IP addresses. The security team is worried about potential DDoS attacks against the website. The company must block the illegitimate incoming requests in a way that has a minimal impact on legitimate users.

What should a solutions architect recommend1?

Deploy Amazon Inspector and associate it with the AL

Deploy AWS WAR associate it with the ALB and configure a rate-limiting rule.

Deploy rules to the network ACLs associated with the ALB to block the incoming traffic

Deploy Amazon GuardDuty and enable rate-limiting protection when configunng GuardDuty.

120. CORRECT TEXT

A company provides machine learning solutions .The company's users need to download large data sets from the company's Amazon S3 bucket. These downloads often take a long lime, especially when the users are running many simulations on a subset of those datasets. Users download the datasets to Amazon EC2 instances in the same AWS Region as the S3 bucket. Multiple users typically use the same datasets at the same time.

Which solution will reduce the lime that is required to access the datasets?

Configure the S3 bucket lo use the S3 Standard storage class with S3 Transfer Acceleration activated.

Configure the S3 bucket to use the S3 Intelligent-Tiering storage class with S3 Transfer Acceleration activated.

Create an Amazon Elastic File System (Amazon EFS) network Tile system. Migrate the datasets by using AWS DataSync.

Move the datasets onto a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Attach the volume to all the EC2 instances.

Page 13 of 13

121. A company recently signed a contract with an AWS Managed Service Provider (MSP) Partner for help with an application migration initiative. A solutions architect needs to share an Amazon Machine Image (AMI) from an existing AWS account with the MSP Partner's AWS account. The AMI is backed by Amazon Elastic Block Store (Amazon EBS) and uses a customer managed customer master key (CMK) to encrypt EBS volume snapshots.

What is the MOST secure way for the solutions architect to share the AMI with the MSP Partner's AWS account?

Make the encrypted AMI and snapshots publicly available. Modify the CMK's key policy to allow the MSP Partner's AWS account to use the key

Modify the launchPermission property of the AM

Share the AMI with the MSP Partner's AWS account only. Modify the CMK's key policy to allow the MSP Partner's AWS account to use the key.

Modify the launchPermission property of the AMI Share the AMI with the MSP Partner's AWS account only. Modify the CMK's key policy to trust a new CMK that is owned by the MSP Partner for encryption.

Export the AMI from the source account to an Amazon S3 bucket in the MSP Partner's AWS account. Encrypt the S3 bucket with a CMK that is owned by the MSP Partner Copy and launch the AMI in the MSP Partner's AWS account.

122. A company has a service that reads and writes large amounts of data from an Amazon S3 bucket in the same AWS Region. The service is deployed on Amazon EC2 instances within the private subnet of a VPC. The service communicates with Amazon S3 over a NAT gateway in the public subnet However, the company wants a solution that will reduce the data output costs.

Which solution will meet these requirements MOST cost-effectively?

Provision a dedicated EC2 NAT instance in the public subnet. Configure the route table for the private subnet to use the elastic network interface of this instance as the destination for all S3 traffic

Provision a dedicated EC2 NAT instance in the private subnet. Configure the route table for the public subnet to use the elastic network interface of this instance as the destination for all S3 traffic.

Provision a VPC gateway endpoint. Configure the route table for the private subnet to use the gateway endpoint as the route for all S3 traffic.

Provision a second NAT gateway. Configure the route table foe the private subnet to use this NAT gateway as the destination for all S3 traffic.

123. A company runs an application In a branch office within a small data closet with no vitalized compute resources. The application data is stored on an NFS volume Compliance standards require a daily offsite backup of the NFS volume.

Which solution meets these requirements?

Install an AWS Storage Gateway fie gateway on premises to replicate the data to Amazon S3

Install an AWS Storage Gateway fie gateway hardware appliance on premises to replicate the data to Amazon S3.

Install an AWS Storage Gateway volume gateway with stored volumes on premises to replicate the data to Amazon S3

Install an AWS Storage Gateway volume gateway with cached volumes on premises to replicate the data to Amazon S3.

SAA-C02 AWS Certified Solutions Architect-Associate Free Dumps

SAA-C02 AWS Certified Solutions Architect-Associate Free Dumps

Share this post

Leave a Reply Cancel reply

Related Posts