Question 1

Un arquitecto de soluciones ha creado dos políticas IAM: Política1 y Política2. Ambas políticas están a un grupo IAM. Un ingeniero de la nube se añade como usuario IAM al grupo IAM. ¿Qué acción podrá realizar el ingeniero de la nube?

Accepted Answer

Eliminación de instancias de Amazon EC2

Answer

Eliminar usuarios IAM

Answer

Borrar directorios

Answer

Eliminación de registros de Amazon CloudWatch Logs

Question 2

Una empresa tiene una función de AWS Lambda que necesita acceso de lectura a un bucket de Amazon S3 que se encuentra en la misma cuenta de AWS. ¿Qué solución cumplirá estos requisitos de la manera MÁS segura?

Accepted Answer

Aplicar un rol de IAM a la función Lambda. Aplicar una política de IAM al rol para conceder acceso de lectura a el bucket de S3

Answer

Aplicar un rol IAM a la función Lambda. Aplique una política de IAM a la función para conceder acceso de lectura a todos los buckets S3 de la cuenta

Answer

Incrustar una clave de acceso y una clave secreta en la coda de la función Lambda para conceder los permisos IAM necesarios para el acceso de lectura al bucket de S3

Answer

. Aplicar una pokey al cubo S3 que conceda acceso de carretera al cubo S3

Question 3

Una compañía tiene una base de datos MySQL on-premise que gestiona datos transaccionales. empresa está migrando la base de datos a la nube de AWS. La base de datos migrada debe mantener compatibilidad con las aplicaciones de la compañía que utilizan la base de datos. La base de datos migrada también debe escalar automáticamente durante los periodos de mayor demanda.
¿Qué solución de migración cumplirá estos requisitos?

Accepted Answer

Utilizar AWS Database Migration Service (AWS DMS) para migrar la base de datos a Amazon Aurora. Active Aurora Auto Scaling.

Answer

Utilizar herramientas nativas de MySQL para migrar la base de datos a Amazon RDS para MySQL. Configure el escalado almacenamiento elástico.

Answer

Migrar la base de datos a Amazon Redshift mediante la utilidad mysqldump. Active Auto Scaling para el clúster de Amazon Redshift.

Answer

Utilice AWS Database Migration Service (AWS DMS) para migrar la base de datos a Amazon DynamoDB.

Question 4

Una empresa planea trasladar sus datos a un bucket de Amazon S3. Los datos deben cifrarse cuando se almacenen en el bucket de S3. Además, la clave de cifrado debe rotarse automáticamente automáticamente cada año.
¿Qué solución cumplirá estos requisitos con la MENOR sobrecarga operativa?

Accepted Answer

Cree una clave administrada por el cliente de AWS Key Management Service {AWS KMS). Habilite la rotación automática. Configure el comportamiento de cifrado predeterminado del bucket de S3 para utilizar la clave KMS administrada por el cliente. Mueva los datos al bucket de S3.

Answer

Trasladar los datos al bucket de S3. Utilizar el cifrado del lado del servidor con claves de cifrado administradas de Amazon S3 administradas por Amazon S3 (SSE-S3). Utilizar el comportamiento de rotación de claves integrado en las claves de cifrado SSE-S3.

Answer

Cree una clave administrada por el cliente de AWS Key Management Service (AWS KMS). Establezca el comportamiento de cifrado comportamiento de cifrado predeterminado del bucket de S3 para utilizar la clave KMS administrada por el cliente. Mueva los datos al bucket de S3. Rote manualmente la clave KMS cada año.

Answer

Cifrar los datos con material de clave de cliente antes de mover los datos al cubo de S3. Crear un AWS Key Management Service (AWS KMS) sin material de clave. Importar la clave de cliente cliente en la clave KMS. Habilite la rotación automática de claves.

Question 5

A company collects data from a large number of participants who use wearabledevices.The
company stores the data in an Amazon DynamoDB table and uses applications to analyze the dat a.
The data workload is constant and predictable. The company wants to stay at or below its forecasted
budget for DynamoDB.
Whihc solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use provisioned mode Specify the read capacity units (RCUs) and write capacity units (WCUs).

Answer

Use provisioned mode and DynamoDB Standard-Infrequent Access (DynamoDB Standard-IA).
Reserve capacity for the forecasted workload.

Answer

Use on-demand mode. Set the read capacity unite (RCUs) and write capacity units (WCUs) high
enough to accommodate changes in the workload.

Answer

Use on-demand mode. Specify the read capacity units (RCUs) and write capacity units (WCUs) with
reserved capacity.

Question 6

A solution architect needs to assign a new microsoft for a company's application. Clients must
be able to call an HTTPS endpoint to reach the micoservice. The microservice also must use AWS
identity and Access Management (IAM) to authentication calls. The soltions architect will write the
logic for this microservice by using a single AWS Lambda function that is written in Go 1.x.
Which solution will deploy the function in the in the MOST operationally efficient way?

Accepted Answer

Create an Amazon API Gateway REST API. Configure the method to use the Lambda function.
Enable IAM authentication on the API.

Answer

Create a Lambda function URL for the function. Specify AWS_IAM as the authentication type.

Answer

Create an Amazon CloudFront distribution. Deploy the function to Lambda@Edge. Integrate IAM
authentication logic into the Lambda@Edge function.

Answer

Create an Amazon CloudFront distribuion. Deploy the function to CloudFront Functions. Specify
AWS_IAM as the authentication type.

Question 7

A company runs an application that uses Amazon RDS for PostgreSQL. The application receives
traffic only on weekdays during business hours. The company wants to optimize costs and reduce
operational overhead based on this usage.
Which solution will meet these requirements?

Accepted Answer

Use the Instance Scheduler on AWS to configure start and stop schedules.

Answer

Turn off automatic backups. Create weekly manual snapshots of the database.

Answer

Create a custom AWS Lambda function to start and stop the database based on minimum CPU
utilization.

Answer

Purchase All Upfront reserved DB instances.

Question 8

Organizers for a global event want to put daily reports online as static HTML pages. The pages
are expected to generate millions of views from users around the world. The files are stored In an
Amazon S3 bucket. A solutions architect has been asked to design an efficient and effective solution.
Which action should the solutions architect take to accomplish this?

Accepted Answer

Use Amazon CloudFront with the S3 bucket as its origin.

Answer

Generate presigned URLs for the files.

Answer

Use cross-Region replication to all Regions.

Answer

Use the geoproximtty feature of Amazon Route 53.

Question 9

A company wants to run its critical applications in containers to meet requirements tor
scalability and availability The company prefers to focus on maintenance of the critical applications
The company does not want to be responsible for provisioning and managing the underlying
infrastructure that runs the containerized workload What should a solutions architect do to meet
those requirements?

Accepted Answer

Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate

Answer

Use Amazon EC2 Instances, and Install Docker on the Instances

Answer

Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 worker nodes

Answer

Use Amazon EC2 instances from an Amazon Elastic Container Service (Amazon ECS)-op6mized
Amazon Machine Image (AMI).

Question 10

A company runs a high performance computing (HPC) workload on AWS. The workload
required low-latency network performance and high network throughput with tightly coupled node-
to-node communication. The Amazon EC2 instances are properly sized for compute and storage
capacity, and are launched using default options.

What should a solutions architect propose to improve the performance of the workload?

Accepted Answer

Choose a cluster placement group while launching Amazon EC2 instances.

Answer

Choose dedicated instance tenancy while launching Amazon EC2 instances.

Answer

Choose an Elastic Inference accelerator while launching Amazon EC2 instances

Answer

Choose the required capacity reservation while launching Amazon EC2 instances.

Question 11

A solutions architect is designing a customer-facing application for a company. The
application's database will have a clearly defined access pattern throughout the year and will have a
variable number of reads and writes that depend on the time of year. The company must retain audit
records for the database for 7 days. The recovery point objective (RPO) must be less than 5 hours.
Which solution meets these requirements?

Accepted Answer

Use Amazon DynamoDB with auto scaling Use on-demand backups and Amazon DynamoDB
Streams

Answer

Use Amazon Redshift. Configure concurrency scaling. Activate audit logging. Perform database
snapshots every 4 hours.

Answer

Use Amazon RDS with Provisioned IOPS Activate the database auditing parameter Perform
database snapshots every 5 hours

Answer

Use Amazon Aurora MySQL with auto scaling. Activate the database auditing parameter

Question 12

A company is hosting a three-tier ecommerce application in the AWS Cloud. The company
hosts the website on Amazon S3 and integrates the website with an API that handles sales requests.
The company hosts the API on three Amazon EC2 instances behind an Application Load Balancer
(ALB). The API consists of static and dynamic front-end content along with backend workers that
process sales requests asynchronously.
The company is expecting a significant and sudden increase in the number of sales requests during
events for the launch of new products What should a solutions architect recommend to ensure that
all the requests are processed successfully?

Accepted Answer

Add an Amazon CloudFront distribution for the static content. Place the EC2 instances in an Auto
Scaling group to launch new instances based on network traffic.

Answer

Add an Amazon CloudFront distribution for the dynamic content. Increase the number of EC2
instances to handle the increase in traffic.

Answer

Add an Amazon CloudFront distribution for the dynamic content. Add an Amazon ElastiCache
instance in front of the ALB to reduce traffic for the API to handle.

Answer

Add an Amazon CloudFront distribution for the static content. Add an Amazon Simple Queue
Service (Amazon SOS) queue to receive requests from the website for later processing by the EC2
instances.

Question 13

A solutions architect is creating a new VPC design There are two public subnets for the load
balancer, two private subnets for web servers and two private subnets for MySQL The web servers
use only HTTPS The solutions architect has already created a security group tor the load balancer
allowing port 443 from 0 0 0 0/0 Company policy requires that each resource has the teas! access
required to still be able to perform its tasks Which additional configuration strategy should the
solutions architect use to meet these requirements?

Accepted Answer

Create a security group for the web servers and allow port 443 from the load balancer Create a security group for the MySQL servers and allow port 3306 from the web servers security group

Answer

Create a security group for the web servers and allow port 443 from 0.0.0.0/0 Create a security group for the MySQL servers and allow port 3306 from the web servers security group

Answer

Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0 Create a network ACL (or the MySQL servers and allow port 3306 from the web servers security group

Answer

Create a network ACL 'or the web servers and allow port 443 from the load balancer Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group

Question 14

A company is designing an application. The application uses an AWS Lambda function to
receive information through Amazon API Gateway and to store the information in an Amazon Aurora
PostgreSQL database.
During the proof-of-concept stage, the company has to increase the Lambda quotas significantly to
handle the high volumes of data that the company needs to load into the database. A solutions
architect must recommend a new design to improve scalability and minimize the configuration effort.
Which solution will meet these requirements?

Accepted Answer

Set up two Lambda functions. Configure one function to receive the information. Configure the
other function to load the information into the database. Integrate the Lambda functions by using an
Amazon Simple Queue Service (Amazon SQS) queue.

Answer

Refactor the Lambda function code to Apache Tomcat code that runs on Amazon EC2 instances.
Connect the database by using native Java Database Connectivity (JDBC) drivers.

Answer

Change the platform from Aurora to Amazon DynamoDB. Provision a DynamoDB Accelerator
(DAX) cluster. Use the DAX client SDK to point the existing DynamoDB API calls at the DAX cluster.

Answer

Set up two Lambda functions. Configure one function to receive the information. Configure the
other function to load the information into the database. Integrate the Lambda functions by using
Amazon Simple Notification Service (Amazon SNS).

Question 15

A company hosts an application on Amazon EC2 instances that run in a single Availability
Zone. The application is accessible by using the transport layer of the Open Systems Interconnection
(OSI) model. The company needs the application architecture to have high availability Which
combination of steps will meet these requirements MOST cost-effectively? (Select TWO_)

Accepted Answer

Configure a Network Load Balancer in front of the EC2 instances.

Accepted Answer

Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group to use multiple Availability Zones. Configure the Auto Scaling group to run application health checks on the instances

Answer

Configure new EC2 instances in a different AvailabiIity Zone. Use Amazon Route 53 to route traffic to all instances.

Answer

Configure a Network Load Balancer tor TCP traffic to the instances. Configure an Application Load Balancer tor HTTP and HTTPS traffic to the instances.

Answer

Create an Amazon CloudWatch alarm. Configure the alarm to restart EC2 instances that transition
to a stopped state

Question 16

A company runs a web application on Amazon EC2 instances in multiple Availability Zones.
The EC2 instances are in private subnets. A solutions architect implements an internet-facing
Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the
internet traffic is not reaching the EC2 instances.
How should the solutions architect reconfigure the architecture to resolve this issue?

Accepted Answer

Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update
the route tables for the public subnets with a route to the private subnets.

Answer

Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to
allow internet traffic.

Answer

Move the EC2 instances to public subnets. Add a rule to the EC2 instances' security groups to allow
outbound traffic to 0.0.0.0/0.

Answer

Update the route tables for the EC2 instances' subnets to send 0.0.0.0/0 traffic through the
internet gateway route. Add a rule to the EC2 instances' security groups to allow outbound traffic to
0.0.0.0/0.

Question 17

A company needs to configure a real-time data ingestion architecture for its application. The
company needs an API. a process that transforms data as the data is streamed, and a storage solution
for the data.
Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Configure an Amazon API Gateway API to send data to an Amazon Kinesis data stream. Create an Amazon Kinesis Data Firehose delivery stream that uses the Kinesis data stream as a data source. Use
AWS Lambda functions to transform the data. Use the Kinesis Data Firehose delivery stream to send the data to Amazon S3.

Answer

Deploy an Amazon EC2 instance to host an API that sends data to an Amazon Kinesis data stream.
Create an Amazon Kinesis Data Firehose delivery stream that uses the Kinesis data stream as a data
source. Use AWS Lambda functions to transform the data. Use the Kinesis Data Firehose delivery stream to send the data to Amazon S3.

Answer

Deploy an Amazon EC2 instance to host an API that sends data to AWS Glue. Stop
source/destination checking on the EC2 instance. Use AWS Glue to transform the data and to send the data to Amazon S3.

Answer

Configure an Amazon API Gateway API to send data to AWS Glue. Use AWS Lambda functions to transform the data. Use AWS Glue to send the data to Amazon S3.

Question 18

A company has an event-driven application that invokes AWS Lambda functions up to 800
times each minute with varying runtimes. The Lambda functions access data that is stored in an
Amazon Aurora MySQL OB cluster. The company is noticing connection timeouts as user activity
increases The database shows no signs of being overloaded. CPU. memory, and disk access metrics
are all low.
Which solution will resolve this issue with the LEAST operational overhead?

Accepted Answer

Use Amazon ROS Proxy to create a proxy. Set the DB cluster as the target database Configure the Lambda functions lo connect to the proxy rather than to the DB cluster.

Answer

Adjust the size of the Aurora MySQL nodes to handle more connections. Configure retry logic in the Lambda functions for attempts to connect to the database

Answer

Set up Amazon ElastiCache tor Redls to cache commonly read items from the database. Configure the Lambda functions to connect to ElastiCache for reads.

Answer

Add an Aurora Replica as a reader node. Configure the Lambda functions to connect to the reader endpoint of the OB cluster rather than lo the writer endpoint.

Question 19

A company recently migrated a message processing system to AWS. The system receives
messages into an ActiveMQ queue running on an Amazon EC2 instance. Messages are processed by a
consumer application running on Amazon EC2. The consumer application processes the messages
and writes results to a MySQL database funning on Amazon EC2. The company wants this application
to be highly available with tow operational complexity Which architecture otters the HGHEST
availability?

Accepted Answer

Use Amazon MQ with active/standby brokers configured across two Availability Zones Add an Auto Scaling group for the consumer EC2 instances across two Availability Zones. Use Amazon RDS for MySQL with Multi-AZ enabled.

Answer

Add a second ActiveMQ server to another Availably Zone Add an additional consumer EC2 instance in another Availability Zone. Replicate the MySQL database to another Availability Zone.

Answer

Use Amazon MO with active/standby brokers configured across two Availability Zones Add an
additional consumer EC2 instance in another Availability Zone. Replicate the MySQL database to another Availability Zone.

Answer

Use Amazon MO with active/standby blotters configured across two Availability Zones. Add an
additional consumer EC2 instance in another Availability Zone. Use Amazon ROS tor MySQL with Multi-AZ enabled.

Question 20

A company runs a web application that is backed by Amazon RDS. A new database
administrator caused data loss by accidentally editing information in a database table To help recover
from this type of incident, the company wants the ability to restore the database to its state from 5
minutes before any change within the last 30 days.
Which feature should the solutions architect include in the design to meet this requirement?

Accepted Answer

Automated backups

Answer

Read replicas

Answer

Manual snapshots

Answer

Multi-AZ deployments

Question 21

A company recently launched a variety of new workloads on Amazon EC2 instances in its AWS
account. The company needs to create a strategy to access and administer the instances remotely
and securely. The company needs to implement a repeatable process that works with native AWS
services and follows the AWS Well-Architected Framework.
Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Attach the appropriate IAM role to each existing instance and new instance. Use AWS Systems Manager Session Manager to establish a remote SSH session.

Answer

Use the EC2 serial console to directly access the terminal interface of each instance for administration.

Answer

Create an administrative SSH key pair. Load the public key into each EC2 instance. Deploy a bastion host in a public subnet to provide a tunnel for administration of each instance

Answer

Establish an AWS Site-to-Site VPN connection. Instruct administrators to use their local on-premises machines to connect directly to the instances by using SSH keys across the VPN tunnel.

Question 22

A company stores raw collected data in an Amazon S3 bucket. The data is used for several
types of analytics on behalf of the company's customers. The type of analytics requested to
determines the access pattern on the S3 objects.
The company cannot predict or control the access pattern. The company wants to reduce its S3 costs.
which solution will meet these requirements?

Accepted Answer

Use S3 Lifecycle rules for transition objects from S3 Standard to S3 Intelligent-Tiering.

Answer

Use S3 replication to transition infrequently accessed objects to S3 Standard-Infrequent Access (S3
Standard-1A)

Answer

Use S3 Lifecycle rules to transition objects from S3 Standard to Standard-Infrequent Access (S3
Standard-1A).

Answer

Use S3 Inventory to identify and transition objects that have not been accessed from S3 Standard
to S3 Intelligent-Tiering.

Question 23

A company wants to move a multi-tiered application from on premises to the AWS Cloud to
improve the application's performance. The application consists of application tiers that
communicate with each other by way of RESTful services. Transactions are dropped when one tier
becomes overloaded. A solutions architect must design a solution that resolves these issues and
modernizes the application.

Accepted Answer

Use Amazon API Gateway and direct transactions to the AWS Lambda functions as the application layer. Use Amazon Simple Queue Service (Amazon SQS) as the communication layer between application services.

Answer

Use Amazon CloudWatch metrics to analyze the application performance history to determine the server's peak utilization during the performance failures. Increase the size of the application server's Amazon EC2 instances to meet the peak requirements.

Answer

Use Amazon Simple Notification Service (Amazon SNS) to handle the messaging between application servers running on Amazon EC2 in an Auto Scaling group. Use Amazon CloudWatch to monitor the SNS queue length and scale up and down as required.

Answer

Use Amazon Simple Queue Service (Amazon SQS) to handle the messaging between application servers running on Amazon EC2 in an Auto Scaling group. Use Amazon CloudWatch to monitor the SQS queue length and scale up when communication failures are detected.

Question 24

A company needs to store its accounting records in Amazon S3. The records must be
immediately accessible for 1 year and then must be archived for an additional 9 years. No one at the
company, including administrative users and root users, can be able to delete the records during the
entire 10-year period. The records must be stored with maximum resiliency.
Which solution will meet these requirements?

Accepted Answer

Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 Glacier Deep Archive after 1 year. Use S3 Object Lock in compliance mode for a period of 10 years.

Answer

Store the records in S3 Glacier for the entire 10-year period. Use an access control policy to deny deletion of the records for a period of 10 years.

Answer

Store the records by using S3 Intelligent-Tiering. Use an IAM policy to deny deletion of the records. After 10 years, change the IAM policy to allow deletion

Answer

Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1 year. Use S3 Object Lock in governance mode for a period of 10 years.

Question 25

A company has more than 5 TB of file data on Windows file servers that run on premises
Users and applications interact with the data each day The company is moving its Windows
workloads to AWS. As the company continues this process, the company requires access to AWS and
on-premises file storage with minimum latency The company needs a solution that minimizes
operational overhead and requires no significant changes to the existing file access patterns. The
company uses an AWS Site-to-Site VPN connection for connectivity to AWS What should a solutions
architect do to meet these requirements?

Accepted Answer

Deploy and configure Amazon FSx for Windows File Server on AWS Deploy and configure an Amazon FSx File Gateway on premises Move the on-premises file data to the FSx File Gateway Configure the cloud workloads to use FSx for Windows File Server on AWS Configure the on-premises workloads to use the FSx File Gateway

Answer

Deploy and configure Amazon FSx for Windows File Server on AWS. Move the on-premises file data to FSx for Windows File Server. Reconfigure the workloads to use FSx for Windows File Server on AWS.

Answer

Deploy and configure an Amazon S3 File Gateway on premises Move the on-premises file data to the S3 File Gateway Reconfigure the on-premises workloads and the cloud workloads to use the S3 File Gateway

Answer

Deploy and configure an Amazon S3 File Gateway on premises Move the on-premises file data to Amazon S3 Reconfigure the workloads to use either Amazon S3 directly or the S3 File Gateway, depending on each workload's location

Question 26

A company runs a highly available SFTP service. The SFTP service uses two Amazon EC2 Linux
instances that run with elastic IP addresses to accept traffic from trusted IP sources on the internet.
The SFTP service is backed by shared storage that is attached to the instances. User accounts are
created and managed as Linux users in the SFTP servers. The company wants a serverless option that provides high IOPS performance and highly configurable security. The company also wants to maintain control over user permissions.
Which solution will meet these requirements?

Accepted Answer

Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

Answer

Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the EBS volume to the SFTP service endpoint. Grant users access to the SFTP service.

Answer

Create an encrypted Amazon Elastic File System (Amazon EFS) volume. Create an AWS Transfer Family SFTP service with elastic IP addresses and a VPC endpoint that has internet-facing access.
Attach a security group to the endpoint that allows only trusted IP addresses. Attach the EFS volume to the SFTP service endpoint. Grant users access to the SFTP service.

Answer

Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a VPC endpoint that has internal access in a private subnet. Attach a security group that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

Servicios AWS: IAM, S3 y migración de datos

Create a free account to finish this quiz

Questions in this quiz (26)

Information

Feedback

What do you think of the new look?