Get Updated Amazon SAA-C03 Exam Questions

QUESTION 1

A healthcare company is running an Amazon EMR cluster on Amazon EC2 instances to process data that is stored in Amazon S3. The company must ensure that the data processing jobs have access only to the relevant data in Amazon S3. Each job must have specific EMR runtime roles.

Which combination of steps will meet these requirements? (Select THREE.)

A

Set up security configurations in Amazon EMR, and set EnableApplicationScopedlAMRole to true.

B

Set up runtime roles to assume the EC2 instance profile of the Amazon EMR cluster.

C

Set up an EC2 instance profile for the Amazon EMR cluster to assume the runtime roles.

D

For each IAM role that serves as an EMR runtime role, set up a trust policy with the EC2 instance profile role.

E

Establish a trust policy between the EMR runtime roles and the EMR service role of the cluster.

F

Set up security configurations in Amazon EMR, and set EnablelnTransitEncryption to true.

Correct Option: A,C,D

To ensure EMR data processing jobs have access only to relevant data in Amazon S3 by using specific EMR runtime roles, three key steps are required:

✅ A: Set up security configurations in Amazon EMR, and set EnableApplicationScopedlAMRole to true. This setting in an EMR security configuration is a prerequisite for enabling and utilizing EMR runtime roles. It allows applications running on the cluster to assume specific IAM roles.

✅ C: Set up an EC2 instance profile for the Amazon EMR cluster to assume the runtime roles. This involves configuring the permissions policy of the EMR EC2 instance profile role (e.g., EMR_EC2_DefaultRole) to grant sts:AssumeRole permissions on the specific EMR runtime roles. This is crucial because the EC2 instances, operating under this instance profile, are the entities that will attempt to assume the runtime roles.

✅ D: For each IAM role that serves as an EMR runtime role, set up a trust policy with the EC2 instance profile role. The trust policy of each EMR runtime role must explicitly permit the EMR EC2 instance profile role (which the cluster instances use) to assume it. This establishes the necessary trust relationship for the assumption to occur successfully.

❌ Why the other choices are incorrect:

B: Set up runtime roles to assume the EC2 instance profile of the Amazon EMR cluster. This is incorrect. The EC2 instance profile role assumes the runtime roles, not the other way around.
E: Establish a trust policy between the EMR runtime roles and the EMR service role of the cluster. This is incorrect. The trust policy for runtime roles is established with the EMR EC2 instance profile role, not the EMR service role. The EMR service role is used by the EMR service itself for cluster management, not for job-specific data access.
F: Set up security configurations in Amazon EMR, and set EnablelnTransitEncryption to true. This is incorrect. Enabling in-transit encryption secures data moving within the EMR cluster, but it does not control job-specific access to S3 data through IAM roles.

Reference: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-runtime-roles.html

QUESTION 2

A solutions architect is investigating compute options for a critical analytics application. The application uses long-running processes to prepare and aggregate data. The processes cannot be interrupted. The application has a known baseline load. The application needs to handle occasional usage surges.

Which solution will meet these requirements MOST cost-effectively?

A

Create an Amazon EC2 Auto Scaling group. Set the Min capacity and Desired capacity parameters to the number of instances required to handle the baseline load. Purchase Reserved Instances for the Auto Scaling group.

B

Create an Amazon EC2 Auto Scaling group. Set the Min capacity, Max capacity, and Desired capacity parameters to the number of instances required to handle the baseline load. Use On-Demand Instances to address occasional usage surges.

C

Create an Amazon EC2 Auto Scaling group. Set the Min capacity and Desired capacity parameters to the number of instances required to handle the baseline load. Purchase Reserved Instances for the Auto Scaling group. Use the OnDemandPercentageAboveBaseCapacity parameter to configure the launch template to launch Spot Instances.

D

Re-architect the application to use AWS Lambda functions instead of Amazon EC2 instances. Purchase a one-year Compute Savings Plan to reduce the cost of Lambda usage.

Correct Option: A

Why A is the MOST cost-effective and correct:

Long-running, non-interruptible processes → rules out Spot Instances (so C is out).

Known baseline load → best covered by Reserved Instances for steady, always-on capacity.

Occasional surges → Auto Scaling can add On-Demand Instances temporarily above the reserved baseline.

No need to re-architect to Lambda (D) for an analytics app with long-running jobs.

QUESTION 3

A company is developing a microservices-based application to manage the company's delivery operations, The application consists of microservices that process orders, manage a fleet of delivery vehicles, and optimize delivery routes.

The microservices must be able to scale independently and must be able to handle bursts of traffic without any data loss.

Which solution will meet these requirements with the LEAST operational overhead?

A

Use Amazon API Gateway REST APIs to establish communication between microservices, Deploy the application on Amazon EC2 instances in Auto Scaling groups.

B

Use Amazon SQS to establish communication between microservices. Deploy the application on Amazon ECS containers on AWS Fargate.

C

Use WebSocket-based communication between microservices- Deploy the application on Amazon EC2 instances in Auto Scaling groups.

D

Use Amazon SNS to establish communication between microservices. Deploy the application on Amazon ECS containers on Amazon EC2 instances.

Correct Option: B

The question asks for a solution that allows microservices to scale independently, handle bursts of traffic without data loss, and have the LEAST operational overhead.

Amazon SQS is a fully managed message queuing service that decouples microservices, buffers requests during traffic bursts, and guarantees message delivery, preventing data loss. This directly addresses the need to handle bursts without data loss and allows services to scale independently.

Amazon ECS containers on AWS Fargate provides a serverless compute engine for containers. With Fargate, you don't need to provision, scale, or manage EC2 instances, significantly reducing operational overhead. It allows microservices to scale independently based on demand.

Combining SQS for communication and Fargate for deployment offers the optimal balance of scalability, data integrity, and minimal operational overhead.

Reference: https://aws.amazon.com/sqs/features/ | https://aws.amazon.com/fargate/

QUESTION 4

A company runs a container application on a Kubernetes cluster in the company's data center. The application uses Advanced Message Queuing Protocol (AMQP) to communicate with a message queue. The data center cannot scale fast enough to meet the company's expanding business needs. The company wants to migrate the workloads to AWS.

Which solution will meet these requirements with the LEAST operational overhead?

A

Migrate the container application to Amazon ECS. IJse Amazon SQS to retrieve the messages.

B

Migrate the container application to Amazon EKS. Use Amazon MQ to retrieve the messages.

C

Use highly available Amazon EC2 instances to run the application. Use Amazon MQ to retrieve the messages.

D

Use AWS Lambda functions to run the application. Use Amazon SQS to retrieve the messages.

Correct Option: B

The company runs a container application on Kubernetes using AMQP. The goal is to migrate to AWS with the LEAST operational overhead.

Amazon EKS is a fully managed Kubernetes service. Migrating from an on-premises Kubernetes cluster to Amazon EKS allows the company to continue using Kubernetes for container orchestration, minimizing changes to the application's deployment and operational model. EKS handles the Kubernetes control plane, significantly reducing operational overhead compared to self-managing Kubernetes.
Amazon MQ is a managed message broker service that supports industry-standard APIs and protocols, including AMQP (both 0-9-1 and 1.0). This allows the application to continue using its existing AMQP messaging protocol without requiring code changes or re-architecture for the message queue component.

This combination (EKS for compute, MQ for messaging) offers a direct lift-and-shift approach for both the application and its messaging dependency, resulting in the least operational overhead.

Reference: https://aws.amazon.com/eks/; https://aws.amazon.com/amazon-mq/

QUESTION 5

A company hosts an application on AWS. The application has generated approximately 2.5 TB of data over the previous 12 years. The company currently stores the data on Amazon EBS volumes.

The company wants a cost-effective backup solution for long-term storage. The company must be able to retrieve the data within minutes when required for audits.

Which solution will meet these requirements?

A

Create EBS snapshots to back up the data.

B

Create an Amazon S3 bucket. Use the S3 Glacier Deep Archive storage class to back up the data.

C

Create an Amazon S3 bucket. Use the S3 Glacier Flexible Retrieval storage class to back up the data.

D

Create an Amazon Elastic File System (Amazon EFS) file system to back up the data.

Correct Option: C

✅ Create an Amazon S3 bucket. Use the S3 Glacier Flexible Retrieval storage class to back up the data.
Description: Amazon S3 Glacier Flexible Retrieval (formerly S3 Glacier) is an Amazon S3 storage class designed for highly secure, durable, and extremely low-cost storage for data archiving. It provides retrieval options ranging from a few minutes (Expedited) to several hours (Standard), making it suitable for data that is infrequently accessed but still requires occasional retrieval. Why this fits: This option directly addresses the need for backing up large amounts of data with long-term retention requirements at a very low cost. S3 Glacier Flexible Retrieval is purpose-built for archival data, offering significant cost savings compared to other storage classes like Standard or Infrequent Access, while providing more flexible and faster retrieval options than S3 Glacier Deep Archive. It strikes a good balance for typical long-term archival scenarios where data isn't needed immediately but might be requested periodically.

Reference: https://aws.amazon.com/s3/storage-classes/glacier/

QUESTION 6

A company wants to deploy its containerized application workloads to a VPC across three Availability Zones. The company needs a solution that is highly available across Availability Zones. The solution must require minimal changes to the application. Which solution will meet these requirements with the LEAST operational overhead?

A

Use Amazon ECS. Configure Amazon ECS Service Auto Scaling to use target tracking scaling. Set the minimum capacity to 3. Set the task placement strategy type to spread with an Availability Zone attribute.

B

Use Amazon EKS self-managed nodes. Configure Application Auto Scaling to use target tracking scaling. Set the minimum capacity to 3.

C

Use Amazon EC2 Reserved Instances. Launch three EC2 instances in a spread placement group. Configure an Auto Scaling group to use target tracking scaling. Set the minimum capacity to 3.

D

Use an AWS Lambda function. Configure the Lambda function to connect to a VPC. Configure Application Auto Scaling to use Lambda as a scalable target. Set the minimum capacity to 3.

Correct Option: A

✅

Reasoning: Amazon ECS is a fully managed container orchestration service, inherently providing low operational overhead. Service Auto Scaling ensures high availability and scalability. Setting the minimum capacity to 3 and using a "spread with Availability Zone attribute" placement strategy guarantees tasks are distributed across three AZs for fault tolerance. Minimal application changes are needed as it runs existing containers. ❌ Why the other choices are incorrect:

Option B is incorrect: Using Amazon EKS with self-managed nodes introduces significant operational overhead for managing the underlying EC2 instances (patching, scaling) compared to a fully managed service like ECS.
Option C is incorrect: This option describes deploying directly on EC2 instances without a container orchestration service. This drastically increases the operational overhead for managing container deployment, scaling, and high availability. Reserved Instances are for cost savings, not deployment strategy.
Option D is incorrect: AWS Lambda is for serverless functions, not general "containerized application workloads" without significant refactoring. This violates the "minimal changes to the application" requirement.

QUESTION 7

A company operates a data lake in Amazon S3 that stores large datasets in multiple formats. The company has an application that retrieves and processes subsets of data from multiple objects in the data lake based on filtering criteria. For each data query, the application currently downloads the entire S3 object and performs transformations. The current process requires a large amount of transformation time.

The company wants a solution that will give the application the ability to query and filter directly on S3 objects without downloading the objects.

Which solution will meet these requirements?

A

Use Amazon Athena to query and filter the objects in Amazon S3.

B

Use Amazon EMR to process and filter the objects.

C

Use Amazon API Gateway to create an API to retrieve filtered results from Amazon S3.

D

Use Amazon ElastiCache(Valkey) to cache the objects.

Correct Option: A

✅ Use Amazon Athena to query and filter the objects in Amazon S3.
Description: Amazon Athena is an interactive query service that makes it easy to analyze data directly in Amazon S3 using standard SQL. It is serverless, so there is no infrastructure to manage, and you pay only for the queries you run. Athena can query a wide variety of data formats, including CSV, JSON, ORC, Parquet, and Avro. Why this fits: Athena is purpose-built for querying and filtering data residing directly in Amazon S3. It allows users to run ad-hoc SQL queries on petabytes of data without needing to load or transform the data beforehand. This makes it an ideal, cost-effective, and serverless solution for data analysis, log analysis, and reporting on S3 data lakes when the goal is to interactively query and filter objects.

Reference: https://aws.amazon.com/athena/

QUESTION 8

A company is building a critical web application on AWS. The company needs to design architecture components that provide low-latency, global access to static content. The company must also provide highly durable and highly available storage for static content and user uploads.

Which solution will meet these requirements?

A

Create an Amazon CloudFront distribution. Create one Amazon S3 bucket and configure it as the origin for static content. Create a second S3 bucket and set it as the origin for user uploads.

B

Create an Application Load Balancer (ALB) and an Amazon EC2 Auto Scaling group. Set the Auto Scaling group as the ALB target. Configure the instances in the Auto Scaling group to store static content on instance store volumes. Use an Amazon FSx for NetApp ONTAP Multi-AZ file system to store user uploads.

C

Create an Amazon CloudFront distribution. Create one Amazon S3 bucket and configure it as the origin for static content. Use an Amazon FSx for NetApp ONTAP Single-AZ file system to store user uploads.

D

Create an Application Load Balancer (ALB) and an Amazon EC2 Auto Scaling group. Set the Auto Scaling group as the ALB target. Configure the instances in the Auto Scaling group to store static content on instance store volumes. Use Amazon S3 Standard to store user uploads.

Correct Option: A

✅

Reasoning: Amazon CloudFront provides low-latency global access using its edge network. Amazon S3 is highly durable (11 9s) and highly available, making it ideal for both static content origin and user uploads. This combination directly addresses all specified requirements efficiently. ❌ Why the other choices are incorrect:

Option B is incorrect: Instance store volumes are ephemeral and not highly durable or available. An ALB/EC2 setup does not provide global low-latency access like CloudFront.
Option C is incorrect: An Amazon FSx for NetApp ONTAP Single-AZ file system is not highly available as it is confined to a single Availability Zone.
Option D is incorrect: Instance store volumes are ephemeral and not highly durable or available. An ALB/EC2 setup does not provide global low-latency access like CloudFront.

QUESTION 9

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing. The company wants to minimize the website hosting costs.

Which solution will meet these requirements?

A

Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.

B

Move the website to an Amazon S3 bucket. Configure an Amazon ElastiCache cluster for the S3 bucket.

C

Move the website to AWS Amplify. Configure an ALB to resolve to the Amplify website.

D

Move the website to AWS Amplify. Configure EC2 instances to cache the website.

Correct Option: A

✅ Choice A: Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.
Description: Amazon S3 (Simple Storage Service) is an object storage service offering industry-leading scalability, data availability, security, and performance. It can be used to host static websites directly. Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment. Why this fits: This option represents the most common, cost-effective, highly scalable, and performant architecture for hosting static websites on AWS.

S3 for Static Hosting: S3 is ideal for static website content (HTML, CSS, JavaScript, images) due to its high durability, availability, and virtually unlimited scalability. It's also very cost-effective.
CloudFront for Performance and Security: Integrating CloudFront with S3 improves the user experience by caching content at edge locations closer to users, significantly reducing latency. CloudFront also provides benefits like DDoS protection, SSL/TLS termination, and the ability to serve content over HTTPS, enhancing security and reliability. It also offloads requests from the S3 bucket, which can further reduce costs for high-traffic sites.

QUESTION 10

A company regularly receives route status updates from its delivery trucks as events in Amazon EventBridge. The company is building an API-based application in a VPC that will consume and process the events to create a delivery status dashboard. The API application must not be available by using public IP addresses because of security and compliance requirements.

How should the company send events from EventBridge to the API application?

A

Create an AWS Lambda function that runs in the same VPC as the API application. Configure the function as an EventBridge target. Use the function to send events to the API.

B

Create an internet-facing Application Load Balancer (ALB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the ALB as an EventBridge target.

C

Create an internet-facing Network Load Balancer (NLB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the NLB as an EventBridge target.

D

Use the application API endpoint in the VPC as a target for EventBridge. Send events directly to the application API endpoint from EventBridge.

Correct Option: A

✅

Reasoning: EventBridge can directly target a Lambda function. By configuring the Lambda function to run within the same VPC as the API application, it gains private network access to the API, thus satisfying the requirement for no public IP addresses. ❌ Why the other choices are incorrect:

Option B is incorrect: An internet-facing Application Load Balancer (ALB) uses public IP addresses, directly violating the requirement that the API application must not be available via public IPs.
Option C is incorrect: An internet-facing Network Load Balancer (NLB) uses public IP addresses, directly violating the requirement that the API application must not be available via public IPs.
Option D is incorrect: EventBridge cannot directly send events to a private API endpoint within a VPC. It requires an intermediary service (like Lambda or an API Gateway with VPC Link) that has network access to the private endpoint.

Reference: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-targets.html

QUESTION 11

A company manages millions of documents in hundreds of Amazon S3 buckets in multiple AWS Regions. The company must determine whether any of the S3 buckets contain personally identifiable

information (PII).

Which solution will meet this requirement with the LEAST operational overhead?

A

Use Amazon Detective to detect PII in the S3 buckets.

B

Use AWS Trusted Advisor to generate PII notifications.

C

Use Amazon Macie to detect PII in the S3 buckets.

D

Use AWS Lambda functions to review each file in the S3 buckets to identify PII.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 12

A company has a batch processing application that runs every day. The process typically takes an average 3 hours to complete. The application can handle interruptions and can resume the process after a restart. Currently, the company runs the application on Amazon EC2 On-Demand Instances.

The company wants to optimize costs while maintaining the same performance level.

Which solution will meet these requirements MOST cost-effectively?

A

Purchase a 1-year EC2 Instance Savings Plan for the appropriate instance family and size to meet the requirements of the application.

B

Use EC2 On-Demand Capacity Reservations based on the appropriate instance family and size to meet the requirements of the application. Run the EC2 instances in an Auto Scaling group.

C

Determine the appropriate instance family and size to meet the requirements of the application. Convert the application to run on AWS Batch with EC2 On-Demand Instances. Purchase a 1-year Compute Savings Plan.

D

Determine the appropriate instance family and size to meet the requirements of the application. Convert the application to run on AWS Batch with EC2 Spot Instances.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 13

A company wants to use AWS Direct Connect to connect the company's on-premises networks to the AWS Cloud. The company runs several VPCs in a single AWS Region. The company plans to expand its VPC fleet to include hundreds of VPCs.

A solutions architect needs to simplify and scale the company's network infrastructure to accommodate future VPCs.

Which service or resource will meet these requirements?

A

VPC endpoints

B

AWS Transit Gateway

C

Amazon Route 53

D

AWS Secrets Manager

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 14

A company has a development account that contains Amazon EC2 instances. The company uses the EC2 instances for testing. A recent audit of the development account showed that some developers occasionally forget to stop instances after the tests are finished, which incurs extra costs.

The company wants to optimize costs for the development account. The company wants to use AWS Budgets to implement a budget for the account.

Which solution will meet these requirements?

A

Define an alert in AWS Budgets for when the budget threshold reaches 100% of forecasted costs. Configure AWS Budgets to send an Amazon SNS notification to an AWS Lambda function. Configure the Lambda function to stop the EC2 instances when the function receives a notification.

B

Define an alert in AWS Budgets for when the budget threshold reaches 100% of forecasted costs. Implement an action in the alert to automatically stop the EC2 instances.

C

Define an alert in AWS Budgets for when the budget threshold reaches 100% of the budgeted amount. Create an Amazon EventBridge scheduled rule. Implement an AWS Lambda function to stop the EC2 instances based on the scheduled rule.

D

Define an alert in AWS Budgets for when the budget threshold reaches 100% of the budgeted amount. Implement an action in the alert to automatically stop the EC2 instances.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 15

A company is deploying a critical application by using Amazon RDS for MySQL. The application must be highly available and must recover The company needs to support interactive users

(transactional queries) and batch reporting (analytical queries) with no more than a 4-hour lag. The analytical queries must not affect the performance of the transactional queries.

Which solution will meet these requirements?

A

Configure Amazon RDS for MySQL in a Multi-AZ DB instance deployment with one standby instance. Point the transactional queries to the primary DB instance. Point the analytical queries to asecondary DB instance that runs in a different Availability Zone.

B

Configure Amazon RDS for MySQL in a Multi-AZ DB cluster deployment with two standby instances. Point the transactional queries to the primary DB instance. Point the analytical queries to thereader endpoint.

C

Configure Amazon RDS for MySQL to use multiple read replicas across multiple Availability Zones. Point the transactional queries to the primary DB instance. Point the analytical queries to one ofthe replicas in a different Availability Zone.

D

Configure Amazon RDS for MySQL as the primary database for the transactional queries with automated backups enabled. Configure automated backups. Each night, create a read-onlydatabase from the most recent snapshot to support the analytical queries. Terminate the previously created database.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 16

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application experiences periodic spikes in malicious traffic attempts from attackers. The application receives mostly SQL injection and cross-site scripting (XSS) attacks from external sources.

The company requires a solution to protect the application from the attacks. The solution must have minimal effect on application performance.

Which solution will meet these requirements?

A

Deploy AWS WAF on the ALB. Configure rules to block malicious traffic activity. Enable AWS Shield Advanced.

B

Use AWS CloudTrail data events to monitor the ALB traffic. Create alerts for suspicious incoming requests. Update the application's security group to drop malicious IP addresses.

C

Install an intrusion detection system (IDS) on each EC2 instance to analyze and block malicious traffic at the host level. Update the ALB to pass all traffic directly to the instances for analysis.

D

Configure a network ACL to drop traffic from known malicious IP ranges. Enable Amazon GuardDuty.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 17

An insurance company wants to migrate an application that calculates insurance premiums to AWS. The company needs to run calculations immediately when a customer submits information through the application. The application usually takes 10 seconds to process a calculation.

A solutions architect needs to develop an architecture on AWS to handle the application.

Which solution will meet this requirement?

A

Set up an Amazon API Gateway HTTP API to receive the data. IJse an AWS Lambda function to process the data immediately,

B

Upload the customer data to an Amazon S3 bucket. Start an Amazon EC2 Spot Instance to process every data upload.

C

Set up AWS Transfer Family to receive the customer data. Configure an Amazon Elastic Kubernetes Service (Amazon EKS) job to process the customer data on a schedule.

D

Upload the data to an Amazon S3 bucket. Invoke an AWS Batch job to process every customer data upload.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 18

A company runs a three-tier web application in a VPC on AWS. The company deployed an application load balancer (ALB) in a public subnet. The web tier and application tier Amazon EC2 instances are deployed in a private subnet. The company uses a self-managed MySQL database that runs on EC2 instances in an isolated private subnet for the database tier.

The company wants a mechanism that will give a DevOps team the ability to use SSH to access all the servers. The company also wants to have a centrally managed log of all connections made to the servers.

Which combination of solutions will meet these requirements with the MOST operational efficiency? (Select TWO.)

A

Create a bastion host in the public subnet. Configure security groups in the public, private, and isolated subnets to allow SSH access.

B

Create an interface VPC endpoint for AWS Systems Manager Session Manager. Attach the endpoint to the VPC.

C

Create an IAM policy that grants access to AWS Systems Manager Session Manager. Attach the IAM policy to the EC2 instances.

D

Create a gateway VPC endpoint for AWS Systems Manager Session Manager. Attach the endpoint to the VPC.

E

Attach an AmazonSSMManagedInstanceCore AWS managed IAM policy to all the EC2 instance roles.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 19

A company runs a container application by using Amazon Elastic Kubernetes Service (Amazon EKS). The application includes microservices that manage customers and place orders, The company needs to route incoming requests to the appropriate microservices.

Which solution will meet this requirement MOST cost-effectively?

A

use the AWS Load Balancer Controller to provision a Network Load Balancer.

B

Use the AWS Load Balancer Controller to provision an Application Load Balancer,

C

Use an AWS Lambda function to connect the requests to Amazon EKS.

D

Use Amazon API Gateway to connect the requests to Amazon EKS-

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 20

A company wants to deploy a new public web application on AWS. The application includes a web server tier that uses Amazon EC2 instances. The application also includes a database tier that uses an Amazon RDS for MySQL DB instance.

The application must be secure and accessible for global customers that have dynamic IP addresses.

How should a solutions architect configure the security groups to meet these requirements?

A

Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.

B

Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.

C

Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the IP addresses of the customers.

D

Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from 0.0.0.0/0.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 21

A company has an application that processes information from documents that users upload. When a user uploads a new document to an Amazon S3 bucket, an AWS Lambda function is invoked and processes the document.

The company discovers that the application did not process some of the uploaded documents because of document formatting errors. The company wants to ensure that the application finalizes processing all

documents as soon as possible, even if errors are encountered during document processing. Which solution will meet these requirements?

A

Create an Amazon API Gateway REST API that has a proxy integration to the Lambda function. Update the application to send requests to the REST API instead of calling the Lambda function directly.

B

Configure a replication policy on the S3 bucket to copy the documents to another S3 bucket. Configure an AWS Batch job to process the second S3 bucket documents on a daily schedule.

C

Increase the timeout parameter for the Lambda function to the maximum. Modify the Lambda function code to implement the retry mechanism with exponential backoff to handle the errors.

D

Configure an Amazon Simple Queue Service (Amazon SQS) queue as the event source for a second Lambda function. Configure the second Lambda function to invoke an AWS Step Functions workflow to handle document errors. Modify the original Lambda function to put failed executions as events into the queue.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 22

A healthcare company needs a storage solution for electronic health records (EHRs). The company must store the EHRs for at least 10 years to comply with regulations. The company rarely accesses the records. The records must be secure, immutable, and retrievable within a few hours when needed.

Which solution will meet these requirements in the MOST cost-effective way?

A

Store the records in Amazon S3 Standard. Enable Server-side encryption with Amazon S3 managed keys (SSE-S3) and S3 Versioning.

B

Store the records in Amazon S3 Glacier Flexible Retrieval. Configure S3 Object Lock and set a retention period of 10 years.

C

Store the records in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Configure an S3 Lifecycle policy to remove records after 10 years.

D

Store the records in Amazon S3 Intelligent-Tiering. Configure automatic archiving to the Archive Access tier.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 23

A company runs an application that stores and shares photos. Users upload the photos to an Amazon S3 bucket Every day, users upload approximately 150 photos. The company wants to design a solution that creates a thumbnail of each new photo and stores the thumbnail in a second S3 bucket.

Which solution will meet these requirements MOST cost-effectively?

A

Configure an Amazon EventBridge scheduled rule to invoke a script every minute on a long-running Amazon EMR cluster. Configure the script to generate thumbnails for the photos that do not have thumbnails. Configure the script to upload the thumbnails to the second S3 bucket.

B

Configure an Amazon EventBridge scheduled rule to invoke a script every minute on a memory-optimized Amazon EC2 instance that is always on. Configure the script to generate thumbnails for the photos that do not have thumbnails. Configure the script to upload the thumbnails to the second S3 bucket.

C

Configure an S3 event notification to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to the second S3 bucket.

D

Configure S3 Storage Lens to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to a second S3 bucket.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 24

A company is designing a new ecommerce application for a high-traffic retail website. The application needs to process a large volume of customer orders. The application must scale to handle spikes in order volume during peak shopping events. Which solution will meet these requirements?

A

Use a single large Amazon EC2 instance to run processing logic and to store order information. Run a relational database on the same EC2 instance.

B

Use a single Amazon EC2 instance to run processing logic. Control the flow of orders into the EC2 instance by using an Amazon SQS queue. Use an Amazon S3 bucket to store order information.

C

Use an Amazon API Gateway HTTP API and an AWS Lambda function to process orders. Use Amazon DynamoDB in on-demand mode to store order information.

D

Use an Application Load Balancer (ALB) to distribute order processing traffic across multiple Amazon EC2 instances that run processing logic. Use Amazon Aurora with multiple reader nodes as the database.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 25

A company uses AWS to run its ecommerce platform. The platform is critical to the company's operations and has a high volume of traffic and transactions. The company configures a murti-factor authentication (MFA) device to secure its AWS account root user credentials. The company wants to ensure that it will not lose access to the root user account if the MFA device is lost.

Which solution will meet these requirements?

A

Set up a backup administrator account that the company can use to log in if the company loses the MFA device.

B

Add multiple MFA devices for the root user account to handle the disaster scenario.

C

Create a new administrator account when the company cannot access the root account

D

Attach the administrator policy to another IAM user when the company cannot access the root account.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 26

A company needs to archive an on-premises relational database. The company wants to retain the data. The company needs to be able to run SQL queries on the archived data to create annual reports. Which solution will meet these requirements with the LEAST operational overhead?

A

Use AWS DMS to migrate the on-premises database to an Amazon RDS instance. Retire the on-premises database. Maintain the RDS instance in a stopped state until the data is needed for reports.

B

Set up database replication from the on-premises database to an Amazon EC2 instance. Retire the on-premises database. Make a snapshot of the EC2 instance. Maintain the EC2 instance in a stopped state until the data is needed for reports.

C

Create a database backup on premises. Use AWS DataSync to transfer the data to Amazon S3. Create an S3 Lifecycle configuration to move the data to S3 Glacier Deep Archive. Restore the backup to Amazon EC2 instances to run reports.

D

Use AWS DMS to migrate the on-premises databases to Amazon S3 in Apache Parquet format. Store the data in S3 Glacier Flexible Retrieval. Use Amazon Athena to run reports.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 27

A company is planning to deploy a business-critical application in the AWS Cloud. The application requires durable storage with consistent, low-latency performance.

A

Instance store volume

B

Amazon ElastiCache (Memcached) cluster

C

Provisioned IOPS SSD Amazon Elastic Block Store (Amazon EBS) volume

D

Throughput Optimized HDD Amazon Elastic Block Store (Amazon EBS) volume

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 28

An ecommerce company hosts an application on AWS across multiple Availability Zones- The application experiences uniform load throughout most days.

The company hosts some components of the application in private subnets, The components need to access the internet to install and update patches A solutions architect needs to design a cost effective solution that provides secure outbound Internet connectivity for private subnets across multiple Availability Zones. The solution must maintain high availability

Which solution will meet these requirements?

A

Deploy one NAT gateway in each Availability Zone, Configure the route table for each private subnet within an Availability Zone to route outbound traffic through the NAT gateway in the same Availability Zone.

B

Place one NAT gateway In a designated Availability Zone within the VPC. Configure the route tables of the private subnets In each Availability Zone to direct outbound traffic specifically through the NAT gateway for internet access

C

Deploy an Amazon EC2 instance in a public subnet. Configure the EC2 instance as a NAT instance. Set up the instance with security groups that allow inbound traffic from private subnets and outbound Internet access. Configure route tables to direct traffic from the private subnets through the NAT Instance.

D

Use one NAT Gateway in a Network Load Balancer (NLB) target group. Configure private subnets In each Availability Zone to route traffic to the NLB for outbound internet access-

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 29

An ecommerce company is redesigning a web application to run on the AWS Cloud. The application needs to store static website content and must use a Microsoft SQL Server database to store customer data. The company needs to deploy the application in a resilient way across multiple Availability Zones.

Which solution will meet these requirements?

A

Use an Amazon S3 bucket to store static content. Deploy an Amazon RDS Custom for SQL Server DB instance for the database.

B

Use an Amazon S3 bucket to store static content. Create an Amazon RDS for SQL Server Multi-AZ deployment for the database.

C

Create an Amazon Elastic Block Store (Amazon EBS) Multi-Attach volume to store static content. Deploy an Amazon RDS for SQL Server DB instance for the database.

D

Create an Amazon Elastic Block Store (Amazon EBS) Multi-Attach volume to store static content. Deploy SQL Server on two Amazon EC2 instances in separate Availability Zones.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 30

A solutions architect needs to build a log storage solution for a client. The client has an application that produces user activity logs that track user API calls to the application. The application typically produces 50 GB of logs each day. The client needs a storage solution that makes the logs available for occasional querying and analytics. Which solution will meet these requirements in the MOST cost-effective way?

A

Store user activity logs in an Amazon S3 bucket. Use Amazon Athena to perform queries and analytics.

B

Store user activity logs in an Amazon OpenSearch Service cluster. Use OpenSearch Dashboards to perform queries and analytics.

C

Store user activity logs in an Amazon RDS instance. Use an Open Database Connectivity (ODBC) connector to perform queries and analytics.

D

Store user activity logs in an Amazon CloudWatch Logs log group. Use CloudWatch Logs Insights to perform queries and analytics.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 31

A company creates a VPC that has one public subnet and one private subnet. The company attaches an internet gateway to the VPC. An Application Load Balancer (ALB) in the public subnet communicates with Amazon EC2 instances in the private subnet.

The EC2 instances in the private subnet must be able to download operating system (OS) and application updates from the internet. The instances must not be accessible from the internet.

Which combination of steps will meet these requirements? (Select THREE.)

A

Associate an Elastic IP address with the NAT gateway.

B

Add a route of 0.0.0.0/0 to the private subnet route table. Set the NAT gateway as a target.

C

Deploy a NAT gateway in the public subnet

D

Deploy a NAT gateway in the private subnet.

E

Add a route of 0.0.0.0/0 to the public subnet route table. Set the NAT gateway as a target

F

Associate an Elastic IP address with the internet gateway.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 32

A company is building a suite of RESTful microservices that will be exposed through public endpoints. The company requires a scalable solution to ensure that the microservices handle sudden traffic spikes from global users, minimize latency, and offload requests from the backend microservices.

Which solution will meet these requirements?

A

Deploy the microservices on Amazon EC2 instances in a spread placement group. Assign Elastic IP addresses to the instances. Expose the microservices through Regional public endpoints.

B

Create an Amazon API Gateway REST API. Deploy the microservices on Amazon EC2 instances and integrate the microservices as the API backend. Create an accelerator in AWS Global Accelerator and set the REST API as the endpoint.

C

Create an Amazon API Gateway REST API. Deploy the microservices to AWS Lambda functions and integrate the microservices with the REST API. Create an Amazon CloudFront distribution and set the REST API as the origin.

D

Create an Amazon API Gateway REST API. Deploy the microservices to AWS Lambda functions and integrate the microservices with the REST API. Use Regional endpoints that use standard routing.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 33

A company has an application that runs on Amazon EC2 instances in an Auto Scaling group. The application uses hardcoded credentials to access an Amazon RDS database. To comply with new regulations, the company needs to automatically rotate the database password for the application service account every 90 days.

Which solution will meet these requirements?

A

Create an AWS Lambda function to generate new randomized passwords. Configure an Amazon EventBridge rule to invoke the Lambda function every 90 days. Configure the Lambda function to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.

B

Create a secret for the database credentials in AWS Secrets Manager Schedule an AWS Lambda function in Secrets Manager to rotate the secret every 90 days. Modify the application to read the database credentials from Secrets Manager

C

Create a new Amazon ECS task to generate new randomized passwords. Configure the task to launch every 90 days. Configure the task to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.

D

Create a new EC2 instance that runs a cron job every 90 days. Use the cron job to generate new randomized passwords. Configure the new EC2 instance to upload a JSON file that contains the now password to the existing EC2 instances by using SSH.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 34

A company is building an ecommerce platform that will allow customers to place orders online. Customer traffic varies significantly. An order-processing microservice is running on a group of Amazon EC2 instances. A solutions architect must ensure that the application remains responsive and decoupled from the frontend. The application must also be able to reprocess orders that the application fails to process on the first attempt. Which solution will meet these requirements?

A

Deploy an Application Load Balancer in front of the order-processing microservice. Configure the Amazon EC2 instances to scale out automatically based on CPU utilization metrics as traffic increases.

B

Deploy an Amazon SQS queue to integrate the frontend and the order-processing microservice. Configure the EC2 instances to process messages from the queue.

C

Establish direct HTTPS connections from the frontend to the microservice. Use a dynamically expanding thread pool to handle concurrency at the microservice layer.

D

Use Amazon Kinesis Data Streams to ingest all order requests from the frontend. Configure the Amazon EC2 instances to continuously poll the stream and process orders in near real time.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 35

A company uses AWS to run its workloads. The company uses AWS Organizations to manage its accounts. The company needs to identify which departments are responsible for specific costs.

New accounts are constantly created in the Organizations account structure. The Organizations continuous integration and continuous delivery (CIICD) framework already adds the populated department tag to

the AWS resources. The company wants to use an AWS Cost Explorer report to identify the service costs by department from all AWS accounts.

Which combination of steps will moot these requirements with the MOST operational efficiency? (Select TWO.)

A

Activate the aws:createdBy cost allocation tag and the department cost allocation tag in the management account.

B

Create a new cost and usage report in Cost Explorer Group by the department allocation tag. Apply a filter to see all linked accounts and services.

C

Activate only the department cost allocation tag in the management account

D

Create a new cost and usage report in Cost Explorer Group by the department cost allocation tag without any other filters.

E

Activate only the aws:createdBy cost allocation tag in the management account.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 36

A company provides an API interface to customers so the customers can retrieve their financial information. The company expects a larger number of requests during peak usage times of the year.

The company requires the API to respond consistently with low latency to ensure customer satisfaction. The company needs to provide a compute host for the API.

Which solution will meet these requirements with the LEAST operational overhead?

A

Use an Application Load Balancer and Amazon ECS.

B

Use Amazon API Gateway and AWS Lambda functions with provisioned concurrency.

C

Use an Application Load Balancer and an Amazon EKS cluster.

D

Use Amazon API Gateway and AWS Lambda functions with reserved concurrency.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 37

A company is deploying an application that processes streaming data in near-real time. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to provide the lowest possible latency between nodose

Which networking solution meets these requirements?

A

Place the EC2 instances in multiple VPCs. and configure VPC peering.

B

Attach an Elastic Fabric Adapter (EFA) to each EC2 instance.

C

Run the EC2 instances in a spread placement group.

D

use Amazon Elastic Block Store (Amazon EBS) optimized instance types.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 38

A company is developing a highly available natural language processing (NLP) application. The application handles large volumes of concurrent requests. The application performs NLP tasks such as entity recognition, sentiment analysis, and key phrase extraction on text data. The company needs to store data that the application processes in a highly available and scalable database. Which solution will meet these requirements?

A

Create an Amazon API Gateway REST API endpoint to handle incoming requests. Configure the REST API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Comprehend to perform NLP tasks on the text data. Store the processed data in Amazon DynamoDB.

B

Create an Amazon API Gateway HTTP API endpoint to handle incoming requests. Configure the HTTP API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Translate to perform NLP tasks on the text data. Store the processed data in Amazon ElastiCache.

C

Create an Amazon SQS queue to buffer incoming requests. Deploy the NLP application on Amazon EC2 instances in an Auto Scaling group. Use Amazon Comprehend to perform NLP tasks. Store the processed data in an Amazon RDS database.

D

Create an Amazon API Gateway WebSocket API endpoint to handle incoming requests. Configure the WebSocket API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Textract to perform NLP tasks on the text data. Store the processed data in Amazon ElastiCache.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 39

A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the Aurora database by using user names and passwords that the company stores locally in a file.

The company the user names and passwords every month. The company wants to minimize the operational overhead of credential management

Which solution will meet these requirements.

A

Store the credentials as a secret within AWS Secrets Manager. Assign IAM permissions to the secret Reconfigure the application to call the secret. Enable rotation on the secret and configure rotation to occur on a monthly schedule.

B

Use AWS Systems Manager Parameter Store to create a new parameter for the credentials. Use IAM policies to restrict access to the parameter Reconfigure the application to access the parameter

C

Create an Amazon S3 bucket to store objects. Use an AWS Key Management Service (AWS KMS) key to encrypt the objects. Migrate the credentials file to the S3 bucket Update the application to retrieve the credentials file from the S3 bucket,

D

Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume for each EC2 instance. Attach the encrypted EBS volumes to the EC2 instances. Migrate the credentials file to the new EBS volumes. Point the application to the encrypted EBS volumes.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 40

A company runs a fleet of Amazon EC2 On-Demand Instances to support a document processing application that has variable usage patterns. The company wants to optimize compute costs for the application. The company needs a solution that can tolerate occasional disruptions to document processing jobs.

Which solution will meet these requirements?

A

Replace the EC2 instances with an Amazon EKS cluster that uses AWS Fargate Spot capacity.

B

Use the EC2 Spot Instance placement score feature to identify which instance type to use. Deploy the application on Spot Instances.

C

Create a single EC2 Auto Scaling group. Set a mixed configuration of EC2 On-Demand Instances and EC2 Spot Instances.

D

Continue to use EC2 On-Demand Instances. Purchase Convertible Reserved Instances.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 41

A company has hired an external vendor to work in the company's AWS account. The vendor uses an automated tool that the vendor hosts in its own AWS account. The vendor does not have IAM access to the company's AWS account.

A solutions needs to grant access to the vendor

Which solution will meet these requirements MOST securely?

A

Create an IAM role in the company’s account to delegate access to the vendor's IAM role. Attach the appropriate IAM policies to the new IAM role to grant the permissions that the vendor requires.

B

Create an IAM user in the company's account that has a password that meets the company's password complexity requirements. Attach the appropriate IAM policies to the new IAM user to grant the permissions that the vendor

C

Create an IAM group in the company's account. Add the IAM user for the vendor's automated tool from the vendor account to the IAM group. Attach the appropriate IAM policies to the group to grant the permissions that the vendor requires.

D

Create a new identity provider (IdP) that has a provider type of AWS account. Supply the vendor's AWS account ID and username. Attach the appropriate IAM policies to the new IdP to grant the permissions that the vendor requires.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 42

A company's web application currently uses large sets of relational data that have table relationships in a MySQL database that runs on an Amazon EC2 instance. The web application has unpredictable and highly variable workloads. Outside of business hours, there are long periods of no database activity. The company has a backup of the existing database. The company needs a solution to optimize operational costs while allowing the database to automatically scale to meet demand. What solution will meet these requirements?

A

Deploy an Amazon RDS for MySQL Single-AZ database instance. Choose On-Demand pricing. Import the database backup into the RDS for MySQL database. Relaunch the RDS database instance with a larger instance size during usage spikes.

B

Deploy Amazon RDS for MySQL Multi-AZ database instances. Purchase RDS Reserved Instances. Import the database backup into the RDS for MySQL database instances. Configure instance scaling by using the AWS CLI.

C

Deploy an Amazon DynamoDB table with provisioned capacity. Enable auto scaling. Migrate the data to DynamoDB and update application queries to use DynamoDB APIs.

D

Deploy an Amazon Aurora Serverless v2 DB cluster. Import the database backup into the DB cluster. Configure the database to scale capacity based on workload.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 43

A company runs an enterprise resource planning (ERP) system on Amazon EC2 instances in a single AWS Region. Users connect to the ERP system by using a public API that is hosted on the EC2 instances.

International users report slow API response time from their data counters .

A solutions architect needs to improve API response times for the international users.

Which solution will meet these requirements MOST cost-effectively?

A

Set up an AWS Direct Connect connection that has a public virtual interface (VIF) to connect each user's data center to the EC2 instances. Create a Direct Connect gateway for the ERP system API to route user API requests.

B

Deploy Amazon API Gateway endpoints in multiple Regions. Use Amazon Route 53 latency-based routing to route requests to the nearest endpoint. Configure a VPC peering connection between the Regions to connect to the ERP system.

C

Set up AWS Global Configure listeners for the necessary ports. Configure endpoint groups for the appropriate Regions to distribute traffic. Create an endpoint in each group for the APL

D

Use AWS Site-to-Site VPN to establish VPN tunnels between multiple Regions and user networks, Route traffic to the API through the VPN connections.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 44

A company runs a high-traffic web application that has a three-tier architecture that consists of a web layer, an application layer, and a database layer. The web layer and application layer run on Amazon EC2 instances behind an Application Load Balancer (ALB). The application layer is stateless and supports automatic scaling. The database layer uses Amazon RDS for MySQL in a Multi-AZ configuration and relies on a relational architecture.

The company is preparing for a large marketing event that is expected to drive a sharp increase in read traffic. The company must ensure that the application remains highly available and responsive under load. The company wants to scale the application's architecture components but does not want to modify the application.

Which combination of solutions will meet these requirements? (Select THREE.)

A

Deploy an Amazon CloudFront distribution. Specify the web layer as the origin.

B

Enable automatic scaling for EC2 instances in the application layer.

C

Migrate the database to Amazon Aurora. Configure Aurora Auto Scaling and Aurora Replicas.

D

Set up an Amazon ElastiCache (Redis OSS) cluster in front of the database.

E

Replace the ALB with a Network Load Balancer (NLB).

F

Migrate the database to an Amazon DynamoDB table.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 45

A solutions architect has AWS Lambda functions that need to access a company's intern al data science libraries and reference data. Separate teams manage the libraries and the data. The teams must be able to update and upload new data independently The Lambda functions are connected to the company's central VPC.

Which solution will provide the Lambda functions with access to the libraries and data?

A

Attach an Amazon EBS volume to the Lambda functions by using EBS Multi-Attach in the central VPC. Update the Lambda function execution roles to give the functions access to the EBS volume. Update the Lambda function code to reference the files in the EBS volume.

B

Compress the libraries and reference data in a Lambda /tmp folder. Update the Lambda function code to reference the files in the /tmp folder.

C

Set up an Amazon EFS file system with mount targets in the central VPC. Configure the Lambda functions to mount the EFS file system. Update the Lambda function execution roles to give the functions access to the EFS file system.

D

Set up an Amazon FSx for Windows File Server file system with mount targets in the central VPC. Configure the Lambda functions to mount the Amazon FSx file system. Update the Lambda function execution roles to give the functions access to the Amazon FSx file system.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 46

A retail company runs multiple containerized applications on Amazon ECS. The company's inventory system includes a primary task that processes orders continuously and a sidecar task that performs batch reconciliation. The reconciliation task runs a few times each week when it is invoked by specific events.

The company wants to optimize costs by refactoring the current architecture while maintaining all current functionality.

Which solution will meet these requirements in the MOST cost-effective way?

A

Scale down the ECS cluster during periods of inactivity by using AWS Auto Scaling.

B

Convert the reconciliation task to use AWS Fargate Spot Instances.

C

Migrate the reconciliation task to an AWS Lambda function. Use Amazon SQS messages from the primary task to invoke the function.

D

Implement an Amazon EventBridge scheduled rule to start and stop the reconciliation task on a predefined schedule.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 47

A company is running a two-tier web-based application an on-premises data center The application layer consists of a single server running a stateful application. The application connects to a PostgreSQL

database running on a separate server. The application's user base is expected to grow significantly, so the company is migrating the application and database to AWS. Tho solution will use Amazon Aurora PostgreSQL, Amazon EC2 Auto Scaling, and Elastic Load Balancing.

Which solution will provide a consistent user experience that will allow the application and database tiers to scale?

A

Enable Aurora Auto Scaling for Aurora Replicas, use a Network Load Balancer with the least outstanding requests routing algorithm and sticky sessions enabled.

B

Enable Aurora Auto Scaling for Aurora writers. Use an Application Load Balancer with the round robin routing algorithm and sticky sessions enabled.

C

Enable Aurora Auto Scaling for Aurora Replicas. Use an Application Load Balancer with the round robin routing algorithm and sticky sessions enabled.

D

Enable Aurora Auto Scaling for Aurora writers. Use a Network Load Balancer with the beast outstanding requests routing algorithm and sticky sessions enabled.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 48

A company is building a containerized application on AWS. The application uses the Linux operating system. The company needs to provide a persistent storage solution for

the application.

The company expects the storage solution to have varying data access patterns. The solution must have native storage tiering capabilities and must be scalable. The

solution must not require the company to provision storage upfront.

Which solution will meet these requirements in the MOST cost-effective way?

A

Use Amazon for NetApp ON TAP to set up persistent file storage that uses SSD storage for performance. Use the capacity pool storage tier.

B

Use an Amazon EFS file system in Elastic mode. Use the Intelligent Tiering lifecycle management feature.

C

Configure two Amazon FSx for Windows File Server file systems, IJse an SSD-based file system for performance and an HDD-based file system for Iow-cost storage.

D

Launch an Amazon EC2 instance that is backed by an Amazon EBS volume. Use the EBS volume to create a file share.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 49

An ecommerce company is migrating its on-premises workload to the AWS Cloud. The workload currently consists of a web application and a backend Microsoft SQL database for storage.

The company expects a high volume of customers during a promotional event. The new infrastructure in the AWS Cloud must be highly available and scalable.

Which solution will meet these requirements with the LEAST administrative overhead?

A

Migrate the web application to two Amazon EC2 instances across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS for Microsoft SQL Server with read replicas in both Availability Zones.

B

Migrate the web application to an Amazon FC2 instance that runs in an Auto Scaling group across two Availability Zones behind an Application Load Balancer Migrate the database to two FC2 instances across separate AWS Regions with database replication.

C

Migrate the web application to Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS with Multi-AZ deployment.

D

Migrate the web application to three Amazon FC2 instances across three Availability Zones behind an Application Load Balancer Migrate the database to throe FC2 instances across three Availability Zones,

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 50

A company needs to design a resilient web application to process customer orders. The web application must automatically handle increases in web traffic and application usage without affecting the customer

experience or losing customer orders.

Which solution will meet these requirements?

A

Use a NAT gateway to manage web traffic. Use Amazon EC2 Auto Scaling groups to receive, process, and store processed customer orders. Use an AWS Lambda function to capture and store unprocessed orders.

B

use a Network Load Balancer (NLB) to manage web traffic. Use an Application Load Balancer to receive customer orders from the NLB. use Amazon Redshift with a Multi-AZ deployment to store unprocessed and processed customer orders.

C

use a Gateway Load Balancer (GWLB) to manage web traffic. use Amazon Elastic Container Service (Amazon ECS) to receive and process customer orders. use the GWLB to capture and store unprocessed orders. Use Amazon DynamoDB to store processed customer orders.

D

use an Application Load Balancer to manage web traffic. Use Amazon EC2Auto Scaling groups to receive and process customer orders. Use Amazon Simple Queue Service (Amazon SQS) to store unpressed orders. Use Amazon RDS with a Multi-AZ deployment to store processed customer orders.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 51

A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needs to ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates.

Which solution will meet these requirements with the MOST operational efficiency?

A

use a CloudFront security policy to create a certificate.

B

use a CloudFront origin access control (OAC) to create a certificate.

C

Use AWS certificate Manager (ACM) to create a certificate. Use DNS validation for the domain.

D

use AWS Certificate Manager (ACM) to create a certificate. use email validation for the domain.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 52

A company runs a web application on Amazon EC2 instances. The application also uses an Amazon DynamoDB table. The application generates sporadic HTTP 500 errors. The DynamoDB table is operating in on-demand mode, and other applications use the table without any issues.

A solutions architect wants to resolve the HTTP 500 errors without disrupting in the web application.

Which solution will meet these requirements.

A

Configure DynamoDB to support larger write requests for increased throughput.

B

Enable DynamoDB Streams to monitor changes in the table.

C

Configure the application to use exponential backoff and retries to query the table.

D

Configure the application to use strongly consistent reads.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 53

A global company operates in multiple AWS Regions to meet data residency requirements. The company uses AWS Organizations to manage its accounts.

The company wants to restrict IAM roles and access to specific Regions to prevent accidental data operations across geographic boundaries.

Which solution will meet these requirements?

A

Configure a service control policy (SCP) to dony the ec2:Runlnstances action in non-mmpliant Regions.

B

Configure IAM policies by using the aws:RequestedRegion condition.

C

Configure IAM role trust policies that use the aws:Sourcelp condition.

D

Configure AWS Config to detect unwanted access across Regions.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 54

A company operates a food delivery service- Because of recent growth, the company's order processing system is experiencing scaling problems during peak traffic hours. The current architecture includes Amazon EC2 instances in an Auto Scaling group that collect orders from an application. A second group of EC2 instances in an Auto Scaling group fulfills the orders.

The order collection process occurs quickly, but the order fulfillment process can take longer Data must not be lost because of a scaling event. A solutions architect must ensure that the order collection process and the order fulfillment process can both scale adequately during peak traffic hours.

Which solution will meet these requirements?

A

Use Amazon CloudWatch to monitor the CPIJUtilization metric for each instance in both Auto Scaling groups. Configure each Auto Scaling group's minimum capacity to meet its peak workload value,

B

Use Amazon CloudWatch to monitor the CPIJUtilization metnc for each instance in both Auto Scaling groups. Configure a CloudWatch alarm to invoke an Amazon SNS topic to create additional Auto Scaling groups on demand.

C

Provision two Amazon SQS queues. Use one SQS queue for order collection. Use the second SQS queue for order fulfillment Configure the EC2 instances to poll their respective queues, Scale the Auto Scaling groups based on notifications that the queues send.

D

Provision two Amazon SQS queues. Use one SOS queue for order collection. Use the second SQS queue for order fulfillment. Configure the EC2 instances to poll their respective queues. Scale the Auto Scaling groups based on the number of messages in each queue.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 55

A company wants to develop a database tool that is compatible with PostgreSQL- The company will run the tool only during business hours- The company wants to deploy the tool to AWS- The company needs to set up a development environment to support development efforts.

The development environment must optimize database compute costs during the frequent and prolonged periods of inactivity

Which solution will meet these requirements?

A

Deploy an Amazon EC2 instance. Install a PostgreSQL database on the instance. Implement custom scripts to monitor database connections and to shut down the EC2 instance if no connections are detected for a specified period of time.

B

Deploy an Amazon Aurora provisioned DB cluster that has PostgreSQL compatibility on a db.t3small instance. Use scheduled scripts to stop the cluster outside of business hours and start it again during business hours.

C

Deploy an Amazon Aurora Serverless v2 DB cluster that has PostgreSQL compatibility. Set the minimum capacity of the DB cluster to O Aurora capacity units (ACUs). Set the auto-pause interval to 30 minutes.

D

Store all development data as Apache Parquet files in Amazon S3, Use Amazon Athena to run SQL queries directly against the data in Amazon $3. Configure Athena to write the results of INSERT/UPDATE operations back to Amazon S3.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 56

A company is building a compute-intensive application that will run on a fleet of Amazon EC2 instances- The application uses attached Amazon EBS volumes for storing data. The EBS volumes will be created at time of initial deployment The application will process sensitive information. All of the data must be encrypted- The solution should not impact the application's performance.

Which solution will meet these requirements?

A

Configure the fleet of EC2 instances to use encrypted EBS volumes to store data.

B

Configure the application to write all data to an encrypted Amazon S3 bucket

C

Configure a custom encryption algorithm for the application that will encrypt and decrypt all data.

D

Configure an Amazon Machine Image (AMI) that has an encrypted root volume and store the data to ephemeral disks.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 57

A company is building an application on an Amazon ECS cluster that uses the AWS Fargate launch type. The application must read files from a private Amazon S3 bucket. The company needs to design a security solution to allow ECS tasks to retrieve data from the S3 bucket.

Which solution will meet these requirements with the LEAST administrative effort?

A

Assign an inline IAM policy to the task role that is configured in the ECS task definition. Configure the policy to grant access to the S3 bucket.

B

Create an IAM user that has programmatic access to the S3 bucket. Store the IAM user credentials as a parameter in AWS Systems Manager Parameter Store. Configure the ECS taskdefinition to read the parameter during runtime.

C

Assign an IAM policy to the task execution role that is configured in the ECS task definition. Configure the policy to grant access to the S3 bucket

D

Create an IAM user and access keys for the S3 bucket. Store the access credentials as a secret in AWS Secrets Manager. Configure the ECS task definition to read the secret during runtime.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 58

A company needs to optimize costs for a properity, non-production x86-based application- The application runs on a general purpose Amazon EC2 instance and is over provisioned- The application is CPU intensive- The company does not want to re-architect or recompile the application

Which solution will meet these requirements?

A

Use AWS Compute Optimizer recommendations and follow compute-optimized instance recommendations.

B

Use AWS Compute Optimizer recommendations and follow Graviton instance recommendations.

C

Use Amazon SageMaker Al recommendations and follow compute-optimized instance recommendations.

D

Use Amazon SageMaker Al recommendations and follow Graviton instance recommendations.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 59

A company is developing an automated reporting application. The application accesses raw data in an Amazon S3 bucket, performs lightweight data processing, and creates and sends a report each night.

The total processing time usually takes a few minutes. However, the amount of raw data that the application must process varies. Unusually large amounts of data can increase the total processing time by up to 20 minutes.

The company needs a solution to handle various amounts of data.

Which solution will meet these requirements?

A

Distribute the application logic across several AWS Lambda functions. Create an AWS Step Functions workflow to orchestrate the Lambda functions. Create an Amazon SNS rule to invoke the Step Functions workflow on a schedule.

B

Create an AWS Lambda function to process the data from the S3 bucket and to send the report. Create an Amazon EventBridge event rule to invoke the Lambda function on a schedule.

C

Create an AWS Glue ETL job to process the data from the S3 bucket and create and send the report. Configure a trigger to run the job on a schedule.

D

Create an AWS Lambda function to process the data from the S3 bucket and send the report. Create an Amazon SNS rule to invoke the Lambda function on a schedule.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 60

A company runs an application on a Kubernetes cluster on premises- The company wants to deploy the application and its components to AWS as a secondary site- The company does not want to make any major changes to the application's architecture.

Which solution will meet these requirements with the LEAST operational effort?

A

Create an Amazon EKS cluster Deploy the application on Amazon EC2 nodes.

B

Create an Amazon ECS cluster. Deploy the application on AWS Fargate.

C

Create a self-hosted Kubemetes cluster on Amazon EC2. Deploy the application to the cluster

D

Create an Amazon EKS cluster on AWS Outposts. Deploy the application on Amazon EC2 nodes.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 61

A company runs Amazon EC2 Linux instances that do not have public IP addresses- The company hosts the instances in private subnets in a VPC- The company needs to use SSH to access the EC2 instances. The company does not want to maintain long-lived SSH keys or to install additional software on the EC2 instances. The company wants to use IAM for authentication.

Which solution will meet these requirements?

A

Set up a bastion host in a new public subnet. Use the bastion host to connect to the EC2 instances.

B

Configure an Amazon EC2 Instance Connect endpoint that has the required permissions. Use the Instance Connect endpoint to connect to the EC2 instances.

C

Use the AWS CLI to connect to the EC2 instances.

D

Set up an AWS Direct Connect connection. Establish a private virtual interface (VIF) to connect to the EC2 instances.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 62

A company is migrating a microservices-based application to AWS- The application requires a container orchestration solution that provides high availability and automatic scaling- The company wants to reduce the operational overhead of managing the container infrastructure.

Which solution will meet these requirements?

A

Deploy containers on Amazon EC2 instances. Use custom scripts to handle orchestration and scaling.

B

Deploy containers on Amazon ECS With the AWS Fargate launch type.

C

Use Amazon EKS to run containers and manage the cluster configuration and associated infrastructure.

D

Use AWS Lambda functions to run microservices that are packaged as container images.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 63

A company performs a security review of its AWS workloads and finds that all the company's IAM users have the Administrator Access IAM managed policy directly attached- The company's IAM users belong to either an engineering department or an operations department. Engineering users require full read and write access to all resources- Operations users require only read access to all resources.

The company must apply the principle of least privilege to user access.

Which solution will meet this requirement in the MOST operationally efficient way?

A

Create an IAM group for each department Add either the AdministratorAccess or ReadOnlyAccess IAM managed policy to each group as appropriate. Add each department user to the appropriate IAM group. Remove existing IAM permissions from the users.

B

Create an IAM group named Staff Apply both the AdministratorAccess and ReadOnlyAccess IAM managed policy to the Staff IAM group. Add all IAM users to the Staff group. Remove existing IAM permissions from the users.

C

Add the ReadOnlyAccess IAM managed policy to IAM users that belong to the operations department users. Remove existing AdministratorAccess IAM permissions from the operations department users. Add a tag of Operations to the operations department IAM users,

D

Add the ReadOnlyAccess inline policy statement to IAM users that belong to the operations department. Remove the existing AdministratorAccess IAM permissions from operations department users. Add a tag of Operations to the operations department IAM users,

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 64

An ecommerce company runs a transaction processing system within a large application on a set of Amazon EC2 instances behind an Application Load Balancer (ALB). The transaction process handles order creation, payment initiation, and inventory updates.

The company has observed pefformance issues in the transaction workflow as the volume of transactions has increased. The company wants to re-architect the transaction process to introduce horizontal scalability and to improve cost efficiency.

Which solution will meet these requirements?

A

Decouple the transaction system into microservices that run on AWS Lambda functions. Expose the microservices through a central Amazon API Gateway REST API. IJse Amazon SQS queues to decouple order creation and payment processing.

B

Migrate the transaction system to an Amazon EKS cluster. Deploy the Kubemetes Vertical Pod Auto scaler to manage application scalability

C

Add caching layers to the transaction system by using an Amazon ElastiCache (ValKey) cluster- Scale the EC2 instances to the largest size available to handle the increased load-

D

Decouple the transaction system into microservices- Deploy each microservice as a separate application to its own dedicated group of EC2 instances- Place each group of instances behind a separate ALB. Scale the application by launching larger EC2 instance sizes as needed.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 65

A company is designing a critical three-tier web application- The application must be highly available and fault tolerant. The company will deploy the application in the eu-west-l Region. The application must continue to function if the application encounters a fault in one Availability Zone.

Which solution will meet these requirements?

A

Deploy the application on multiple Amazon EC2 instances in a single Availability Zone behind an Application Load Balancer Use an Amazon RDS Multi-AZ deployment for the database layer

B

Deploy the application in an Amazon EC2 Auto Scaling group across multiple Availability Zones behind an Application Load Balancer. Use an Amazon RDS Multi-AZ deployment for the database layer.

C

Deploy the application on multiple EC2 instances in a single Availability Zone behind an Application Load Balancer Use Amazon DynamoDB global tables for the database layer

D

Deploy the application in muRiple Amazon EC2 Auto Scaling groups across multiple Availability Zones behind an Application Load Balancer Use an Amazon DocumentDB cluster with a single instance for the database layer.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 66

A company deploys a stateful application on Amazon EC2 On-Demand Instances in multiple Availability Zones behind an Application Load Balancer (ALB). The application workload is predictable, and the company has not received any CPU usage alerts. The company expects to run the application for at least 1 year. The company expects CPU usage to increase by 50% during an upcoming 2-week holiday period. The company wants to optimize costs for the application for both the holiday period and normal operations. Which solution will meet these requirements in the MOST cost-effective way?

A

Continue to use On-Demand Instances to handle the existing workload. Purchase additional On-Demand Instances to handle the capacity requirement for the upcoming holiday period.

B

Purchase a 12-month EC2 Instance Savings Plan to handle the existing workload. Use On-Demand Instances to handle the additional capacity requirement for the upcoming holiday period.

C

Purchase a 12-month Compute Savings Plan to handle the existing workload. Use Spot Instances to handle the additional capacity requirement for the upcoming holiday period.

D

Purchase a 12-month Compute Savings Plan to handle both the existing workload and the additional capacity requirement for the upcoming holiday period.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 67

A company is building a cloud-based application on AWS that will handle sensitive customer data- The application uses Amazon RDS for the database, Amazon S3 for object storage, and S3 Event Notifications that invoke AWS Lambda for serverless processing.

The company uses AWS IAM Identity Center to manage user credentials. The development, testing, and operations teams need secure access to Amazon RDS and Amazon S3 while ensuring the confidentiality of sensitive customer data. The solution must comply with the principle of least privilege.

Which solution meets these requirements with the LEAST operational overhead?

A

Use IAM roles with least privilege to grant all the teams access. Assign IAM roles to each team with customized IAM policies defining specific permission for Amazon RDS and S3 object access based on team responsibilities.

B

Enable IAM Identity Center with an Identity Center directory. Create and configure permission sets with granular access to Amazon RDS and Amazon S3. Assign all the teams to groups that have specific access with the permission sets.

C

Create individual IAM users for each member in all the teams with role-based permissions. Assign the IAM roles with predefined policies for RDS and S3 access to each user based on user needs. Implement IAM Access Analyzer for periodic credential evaluation.

D

Use AWS Organizations to create separate accounts for each team. Implement cross-account IAM roles with least privilege. Grant specific permission for RDS and $3 access based on team roles and responsibilities.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 68

A company wants to re-architect an application to use Amazon SQS queues. The company must ensure that the application can handle sudden increases in traffic. Which Amazon SQS feature will help meet this requirement?

A

FIFO queues

B

Visibility timeout

C

Message batching

D

Long polling

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 69

A solutions architect manages a containerized application that is deployed on Amazon ECS- The application stores data in an Amazon DynamoDB database- The solutions architect must implement a solution to rotate the database credentials every 30 days.

Which solution will meet these requirements with the LEAST development effort?

A

Store the credentials as an ECS environment variable. Enable encryption by using AWS KMS with scheduled rotation configured

B

Store the credentials as a secure string parameter in AWS Systems Manager Parameter Store. Configure automated rotation of the parameter on a schedule.

C

Store the credentials as a secret in AWS Secrets Manager Configure automated rotation of the secret on a schedule.

D

Store the ciphertext as an application environment variable. Implement client-side encryption and scheduled rotation by using code.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 70

A company wants to migrate an on-premises video processing application to AWS. Processing times range from 5-30 minutes. The application must run multiple jobs in parallel. The application processes videos that users upload to an Amazon S3 bucket.

Which solution will meet these requirements with the LEAST operational overhead?

A

Configure the S3 bucket to send S3 event notifications to an Amazon SQS standard queue. Deploy the application on an Amazon ECS cluster. Configure automatic scaling for AWS Fargate tasks based on the SQS queue size.

B

Configure the S3 bucket to send S3 event notifications to an Amazon SQS FIFO queue. Deploy the application on Amazon EC2 instances. Create an Auto Scaling group to scale based on the SQS queue size.

C

Configure the S3 bucket to send S3 event notifications to an Amazon SQS standard queue. Deploy the application as an AWS Lambda function. Configure the Lambda function to poll the SQS queue.

D

Configure the S3 bucket to send S3 event notifications to an Amazon SNS topic. Deploy the application as an AWS Lambda function. Configure the SNS topic to invoke the Lambda function.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 71

A solutions architect needs to copy files from an Amazon S3 bucket to an Amazon EFS file system and another S3 bucket. The files must be copied continuously- New files are added to the original S3 bucket consistently- The copied files should be overwritten only if the source file changes

Which solution will meet these requirements with the LEAST operational overhead?

A

Create an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer only data that has changed.

B

Create an AWS Lambda function. Mount the file system to the function. Set up an S3 event notification to invoke the function when files are created and changed in Amazon S3. Configure the function to copy files to the file system and the destination S3 bucket.

C

Create an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer all data.

D

Launch an Amazon EC2 instance in the same VPC as the file system. Mount the file system. Create a script to routinely synchronize all objects that changed in the origin S3 bucket to the destination S3 bucket and the mounted file system.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 72

An analytics company wants to deploy a custom extract, transform, and load (ETL) solution as a containerized application on AWS. The application requires high-performance access to files that are in a centralized repository. File processing can take up to 1 hour to finish.

Which solution will meet these requirements?

A

Deploy an AWS Lambda function from a container image. Create and attach an Amazon EFS file system to the function.

B

Deploy containers on Amazon ECS with the Amazon EC2 launch type. Configure the EC2 instances to use instance store volumes.

C

Deploy containers on Amazon ECS with the AWS Fargate launch type. Mount an Amazon EFS file system to the containers.

D

Create an Amazon S3 Express One Zone bucket to store the files. Deploy an AWS Lambda function from a container image. Process files from the S3 Express One Zone bucket.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 73

A company runs an application on Amazon EC2 instances. EC2 instance usage is higher during daytime hours than nighttime hours. A solutions architect wants to automatically optimize Amazon EC2 costs based on this usage pattern.

Which AWS service or purchasing option will meet this requirement?

A

Spot Instances

B

Reserved Instances

C

AWS CloudFormation

D

AWS Auto scaling

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 74

A company uses an organization in AWS Organizations to manage five AWS accounts. The company requires a centralized solution to prevent anyone from creating IAM users or access keys in any account.

Which solution will meet this requirement with the LEAST administrative overhead?

A

Attach a service control policy (SCP) to the organization root that denies the creation of IAM users and access keys.

B

Add IAM inline policies to every user that block the creation of IAM users and access keys.

C

Enable Amazon GuardDuty in a delegated administrator account to detect the creation of IAM users and access keys.

D

Create AWS Config rules to automatically delete new IAM users and access keys after they are created.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 75

A company stores a large number of image files in an Amazon S3 bucket The images need to be readily available for 180 days. The company rarely accesses images that are older than 180 days- However, the company must be able to access images immediately when necessary-

The company wants to archive images that are older than 360 days, but the company must be able to access the images instantly when required. The images cannot be deleted. The company requires high availability and redundancy throughout the entire lifecycle of the files.

The company will use S3 Standard storage for the first 180 days. The company needs to configure S3 Lifecycle rules to handle the remaining lifecycle stages of the files.

Which solution will meet these requirements MOST cost-effectively?

A

Transform the objects to S3 One Zone-infrequent Access (S3 One Zone-IA) after 180 days. Transition the objects to S3 Glacier Instant after 360 days.

B

Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. Transition the objects to S3 Glacier Flexible Retrieval after 360 days.

C

Transition the objects to S3 Standard-infrequent Access (S3 Standard-IA) after 180 days. Transition the objects to S3 Glacier Instant Retrieval after 360 days.

D

Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days. Transition the objects to S3 Glacier Flexible Retrieval after 360 days.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 76

An application collects data and generates logs for all operational activities in a company's AWS Cloud infrastructure. The company wants a solution to store and retain the application logs. The logs must be immutable for 7 years. The company can delete the logs after 7 years.

Which solution will meet these requirements in the MOST cost-effective way?

A

Use Amazon S3 Glacier Flexible Retrieval to store the application logs. Configure S3 Object Lock and set a retention period of 7 years.

B

Use Amazon EBS volumes to store the application logs. Configure volume backups by using AWS Backup.

C

Use the Amazon S3 Express One Zone storage class to store the application logs. Configure an S3 bucket policy that requires users to authenticate by using multi-factor authentication (MFA).

D

Use an Amazon EFS file system to store the application logs. Configure file locking for each log file.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 77

A company hosts an application on Amazon EC2 instances behind an Application Load Balancer (ALB)- The company wants the application be accessible only from inside the VPC that hosts the ALB-

The company creates an alias record of examplecom in Amazon Route 53. The DNS record for the application must be resolvable only in the VPC where the application runs.

Which solution will meet these requirements?

A

Use an internet-facing ALB. Create a Route 53 public hosted zone for the application DNS name.

B

Use an internal ALB. Create a Route 53 public hosted zone for the application DNS name-

C

Use an internet-facing ALB. Create a Route 53 private hosted zone for the application DNS name,

D

Use an internal ALB. Create a Route 53 private hosted zone for the application DNS name

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 78

A company is creating a new web application- The application includes a single static webpage and a persistent database layer- The company expects millions of users to use the application during the same 4 hours every moming- The company expects that the application will have only a few thousand users during the rest of each day.

The company must be able to rapidly evolve the database schema when needed.

Which combination of solutions will meet these requirements and provide the MOST scalability? (Select TWO.)

A

Deploy Amazon DynamoDB as the database layer Create DynamoDB tables that have provisioned capacity.

B

Deploy Amazon Aurora as the database layer- Choose the serverless database engine mode.

C

Deploy Amazon DynamoDB as the database layer. Create DynamoDB tables that have on-demand capacity.

D

Deploy the static content to an Amazon S3 bucket Provision an Amazon CloudFront distribution that uses the S3 bucket as the origin.

E

Deploy the static content on an Amazon EC2 instance- Attach an Amazon EBS volume to the EC2 instance.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 79

A company runs an application on Amazon EC2 instances- The instances need to access an Amazon RDS database by using specific credentials- The company uses AWS Secrets Manager to contain the credentials the EC2 instances must use-

Which solution will meet this requirement?

A

Create an IAM role, and attach the role to each EC2 instance profile. Use an identity-based policy to grant the new IAM role access to the secret that contains the database credentials.

B

Create an IAM user, and attach the user to each EC2 instance profile. Use a resource-based policy to grant the new IAM user access to the secret that contains the database credentials.

C

Create a resource-based policy for the secret that contains the database credentials. Use EC2 Instance Connect to access the secret

D

Create an identity-based policy for the secret that contains the database credentials. Grant direct access to the EC2 instances.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 80

A company hosts its order processing system on AWS. The architecture consists of a frontend and a backend. The frontend includes an Application Load Balancer (ALB) and Amazon EC2 instances in an Auto-Scaling group. The backend includes an EC2 instance and an Amazon RDS MySQL database.

To prevent incomplete or lost orders, the company wants to ensure that order states are always preserved. The company wants to ensure that every order will eventually be processed, even after an outage or pause. Every order must be processed exactly once.

Which solution will meet these requirements?

A

Create an Auto Scaling group and an ALB for the backend. Create a read replica for the RDS database in a second Availability Zone. Update the backend RDS endpoint.

B

Create an Auto Scaling group and an ALB for the backend. Create an Amazon RDS proxy in front of the RDS database. Update the backend EC2 instance to use the Amazon RDS proxy endpoint.

C

Create an Auto Scaling group for the backend. Configure the backend EC2 instances to consume messages from an Amazon SQS FIFO queue. Configure a dead-letter queue (DLQ) for the SQS queue.

D

Create an AWS Lambda function to replace the backend EC2 instance. Subscribe the function to an Amazon SNS topic. Configure the frontend to send orders to the SNS topic.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 81

A company runs a web application that stores user-generated images. The application currently stores 500 GB of images. The average file size of the images is 2 MB. The company expects the total amount of images grow to 2 TB within 6 months. The application needs to serve all stored images with low latency to users from around the world.

Which storage solution will meet these requirements MOST cost-effectively?

A

Store images in Amazon EBS volumes that are attached to multiple Amazon EC2 instances across multiple AWS Regions. Serve the content locally based on each user's location.

B

Store images in an Amazon S3 bucket. Integrate the S3 bucket with Amazon CloudFront. Integrate the web application with a CloudFront endpoint to provide global access.

C

Store the images in an Amazon EFS file system. Use the Standard storage class with Regional access. Enable cross-Region replication to provide high-availability and global access.

D

Deploy Amazon FSx for Windows File Server in two AWS Regions. Set up Windows File Server Replication across Regions to provide global access.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 82

An ecommerce company has an application that uses Amazon DynamoDB tables that are configured with provisioned capacity. Order data is stored in a table named Orders. The Orders table has a primary key of order-ID and a sort key of product-ID. The company configured an AWS Lambda function to receive DynamoDB streams from the Orders table and to update a table named Inventory.

The company has noticed that during peak sales periods, updates to the Inventory table take longer than the company can tolerate.

Which solutions will resolve the slow table updates? (Select TWO.)

A

Add a global secondary index to the Orders table. Include the product-ID attribute.

B

Set the batch size attribute of the DynamoDB streams to be based on the size of items in the Orders table.

C

Increase the DynamoDB table provisioned capacity by 1,000 write capacity units (WCUs).

D

Increase the DynamoDB table provisioned capacity by 1,000 read capacity units (RCUs).

E

Increase the timeout of the Lambda function to 15 minutes.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 83

A company wants to use an API to translate text from one language to another. The API must receive an HTTP header value and pass the value to an embedded library. The solution must be able to translate documents within 6 minutes. The API must run custom authorization logic.

Which solution will meet these requirements?

A

Configure an Amazon API Gateway HTTP API that has an AWS_PROXY integration to synchronously call an AWS Lambda function to perform translations.

B

Use an Application Load Balancer (ALB) that has an Amazon Cognito integration to synchronously call an AWS Lambda function to perform translations.

C

Configure an Amazon API Gateway REST API that has an AWS_PROXY integration to asynchronously call an AWS Lambda function to perform translations.

D

Configure an Amazon API Gateway REST API that has an HTTP_PROXY integration to synchronously call a web endpoint that is hosted on an Amazon EC2 instance.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 84

A company runs multiple workloads in separate AWS environments. The company wants to optimize its AWS costs but must maintain the same level of performance for the environments.

The company's production environment requires resources to be highly available. The other environments do not require highly available resources.

Each environment has the same set of networking components, including the following:

1 VPC
1 Application Load Balancer
4 subnets distributed across 2 Availability Zones (2 public subnets and 2 private subnets)
2 NAT gateways (1 in each public subnet)
1 internet gateway

Which solution will meet these requirements?

A

Do not change the production environment workload. For each non-production workload, remove one NAT gateway and update the route tables for private subnets to target the remaining NAT gateway for the destination 0.0.0.0/0.

B

Reduce the number of Availability Zones that all workloads in all environments use.

C

Replace every NAT gateway with a t4g.large NAT instance. Update the route tables for each private subnet to target the NAT instance that is in the same Availability Zone for the destination 0.0.0.0/0.

D

In each environment, create one transit gateway and remove one NAT gateway. Configure routing on the transit gateway to forward traffic for the destination 0.0.0.0/0 to the remaining NAT gateway. Update private subnet route tables to target the transit gateway for the destination 0.0.0.0/0.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 85

A company runs a web application that uses an Amazon RDS for MySQL database. A company employee caused data loss by accidentally editing information in a database table.

The company must be able to recover from similar incidents in the future. The company must be able to restore the database to a specific point in time within the previous 30 days. The solution must restore the database with a maximum of 5 minutes of data loss.

Which solution will meet these requirements?

A

Read replicas

B

Manual snapshots

C

Automated backups

D

Multi-AZ deployments

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 86

A company currently runs a Linux-based application in a self-managed Docker container that runs on Amazon EC2 instances. The application runs a lightweight data processing tool that always completes its job within 3 minutes. The company wants an alternative deployment solution for the application to reduce infrastructure management overhead. The company is willing to make any required changes to the container image.

Which solution will meet this requirement with the LEAST operational overhead?

A

Deploy the application as an AWS Lambda function that uses the container image.

B

Deploy the application on Amazon EKS with the AWS Fargate launch type.

C

Deploy the application on Amazon ECS with the AWS Fargate launch type.

D

Deploy the application as a custom Amazon Machine Image (AMI) by using AWS Batch.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 87

A company uses an organization in AWS Organizations to manage multiple AWS accounts. The company is migrating users from IAM to AWS IAM Identity Center.
The company wants to ensure that no new IAM users can be created in any of the member accounts. The company wants to allow only existing IAM users to have access to the accounts.
Which solution will meet these requirements?

A

Create a service control policy (SCP) that denies the iam:CreateUser action. Apply the SCP to all the member accounts in the organization.

B

Create an IAM policy that denies all IAM write operations. Attach the policy to all the users.

C

Create an IAM group in each account. Attach a policy that denies the iam:CreateAccessKey action to the IAM group. Add the existing IAM users to the IAM group.

D

Create a permissions boundary that denies the iam:CreateAccessKey action. Attach the permissions boundary to all IAM users and IAM groups in the organization.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 88

A company needs a solution to process customer orders from a global ecommerce platform. The solution must automatically start processing new orders immediately and must maintain a history of all order processing attempts.

Which solution will meet these requirements in the MOST cost-effective way?

A

Create an Amazon EventBridge rule that invokes an AWS Lambda function once every minute to check for new orders. Configure the Lambda function to process orders and store results in Amazon Aurora.

B

Create an Amazon EventBridge event pattern that monitors the ecommerce platform's order events. Configure an EventBridge rule to invoke an AWS Lambda function when the platform receives a new order. Configure the function to store the results in Amazon DynamoDB.

C

Use an Amazon EC2 instance to poll the ecommerce platform for new orders. Configure the instance to invoke an AWS Lambda function to process new orders. Configure the function to log results to Amazon CloudWatch.

D

Use an Amazon SQS queue to invoke an AWS Lambda function when the platform receives a new order. Configure the function to process batches of orders and to store results in an Amazon EFS file system.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 89

A company is developing an automated reporting application. The application accesses raw data in an Amazon S3 bucket, performs lightweight data processing, and creates and sends a report each night.
The total processing time usually takes a few minutes. However, the amount of raw data that the application must process varies. Unusually large amounts of data can increase the total processing time by up to 20 minutes.
The company needs a solution to handle various amounts of data.
Which solution will meet these requirements?

A

Distribute the application logic across several AWS Lambda functions. Create an AWS Step Functions workflow to orchestrate the Lambda functions. Create an Amazon SNS rule to invoke the Step Functions workflow on a schedule.

B

Create an AWS Lambda function to process the data from the S3 bucket and to send the report. Create an Amazon EventBridge event rule to invoke the Lambda function on a schedule.

C

Create an AWS Glue ETL job to process the data from the S3 bucket and create and send the report. Configure a trigger to run the job on a schedule.

D

Create an AWS Lambda function to process the data from the S3 bucket and send the report. Create an Amazon SNS rule to invoke the Lambda function on a schedule

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 90

A solutions architect manages an analytics application. The application stores large amounts of semistructured data in an Amazon S3 bucket. The solutions architect wants to use parallel data processing to process the data more quickly. The solutions architect also wants to use information that is stored in an Amazon Redshift database to enrich the data.

Which solution will meet these requirements?

A

Use Amazon Athena to process the S3 data. Use AWS Glue with the Amazon Redshift data to enrich the S3 data.

B

Use Amazon EMR to process the S3 data. Use Amazon EMR with the Amazon Redshift data to enrich the S3 data.

C

Use Amazon EMR to process the S3 data. Use Amazon Kinesis Data Streams to move the S3 data into Amazon Redshift so that the data can be enriched.

D

Use AWS Glue to process the S3 data. Use AWS Lake Formation with the Amazon Redshift data to enrich the S3 data.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 91

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application uses Amazon DynamoDB as its database. The company wants to ensure high performance for reads and writes.
Which solution will meet this requirement MOST cost-effectively?

A

Configure automatic scaling for the DynamoDB table. Set a target utilization of 70%. Set the minimum and maximum capacity units based on the expected workload.

B

Analyze the DynamoDB table usage. Create a global secondary index (GSI) on the existing table for frequently used keys. Assign read and write capacity units appropriately.

C

Use DynamoDB provisioned throughput mode for the table. Create an Amazon CloudWatch alarm for the ThrottledRequests metric. Invoke an AWS Lambda function to increase provisioned capacity.

D

Create an Amazon DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX endpoint.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 92

A global company hosts its web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The web application has static data and dynamic data. The company stores its static data in an Amazon S3 bucket. The company wants to improve performance and reduce latency for the static data and dynamic data. The company is using its own domain name registered with Amazon Route 53.

What should a solutions architect do to meet these requirements?

A company hosts a training website on a fleet of Amazon EC2 instances that run web server software. The company anticipates that a new training product will be extremely popular and will receive high user traffic. The training product consists of dozens of training videos that are hosted on the website.
A solutions architect must minimize the load on the company's web servers.

Which solution will meet this requirement?

A

Store the videos in Amazon ElastiCache (Redis OSS). Update the web servers to serve the videos by using the ElastiCache API.

B

Store the videos in an Amazon EFS volume. Create a user data script to mount the EFS volume to the web servers.

C

Store the videos in an Amazon S3 bucket. Configure an Amazon CloudFront distribution, and set the S3 bucket as the origin. Create an origin access control (OAC) to secure access to the S3 bucket.

D

Store the videos in an Amazon S3 bucket. Create an AWS Storage Gateway Amazon S3 File Gateway to access the S3 bucket. Create a user data script to mount the S3 File Gateway to the web servers.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 93

A company plans to deploy containerized microservices in the AWS Cloud. The containers must mount a persistent file store that the company can manage by using OS-level permissions. The company requires fully managed services to host the containers and file store.
Which solution will meet these requirements?

A

Use AWS Lambda functions and an Amazon API Gateway REST API to handle the microservices. Use Amazon S3 buckets for storage.

B

Use Amazon EC2 instances to host the microservices. Use Amazon EBS volumes for storage.

C

Use Amazon ECS containers on AWS Fargate to handle the microservices. Use an Amazon EFS file system for storage.

D

Use Amazon ECS containers on AWS Fargate to handle the microservices. Use an Amazon EC2 instance that runs a dedicated file store for storage.

Premium Solution Locked

Unlock all 470 answers & explanations

QUESTION 94

An image-processing company has a web application that users use to upload images. The application uploads the images into an Amazon S3 bucket. The company has set up S3 event notifications to publish the object creation events to an Amazon SQS standard queue. The SQS queue serves as the event source for an AWS Lambda function that processes the images and sends the results to users through email. Users report that they are receiving multiple email messages for every uploaded image. A solutions architect determines that SQS messages are invoking the Lambda function more than once, resulting in multiple email messages.

What should the solutions architect do to resolve this issue with the LEAST operational overhead?

A

Set up long polling in the SQS queue by increasing the ReceiveMessage wait time to 30 seconds.

B

Change the SQS standard queue to an SQS FIFO queue. Use the message deduplication ID to discard duplicate messages.

C

Increase the visibility timeout in the SQS queue to a value that is greater than the total of the function timeout and the batch window timeout.

D

Modify the Lambda function to delete each message from the SQS queue immediately after the message is read before processing.

Premium Solution Locked

Unlock all 470 answers & explanations

Amazon AWS Certified Solutions Architect - Associate (SAA-C03)

Test the Practice Engine

Premium Bundle

Standard Simulation

Basic Tier

Verified Community

Success Network

Exam Overview

Skills Measured

Career Path

Common Questions

Is the material up to date?

What format do I get?

Is there a guarantee?

When do I get the download?

Free Study Guide Samples

Full Question Bank Locked

Certification Path

Related Certifications

Customer Reviews

David M.

Sarah J.

Michael C.

Need Assistance?

Get Exam Updates