a4

Question 1

You have been asked to design a NAT solution for your company's VPC-based web
application. Traffic from the private subnets varies throughout the day from 500 Mbps to spikes of 7
Gbps. What is the most cost-effective and scalable solution?

Accepted Answer

Create a NAT gateway in a public subnet; route all private subnet internet traffic through the NAT
gateway

Answer

Move the internet gateway for the VPC to a public subnet: route all internet traffic through the
internet gateway

Answer

Create an Amazon EC2 NAT instance with a second elastic network interface in a public subnet;
route all private subnet internet traffic through the NAT gateway

Answer

Create an Auto Scaling group of Amazon EC2 NAT instances in a public subnet; route all private
subnet internet traffic through the NAT gateway

Question 2

A Solutions Architect is designing a microservices-based application using Amazon ECS. The
application includes a WebSocket component, and the traffic needs to be distributed between
microservices based on the URL.
Which service should the Architect choose to distribute me workload?

Accepted Answer

ELB Application Load Balancer

Answer

ELB Classic Load Balancer

Answer

Amazon Route 53 DNS

Answer

Amazon CloudFront

Question 3

A company is running both their website and human resources (HR) application within the
same virtual private cloud (VPC). For company compliance and security reasons, the instances
running their HR application stack must not share hardware with other AWS customers. The website
owner wants to keep their infrastructure costs as low as possible. How can the company ensure that
all of the requirements are met within a single VPC?

Accepted Answer

Create the VPC with default tenancy, launch the HR instances in Dedicated tenancy, and launch
the website instances in Shared tenancy

Answer

Create the VPC with Dedicated tenancy, launch the HR instances in placement groups, and launch the website instances in Shared tenancy

Answer

Create the VPC with dedicated tenancy, launch the HR instances in Default tenancy, and launch
the website instances in Shared tenancy

Answer

Create the VPC with Default tenancy, launch the HR instances in placement groups, and launch the
website instances in Shared tenancy

Question 4

Your application contains thousands of Images in an Amazon RDS MySQL instance. These
images are frequently accessed and the number of images is growing rapidly. Which should you
implement to reduce cost and improve application performance?

Accepted Answer

Migrate the images to Amazon Simple Storage Service, and allow the end udders to access the
images through Amazon CloudFront

Answer

Create two Amazon RDS My SQL read replicas in different regions, and migrate the images to the
cross-region read replicas

Answer

Migrate the images to Amazon Glacier, and allow the end users to access the images through
Amazon CloudFront

Answer

Migrate the images to Amazon Elastic Block Store volumes, and allow the end users to access the
images through Amazon CloudFront

Question 5

A company is using Amazon DynamoDB to stage its product catalog, which is 1 GB. Since a
product entry, on average, consists of 100 KB of data, and the average traffic is about 250 requests
per second, the database administrator has provisioned 3,000 RCU of read capacity throughput.
However, some products are very popular and users are experiencing delays or timeouts due to
throttling.
What improvement offers a long-term solution to this problem?

Accepted Answer

Use Amazon DynamoDB Accelerator to maintain the frequently ready items

Answer

Increase the throughput provisioning to 6,000 RCUs

Answer

Augment Amazon DynamoDB by storing only the key product attributes, with the details stored on
Amazon S3

Answer

Change the partition key to consist of a hash of product key and product type, instead of just the
product key

Question 6

A Solutions Architect is designing a web application. The web and application tiers need to
access the Internet, but they cannot be accessed from the Internet.
Which of the following steps is required?

Accepted Answer

Launch a NAT gateway in the public subnet and add a route to it from the private subnet.

Answer

Attach an Elastic IP address to each Amazon EC2 instance and add a route from the private subnet
to the public subnet.

Answer

Launch Amazon EC2 instances in the public subnet and change the security group to allow
outbound traffic on port 80.

Answer

Launch a NAT gateway in the private subnet and deploy a NAT instance in the private subnet.

Question 7

An organization runs an online media site, hosted on-premises. An employee posted a
product review that contained videos and pictures. The review went viral and the organization needs
to handle the resulting spike in website traffic.
What action would provide an immediate solution?

Accepted Answer

Add server instances using Amazon EC2 and use Amazon Route 53 with a failover routing policy.

Answer

Redesign the website to use Amazon API Gateway, and use AWS Lambda to deliver content.

Answer

Serve the images and videos via an Amazon CloudFront distribution created using the news site as
the origin.

Answer

Use Amazon ElasticCache for Redis for caching and reducing the load requests from the origin.

Question 8

Your Amazon VPC has a public subnet with a route that sends all Internet traffic to the
Internet gateway. An Amazon EC2 instance in the public subnet has an assigned private IP address.
The instance belongs to a security group set to allow all outbound traffic. The instance cannot access
the Internet.
Why could the Internet be unreachable from the instance?

Accepted Answer

The instance does not have a public IP address.

Answer

The internet gateway security group must allow all outbound traffic.

Answer

The instance security group must allow all inbound traffic.

Answer

The instance "Source/Destination check" property must be enabled.

Question 9

An application publishes Amazon SNS messages in response to several events. An AWS
Lambda function subscribes to these messages. Occasionally the function will fail while processing a
message, so the original event message must be preserved for root cause analysis.
What architecture will meet these requirements without changing the workflow?

Accepted Answer

Subscribe an Amazon SQS queue to the Amazon SNS topic and trigger the Lambda function from
the queue.

Answer

Configure Lambda to write failures to an SQS Dead Letter Queue.

Answer

Configure a Dead Letter Queue for the Amazon SNS topic.

Answer

Configure the Amazon SNS topic to invoke the Lambda function synchronously

Question 10

Your application provides data transmission services. Files containing data to be
transformed are first uploaded to Amazon S3 and then transformed by a fleet of sport EC2 instances.
Files submitted by your premium customers must be transformed with the highest Priority. How
should you implement such a system?

Accepted Answer

Use two SQS queues. One for high priority messages, the other for default priority. Transformation
instances first poll the high priority queue, if there is no message; they poll the default priority queue

Answer

Use Route latency based-routing to send high priority tasks to the closet transformation instances.

Answer

Use a DynamoDB table with an attribute defining the priority level. Transformation instances will
scan the table for tasks, sorting results by priority level

Answer

Use a single SQS queue. Each message contains the priority contains the priority level.
Transformation instances poll high=priority messages first

Question 11

You are deploying an application to track GPS coordinates of delivery in the United States.
Coordinates are transmitted from each delivery truck once every three seconds. You need to design
an architecture that will enable Realtime processing of these coordinates from multiple consumers.
Which service should you use to implement data ingestion?

Accepted Answer

Amazon Kinesis

Answer

AWS Data Pipeline

Answer

Amazon AppStream

Answer

Amazon Simple Queue Service

Question 12

A university is running an internal web application on AWS that students can access from
the university network to check their exam results. The web application runs on Amazon EC2
instances and pulls results from an Amazon DynamoDB table. Auto Scaling is currently configured to
add a new web server when CPU is greater than 80% for 5 minutes. DynamoDB is configured to
increase both read and write capacity units by five when utilization is greater than 80%. Exam results
are released at 9:00 a.m. each Monday, and 80% of students, attempt to access their unique result
within the first 30 minutes. Despite Auto Scaling being enabled, students are complaining of slow
response times and errors when they view the site. There are no performance complaints after 9:30
a.m. on Monday.
Which recommendation should a Solutions Architect make to improve performance in a cost-
effective manner?

Accepted Answer

Use Amazon CloudFront to cache web request and reduce the load on EC2 and DynamoDB.

Answer

Scale out the EC2 instances to ensure that the environment scales up and down based on the
highest load.

Answer

Implement Amazon DynamoDB Accelerator to improve database performance and remove the
need to scale the read/write units.

Answer

Use a scheduled job to scale out EC2 before 9:00 a.m. on Monday and to scale down after 9:30
a.m.

Question 13

You are architecting a web application that will be backed by a relational database. The
application will be read-heavy, and database queries will be computationally intensive.
How can you improve overall application response for users?

Accepted Answer

Use data Pipeline to replicate your relational data across all of your web tier nodes

Answer

Use Amazon SQS to distribute messages among workers that are less busy

Answer

Use ElastiCache to store critical pieces of data in memory for low-latency access

Answer

Use an Auto Scaling group and ELB Classic Load Balancer for the application tier

Question 14

You are deploying an application to collect votes for a very popular television show. Millions
of users will submit votes using mobile devices. The votes must be collected into a durable, scalable,
and highly available data store for real-time public tabulation. Which service should you use?

Accepted Answer

Amazon Kinesis

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Answer

Amazon Simple Queue Service

Question 15

For which of the following use cases are Simple Queue Service (SQS) and Amazon EC2 an
appropriate solution? Choose 2 answers

Accepted Answer

Orchestrating the execution or distributed and auditable business processes

Accepted Answer

Using as an encrypted to collect thousands of data points per hour from a distributed fleet of
sensors

Answer

Using as a distributed session store for your web application

Answer

Managing a multi-step and multi-decision checkout process of an e-commerce website

Answer

Using as an SNS endpoint to trigger execution of video transcoding jobs

Question 16

A Solutions Architect is deploying a new production MySQL database on AWS. It is critical
that the database is highly available. What should the Architect do to achieve this goal with Amazon
RDS?

Accepted Answer

Create a read replica of the primary database and deploy it in a different AWS Region

Answer

Enable multi-AZ to create a standby database in a different Availability Zone

Answer

Enable multi-AZ to create a standby database in a different AWS Region

Answer

Create a read replica of the primary database and deploy it in a different Availability Zone

Question 17

A customer needs to deploy a NoSQL-based datastore to Amazon EC2 instances. The NoSQL
software has native replication for durability of the data store. Which of the following storage
options is the most cost-effective and performs best for the data store?

Accepted Answer

Amazon EBS provisioned IOPS volumes

Answer

Amazon EBS Magnetic volumes

Answer

Amazon EBS general purpose SSD volumes

Answer

SSD-based Amazon EC2 instance store volumes

Question 18

A company plans to use an Amazon VPC to deploy a web application consisting of an elastic
load balancer, a fleet of web and application servers, and an Amazon RDS MySQL database that
should not be accessible from the Internet. The proposed design must be highly available and
distributed over two Availability Zones.
What would be the MOST appropriate VPC design for this specific use case?

Accepted Answer

Two public subnets for the elastic load balancer, two private subnets for the web servers, and two
private subnets for RDS.

Answer

Two public subnets for the elastic load balancer, two public subnets for the web servers, and two public subnets for Amazon RDS.

Answer

One public subnet for the elastic load balancer, two private subnets for the web servers, and two
private subnets for Amazon RDS.

Answer

One public subnet for the elastic load balancer, one public subnet for the web servers, and one
private subnet for the database.

Question 19

A media company asked a Solutions Architect to design a highty available storage solution
to serve as a centralized document store for their Amazon EC2 instances. The storage solution needs
to be POSIX-compliant scale dynamically and be able to serve up to 100 concurrent EC2 instances.
Which solution meets these requirements?

Accepted Answer

Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.

Answer

Create an Amazon S3 bucket and store all of the documents in this bucket.

Answer

Create an Amazon EBS volume and allow multiple users to mount that volume to their EC2
instance(s)

Answer

Use Amazon Glacier to store all of the documents

Question 20

A team is launching a marketing campaign and the peak database read activity in Amazon
Aurora for MYSQL is expected to increase. A Solutions Architect decides to add two Read Replicas to
the cluster.
How should the Solutions Architect ensure that the connections for read activities are load balanced?

Accepted Answer

Reader endpoint for Amazon Aurora

Answer

Cluster endpoint for Amazon Aurora

Answer

Primary DB instance endpoint for Amazon Aurora

Answer

Replica DB instances endpoint for Aurora

Question 21

You have launched an Amazon Elastic Compute Cloud (EC2) instance into a public subnet
with a primary private IP address assigned, an internet gateway is attached to the VPC, and the public
route table is configured to send all internet-based internet. Why is the internet unreachable from
this instance?

Accepted Answer

The instance does not have a public IP address

Answer

The Internet gateway security group must allow all outbound traffic

Answer

The instance "Source/Destination check" property must be enabled

Answer

The instance security group must allow all inbound traffic

Question 22

An application must access data in an Amazon RDS Aurora DB instance.
Which methods will allow this? (Select TWO)

Accepted Answer

Create a user in the database

Accepted Answer

Enable IAM database authentication

Answer

Retrieve credentials from AWS KMS

Answer

Enable AWS Security Token Service

Answer

Create a user in the database parameter group

Question 23

A company needs to capture all client connection information from its Application Load
Balancer every five minutes. This data will be used to analyze traffic patterns and troubleshoot the
application.
How can a Solutions Architect meet this requirement?

Accepted Answer

Enable Access Logs on the Application Load Balancer.

Answer

Enable AWS CloudTrail for the Application Load Balancer.

Answer

Install CloudWatch Agent on the Application Load Balancer.

Answer

Enable CloudWatch metrics on the Application Load Balancer

Question 24

Which of the following features ensures even distribution of traffic to Amazon EC2 instances
in multiples Availability Zones registered with a load balancer?

Accepted Answer

Elastic Load Balancing cross-zone load balancing

Answer

An Amazon Route 53 latency routing policy

Answer

Elastic Load Balancing request routing

Answer

An Amazon Route 53 weighted routing policy

Question 25

A workload consists of downloading an image from an Amazon S3 bucket, processing the
image, and moving it to another Amazon S3 bucket. An Amazon EC2 instance runs a scheduled task
every hour to perform the operation.
How should a Solutions Architect redesign the process so that it is highly available?

Accepted Answer

Charge the Amazon EC2 instance to compute optimized

Answer

Launch a second Amazon EC2 instance to monitor the health of the first

Answer

Trigger a Lambda function when a new object is uploaded

Answer

Initially copy the images to an attached Amazon EBS volume.

Question 26

A Solutions Architect is about to deploy an API on multiple EC2 instances in an Auto Scaling
group behind an ELB The support team has the following operational requirements
1 They get an alert when the requests per second go over 50,000
2 They get an alert when latency goes over 5 seconds
3 They can validate how many times a day users call the API requesting highly-sensitive data Which
combination of steps does the Architect need to take to satisfy these operational requirements?
(Select TWO.)

Accepted Answer

Create a custom CloudWatch metric to monitor the API for data access

Accepted Answer

Ensure that detailed monitoring for the EC2 instances is enabled

Answer

Ensure that CloudTrail is enabled

Answer

Configure CloudWatch alarms for any metrics the support learn requires

Answer

Create an application to export and save CloudWatch metrics for longer term trending analysis

Question 27

A Solutions Architect must design a storage solution for incoming billing reports in CSV
format. The data does not need to be scanned frequently and is discarded after 30 days.
Which service will be MOST cost-effective in meeting these requirements?

Accepted Answer

Write the files to an S3 bucket and use Amazon Athena to query the data

Answer

Import the logs into an RDS MySQL instance

Answer

Use AWS Data Pipeline to import the logs into a DynamoDB table

Answer

Import the logs to an Amazon Redshift cluster

Question 28

You're building an API backend available at services.yourcompany.com. The API is
implemented with API Gateway and Lambda. You successfully tested the API using curl. You
implemented JavaScript to call the API from a webpage on your corporate website,
www.yourcompany.com. When you access that page in your browser, you get the following error:
"The same origin policy disallows reading the remote resource"
How can you allow your corporate webpages to invoke the API?

Accepted Answer

Enable CORS in the API Gateway

Answer

Enable CORS in the JavaScript frontend

Answer

Disable CORS in the JavaScript frontend

Answer

Disable CORS in the API Gateway

Question 29

An application relies on messages being sent and received in order. The volume will never
exceed more than
300 transactions each second.
Which service should be used?

Accepted Answer

Amazon SQS

Answer

Amazon SNS

Answer

Amazon ECS

Answer

AWS STS

Question 30

A web application experiences high compute costs due to serving a high amount of static
web content.
How should the web server architecture be designed to be the MOST cost-efficient?

Accepted Answer

Create an Amazon CloudFront distribution to pull static content from an Amazon S3 bucket.

Answer

Create an Auto Scaling group to scale out based on average CPU usage

Answer

Leverage Reserved Instances to add additional capacity at a significantly lower price.

Answer

Create a multi-region deployment using an Amazon Route 53 geolocation routing policy.

Question 31

A company has asked a Solutions Architect to ensure that data is protected during data transfer to and from Amazon S3. Use of which service will protect the data in transit?

Accepted Answer

HTTPS

Answer

AWS KMS

Answer

SFTP

Answer

FTPS

Question 32

A customer's security team requires the logging of all network access attempts to Amazon
EC2 instances in their production VPC on AWS.Which configuration will meet the security team's
requirement?

Accepted Answer

Enable VPC Flow Logs for the production VPC.

Answer

Enable CloudTrail for the production VPC.

Answer

Enable both CloudTrail and VPC Flow Logs for the AWS account.

Answer

Enable both CloudTrail and VPC Flow Logs for the production VPC

Question 33

Which combination of two policies enables AWS identity and access management cross-
account access?
Choose 2 answers

Accepted Answer

Permission policy

Accepted Answer

Bucket policy

Answer

Key policy

Answer

Trust policy

Answer

Access policy

Question 34

A Solutions Architect is designing a database solution that must support a high rate of
random disk reads and writes. It must provide consistent performance, and requires long-term
persistence.
Which storage solution BEST meets these requirements?

Accepted Answer

An Amazon EBS Provisioned IOPS volume

Answer

An Amazon EBS General Purpose volume

Answer

An Amazon EBS Magnetic volume

Answer

An Amazon EC2 Instance Store

Question 35

A customer has a public-facing web application hosted on a single amazon Elastic compute
Cloud (EC2) instance and serving videos directly from an amazon simple storage service bucket.
Which of the following will restrict third parties from directly accessing the video assets in the
bucket?

Accepted Answer

Use a bucket policy to only allow the public IP address of the Amazon EC2 instance hosting the
customer website

Answer

Use a bucket policy to only allow referrals from the main website URL

Answer

Launch the website Amazon EC2 instance using an IAM role that is authorized to access the videos

Answer

restrict access to the bucket to the public CIDR range of the company locations

Question 36

A Solution Architect is designing a solution with AWS Lambda where different environments
require different database passwords. What should the Architect do to accomplish this in a secure
and scalable way?

Accepted Answer

Use encrypted AWS Lambda environment variables

Answer

Create a Lambda function for each individual environment

Answer

Use Amazon DynamoDB to store environment variables

Answer

Implement a dedicated Lambda function for distributing environment variables

Question 37

A website experiences unpredictable traffic. During peak traffic times, the database is
unable to keep up with the write request.
Which AWS service will help decouple the web application from the database?

Accepted Answer

Amazon SQS

Answer

Amazon EFS

Answer

Amazon S3

Answer

AWS Lambda

Question 38

Your company's IT policies mandate that all critical data must be duplicated in two physical
locations at least
100 miles apart.
What storage option meets this requirement?

Accepted Answer

One Amazon S3 bucket

Answer

Two Amazon S3 buckets in the same region

Answer

One Amazon Glacier archive

Answer

Two Amazon S3 buckets in different regions

Question 39

A company is launching a marketing campaign on their website tomorrow and expects a
significant increase in traffic. The website is designed as a multi-tiered web architecture, and the
increase in traffic could potentially overwhelm the current design.
What should a Solutions Architect do to minimize the effects from a potential failure in one or more
of the tiers?

Accepted Answer

Use Auto Scaling to keep up with the demand.

Answer

Migrate the database to Amazon RDS.

Answer

Set up DNS failover to a statistic website.

Answer

Use both a SQL and a NoSQL database in the design.

Question 40

What are characteristics Os Amazon S3?
Choose 2 answers

Accepted Answer

S3 allows you to store unlimited amounts of data

Accepted Answer

Objects are directly accessible via a URL

Answer

S3 offers Provisioned IOPS

Answer

S3 allows you to store objects of virtually unlimited size

Answer

S3 should be used to host a relational database

Question 41

A team has an application that detects new ejects being uploaded into an Amazon S3
bucket. The uploads trigger a Lambda function to write object metadata into an Amazon DynamoDB
table and RDS PostgreSQL database. Which action should the team lake to ensure high availability?

Accepted Answer

Create a DynamoDB stream for the DynamoDB table

Answer

Enable cross-region replication in the Amazon S3 bucket

Answer

Create a Lambda function for each Availability Zone the application is deployed in.

Answer

Enable multi-AZ on the RDS PostgreSQL database

Question 42

A Solutions Architect is developing a new web application on AWS. The Architect expects
the application to become very popular, so the application must scale to support the load. The
Architect wants to focus on software development and deploying new features without provisioning
or managing instances. Which solution is appropriate?

Accepted Answer

Elastic Load Balancing with Auto Scaling groups and Amazon EC2

Answer

Amazon API Gateway and AWS Lambda

Answer

Amazon API Gateway and Amazon EC2

Answer

Amazon CloudFront and AWS Lambda

Question 43

Which technique can be used to integrate AWS IAM (Identity and Access Management) with
an on-premise LDAP (Lightweight Directory Access Protocol) directory service?

Accepted Answer

Use SAML (Security Assertion Markup Language) to enable single sign-on between AWS and LDAP.

Answer

Use an IAM policy that references the LDAP account identifiers and the AWS credentials.

Answer

Use AWS Security Token Service from an identity broker to issue short-lived AWS credentials.

Answer

Use IAM roles to automatically rotate the IAM credentials when LDAP credentials are updated.

Answer

Use the LDAP credentials to restrict a group of users from launching specific EC2 instance types.

Question 44

Your company moved into AWS and created separate AWs accounts per department. To
address latency and bandwidth challenges, the company ordered a single AWS Direct Connect circuit.
How should you allocate the cost of the data transfer over AWS Direct Connect back to each
department ?

Accepted Answer

Configure virtual interfaces and tag each with the department account number. Use detail usage
reports

Answer

Configure a connection per department and ta each with the department account number. Use
details usage reports

Answer

Configure a connection per department and set the Connection Owner to the department's AWS
account number

Answer

Configure virtual interfaces and set the virtual interface owner to the department's AWS account
number

Question 45

A Solutions Architect is designing an application on AWS that will connect to the on-premise
data center through a VPN connection. The solution must be able to log network traffic over the VPN.
Which service logs this network traffic?

Accepted Answer

logs Amazon VPC flow logs

Answer

AWS CloudTrail

Answer

Amazon S3 bucket logs

Answer

Amazon CloudWatch Logs

Question 46

A Solutions Architect is designing a solution that includes a managed VPN connection. To
monitor whether the VPN connection is up or down, the Architect should use:

Accepted Answer

the CloudWatch TunnelState Metric

Answer

an external service to ping the VPN endpoint from outside the VPC

Answer

AWS CloudTrail to monitor the endpoint

Answer

an AWS Lambda function that parses the VPN connection logs.

Question 47

Which AWS service allows you to collect and process e-commerce data for near real-time
analysis?

Accepted Answer

Amazon Elastic Map reduce

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Answer

Amazon ElasticCache

Question 48

You have established a virtual private cloud (VPC) peering relationship between VPC 1 and
VPC 2. VPC 1 has routes to VPC 2, yet hosts in VPC 1 cannot connect to hosts in VPC 2. Which of the
following is a possible cause?

Accepted Answer

The network access control list applied to VPC 2 denies by default

Answer

Security groups applied to VPC 2 are blocking the traffic

Answer

The subnet route table in VPC 2 does not have routes to VPC 1

Answer

The VPCs have not been attached to a virtual private gateway

Question 49

A company is designing a failover strategy in Amazon Route 53 for its resources between
two AWS Regions.
The company must have the ability to route a user's traffic to the region with least latency, and if
both regions are healthy, Route 53 should route traffic to resources in both regions.
Which strategy should the Solutions Architect recommend?

Accepted Answer

Configure active-active failover using Route 53 latency DNS records.

Answer

Configure active-passive failover using Route 53 latency DNS records.

Answer

Configure active-active failover using Route 53 failover DNS records.

Answer

Configure active-passive failover using Route 53 failover DNS records.

Question 50

A Solutions Architect is building a multi-tier website. The web servers will be in a public
subnet, and the database servers will be in a private subnet. Only the web servers can be accessed
from the internet.
The database servers must have Internet access for software updates. Which solution meets these
requirements?

Accepted Answer

Use a NAT Gateway.

Answer

Assign Elastic IP addresses to the database instances

Answer

Allow Internet traffic on the private subnet through the network ACL

Answer

Use an egress-only internet Gateway

Question 51

Your company stores financial documents in amazon S3. Aacording to company policy, all
financial documents must be retained for a perios of seven years. however documents older than
one year are rarely accessed. How can you optimize cost?

Accepted Answer

Create an Amazon S3 event to move objects older than one year to Amazon Glacier

Answer

Create an Amazon S3 lifecycle rule to move objects older than one year to storage Gateway

Answer

Create an Amazon S3 lifecycle rule to move objects older than one year to Amazon Glacier

Answer

Create an Amazon S3 event to move objects older than one year to Storage Gateway

Question 52

A company hosts a website on premises. The website has a mix of static and dynamic
content, but users experience latency when loading static files. Which AWS service can help reduce
latency?

Accepted Answer

Amazon CloudFront with on-premises servers as the origin

Answer

ELB Application Load Balancer

Answer

Amazon Route 53 latency-based routing

Answer

Amazon EFS to store and serve static files

Question 53

If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each
instance a predetermined private IP address you should:

Accepted Answer

Launch the instances in a Placement Group.

Answer

Launch the instance from a private Amazon Machine Image (AMI).

Answer

Assign a group of sequential Elastic IP address to the instances.

Answer

Launch the instances in the Amazon Virtual Private Cloud (VPC).

Answer

Use standard EC2 instances since each instance gets a private Domain Name Service (DNS) already.

Question 54

Employees from several companies use an application once a year during a specific 30- day
period. The periods are different for each company. Traffic to the application spikes during these 30-day periods.How can the application be designed to handle these traffic spikes?

Accepted Answer

Use Amazon S3 to cache static elements of the website requests

Answer

Use an Amazon Route 53 to cache static elements of the website requests

Answer

Use an Auto Scaling group to scale the number of EC2 instances to match the site traffic

Answer

Use Amazon CloudFront to serve static assets to decrease the load on the EC2 instances

Question 55

An on-premises database is experiencing significant performance problems when running
SQL queries. With
10 users, the lookups are performing as expected. As the number of users increases, the lookups take
three times longer than expected to return values to an application.
Which action should a Solutions Architect take to maintain performance as the user count increases?

Accepted Answer

Deploy Multi-AZ RDS MySQL

Answer

Use Amazon SQS.

Answer

Configure Amazon RDS with additional read replicas.

Answer

Migrate from MySQL to RDS Microsoft SQL Server.

Question 56

A company is designing a new application lo collect data on user behavior for analysis at a
later time Amazon Kinesis Data Streams will be used to receive user interaction events What should
be done to ensure the event data is retained indefinitely?

Accepted Answer

Configure an Amazon Kinesis Data Firehose delivery stream to store data on Amazon S3

Answer

Configure the stream to write records to an attached Amazon EBS volume

Answer

Configure the stream data retention period to retain the data indefinitely

Answer

Configure an Amazon EC2 consumer to read from me data stream and store records in Amazon SOS

Question 57

A Solutions Architect is designing a web application that will be hosted on Amazon EC2
instances in a public subnet. The web application uses a MySQL database in a private subnet. The
database should be accessible to database administrators. Which of the following options should the
Architect recommend? (Select TWO.)

Accepted Answer

Create a bastion host in a public subnet, and use the bastion host to connect to the database.

Answer

Log in to the web servers in the public subnet to connect to the database.

Answer

Perform DB maintenance after using SSH to connect to the NAT Gateway in a public subnet.

Answer

Create an IPSec VPN tunnel between the customer site and the VPC, and use the VPN tunnel to connect to the database.

Answer

Attach an Elastic IP address to the database.

Question 58

A Solution Architect is trying to bring a data warehouse workload to an Amazon EC2
instance. The data will reside in Amazon EBS volumes and full table scans will be executed frequently.
What type of Amazon AWS EBS volume would be most suitable in this scenario?

Accepted Answer

Throughput Optimized HDD (st1)

Answer

Provisioned IOPS SSD (io1)

Answer

General Purpose SSD (gp2)

Answer

Cold HDD (sc1)

Question 59

An application provides a feature that allows users to securely download private and
personal files. The web server is currently overwhelmed with serving files for download. A Solutions
Architect must find a more effective solution to reduce web server load and costs, and must allow
users to download only their own files Which solution meets all requirements?

Accepted Answer

Create an Amazon CloudFront distribution to distribute and cache the files.

Answer

Store the files securely on Amazon S3 and have the application generate an Amazon S3 pre-signed
URL for the user to download.

Answer

Store the files in an encrypted Amazon EBS volume, and use a separate set of servers to serve the
downloads.

Answer

Have the application encrypts the files and stores them in the local Amazon EC2 Instance Store
prior to serving them up for download.

Question 60

A Solutions Architect is building an application on AWS that will require 20,000 IOPS on a
particular volume to support a media event. Once the event ends, the IOPS need is no longer
required. The marketing team asks the Architect to build the platform to optimize storage without
incurring downtime.
How should the Architect design the platform to meet these requirements?

Accepted Answer

Change the EBS volume type to Provisioned IOPS.

Answer

Change the Amazon EC2 instant types.

Answer

Stop the Amazon EC2 instance and provision IOPS for the EBS volume.

Answer

Enable an API Gateway to change the endpoints for the Amazon EC2 instances.

Question 61

A mobile client requires data from several application-layer services to populate its user
interface. What can the application team use to decouple the client interface from the underlying
services behind them?

Accepted Answer

Amazon Cognito

Answer

Application Load Balancer

Answer

Amazon API Gateway

Answer

AWS Device Farm

Question 62

A company processes mobile chat messages. Throughput can increase dramatically, and the
Amazon EC2 infrastructure cannot handle the fluctuating demand. Messages are received in an
Amazon Kinesis Data Stream, and the processor instances are deployed in an Auto Scaling group. A
CloudWatch alarm, which uses Amazon SNS to tiger a Lambda function, automatically scales the
Kinesis Data Stream. The processor instances' application code and configuration are stored in an S3
bucket.
How can a Solution Architect improve the launch time of new instances in the Auto Scaling group?

Accepted Answer

Reduce the values of the Default Cooldown and Health Check Grace Period settings for the Auto
Scaling group

Answer

Change the scale-out rules for the Auto Scaling group to launch instances at a lower threshold on
the Kinesis CloudWatch alarm

Answer

Modify the Lambda function to change the number of Auto Scaling group members when it
updates the Kinesis Shard count

Answer

Update the launch configuration to use a custom Amazon Machine Image (AMI) with all the
software pre-installed. Use user data scripts to pull the configuration at launch from Amazon S3

Question 63

An application running on Amazon EC2 has been experiencing performance issues when
accessing an Amazon RDS for Oracle database. The database has been provisioned correctly for
average workloads, but there are several usage spikes each day that have saturated the database,
causing the application to time out.
The application is write-heavy, updating information more often than reading information. A
Solutions Architect has been asked to review the application design.
What should the Solutions Architect recommend to improve performance?

Accepted Answer

Change the Amazon RDS instance storage type from General Purpose SSD to provisioned IOPS
SSD

Answer

Put an Amazon ElastiCache cluster in front of the database and use lazy loading to limit database
access during peak periods.

Answer

Put an Amazon Elasticsearch domain in front of the database and use a Write-Through cache to
reduce database access during peak periods.

Answer

Configure an Amazon RDS Auto Scaling group to automatically scale the RDS instance during load
spikes.

Question 64

An application has components running in a public subnet and a private subnet. The
components within the private sub net must connect to the internet to receive updates.
How should this be accomplished without moving the components into a public subnet?

Accepted Answer

Add an internet gateway to the private subnet and update the private subnet route table.

Answer

Add a NAT gateway to the public subnet and update the public subnet route table.

Answer

Add an internet gateway to the VPC and update the private subnet route table.

Answer

Add a NAT gateway to the public subnet and update the private subnet route table.

a4

Crie uma conta grátis para terminar este quiz

Perguntas do quiz (100)

Informações

Fale Conosco

O que você acha do novo visual?