Get Updated Amazon SAA-C03 Exam Questions

QUESTION 1

A solutions architect needs to secure an Amazon API Gateway REST API. Users need to be able to log in to the API by using common external social identity providers (IdPs). The social IdPs must use standard authentication protocols such as SAML or OpenID Connect (OIDC). The solutions architect needs to protect the API against attempts to exploit application vulnerabilities.

Which combination of steps will meet these security requirements? (Select TWO.)

A

Create an AWS WAF web ACL that is associated with the REST API. Add the appropriate managed rules to the ACL.

B

Subscribe to AWS Shield Advanced. Enable DDoS protection. Associate Shield Advanced with the REST API.

C

Create an Amazon Cognito user pool with a federation to the social IdPs. Integrate the user pool with the REST API.

D

Create an API key in API Gateway. Associate the API key with the REST API.

E

Create an IP address filter in AWS WAF that allows only the social IdPs. Associate the filter with the web ACL and the API.

Correct Option: A,C

✅ Option A (Correct) Reasoning: AWS WAF is a web application firewall that helps protect web applications or APIs from common web exploits and bots. Associating a web ACL with the REST API and adding appropriate managed rules (e.g., OWASP Top 10) directly addresses the requirement to protect against application vulnerabilities.✅ Option C (Correct) Reasoning: Amazon Cognito User Pools provide user directories for authentication and can federate with social identity providers (IdPs) using standards like SAML or OIDC. Integrating a Cognito User Pool with API Gateway allows users to log in via external social IdPs and then access the API securely.❌ Why the other choices are incorrect:

Option B is incorrect: AWS Shield Advanced primarily provides DDoS protection against volumetric and state-exhaustion attacks. It does not address application-layer vulnerabilities or user authentication via social IdPs.

Option D is incorrect: API keys are used for usage plans, throttling, and metering API access, not for user authentication with social IdPs or protecting against application vulnerabilities.

Option E is incorrect: Creating an IP address filter to allow only social IdP IPs is impractical and does not address user authentication flow or protection against application-layer exploits. Social IdPs use wide and dynamic IP ranges.

QUESTION 2

A company has an image processing workload running on Amazon ECS in two private subnets. Each private subnet uses a NAT instance for internet access. All images are stored in Amazon S3 buckets. The company is concerned about the data transfer costs between Amazon ECS and Amazon S3.

What should a solutions architect do to reduce costs?

A

Configure a NAT gateway to replace the NAT instances.

B

Configure a gateway endpoint for traffic destined to Amazon S3.

C

Configure an interface endpoint for traffic destined to Amazon S3.

D

Configure Amazon CloudFront for the S3 bucket storing the images.

Correct Option: B

✅ Option B (Correct) Reasoning: Configuring a VPC Gateway Endpoint for Amazon S3 allows traffic from the private subnets to S3 to flow privately within the AWS network, bypassing NAT instances. This eliminates NAT data processing charges and reduces overall data transfer costs as S3 access via a gateway endpoint incurs no additional charges for data processed by the endpoint itself.❌ Why the other choices are incorrect:

Option A is incorrect: A NAT Gateway would replace NAT instances, improving availability and scalability, but it still incurs data processing charges for traffic passing through it, including S3 traffic if routed this way. It does not reduce the specific S3 data transfer costs.

Option C is incorrect: An interface endpoint (PrivateLink) provides private connectivity but incurs hourly charges and data processing fees, making it generally a more expensive option than a gateway endpoint for S3 traffic.

Option D is incorrect: Amazon CloudFront is a CDN for distributing content to end-users globally. It is not designed to optimize internal VPC-to-S3 data transfer costs for an ECS workload.

Reference: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-s3.html

QUESTION 3

A company runs a database in which application servers write transaction logs and application data to on-premises iSCSI-based SAN storage. The company wants to avoid costs associated with hardware refresh and on-premises infrastructure expansion. The company needs an automated solution to migrate older log data to AWS. The solution must maintain the iSCSI storage interface and keep frequently accessed logs available locally with minimal latency.

Which solution will meet these requirements?

A

Deploy an Amazon S3 File Gateway to tier historical log data to Amazon S3. Use the Amazon S3 Glacier Instant Retrieval storage class.

B

Use the AWS CLI to create a scheduled cron job to copy older log data to Amazon S3.

C

Deploy a Volume Gateway in stored volume mode. Map the iSCSI volumes to the on-premises servers.

D

Deploy a Volume Gateway in cached volume mode. Map the iSCSI volumes to the on-premises servers.

Correct Option: D

✅ Option D (Correct) Reasoning: Deploying a Volume Gateway in cached volume mode presents iSCSI block storage to on-premises servers. It stores primary data on Amazon S3 while maintaining a local cache of frequently accessed data, meeting the requirements to migrate older data to AWS, maintain the iSCSI interface, and keep frequently accessed logs local with low latency.❌ Why the other choices are incorrect:

Option A is incorrect: Amazon S3 File Gateway presents NFS or SMB file interfaces, not iSCSI block storage, failing to maintain the existing iSCSI storage interface.

Option B is incorrect: Using the AWS CLI and a cron job is a scripting solution, not an integrated storage gateway solution that provides an iSCSI interface, local caching for frequently accessed data, and automatic tiering.

Option C is incorrect: Volume Gateway in stored volume mode keeps all primary data on-premises, asynchronously backing it up to S3. This does not migrate older log data to AWS to reduce on-premises storage, as requested.

Reference: https://aws.amazon.com/storagegateway/features/

QUESTION 4

A company uses Amazon RDS for PostgreSQL to run its applications in the us-east-1 Region. The company also uses machine learning (ML) models to forecast annual revenue based on near real-time reports. The reports are generated by using the same RDS for PostgreSQL database. The database performance slows during business hours. The company needs to improve database performance.

Which solution will meet these requirements MOST cost-effectively?

A

Create a cross-Region read replica. Configure the reports to be generated from the read replica.

B

Activate Multi-AZ DB instance deployment for RDS for PostgreSQL. Configure the reports to be generated from the standby database.

C

Use AWS DMS to logically replicate data to a new database. Configure the reports to be generated from the new database.

D

Create a read replica in us-east-1. Configure the reports to be generated from the read replica.

Correct Option: D

✅ Option D (Correct)
Reasoning: Creating an Amazon RDS read replica in the same region (us-east-1) is the most cost-effective and appropriate solution. RDS read replicas are specifically designed to offload read-heavy workloads, such as reporting and analytics, from the primary database instance. By configuring the ML model reports to run against the read replica, the contention on the primary database during business hours is eliminated, significantly improving its performance for the main application. This solution is cost-effective as it leverages AWS's native read scaling capabilities within the same region.

❌ Why the other choices are incorrect:
* Option A is incorrect: A cross-Region read replica would incur additional data transfer costs and potentially higher latency, making it less cost-effective and unnecessary for a performance issue that can be resolved within the same region.
* Option B is incorrect: A Multi-AZ standby instance is for high availability and disaster recovery; it is not directly accessible for read queries to offload workload. Its purpose is failover.
* Option C is incorrect: While AWS DMS can replicate data, using it for this specific read offloading scenario is generally more complex and less cost-effective than leveraging the native RDS read replica feature, which is purpose-built for read scaling.

Reference: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_ReadReplicas.html

QUESTION 5

A manufacturing company runs an order processing application in its VPC. The company wants to securely send messages from the application to an external Salesforce system that uses Open Authorization (OAuth).

A solutions architect needs to integrate the company's order processing application with the external Salesforce system.

Which solution will meet these requirements?

A

Create an Amazon SNS topic in a fanout configuration that pushes data to an HTTPS endpoint. Configure the order processing application to publish messages to the SNS topic.

B

Create an Amazon SNS topic in a fanout configuration that pushes data to an Amazon Data Firehose delivery stream that has a HTTP destination. Configure the order processing application to publish messages to the SNS topic.

C

Create an Amazon EventBridge rule and configure an Amazon EventBridge API destination partner. Configure the order processing application to publish messages to Amazon EventBridge.

D

Create an Amazon Managed Streaming for Apache Kafka (Amazon MSK) topic that has an outbound MSK Connect connector. Configure the order processing application to publish messages to the MSK topic.

Correct Option: C

✅ Option C (Correct)

Reasoning: Amazon EventBridge API Destinations are specifically designed for sending events to HTTP endpoints of external applications, including SaaS providers like Salesforce. API Destinations support various authorization types, including OAuth (Client Credentials or Authorization Code), through API Connections. This provides a secure and managed way to integrate with Salesforce using OAuth, satisfying the requirements.

❌ Why the other choices are incorrect:

Option A is incorrect: While Amazon SNS can push data to HTTPS endpoints, it does not natively handle complex authentication mechanisms like OAuth for external systems. Any OAuth logic would need to be custom-implemented at the receiving HTTPS endpoint, making the solution more complex than EventBridge API Destinations.
Option B is incorrect: Amazon Kinesis Data Firehose can deliver to HTTP destinations. However, similar to SNS, Firehose does not natively manage OAuth authentication for the target system. This would still require custom handling for authorization.
Option D is incorrect: Amazon Managed Streaming for Apache Kafka (Amazon MSK) is a powerful streaming platform, and MSK Connect can integrate with various sources and sinks. However, it's a more complex and typically higher-overhead solution for simply sending messages to an external HTTP endpoint with OAuth compared to the purpose-built EventBridge API Destinations.

Reference: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-api-destinations.html

QUESTION 6

A company wants to store and perform analytics on structured data in a data warehouse on AWS. The solution must ingest unstructured data from Amazon S3.

Which solution will meet these requirements?

A

Use Amazon Redshift to store structured data and to run analytics. Use AWS Glue to ingest data from Amazon S3 into Amazon Redshift.

B

Use Amazon DynamoDB to store structured data. Use DynamoDB streams and AWS Lambda functions to run analytics. Use a Lambda function to ingest data from Amazon S3 into DynamoDB.

C

Use Amazon Aurora to store structured data. Use Aurora parallel query to run analytics. Use Amazon Athena to ingest data from Amazon S3 into Aurora.

D

Use AWS Lake Formation to store structured data and to run analytics. Use AWS Lambda@Edge functions to ingest data from Amazon S3 into Lake Formation.

Correct Option: A

✅ Option A (Correct) Reasoning: Amazon Redshift is a fully managed, petabyte-scale data warehouse service ideal for structured data and complex analytics. AWS Glue is an ETL service capable of ingesting and transforming unstructured data from Amazon S3 into a structured format, making it suitable for Redshift. This combination directly addresses all requirements.❌ Why the other choices are incorrect:

Option B is incorrect: Amazon DynamoDB is a NoSQL database, not a data warehouse, and is not optimized for complex analytical queries. DynamoDB streams and Lambda are not suited for data warehouse analytics.

Option C is incorrect: Amazon Aurora is a relational OLTP database, not a data warehouse (OLAP). Aurora parallel query does not transform it into a data warehouse, and Athena is not primarily an ingestion tool for Aurora.

Option D is incorrect: AWS Lake Formation manages data lakes in S3, not a traditional structured data warehouse. Lambda@Edge functions are for edge computing and not suitable for bulk data ingestion into a data lake/warehouse.

QUESTION 7

A company's compliance archive holds 120 TB of objects in an Amazon S3 bucket in the Standard access tier. The company accesses the objects frequently during the first

30 days after creation. After the initial 30 days, the company rarely reads the objects. However, the objects must be retrievable in under 1 minute when the company needs

the objects.

Which solution will meet these requirements in the MOST cost-effective way?

A

Store objects in S3 Standard-Infrequent Access (Standard-IA) for the full retention period.

B

Use an S3 Lifecycle rule to transition objects to S3 Glacier Instant Retrieval after 30 days.

C

Use an S3 Lifecycle rule to transition objects to S3 Glacier Flexible Retrieval after 30 days,

D

Enable S3 Intelligent-Tiering. Configure S3 Intelligent-Tiering to store objects in S3 Glacier Deep Archive automatically after 30 days.

Correct Option: B

The company's requirements specify frequent access for the first 30 days, followed by rare access, but with a critical need for retrieval in under 1 minute after those 30 days. Objects are currently in S3 Standard.

Option B (Use an S3 Lifecycle rule to transition objects to S3 Glacier Instant Retrieval after 30 days) is the most cost-effective solution. Keeping objects in S3 Standard for the initial 30 days is appropriate for frequent access. After 30 days, S3 Glacier Instant Retrieval is specifically designed for rarely accessed data that requires immediate retrieval (milliseconds). This meets the 'under 1 minute' requirement while being highly cost-effective for archival data.

Why the other choices are incorrect:

Option A (Store objects in S3 Standard-Infrequent Access (Standard-IA) for the full retention period) is not cost-effective. Standard-IA has retrieval charges, and storing frequently accessed data (first 30 days) in this tier would incur unnecessary costs.
Option C (Use an S3 Lifecycle rule to transition objects to S3 Glacier Flexible Retrieval after 30 days) does not reliably meet the 'under 1 minute' retrieval requirement. S3 Glacier Flexible Retrieval (formerly S3 Glacier) typically has retrieval times of minutes to hours (e.g., Standard retrieval 3-5 hours, Expedited retrieval 1-5 minutes), making it less suitable than S3 Glacier Instant Retrieval for consistent sub-minute access.
Option D (Enable S3 Intelligent-Tiering. Configure S3 Intelligent-Tiering to store objects in S3 Glacier Deep Archive automatically after 30 days) fails the retrieval time requirement. S3 Glacier Deep Archive is designed for the lowest cost archival with retrieval times typically in hours (12-48 hours), far exceeding the 'under 1 minute' constraint. While S3 Intelligent-Tiering can manage tiers, the specified target tier (Deep Archive) is inappropriate.

Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html https://aws.amazon.com/s3/storage-classes/

QUESTION 8

A company runs a containerized data processing application. The company deploys the application on a Kubernetes cluster in a remote field office- The company experiences multiple hardware failures that disrupt operations.

The company needs a solution that can add resilience and deliver minimal latency for the company's field equipment The solution must be highly available and resilient to temporary

network outages.

Which solution will meet these requirements?

A

Deploy an AWS Site-to-Site VPN connection from the field office to the nearest AWS Region. Deploy Amazon EKS across multiple Availability Zones in that Region.

B

Deploy an AWS Direct Connect connection from the field office to the nearest Direct Connect location. Deploy Amazon EKS in the nearest AWS Region across multipleAvailability Zones.

C

Order a single AWS Outposts server for the field office Deploy Amazon EKS With the extended cluster deployment option on the Outposts server

D

Order multiple AWS Outposts servers for the field office- Deploy Amazon EKS with the local cluster deployment option on the Outposts servers-

Correct Option: D

The company requires a solution that offers resilience against hardware failures, minimal latency for field equipment, high availability, and resilience to temporary network outages in a remote field office. AWS Outposts brings AWS infrastructure and services to on-premises locations, directly addressing the need for minimal latency by keeping compute and storage close to the field equipment.

Option D is correct: Ordering multiple AWS Outposts servers provides the necessary redundancy and high availability to withstand hardware failures, as workloads can be distributed across multiple instances on the Outposts. Deploying Amazon EKS with the local cluster deployment option on these Outposts servers ensures that both the EKS control plane and worker nodes run entirely on the Outposts. This configuration allows the Kubernetes cluster to continue operating autonomously and process data even during temporary network outages to the AWS Region, fulfilling all stated requirements for resilience and low latency.
Option A is incorrect: Deploying EKS in an AWS Region via a Site-to-Site VPN introduces significant latency for field equipment and is not resilient to network outages for local operations, as the application would depend on a continuous connection to the region.
Option B is incorrect: While AWS Direct Connect offers a dedicated, lower-latency connection than VPN, it still routes traffic to an AWS Region. This would not provide minimal latency for field equipment on-premises, nor would it allow operations to continue during a temporary loss of connectivity to the AWS Region.
Option C is incorrect: A single AWS Outposts server does not provide resilience against hardware failures, which the problem statement explicitly highlights as an issue. Furthermore, the EKS extended cluster deployment option places the control plane in the AWS Region, meaning the cluster would not be resilient to temporary network outages from the field office to the region.

Reference: https://docs.aws.amazon.com/outposts/latest/userguide/how-outposts-works.html, https://docs.aws.amazon.com/eks/latest/userguide/eks-outposts.html

QUESTION 9

A company runs an application in the AWS Cloud. The company wants to improve the application's resilience by using multiple AWS Regions. The application uses Amazon SNS topics to invoke AWS Lambda functions- The company must be able to deliver SNS notifications to the application's Lambda functions across Regions.

Which combination of steps will meet these requirements? (Select TWO.)

A

Create additional Lambda functions in another Region where the application runs-

B

In each Region where the application runs, subscribe the Lambda functions from all Regions to the SNS notification in that Region.

C

In each Region where the application runs, subscribe the Lambda functions to the SNS notification in the original Region.

D

In each Region where the application runs, subscribe the Lambda function in that Region to the SNS notifications in all Regions.

E

Create a new AWS account Create Lambda functions across both accounts- Add code to call Amazon SNS across accounts.

Correct Option: A,D

The company wants to improve application resilience by using multiple AWS Regions and ensure Amazon SNS notifications can invoke AWS Lambda functions across Regions.

Here's why options A and D are the correct combination:

✅ Option A: Create additional Lambda functions in another Region where the application runs.
For multi-Region resilience, it's essential to have redundant application components in a secondary Region. If the primary Region experiences an outage, the application in the secondary Region can continue processing requests. Creating additional Lambda functions in another Region is a fundamental step to achieve this.
✅ Option D: In each Region where the application runs, subscribe the Lambda function in that Region to the SNS notifications in all Regions.
AWS Lambda functions can only directly subscribe to Amazon SNS topics within the same AWS Region. To deliver SNS notifications to Lambda functions across Regions for resilience, a common pattern involves:
1. Creating an SNS topic in each active Region.
2. Creating a Lambda function in each Region.
3. Subscribing the local Lambda function to its local SNS topic.
4. Implementing a cross-Region replication mechanism, typically using another Lambda function subscribed to the source SNS topic to publish messages to the SNS topic in the other Region.
Option D encapsulates this architecture by stating that each regional Lambda function should effectively receive

Reference: https://aws.amazon.com/blogs/compute/building-cross-region-serverless-applications/

QUESTION 10

A healthcare company is running an Amazon EMR cluster on Amazon EC2 instances to process data that is stored in Amazon S3. The company must ensure that the data processing jobs have access only to the relevant data in Amazon S3. Each job must have specific EMR runtime roles.

Which combination of steps will meet these requirements? (Select THREE.)

A

Set up security configurations in Amazon EMR, and set EnableApplicationScopedlAMRole to true.

B

Set up runtime roles to assume the EC2 instance profile of the Amazon EMR cluster.

C

Set up an EC2 instance profile for the Amazon EMR cluster to assume the runtime roles.

D

For each IAM role that serves as an EMR runtime role, set up a trust policy with the EC2 instance profile role.

E

Establish a trust policy between the EMR runtime roles and the EMR service role of the cluster.

F

Set up security configurations in Amazon EMR, and set EnablelnTransitEncryption to true.

Correct Option: A,C,D

To ensure EMR data processing jobs have access only to relevant data in Amazon S3 by using specific EMR runtime roles, three key steps are required:

✅ A: Set up security configurations in Amazon EMR, and set EnableApplicationScopedlAMRole to true. This setting in an EMR security configuration is a prerequisite for enabling and utilizing EMR runtime roles. It allows applications running on the cluster to assume specific IAM roles.

✅ C: Set up an EC2 instance profile for the Amazon EMR cluster to assume the runtime roles. This involves configuring the permissions policy of the EMR EC2 instance profile role (e.g., EMR_EC2_DefaultRole) to grant sts:AssumeRole permissions on the specific EMR runtime roles. This is crucial because the EC2 instances, operating under this instance profile, are the entities that will attempt to assume the runtime roles.

✅ D: For each IAM role that serves as an EMR runtime role, set up a trust policy with the EC2 instance profile role. The trust policy of each EMR runtime role must explicitly permit the EMR EC2 instance profile role (which the cluster instances use) to assume it. This establishes the necessary trust relationship for the assumption to occur successfully.

❌ Why the other choices are incorrect:

B: Set up runtime roles to assume the EC2 instance profile of the Amazon EMR cluster. This is incorrect. The EC2 instance profile role assumes the runtime roles, not the other way around.
E: Establish a trust policy between the EMR runtime roles and the EMR service role of the cluster. This is incorrect. The trust policy for runtime roles is established with the EMR EC2 instance profile role, not the EMR service role. The EMR service role is used by the EMR service itself for cluster management, not for job-specific data access.
F: Set up security configurations in Amazon EMR, and set EnablelnTransitEncryption to true. This is incorrect. Enabling in-transit encryption secures data moving within the EMR cluster, but it does not control job-specific access to S3 data through IAM roles.

Reference: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-runtime-roles.html

QUESTION 11

A solutions architect is investigating compute options for a critical analytics application. The application uses long-running processes to prepare and aggregate data. The processes cannot be interrupted. The application has a known baseline load. The application needs to handle occasional usage surges.

Which solution will meet these requirements MOST cost-effectively?

A

Create an Amazon EC2 Auto Scaling group. Set the Min capacity and Desired capacity parameters to the number of instances required to handle the baseline load. Purchase Reserved Instances for the Auto Scaling group.

B

Create an Amazon EC2 Auto Scaling group. Set the Min capacity, Max capacity, and Desired capacity parameters to the number of instances required to handle the baseline load. Use On-Demand Instances to address occasional usage surges.

C

Create an Amazon EC2 Auto Scaling group. Set the Min capacity and Desired capacity parameters to the number of instances required to handle the baseline load. Purchase Reserved Instances for the Auto Scaling group. Use the OnDemandPercentageAboveBaseCapacity parameter to configure the launch template to launch Spot Instances.

D

Re-architect the application to use AWS Lambda functions instead of Amazon EC2 instances. Purchase a one-year Compute Savings Plan to reduce the cost of Lambda usage.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 12

A company is developing a microservices-based application to manage the company's delivery operations, The application consists of microservices that process orders, manage a fleet of delivery vehicles, and optimize delivery routes.

The microservices must be able to scale independently and must be able to handle bursts of traffic without any data loss.

Which solution will meet these requirements with the LEAST operational overhead?

A

Use Amazon API Gateway REST APIs to establish communication between microservices, Deploy the application on Amazon EC2 instances in Auto Scaling groups.

B

Use Amazon SQS to establish communication between microservices. Deploy the application on Amazon ECS containers on AWS Fargate.

C

Use WebSocket-based communication between microservices- Deploy the application on Amazon EC2 instances in Auto Scaling groups.

D

Use Amazon SNS to establish communication between microservices. Deploy the application on Amazon ECS containers on Amazon EC2 instances.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 13

A company runs a container application on a Kubernetes cluster in the company's data center. The application uses Advanced Message Queuing Protocol (AMQP) to communicate with a message queue. The data center cannot scale fast enough to meet the company's expanding business needs. The company wants to migrate the workloads to AWS.

Which solution will meet these requirements with the LEAST operational overhead?

A

Migrate the container application to Amazon ECS. IJse Amazon SQS to retrieve the messages.

B

Migrate the container application to Amazon EKS. Use Amazon MQ to retrieve the messages.

C

Use highly available Amazon EC2 instances to run the application. Use Amazon MQ to retrieve the messages.

D

Use AWS Lambda functions to run the application. Use Amazon SQS to retrieve the messages.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 14

A company uses AWS Direct Connect to connect its on-premises network to multiple VPCs. All VPCs are located in the same AWS account in one AWS Region. Each VPC uses its own private virtual interface (VIE) and virtual local area network (VLAN) on the Direct Connect connection.

The company is growing and needs to add more VPCs and private VlFs. The existing connections cannot support the additional VPCs and private VlFs. The company's new VPCs must have connectivity to the on-premises network.

Which solution will meet these requirements in the MOST scalable way?

A

Provision a new Direct Connect connection to handle the additional VPCs and VIFs,

B

Create a virtual private gateway for each VPC that is over the connection service quota. Use AWS Site-to-Site VPN to connect the virtual private gateways to the on-premises network.

C

Create a Direct Connect gateway and add virtual private gateway associations to all of the VPCs, Configure a private VIF for each new VPC to connect each new VPC to the on-premises network.

D

Connect a transit gateway to all the VPCs. Associate a Direct Connect gateway with the transit gateway. Create a transit VIF for the Direct Connect gateway.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 15

A company seeks a storage solution for its application. The solution must be highly available and scalable. The solution also must function as a file system, be mountable by multiple Linux instances in AWS and on premises through native protocols, and have no minimum size requirements. The company has set up a Site-to-Site VPN for access from its on premises network to its VPC.

Which storage solution meets these requirements?

A

Amazon FSx Multi-AZ deployments

B

Amazon EBS Multi-Attach volumes

C

Amazon EFS with multiple mount targets

D

Amazon EFS with a single mount target and multiple access points

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 16

A company is using a loosely coupled serverless architecture on AWS. The architecture consists of multiple web applications and APIs distributed across multiple teams. The company uses AWS Control Tower to provision AWS accounts. The company's development teams use AWS CloudFormation.

The company wants to improve trace monitoring and gain insight into how individual services in application stacks are performing.

Which solution will meet these requirements?

A

Enable AWS CloudTrail across all accounts by using AWS Control Tower.

B

Enable AWS X-Ray across all accounts by using AWS Control Tower.

C

Enable Amazon CloudWatch in the CloudFormation templates,

D

Enable AWS X-Ray in the CloudFormation templates.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 17

A company hosts an application on AWS. The application has generated approximately 2.5 TB of data over the previous 12 years. The company currently stores the data on Amazon EBS volumes.

The company wants a cost-effective backup solution for long-term storage. The company must be able to retrieve the data within minutes when required for audits.

Which solution will meet these requirements?

A

Create EBS snapshots to back up the data.

B

Create an Amazon S3 bucket. Use the S3 Glacier Deep Archive storage class to back up the data.

C

Create an Amazon S3 bucket. Use the S3 Glacier Flexible Retrieval storage class to back up the data.

D

Create an Amazon Elastic File System (Amazon EFS) file system to back up the data.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 18

A company wants to deploy its containerized application workloads to a VPC across three Availability Zones. The company needs a solution that is highly available across Availability Zones. The solution must require minimal changes to the application. Which solution will meet these requirements with the LEAST operational overhead?

A

Use Amazon ECS. Configure Amazon ECS Service Auto Scaling to use target tracking scaling. Set the minimum capacity to 3. Set the task placement strategy type to spread with an Availability Zone attribute.

B

Use Amazon EKS self-managed nodes. Configure Application Auto Scaling to use target tracking scaling. Set the minimum capacity to 3.

C

Use Amazon EC2 Reserved Instances. Launch three EC2 instances in a spread placement group. Configure an Auto Scaling group to use target tracking scaling. Set the minimum capacity to 3.

D

Use an AWS Lambda function. Configure the Lambda function to connect to a VPC. Configure Application Auto Scaling to use Lambda as a scalable target. Set the minimum capacity to 3.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 19

A company recently migrated a data warehouse to AWS. The company has an AWS Direct Connect connection to AWS.

Company users query the data warehouse by using a visualization tool. The average size of the queries that the data warehouse returns is 50 MB. The average visualization that the visualization tool produces is 500 KB in size. The result sets that the data warehouse returns are not cached.

The company wants to optimize costs for data transfers between the data warehouse and the company.

Which solution will meet this requirement?

A

Host the visualization tool on premises, Connect to the data warehouse directly through the internet.

B

Host the visualization tool in the same AWS Region as the data warehouse. Access the visualization tool through the internet.

C

Host the visualization tool on premises. Connect to the data warehouse through the Direct Connect connection.

D

Host the visualization tool in the same AWS Region as the data warehouse, Access the visualization tool through the Direct Connect connection.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 20

A company operates a data lake in Amazon S3 that stores large datasets in multiple formats. The company has an application that retrieves and processes subsets of data from multiple objects in the data lake based on filtering criteria. For each data query, the application currently downloads the entire S3 object and performs transformations. The current process requires a large amount of transformation time.

The company wants a solution that will give the application the ability to query and filter directly on S3 objects without downloading the objects.

Which solution will meet these requirements?

A

Use Amazon Athena to query and filter the objects in Amazon S3.

B

Use Amazon EMR to process and filter the objects.

C

Use Amazon API Gateway to create an API to retrieve filtered results from Amazon S3.

D

Use Amazon ElastiCache(Valkey) to cache the objects.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 21

A company is building a critical web application on AWS. The company needs to design architecture components that provide low-latency, global access to static content. The company must also provide highly durable and highly available storage for static content and user uploads.

Which solution will meet these requirements?

A

Create an Amazon CloudFront distribution. Create one Amazon S3 bucket and configure it as the origin for static content. Create a second S3 bucket and set it as the origin for user uploads.

B

Create an Application Load Balancer (ALB) and an Amazon EC2 Auto Scaling group. Set the Auto Scaling group as the ALB target. Configure the instances in the Auto Scaling group to store static content on instance store volumes. Use an Amazon FSx for NetApp ONTAP Multi-AZ file system to store user uploads.

C

Create an Amazon CloudFront distribution. Create one Amazon S3 bucket and configure it as the origin for static content. Use an Amazon FSx for NetApp ONTAP Single-AZ file system to store user uploads.

D

Create an Application Load Balancer (ALB) and an Amazon EC2 Auto Scaling group. Set the Auto Scaling group as the ALB target. Configure the instances in the Auto Scaling group to store static content on instance store volumes. Use Amazon S3 Standard to store user uploads.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 22

A streaming analytics application that runs on Amazon EC2 instances needs 8 TB of attached block storage. The application has a sequential and throughput-heavy workload, The application has moderate input/output operations per second (IOPS) and runs 24 hours a day, 7 days a week.

The company wants to minimize storage cost while meeting performance needs.

Which Amazon EBS volume type will meet these requirements?

A

General Purpose SSD (gp3) EBS volume with default throughput

B

Provisioned IOPS SSD (i02) EBS volume provisioned with 20,000 IOPS

C

Throughput Optimized HDD (St1) EBS volume

D

Cold HDD (sc1) EBS volume

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 23

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing. The company wants to minimize the website hosting costs.

Which solution will meet these requirements?

A

Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.

B

Move the website to an Amazon S3 bucket. Configure an Amazon ElastiCache cluster for the S3 bucket.

C

Move the website to AWS Amplify. Configure an ALB to resolve to the Amplify website.

D

Move the website to AWS Amplify. Configure EC2 instances to cache the website.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 24

A company regularly receives route status updates from its delivery trucks as events in Amazon EventBridge. The company is building an API-based application in a VPC that will consume and process the events to create a delivery status dashboard. The API application must not be available by using public IP addresses because of security and compliance requirements.

How should the company send events from EventBridge to the API application?

A

Create an AWS Lambda function that runs in the same VPC as the API application. Configure the function as an EventBridge target. Use the function to send events to the API.

B

Create an internet-facing Application Load Balancer (ALB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the ALB as an EventBridge target.

C

Create an internet-facing Network Load Balancer (NLB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the NLB as an EventBridge target.

D

Use the application API endpoint in the VPC as a target for EventBridge. Send events directly to the application API endpoint from EventBridge.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 25

A company is designing a new web application that will run on Amazon EC2 Instances. The application will use Amazon DynamoDB for backend data storage. The application traffic will be unpredictable. The company expects that the application read and write throughput to the database will be moderate to high. The company needs to scale in response to application traffic.

Which DynamoDB table configuration will meet these requirements MOST cost-effectively?

A

Configure DynamoDB with provisioned read and write by using the DynamoDB Standard table class. Set DynamoDB auto scaling to a maximum defined capacity.

B

Configure DynamoDB in on-demand mode by using the DynamoDB Standard table class.

C

Configure DynamoDB with provisioned read and write by using the DynamoDB Standard Infrequent Access (DynamoDB Standard-IA) table class. Set DynamoDB auto scaling to a maximum defined capacity.

D

Configure DynamoDB in on-demand mode by using the DynamoDB Standard Infrequent Access (DynamoDB Standard-IA) table class.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 26

A company manages millions of documents in hundreds of Amazon S3 buckets in multiple AWS Regions. The company must determine whether any of the S3 buckets contain personally identifiable information (PII).

Which solution will meet this requirement with the LEAST operational overhead?

A

Use Amazon Detective to detect PII in the S3 buckets.

B

Use AWS Trusted Advisor to generate PII notifications.

C

Use Amazon Macie to detect PII in the S3 buckets.

D

Use AWS Lambda functions to review each file in the S3 buckets to identify PII.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 27

A company has a batch processing application that runs every day. The process typically takes an average 3 hours to complete. The application can handle interruptions and can resume the process after a restart. Currently, the company runs the application on Amazon EC2 On-Demand Instances.

The company wants to optimize costs while maintaining the same performance level.

Which solution will meet these requirements MOST cost-effectively?

A

Purchase a 1-year EC2 Instance Savings Plan for the appropriate instance family and size to meet the requirements of the application.

B

Use EC2 On-Demand Capacity Reservations based on the appropriate instance family and size to meet the requirements of the application. Run the EC2 instances in an Auto Scaling group.

C

Determine the appropriate instance family and size to meet the requirements of the application. Convert the application to run on AWS Batch with EC2 On-Demand Instances. Purchase a 1-year Compute Savings Plan.

D

Determine the appropriate instance family and size to meet the requirements of the application. Convert the application to run on AWS Batch with EC2 Spot Instances.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 28

An ecommerce company hosts a three-tier web application in a VPC. The web tier runs on Amazon EC2 instances in two Availability Zones. The company stores a product catalog and customer sales information in Amazon DynamoDB.

The company's finance team uses a reporting application to generate reports of daily product sales. When the finance team runs the daily reports, a sudden performance decrease affects website customers.

The company wants to improve the performance of the system.

Which solution will meet these requirements with MINIMAL changes to the current architecture?

A

Migrate the application to larger EC2 Instances. Migrate the database to Amazon RDS for MySQL. Configure a read replica of the database in a second Availability Zone.

B

Increase the compute capacity of the EC2 instances. Migrate the database to Amazon ElastiCache (Memcached).

C

Implement DynamoDB Accelerator (DAX).

D

Configure DynamoDB streams.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 29

A company wants to use AWS Direct Connect to connect the company's on-premises networks to the AWS Cloud. The company runs several VPCs in a single AWS Region. The company plans to expand its VPC fleet to include hundreds of VPCs.

A solutions architect needs to simplify and scale the company's network infrastructure to accommodate future VPCs.

Which service or resource will meet these requirements?

A

VPC endpoints

B

AWS Transit Gateway

C

Amazon Route 53

D

AWS Secrets Manager

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 30

A company has a development account that contains Amazon EC2 instances. The company uses the EC2 instances for testing. A recent audit of the development account showed that some developers occasionally forget to stop instances after the tests are finished, which incurs extra costs.

The company wants to optimize costs for the development account. The company wants to use AWS Budgets to implement a budget for the account.

Which solution will meet these requirements?

A

Define an alert in AWS Budgets for when the budget threshold reaches 100% of forecasted costs. Configure AWS Budgets to send an Amazon SNS notification to an AWS Lambda function. Configure the Lambda function to stop the EC2 instances when the function receives a notification.

B

Define an alert in AWS Budgets for when the budget threshold reaches 100% of forecasted costs. Implement an action in the alert to automatically stop the EC2 instances.

C

Define an alert in AWS Budgets for when the budget threshold reaches 100% of the budgeted amount. Create an Amazon EventBridge scheduled rule. Implement an AWS Lambda function to stop the EC2 instances based on the scheduled rule.

D

Define an alert in AWS Budgets for when the budget threshold reaches 100% of the budgeted amount. Implement an action in the alert to automatically stop the EC2 instances.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 31

A video production company stores raw 4K video footage on an Amazon EFS file system by using the EFS Standard storage class. Each video file is around 100 GB- The EFS file system is mounted to an Auto Scaling group of Amazon EC2 instances that transcode the video files.

Editors need to access each file frequently for up to 90 days. After 90 days, the files are rarely needed. However, the files must remain available with sub-second latency for on-demand edit requests.

The company wants to reduce monthly storage costs without any changes to the existing mount points that the editors use.

Which solution will meet these requirements with the LEAST operational overhead?

A

Apply the Transition into IA lifecycle policy to the file system. Configure the policy to move the files that have not been accessed for 90 days.

B

Migrate the video files to an Amazon S3 bucket- Mount the S3 bucket through an Amazon S3 File Gateway. Instruct the editors to download the files from and re-upload the files to the mounted gateway for each edit.

C

Export the video files to an Amazon S3 bucket. Configure an S3 Lifecycle configuration to transition the objects to the S3 Glacier Instant Retrieval storage class after 90 days. Re-mount the objects by using AWS DataSync.

D

Schedule an AWS Lambda function to compress files in place after 90 days. Store the compressed files on the same file system.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 32

A media company uses an Amazon S3 bucket to archive video content. During a cleanup operation, a solutions architect uses the AWS CLI to remove outdated objects from the bucket. The solutions architect encounters a 403 (Access Denied) error message. The solutions architect uses an IAM role that is configured with the following policy:

Which option causes this error?

A

The IAM role is missing the s3:ListBucket operation permission.

B

The IAM role trust policy is missing the required principal declaration.

C

The policy grants insufficient permissions for the DeleteObject operation on the bucket.

D

The deletion request does not originate from the VPC endpoint specified in the policy condition.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 33

A company is deploying a critical application by using Amazon RDS for MySQL. The application must be highly available and must recover The company needs to support interactive users

(transactional queries) and batch reporting (analytical queries) with no more than a 4-hour lag. The analytical queries must not affect the performance of the transactional queries.

Which solution will meet these requirements?

A

Configure Amazon RDS for MySQL in a Multi-AZ DB instance deployment with one standby instance. Point the transactional queries to the primary DB instance. Point the analytical queries to asecondary DB instance that runs in a different Availability Zone.

B

Configure Amazon RDS for MySQL in a Multi-AZ DB cluster deployment with two standby instances. Point the transactional queries to the primary DB instance. Point the analytical queries to thereader endpoint.

C

Configure Amazon RDS for MySQL to use multiple read replicas across multiple Availability Zones. Point the transactional queries to the primary DB instance. Point the analytical queries to one ofthe replicas in a different Availability Zone.

D

Configure Amazon RDS for MySQL as the primary database for the transactional queries with automated backups enabled. Configure automated backups. Each night, create a read-onlydatabase from the most recent snapshot to support the analytical queries. Terminate the previously created database.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 34

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application experiences periodic spikes in malicious traffic attempts from attackers. The application receives mostly SQL injection and cross-site scripting (XSS) attacks from external sources.

The company requires a solution to protect the application from the attacks. The solution must have minimal effect on application performance.

Which solution will meet these requirements?

A

Deploy AWS WAF on the ALB. Configure rules to block malicious traffic activity. Enable AWS Shield Advanced.

B

Use AWS CloudTrail data events to monitor the ALB traffic. Create alerts for suspicious incoming requests. Update the application's security group to drop malicious IP addresses.

C

Install an intrusion detection system (IDS) on each EC2 instance to analyze and block malicious traffic at the host level. Update the ALB to pass all traffic directly to the instances for analysis.

D

Configure a network ACL to drop traffic from known malicious IP ranges. Enable Amazon GuardDuty.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 35

A company is designing a new application that uploads files to an Amazon S3 bucket The uploaded files are processed to extract metadata.

Processing must take less than 5 seconds. The volume and frequency of the uploads vary from a few files each hour to hundreds of concurrent uploads.

Which solution will meet these requirements MOST cost-effectively?

A

Configure AWS CloudTrail trails to log Amazon S3 API calls. Use AWS AppSync to process the files.

B

Configure a new object created S3 event notification within the bucket to invoke an AWS Lambda function to process the files.

C

Configure Amazon Kinesis Data Streams to deliver the files to the S3 bucket. Invoke an AWS Lambda function to process the files.

D

Deploy an Amazon EC2 instance. Create a script that lists all files in the S3 bucket and processes new files. Use a cron job that runs every minute to run the script.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 36

A company is migrating a legacy application from an on-premises data center to AWS. The application relies on hundreds of cron jobs that run between 1 and 20 minutes on different recurring schedules throughout the day.

The company wants a solution to schedule and run the cron jobs on AWS with minimal refactoring. The solution must support running the cron jobs in response to an event in the future.

Which solution will meet these requirements?

A

Create a container image for the cron jobs. Use Amazon EventBridge Scheduler to create a recurring schedule. Run the cron job tasks as AWS Lambda functions.

B

Create a container image for the cron jobs. Use AWS Batch on Amazon ECS with a scheduling policy to run the cron jobs.

C

Create a container image for the cron jobs. Use Amazon EventBridge Scheduler to create a recurring schedule. Run the cron job tasks on AWS Fargate.

D

Create a container image for the cron jobs. Create a workflow in AWS Step Functions that uses a Wait state to run the cron jobs at a specified time. Use the RunTask action to run the cron job tasks on AWS Fargate.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 37

An insurance company wants to migrate an application that calculates insurance premiums to AWS. The company needs to run calculations immediately when a customer submits information through the application. The application usually takes 10 seconds to process a calculation.

A solutions architect needs to develop an architecture on AWS to handle the application.

Which solution will meet this requirement?

A

Set up an Amazon API Gateway HTTP API to receive the data. IJse an AWS Lambda function to process the data immediately,

B

Upload the customer data to an Amazon S3 bucket. Start an Amazon EC2 Spot Instance to process every data upload.

C

Set up AWS Transfer Family to receive the customer data. Configure an Amazon Elastic Kubernetes Service (Amazon EKS) job to process the customer data on a schedule.

D

Upload the data to an Amazon S3 bucket. Invoke an AWS Batch job to process every customer data upload.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 38

A company runs a three-tier web application in a VPC on AWS. The company deployed an application load balancer (ALB) in a public subnet. The web tier and application tier Amazon EC2 instances are deployed in a private subnet. The company uses a self-managed MySQL database that runs on EC2 instances in an isolated private subnet for the database tier.

The company wants a mechanism that will give a DevOps team the ability to use SSH to access all the servers. The company also wants to have a centrally managed log of all connections made to the servers.

Which combination of solutions will meet these requirements with the MOST operational efficiency? (Select TWO.)

A

Create a bastion host in the public subnet. Configure security groups in the public, private, and isolated subnets to allow SSH access.

B

Create an interface VPC endpoint for AWS Systems Manager Session Manager. Attach the endpoint to the VPC.

C

Create an IAM policy that grants access to AWS Systems Manager Session Manager. Attach the IAM policy to the EC2 instances.

D

Create a gateway VPC endpoint for AWS Systems Manager Session Manager. Attach the endpoint to the VPC.

E

Attach an AmazonSSMManagedInstanceCore AWS managed IAM policy to all the EC2 instance roles.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 39

A company stores data in Amazon S3. According to regulations, the data must not contain personally identifiable information (PII). The company recently discovered that S3 buckets have some objects that contain PII. The company needs to automatically detect PII in S3 buckets and to notify the company's security team.

Which solution will meet these requirements?

A

Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and to send an Amazon SNS notification to the security team.

B

Use Amazon GuardDuty. Create an Amazon EventBridge rule to filter the CRITICAL event type from GuardDuty findings and to send an Amazon SNS notification to the security team.

C

Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData:S30bject/Personal event type from Macie findings and to send an Amazon SQS notification to the security team.

D

Use Amazon GuardDuty. Create an Amazon EventBridge rule to filter the CRITICAL event type from GuardDuty findings and to send an Amazon SQS notification to the security team.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 40

A company runs a compute workload on multiple Amazon EC2 Nitro-based instances in the same Availability Zone. Multiple instances must write to the same block storage volume concurrently.

Which solution will meet these requirements?

A

Use General Purpose SSD (gp3) EBS volumes with Amazon EBS Multi-Attach.

B

Use Throughput Optimized HDD (st1) EBS volumes with Amazon EBS Multi-Attach.

C

Use Provisioned IOPS SSD (io2) EBS volumes with Amazon EBS Multi-Attach.

D

Use General Purpose SSD (gp2) EBS volumes with Amazon EBS Multi-Attach.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 41

A company runs a container application by using Amazon Elastic Kubernetes Service (Amazon EKS). The application includes microservices that manage customers and place orders, The company needs to route incoming requests to the appropriate microservices.

Which solution will meet this requirement MOST cost-effectively?

A

use the AWS Load Balancer Controller to provision a Network Load Balancer.

B

Use the AWS Load Balancer Controller to provision an Application Load Balancer,

C

Use an AWS Lambda function to connect the requests to Amazon EKS.

D

Use Amazon API Gateway to connect the requests to Amazon EKS-

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 42

A company wants to deploy a new public web application on AWS. The application includes a web server tier that uses Amazon EC2 instances. The application also includes a database tier that uses an Amazon RDS for MySQL DB instance.

The application must be secure and accessible for global customers that have dynamic IP addresses.

How should a solutions architect configure the security groups to meet these requirements?

A

Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.

B

Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.

C

Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the IP addresses of the customers.

D

Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from 0.0.0.0/0.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 43

A company plans to launch Amazon EC2 instances that run Microsoft Windows Server. The company requires that all Windows instances be joined to a dedicated Active Directory domain that the company will host in the AWS Cloud. Authorized user identities from the on-premises Active Directory domain must be able to access the EC2 instances. Users from the Active Directory on AWS must not be able to authenticate to on-premises resources.

Which solution will meet these requirements?

A

Deploy an AD Connector on AWS. Join the AD Connector to the on-premises Active Directory domain. Join the EC2 instances to the AD connector by using the Seamless Domain Join feature of AWS Directory Service.

B

Deploy an AWS Managed Microsoft AD instance on AWS. Configure a one-way outgoing forest trust relationship to the on-premises Active Directory. Join the EC2 instances to the AWS Managed Microsoft AD instance.

C

Deploy an AWS Managed Microsoft AD instance on AWS. Configure a two-way forest trust relationship between the AWS Managed Microsoft AD instance and the on-premises Active Direction. Join the EC2 instances to the AWS Managed Microsoft AD instance.

D

Deploy an AWS Managed Microsoft AD instance on AWS- Deploy an AD Connector- Join the AWS Managed Microsoft AD instance to the AWS Managed AD. Join the EC2 instances to the AD connector by using the Seamless Domain Join feature of AWS Directory Service.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 44

A company is securing its Amazon RDS for MySQL instances. The security team needs to capture all configuration changes and all administrative actions. The security team is the only team that is permitted to view the logs.

Which solution will meet these requirements?

A

Configure VPC flow logs in the VPC where the RDS for MySQL instances are deployed. Send the VPC flow logs to an Amazon S3 bucket Create an IAM policy that grants the security team read access to the S3 bucket.

B

In Amazon RDS, enable Enhanced Monitoring. Export the monitoring data to an Amazon CloudWatch Logs log group, Create an IAM policy that grants the security team read access to the log group.

C

Use AWS CloudTrail to capture the logs. Store the CloudTrail logs in an Amazon S3 bucket. Create an IAM policy that grants the security team read access to the S3 bucket.

D

In Amazon RDS, enable AWS Trusted Advisor. Export the monitoring data to an Amazon CloudWatch Logs log group. Create an IAM policy that grants the security team read access to the log group.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 45

A company runs a web application in an Amazon EC2 Auto Scaling group. The application runs during business hours only. The company cannot allow interruptions to the application during business hours.

The company wants to optimize compute costs for the application based on the application's usage pattern.

Which solution will meet this requirement with the LEAST operational overhead?

A

Manually terminate the instances during non-business hours. Manually launch new instances during business hours.

B

Create a scheduled scaling policy for the Auto Scaling group. Configure the policy to scale out during business hours and to scale in during non-business hours.

C

Use Amazon EC2 Spot Instances in the Auto Scaling group.

D

Purchase Amazon EC2 Reserved Instances on a 1-year term to handle the maximum expected load for the Auto Scaling group.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 46

A company has an application that processes information from documents that users upload. When a user uploads a new document to an Amazon S3 bucket, an AWS Lambda function is invoked and processes the document.

The company discovers that the application did not process some of the uploaded documents because of document formatting errors. The company wants to ensure that the application finalizes processing all

documents as soon as possible, even if errors are encountered during document processing. Which solution will meet these requirements?

A

Create an Amazon API Gateway REST API that has a proxy integration to the Lambda function. Update the application to send requests to the REST API instead of calling the Lambda function directly.

B

Configure a replication policy on the S3 bucket to copy the documents to another S3 bucket. Configure an AWS Batch job to process the second S3 bucket documents on a daily schedule.

C

Increase the timeout parameter for the Lambda function to the maximum. Modify the Lambda function code to implement the retry mechanism with exponential backoff to handle the errors.

D

Configure an Amazon Simple Queue Service (Amazon SQS) queue as the event source for a second Lambda function. Configure the second Lambda function to invoke an AWS Step Functions workflow to handle document errors. Modify the original Lambda function to put failed executions as events into the queue.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 47

A healthcare company needs a storage solution for electronic health records (EHRs). The company must store the EHRs for at least 10 years to comply with regulations. The company rarely accesses the records. The records must be secure, immutable, and retrievable within a few hours when needed.

Which solution will meet these requirements in the MOST cost-effective way?

A

Store the records in Amazon S3 Standard. Enable Server-side encryption with Amazon S3 managed keys (SSE-S3) and S3 Versioning.

B

Store the records in Amazon S3 Glacier Flexible Retrieval. Configure S3 Object Lock and set a retention period of 10 years.

C

Store the records in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Configure an S3 Lifecycle policy to remove records after 10 years.

D

Store the records in Amazon S3 Intelligent-Tiering. Configure automatic archiving to the Archive Access tier.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 48

A company runs an application on Amazon EC2 instances that have instance store volumes attached. The application uses Amazon EFS to store files that are shared across a cluster of Linux servers. The shared files are at least 1 GB in size.

The company accesses the files often for the first 7 days after creation. The files must remain readily available after the first 7 days. The company wants to optimize costs for the application.

Which solution will meet these requirements?

A

Configure an AWS Storage Gateway Amazon S3 File Gateway to cache frequently accessed files locally. Store older files in Amazon S3.

B

Move the files from Amazon EFS, and store the files locally on each EC2 instance.

C

Configure a lifecycle policy to move the files to the EFS Infrequent Access (IA) storage class after 7 days.

D

Deploy AWS DataSync to automatically move files older than 7 days to Amazon S3 Glacier Deep Archive.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 49

A company is migrating a document management application to AWS- The application runs on Linux servers. The company will migrate the application to Amazon EC2 instances in an Auto Scaling group. The company stores 7 TIB of documents in a shared storage file system- An external relational database tracks the documents.

Documents are stored once and can be retrieved multiple times for reference at any time. The company cannot modify the application during the migration. The storage solution must be highly available and must support scaling over time.

Which solution will meet these requirements MOST cost-effectively?

A

Deploy an EC2 instance with enhanced networking as a shared NFS storage system. Export the NFS share. Mount the NFS share on the EC2 instances in the Auto Scaling group.

B

Create an Amazon S3 bucket that uses the S3 Standard-Infrequent Access (S3 Standard-IA) storage class- Mount the S3 bucket on the EC2 instances in the Auto Scaling group.

C

Deploy an SFTP server endpoint by using AWS Transfer for SFTP and an Amazon S3 bucket, Configure the EC2 instances in the Auto Scaling group to connect to the SFTP server.

D

Create an Amazon EFS file system with mount points in multiple Availability Zones. Use the EFS Standard-infrequent Access (Standard-IA) storage class. Mount the NFS share on the EC2 instances in the Auto Scaling group.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 50

An online video streaming platform distributes content by using origin servers hosted on Amazon EC2 instances. The platform needs to use Amazon Route 53 to return IP addresses for all origin servers that pass health checks.

Which routing policy will meet these requirements?

A

Simple routing policy

B

Latency routing policy

C

Multivalue routing policy

D

Geolocation routing policy

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 51

A company runs an application that stores and shares photos. Users upload the photos to an Amazon S3 bucket Every day, users upload approximately 150 photos. The company wants to design a solution that creates a thumbnail of each new photo and stores the thumbnail in a second S3 bucket.

Which solution will meet these requirements MOST cost-effectively?

A

Configure an Amazon EventBridge scheduled rule to invoke a script every minute on a long-running Amazon EMR cluster. Configure the script to generate thumbnails for the photos that do not have thumbnails. Configure the script to upload the thumbnails to the second S3 bucket.

B

Configure an Amazon EventBridge scheduled rule to invoke a script every minute on a memory-optimized Amazon EC2 instance that is always on. Configure the script to generate thumbnails for the photos that do not have thumbnails. Configure the script to upload the thumbnails to the second S3 bucket.

C

Configure an S3 event notification to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to the second S3 bucket.

D

Configure S3 Storage Lens to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to a second S3 bucket.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 52

A company is designing a new ecommerce application for a high-traffic retail website. The application needs to process a large volume of customer orders. The application must scale to handle spikes in order volume during peak shopping events. Which solution will meet these requirements?

A

Use a single large Amazon EC2 instance to run processing logic and to store order information. Run a relational database on the same EC2 instance.

B

Use a single Amazon EC2 instance to run processing logic. Control the flow of orders into the EC2 instance by using an Amazon SQS queue. Use an Amazon S3 bucket to store order information.

C

Use an Amazon API Gateway HTTP API and an AWS Lambda function to process orders. Use Amazon DynamoDB in on-demand mode to store order information.

D

Use an Application Load Balancer (ALB) to distribute order processing traffic across multiple Amazon EC2 instances that run processing logic. Use Amazon Aurora with multiple reader nodes as the database.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 53

A company has recently migrated to AWS. The company runs an application on multiple Amazon EC2 instances in an Auto Scaling group. The EC2 instances span multiple Availability Zones. Users connect to the application through an Application Load Balancer (ALB).

Amazon CloudWatch metrics report that the CPU usage for all the instances surges to 99% when users log in between 8 am and 9 am every workday. The usage surge causes performance issues and application errors.

The company wants to ensure that the application is able to handle the peak usage without disruption to the application.

Which solution will meet these requirements?

A

Configure an auto scaling policy based on the CPIJ UtiIization metric to scale out at 99%,

B

Configure Amazon CloudFront in front of the ALB.

C

Configure a scheduled scaling policy to scale the EC2 instances based on peak usage times.

D

Configure Amazon ElastiCache to reduce the load on the EC2 instances-

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 54

A company hosts an online order processing application on Amazon EC2 instances- The instances are part of an EC2 Auto Scaling group that spans multiple Availability Zones and uses a scheduled scaling policy. The application uses Amazon RDS for MySQL as its database.

Though the database is write heavy, Amazon CloudWatch metrics do not show any problems during peak usage times. However, application users randomly experience slow responses when creating new orders.

Which solution will improve the application's response time without changing the application design or infrastructure?

A

Replace the EC2 instances With EC2 Dedicated Hosts in a cluster placement group.

B

Migrate the database from Amazon RDS for MySQL to Amazon DynamoDB.

C

Change the Auto Scaling policy from scheduled scaling to target tracking.

D

Deploy an Amazon ElastiCache (Memcached) cache in front of the database.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 55

A company’s application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases that are deployed in an Amazon VPC. The company wants to capture information about traffic to and from the network interfaces in near real time in its Amazon VPC. The company wants to send the information to Amazon OpenSearch Service for analysis.

Which solution will meet these requirements?

A

Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Streams to stream the logs from the log group to OpenSearch Service.

B

Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Data Firehose to stream the logs from the log group to OpenSearch Service.

C

Create a trail in AWS CloudTrail. Configure VPC Flow Logs to send the log data to the trail. Use Amazon Kinesis Data Streams to stream the logs from the trail to OpenSearch Service.

D

Create a trail in AWS CloudTrail. Configure VPC Flow Logs to send the log data to the trail. Use Amazon Data Firehose to stream the logs from the trail to OpenSearch Service.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 56

A company uses AWS to run its ecommerce platform. The platform is critical to the company's operations and has a high volume of traffic and transactions. The company configures a murti-factor authentication (MFA) device to secure its AWS account root user credentials. The company wants to ensure that it will not lose access to the root user account if the MFA device is lost.

Which solution will meet these requirements?

A

Set up a backup administrator account that the company can use to log in if the company loses the MFA device.

B

Add multiple MFA devices for the root user account to handle the disaster scenario.

C

Create a new administrator account when the company cannot access the root account

D

Attach the administrator policy to another IAM user when the company cannot access the root account.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 57

A company needs to archive an on-premises relational database. The company wants to retain the data. The company needs to be able to run SQL queries on the archived data to create annual reports. Which solution will meet these requirements with the LEAST operational overhead?

A

Use AWS DMS to migrate the on-premises database to an Amazon RDS instance. Retire the on-premises database. Maintain the RDS instance in a stopped state until the data is needed for reports.

B

Set up database replication from the on-premises database to an Amazon EC2 instance. Retire the on-premises database. Make a snapshot of the EC2 instance. Maintain the EC2 instance in a stopped state until the data is needed for reports.

C

Create a database backup on premises. Use AWS DataSync to transfer the data to Amazon S3. Create an S3 Lifecycle configuration to move the data to S3 Glacier Deep Archive. Restore the backup to Amazon EC2 instances to run reports.

D

Use AWS DMS to migrate the on-premises databases to Amazon S3 in Apache Parquet format. Store the data in S3 Glacier Flexible Retrieval. Use Amazon Athena to run reports.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 58

A company operates a web application in the us-east-I Region that uses Amazon EC2 instances behind an Application Load Balancer. The application uses an Amazon Aurora MySQL database and takes 15 minutes to start.

The company needs to implement a disaster recovery (DR) solution in the us-west-2 Region. The solution must have a recovery time objective (RTO) of 30 minutes and a recovery point objective (RPO) of 30 minutes. The solution must minimize costs.

Which solution will meet these requirements?

A

Use an Aurora global database to replicate data to us-west-2. Maintain Amazon Machine Images (AMIS) in us-west-2 for the application tier. Create AWS CloudFormation templates to deploy the EC2 instances, Application Load Balancer, and associated networking components in us-west-2

B

Create daily backups of the Aurora MySQL database and copy them to us-west-2. Implement a scheduled AWS Lambda function that launches EC2 instances from Amazon Machine Images (AMIS) in us-west-2 once each day to test readiness. Configure the Lambda function to terminate the EC2 instances after testing.

C

Implement cross-Region VPC peering between us-east-I and us-west-2. Configure a standby Aurora MySQL database in us-west-2 by using snapshot-based replication that is scheduled hourly. Maintain a single EC2 instance that runs continuously in us-west-2 as a placeholder for the application tier.

D

Set up AWS Elastic Disaster Recovery to continuously replicate EC2 instances to us-west-2. Use Amazon S3 Cross-Region Replication (CRR) for static assets. Schedule Aurora snapshots to be taken every hour and automatically restored to a staging database in us-west-2-

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 59

A company uses Amazon Neptune and an AWS Lambda function as part of a fraud detection solution The company has additional Neptune database clusters that are not part of the fraud detection solution.

The fraud detection Lambda function must follow the principle of least privilege to access the fraud detection data in the Neptune database.

Which solution will meet these requirements?

A

Add a custom IAM policy to the Lambda function's execution role. Configure the policy to allow the neptune-db:connect action. Specify the Neptune clusters Amazon Resource Name (ARN) as the resource.

B

Attach the AmazonNeptuneFullAccess managed policy to the Lambda function's execution role.

C

Create a custom inline IAM policy. Configure the policy to include 'Action: and 'Resource: Add the policy to the Lambda function's execution role.

D

Add a custom IAM policy to the Lambda function's execution role, Configure the policy to allow the rds.db:connect action, Specify the Neptune cluster's Amazon Resource Name (ARN) as the resource.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 60

A solutions architect needs to design a high-traffic static website. The website must be highly available and must provide the lowest possible latency to users across the globe.

Which solution will meet these requirements?

A

Create an Amazon S3 bucket, and upload the website content to the S3 bucket. Create an Amazon CloudFront distribution in each AWS Region, and set the S3 bucket as the origin. Use Amazon Route 53 to create a DNS record that uses a geolocation routing policy to route traffic to the correct CloudFront distribution based on where the request originates.

B

Create an Amazon S3 bucket, and upload the website content to the S3 bucket. Create an Amazon CloudFront distribution, and set the S3 bucket as the origin. Use Amazon Route 53 to create an alias record that points to the CloudFront distribution.

C

Create an Application Load Balancer (ALB) and a target group. Create an Amazon EC2 Auto Scaling group with at least two EC2 instances in the associated target group. Store the website content on the EC2 instances. Use Amazon Route 53 to create an alias record that points to the ALB.

D

Create an Application Load Balancer (ALB) and a target group in two Regions. Create an Amazon EC2 Auto Scaling group in each Region with at least two EC2 instances in each target group. Store the website content on the EC2 instances. Use Amazon Route 53 to create a DNS record that uses a geolocation routing policy to route traffic to the correct ALB based on where the request originates.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 61

A company is planning to deploy a business-critical application in the AWS Cloud. The application requires durable storage with consistent, low-latency performance.

A

Instance store volume

B

Amazon ElastiCache (Memcached) cluster

C

Provisioned IOPS SSD Amazon Elastic Block Store (Amazon EBS) volume

D

Throughput Optimized HDD Amazon Elastic Block Store (Amazon EBS) volume

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 62

An ecommerce company hosts an application on AWS across multiple Availability Zones- The application experiences uniform load throughout most days.

The company hosts some components of the application in private subnets, The components need to access the internet to install and update patches A solutions architect needs to design a cost effective solution that provides secure outbound Internet connectivity for private subnets across multiple Availability Zones. The solution must maintain high availability

Which solution will meet these requirements?

A

Deploy one NAT gateway in each Availability Zone, Configure the route table for each private subnet within an Availability Zone to route outbound traffic through the NAT gateway in the same Availability Zone.

B

Place one NAT gateway In a designated Availability Zone within the VPC. Configure the route tables of the private subnets In each Availability Zone to direct outbound traffic specifically through the NAT gateway for internet access

C

Deploy an Amazon EC2 instance in a public subnet. Configure the EC2 instance as a NAT instance. Set up the instance with security groups that allow inbound traffic from private subnets and outbound Internet access. Configure route tables to direct traffic from the private subnets through the NAT Instance.

D

Use one NAT Gateway in a Network Load Balancer (NLB) target group. Configure private subnets In each Availability Zone to route traffic to the NLB for outbound internet access-

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 63

A company has a legacy .NET Framework application that runs on Windows Server 2012. The company wants to migrate the application to AWS. The company cannot rewrite code or update to the most recent version of the .NET Framework. The company needs to use AWS managed services to minimize operational responsibilities.

Which solution will meet these requirements with the LEAST administrative overhead?

A

Use AWS Migration Hub Orchestrator to containerize the .NET application. Use Amazon ECS to deploy the application.

B

Use AWS Lambda functions to run the application by using .NET libraries.

C

Use an Amazon Machine Image (AMI) to deploy Amazon EC2 instances that run the most recent version of Windows Server, Run the application on the EC2 instances,

D

Use AWS Application Migration Service to convert the application to the most recent version of the .NET Framework. Use Amazon ECS to deploy the application.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 64

A company has a three-tier web application that processes orders from customers. The web tier consists of Amazon EC2 instances behind an Application Load Balancer. The processing tier consists of EC2 instances. The company decoupled the web tier and processing tier by using Amazon SQS. The storage layer uses Amazon DynamoDB.

At peak times, some users report order processing delays and halts. The company has noticed that during these delays, the EC2 instances are running at 100% CPU usage, and the SQS queue fills up. The peak times are variable and unpredictable.

The company needs to improve the performance of the application,

Which solution will meet these requirements?

A

Use scheduled scaling for Amazon EC2 Auto Scaling to scale out the processing tier instances for the duration of peak usage times. Use the CPUUtilization metric to determine when to scale.

B

Use Amazon ElastiCache (Redis OSS) in front of the DynamoDB backend tier. Use target utilization as a metric to determine when to scale.

C

Add an Amazon CloudFront distribution to cache the responses for the web tier. Use HTTP latency as a metric to determine when to scale.

D

Use an Amazon EC2 Auto Scaling target tracking policy to scale out the processing tier instances. Use the ApproximateNumberOfMessages attribute to determine when to scale.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 65

A company runs multiple web applications on Amazon EC2 instances behind a single Application Load Balancer (ALB). The application experiences unpredictable traffic spikes throughout each day. The traffic spikes cause high latency. The unpredictable spikes last less than 3 hours.

The company needs a solution to resolve the latency issue caused by traffic spikes.

Which solution will meet this requirement?

A

Use EC2 instances in an Auto Scaling group. Configure the ALB and Auto Scaling group to use a target tracking scaling policy.

B

Use EC2 Reserved Instances in an Auto Scaling group. Configure the Auto Scaling group to use a scheduled scaling policy based on peak traffic hours.

C

Use EC2 Spot Instances in an Auto Scaling group. Configure the Auto Scaling group to use a scheduled scaling policy based on peak traffic hours.

D

Use EC2 Reserved Instances in an Auto Scaling group. Replace the ALB with a Network Load Balancer (NLB).

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 66

An ecommerce company is redesigning a web application to run on the AWS Cloud. The application needs to store static website content and must use a Microsoft SQL Server database to store customer data. The company needs to deploy the application in a resilient way across multiple Availability Zones.

Which solution will meet these requirements?

A

Use an Amazon S3 bucket to store static content. Deploy an Amazon RDS Custom for SQL Server DB instance for the database.

B

Use an Amazon S3 bucket to store static content. Create an Amazon RDS for SQL Server Multi-AZ deployment for the database.

C

Create an Amazon Elastic Block Store (Amazon EBS) Multi-Attach volume to store static content. Deploy an Amazon RDS for SQL Server DB instance for the database.

D

Create an Amazon Elastic Block Store (Amazon EBS) Multi-Attach volume to store static content. Deploy SQL Server on two Amazon EC2 instances in separate Availability Zones.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 67

A solutions architect needs to build a log storage solution for a client. The client has an application that produces user activity logs that track user API calls to the application. The application typically produces 50 GB of logs each day. The client needs a storage solution that makes the logs available for occasional querying and analytics. Which solution will meet these requirements in the MOST cost-effective way?

A

Store user activity logs in an Amazon S3 bucket. Use Amazon Athena to perform queries and analytics.

B

Store user activity logs in an Amazon OpenSearch Service cluster. Use OpenSearch Dashboards to perform queries and analytics.

C

Store user activity logs in an Amazon RDS instance. Use an Open Database Connectivity (ODBC) connector to perform queries and analytics.

D

Store user activity logs in an Amazon CloudWatch Logs log group. Use CloudWatch Logs Insights to perform queries and analytics.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 68

A large company requires a data backup strategy. The solution must replicate long-term backups from a source AWS account to a dedicated backup AWS account.

All backups must be encrypted. The encryption keys must be available for both encryption and decryption operations in the source account and the backup account Only specific AWS accounts, resource, and users must have access permissions for the encryption keys.

Which solution will meet these requirements?

A

Deploy a third-party encryption solution from the AWS Marketplace in the source account to manage the encryption keys. Create an AWS Lambda function that is invoked by a custom event to replicate backups to the backup account.

B

Use AWS-managed AWS KMS keys that have default policies for encryption. Create an AWS Lambda function that is invoked by AWS Backup events that have a status of COMPLETED in Amazon EventBridge. Configure the function to replicate backups to the backup account.

C

Deploy an AWS CloudHSM cluster in the source account to manage the encryption keys. Create an AWS Lambda function that is invoked by AWS Backup events that have a status of COMPLETED in Amazon EventBridge. Configure the function to replicate backups to the backup account.

D

Use customer-managed AWS KMS keys that have appropriate policies attached in both the source account and the backup account. Configure AWS Backup to automate the backup and replication process.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 69

A company hosts a PostgreSQL database on an Amazon EC2 instance. Database usage has increased recently. Users are experiencing higher latency during queries on the database.

The company needs to update the database to reduce latency for users, The new solution must achieve a recovery time objective (RTO) and a recovery point objective (RPO) of less than 5 minutes, The company also wants to deploy the database to multiple AWS Regions to meet new availability requirements.

Which solution will meet these requirements?

A

Use AWS Backup to automatically create backups of the EC2 instance. In the event of a database failure, use the backups to restore the EC2 instance to a second Region.

B

Use AWS DMS to migrate the database to an Amazon Aurora PostgreSQL database. Configure the Aurora database as a global database. Set the Aurora parameter group RPO setting to 60 seconds. In the event of a database failure, promote a secondary database in a second Region automatically.

C

Use AWS Elastic Disaster Recovery service to replicate the EC2 instance to a second Region. In the event of a database failure, use the Elastic Disaster Recovery dashboard to perform a failover.

D

Use AWS DMS to migrate the database to Amazon RDS for PostgreSQL. Create cross-Region read replicas in the Regions where most users are located. In the event of a database failure, manually promote a read replica to become the primary database-

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 70

A company needs a data encryption solution for a machine learning (ML) process. The solution must use an AWS managed service. The ML process currently reads a large number of objects in Amazon S3 that are encrypted by a customer-managed AWS KMS key. The current process incurs significant costs because of excessive calls to AWS KMS to decrypt S3 objects. The company wants to reduce the costs of API calls to decrypt S3 objects.

Which solution will meet these requirements?

A

Switch from a customer managed KMS key to an AWS managed KMS key.

B

Remove the AWS KMS encryption from the S3 bucket. Use a bucket policy to encrypt the data instead.

C

Recreate the KMS key in AWS CloudHSM.

D

Use S3 Bucket Keys to perform server-side encryption with AWS KMS keys (SSE-KMS) to encrypt and decrypt objects from Amazon S3.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 71

A company creates a VPC that has one public subnet and one private subnet. The company attaches an internet gateway to the VPC. An Application Load Balancer (ALB) in the public subnet communicates with Amazon EC2 instances in the private subnet.

The EC2 instances in the private subnet must be able to download operating system (OS) and application updates from the internet. The instances must not be accessible from the internet.

Which combination of steps will meet these requirements? (Select THREE.)

A

Associate an Elastic IP address with the NAT gateway.

B

Add a route of 0.0.0.0/0 to the private subnet route table. Set the NAT gateway as a target.

C

Deploy a NAT gateway in the public subnet

D

Deploy a NAT gateway in the private subnet.

E

Add a route of 0.0.0.0/0 to the public subnet route table. Set the NAT gateway as a target

F

Associate an Elastic IP address with the internet gateway.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 72

A company is building a suite of RESTful microservices that will be exposed through public endpoints. The company requires a scalable solution to ensure that the microservices handle sudden traffic spikes from global users, minimize latency, and offload requests from the backend microservices.

Which solution will meet these requirements?

A

Deploy the microservices on Amazon EC2 instances in a spread placement group. Assign Elastic IP addresses to the instances. Expose the microservices through Regional public endpoints.

B

Create an Amazon API Gateway REST API. Deploy the microservices on Amazon EC2 instances and integrate the microservices as the API backend. Create an accelerator in AWS Global Accelerator and set the REST API as the endpoint.

C

Create an Amazon API Gateway REST API. Deploy the microservices to AWS Lambda functions and integrate the microservices with the REST API. Create an Amazon CloudFront distribution and set the REST API as the origin.

D

Create an Amazon API Gateway REST API. Deploy the microservices to AWS Lambda functions and integrate the microservices with the REST API. Use Regional endpoints that use standard routing.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 73

A company runs game applications on AWS. The company needs to collect, visualize, and analyze telemetry data from the company's game servers. The company wants to gain insights into the behavior, performance, and health of game servers in near real time.

Which solution will meet these requirements?

A

Use Amazon Kinesis Data Streams to collect telemetry data. Use Amazon Managed Service for Apache Flink to process the data in near real time and publish custom metrics to Amazon CloudWatch. Use Amazon CloudWatch to create dashboards and alarms from the custom metrics.

B

Use Amazon Data Firehose to collect, process, and store telemetry data in near real time. Use AWS Glue to extract, transform, and load (ETL) data from Firehose into required formats for analysis. Use Amazon Quick Sight to visualize and analyze the data.

C

Use Amazon Kinesis Data Streams to collect, process, and store telemetry data. Use Amazon EMR to process the data in near real time into required formats for analysis. Use Amazon Athena to analyze and visualize the data.

D

Use Amazon DynamoDB Streams to collect and store telemetry data. Configure DynamoDB Streams to invoke AWS Lambda functions to process the data in near real time. Use Amazon Managed Grafana to visualize and analyze the data.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 74

A company runs catalog, inventory, and checkout microservices on Amazon EKS. The company needs to route incoming HTTPS requests to the appropriate microservice based on the URL path.

Which solution will meet these requirements MOST cost-effectively?

A

Use the AWS Load Balancer Controller to provision a Network Load Balancer.

B

Use the AWS Load Balancer Controller to provision an Application Load Balancer.

C

Use an AWS Lambda function to connect the requests to Amazon EKS.

D

Use Amazon API Gateway to connect the requests to Amazon EKS.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 75

A company has an application that runs on Amazon EC2 instances in an Auto Scaling group. The application uses hardcoded credentials to access an Amazon RDS database. To comply with new regulations, the company needs to automatically rotate the database password for the application service account every 90 days.

Which solution will meet these requirements?

A

Create an AWS Lambda function to generate new randomized passwords. Configure an Amazon EventBridge rule to invoke the Lambda function every 90 days. Configure the Lambda function to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.

B

Create a secret for the database credentials in AWS Secrets Manager Schedule an AWS Lambda function in Secrets Manager to rotate the secret every 90 days. Modify the application to read the database credentials from Secrets Manager

C

Create a new Amazon ECS task to generate new randomized passwords. Configure the task to launch every 90 days. Configure the task to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.

D

Create a new EC2 instance that runs a cron job every 90 days. Use the cron job to generate new randomized passwords. Configure the new EC2 instance to upload a JSON file that contains the now password to the existing EC2 instances by using SSH.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 76

A company is building an ecommerce platform that will allow customers to place orders online. Customer traffic varies significantly. An order-processing microservice is running on a group of Amazon EC2 instances. A solutions architect must ensure that the application remains responsive and decoupled from the frontend. The application must also be able to reprocess orders that the application fails to process on the first attempt. Which solution will meet these requirements?

A

Deploy an Application Load Balancer in front of the order-processing microservice. Configure the Amazon EC2 instances to scale out automatically based on CPU utilization metrics as traffic increases.

B

Deploy an Amazon SQS queue to integrate the frontend and the order-processing microservice. Configure the EC2 instances to process messages from the queue.

C

Establish direct HTTPS connections from the frontend to the microservice. Use a dynamically expanding thread pool to handle concurrency at the microservice layer.

D

Use Amazon Kinesis Data Streams to ingest all order requests from the frontend. Configure the Amazon EC2 instances to continuously poll the stream and process orders in near real time.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 77

A solutions architect needs to design a disaster recovery (DR) plan for an application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database. The recovery time objective (RTO) and recovery point objective (RPO) are 15 minutes each.

Which combination of steps should the solutions architect take to meet these requirements MOST cost-effectively? (Select TWO.)

A

Configure Aurora backups to be exported to the DR Region,

B

Configure the Aurora cluster to replicate data to the DR Region by using the Aurora global database option.

C

Configure the DR Region with an ALB and an Auto Scaling group, IJse the same configuration as in the primary Region,

D

Configure the DR Region with an ALB and an Auto Scaling group. Set the Auto Scaling group's minimum capacity, maximum capacity, and desired capacity to

E

Manually launch a new ALB and a new Auto Scaling group by using AWS CloudFormation during a failover activity.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 78

A software company recently modernized its video processing application to run on containers. Depending on the video length and quality, the video processing jobs could take 1 hour or more to finish The video processing jobs are expected to serve thousands of requests each second.

Which solution will meet these requirements with the LEAST operational overhead?

A

Install Kubernetes on a fleet of Amazon EC2 instances. Deploy the application.

B

Run the application by using AWS Lambda functions that use a container image.

C

Deploy the application on Amazon ECS containers that run on AWS Fargate.

D

Deploy the application on Amazon EC2 instances that run on an AWS Outposts rack.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 79

A company runs an SMB file server in an on-premises data center. The file server is running out of storage space. The company wants to migrate the SMB file server to AWS,
The company accesses files frequently for up to 7 days after creation. After 7 days, the company wants to move the files to storage that provides a maximum standard retrieval time of 24 hours.
Which solution will meet these requirements?

A

Use AWS DataSync to copy data that is older than 7 days from the SMB file server to AWS.

B

Create an Amazon S3 File Gateway that uses the SMB protocol. Create an S3 Lifecycle configuration to transition the data to S3 Glacier Deep Archive after 7 days.

C

Create an AWS Storage Gateway Volume Gateway. Configure a cached volume, Create an Amazon S3 Lifecycle configuration to transition the data to an Amazon S3 bucket after 7 days.

D

Configure access to Amazon S3 for each user. Create an S3 Lifecycle configuration to transition the data to S3 Glacier Flexible Retrieval after 7 days.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 80

A solutions architect is designing a workload that will store hourly energy consumption by business tenants in a building. The sensors will feed a database through HTTP requests that will add up usage for each tenant.

The solutions architect must use managed services when possible. The workload will receive more features in the future as the solutions architect adds independent components.

Which solution will meet these requirements with the LEAST operational overhead?

A

Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in an Amazon DynamoDB table.

B

Use an Application Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon S3 bucket to store the processed data.

C

Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in a Microsoft SQL Server Express database on an Amazon EC2 instance.

D

Use an Application Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon EFS shared file system to store the processed data.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 81

A company uses AWS to run its workloads. The company uses AWS Organizations to manage its accounts. The company needs to identify which departments are responsible for specific costs.

New accounts are constantly created in the Organizations account structure. The Organizations continuous integration and continuous delivery (CIICD) framework already adds the populated department tag to

the AWS resources. The company wants to use an AWS Cost Explorer report to identify the service costs by department from all AWS accounts.

Which combination of steps will moot these requirements with the MOST operational efficiency? (Select TWO.)

A

Activate the aws:createdBy cost allocation tag and the department cost allocation tag in the management account.

B

Create a new cost and usage report in Cost Explorer Group by the department allocation tag. Apply a filter to see all linked accounts and services.

C

Activate only the department cost allocation tag in the management account

D

Create a new cost and usage report in Cost Explorer Group by the department cost allocation tag without any other filters.

E

Activate only the aws:createdBy cost allocation tag in the management account.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 82

A company provides an API interface to customers so the customers can retrieve their financial information. The company expects a larger number of requests during peak usage times of the year.

The company requires the API to respond consistently with low latency to ensure customer satisfaction. The company needs to provide a compute host for the API.

Which solution will meet these requirements with the LEAST operational overhead?

A

Use an Application Load Balancer and Amazon ECS.

B

Use Amazon API Gateway and AWS Lambda functions with provisioned concurrency.

C

Use an Application Load Balancer and an Amazon EKS cluster.

D

Use Amazon API Gateway and AWS Lambda functions with reserved concurrency.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 83

A company runs several AWS Lambda functions in the same AWS Region. The company notices that some calls to the Lambda functions are throttling. A business-critical function named Function A runs 100 times each second, for an average of 7 seconds. Other Lambda functions that run in the same AWS account exceed the default quota. The quota is 1,000 concurrent invocations across all functions in the same Region.

A solutions architect needs to resolve the throttling issue for Function A within the account. The solutions architect must ensure that Function A meets its demands without impacting the other functions.

Which combination of configurations will meet these requirements with the LEAST operational overhead? (Select TWO.)

A

Set the reserved concurrency for Function A to 700.

B

Migrate Function A to another AWS account.

C

Set the provisioned concurrency for Function A to 700,

D

Increase the account's Lambda concurrency quota.

E

Migrate Lambda functions other than Function A to another AWS account.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 84

A company recently migrated an application to AWS. The application runs on Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones, The application stores data in an Amazon EFS file system that uses the EFS Infrequent Access (IA) storage class. The application indexes the company's files that are accessed

fewer than four times a year. The index is stored in an Amazon RDS for MySQL database.

The company wants to make some application and services changes to optimize storage costs.

Which solution will meet these requirements MOST cost-effectively?

A

Create an Amazon S3 bucket. Copy all the files to the S3 bucket. Configure the files to be stored in the S3 Intelligent-Tiering storage class. Update the application to use the Amazon S3 API to store and retrieve the files.

B

Deploy Amazon FSx for Windows File Server file shares. Update the application to use the Common Internet File System (CIFS) protocol to store and retrieve files.

C

Deploy Amazon FSx for OpenZFS file system shares. Update the application to use the new mount point to store and retrieve files.

D

Create an Amazon S3 bucket. Copy all the files to the S3 bucket. Configure the files to be stored in the S3 Glacier Instant Retrieval storage class. Update the application to use the Amazon S3 API to store and retrieve files as standard retrievals.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 85

A solutions architect manages a web application for a company. The application runs on Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group configuration includes a minimum of 3 instances and a maximum of 300 instances. The maximum helps handle unpredictable, short-lived traffic surges.
The application must scale to meet demand. However, to help manage cost, the number of running instances should not exceed 180 for longer than I continuous hour.
Which solution will meet these requirements?

A

Use a scheduled scaling policy. Set the maximum capacity of the Auto Scaling group to 180 during peak hours. Set the maximum capacity to 300 during non-peak hours.

B

Configure a target tracking scaling policy that scales based on average CPU utilization. Add an Amazon CloudWatch alarm to terminate instances after 1 hour when capacity exceeds 180.

C

Set the maximum instance lifetime of the Auto Scaling group to 1 hour to force the replacement of instances when capacity exceeds 180.

D

Add a step scaling policy that uses an Amazon CloudWatch alarm. Trigger the alarm when the Auto Scaling group includes more than 180 instances for longer than 1 hour. Configure the alarm to set the maximum size of the group to 180 when triggered.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 86

A company runs an application on premises. The application needs to periodically upload large files to an Amazon S3 bucket. A solutions architect needs a solution to provide the application with short-lived authenticated access to the S3 bucket. The solution must not use long-term credentials. The solution needs to be secure and scalable.

Which solution will meet these requirements with the LEAST operational overhead?

A

Create an IAM user that has an access key and a secret key. Store the keys on the on-premises server in an environment variable. Attach a policy to the IAM user that restricts access to only the S3 bucket.

B

Configure an AWS Site-to-Site VPN connection from on-premises environment to the company's VPC. Launch an Amazon EC2 instance with an instance profile. Route all file uploads from the on-premises application through the EC2 instance to the S3 bucket.

C

Configure an S3 bucket policy to allow access for the on-premises server's public IP address. Configure the policy to allow PUT operations only from the server's IP address.

D

Configure a trust relationship between the on-premises server and AWS STS. Generate credentials by assuming an IAM role for each upload operation.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 87

A company is deploying an application that processes streaming data in near-real time. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to provide the lowest possible latency between nodose

Which networking solution meets these requirements?

A

Place the EC2 instances in multiple VPCs. and configure VPC peering.

B

Attach an Elastic Fabric Adapter (EFA) to each EC2 instance.

C

Run the EC2 instances in a spread placement group.

D

use Amazon Elastic Block Store (Amazon EBS) optimized instance types.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 88

A company is developing a highly available natural language processing (NLP) application. The application handles large volumes of concurrent requests. The application performs NLP tasks such as entity recognition, sentiment analysis, and key phrase extraction on text data. The company needs to store data that the application processes in a highly available and scalable database. Which solution will meet these requirements?

A

Create an Amazon API Gateway REST API endpoint to handle incoming requests. Configure the REST API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Comprehend to perform NLP tasks on the text data. Store the processed data in Amazon DynamoDB.

B

Create an Amazon API Gateway HTTP API endpoint to handle incoming requests. Configure the HTTP API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Translate to perform NLP tasks on the text data. Store the processed data in Amazon ElastiCache.

C

Create an Amazon SQS queue to buffer incoming requests. Deploy the NLP application on Amazon EC2 instances in an Auto Scaling group. Use Amazon Comprehend to perform NLP tasks. Store the processed data in an Amazon RDS database.

D

Create an Amazon API Gateway WebSocket API endpoint to handle incoming requests. Configure the WebSocket API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Textract to perform NLP tasks on the text data. Store the processed data in Amazon ElastiCache.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 89

A company runs code compilation tasks that span many virtual machines (VMs) in its on-premises data center. These tasks require low latency and high bandwidth between servers. The company wants to migrate this workload to run on Amazon EC2 instances in the AWS Cloud. After the migration, the workload must maintain low latency and high bandwidth between EC2 instances.

Which solution will meet these requirements?

A

Deploy Amazon EC2 instances in a cluster placement group. Enable enhanced networking on the EC2 instances.

B

Deploy Amazon EC2 instances in a partition placement group- Enable enhanced networking on the EC2 instances.

C

Deploy an Amazon EKS cluster that uses a managed node group of Amazon EC2 instances. Configure the cluster to use a container network interface (CNI) for enhanced networking.

D

Configure an AWS Batch fleet of Amazon EC2 instances. Enable enhanced networking on the EC2 instances. Use AWS Step Functions to orchestrate compilation tasks.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 90

A company has several Amazon EC2 instances in a private subnet, These EC2 instances host applications that read and write large amounts of data to and from Amazon

S3. Subnet routing currently directs all the traffic destined for the internet through a NAT gateway.

The company wants to reduce the data transfer costs associated with the Amazon S3 communication. The solution must not affect the ability of the applications to

communicate with Amazon S3 or the outside internet. The EC2 instances must continue to reside in a private subnet.

Which solution will meet these requirements MOST cost-effectively?

A

Create an additional NAT gateway Update the route table to route to the additional NAT gateway. Update the network ACL to allow Amazon S3 traffic-

B

Create an internet gateway. Update the route table to route traffic to the internet gateway. Update the network ACL to allow Amazon S3 traffic.

C

Create a gateway VPC endpoint for Amazon S3- Specify the route table to direct traffic to the gateway VPC endpoint. Attach an endpoint policy to the gateway VPC endpoint.

D

Create an AWS Lambda function outside the VPC to handle Amazon S3 requests. Attach an IAM policy to the EC2 instances that allows the EC2 instances to invoke the Lambda function.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 91

A company has a group of critical applications that run by using on-premises virtual machines (VMs). The applications use shared file storage to serve thousands of users. The company is currently migrating selected applications from on premises to Amazon EC2 instances.
A solutions architect needs to identify a storage solution capable of delivering high throughput to applications running on VMS both on premises and on AWS.
Which solution will meet these requirements?

A

Create an Amazon EBS Multi-Attach volume as the storage option. Attach the EBS volume to the EC2 instances running the application and the on-premises VMs.

B

Create an Amazon EFS file system. Mount the EFS file system to the EC2 instances running the applications and the on-premises VMs.

C

Create an Amazon S3 bucket. Attach an IAM role to the EC2 instances running the applications with the necessary IAM permissions to access Amazon S3. Create an Amazon S3 interface endpoint and route on-premises traffic to this endpoint.

D

Create an Amazon RDS DB instance. Configure the EC2 instances running the applications to access the Amazon RDS credentials from AWS Secrets Manager. Provide the database credentials to the on-premises VMS by using an AWS Site-to-Site VPN connection.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 92

A company has a serverless web application that is comprised of AWS Lambda functions. The application experiences spikes in traffic that cause increased latency because of cold starts.

The company wants to improve the application's ability to handle traffic spikes and to minimize latency. The solution must optimize costs during periods when traffic is low.

Which solution will meet these requirements?

A

Configure provisioned concurrency for the Lambda functions. Use AWS Application Auto Scaling to adjust the provisioned concurrency.

B

Launch Amazon EC2 instances in an Auto Scaling group. Add a scheduled scaling policy to launch additional EC2 instances during peak traffic periods.

C

Configure provisioned concurrency for the Lambda functions. Set a fixed concurrency level to handle the maximum expected traffic.

D

Create a recurring schedule in Amazon EventBridge Scheduler. Use the schedule to invoke the Lambda functions periodically to warm the functions.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 93

A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the Aurora database by using user names and passwords that the company stores locally in a file.

The company the user names and passwords every month. The company wants to minimize the operational overhead of credential management

Which solution will meet these requirements.

A

Store the credentials as a secret within AWS Secrets Manager. Assign IAM permissions to the secret Reconfigure the application to call the secret. Enable rotation on the secret and configure rotation to occur on a monthly schedule.

B

Use AWS Systems Manager Parameter Store to create a new parameter for the credentials. Use IAM policies to restrict access to the parameter Reconfigure the application to access the parameter

C

Create an Amazon S3 bucket to store objects. Use an AWS Key Management Service (AWS KMS) key to encrypt the objects. Migrate the credentials file to the S3 bucket Update the application to retrieve the credentials file from the S3 bucket,

D

Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume for each EC2 instance. Attach the encrypted EBS volumes to the EC2 instances. Migrate the credentials file to the new EBS volumes. Point the application to the encrypted EBS volumes.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 94

A company runs a fleet of Amazon EC2 On-Demand Instances to support a document processing application that has variable usage patterns. The company wants to optimize compute costs for the application. The company needs a solution that can tolerate occasional disruptions to document processing jobs.

Which solution will meet these requirements?

A

Replace the EC2 instances with an Amazon EKS cluster that uses AWS Fargate Spot capacity.

B

Use the EC2 Spot Instance placement score feature to identify which instance type to use. Deploy the application on Spot Instances.

C

Create a single EC2 Auto Scaling group. Set a mixed configuration of EC2 On-Demand Instances and EC2 Spot Instances.

D

Continue to use EC2 On-Demand Instances. Purchase Convertible Reserved Instances.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 95

A company runs its infrastructure on AWS and has a registered base of 700,000 users for its document management application. The company intends to create a product that converts large .pdf files to .jpg image files. The .pdf files average 5 MB in size. The company needs to store the original files and the converted files. A solutions architect must design a scalable solution to accommodate demand that will grow rapidly over time.

Which solution meets these requirements MOST cost-effectively?

A

Save the .pdf files to Amazon S3, Configure an S3 PUT event to invoke an AWS Lambda function to convert the files to .jpg format and store them back in Amazon S3.

B

Save the .pdf files to Amazon DynamoDB. Use the DynamoDB Streams feature to invoke an AWS Lambda function to convert the files to -jpg format and store them back in DynamoDB.

C

Upload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances, Amazon EBS storage, and an Auto Scaling group. Use a program in the EC2 instances to convert the files to .jpg format. Save the .pdf files and the .jpg files in the EBS store.

D

Upload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances, Amazon EFS storage, and an Auto Scaling group, Use a program in the EC2 instances to convert the file to .jpg format, Save the .pdf files and the .jpg files in the EBS store.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 96

A gaming company uses an Amazon CloudFront distribution to make files available for download for users around the world, The CloudFront distribution has a custom origin. The company wants to customize the files that are served to users from the cache and origin based on the country where each user is located.

Which solution will meet these requirements?

A

Create an origin request policy. Attach the origin request policy to a cache behavior configuration.

B

Create a response header policy. Attach the response header policy to a cache behavior configuration.

C

Create a cache policy. Attach the cache policy to a cache behavior configuration.

D

Add a custom CloudFront-Viewer-Country header to the CloudFront origin.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 97

A company performs stateful, memory intensive jobs on Amazon EC2 On-Demand Instances in the company's development environment. The instances hold a large quantity of data in memory. The company wants to reduce compute costs in the development environment outside of business hours. The solution must not lose the data stored in memory and the instances must automatically resume when needed.

Which solution will meet these requirements?

A

Create a scheduled cron job on the instances that dumps in-memory data to disk. Configure the cron job to copy the data to an Amazon S3 bucket and stop the instances. Create an Amazon EventBridge rule that invokes an AWS Lambda function. Configure the Lambda function to relaunch the instances during business hours and restore the data dumps.

B

Convert from On-Demand to Spot Instances. Create a lifecycle hook that performs a dump of in-memory data to disk when a Spot Instance interruption occurs and terminates the instance. Use the AWS CLI to relaunch the instances when needed and restore the data dumps.

C

Convert from On-Demand to Spot Instances. Configure the instances to hibernate during an interruption. Restart the instances after an interruption event.

D

Create an Amazon EventBridge rule that invokes an AWS Lambda function. Configure the Lambda function to hibernate the instances outside of business hours. Create a second EventBridge rule to invoke a second Lambda function that starts the instances at the beginning of business hours.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 98

A company has hired an external vendor to work in the company's AWS account. The vendor uses an automated tool that the vendor hosts in its own AWS account. The vendor does not have IAM access to the company's AWS account.

A solutions needs to grant access to the vendor

Which solution will meet these requirements MOST securely?

A

Create an IAM role in the company’s account to delegate access to the vendor's IAM role. Attach the appropriate IAM policies to the new IAM role to grant the permissions that the vendor requires.

B

Create an IAM user in the company's account that has a password that meets the company's password complexity requirements. Attach the appropriate IAM policies to the new IAM user to grant the permissions that the vendor

C

Create an IAM group in the company's account. Add the IAM user for the vendor's automated tool from the vendor account to the IAM group. Attach the appropriate IAM policies to the group to grant the permissions that the vendor requires.

D

Create a new identity provider (IdP) that has a provider type of AWS account. Supply the vendor's AWS account ID and username. Attach the appropriate IAM policies to the new IdP to grant the permissions that the vendor requires.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 99

A company's web application currently uses large sets of relational data that have table relationships in a MySQL database that runs on an Amazon EC2 instance. The web application has unpredictable and highly variable workloads. Outside of business hours, there are long periods of no database activity. The company has a backup of the existing database. The company needs a solution to optimize operational costs while allowing the database to automatically scale to meet demand. What solution will meet these requirements?

A

Deploy an Amazon RDS for MySQL Single-AZ database instance. Choose On-Demand pricing. Import the database backup into the RDS for MySQL database. Relaunch the RDS database instance with a larger instance size during usage spikes.

B

Deploy Amazon RDS for MySQL Multi-AZ database instances. Purchase RDS Reserved Instances. Import the database backup into the RDS for MySQL database instances. Configure instance scaling by using the AWS CLI.

C

Deploy an Amazon DynamoDB table with provisioned capacity. Enable auto scaling. Migrate the data to DynamoDB and update application queries to use DynamoDB APIs.

D

Deploy an Amazon Aurora Serverless v2 DB cluster. Import the database backup into the DB cluster. Configure the database to scale capacity based on workload.

Premium Solution Locked

Unlock all 682 answers & explanations

QUESTION 100

A company runs a nightly Python data aggregation script on an Amazon EC2 T family instance that runs Amazon Linux. Each script run takes about 40 minutes and cannot be interrupted. The company now must process five datasets at the same time so that all the datasets finish processing within 1 hour. The current EC2 instance cannot run more than one job at a time without exhausting resources.

The company wants the most cost-effective approach that includes minimal changes to the code.

Which solution will meet these requirements?

A

Replace the T instance with a larger compute optimized EC2 instance. Install a process manager. Invoke five concurrent script processes from a cron job so that the instance processes all the datasets on time.

B

Create an Auto Scaling group by using a launch template that uses user data to start the script. Configure a scheduled scaling action to launch one EC2 Spot Instance for each dataset at the same time. Use a lifecycle hook to terminate each instance on completion.

C

Containerize the script. Push the image to Amazon ECR. Configure an Amazon EventBridge cron rule to start five concurrent Amazon ECS tasks on AWS Fargate each night.

D

Break the script into smaller steps. Orchestrate the steps by using an AWS Step Functions workflow that calls AWS Lambda functions.

Premium Solution Locked

Unlock all 682 answers & explanations

Amazon AWS Certified Solutions Architect - Associate (SAA-C03)

Test the Practice Engine

Premium Bundle

Standard Simulation

Basic Tier

Verified Community

Success Network

Exam Overview

Skills Measured

Career Path

Common Questions

Is the material up to date?

What format do I get?

Is there a guarantee?

When do I get the download?

Free Study Guide Samples

Full Question Bank Locked

Certification Path

Related Certifications

Customer Reviews

David M.

Sarah J.

Michael C.

Need Assistance?

Get Exam Updates