Quiz
AWS - SAA C02 -2
This quiz has a time limit, so it opens in the usual player.
Questions in this quiz (142)
1A company recently deployed a two-tier application in two Availability Zones in the us-east-1 Region. The databases are deployed in a private subnet while the web servers are deployed in a public subnet. An internet gateway is attached to the VPC. The application and database run on Amazon EC2 instances. The database servers are unable to access patches on the internet. A solutions architect needs to design a solution that maintains database security with the least operational overhead.
Which solution meets these requirements?- AA. Deploy a NAT gateway inside the public subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route.
- BB. Deploy a NAT gateway inside the private subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route.
- CC. Deploy two NAT instances inside the public subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.
- DD. Deploy two NAT instances inside the private subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.
2A company has an application with a REST-based Interface that allows data to be received in near-real time from a third-party vendor Once received, the application processes and stores the data for further analysis. The application Is running on Amazon EC2 instances.
The third-party vendor has received many 503 Service Unavailable Errors when sending data to the application. When the data volume spikes, the compute capacity reaches its maximum limit and the application is unable to process all requests.
Which design should a solutions architect recommend to provide a more scalable solution?- AA. Use Amazon Kinesis Data Streams to ingest the data. Process the data using AWS Lambda functions.
- BB. Use Amazon API Gateway on top of the existing application. Create a usage plan with a quota limit for the third-party vendor.
- CC. Use Amazon Simple Notification Service (Amazon SNS) to ingest the data. Put the EC2 instances in an Auto Scaling group behind an Application Load Balancer.
- DD. Repackage the application as a container. Deploy the application using Amazon Elastic Container Service (Amazon ECS) using the EC2 launch type with an Auto Scaling group.
3A solutions architect needs to design a low-latency solution for a static single-page application accessed by users utilizing a custom domain name. The solution must be serverless, encrypted in transit, and cost-effective.
Which combination of AWS services and features should the solutions architect use? (Choose two.)- AA. Amazon S3
- BB. Amazon EC2
- CC. AWS Fargate
- DD. Amazon CloudFront
- EE. Elastic Load Balancer
4A company is migrating to the AWS Cloud. A file server is the first workload to migrate. Users must be able to access the file share using the Server Message
Block (SMB) protocol. Which AWS managed service meets these requirements?- AA. Amazon EBS
- BB. Amazon EC2
- CC. Amazon FSx
- DD. Amazon S3
5A solutions architect is designing a customer-facing application. The application is expected to have a variable amount of reads and writes depending on the time of year and clearly defined access patterns throughout the year. Management requires that database auditing and scaling be managed in the AWS Cloud. The
Recovery Point Objective (RPO) must be less than 5 hours.
Which solutions can accomplish this? (Choose two.)- AA. Use Amazon DynamoDB with auto scaling. Use on-demand backups and AWS CloudTrail.
- BB. Use Amazon DynamoDB with auto scaling. Use on-demand backups and Amazon DynamoDB Streams.
- CC. Use Amazon Redshift Configure concurrency scaling. Enable audit logging. Perform database snapshots every 4 hours.
- DD. Use Amazon RDS with Provisioned IOPS. Enable the database auditing parameter. Perform database snapshots every 5 hours.
- EE. Use Amazon RDS with auto scaling. Enable the database auditing parameter. Configure the backup retention period to at least 1 day.
6A company has migrated an on-premises Oracle database to an Amazon RDS for Oracle Multi-AZ DB instance in the us-east-l Region. A solutions architect is designing a disaster recovery strategy to have the database provisioned in the us-west-2 Region in case the database becomes unavailable in the us-east-1
Region. The design must ensure the database is provisioned in the us-west-2 Region in a maximum of 2 hours, with a data loss window of no more than 3 hours.
How can these requirements be met?- AA. Edit the DB instance and create a read replica in us-west-2. Promote the read replica to master in us-west-2 in case the disaster recovery environment needs to be activated.
- BB. Select the multi-Region option to provision a standby instance in us-west-2. The standby instance will be automatically promoted to master in us-west-2 in case the disaster recovery environment needs to be created.
- CC. Take automated snapshots of the database instance and copy them to us-west-2 every 3 hours. Restore the latest snapshot to provision another database instance in us-west-2 in case the disaster recovery environment needs to be activated.
- DD. Create a multimaster read/write instances across multiple AWS Regions Select VPCs in us-east-1 and us-west-2 to make that deployment. Keep the master read/write instance in us-west-2 available to avoid having to activate a disaster recovery environment.
7A monolithic application was recently migrated to AWS and is now running on a single Amazon EC2 instance. Due to application limitations, it is not possible to use automatic scaling to scale out the application. The chief technology officer (CTO) wants an automated solution to restore the EC2 instance in the unlikely event the underlying hardware fails.
What would allow for automatic recovery of the EC2 instance as quickly as possible?- AA. Configure an Amazon CloudWatch alarm that triggers the recovery of the EC2 instance if it becomes impaired.
- BB. Configure an Amazon CloudWatch alarm to trigger an SNS message that alerts the CTO when the EC2 instance is impaired.
- CC. Configure AWS CloudTrail to monitor the health of the EC2 instance, and if it becomes impaired, triggered instance recovery.
- DD. Configure an Amazon EventBridge event to trigger an AWS Lambda function once an hour that checks the health of the EC2 instance and triggers instance recovery if the EC2 instance is unhealthy.
8A solutions architect is working on optimizing a legacy document management application running on Microsoft Windows Server in an on-premises data center.
The application stores a large number of files on a network file share. The chief information officer wants to reduce the on-premises data center footprint and minimize storage costs by moving on-premises storage to AWS.
What should the solutions architect do to meet these requirements?- AA. Set up an AWS Storage Gateway file gateway.
- BB. Set up Amazon Elastic File System (Amazon EFS)
- CC. Set up AWS Storage Gateway as a volume gateway
- DD. Set up an Amazon Elastic Block Store (Amazon EBS) volume.
9A solution architect is designing a hybrid application using the AWS cloud. The network between the on-premises data center and AWS will use an AWS Direct
Connect (DX) connection. The application connectivity between AWS and the on-premises data center must be highly resilient.
Which DX configuration should be implemented to meet these requirements?- AA. Configure a DX connection with a VPN on top of it.
- BB. Configure DX connections at multiple DX locations.
- CC. Configure a DX connection using the most reliable DX partner.
- DD. Configure multiple virtual interfaces on top of a DX connection.
10A company runs an application on Amazon EC2 Instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region.
Which solution should be implemented to ensure that there are no disruptions to Internet connectivity?- AA. Deploy a NAT Instance in a private subnet of each Availability Zone.
- BB. Deploy a NAT gateway in a public subnet of each Availability Zone.
- CC. Deploy a transit gateway in a private subnet of each Availability Zone.
- DD. Deploy an internet gateway in a public subnet of each Availability Zone.
11Application developers have noticed that a production application is very slow when business reporting users run large production reports against the Amazon
RDS instance backing the application. The CPU and memory utilization metrics for the RDS instance do not exceed 60% while the reporting queries are running.
The business reporting users must be able to generate reports without affecting the applications performance.
Which action will accomplish this?- AA. Increase the size of the RDS instance
- BB. Create a read replica and connect the application to it.
- CC. Enable multiple Availability Zones on the RDS instance
- DD. Create a read replication and connect the business reports to it.
12A company is running a two-tier ecommerce website using services. The current architect uses a publish-facing Elastic Load Balancer that sends traffic to Amazon
EC2 instances in a private subnet. The static content is hosted on EC2 instances, and the dynamic content is retrieved from a MYSQL database. The application is running in the United States. The company recently started selling to users in Europe and Australia. A solution architect needs to design solution so their international users have an improved browsing experience.
Which solution is MOST cost-effective?- AA. Host the entire website on Amazon S3.
- BB. Use Amazon CloudFront and Amazon S3 to host static images.
- CC. Increase the number of public load balancers and EC2 instances.
- DD. Deploy the two-tier website in AWS Regions in Europe and Australia.
13A company's website provides users with downloadable historical performance reports. The website needs a solution that will scale to meet the company's website demands globally. The solution should be cost effective, limit the provisioning of infrastructure resources and provide the fastest possible response time.
Which combination should a solutions architect recommend to meet these requirements?- AA. Amazon CloudFront and Amazon S3
- BB. AWS Lambda and Amazon DynamoDB
- CC. Application Load Balancer with Amazon EC2 Auto Scaling
- DD. Amazon Route 53 with internal Application Load Balances
14A company wants to deploy a shared file system for its .NET application servers and Microsoft SQL Server database running on Amazon EC2 instance with
Windows Server 2016. The solution must be able to be integrated in to the corporate Active Directory domain, be highly durable, be managed by AWS, and provided levels of throughput and IOPS.
Which solution meets these requirements?- AA. Use Amazon FSx for Windows File Server
- BB. Use Amazon Elastic File System (Amazon EFS)
- CC. Use AWS Storage Gateway in file gateway mode.
- DD. Deploy a Windows file server on two On Demand instances across two Availability Zones.
15A company that develops web applications has launched hundreds of Application Load Balancers (ALBs) in multiple Regions. The company wants to create an allow list (or the IPs of all the load balancers on its firewall device. A solutions architect is looking for a one-time, highly available solution to address this request, which will also help reduce the number of IPs that need to be allowed by the firewall.
What should the solutions architect recommend to meet these requirements?- AA. Create a AWS Lambda function to keep track of the IPs for all the ALBs in different Regions Keep refreshing this list.
- BB. Set up a Network Load Balancer (NLB) with Elastic IPs. Register the private IPs of all the ALBs as targets to this NLB.
- CC. Launch AWS Global Accelerator and create endpoints for all the Regions. Register all the ALBs in different Regions to the corresponding endpoints.
- DD. Set up an Amazon EC2 instance, assign an Elastic IP to this EC2 instance, and configure the instance as a proxy to forward traffic to all the ALBs.
16A company runs an application using Amazon ECS. The application creates resized versions of an original image and then makes Amazon S3 API calls to store the resized images in Amazon S3. How can a solutions architect ensure that the application has permission to access Amazon S3?
- AA. Update the S3 role in AWS IAM to allow read/write access from Amazon ECS, and then relaunch the container.
- BB. Create an IAM role with S3 permissions, and then specify that role as the taskRoleArn in the task definition.
- CC. Create a security group that allows access from Amazon ECS to Amazon S3, and update the launch configuration used by the ECS cluster.
- DD. Create an IAM user with S3 permissions, and then relaunch the Amazon EC2 instances for the ECS cluster while logged in as this account.
17A company is planning to migrate its virtual server-based workloads to AWS. The company has internet-facing load balancers backed by application servers. The application servers rely on patches from an internet-hosted repository
Which services should a solutions architect recommend be hosted on the public subnet? (Choose two.)- AA. NAT gateway
- BB. Amazon RDS DB instances
- CC. Application Load Balancers
- DD. Amazon EC2 application servers
- EE. Amazon Elastic File System (Amazon EFS) volumes
18A company has established a new AWS account. The account is newly provisioned and no changed have been made to the default settings. The company is concerned about the security of the AWS account root user.
What should be done to secure the root user?- AA. Create IAM users for daily administrative tasks. Disable the root user.
- BB. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user.
- CC. Generate an access key for the root user. Use the access key for daily administration tasks instead of the AWS Management Console.
- DD. Provide the root user credentials to the most senior solution architect. Have the solution architect use the root user for daily administration tasks.
19A company is using a tape backup solution to store its key application data offsite. The daily data volume is around 50 TB. The company needs to retain the backups for 7 years for regulatory purposes. The backups are rarely accessed and a week's notice is typically given if a backup needs to be restored.
The company is now considering a cloud-based option to reduce the storage costs and operational burden of managing tapes. The company also wants to make sure that the transition from tape backups to the cloud minimizes disruptions.
Which storage solution is MOST cost-effective?- AA. Use Amazon Storage Gateway to back up to Amazon Glacier Deep Archive.
- BB. Use AWS Snowball Edge to directly integrate the backups with Amazon S3 Glacier.
- CC. Copy the backup data to Amazon S3 and create a lifecycle policy to move the data to Amazon S3 Glacier.
- DD. Use Amazon Storage Gateway to back up to Amazon S3 and create a lifecycle policy to move the backup to Amazon S3 Glacier.
20A company requires a durable backup storage solution for its on-premises database servers while ensuring on-premises applications maintain access to these backups for quick recovery. The company will use AWS storage services as the destination for these backups. A solutions architect is designing a solution with minimal operational overhead.
Which solution should the solutions architect implement?- AA. Deploy an AWS Storage Gateway file gateway on-premises and associate it with an Amazon S3 bucket.
- BB. Back up the databases to an AWS Storage Gateway volume gateway and access it using the Amazon S3 API.
- CC. Transfer the database backup files to an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance.
- DD. Back up the database directly to an AWS Snowball device and uss lifecycle rules to move the data to Amazon S3 Glacier Deep Archive.
21A company decides to migrate its three-tier web application from on-premises to the AWS Cloud. The new database must be capable of dynamically scaling storage capacity and performing table joins.
Which AWS service meets these requirements?- AA. Amazon Aurora
- BB. Amazon RDS for SqlServer
- CC. Amazon DynamoDB Streams
- DD. Amazon DynamoDB on-demand
22A company mandates that an Amazon S3 gateway endpoint must allow traffic to trusted buckets only.
Which method should a solutions architect implement to meet this requirement?- AA. Create a bucket policy for each of the company's trusted S3 buckets that allows traffic only from the company's trusted VPCs.
- BB. Create a bucket policy for each of the company's trusted S3 buckets that allows traffic only from the company's S3 gateway endpoint IDs.
- CC. Create an S3 endpoint policy for each of the company's S3 gateway endpoints that blocks access from any VPC other than the company's trusted VPCs.
- DD. Create an S3 endpoint policy for each of the company's S3 gateway endpoints that provides access to the Amazon Resource Name (ARN) of the trusted S3 buckets.
23A company is using a VPC peering strategy to connect its VPCs in a single Region to allow for cross-communication. A recent increase in account creations and
VPCs has made it difficult to maintain the VPC peering strategy, and the company expects to grow to hundreds of VPCs. There are also new requests to create site-to-site VPNs with some of the VPCs. A solutions architect has been tasked with creating a centrally networking setup for multiple accounts, VPCs, and VPNs.
Which networking solution meets these requirements?- AA. Configure shared VPCs and VPNs and share to each other
- BB. Configure a hub-and-spoke and route all traffic through VPC peering.
- CC. Configure an AWS Direct Connect between all VPCs and VPNs.
- DD. Configure a transit gateway with AWS Transit Gateway and connected all VPCs and VPNs.
24A solutions architect is helping a developer design a new ecommerce shopping cart application using AWS services. The developer is unsure of the current database schema and expects to make changes as the ecommerce site grows. The solution needs to be highly resilient and capable of automatically scaling read and write capacity.
Which database solution meets these requirements?- AA. Amazon Aurora PostgreSQL
- BB. Amazon DynamoDB with on-demand enabled
- CC. Amazon DynamoDB with DynamoDB Streams enabled
- DD. Amazon SQS and Amazon Aurora PostgreSQL
25A solution architect must migrate a Windows internet information Services (IIS) web application to AWS. The application currently relies on a file share hosted in the user's on-premises network-attached storage (NAS).The solution architected has proposed migrating the IIS web servers
Which replacement to the on-promises file share is MOST resilient and durable?- AA. Migrate the file Share to Amazon RDS.
- BB. Migrate the tile Share to AWS Storage Gateway
- CC. Migrate the file Share to Amazon FSx for Windows File Server.
- DD. Migrate the tile share to Amazon Elastic File System (Amazon EFS)
26A company needs to implement a relational database with a multi-Region disaster recovery Recovery Point Objective (RPO) of 1 second and an Recovery Time
Objective (RTO) of 1 minute.
Which AWS solution can achieve this?- AA. Amazon Aurora Global Database
- BB. Amazon DynamoDB global tables.
- CC. Amazon RDS for MySQL with Multi-AZ enabled.
- DD. Amazon RDS for MySQL with a cross-Region snapshot copy.
27A company runs a web service on Amazon CC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across two Availability Zones. The company needs a minimum of tour instances a! all limes to meet the required service level agreement (SLA) while keeping costs low.
If an Availability Zone tails, how can the company remain compliant with the SLA?- AA. Add a target tracking scaling policy with a short cooldown period.
- BB. Change the Auto Scaling group launch configuration to use a larger instance type
- CC. Change the Auto Scaling group to use six servers across three Availability Zones
- DD. Change the Auto Scaling group to use eight servers across two Availability Zones
28A company is reviewing its AWS Cloud deployment to ensure its data is not accessed by anyone without appropriate authorization. A solutions architect is tasked with identifying all open Amazon S3 buckets and recording any S3 bucket configuration changes.
What should the solutions architect do to accomplish this?- AA. Enable AWS Config service with the appropriate rules
- BB. Enable AWS Trusted Advisor with the appropriate checks.
- CC. Write a script using an AWS SDK to generate a bucket report
- DD. Enable Amazon S3 server access logging and configure Amazon CloudWatch Events.
29A company is planning to build a new web application on AWS. The company expects predictable traffic most of the year and very high traffic on occasion. The web application needs to be highly available and fault tolerant with minimal latency.
What should a solutions architect recommend to meet these requirements?- AA. Use an Amazon Route 53 routing policy to distribute requests to two AWS Regions, each with one Amazon EC2 instance.
- BB. Use Amazon EC2 instances in an Auto Scaling group with an Application Load Balancer across multiple Availability Zones.
- CC. Use Amazon EC2 instances in a cluster placement group with an Application Load Balancer across multiple Availability Zones.
- DD. Use Amazon EC2 instances in a cluster placement group and include the cluster placement group within a new Auto Scaling group.
30A company is designing a web application using AWS that processes insurance quotes. Users will request quotes from the application. Quotes must be separated by quote type must be responded to within 24 hours, and must not be lost. The solution should be simple to set up and maintain.
Which solution meets these requirements''- AA. Create multiple Amazon Kinesis data streams based on the quote type. Configure the web application to send messages to the proper data stream. Configure each backend group of application servers to pool messages from its own data stream using the Kinesis Client Library (KCL).
- BB. Create multiple Amazon Simple Notification Service (Amazon SNS) topics and register Amazon SQS queues to their own SNS topic based on the quote type. Configure the web application to publish messages to the SNS topic queue. Configure each backend application server to work its own SQS queue.
- CC. Create a single Amazon Simple Notification Service (Amazon SNS) topic and subscribe the Amazon SQS queues to the SNS topic. Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type. Configure each backend application server to work its own SQS queue.
- DD. Create multiple Amazon Kinesis Data Firehose delivery streams based on the quote type to deliver data streams to an Amazon Elasticsearch Service (Amazon ES) cluster. Configure the web application to send messages to the proper delivery stream. Configure each backend group of application servers to search for the messages from Amazon ES and process them accordingly.
31A solutions architect has configured the following IAM policy.
- AA. An AWS Lambda function can be deleted from any network.
- BB. An AWS Lambda function can be created from any network.
- CC. An AWS Lambda function can be deleted from the 100.220.0.0/20 network
- DD. An AWS Lambda function can be deleted from the 220 100.16 0 20 network
32A solutions architect is using Amazon S3 to design the storage architecture of a new digital media application. The media files must be resilient to the loss of an
Availability Zone. Some files are accessed frequently while other files are rarely accessed in an unpredictable pattern. The solutions architect must minimize the costs of storing and retrieving the media files.
Which storage option meets these requirements?- AA. S3 Standard
- BB. S3 Intelligent-Tiering
- CC. S3 Standard-Infrequent Access (S3 Standard-IA)
- DD. S3 One Zone-Infrequent Access (S3 One Zone-IA)
33A company's operations team has an existing Amazon S3 bucket configured to notify an Amazon SQS queue when new objects are created within the bucket. The development team also wants to receive events when new objects are created. The existing operations team workflow must remain intact.
Which solution would satisfy these requirements?- AA. Create another SQS queue. Update the S3 events in the\bucket to also update the new queue when a new object is created.
- BB. Create a new SQS queue that only allows Amazon S3 access the queue. Update Amazon S3 to update tis queue written a new object is created.
- CC. Create an Amazon SNS topic and SAS queue for the bucket updates. Update the bucket to send events to the new topic. Updates queues to poll Amazon SNS.
- DD. Create an Amazon SNS topic and SQS queue for the bucket updates. Update the bucket to send events to the new topic. Add subscription for both queues in the topic.
34A media company stores video content in an Amazon Elastic Block Store (Amazon EBS) volume. A certain video file has become popular and a large number of users across the world are accessing this content. This has resulted in a cost increase.
Which action will DECREASE cost without compromising user accessibility?- AA. Change the EBS volume to Provisioned IOPS (PIOPS).
- BB. Store the video in an Amazon S3 bucket and create an Amazon CloudFront distribution.
- CC. Split the video into multiple, smaller segments so users are routed to the requested video segments only.
- DD. Clear an Amazon S3 bucket in each Region and upload the videos so users are routed to the nearest S3 bucket.
35A solutions architect is designing the cloud architecture for a new application being deployed to AWS. The application allows users to interactively download and upload files. Files older than 2 years will be accessed less frequently. The solutions architect needs to ensure that the application can scale to any number of files while maintaining high availability and durability.
Which scalable solutions should the solutions architect recommend? (Choose two.)- AA. Store the files on Amazon S3 with a lifecycle policy that moves objects older than 2 years to S3 Glacier.
- BB. Store the files on Amazon S3 with a lifecycle policy that moves objects older than 2 years to S3 Standard-Infrequent Access (S3 Standard-IA)
- CC. Store the files on Amazon Elastic File System (Amazon EFS) with a lifecycle policy that moves objects older than 2 years to EFS Infrequent Access (EFS IA).
- DD. Store the files in Amazon Elastic Block Store (Amazon EBS) volumes. Schedule snapshots of the volumes. Use the snapshots to archive data older than 2 years.
- EE. Store the files in RAID-striped Amazon Elastic Block Store (Amazon EBS) volumes. Schedule snapshots of the volumes. Use the snapshots to archive data older than 2 years.
36A company has recently updated its internal security standards. The company must now ensure all Amazon S3 buckets and Amazon Elastic Block Store (Amazon
EBS) volumes are encrypted with keys created and periodically rotated by internal security specialists. The company is looking for a native, software-based AWS service to accomplish this goal.
What should a solutions architect recommend as a solution?- AA. Use AWS Secrets Manager with customer master keys (CMKs) to store master key material and apply a routine to create a new CMK periodically and replace it in AWS Secrets Manager.
- BB. Use AWS Key Management Service (AWS KMS) with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in AWS KMS.
- CC. Use an AWS CloudHSM cluster with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in the CloudHSM cluster nodes.
- DD. Use AWS Systems Manager Parameter Store with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in the Parameter Store.
37A company's dynamic website is hosted using on-premises servers in the United States. The company is launching its product in Europe, and it wants to optimize site loading times for new European users. The site's backend must remain in the United States. The product is being launched in a few days, and an immediate solution is needed.
What should the solutions architect recommend?- AA. Launch an Amazon EC2 instance in us-east-1 and migrate the site to it.
- BB. Move the website to Amazon S3. Use cross-Region replication between Regions.
- CC. Use Amazon CloudFront with a custom origin pointing to the on-premises servers
- DD. Use an Amazon Route 53 geo-proximity routing policy pointing to on-premises servers.
38A development team needs to host a website that will be accessed by other teams. The website contents consist of HTML, CSS, client-side JavaScript, and images.
Which method is the MOST cost-effective for hosting the website?- AA. Containerize the website and host it in AWS Fargate.
- BB. Create an Amazon S3 bucket and host the website there.
- CC. Deploy a web server on an Amazon EC2 instance to host the website.
- DD. Configure an Application Load Balancer with an AWS Lambda target that uses the Express.js framework.
39A company is hosting multiple websites for several lines of business under its registered parent domain. Users accessing these websites will be routed to appropriate backend Amazon EC2 instances based on the subdomain. The websites host static webpages, images, and server-side scripts like PHP and
JavaScript.
Some of the websites experience peak access during the first two hours of business with constant usage throughout the rest of the day. A solutions architect needs to design a solution that will automatically adjust capacity to these traffic patterns while keeping costs low.
Which combination of AWS services or features will meet these requirements? (Choose two.)- AA. AWS Batch
- BB. Network Load Balancer
- CC. Application Load Balancer
- DD. Amazon EC2 Auto Scaling
- EE. Amazon S3 website hosting
40A company uses an Amazon S3 bucket to store static images for its website. The company configured permissions to allow access to Amazon S3 objects by privileged users only.
What should a solutions architect do to protect against data loss? (Choose two.)- AA. Enable versioning on the S3 bucket.
- BB. Enable access logging on the S3 bucket.
- CC. Enable server-side encryption on the S3 bucket.
- DD. Configure an S3 lifecycle rule to transition objects to Amazon S3 Glacier.
- EE. Use MFA Delete to require multi-factor authentication to delete an object.
41An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database. When evaluating performance metrics, a solutions architect discovered that the database reads are causing high I/O and adding latency to the write requests against the database.
What should the solutions architect do to separate the read requests from the write requests?- AA. Enable read-through caching on the Amazon Aurora database.
- BB. Update the application to read from the Multi-AZ standby instance.
- CC. Create a read replica and modify the application to use the appropriate endpoint.
- DD. Create a second Amazon Aurora database and link it to the primary database as a read replica.
42A company has been storing analytics data in an Amazon RDS instance for the past few years. The company asked a solutions architect to find a solution that allows users to access this data using an API. The expectation is that the application will experience periods of inactivity but could receive bursts of traffic within seconds.
Which solution should the solutions architect suggest?- AA. Set up an Amazon API Gateway and use Amazon ECS.
- BB. Set up an Amazon API Gateway and use AWS Elastic Beanstalk.
- CC. Set up an Amazon API Gateway and use AWS Lambda functions.
- DD. Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling.
43A company must generate sales reports at the beginning of every month. The reporting process launches 20 Amazon EC2 instances on the first of the month. The process runs for 7 days and cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?- AA. Reserved Instances
- BB. Spot Block Instances
- CC. On-Demand Instances
- DD. Scheduled Reserved Instances
44A company's web application is using multiple Linux Amazon EC2 instances and storing data on Amazon EBS volumes. The company is looking for a solution to increase the resiliency of the application in case of a failure and to provide storage that complies with atomicity, consistency, isolation, and durability (ACID).
What should a solutions architect do to meet these requirements?- AA. Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance.
- BB. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Mount an instance store on each EC2 instance.
- CC. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon EFS and mount a target on each instance.
- DD. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).
45A company is hosting a web application on AWS using a single Amazon EC2 instance that stores user-uploaded documents in an Amazon EBS volume. For better scalability and availability, the company duplicated the architecture and created a second EC2 instance and EBS volume in another Availability Zone, placing both behind an Application Load Balancer. After completing this change, users reported that, each time they refreshed the website, they could see one subset of their documents or the other, but never all of the documents at the same time.
What should a solutions architect propose to ensure users see all of their documents at once?- AA. Copy the data so both EBS volumes contain all the documents.
- BB. Configure the Application Load Balancer to direct a user to the server with the documents.
- CC. Copy the data from both EBS volumes to Amazon EFS. Modify the application to save new documents to Amazon EFS.
- DD. Configure the Application Load Balancer to send the request to both servers. Return each document from the correct server.
46A solutions architect is tasked with transferring 750 TB of data from a network-attached file system located at a branch office Amazon S3 Glacier. The solution must avoid saturating the branch office's low-bandwidth internet connection.
What is the MOST cost-effective solution?- AA. Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly. Create a bucket VPC endpoint.
- BB. Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination. Create a bucket policy to enforce VPC endpoint.
- CC. Mount the network-attached file system to Amazon S3 and copy the files directly. Create a lifecycle policy to S3 objects to Amazon S3 Glacier.
- DD. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
47An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database. When evaluating performance metrics, a solutions architect discovered that the database reads are causing high I/O and adding latency to the write requests against the database.
What should the solutions architect do to separate the read requests from the write requests?- AA. Enable read-through caching on the Amazon Aurora database.
- BB. Update the application to read from the Multi-AZ standby instance.
- CC. Create a read replica and modify the application to use the appropriate endpoint.
- DD. Create a second Amazon Aurora database and link it to the primary database as a read replica.
48A company has been storing analytics data in an Amazon RDS instance for the past few years. The company asked a solutions architect to find a solution that allows users to access this data using an API. The expectation is that the application will experience periods of inactivity but could receive bursts of traffic within seconds.
Which solution should the solutions architect suggest?- AA. Set up an Amazon API Gateway and use Amazon ECS.
- BB. Set up an Amazon API Gateway and use AWS Elastic Beanstalk.
- CC. Set up an Amazon API Gateway and use AWS Lambda functions.
- DD. Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling.
49A company must generate sales reports at the beginning of every month. The reporting process launches 20 Amazon EC2 instances on the first of the month. The process runs for 7 days and cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?- AA. Reserved Instances
- BB. Spot Block Instances
- CC. On-Demand Instances
- DD. Scheduled Reserved Instances
50A company's web application is using multiple Linux Amazon EC2 instances and storing data on Amazon EBS volumes. The company is looking for a solution to increase the resiliency of the application in case of a failure and to provide storage that complies with atomicity, consistency, isolation, and durability (ACID).
What should a solutions architect do to meet these requirements?- AA. Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance.
- BB. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Mount an instance store on each EC2 instance.
- CC. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon EFS and mount a target on each instance.
- DD. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).
51A company is hosting a web application on AWS using a single Amazon EC2 instance that stores user-uploaded documents in an Amazon EBS volume. For better scalability and availability, the company duplicated the architecture and created a second EC2 instance and EBS volume in another Availability Zone, placing both behind an Application Load Balancer. After completing this change, users reported that, each time they refreshed the website, they could see one subset of their documents or the other, but never all of the documents at the same time.
What should a solutions architect propose to ensure users see all of their documents at once?- AA. Copy the data so both EBS volumes contain all the documents.
- BB. Configure the Application Load Balancer to direct a user to the server with the documents.
- CC. Copy the data from both EBS volumes to Amazon EFS. Modify the application to save new documents to Amazon EFS.
- DD. Configure the Application Load Balancer to send the request to both servers. Return each document from the correct server.
52A solutions architect is tasked with transferring 750 TB of data from a network-attached file system located at a branch office Amazon S3 Glacier. The solution must avoid saturating the branch office's low-bandwidth internet connection.
What is the MOST cost-effective solution?- AA. Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly. Create a bucket VPC endpoint.
- BB. Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination. Create a bucket policy to enforce VPC endpoint.
- CC. Mount the network-attached file system to Amazon S3 and copy the files directly. Create a lifecycle policy to S3 objects to Amazon S3 Glacier.
- DD. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
53An operations team has a standard that states IAM policies should not be applied directly to users. Some new members have not been following this standard.
The operation manager needs a way to easily identify the users with attached policies.
What should a solutions architect do to accomplish this?- AA. Monitor using AWS CloudTrail.
- BB. Create an AWS Config rule to run daily.
- CC. Publish IAM user changes to Amazon SNS.
- DD. Run AWS Lambda when a user is modified.
54A company wants to use an AWS Region as a disaster recovery location for its on-premises infrastructure. The company has 10 TB of existing data, and the on- premise data center has a 1 Gbps internet connection. A solutions architect must find a solution so the company can have its existing data on AWS in 72 hours without transmitting it using an unencrypted channel.
Which solution should the solutions architect select?- AA. Send the initial 10 TB of data to AWS using FTP.
- BB. Send the initial 10 TB of data to AWS using AWS Snowball.
- CC. Establish a VPN connection between Amazon VPC and the company's data center.
- DD. Establish an AWS Direct Connect connection between Amazon VPC and the company's data center.
55A company is building applications in containers. The company wants to migrate its on-premises development and operations services from its on-premises data center to AWS. Management states that production system must be cloud agnostic and use the same configuration and administrator tools across production systems. A solutions architect needs to design a managed solution that will align open-source software.
Which solution meets these requirements?- AA. Launch the containers on Amazon EC2 with EC2 instance worker nodes.
- BB. Launch the containers on Amazon Elastic Kubernetes Service (Amazon EKS) and EKS workers nodes.
- CC. Launch the containers on Amazon Elastic Containers service (Amazon ECS) with AWS Fargate instances.
- DD. Launch the containers on Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 instance worker nodes.
56A company hosts its website on AWS. To address the highly variable demand, the company has implemented Amazon EC2 Auto Scaling. Management is concerned that the company is over-provisioning its infrastructure, especially at the front end of the three-tier application. A solutions architect needs to ensure costs are optimized without impacting performance.
What should the solutions architect do to accomplish this?- AA. Use Auto Scaling with Reserved Instances.
- BB. Use Auto Scaling with a scheduled scaling policy.
- CC. Use Auto Scaling with the suspend-resume feature
- DD. Use Auto Scaling with a target tracking scaling policy.
57A solution architect is performing a security review of a recently migrated workload. The workload is a web application that consists of Amazon EC2 instances in an Auto Scaling group behind an Application Load balancer. The solution architect must improve the security posture and minimize the impact of a DDoS attack on resources.
Which solution is MOST effective?- AA. Configure an AWS WAF ACL with rate-based rules. Create an Amazon CloudFront distribution that points to the Application Load Balancer. Enable the EAF ACL on the CloudFront distribution.
- BB. Create a custom AWS Lambda function that adds identified attacks into a common vulnerability pool to capture a potential DDoS attack. Use the identified information to modify a network ACL to block access.
- CC. Enable VPC Flow Logs and store then in Amazon S3. Create a custom AWS Lambda functions that parses the logs looking for a DDoS attack. Modify a network ACL to block identified source IP addresses.
- DD. Enable Amazon GuardDuty and, configure findings written 10 Amazon CloudWatch. Create an event with Cloud Watch Events for DDoS alerts that triggers Amazon Simple Notification Service (Amazon SNS). Have Amazon SNS invoke a custom AWS lambda function that parses the logs looking for a DDoS attack. Modify a network ACL to block identified source IP addresses
58A company has multiple AWS accounts, for various departments. One of the departments wants to share an Amazon S3 bucket with all other department.
Which solution will require the LEAST amount of effort?- AA. Enable cross-account S3 replication for the bucket.
- BB. Create a pre-signed URL for the bucket and share it with other departments.
- CC. Set the S3 bucket policy to allow cross-account access to other departments.
- DD. Create IAM users for each of the departments and configure a read-only IAM policy.
59A company needs to share an Amazon S3 bucket with an external vendor. The bucket owner must be able to access all objects.
Which action should be taken to share the S3 bucket?- AA. Update the bucket to be a Requester Pays bucket.
- BB. Update the bucket to enable cross-origin resource sharing (CORS).
- CC. Create a bucket policy to require users to grant bucket-owner-full-control when uploading objects.
- DD. Create an IAM policy to require users to grant bucket-owner-full-control when uploading objects.
60A company is developing a real-time multiplier game that uses UDP for communications between client and servers in an Auto Scaling group. Spikes in demand are anticipated during the day, so the game server platform must adapt accordingly. Developers want to store gamer scores and other non-relational data in a database solution that will scale without intervention.
Which solution should a solution architect recommend?- AA. Use Amazon Route 53 for traffic distribution and Amazon Aurora Serverless for data storage.
- BB. Use a Network Load Balancer for traffic distribution and Amazon DynamoDB on demand for data storage.
- CC. Use a Network Load Balancer for traffic distribution and Amazon Aura Global for data storage.
- DD. Use an Application Load Balancer for traffic distribution and Amazon DynamoDB global tables for data storage.
61A company collects temperature, humidity, and atmospheric pressure data in cities across multiple continents. The average volume of data collected per site each day is 500 GB. Each site has a high-speed internet connection. The company's weather forecasting applications are based in a single Region and analyze the data daily.
What is the FASTEST way to aggregate data for all of these global sites?- AA. Enable Amazon S3 Transfer Acceleration on the destination bucket. Use multipart uploads to directly upload site data to the destination bucket.
- BB. Upload site data to an Amazon S3 bucket in the closest AWS Region. Use S3 cross-Region replication to copy objects to the destination bucket.
- CC. Schedule AWS Snowball jobs daily to transfer data to the closest AWS Region. Use S3 cross-Region replication to copy objects to the destination bucket.
- DD. Upload the data to an Amazon EC2 instance in the closes Region. Store the data in an Amazon EBS volume. One a day take an EBS snapshot and copy it to the centralize Region. Restore the EBS volume in the centralized Region and run an analysis on the data daily.
62A company has a custom application running on an Amazon EC instance that: "¢ Reads a large amount of data from Amazon S3 "¢ Performs a multi-stage analysis "¢ Writes the results to Amazon DynamoDB
The application writes a significant number of large temporary files during the multi-stage analysis. The process performance depends on the temporary storage performance.
What would be the fastest storage option for holding the temporary files?- AA. Multiple Amazon S3 buckets with Transfer Acceleration for storage.
- BB. Multiple Amazon EBS drives with Provisioned IOPS and EBS optimization.
- CC. Multiple Amazon EFS volumes using the Network I lie System version 4.1 (NFSv4.1) protocol.
- DD. Multiple instance store volumes with software RAID 0.
63A leasing company generates and emails PDF statements every month for all its customers. Each statement is about 400 KB in size. Customers can download their statements from the website for up to 30 days from when the statements were generated. At the end of their 3-year lease, the customers are emailed a ZIP file that contains all the statements.
What is the MOST cost-effective storage solution for this situation?- AA. Store the statements using the Amazon S3 Standard storage class. Create a lifecycle policy to move the statements to Amazon S3 Glacier storage after 1 day.
- BB. Store the statements using the Amazon S3 Glacier storage class. Create a lifecycle policy to move the statements to Amazon S3 Glacier Deep Archive storage after 30 days.
- CC. Store the statements using the Amazon S3 Standard storage class. Create a lifecycle policy to move the statements to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) storage after 30 days.
- DD. Store the statements using the Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Create a lifecycle policy to move the statements to Amazon S3 Glacier storage after 30 days.
64A company recently released a new type of internet-connected sensor. The company is expecting to sell thousands of sensors, which are designed to stream high volumes of data each second to a central location. A solutions architect must design a solution that ingests and stores data so that engineering teams can analyze it in near-real time with millisecond responsiveness.
Which solution should the solutions architect recommend?- AA. Use an Amazon SQS queue to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon Redshift.
- BB. Use an Amazon SOS queue to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.
- CC. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon Redshift.
- DD. Use Amazon Kinesis Data Streams to ingest the data. Consume the data with an AWS Lambda function, which then stores the data in Amazon DynamoDB.
65A website runs a web application that receives a burst of traffic each day at noon. The users upload new pictures and content daily, but have been complaining of timeouts. The architecture uses Amazon EC2 Auto Scaling groups, and the custom application consistently takes 1 minute to initiate upon boot up before responding to user requests.
How should a solutions architect redesign the architecture to better respond to changing traffic?- AA. Configure a Network Load Balancer with a slow start configuration.
- BB. Configure AWS ElastiCache for Redis to offload direct requests to the servers.
- CC. Configure an Auto Scaling step scaling policy with an instance warmup condition.
- DD. Configure Amazon CloudFront to use an Application Load Balancer as the origin.
66A company is concerned that two NAT instances in use will no longer be able to support the traffic needed for the company's application. A solutions architect wants to implement a solution that is highly available fault tolerant, and automatically scalable.
What should the solutions architect recommend?- AA. Remove the two NAT instances and replace them with two NAT gateways in the same Availability Zone.
- BB. Use Auto Scaling groups with Network Load Balancers for the NAT instances in different Availability Zones.
- CC. Remove the two NAT instances and replace them with two NAT gateways in different Availability Zones.
- DD. Replace the two NAT instances with Spot Instances in different Availability Zones and deploy a Network Load Balancer.
67A company operates a website on Amazon EC2 Linux instances. Some of the instances are failing. Troubleshooting points to insufficient swap space on the failed instances. The operations team lead needs a solution to monitor this.
What should a solutions architect recommend?- AA. Configure an Amazon CloudWatch Swap Usage metric dimension. Monitor the Swap Usage dimension in the EC2 metrics in CloudWatch.
- BB. Use EC2 metadata to collect information, then publish it to Amazon CloudWatch custom metrics. Monitor Swap Usage metrics in CloudWatch.
- CC. Install an Amazon CloudWatch agent on the instances. Run an appropriate script on a set schedule. Monitor Swap Utilization metrics in CloudWatch.
- DD. Enable detailed monitoring in the EC2 console. Create an Amazon CloudWatch Swap Utilization custom metric. Monitor Swap Utilization metrics in CloudWatch.
68A company has a web server running on an Amazon EC2 instance in a public subnet with an Elastic IP address. The default security group is assigned to the EC2 instance. The default network ACL has been modified to block all traffic. A solutions architect needs to make the web server accessible from everywhere on port
443.
Which combination of steps will accomplish this task? (Choose two.)- AA. Create a security group with a rule to allow TCP port 443 from source 0.0.0.0/0.
- BB. Create a security group with a rule to allow TCP port 443 to destination 0.0.0.0/0.
- CC. Update the network ACL to allow TCP port 443 from source 0.0.0.0/0.
- DD. Update the network ACL to allow inbound/outbound TCP port 443 from source 0.0.0.0/0 and to destination 0.0.0.0/0.
- EE. Update the network ACL to allow inbound TCP port 443 from source 0.0.0.0/0 and outbound TCP port 32768-65535 to destination 0/0.0.0/0.
69A company must re-evaluate its need for the Amazon EC2 instances it currently has provisioned in an Auto Scaling group. At present, the Auto Scaling group is configured for a minimum of two instances and a maximum of four instances across two Availability Zones. A Solutions architect reviewed Amazon CloudWatch metrics and found that CPU utilization is consistently low for all the EC2 instances.
What should the solutions architect recommend to maximize utilization while ensuring the application remains fault tolerant?- AA. Remove some EC2 instances to increase the utilization of remaining instances.
- BB. Increase the Amazon Elastic Block Store (Amazon EBS) capacity of instances with less CPU utilization.
- CC. Modify the Auto Scaling group scaling policy to scale in and out based on a higher CPU utilization metric.
- DD. Create a new launch configuration that uses smaller instance types. Update the existing Auto Scaling group.
70A company has an application that posts messages to Amazon SQS. Another application polls the queue and processes the messages in an I/O-intensive operation. The company has a service level agreement (SLA) that specifies the maximum amount of time that can elapse between receiving the messages and responding to the users. Due to an increase in the number of messages the company has difficulty meeting its SLA consistently.
What should a solutions architect do to help improve the application's processing time and ensure it can handle the load at any level?- AA. Create an Amazon Machine Image (AMI) from the instance used for processing. Terminate the instance and replace it with a larger size.
- BB. Create an Amazon Machine Image (AMI) from the instance used for processing. Terminate the instance and replace it with an Amazon EC2 Dedicated Instance.
- CC. Create an Amazon Machine image (AMI) from the instance used for processing. Create an Auto Scaling group using this image in its launch configuration. Configure the group with a target tracking policy to keep us aggregate CPU utilization below 70%.
- DD. Create an Amazon Machine Image (AMI) from the instance used for processing. Create an Auto Scaling group using this image in its launch configuration. Configure the group with a target tracking policy based on the age of the oldest message in the SQS queue.
71A company is designing a new service that will run on Amazon EC2 instance behind an Elastic Load Balancer. However, many of the web service clients can only reach IP addresses whitelisted on their firewalls.
What should a solution architect recommend to meet the clients' needs?- AA. A Network Load Balancer with an associated Elastic IP address.
- BB. An Application Load Balancer with an associated Elastic IP address
- CC. An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address
- DD. An EC2 instance with a public IP address running as a proxy in front of the load balancer
72A company wants to host a web application on AWS that will communicate to a database within a VPC. The application should be highly available.
What should a solutions architect recommend?- AA. Create two Amazon EC2 instances to host the web servers behind a load balancer, and then deploy the database on a large instance.
- BB. Deploy a load balancer in multiple Availability Zones with an Auto Scaling group for the web servers, and then deploy Amazon RDS in multiple Availability Zones.
- CC. Deploy a load balancer in the public subnet with an Auto Scaling group for the web servers, and then deploy the database on an Amazon EC2 instance in the private subnet.
- DD. Deploy two web servers with an Auto Scaling group, configure a domain that points to the two web servers, and then deploy a database architecture in multiple Availability Zones.
73A company's packaged application dynamically creates and returns single-use text files in response to user requests. The company is using Amazon CloudFront for distribution, but wants to future reduce data transfer costs. The company cannot modify the application's source code.
What should a solution architect do to reduce costs?- AA. Use Lambda@Edge to compress the files as they are sent to users.
- BB. Enable Amazon S3 Transfer Acceleration to reduce the response times.
- CC. Enable caching on the CloudFront distribution to store generated files at the edge.
- DD. Use Amazon S3 multipart uploads to move the files to Amazon S3 before returning them to users.
74A database is on an Amazon RDS MySQL 5.6 Multi-AZ DB instance that experience highly dynamic reads. Application developers notice a significant slowdown when testing read performance from a secondary AWS Region. The developers want a solution that provides less than 1 second of read replication latency.
What should the solutions architect recommend?- AA. Install MySQL on Amazon EC2 in the secondary Region.
- BB. Migrate the database to Amazon Aurora with cross-Region replicas.
- CC. Create another RDS for MySQL read replica in the secondary.
- DD. Implement Amazon ElastiCache to improve database query performance.
75A company is planning to deploy an Amazon RDS DB instance running Amazon Aurora. The company has a backup retention policy requirement of 90 days.
Which solution should a solutions architect recommend?- AA. Set the backup retention period to 90 days when creating the RDS DB instance.
- BB. Configure RDS to copy automated snapshots to a user-managed Amazon S3 bucket with a lifecycle policy set to delete after 90 days.
- CC. Create an AWS Backup plan to perform a daily snapshot of the RDS database with the retention set to 90 days. Create an AWS Backup job to schedule the execution of the backup plan daily.
- DD. Use a daily scheduled event with Amazon CloudWatch Events to execute a custom AWS Lambda function that makes a copy of the RDS automated snapshot. Purge snapshots older than 90 days.
76A company currently has 250 TB of backup files stored in Amazon S3 in a vendor's proprietary format. Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3. The company wants to minimize the data transfer charges associated with this conversation.
What should a solution architect do to accomplish this?- AA. Install the conversion software as an Amazon S3 batch operation so the data is transformed without leaving Amazon S3.
- BB. Install the conversion software onto an on-premises virtual machine. Perform the transformation and re-upload the files to Amazon S3 from the virtual machine.
- CC. Use AWS Snowball Edge device to expert the data and install the conversion software onto the devices. Perform the data transformation and re-upload the files to Amazon S3 from the Snowball Edge devices.
- DD. Launch an Amazon EC2 instance in the same Region as Amazon S3 and install the conversion software onto the instance. Perform the transformation and re- upload the files to Amazon S3 from the EC2 instance.
77A company is migrating a NoSQL database cluster to Amazon EC2. The database automatically replicates data to maintain at least three copies of the data. I/O throughput of the servers is the highest priority. Which instance type should a solutions architect recommend for the migration?
- AA. Storage optimized instances with instance store
- BB. Burstable general purpose instances with an Amazon Elastic Block Store (Amazon EBS) volume
- CC. Memory optimized instances with Amazon Elastic Block Store (Amazon EBS) optimization enabled
- DD. Compute optimized instances with Amazon Elastic Block Store (Amazon EBS) optimization enabled
78A company has a large Microsoft SharePoint deployment running on-premises that requires Microsoft Windows shared file storage. The company wants to migrate this workload to the AWS Cloud and is considering various storage options. The storage solution must be highly available and integrated with Active
Directory for access control.
Which solution will satisfy these requirements?- AA. Configure Amazon EFS storage and set the Active Directory domain for authentication.
- BB. Create an SMB file share on an AWS Storage Gateway file gateway in two Availability Zones.
- CC. Create an Amazon S3 bucket and configure Microsoft Windows Server to mount it as a volume.
- DD. Create an Amazon FSx for Windows File Server file system on AWS and set the Active Directory domain for authentication.
79A company has a web application with sporadic usage patterns. There is heavy usage at the beginning of each month, moderate usage at the start of each week, and unpredictable usage during the week. The application consists of a web server and a MySQL database server running inside the data center. The company would like to move the application to the AWS Cloud, and needs to select a cost-effective database platform that will not require database modifications.
Which solution will meet these requirements?- AA. Amazon DynamoDB
- BB. Amazon RDS for MySQL
- CC. MySQL-compatible Amazon Aurora Serverless
- DD. MySQL deployed on Amazon EC2 in an Auto Scaling group
80A solutions architect is designing the storage architecture for a new web application used for storing and viewing engineering drawings. All application components will be deployed on the AWS infrastructure.
The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load. The application must be able to store petabytes of data. Which combination of storage and caching should the solutions architect use?- AA. Amazon S3 with Amazon CloudFront
- BB. Amazon S3 Glacier with Amazon ElastiCache
- CC. Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront
- DD. AWS Storage Gateway with Amazon ElastiCache
81A company hosts its core network services, including directory services and DNS, in its on promises data center. The data center is connected to the AWS Cloud using AWS Direct Connect (DX). Additional AWS accounts are planned that will require quick, cost-effective, and consistent access to these network services.
What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?- AA. Create a DX connection in each new account. Route the network traffic to the on-premises servers.
- BB. Configure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on-premises servers.
- CC. Create a VPN connection between each new account and the DX VPC. Route the network traffic to the on-premises servers.
- DD. Configure AWS Transit Gateway between the accounts. Assigns DX to the transit gateway and route network traffic to the on-premises servers.
82A-company receives structured and semi-structured data from various sources once every day. A solutions architect needs to design a solution that leverages big data processing frameworks. The data should be accessible using SQL queries and business intelligence tools.
What should the solutions architect recommend to build the MOST high-performing solution?- AA. Use AWS Glue to process data and Amazon S3 to store data.
- BB. Use Amazon EMR to process data and Amazon Redshift to store data.
- CC. Use Amazon EC2 to process data and Amazon Elastic Block Store (Amazon EBS) to store data.
- DD. Use Amazon Kinesis Data Analytics to process data and Amazon Elastic File System (Amazon EFS) to store data.
83A solutions architect is creating an application that will handle batch processing of large amounts of data. The input data will be held in Amazon S3 and the output data will be stored in a different S3 bucket. For processing, the application will transfer the data over the network between multiple Amazon EC2 instances.
What should the solutions architect do to reduce the overall data transfer costs?- AA. Place all the EC2 instances in an Auto Scaling group.
- BB. Place all the EC2 instances in the same AWS Region.
- CC. Place all the EC2 instances in the same Availability Zone.
- DD. Place all the EC2 instances in private subnets in multiple Availability Zones.
84A company operates an ecommerce website on Amazon EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group. The site is experiencing performance issues related to a high request rate from illegitimate external systems with changing IP addresses. The security team is worried about potential DDoS attacks against the website. The company must block the illegitimate incoming requests in a way that has a minimal impact on legitimate users.
What should a solutions architect recommend?- AA. Deploy Amazon Inspector and associate it with the ALB.
- BB. Deploy AWS WAF, associate it with the ALB, and configure a rate-limiting rule.
- CC. Deploy rules to the network ACLs associated with the ALB to block the incoming traffic.
- DD. Deploy Amazon GuardDuty and enable rate-limiting protection when configuring GuardDuty.
85A company is hosting an election reporting website on AWS for users around the world. The website uses Amazon EC2 instances for the web and application tiers in an Auto Scaling group with Application Load Balancers. The database tier uses an Amazon RDS for MySQL database. The website is updated with election results once an hour and has historically observed hundreds of users accessing the reports.
The company is expecting a significant increase in demand because of upcoming elections in different countries. A solutions architect must improve the website's ability to handle additional demand while minimizing the need for additional EC2 instances.
Which solution will meet these requirements?- AA. Launch an Amazon ElastiCache cluster to cache common database queries.
- BB. Launch an Amazon CloudFront web distribution to cache commonly requested website content.
- CC. Enable disk-based caching on the EC2 instances to cache commonly requested website content.
- DD. Deploy a reverse proxy into the design using an EC2 instance with caching enabled for commonly requested website content.
86A company is running a three-tier web application to process credit card payments. The front-end user interface consists of static webpages. The application tier can have long-running processes. The database tier uses MySQL.
The application is currently running on a single, general purpose large Amazon EC2 instance. A solutions architect needs to decouple the services to make the web application highly available.
Which solution would provide the HIGHEST availability?- AA. Move static assets to Amazon CloudFront. Leave the application in EC2 in an Auto Scaling group. Move the database to Amazon RDS to deploy Multi-AZ.
- BB. Move static assets and the application into a medium EC2 instance. Leave the database on the large instance. Place both instances in an Auto Scaling group.
- CC. Move static assets to Amazon S3, Move the application to AWS Lambda with the concurrency limit set. Move the database to Amazon DynamoDB with on- demand enabled.
- DD. Move static assets to Amazon S3. Move the application to Amazon Elastic Container Service (Amazon ECS) containers with Auto Scaling enabled, Move the database to Amazon RDS to deploy Multi-AZ.
87A solutions architect is designing a two-tier web application. The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets. The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet. Security is a high priority for the company.
How should security groups be configured in this situation? (Choose two.)- AA. Configure the security group for the web tier to allow inbound traffic on port 443 from 0.0.0.0/0.
- BB. Configure the security group for the web tier to allow outbound traffic on port 443 from 0.0.0.0/0.
- CC. Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier.
- DD. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier.
- EE. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier.
88A company is building a website that relies on reading and writing to an Amazon DynamoDB database. The traffic associated with the website predictably peaks during business hours on weekdays and declines overnight and during weekends. A solutions architect needs to design a cost-effective solution that can handle the load.
What should the solutions architect do to meet these requirements?- AA. Enable DynamoDB Accelerator (DAX) to cache the data.
- BB. Enable Multi-AZ replication for the DynamoDB database.
- CC. Enable DynamoDB auto scaling when creating the tables.
- DD. Enable DynamoDB On-Demand capacity allocation when creating the tables.
89A company uses Amazon Redshift for its data warehouse. The company wants to ensure high durability for its data in case of any component failure.
What should a solutions architect recommend?- AA. Enable concurrency scaling.
- BB. Enable cross-Region snapshots.
- CC. Increase the data retention period.
- DD. Deploy Amazon Redshift in Multi-AZ.
90A company has data stored in an on-premises data center that is used by several on-premises applications. The company wants to maintain its existing application environment and be able to use AWS services for data analytics and future visualizations.
Which storage service should a solutions architect recommend?- AA. Amazon Redshift
- BB. AWS Storage Gateway for files
- CC. Amazon Elastic Block Store (Amazon EBS)
- DD. Amazon Elastic File System (Amazon EFS)
91A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company's security policy requires that all website traffic be inspected by AWS WAF.
How should the solutions architect comply with these requirements?- AA. Configure an S3 bucket policy to accept requests coming from the AWS WAF Amazon Resource Name (ARN) only.
- BB. Configure Amazon CloudFront to forward all incoming requests to AWS WAF before requesting content from the S3 origin.
- CC. Configure a security group that allows Amazon CloudFront IP addresses to access Amazon S3 only. Associate AWS WAF to CloudFront.
- DD. Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucket. Enable AWS WAF on the distribution.
92A company has a 143 TB MySQL database that it wants to migrate to AWS. The plan is to use Amazon Aurora MySQL as the platform going forward. The company has a 100 Mbps AWS Direct Connect connection to Amazon VPC.
Which solution meets the company's needs and takes the LEAST amount of time?- AA. Use a gateway endpoint for Amazon S3. Migrate the data to Amazon S3. Import the data into Aurora.
- BB. Upgrade the Direct Connect link to 500 Mbps. Copy the data to Amazon S3. Import the data into Aurora.
- CC. Order an AWS Snowmobile and copy the database backup to it. Have AWS import the data into Amazon S3. Import the backup into Aurora.
- DD. Order four 50-TB AWS Snowball devices and copy the database backup onto them. Have AWS import the data into Amazon S3. Import the data into Aurora.
93A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Single-AZ DB instance. Management wants to eliminate single points of failure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code.
Which solution meets these requirements?- AA. Convert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option.
- BB. Create a new RDS Multi-AZ deployment. Take a snapshot of the current RDS instance and restore the new Multi-AZ deployment with the snapshot.
- CC. Create a read-only replica of the PostgreSQL database in another Availability Zone. Use Amazon Route 53 weighted record sets to distribute requests across the databases.
- DD. Place the RDS for PostgreSQL database in an Amazon EC2 Auto Scaling group with a minimum group size of two. Use Amazon Route 53 weighted record sets to distribute requests across instances.
94A company has a 10 Gbps AWS Direct Connect connection from its on-premises servers to AWS. The workloads using the connection are critical. The company requires a disaster recovery strategy with maximum resiliency that maintains the current connection bandwidth at a minimum.
What should a solutions architect recommend?- AA. Set up a new Direct Connect connection in another AWS Region.
- BB. Set up a new AWS managed VPN connection in another AWS Region.
- CC. Set up two new Direct Connect connections: one in the current AWS Region and one in another Region.
- DD. Set up two new AWS managed VPN connections: one in the current AWS Region and one in another Region.
95A solutions architect is designing a VPC with public and private subnets. The VPC and subnets use IPv4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability. An internet gateway is used to provide internet access for the public subnets. The private subnets require access to the internet to allow Amazon EC2 instances to download software updates.
What should the solutions architect do to enable internet access for the private subnets?- AA. Create three NAT gateways, one for each public subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT gateway in its AZ.
- BB. Create three NAT instances, one for each private subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT instance in its AZ.
- CC. Create a second internet gateway on one of the private subnets. Update the route table for the private subnets that forward non-VPC traffic to the private internet gateway.
- DD. Create an egress-only internet gateway on one of the public subnets. Update the route table for the private subnets that forward non-VPC traffic to the egress- only internet gateway.
96As part of budget planning, management wants a report of AWS billed items listed by user. The data will be used to create department budgets. A solutions architect needs to determine the most efficient way to obtain this report information.
Which solution meets these requirements?- AA. Run a query with Amazon Athena to generate the report.
- BB. Create a report in Cost Explorer and download the report.
- CC. Access the bill details from the billing dashboard and download the bill.
- DD. Modify a cost budget in AWS Budgets to alert with Amazon Simple Email Service (Amazon SES).
97A company with facilities in North America, Europe, and Asia is designing new distributed application to optimize its global supply chain and manufacturing process. The orders booked on one continent should be visible to all Regions in a second or less. The database should be able to support failover with a short
Recovery Time Objective (RTO). The uptime of the application is important to ensure that manufacturing is not impacted.
What should a solutions architect recommend?- AA. Use Amazon DynamoDB global tables.
- BB. Use Amazon Aurora Global Database.
- CC. Use Amazon RDS for MySQL with a cross-Region read replica.
- DD. Use Amazon RDS for PostgreSQL with a cross-Region read replica.
98A company's near-real-time streaming application is running on AWS. As the data is ingested, a job runs on the data and takes 30 minutes to complete. The workload frequently experiences high latency due to large amounts of incoming data. A solutions architect needs to design a scalable and serverless solution to enhance performance.
Which combination of steps should the solutions architect take? (Choose two.)- AA. Use Amazon Kinesis Data Firehose to ingest the data.
- BB. Use AWS Lambda with AWS Step Functions to process the data.
- CC. Use AWS Database Migration Service (AWS DMS) to ingest the data.
- DD. Use Amazon EC2 instances in an Auto Scaling group to process the data.
- EE. Use AWS Fargate with Amazon Elastic Container Service (Amazon ECS) to process the data.
99An application running on an Amazon EC2 instance needs to access an Amazon DynamoDB table. Both the EC2 instance and the DynamoDB table are in the same AWS account. A solutions architect must configure the necessary permissions.
Which solution will allow least privilege access to the DynamoDB table from the EC2 instance?- AA. Create an IAM role with the appropriate policy to allow access to the DynamoDB table. Create an instance profile to assign this IAM role to the EC2 instance.
- BB. Create an IAM role with the appropriate policy to allow access to the DynamoDB table. Add the EC2 instance to the trust relationship policy document to allow it to assume the role.
- CC. Create an IAM user with the appropriate policy to allow access to the DynamoDB table. Store the credentials in an Amazon S3 bucket and read them from within the application code directly.
- DD. Create an IAM user with the appropriate policy to allow access to the DynamoDB table. Ensure that the application stores the IAM credentials securely on local storage and uses them to make the DynamoDB calls.
100A solutions architect is designing a solution that involves orchestrating a series of Amazon Elastic Container Service (Amazon ECS) task types running on
Amazon EC2 instances that are part of an ECS cluster. The output and state data for all tasks needs to be stored. The amount of data output by each task is approximately 10 MB, and there could be hundreds of tasks running at a time. The system should be optimized for high-frequency reading and writing. As old outputs are archived and deleted, the storage size is not expected to exceed 1 TB.
Which storage solution should the solutions architect recommend?- AA. An Amazon DynamoDB table accessible by all ECS cluster instances.
- BB. An Amazon Elastic File System (Amazon EFS) with Provisioned Throughput mode.
- CC. An Amazon Elastic File System (Amazon EFS) file system with Bursting Throughput mode.
- DD. An Amazon Elastic Block Store (Amazon EBS) volume mounted to the ECS cluster instances.
101An online photo application lets users upload photos and perform image editing operations. The application offers two classes of service: free and paid. Photos submitted by paid users are processed before those submitted by free users. Photos are uploaded to Amazon S3 and the job information is sent to Amazon SQS.
Which configuration should a solutions architect recommend?- AA. Use one SQS FIFO queue. Assign a higher priority to the paid photos so they are processed first.
- BB. Use two SQS FIFO queues: one for paid and one for free. Set the free queue to use short polling and the paid queue to use long polling.
- CC. Use two SQS standard queues: one for paid and one for free. Configure Amazon EC2 instances to prioritize polling for the paid queue over the free queue.
- DD. Use one SQS standard queue. Set the visibility timeout of the paid photos to zero. Configure Amazon EC2 instances to prioritize visibility settings so paid photos are processed first.
102A company wants to migrate its MySQL database from on premises to AWS. The company recently experienced a database outage that significantly impacted the business. To ensure this does not happen again, the company wants a reliable database solution on AWS that minimizes data loss and stores every transaction on at least two nodes.
Which solution meets these requirements?- AA. Create an Amazon RDS DB instance with synchronous replication to three nodes in three Availability Zones.
- BB. Create an Amazon RDS MySQL DB instance with Multi-AZ functionality enabled to synchronously replicate the data.
- CC. Create an Amazon RDS MySQL DB instance and then create a read replica in a separate AWS Region that synchronously replicates the data.
- DD. Create an Amazon EC2 instance with a MySQL engine installed that triggers an AWS Lambda function to synchronously replicate the data to an Amazon RDS MySQL DB instance.
103A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability.
Which storage solution meets these requirements?- AA. Amazon S3 Standard
- BB. Amazon S3 Intelligent-Tiering
- CC. Amazon S3 Glacier Deep Archive
- DD. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
104A company receives inconsistent service from its data center provider because the company is headquartered in an area affected by natural disasters. The company is not ready to fully migrate to the AWS Cloud, but it wants a failure environment on AWS in case the on-premises data center fails.
The company runs web servers that connect to external vendors. The data available on AWS and on premises must be uniform.
Which solution should a solutions architect recommend that has the LEAST amount of downtime?- AA. Configure an Amazon Route 53 failover record. Run application servers on Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group. Set up AWS Storage Gateway with stored volumes to back up data to Amazon S3.
- BB. Configure an Amazon Route 53 failover record. Execute an AWS CloudFormation template from a script to create Amazon EC2 instances behind an Application Load Balancer. Set up AWS Storage Gateway with stored volumes to back up data to Amazon S3.
- CC. Configure an Amazon Route 53 failover record. Set up an AWS Direct Connect connection between a VPC and the data center. Run application servers on Amazon EC2 in an Auto Scaling group. Run an AWS Lambda function to execute an AWS CloudFormation template to create an Application Load Balancer.
- DD. Configure an Amazon Route 53 failover record. Run an AWS Lambda function to execute an AWS CloudFormation template to launch two Amazon EC2 instances. Set up AWS Storage Gateway with stored volumes to back up data to Amazon S3. Set up an AWS Direct Connect connection between a VPC and the data center.
105A company has three VPCs named Development, Testing, and Production in the us-east-1 Region. The three VPCs need to be connected to an on-premises data center and are designed to be separate to maintain security and prevent any resource sharing. A solutions architect needs to find a scalable and secure solution.
What should the solutions architect recommend?- AA. Create an AWS Direct Connect connection and a VPN connection for each VPC to connect back to the data center.
- BB. Create VPC peers from all the VPCs to the Production VPC. Use an AWS Direct Connect connection from the Production VPC back to the data center.
- CC. Connect VPN connections from all the VPCs to a VPN in the Production VPC. Use a VPN connection from the Production VPC back to the data center.
- DD. Create a new VPC called Network. Within the Network VPC, create an AWS Transit Gateway with an AWS Direct Connect connection back to the data center. Attach all the other VPCs to the Network VPC.
106What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?
- AA. Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set.
- BB. Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set to private.
- CC. Update the bucket policy to deny if the PutObject does not have an aws:SecureTransport header set to true.
- DD. Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.
107A company needs a secure connection between its on-premises environment and AWS. This connection does not need high bandwidth and will handle a small amount of traffic. The connection should be set up quickly.
What is the MOST cost-effective method to establish this type of connection?- AA. Implement a client VPN.
- BB. Implement AWS Direct Connect.
- CC. Implement a bastion host on Amazon EC2.
- DD. Implement an AWS Site-to-Site VPN connection.
108A company uses Application Load Balancers (ALBs) in different AWS Regions. The ALBs receive inconsistent traffic that can spike and drop throughout the year.
The company's networking team needs to allow the IP addresses of the ALBs in the on-premises firewall to enable connectivity.
Which solution is the MOST scalable with minimal configuration changes?- AA. Write an AWS Lambda script to get the IP addresses of the ALBs in different Regions. Update the on-premises firewall's rule to allow the IP addresses of the ALBs.
- BB. Migrate all ALBs in different Regions to the Network Load Balancer (NLBs). Update the on-premises firewall's rule to allow the Elastic IP addresses of all the NLBs.
- CC. Launch AWS Global Accelerator. Register the ALBs in different Regions to the accelerator. Update the on-premises firewall's rule to allow static IP addresses associated with the accelerator.
- DD. Launch a Network Load Balancer (NLB) in one Region. Register the private IP addresses of the ALBs in different Regions with the NLB. Update the on- premises firewall's rule to allow the Elastic IP address attached to the NLB.
109A company runs a high performance computing (HPC) workload on AWS. The workload required low-latency network performance and high network throughput with tightly coupled node-to-node communication. The Amazon EC2 instances are properly sized for compute and storage capacity, and are launched using default options.
What should a solutions architect propose to improve the performance of the workload?- AA. Choose a cluster placement group while launching Amazon EC2 instances.
- BB. Choose dedicated instance tenancy while launching Amazon EC2 instances.
- CC. Choose an Elastic Inference accelerator while launching Amazon EC2 instances.
- DD. Choose the required capacity reservation while launching Amazon EC2 instances.
110A company uses a legacy on-premises analytics application that operates on gigabytes of .csv files and represents months of data. The legacy application cannot handle the growing size of .csv files. New .csv files are added daily from various data sources to a central on-premises storage location. The company wants to continue to support the legacy application while users learn AWS analytics services. To achieve this, a solutions architect wants to maintain two synchronized copies of all the .csv files on-premises and in Amazon S3.
Which solution should the solutions architect recommend?- AA. Deploy AWS DataSync on-premises. Configure DataSync to continuously replicate the .csv files between the company's on-premises storage and the company's S3 bucket.
- BB. Deploy an on-premises file gateway. Configure data sources to write the .csv files to the file gateway. Point the legacy analytics application to the file gateway. The file gateway should replicate the .csv files to Amazon S3.
- CC. Deploy an on-premises volume gateway. Configure data sources to write the .csv files to the volume gateway. Point the legacy analytics application to the volume gateway. The volume gateway should replicate data to Amazon S3.
- DD. Deploy AWS DataSync on-premises. Configure DataSync to continuously replicate the .csv files between on-premises and Amazon Elastic File System (Amazon EFS). Enable replication from Amazon EFS to the company's S3 bucket.
111A company has media and application files that need to be shared internally. Users currently are authenticated using Active Directory and access files from a
Microsoft Windows platform. The chief executive officer wants to keep the same user permissions, but wants the company to improve the process as the company is reaching its storage capacity limit.
What should a solutions architect recommend?- AA. Set up a corporate Amazon S3 bucket and move all media and application files.
- BB. Configure Amazon FSx for Windows File Server and move all the media and application files.
- CC. Configure Amazon Elastic File System (Amazon EFS) and move all media and application files.
- DD. Set up Amazon EC2 on Windows, attach multiple Amazon Elastic Block Store (Amazon EBS) volumes, and move all media and application files.
112A company is deploying a web portal. The company wants to ensure that only the web portion of the application is publicly accessible. To accomplish this, the
VPC was designed with two public subnets and two private subnets. The application will run on several Amazon EC2 instances in an Auto Scaling group. SSL termination must be offloaded from the EC2 instances.
What should a solutions architect do to ensure these requirements are met?- AA. Configure the Network Load Balancer in the public subnets. Configure the Auto Scaling group in the private subnets and associate it with the Application Load Balancer.
- BB. Configure the Network Load Balancer in the public subnets. Configure the Auto Scaling group in the public subnets and associate it with the Application Load Balancer.
- CC. Configure the Application Load Balancer in the public subnets. Configure the Auto Scaling group in the private subnets and associate it with the Application Load Balancer.
- DD. Configure the Application Load Balancer in the private subnets. Configure the Auto Scaling group in the private subnets and associate it with the Application Load Balancer.
113A company is experiencing growth as demand for its product has increased. The company's existing purchasing application is slow when traffic spikes. The application is a monolithic three-tier application that uses synchronous transactions and sometimes sees bottlenecks in the application tier. A solutions architect needs to design a solution that can meet required application response times while accounting for traffic volume spikes.
Which solution will meet these requirements?- AA. Vertically scale the application instance using a larger Amazon EC2 instance size.
- BB. Scale the application's persistence layer horizontally by introducing Oracle RAC on AWS.
- CC. Scale the web and application tiers horizontally using Auto Scaling groups and an Application Load Balancer.
- DD. Decouple the application and data tiers using Amazon Simple Queue Service (Amazon SQS) with asynchronous AWS Lambda calls.
114A company hosts an application used to upload files to an Amazon S3 bucket. Once uploaded, the files are processed to extract metadata, which takes less than
5 seconds. The volume and frequency of the uploads varies from a few files each hour to hundreds of concurrent uploads. The company has asked a solutions architect to design a cost-effective architecture that will meet these requirements.
What should the solutions architect recommend?- AA. Configure AWS CloudTrail trails to log S3 API calls. Use AWS AppSync to process the files.
- BB. Configure an object-created event notification within the S3 bucket to invoke an AWS Lambda function to process the files.
- CC. Configure Amazon Kinesis Data Streams to process and send data to Amazon S3. Invoke an AWS Lambda function to process the files.
- DD. Configure an Amazon Simple Notification Service (Amazon SNS) topic to process the files uploaded to Amazon S3. Invoke an AWS Lambda function to process the files.
115A company has copied 1 PB of data from a colocation facility to an Amazon S3 bucket in the us-east-1 Region using an AWS Direct Connect link. The company now wants to copy the data to another S3 bucket in the us-west-2 Region. The colocation facility does not allow the use of AWS Snowball.
What should a solutions architect recommend to accomplish this?- AA. Order a Snowball Edge device to copy the data from one Region to another Region.
- BB. Transfer contents from the source S3 bucket to a target S3 bucket using the S3 console.
- CC. Use the aws S3 sync command to copy data from the source bucket to the destination bucket.
- DD. Add a cross-Region replication configuration to copy objects across S3 buckets in different Regions.
116A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources. The data is in JSON format and ingestion rates can be as high as 1 MB/s. When an EC2 instance is rebooted, the data in-flight is lost. The company's data science team wants to query ingested data in near-real time.
Which solution provides near-real-time data querying that is scalable with minimal data loss?- AA. Publish data to Amazon Kinesis Data Streams. Use Kinesis Data Analytics to query the data.
- BB. Publish data to Amazon Kinesis Data Firehose with Amazon Redshift as the destination. Use Amazon Redshift to query the data.
- CC. Store ingested data in an EC2 instance store. Publish data to Amazon Kinesis Data Firehose with Amazon S3 as the destination. Use Amazon Athena to query the data.
- DD. Store ingested data in an Amazon Elastic Block Store (Amazon EBS) volume. Publish data to Amazon ElastiCache for Redis. Subscribe to the Redis channel to query the data.
117A company is deploying a multi-instance application within AWS that requires minimal latency between the instances.
What should a solutions architect recommend?- AA. Use an Auto Scaling group with a cluster placement group.
- BB. Use an Auto Scaling group with single Availability Zone in the same AWS Region.
- CC. Use an Auto Scaling group with multiple Availability Zones in the same AWS Region.
- DD. Use a Network Load Balancer with multiple Amazon EC2 Dedicated Hosts as the targets.
118A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard. A solutions architect needs to design a solution that can handle large traffic spikes, process the mobile game updates in order of receipt, and store the processed updates in a highly available database. The company also wants to minimize the management overhead required to maintain the solution.
What should the solutions architect do to meet these requirements?- AA. Push score updates to Amazon Kinesis Data Streams. Process the updates in Kinesis Data Streams with AWS Lambda. Store the processed updates in Amazon DynamoDB.
- BB. Push score updates to Amazon Kinesis Data Streams. Process the updates with a fleet of Amazon EC2 instances set up for Auto Scaling. Store the processed updates in Amazon Redshift.
- CC. Push score updates to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe an AWS Lambda function to the SNS topic to process the updates. Store the processed updates in a SQL database running on Amazon EC2.
- DD. Push score updates to an Amazon Simple Queue Service (Amazon SQS) queue. Use a fleet of Amazon EC2 instances with Auto Scaling to process the updates in the SQS queue. Store the processed updates in an Amazon RDS Multi-AZ DB instance.
119A company is building a document storage application on AWS. The application runs on Amazon EC2 instances in multiple Availability Zones. The company requires the document store to be highly available. The documents need to be returned immediately when requested. The lead engineer has configured the application to use Amazon Elastic Block Store (Amazon EBS) to store the documents, but is willing to consider other options to meet the availability requirement.
What should a solutions architect recommend?- AA. Snapshot the EBS volumes regularly and build new volumes using those snapshots in additional Availability Zones.
- BB. Use Amazon EBS for the EC2 instance root volumes. Configure the application to build the document store on Amazon S3.
- CC. Use Amazon EBS for the EC2 instance root volumes. Configure the application to build the document store on Amazon S3 Glacier.
- DD. Use at least three Provisioned IOPS EBS volumes for EC2 instances. Mount the volumes to the EC2 instances in a RAID 5 configuration.
120A solutions architect is designing a security solution for a company that wants to provide developers with individual AWS accounts through AWS Organizations, while also maintaining standard security controls. Because the individual developers will have AWS account root user-level access to their own accounts, the solutions architect wants to ensure that the mandatory AWS CloudTrail configuration that is applied to new developer accounts is not modified.
Which action meets these requirements?- AA. Create an IAM policy that prohibits changes to CloudTrail, and attach it to the root user.
- BB. Create a new trail in CloudTrail from within the developer accounts with the organization trails option enabled.
- CC. Create a service control policy (SCP) the prohibits changes to CloudTrail, and attach it the developer accounts.
- DD. Create a service-linked role for CloudTrail with a policy condition that allows changes only from an Amazon Resource Name (ARN) in the master account.
121A company wants to share forensic accounting data that is stored in an Amazon RDS DB instance with an external auditor. The auditor has its own AWS account and requires its own copy of the database.
How should the company securely share the database with the auditor?- AA. Create a read replica of the database and configure IAM standard database authentication to grant the auditor access.
- BB. Copy a snapshot of the database to Amazon S3 and assign an IAM role to the auditor to grant access to the object in that bucket.
- CC. Export the database contents to text files, store the files in Amazon S3, and create a new IAM user for the auditor with access to that bucket.
- DD. Make an encrypted snapshot of the database, share the snapshot, and allow access to the AWS Key Management Service (AWS KMS) encryption key.
122A company has an automobile sales website that stores its listings in a database on Amazon RDS. When an automobile is sold, the listing needs to be removed from the website and the data must be sent to multiple target systems.
Which design should a solutions architect recommend?- AA. Create an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS) queue for the targets to consume.
- BB. Create an AWS Lambda function triggered when the database on Amazon RDS is updated to send the information to an Amazon Simple Queue Service (Amazon SQS) FIFO queue for the targets to consume.
- CC. Subscribe to an RDS event notification and send an Amazon Simple Queue Service (Amazon SQS) queue fanned out to multiple Amazon Simple Notification Service (Amazon SNS) topics. Use AWS Lambda functions to update the targets.
- DD. Subscribe to an RDS event notification and send an Amazon Simple Notification Service (Amazon SNS) topic fanned out to multiple Amazon Simple Queue Service (Amazon SQS) queues. Use AWS Lambda functions to update the targets.
123A company is building a media sharing application and decides to use Amazon S3 for storage. When a media file is uploaded, the company starts a multi-step process to create thumbnails, identify objects in the images, transcode videos into standard formats and resolutions, and extract and store the metadata to an
Amazon DynamoDB table. The metadata is used for searching and navigation.
The amount of traffic is variable. The solution must be able to scale to handle spikes in load without unnecessary expenses.
What should a solutions architect recommend to support this workload?- AA. Build the processing into the website or mobile app used to upload the content to Amazon S3. Save the required data to the DynamoDB table when the objects are uploaded.
- BB. Trigger AWS Step Functions when an object is stored in the S3 bucket. Have the Step Functions perform the steps needed to process the object and then write the metadata to the DynamoDB table.
- CC. Trigger an AWS Lambda function when an object is stored in the S3 bucket. Have the Lambda function start AWS Batch to perform the steps to process the object. Place the object data in the DynamoDB table when complete.
- DD. Trigger an AWS Lambda function to store an initial entry in the DynamoDB table when an object is uploaded to Amazon S3. Use a program running on an Amazon EC2 instance in an Auto Scaling group to poll the index for unprocessed items, and use the program to perform the processing.
124 Question #84 Topic 2
A company provides an API to its users that automates inquiries for tax computations based on item prices. The company experiences a larger number of inquiries during the holiday season only that cause slower response times. A solutions architect needs to design a solution that is scalable and elastic.
What should the solutions architect do to accomplish this?- AA. Provide an API hosted on an Amazon EC2 instance. The EC2 instance performs the required computations when the API request is made.
- BB. Design a REST API using Amazon API Gateway that accepts the item names. API Gateway passes item names to AWS Lambda for tax computations.
- CC. Create an Application Load Balancer that has two Amazon EC2 instances behind it. The EC2 instances will compute the tax on the received item names.
- DD. Design a REST API using Amazon API Gateway that connects with an API hosted on an Amazon EC2 instance. API Gateway accepts and passes the item names to the EC2 instance for tax computations.
125An application is running on an Amazon EC2 instance and must have millisecond latency when running the workload. The application makes many small reads and writes to the file system, but the file system itself is small.
Which Amazon Elastic Block Store (Amazon EBS) volume type should a solutions architect attach to their EC2 instance?- AA. Cold HDD (sc1)
- BB. General Purpose SSD (gp2)
- CC. Provisioned IOPS SSD (io1)
- DD. Throughput Optimized HDD (st1)
126A solutions architect is designing a multi-Region disaster recovery solution for an application that will provide public API access. The application will use Amazon
EC2 instances with a userdata script to load application code and an Amazon RDS for MySQL database. The Recovery Time Objective (RTO) is 3 hours and the
Recovery Point Objective (RPO) is 24 hours.
Which architecture would meet these requirements at the LOWEST cost?- AA. Use an Application Load Balancer for Region failover. Deploy new EC2 instances with the userdata script. Deploy separate RDS instances in each Region.
- BB. Use Amazon Route 53 for Region failover. Deploy new EC2 instances with the userdata script. Create a read replica of the RDS instance in a backup Region.
- CC. Use Amazon API Gateway for the public APIs and Region failover. Deploy new EC2 instances with the userdata script. Create a MySQL read replica of the RDS instance in a backup Region.
- DD. Use Amazon Route 53 for Region failover. Deploy new EC2 instances with the userdata script for APIs, and create a snapshot of the RDS instance daily for a backup. Replicate the snapshot to a backup Region.
127A solutions architect needs to ensure that all Amazon Elastic Block Store (Amazon EBS) volumes restored from unencrypted EBC snapshots are encrypted.
What should the solutions architect do to accomplish this?- AA. Enable EBS encryption by default for the AWS Region.
- BB. Enable EBS encryption by default for the specific volumes.
- CC. Create a new volume and specify the symmetric customer master key (CMK) to use for encryption.
- DD. Create a new volume and specify the asymmetric customer master key (CMK) to use for encryption.
128A company runs a static website through its on-premises data center. The company has multiple servers that handle all of its traffic, but on busy days, services are interrupted and the website becomes unavailable. The company wants to expand its presence globally and plans to triple its website traffic.
What should a solutions architect recommend to meet these requirements?- AA. Migrate the website content to Amazon S3 and host the website on Amazon CloudFront.
- BB. Migrate the website content to Amazon EC2 instances with public Elastic IP addresses in multiple AWS Regions.
- CC. Migrate the website content to Amazon EC2 instances and vertically scale as the load increases.
- DD. Use Amazon Route 53 to distribute the loads across multiple Amazon CloudFront distributions for each AWS Region that exists globally.
129A company has a highly dynamic batch processing job that uses many Amazon EC2 instances to complete it. The job is stateless in nature, can be started and stopped at any given time with no negative impact, and typically takes upwards of 60 minutes total to complete. The company has asked a solutions architect to design a scalable and cost-effective solution that meets the requirements of the job.
What should the solutions architect recommend?- AA. Implement EC2 Spot Instances.
- BB. Purchase EC2 Reserved Instances.
- CC. Implement EC2 On-Demand Instances.
- DD. Implement the processing on AWS Lambda.
130A company is hosting its static website in an Amazon S3 bucket, which is the origin for Amazon CloudFront. The company has users in the United States, Canada, and Europe and wants to reduce costs.
What should a solutions architect recommend?- AA. Adjust the CloudFront caching time to live (TTL) from the default to a longer timeframe.
- BB. Implement CloudFront events with Lambda@Edge to run the website's data processing.
- CC. Modify the CloudFront price class to include only the locations of the countries that are served.
- DD. Implement a CloudFront Secure Sockets Layer (SSL) certificate to push security closer to the locations of the countries that are served.
131A company is planning to migrate a commercial off-the-shelf application from its on-premises data center to AWS. The software has a software licensing model using sockets and cores with predictable capacity and uptime requirements. The company wants to use its existing licenses, which were purchased earlier this year.
Which Amazon EC2 pricing option is the MOST cost-effective?- AA. Dedicated Reserved Hosts
- BB. Dedicated On-Demand Hosts
- CC. Dedicated Reserved Instances
- DD. Dedicated On-Demand Instances
132A company is designing a website that uses an Amazon S3 bucket to store static images. The company wants all future requests to have faster response times while reducing both latency and cost.
Which service configuration should a solutions architect recommend?- AA. Deploy a NAT server in front of Amazon S3.
- BB. Deploy Amazon CloudFront in front of Amazon S3.
- CC. Deploy a Network Load Balancer in front of Amazon S3.
- DD. Configure Auto Scaling to automatically adjust the capacity of the website.
133A company has an on-premises MySQL database used by the global sales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrator wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users in the future.
Which service should a solutions architect recommend?- AA. Amazon Aurora MySQL
- BB. Amazon Aurora Serverless for MySQL
- CC. Amazon Redshift Spectrum
- DD. Amazon RDS for MySQL
134 Question #94 Topic 2
A company needs to comply with a regulatory requirement that states all emails must be stored and archived externally for 7 years. An administrator has created compressed email files on premises and wants a managed service to transfer the files to AWS storage.
Which managed service should a solutions architect recommend?- AA. Amazon Elastic File System (Amazon EFS)
- BB. Amazon S3 Glacier
- CC. AWS Backup
- DD. AWS Storage Gateway
135A company that hosts its web application on AWS wants to ensure all Amazon EC2 instances, Amazon RDS DB instances, and Amazon Redshift clusters are configured with tags. The company wants to minimize the effort of configuring and operating this check.
What should a solutions architect do to accomplish this?- AA. Use AWS Config rules to define and detect resources that are not properly tagged.
- BB. Use Cost Explorer to display resources that are not properly tagged. Tag those resources manually.
- CC. Write API calls to check all resources for proper tag allocation. Periodically run the code on an EC2 instance.
- DD. Write API calls to check all resources for proper tag allocation. Schedule an AWS Lambda function through Amazon CloudWatch to periodically run the code.
136A company has a live chat application running on its on-premises servers that use WebSockets. The company wants to migrate the application to AWS.
Application traffic is inconsistent, and the company expects there to be more traffic with sharp spikes in the future.
The company wants a highly scalable solution with no server maintenance nor advanced capacity planning.
Which solution meets these requirements?- AA. Use Amazon API Gateway and AWS Lambda with an Amazon DynamoDB table as the data store. Configure the DynamoDB table for provisioned capacity.
- BB. Use Amazon API Gateway and AWS Lambda with an Amazon DynamoDB table as the data store. Configure the DynamoDB table for on-demand capacity.
- CC. Run Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group with an Amazon DynamoDB table as the data store. Configure the DynamoDB table for on-demand capacity.
- DD. Run Amazon EC2 instances behind a Network Load Balancer in an Auto Scaling group with an Amazon DynamoDB table as the data store. Configure the DynamoDB table for provisioned capacity.
137A company hosts its static website content from an Amazon S3 bucket in the us-east-1 Region. Content is made available through an Amazon CloudFront origin pointing to that bucket. Cross-Region replication is set to create a second copy of the bucket in the ap-southeast-1 Region. Management wants a solution that provides greater availability for the website.
Which combination of actions should a solutions architect take to increase availability? (Choose two.)- AA. Add both buckets to the CloudFront origin.
- BB. Configure failover routing in Amazon Route 53.
- CC. Create a record in Amazon Route 53 pointing to the replica bucket.
- DD. Create an additional CloudFront origin pointing to the ap-southeast-1 bucket.
- EE. Set up a CloudFront origin group with the us-east-1 bucket as the primary and the ap-southeast-1 bucket as the secondary.
138A company hosts a training site on a fleet of Amazon EC2 instances. The company anticipates that its new course, which consists of dozens of training videos on the site, will be extremely popular when it is released in 1 week.
What should a solutions architect do to minimize the anticipated server load?- AA. Store the videos in Amazon ElastiCache for Redis. Update the web servers to serve the videos using the ElastiCache API.
- BB. Store the videos in Amazon Elastic File System (Amazon EFS). Create a user data script for the web servers to mount the EFS volume.
- CC. Store the videos in an Amazon S3 bucket. Create an Amazon CloudFront distribution with an origin access identity (OAI) of that S3 bucket. Restrict Amazon S3 access to the OAI.
- DD. Store the videos in an Amazon S3 bucket. Create an AWS Storage Gateway file gateway to access the S3 bucket. Create a user data script for the web servers to mount the file gateway.
139A company runs a production application on a fleet of Amazon EC2 instances. The application reads the data from an Amazon SQS queue and processes the messages in parallel. The message volume is unpredictable and often has intermittent traffic. This application should continually process messages without any downtime.
Which solution meets these requirements MOST cost-effectively?- AA. Use Spot Instances exclusively to handle the maximum capacity required.
- BB. Use Reserved Instances exclusively to handle the maximum capacity required.
- CC. Use Reserved Instances for the baseline capacity and use Spot Instances to handle additional capacity.
- DD. Use Reserved Instances for the baseline capacity and use On-Demand Instances to handle additional capacity.
140A company has a hybrid application hosted on multiple on-premises servers with static IP addresses. There is already a VPN that provides connectivity between the VPC and the on-premises network. The company wants to distribute TCP traffic across the on-premises servers for internet users.
What should a solutions architect recommend to provide a highly available and scalable solution?- AA. Launch an internet-facing Network Load Balancer (NLB) and register on-premises IP addresses with the NLB.
- BB. Launch an internet-facing Application Load Balancer (ALB) and register on-premises IP addresses with the ALB.
- CC. Launch an Amazon EC2 instance, attach an Elastic IP address, and distribute traffic to the on-premises servers.
- DD. Launch an Amazon EC2 instance with public IP addresses in an Auto Scaling group and distribute traffic to the on-premises servers.
141Management has decided to deploy all AWS VPCs with IPv6 enabled. After some time, a solutions architect tries to launch a new instance and receives an error stating that there is not enough IP address space available in the subnet.
What should the solutions architect do to fix this?- AA. Check to make sure that only IPv6 was used during the VPC creation.
- BB. Create a new IPv4 subnet with a larger range, and then launch the instance.
- CC. Create a new IPv6-only subnet with a large range, and then launch the instance.
- DD. Disable the IPv4 subnet and migrate all instances to IPv6 only. Once that is complete, launch the instance.
142A company has a build server that is in an Auto Scaling group and often has multiple Linux instances running. The build server requires consistent and mountable shared NFS storage for jobs and configurations.
Which storage option should a solutions architect recommend?- AA. Amazon S3
- BB. Amazon FSx
- CC. Amazon Elastic Block Store (Amazon EBS)
- DD. Amazon Elastic File System (Amazon EFS)
Information
- Description
- Quiz on AWS - SAA C02 -2, created by Nguyen Nhan on 15/11/2020.
- Author
- Nguyen Nhan
- Language
- English
- Views
- 75
- Rating
- No ratings yet Rate this quiz