AWS SAA-C03 Chapter 17 Practice Questions (89 Questions)

Practice questions for the AWS SAA-C03 (Solutions Architect Associate) exam, Chapter 17.

1. Q1. Q1301. A company deploys an API in a VPC behind a public Application Load Balancer(ALB). The company deploys a client application that needs to consume the API in a VPC that is in a second AWS account. The application is deployed in private subnets.The company wants to connect the application to the API securely. The company wants to optimize costs.Which solution will meet these requirements?

   • A. Configure a VPC peering connection between the two VPCs. Update the route tables.
   • B. Establish an AWS Direct Connect connection between the two VPCs.
   • C. Deploy a NAT gateway in the application VPC. Update the route tables in the application VPC.
   • D. Create a transit gateway in the API account. Create transit gateway attachments in the application VPC, and configure routing.

   View question →

2. Q2. Q1302. A company hosts a web application on multiple Amazon EC2 instances. The EC2 instances are in an Auto Scaling group that scales in response to user demand. The company wants to optimize costs for the application but does not want to make any long-term commitments.Which solution will meet these requirements?

   • A. Purchase Dedicated Instances only.
   • B. Purchase Reserved Instances with a partial upfront payment.
   • C. Purchase a mix of On-Demand Instances and Spot Instances.
   • D. Purchase a mix of On-Demand Instances and Reserved Instances.

   View question →

3. Q3. Q1303. An ecommerce company is adding a product review feature to its web application. The feature will consist of a Submit Review function and a Get Review function. The Submit Review function will give customers the ability to submit a short text review. The Submit Review function must be capable of thousands of concurrent review submissions. The Get Review function will retrieve all reviews for each product ID. The Get Review function must have low latency.Which solution will meet these requirements?

   • A. Deploy the Submit Review function on an Amazon Elastic Container Service(Amazon ECS) cluster in an Auto Scaling group. Configure an Application Load Balancer in front of the Auto Scaling group. Store the reviews in an Amazon S3 bucket. Configure the Get Review function to query the S3 bucket.
   • B. Deploy the Submit Review function on an Amazon EC2 instance. Expose the function as a REST endpoint. Store all reviews on an instance store volume. Configure the Get Review function to query the instance store volume.
   • C. Create an Amazon API Gateway REST API. Define a SubmitReview method and a GetReview method in the API. Choose AWS as the integration type and Amazon DynamoDB as the service.Enable API Gateway caching for the GetReview method.
   • D. Implement the Submit Review function by using AWS Step Functions. Configure each review submission to start a workflow. Configure the workflow to use an AWS Lambda function that validates and stores each review in an Amazon ElastiCache(Redis OSS) cluster. Configure the Get Review function to query the cluster.

   View question →

4. Q4. Q1304. A company runs a MySQL database on a single Amazon EC2 instance. The company needs to improve availability of the database to prepare for power outages.Which solution will meet this requirement?

   • A. Add an Application Load Balancer(ALB) in front of the EC2 instance.
   • B. Configure EC2 automatic instance recovery to move the instance to another Availability Zone.
   • C. Migrate the MySQL database to Amazon RDS and enable Multi-AZ deployment.
   • D. Enable termination protection for the EC2 instance.

   View question →

5. Q5. Q1305. A company wants to run a production database in the AWS Cloud. The database will collect billions of sensor readings from multiple locations across multiple AWS Regions. Data is written to the database at a sustained rate of 50,000 writes per second.The company will run reports once every 3 months against the database. The company will run simple queries to retrieve data based on unique location IDs to run the reports. The query results will vary in size. The company needs a solution that will optimize data storage costs. The solution must be highly durable and must not compromise database performanceWhich solution will meet these requirements?

   • A. Use Amazon Aurora Serverless v2 in one Region. Specify the desired capacity range.
   • B. Use Amazon DynamoDB Standard tables, and enable DynamoDB Accelerator(DAX).
   • C. Deploy an Amazon RDS for PostgreSQL DB instance, and create a read replica.
   • D. Use Amazon DynamoDB Standard-IA tables in multiple Regions. Configure DynamoDB to manage capacity.

   View question →

6. Q6. Q1306. A company has workloads that run on AWS. Each workload has a separate Amazon RDS database. A security audit finds that the company does not meet a requirement to rotate the RDS master user credentials every 30 days. Each RDS DB instance must also have a different set of credentials that are accessible only by the relevant application layer and by the team that supports the workload. Which solution will meet these requirements with the LEAST operational overhead?

   • A. Use AWS Secrets Manager to set up RDS password management. Use a combination of IAM policies and RDS policies to restrict access to the credentials.
   • B. Use AWS Secrets Manager to set up RDS password management. Use a combination of IAM policies and Secrets Manager policies to restrict access to the credentials.
   • C. Create an Amazon Simple Notification Service(Amazon SNS) topic for each workload. Create a scheduled AWS Lambda function that rotates the RDS master user credentials every 30 days.Configure the Lambda function to publish the new credentials to the SNS topic for each application and team.
   • D. Create an Amazon S3 bucket that uses AWS Key Management Service(AWS KMS) for encryption.Create a scheduled AWS Lambda function that rotates the RDS master user credentials every 30 days. Configure the Lambda function to push the new credentials to the S3 bucket. Use KMS key policies to restrict access to the credentials.

   View question →

7. Q7. Q1307. A retail company runs its application on AWS. The application uses Amazon EC2 for web servers, Amazon RDS for database services, and Amazon CloudFront for global content distribution.The company needs a solution to mitigate DDoS attacks.Which solution will meet this requirement?

   • A. Implement AWS WAF custom rules to limit the length of query requests. Configure CloudFront to work with AWS WAF.
   • B. Enable AWS Shield Advanced. Configure CloudFront to work with Shield Advanced.
   • C. Use Amazon Inspector to scan the EC2 instances. Enable Amazon GuardDuty.
   • D. Enable Amazon Macie. Configure CloudFront Origin Shield.

   View question →

8. Q8. Q1308. A company is planning to migrate its business-critical applications from an on-premises data center to AWS. The company has an on-premises installation of a Microsoft SQL Server Always On cluster. The company wants to migrate to an AWS managed database service. A solutions architect must design a heterogeneous database migration on AWS.Which solution will meet these requirements?

   • A. Migrate the SQL Server databases to Amazon RDS for MySQL by using backup and restore utilities.
   • B. Use an AWS Snowball Edge Storage Optimized device to transfer data to Amazon S3. Set up Amazon RDS for MySQL. Use S3 integration with SQL Server features, such as BULK INSERT.
   • C. Use AWS Schema Conversion Tool(AWS SCT) to translate the database schema to Amazon RDS for MySQL. Then use AWS Database Migration Service(AWS DMS) to migrate the data from on-premises databases to Amazon RDS.
   • D. Use AWS DataSync to migrate data over the network between on-premises storage and Amazon S3.Set up Amazon RDS for MySQL. Use S3 integration with SQL Server features, such as BULK INSERT.

   View question →

9. Q9. Q1309. A company uses a general-purpose instance class Amazon RDS for MySQL DB instance. The company has configured the DB instance in a Multi-AZ configuration across two Availability Zones as part of the company's production application.The company's finance team needs to run SQL queries against the DB instance to generate reports. Customers have reported significant performance issues with the application during report generation. A solutions architect needs to minimize the effect of the reporting job on the DB instance.Which solution will meet these requirements?

   • A. Create a proxy in Amazon RDS Proxy. Update the reporting job to query the proxy endpoint.
   • B. Update the RDS DB instance configuration to use three Availability Zones.
   • C. Add an RDS read replica. Update the reporting job to query the replica endpoint.
   • D. Change the RDS configuration from a general-purpose instance class to a memory-optimized instance class.

   View question →

10. Q10. Q1310. A company allows users to upload and store photos through its website. The website has users from all around the world. All images that users upload are stored in a centralized Amazon S3 bucket. The company wants to increase the speed in which its entire user base can upload photos through the website. What should a solutions architect recommend to meet these requirements?

    • A. Create an Amazon CloudFront distribution. Use the Amazon S3 Standard storage class to store files.
    • B. Create an Amazon CloudFront distribution. Configure the distribution settings and origin.
    • C. Configure S3 Transfer Acceleration on the S3 bucket. Use the standard S3 endpoint to upload files.
    • D. Configure S3 Transfer Acceleration on the S3 bucket. Use the S3 Accelerate endpoint to upload files.

    View question →

11. Q11. Q1311. A solutions architect is storing sensitive data generated by an application in Amazon S3. The solutions architect wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS KMS key was used and by whom.Which encryption option will meet these requirements?

    • A. Server-side encryption with Amazon S3 managed keys(SSE-S3)
    • B. Server-side encryption with AWS KMS managed keys(SSE-KMS)
    • C. Server-side encryption with customer-provided keys(SSE-C)
    • D. Server-side encryption with self-managed keys

    View question →

12. Q12. Q1312. A company runs an internet-facing web application on AWS. The company uses Amazon Route 53 for DNS management and has a public hosted zone to route traffic from the internet to the application. The company wants to log DNS response codes to help system administrators perform any root cause analysis in the future.Which solution will meet these requirements?

    • A. Use Route 53 to configure query logging.
    • B. Use AWS CloudTrail to record all Route 53 queries.
    • C. Use Amazon CloudWatch to collect and process Route 53 metrics.
    • D. Use AWS Trusted Advisor to perform on-demand root cause analysis.

    View question →

13. Q13. Q1313. A company uses AWS CloudFormation to deploy IAM resources within accounts that AWS Control Tower governs. The security team wants to prevent the deployment of IAM roles that include inline policies with the following statements:"Effect":"Allow","Action":"","Resource":""Which solution will meet this requirement?

    • A. Use AWS Control Tower proactive controls to block CloudFormation stacks that match these inline policy statements.
    • B. Use AWS Control Tower detective controls to detect and delete IAM inline policies that contain these statements upon deployment.
    • C. Use AWS Config to create a rule that detects these statements in any inline IAM policies. Configure the rule to automatically remove these statements by using the AWS-DeleteIAMInlinePolicy remediation.
    • D. Use AWS Config to create a rule that detects these statements in inline IAM policies and sends a notification to the security team.

    View question →

14. Q14. Q1314. A solutions architect is designing a scalable web application that runs on Amazon EC2. The application users must stay on the same server after login. The application must be protected from common exploits.Which solution will meet these requirements?

    • A. Create an Application Load Balancer(ALB) with a target group. Attach the target group to an Auto Scaling group. Enable duration-based stickiness on the target group. Associate the ALB with an AWS Network Firewall firewall.
    • B. Create a Network Load Balancer(NLB) with a target group. Attach the target group to an Auto Scaling group. Associate the NLB with an AWS WAF web ACL
    • C. Create an Application Load Balancer(ALB) with a target group. Attach the target group to an Auto Scaling group. Enable application-based stickiness on the target group. Associate the ALB with an AWS WAF web ACL.
    • D. Create a Network Load Balancer(NLB) with a target group. Attach the target group to an Auto Scaling group. Enable target group stickiness on the NLB. Associate the NLB with an AWS Network Firewall firewall.

    View question →

15. Q15. Q1315. A company runs an application on several Amazon EC2 instances. Multiple Amazon Block Store(Amazon EBS) volumes are attached to each EC2 instance. The company needs to back up the configurations and the data of the EC2 instances every night. The application must be recoverable in a secondary AWS Region.Which solution will meet these requirements in the MOST operationally efficient way?

    • A. Configure an AWS Lambda function to take nightly snapshots of the application's EBS volumes and to copy the snapshots to a secondary Region.
    • B. Create a backup plan in AWS Backup to take nightly backups. Copy the backups to a secondary Region. Add the EC2 instances to a resource assignment as part of the backup plan.
    • C. Create a backup plan in AWS Backup to take nightly backups. Copy the backups to a secondary Region. Add the EBS volumes to a resource assignment as part of the backup plan.
    • D. Configure an AWS Lambda function to take nightly snapshots of the application's EBS volumes and to copy the snapshots to a secondary Availability Zone.

    View question →

16. Q16. Q1316. A company receives data from several sources and stores the data in an Amazon S3 data lake. The company transforms the data and ingests it into multiple downstream data stores, including databases and data warehouses.A solutions architect wants to design an extract, transform, and load(ETL) pipeline to orchestrate a process to prepare and load the data for analytics activities. The processed data must also be available for stakeholders through dashboards and visualizations.Which solution will meet these requirements with the LEAST development effort?

    • A. Use Amazon EMR and a custom Scala script to create ETL pipelines. Use an AWS Lambda function to orchestrate the workflow. Use Amazon OpenSearch Service to generate dashboards and visualizations.
    • B. Use AWS Glue to create ETL pipelines. Use AWS Step Functions to orchestrate the workflow. Use Amazon QuickSight to generate dashboards and visualizations.
    • C. Use an AWS Lambda function to create ETL pipelines. Use AWS Step Functions to orchestrate the workflow. Use Amazon QuickSight to generate dashboards and visualizations.
    • D. Use custom scripts that run on Amazon EC2 instances to create ETL pipelines. Use AWS Glue to orchestrate the workflow. Use AWS Glue DataBrew to generate dashboards and visualizations.

    View question →

17. Q17. Q1317. A company is migrating its order processing system to the AWS Cloud. The order processing system must use exact message ordering, a highly available architecture, and loosely coupled components.Which solution will meet these requirements?

    • A. Ingest the orders in an Amazon Simple Queue Service(Amazon SQS) standard queue. Use Amazon EC2 Spot Instances to process the orders.
    • B. Push the orders to an Amazon Simple Notification Service(Amazon SNS) topic. Subscribe an AWS Lambda function to the SNS topic to process the orders
    • C. Push the orders to a stream in Amazon Kinesis Data Streams. Use Amazon EC2 Spot Instances to process the orders.
    • D. Ingest the orders in an Amazon Simple Queue Service(Amazon SQS) FIFO queue. Invoke an AWS Lambda function to process the orders.

    View question →

18. Q18. Q1318. A company runs an application that uses Docker containers in an on-premises data center. The application runs on a container host that stores persistent data files in a local volume. Container instances use the stored persistent data.The company wants to migrate the application to fully managed AWS services.Which solution will meet these requirements?

    • A. Use Amazon Elastic Kubernetes Service(Amazon EKS) with self-managed nodes. Attach an Amazon Elastic Block Store(Amazon EBS) volume to an Amazon EC2 instance. Mount the EBS volume on the containers to provide persistent storage.
    • B. Use Amazon Elastic Container Service(Amazon ECS) with the AWS Fargate launch type. Create an Amazon Elastic File System(Amazon EFS) volume. Mount the EFS volume on the containers to provide persistent storage.
    • C. Use Amazon Elastic Container Service(Amazon ECS) with the AWS Fargate launch type. Create an Amazon DynamoDB table. Configure the application to use the DynamoDB table for persistent storage.
    • D. Use Amazon Elastic Container Service(Amazon ECS) with the Amazon EC2 launch type. Create an Amazon Elastic File System(Amazon EFS) volume. Mount the EFS volume on the containers to provide persistent storage.

    View question →

19. Q19. Q1319. A software as a service(SaaS) company runs a multi-tenant data lake by using Amazon S3. Each tenant's data is stored in an isolated data path in an S3 bucket. The data lake supports custom encryption for each tenant.The company wants to allow tenants to use their own keys to encrypt only a subset of their data. The rest of the data will use server-side encryption with Amazon S3 managed keys(SSE-S3). The company needs to set up ongoing data replication to another S3 bucket in a different AWS Region for the objects encrypted with imported keys.Which solution will meet these requirements?

    • A. Use S3 prefixes for each tenant's data. Use server-side encryption with AWS KMS keys(SSE-KMS).Use tags to set up tag-based Cross-Region Replication(CRR) to another S3 bucket.
    • B. Use S3 prefixes for each tenant's data. Use server-side encryption with customer-provided keys(SSE- C). Set up prefix-based Cross-Region Replication(CRR) to another S3 bucket.
    • C. Use S3 prefixes for each tenant's data. Use server-side encryption with AWS KMS keys(SSE-KMS). Set up prefix-based Cross-Region Replication(CRR) to another S3 bucket.
    • D. Create a separate S3 bucket for each tenant. Use server-side encryption with customer-provided keys (SSE-C). Set up bucket-level Cross-Region Replication(CRR).

    View question →

20. Q20. Q1320. A company is deploying an application that processes large quantities of data in parallel. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to provide the lowest possible latency between nodes.Which combination of network solutions will meet these requirements?(Select TWO.)

    • A. Distribute the EC2 instances across multiple Availability Zones.
    • B. Attach an Elastic Fabric Adapter(EFA) to each EC2 instance.
    • C. Place the EC2 instances in a single Availability Zone.
    • D. Use Amazon Elastic Block Store(Amazon EBS) optimized instance types.
    • E. Run the EC2 instances in a cluster placement group.

    View question →

21. Q21. Q1321. A company stores petabytes of historical medical information on premises. The company has a process to manage encryption of the data to comply with regulations.The company needs a cloud-based solution for data backup, recovery, and archiving. The company must retain control over the encryption key material.Which combination of solutions will meet these requirements?(Select TWO.)

    • A. Create an AWS Key Management Service(AWS KMS) key without key material. Import the company's key material into the KMS key
    • B. Create an AWS Key Management Service(AWS KMS) encryption key that contains key material generated by AWS KMS.
    • C. Store the data in Amazon S3 Standard-Infrequent Access(S3 Standard-IA) storage. Use S3 Bucket Keys with AWS Key Management Service(AWS KMS) keys.
    • D. Store the data in an Amazon S3 Glacier storage class. Use server-side encryption with customer- provided keys(SSE-C).
    • E. Store the data in AWS Snowball devices. Use server-side encryption with AWS KMS keys(SSE-KMS).

    View question →

22. Q22. Q1322. A company has an application that scans millions of connected devices for security threats and pushes the scan logs to an Amazon S3 bucket. A total of 70 GB of data is generated each week, and the company needs to store 3 years of data for historical reporting. The company must process, aggregate, and enrich the data from Amazon S3 by performing complex analytical queries and joins in the least amount of time. The aggregated dataset is visualized on an Amazon QuickSight dashboard. What should a solutions architect recommend to meet these requirements?

    • A. Create and run an ETL job in AWS Glue to process the data from Amazon S3 and load it into Amazon Redshift. Perform the aggregation queries on Amazon Redshift.
    • B. Use AWS Lambda functions based on S3 PutObject event triggers to copy the incremental changes to Amazon DynamoDB. Perform the aggregation queries on DynamoDB.
    • C. Use AWS Lambda functions based on S3 PutObject event triggers to copy the incremental changes to Amazon Aurora MySQL. Perform the aggregation queries on Aurora MySQL
    • D. Use AWS Glue to catalog the data in Amazon S3. Perform the aggregation queries on the cataloged tables by using Amazon Athena. Query the data directly from Amazon S3.

    View question →

23. Q23. Q1323. A company uses Amazon Redshift for its data warehouse. The company wants to ensure high durability for its data in case of any component failure.What should a solutions architect recommend?

    • A. Enable concurrency scaling.
    • B. Enable cross-Region snapshots.
    • C. Increase the data retention period.
    • D. Deploy Amazon Redshift in Multi-AZ.

    View question →

24. Q24. Q1324. A company wants to migrate 70 TB of data from its on-premises data center to AWS. The data is a mix of structured and unstructured data. The company wants to use a one-time migration strategy that is secure and cost-effective.Which AWS service will meet these requirements?

    • A. Amazon Elastic File System(Amazon EFS)
    • B. AWS Storage Gateway
    • C. AWS Snowball Edge
    • D. AWS Database Migration Service(AWS DMS)

    View question →

25. Q25. Q1325. An adventure company has launched a new feature on its mobile app. Users can use the feature to upload their hiking and rafting photos and videos anytime. The photos and videos are stored in Amazon S3 Standard storage in an S3 bucket and are served through Amazon CloudFront. The company needs to optimize the cost of the storage. A solutions architect discovers that most of the uploaded photos and videos are accessed infrequently after 30 days. However, some of the uploaded photos and videos are accessed frequently after 30 days. The solutions architect needs to implement a solution that maintains millisecond retrieval availability of the photos and videos at the lowest possible cost.Which solution will meet these requirements?

    • A. Configure S3 Intelligent-Tiering on the S3 bucket.
    • B. Configure an S3 Lifecycle policy to transition image objects and video objects from S3 Standard to S3 Glacier Deep Archive after 30 days.
    • C. Replace Amazon S3 with an Amazon Elastic File System(Amazon EFS) file system that is mounted on Amazon EC2 instances.
    • D. Add a Cache-Control: max-age header to the S3 image objects and S3 video objects. Set the header to 30 days.

    View question →

26. Q26. Q1326. A database is on an Amazon RDS MySQL 5.6 Multi-AZ DB instance that experiences highly dynamic reads. Application developers notice a significant slowdown when testing read performance from a secondary AWS Region. The developers want a solution that provides less than 1 second of read replication latency.What should the solutions architect recommend?

    • A. Install MySQL on Amazon EC2 in the secondary Region.
    • B. Migrate the database to Amazon Aurora with cross-Region replicas.
    • C. Create another RDS for MySQL read replica in the secondary Region.
    • D. Implement Amazon ElastiCache to improve database query performance.

    View question →

27. Q27. Q1327. A finance company uses backup software to back up its data to physical tape storage on premises. To comply with regulations, the company needs to store the data for 7 years. The company must be able to restore archived data within one week when necessary.The company wants to migrate the backup data to AWS to reduce costs. The company does not want to change the current backup software.Which solution will meet these requirements MOST cost-effectively?

    • A. Use AWS Storage Gateway Tape Gateway to copy the data to virtual tapes. Use AWS DataSync to migrate the virtual tapes to the Amazon S3 Standard-Infrequent Access(S3 Standard-IA).Change the target of the backup software to S3 Standard-IA.
    • B. Convert the physical tapes to virtual tapes. Use AWS DataSync to migrate the virtual tapes to the Amazon S3 Glacier Flexible Retrieval. Change the target of the backup software to the S3 Glacier Flexible Retrieval.
    • C. Use AWS Storage Gateway Tape Gateway to copy the data to virtual tapes. Migrate the virtual tapes to Amazon S3 Glacier Deep Archive. Change the target of the backup software to the virtual tapes.
    • D. Convert the physical tapes to virtual tapes. Use AWS Snowball Edge storage-optimized devices to migrate the virtual tapes to Amazon S3 Glacier Flexible Retrieval. Change the target of the backup software to S3 Glacier Flexible Retrieval.

    View question →

28. Q28. Q1328. A company recently launched its website to serve content to its global user base. The company wants to store and accelerate the delivery of static content to its users by leveraging Amazon CloudFront with an Amazon EC2 instance attached as its origin.How should a solutions architect optimize high availability for the application?

    • A. Use Lambda@Edge for CloudFront.
    • B. Use Amazon S3 Transfer Acceleration for CloudFront.
    • C. Configure another EC2 instance in a different Availability Zone as part of the origin group.
    • D. Configure another EC2 instance as part of the origin server cluster in the same Availability Zone.

    View question →

29. Q29. Q1329. A company is building a news aggregation platform. The platform ingests news articles that need to be cleaned and categorized. The processed articles must be stored durably for one year. The platform must handle up to thousands of incoming articles each minute during peaks. The platform must also provide independent, scalable processing for each article.Which solution will meet these requirements?

    • A. Create a custom application to ingest articles and perform in-memory processing. Run the application on one large Amazon EC2 instance. Configure the application to store processed articles in an Amazon S3 bucket.
    • B. Create an AWS Lambda function to ingest articles. Send one message for each article to an Amazon Simple Queue Service(Amazon SQS) queue. Create a second Lambda function to consume the SQS queue. Configure the second Lambda function to process the articles and store the articles in an Amazon S3 bucket.
    • C. Create an AWS Lambda function to ingest articles. Store the output in a shared Amazon ElastiCache (Memcached) cluster. Deploy a fleet of Amazon EC2 instances in an Auto Scaling group.Configure the instances to retrieve the article data from the ElastiCache cluster, process the data, and write the data back to the ElastiCache cluster.
    • D. Create an AWS Lambda function to ingest articles. Send one message for each article to an Amazon Simple Queue Service(Amazon SQS) queue. Create a second Lambda function to consume the SQS queue. Configure the second Lambda function to process the articles and store the articles in a second SQS queue.

    View question →

30. Q30. Q1330. A company runs a non-production Oracle database on an Amazon EC2 instance. The database contains 1 TB of data. The EC2 instance runs in a private subnet of a VPC. A backup of the EC2 instance is taken every day and uploaded to an Amazon S3 bucket. The current backup process uses a NAT gateway to access the S3 bucket.The company does not want the backup process to use public IP addresses. Which solution will meet this requirement MOST cost-effectively?

    • A. Create a gateway endpoint for Amazon S3 in the VPC. Update the route tables.
    • B. Enable S3 Transfer Acceleration on the S3 bucket. Compress the backup files and use multipart uploads.
    • C. Create an Amazon CloudFront distribution, and set the S3 bucket as the origin. Upload the backup files to the CloudFront distribution.
    • D. Use a third-party tool to mount the S3 bucket as a file share on the EC2 instance operating system. Use the file share as the backup target.

    View question →

31. Q31. Q1331. A company deployed a serverless application that uses Amazon DynamoDB as a database layer. The application has experienced a large increase in users. The company wants to improve database response time from milliseconds to microseconds and to cache requests to the database. Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use DynamoDB Accelerator(DAX).
    • B. Migrate the database to Amazon Redshift.
    • C. Migrate the database to Amazon RDS.
    • D. Use Amazon ElastiCache(Redis OSS).

    View question →

32. Q32. Q1332. A company uses AWS Lambda functions in AWS account A. The company manages an Amazon S3 bucket in AWS account B. The Lambda function in account A needs to read objects from the S3 bucket in account

    • A. A solutions architect needs to design a secure solution for cross-account access and maintain the principle of least privilege.Which solution will meet these requirements?
    • B. Create an IAM role in account B that has the necessary S3 permissions and a trust relationship with account A. Configure the Lambda function to assume this IAM role.
    • C. Create an IAM role in account A that has the necessary S3 permissions and a trust relationship with account B. Create an IAM user in account B that has permission to assume this IAM role.Configure the Lambda function to use this IAM user.
    • D. Create an IAM user in account B that has the necessary S3 permissions and a trust relationship with account A. Create an IAM user in account A that has permission to assume the account B user.Configure the Lambda function to use the account A user.
    • E. Create an IAM role in account B that has the necessary S3 permissions and a trust relationship with account A. Create an IAM user in account A that has permission to assume this IAM role.Configure the Lambda function to use this IAM user.

    View question →

33. Q33. Q1333. A company is moving a legacy data processing application to the AWS Cloud. The application needs to run on Amazon EC2 instances behind an Application Load Balancer(ALB). The application must handle incoming traffic spikes and continue to work in the event of an application fault in one Availability Zone. The company requires that a Web Application Firewall(WAF) must be attached to the ALB.Which solution will meet these requirements?

    • A. Deploy the application to EC2 instances in an Auto Scaling group that is in a single Availability Zone.Use an Application Load Balancer(ALB) to distribute traffic across the EC2 instances. Use AWS WAF to associate a web ACL with the ALB.
    • B. Deploy the application to EC2 instances in an Auto Scaling group across multiple Availability Zones. Use an Application Load Balancer(ALB) to distribute traffic across the EC2 instances. Use AWS WAF to associate a web ACL with the ALB.
    • C. Deploy the application to EC2 instances in Auto Scaling groups across multiple AWS Regions. Use Amazon Route 53 latency-based routing to distribute traffic across the Auto Scaling groups. Use AWS WAF to associate a web ACL with the Route 53 routing configuration.
    • D. Deploy the application to EC2 instances in an Auto Scaling group across multiple Availability Zones. Use a Network Load Balancer(NLB) to distribute traffic across the EC2 instances. Use AWS WAF to associate a web ACL with the NLB.

    View question →

34. Q34. Q1334. A company has concerns about its Amazon RDS database. The workload is unpredictable, and periodic floods of new user registrations can cause the company to run out of storage. The database runs on a general purpose instance with 300 GiB of storage.What should a solutions architect recommend to the company?

    • A. Enable RDS storage autoscaling.
    • B. Schedule vertical instance scaling.
    • C. Change to a storage optimized instance type and vertically scale the database.
    • D. Configure an AWS Lambda function to increase RDS storage by 1 GiB when storage space is low.

    View question →

35. Q35. Q1335. A company hosts a website on Amazon EC2 instances that run Amazon Linux. The instances are behind an Application Load Balancer (ALB) and are part of an Auto Scaling group. Each instance uses Amazon EBS volumes to store product manuals.New instances often have outdated data.The new instances occasionally take up to 30 minutes to receive updates from an external source. The company must ensure that all instances have up-to-date product manuals. The company needs a solution that can adapt quickly to increased demand. The solution must not require modifications for the application code.Which solution will meet these requirements?

    • A. Store the product manuals on instance store volumes that are attached to each EC2 instance.
    • B. Store the product manuals in an Amazon S3 bucket. Configure the EC2 instances to download updates from the S3 bucket.
    • C. Store the product manuals in an Amazon EFS volume. Mount the EFS volume on the EC2 instances.
    • D. Store the product manuals in an Amazon S3 bucket. Use the S3 Standard-Infrequent Access(S3 Standard-IA) storage class. Configure the EC2 instances to download updates from the S3 bucket.

    View question →

36. Q36. Q1336. A company wants to deploy its containerized application at scale. The company also wants to use software solutions from the Kubernetes open source community.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Deploy the application on an Amazon EKS cluster. Use EKS managed node groups with Amazon EC2 instances.
    • B. Deploy the application on an Amazon EKS cluster. Use EKS Auto Mode.
    • C. Run the application on a self-managed Kubernetes cluster that runs on Amazon EC2 instances.
    • D. Run the containerized application as an AWS Lambda function.

    View question →

37. Q37. Q1337. A company is creating a mobile financial app that gives users the ability to sign up and store personal information. The app uses an Amazon DynamoDB table to store user details and preferences. The app generates a credit score report by using the data that is stored in DynamoDB. The app sends credit score reports to users once every month.The company needs to provide users with an option to remove their data and preferences. The app must delete customer data within one month of receiving a request to delete the data. Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create an AWS Lambda function to delete user information. Create an Amazon EventBridge rule that runs when a specified TTL expires. Configure the EventBridge rule to invoke the Lambda function.
    • B. Create a DynamoDB stream. Create an AWS Lambda function to delete user information. When a specified TTL expires, write user information to the DynamoDB stream from the DynamoDB table.Configure the DynamDB stream to invoke the Lambda function to delete user information.
    • C. Enable TTL in DynamoDB. Set the expiration date as an attribute. Create an AWS Lambda function to set the TTL based on the expiration date value.Invoke the Lambda function when a user requests to delete personal data.
    • D. Enable TTL in DynamoDB. Create an AWS Lambda function to delete user information. Configure AWS Config to detect the DynamoDB stage change when TTL expires and to invoke the Lambda function.

    View question →

38. Q38. Q1338. A global company operates in multiple AWS Regions to meet data residency requirements. The company uses AWS Organizations to manage its accounts.The company wants to restrict IAM roles and access to specific Regions to prevent accidental data operations across geographic boundaries.Which solution will meet these requirements?

    • A. Configure a service control policy(SCP) to deny the ec2:RunInstances action in non-compliant Regions.
    • B. Configure IAM policies by using the aws:RequestedRegion condition.
    • C. Configure IAM role trust policies that use the aws:SourceIp condition.
    • D. Configure AWS Config to detect unwanted access across Regions.

    View question →

39. Q39. Q1339. A data science storage for nightly log processing. The size and number of logs is unknown and will persist for 24 hours only.What is the MOST cost-effective solution?

    • A. Amazon S3 Glacier Deep Archive
    • B. Amazon S3 Standard
    • C. Amazon S3 Intelligent-Tiering
    • D. Amazon S3 One Zone-Infrequent Access(S3 One Zone-IA)

    View question →

40. Q40. Q1340. An insurance company is creating an application to record personal user data.The data includes name,age, and health data about users.The company wants to run the application in a private subnet on AWS. Because of data security requirements, the company must have access must have access to the operating system of the compute resource that run the application tier. The company must use a low-latency NoSQL database to store the data.Which solution will meet these requirements?

    • A. Use Amazon EC2 instances for the application tier. Use an Amazon DynamoDB table for the database tier. Create a VPC endpoint for DynamoDB. Assign the instances an instance profile that has permission to access DynamoDB.
    • B. Use AWS Lambda functions for the application tier. Use an Amazon DynamoDB table for the database tier. Assign a Lambda function an appropriate IAM role to access the table.
    • C. Use AWS Fargate for the application tier. Create an Amazon Aurora PostgreSQL instance inside in a private subnet for the database tier.
    • D. Use Amazon EC2 instances for the application tier. Use an Amazon S3 bucket to store the data in JSON format. Configure the application to use Amazon Athena to read and write the data to and from the S3 bucket.

    View question →

41. Q41. Q1341. A company has stored a file in an Amazon S3 bucket. The file contains IP address allow lists and IP address deny lists. The company needs to be able to access the file by using an HTTP endpoint. The company's firewalls, which are not deployed on AWS, need to be able to read the file. The company wants to restrict access to the file to only the firewall IP addresses. The company has configured the Amazon S3 Block Public Access feature for this AWS account.Which solution meets these requirements?

    • A. Configure the S3 bucket as a static website. Create a bucket policy that restricts website access to only the firewall IP addresses. Add the static website's URL to the firewall settings.
    • B. Create a bucket policy that explicitly allows access from only the firewall IP addresses. Add the file's URL to the firewall settings.
    • C. Create an Amazon CloudFront distribution. Add the S3 bucket as the origin. Create an origin access control(OAC) that allows access from only the firewall IP solution meets these requirements?
    • D. Create an AWS Lambda function that has access to the file. Configure the Lambda function to confirm if the IP address in the request is from one of the firewalls and return the lists. Add the Lambda function URL to the firewall settings.

    View question →

42. Q42. Q1342. A company is developing an application that uses an Amazon Aurora MySQL database. The company plans to regularly make changes to the MySQL database schema to test new features. The tests must not affect the existing production database.When the company finishes testing, a developer needs to replicate the changes to production database.The solution must cause minimal downtime.Which solution will meet these requirements?

    • A. Create a new staging Aurora MySQL database cluster based on the existing database.Make the schema changes to the new staging database cluster to test the new features.
    • B. Create a read replica based on the existing Aurora MySQL database. Make the schema changes to the read replica. Promote the read replica to primary after successful testing.
    • C. Create a blue/green deployment of the Aurora MySQL database.Make schema changes in the staging environment to test new features. Direct traffic from the green environment to the blue environment when testing is complete.
    • D. Replicate the Aurora MySQL database to an Amazon DynamoDB table. Make the schema changes to the DynamoDB table to test the new features. Configure the application to use the DynamoDB table when testing is complete.

    View question →

43. Q43. Q1343. A company's solutions architect is building a static website to be deployed in Amazon S3 for a production environment. The website integrates with an Amazon Aurora PostgreSQL database by using an AWS Lambda function. The website that is deployed to production will use a Lambda alias that points to a specific version of the Lambda function.The company must rotate the database credentials every 2 weeks. Lambda functions that the company deployed previously must be able to use the most recent credentials.Which solution will meet these requirements?

    • A. Store the database credentials in AWS Secrets Manager. Turn on rotation. Write code in the Lambda function to retrieve the credentials from Secrets Manager.
    • B. Include the database credentials as part of the Lambda function code. Update the credentials periodically and deploy the new Lambda function.
    • C. Use Lambda environment variables. Update the environment variables when new credentials are available.
    • D. Store the database credentials in AWS Systems Manager Parameter Store. Turn on rotation. Write code in the Lambda function to retrieve the credentials from Systems Manager Parameter Store.

    View question →

44. Q44. Q1344. A company wants to use AWS Systems Manager to manage a fleet of Amazon EC2 instances. According to the company's security requirements, no EC2 instances can have internet access. A solutions architect needs to design network connectivity from the EC2 instances to Systems Manager while fulfilling this security obligation.Which solution will meet these requirements?

    • A. Deploy the EC2 instances into a private subnet with no route to the internet.
    • B. Configure an interface VPC endpoint for Systems Manager. Update routes to use the endpoint.
    • C. Deploy a NAT gateway into a public subnet. Configure private subnets with a default route to the NAT gateway.
    • D. Deploy an internet gateway. Configure a network ACL to deny traffic to all destinations except Systems Manager.

    View question →

45. Q45. Q1345. A retail company stores customer behavior and session activity in Amazon DynamoDB. The company wants to run SQL queries in Amazon Redshift to track customer trends with regular updates. The company needs to automatically replicate the data to Amazon Redshift without developing or managing extract, transform, and load(ETL) pipelines.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use AWS Glue to run ETL jobs on a schedule that extracts data from DynamoDB and loads the data into Amazon Redshift.
    • B. Use DynamoDB Streams with AWS Lambda functions to send updates to Amazon Redshift in near real time.
    • C. Use Amazon Redshift Spectrum to query data exported from DynamoDB to Amazon S3.
    • D. Create a zero-ETL integration between DynamoDB and Amazon Redshift.

    View question →

46. Q46. Q1346. A global ecommerce company is designing a three-tier application on AWS. The application includes a web tier that serves static content. An application tier handles business logic. A database tier stores product information and user data. The application interacts with a relational database. The company needs a highly available application architecture to serve global users with the low latency. Which solution will meet these requirements with the LEAST operational overhead?

    • A. Deploy Amazon EC2 instances in an Auto Scaling group for the application tier and web tier in a single AWS Region. Use an Application Load Balancer to distribute web traffic. Use an Amazon RDS database and Multi-AZ deployments for the database tier.
    • B. Set up an Amazon CloudFront distribution that uses an Amazon S3 bucket as the origin. Use Amazon ECS containers on AWS Fargate to deploy the application tier to each AWS Region where the company operates. Use an Amazon Aurora global database for the database tier.
    • C. Use an Amazon S3 bucket to store the static web content. Use Amazon EC2 Auto Scaling and EC2 Spot Instances for the application tier. Use Amazon RDS for MySQL with read replicas for the database tier. Use AWS DMS to replicate data to secondary AWS Regions.
    • D. Use an Amazon S3 bucket to store static web content. Use AWS Lambda functions to handle serverless backend logic in the application tier. Use Amazon API Gateway to invoke the Lambda functions for web requests. Use an Amazon DynamoDB database for the database tier. Deploy the DynamoDB data base across multiple AWS Regions.

    View question →

47. Q47. Q1347. A solutions architect has designed an application that gives users the ability to access images that are stored in an Amazon S3 bucket. The application uses an Amazon EC2 instance hosted in a private VPC that has a VPC ID of vpc-11aabb22. The solutions architect enabled the block public access feature on the S3 bucket. The bucket is hosted in the us-west-2 Region of account 123456789012. The solutions architect needs to ensure that only resources within the VPC that hosts the EC2 instance can accessthe S3 bucket.Which solution will meet this requirement?

    • A. Create an S3 bucket policy statement that has a Deny effect and a Condition that includes "StringNotEquals": {"aws:SourceVpc":"vpc-11aabb22"}.
    • B. Create an S3 bucket policy statement that has an Allow effect and a Resource of "arn:aws:ec2:us-west-2:123456789012:vpc/vpc-11aabb22".
    • C. Create an S3 bucket policy statement that has an Allow effect and a Condition that includes "StringNotEquals":{"aws:SourceVpc":"vpc-11aabb22"}.
    • D. Create an S3 bucket policy statement that has a Deny effect and a Condition that includes"StringNotEquals":{"aws:PrincipalAccount":"123456789012"}.

    View question →

48. Q48. Q1348. A company runs several applications on Amazon EC2 instances. The company stores configuration files in an Amazon S3 bucket.A solutions architect must provide the company's applications with access to the configuration files. The solutions architect must follow AWS best practices for security.Which solution will meet these requirements?

    • A. Use the AWS account root user access keys.
    • B. Use the AWS access key ID and the EC2 secret access key.
    • C. Use an IAM role to grant the necessary permissions to the applications.
    • D. Activate multi-factor authentication(MFA) and versioning on the S3 bucket.

    View question →

49. Q49. Q1349. An application is experiencing performance issues based on increased demand. This increased demand is on read-only historical records pulled from an Amazon RDS-hosted database with custom views and queries. A solutions architect must improve performance without changing the database structure.Which approach will improve performance and MINIMIZE management overhead?

    • A. Deploy Amazon DynamoDB, move all and point to
    • B. Deploy Amazon ElastiCache (Redis OSS) and cache the data for the application.
    • C. Deploy Memcached on Amazon EC2 and cache the data for the application.
    • D. Deploy Amazon DynamoDB Accelerator(DAX) on Amazon RDS to improve cache performance.

    View question →

50. Q50. Q1350. A company has a single AWS account. The company runs workloads on Amazon EC2 instances in multiple VPCs in one AWS Region. The company also runs workloads in an on-premises data center that connects to the company's AWS account by using AWS Direct Connect.The company needs all EC2 instances in the VPCs to resolve DNS queries for the internal.example.com domain to the authoritative DNS server that is located in the on-premises data center. The solution must use private communication between the VPCs and the on-premises network. All route tables, network ACLs, and security groups are configured correctly between AWS and the on-premises data center.Which combination of actions will meet these requirements?(Select THREE.)

    • A. Create an Amazon Route 53 inbound endpoint in all the workload VPCs.
    • B. Create an Amazon Route 53 outbound endpoint in one of the workload VPCs.
    • C. Create an Amazon Route 53 Resolver rule with the Forward type configured to forward queries for internal.example.com to the on-premises DNS server.
    • D. Create an Amazon Route 53 Resolver rule with the System type configured to forward queries for internal.example.com to the on-premises DNS server.
    • E. Associate the Amazon Route 53 Resolver rule with all the workload VPCs.
    • F. Associate the Amazon Route 53 Resolver rule with the workload VPC with the new Route 53 endpoint.

    View question →

51. Q51. Q1351. A company must give a small group of auditors read-only access to an only access to an Amazon S3 bucket that stores sensitive audit logs. The auditors will review the logs once each month. The company has provisioned an IAM user for each auditor.The company must use the following specifications:The bucket remains private to the account.Credentials are temporary and rotate automatically.Access expires at the end of the monthly review period.All activity is traceable to individual users in AWS CloudTrail.Which solution will meet these requirements?

    • A. Generate pre-signed URLs for the required objects that expire at end of the review period. Send the objects to the auditors before each review day.
    • B. Create an IAM role with read-only S3 bucket access. Include a condition that allows auditors assume this access during the monthly review period.
    • C. Add each auditor's IAM user to the bucket ACL with Read permissions. Remove each auditor's IAM user from the bucket ACL after the review period.
    • D. Enable S3 static website hosting. Restrict access to each auditor' s corporate IP address range by using a bucket policy with a condition that allows access only during the review period.

    View question →

52. Q52. Q1352. A company processes streaming data by using Amazon Kinesis Data Streams and an AWS Lambda function. The streaming data comes from devices that are connected to the internet.The company is experiencing scaling problems and needs to implement shard-level control and custom checkpointing.Which solution will meet these requirements with the LEAST latency?

    • A. Connect Kinesis Data Streams to Amazon Data Firehose to ingest incoming data to an Amazon S3 bucket. Configure S3 Event Notifications to invoke the Lambda function.
    • B. pany process the provisioned concurrency settings for the Lambda function. Stream the data from Kinesis Data Streams to an Amazon SQS standard queue. Invoke the Lambda function to process the messages.
    • C. Run the Lambda function code in an Amazon ECS container that runs on AWS Fargate. Change the code to use the Kinesis Client Library(KCL).
    • D. Increase the memory and provisioned concurrency settings for the Lambda function. Stream the data from Kinesis Data Streams to an Amazon SQS FIFO queue. Configure the Lambda function to be invoked by the SQS queue.

    View question →

53. Q53. Q1353. A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with(DDoS) attacks.Which AWS service will meet these requirements?

    • A. AWS WAF
    • B. AWS Shield Standard
    • C. Amazon Macie
    • D. AWS Shield Advanced

    View question →

54. Q54. Q1354. A media publishing company is building an application on AWS to give users the ability to print their own books. The application frontend runs on a Docker container.The amount of incoming orders varies significantly. The incoming orders can temporarily exceed the throughput of the company's book printing machines. Order-processing payloads are up to 4 MB in size.The company needs to develop a solution that can scale to handle incoming orders.Which solution will meet this requirement?

    • A. Use Amazon SQS to queue incoming orders. Create an AWS Lambda@Edge function to process orders. Deploy the frontend application on Amazon EKS.
    • B. Use Amazon SQS to queue incoming orders. Create an AWS Lambda function to process orders.Deploy the frontend application on AWS Fargate.
    • C. Use Amazon SQS to queue incoming orders. Create an AWS Lambda function to process orders.Deploy the frontend application on Amazon ECS with the AWS Fargate launch type.
    • D. Use Amazon SNS to queue incoming orders. Create an AWS Lambda@Edge function to process orders. Deploy the frontend application on Amazon EC2 instances.

    View question →

55. Q55. Q1355. A company needs to migrate its customer transactions database from on premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server.According to a new security requirement,the company must rotate the database password each year.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Convert the database to Amazon DynamoDB by using AWS SCT. Store the password in AWS Systems Manager Parameter Store. Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.
    • B. Migrate the database to Amazon RDS for Oracle. Store the password in AWS Secrets Manager. Turn on automatic rotation.Configure a yearly rotation schedule.
    • C. Migrate the database to an Amazon EC2 instance. Use AWS Systems Manager Parameter Store to keep and rotate the connection string by using an AWS Lambda function on a yearly schedule.
    • D. Migrate the database to Amazon Neptune by using AWS SCT. Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.

    View question →

56. Q56. Q1356. A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost- effective for storage costs for each gigabyte.Which Amazon S3 storage class will meet these requirements?

    • A. S3 Standard
    • B. S3 Glacier Flexible Retrieval
    • C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
    • D. S3 Standard-Infrequent Access (S3 Standard-IA)

    View question →

57. Q57. Q1357. A company has an ecommerce application that users access users access through multiple mobile apps and web applications. The company needs a solution that will receive requests from the mobile apps and web applications through an API.Request traffic volume varies significantly throughout each day. Traffic spikes during sales events. The solution must be loosely coupled and ensure that no requests are lost.Which solution will meet these requirements?

    • A. Create an Application Load Balancer(ALB). Create an AWS Elastic Beanstalk endpoint to process the requests. Add the Elastic Beanstalk endpoint to the target group of the ALB.
    • B. Set up an Amazon API Gateway REST API with an integration to an Amazon SQS queue. Configure a dead-letter queue. Create an AWS Lambda function to poll the queue to process the requests.
    • C. Create an Application Load Balancer(ALB). Create an AWS Lambda function to process the requests.Add the Lambda function as a target of the ALB.
    • D. Set up an Amazon API Gateway HTTP API with an integration to an Amazon SNS topic. Create an AWS Lambda function to process the requests. Subscribe the function to the SNS topic to process the requests.

    View question →

58. Q58. Q1358. A financial company is migrating its banking applications to a set of AWS accounts managed by AWS Organizations. The applications will store sensitive customer data on Amazon EBS volumes. The company will take regular snapshots for backup purposes.The company wants to implement controls across all AWS accounts to prevent sharing EBS snapshots publicly.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Enable AWS Config rules for each organizational unit(OU) in Organizations to monitor EBS snapshot permissions.
    • B. Enable block public access for EBS snapshots at the organization level.
    • C. Create an IAM policy in the root account of the organization that prevents users from modifying snapshot permissions.
    • D. Use AWS CloudTrail to track snapshot permission changes.

    View question →

59. Q59. Q1359. A company runs Amazon EC2 instances as web servers. Peak traffic load occurs on the web server at two times each day. The web servers are idle for the remainder of the day. A solutions architect needs to manage the web servers and maintain fault tolerance. Which solution will meet these requirements in the MOST cost-effective way?

    • A. Use an EC2 Auto Scaling group to scale the instances based on demand.
    • B. Purchase Reserved Instances to ensure peak capacity at all times.
    • C. Use a cron job to stop the EC2 instances when the traffic demand is low.
    • D. Use a script to vertically scale the EC2 instances during peak traffic demand.

    View question →

60. Q60. Q1360. company deployed a three-tier web application in a single Availability Zone in the us-east-1 Region on a single Amazon EC2 instance. Usage of the application is growing. A solutions architect needs to ensure that the application can handle the growing amount of traffic. The solutions architect also needs to ensure the application is resilient. Which solution will meet these requirements MOST cost-effectively?

    • A. Create two additional EC2 instance spread across two separate Availability Zones. Create an Application Load Balancer(ALB). Configure the ALB to route traffic to a target group that contains all three instances. Create an Amazon CloudWatch alarm to scale the EC2 instances vertically to handle the application traffic.
    • B. Create eight additional EC2 instances spread across in three separate Availability Zones. Create an Application Load Balancer(ALB). Configure the ALB to route traffic to a target group that contains all nine instances. Create an Amazon CloudWatch alarm to scale the EC2 instances horizontally to handle the application traffic.
    • C. Create an EC2 Auto Scaling group that contains a minimum of three EC2 instances in the same Availability Zone, Create an Application Load Balancer(ALB), Configure the ALB to route traffic to a target group that contains all the instances. Configure scheduled scaling for the Auto Scaling group.
    • D. Create an EC2 Auto Scaling group that contains a minimum of three EC2 instances spread across Availability Zones. Create an Application Load Balancer(ALB). Configure the ALB to route traffic to a target ALB to route traffic to a target group that contains all the instances. Create an Amazon CloudWatch alarm to scale the EC2 instances vertically to handle the application traffic.

    View question →

61. Q61. Q1361. A company is building a data processing application that uses AWS Lambda functions. The application's Lambda functions need to communicate with an Amazon RDS DB instance that is deployed within a VPC in the same AWS account.Which solution meets solution meets these requirements in the MOST secure way?

    • A. Configure the DB instance to allow public access. Update the DB instance security group to allow access from the Lambda public address space for the AWS Region.
    • B. Deploy the Lambda functions inside the VPC. Attach a network ACL to the Lambda subnet. Provide outbound rule access to the VPC CIDR range only. Update the DB instance security group to allow traffic from 0.0.0.0/0.
    • C. Deploy the Lambda functions inside the VPC. Attach a security group to the Lambda functions. Provide outbound rule access to the VPC CIDR range only. Update the DB instance security group to allow traffic from the Lambda security group.
    • D. Peer the Lambda default VPC with the VPC that hosts the DB instance to allow direct network access without the need for security groups.

    View question →

62. Q62. Q1362. A home security company is expanding its business globally. The company needs to encrypt customer data. The company does not want to manage its own keys. The company needs the keys to be usable in multiple AWS Regions and needs to control access to the keys.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use AWS KMS to create multi-Region keys. Apply tags to identify each key. Use attribute-based access control(ABAC) condition keys to control access to the keys.
    • B. Use AWS KMS to create multiple keys by importing key material. Apply tags to identify each key. Use attribute-based access control(ABAC) condition keys to control access to the keys. access to the keys.
    • C. Use AWS CloudHSM to create a CloudHSM cluster in the company's primary Region. Synchronize the CloudHSM cluster to additional Regions by using the CloudHSM Management Utility(CMU).
    • D. Use AWS CloudHSM to create users. Use the CloudHSM Management Utility(CMU) to share keys with the users. Use the shareKey command to share or unshare the key with additional users in each Region.

    View question →

63. Q63. Q1363. A company is building a solution to provide customers with an API that accesses financial data. The API backend needs to compute tax data for each request. The company anticipates greater demand to access the data during the last 3 months of each year. A solutions architect needs to design a scalable solution that can meet the regular demand and the peak demand at the end of each year.Which solution will meet these requirements?

    • A. Host the API on an Amazon EC2 instance that runs third-party software. Configure the EC2 instance to perform tax computations.
    • B. Deploy an Amazon API Gateway REST API. Create an AWS Lambda function to perform tax computations. Integrate the Lambda function with the REST API.
    • C. Create an Application Load Balancer(ALB) in front of two Amazon EC2 instances. Configure the EC2 instances to perform tax computations.
    • D. Deploy an Amazon API Gateway REST API. Configure an Amazon EC2 instance to perform tax computations. Integrate the EC2 instance with the REST API.

    View question →

64. Q64. Q1364. A company hosts dozens of multi-tier applications on AWS. The presentation layer and logic layer are comprised of Amazon EC2 Linux instances that use Amazon EBS volumes.The company needs a solution to ensure that operating system vulnerabilities are not introduced to the EC2 instances when the company deploys new features. The company uses custom AMIs to deploy the EC2 instances in an Auto Scaling group.The solution must scale to the handle all applications that the company hosts.Which solution will meet these requirements?

    • A. Use Amazon Inspector to patch operating system vulnerabilities. Invoke Amazon Inspector when a new AMI is deployed.
    • B. Use AWS Backup to back up the EBS volume of each updated instance. Use the EBS backup volumes to create new AMIs. Use the existing Auto Scaling group to deploy the new AMIs.
    • C. Use AWS Systems Manager Patch Manager to patch operating system vulnerabilities in the custom AMIs.
    • D. Use EC2 Image Builder to create new AMIs when the company deploys new features. Include the update-linux component in the build components of the new AMIs. Use the existing Auto Scaling group to deploy the new AMIs.

    View question →

65. Q65. Q1365. A company needs to provide secure remote access for administrators to manage Amazon EC2 instances that are located in private subnets. The company needs a solution that uses the following specifications:All shell commands and session activity are centrally logged for auditing purposes. Administrators authenticate by using multi-factor authentication(MFA). Instances do not have public IP addresses and do not allow inbound access from the internet. Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use AWS Systems Manager Session Manager and enable session logging to Amazon CloudWatch Logs. Require IAM policies that enforce MFA. Ensure that the EC2 instances have AWS Systems Manager Agent(SSM Agent) installed.
    • B. Configure an EC2 Instance Connect Endpoint. Enforce IAM based MFA. Use AWS CloudTrail to capture session activity.
    • C. Install and configure OpenSSH with local shell history logging on each EC2 instance. Use a NAT gateway for outbound access and enforce MFA at the SSH level.
    • D. Deploy a bastion host in a public subnet with MFA enabled SSH access. Install the CloudWatch Agent on the bastion host. Configure the CloudWatch Agent to stream SSH session logs.Answer:

    View question →

66. Q66. Q1366. A solutions architect has an application container, an AWS Lambda function, and an Amazon SQS queue. The Lambda function uses the SQS queue as an event source. The Lambda function makes a call to a third-party machine learning(ML) API when the function is invoked. The response from the third-party API can take up to 60 seconds to return.The Lambda function's timeout value is currently 65 seconds. The solutions architect has noticed that the Lambda function sometimes processes duplicate messages from the SQS queue. What should the solutions architect do to ensure that the Lambda function does not process duplicate messages?

    • A. Configure the Lambda function with a larger amount of memory.
    • B. Configure an increase in the Lambda function's timeout value.
    • C. Configure the SQS queue's delivery delay value to be greater than the maximum time it takes to call the third-party API.
    • D. Configure the SQS queue's visibility timeout value to be greater than the maximum time it takes to call the third-party API.

    View question →

67. Q67. Q1367. A company is upgrading its critical web-based application. The application is hosted on Amazon EC2 instances that are part of an Auto Scaling group behind an Application Load Balancer(ALB). The company wants to test the new configurations with a specific amount of traffic before the company begins to route all traffic to the upgraded application.How should a solutions architect design the architecture to meet these requirements?

    • A. Create a new launch template. Associate the new launch template with the Auto Scaling group. Attach the Auto Scaling group to the ALB. Distribute traffic by using redirect rules.
    • B. Create a new launch template. Create an additional Auto Scaling group. Associate the new launch template with the additional Auto Scaling group. Attach the additional Auto Scaling group to the ALB.Distribute traffic by using weighted target groups.
    • C. Create a new launch template. Create an additional Auto Scaling group. Associate the new launch template with the additional Auto Scaling group. Create an additional ALB. Attach the additional Auto Scaling group to the additional ALB. Use an Amazon Route 53 failover routing policy to route traffic.
    • D. Create a new launch template. Create an additional Auto Scaling group. Associate the new launch template with the additional Auto Scaling group. Create an additional ALB. Attach the additional Auto Scaling group to the additional ALB. Use an Amazon Route 53 weighted routing policy to route traffic.

    View question →

68. Q68. Q1368. A company is building a data analysis platform on AWS by using AWS Lake Formation. The platform will ingest data from different sources such as Amazon S3 and Amazon RDS. The company needs a secure solution to prevent access to portions of the data that contain sensitive information.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create an IAM role that includes permissions to access Lake Formation tables.
    • B. Create data filters to implement row-level security and cell-level security.
    • C. Create an AWS Lambda function that removes sensitive information before Lake Formation ingests the data.
    • D. Create an AWS Lambda function that periodically queries and removes sensitive information from Lake Formation tables.

    View question →

69. Q69. Q1369. An events company has deployed a web application on Amazon EKS. The application uses an Amazon DynamoDB table. The company has provisioned 1,000 read capacity units(RCUs) and 500 write capacity units(WCUs) for the DynamoDB table. The application performs eventually consistent reads against the table.The application's traffic is often low, but it occasionally grows significantly. During these sudden increases in traffic, DynamoDB returns throttling errors. The result is that error pages are displayed to end users. What should a solutions architect do to reduce these errors?

    • A. Change the DynamoDB table to use on-demand capacity mode.
    • B. Create a DynamoDB read replica to scale the read traffic horizontally.
    • C. Purchase DynamoDB reserved capacity of 1,000 RCUs and 500 WCUs.
    • D. Configure the application to use strongly consistent reads for DynamoDB queries.

    View question →

70. Q70. Q1370. A solutions architect is designing an architecture that includes web, application, and database tiers. The web tier must be capable of auto scaling. The solutions architect has decided to separate each tier into its own subnets. The design includes two public subnets and four private subnets.The security team requires that tiers be able to communicate with each other only when there is a business need and that all other network traffic be blocked.What should the solutions architect do to meet these requirements?

    • A. Create an Amazon Create an Amazon GuardDuty source/destination rule set to control communication.
    • B. Create one security group for all tiers to limit traffic to only the required source and destinations.
    • C. Create specific security groups for each tier to limit traffic to only the required source and destinations.
    • D. Create network ACLs in all six subnets to limit traffic to the sources and destinations required for the application to function.

    View question →

71. Q71. Q1371. A company hosts an application on AWS. The application has generated approximately 2.5 TB of data over the previous 12 years. The company currently stores the data on Amazon EBSThe company wants a cost-effective backup solution for long-term storage. The company must be able to retrieve the data within minutes when required for audits.Which solution will meet these requirements?

    • A. Create EBS snapshots to back up the data.
    • B. Create an Amazon S3 bucket. Use the S3 Glacier Deep Archive storage class to back up the data.
    • C. Create an Amazon S3 bucket. Use the S3 Glacier Flexible Retrieval storage class to back up the data.
    • D. Create an Amazon EFS file system to back up the data.

    View question →

72. Q72. Q1372. A company wants to use AWS Direct Connect to connect the company's on-premises networks to the AWS Cloud. The company runs several VPCs in a single AWS Region. The company plans to expand its VPC fleet to include hundreds of VPCs.A solutions architect needs to simplify and scale the company's network infrastructure to accommodate future VPCs.Which service or resource will meet these requirements?

    • A. VPC endpoints
    • B. AWS Transit Gateway
    • C. Amazon Route 53
    • D. AWS Secrets Manager

    View question →

73. Q73. Q1373. An ecommerce company runs a multi-tier application on AWS. The frontend and backend tiers both run on Amazon EC2 instances. The database tier runs on an Amazon RDS for MySQL DB instance. The backend tier communicates with the RDS DB instance.The application makes frequent calls to return identical datasets from the database. The frequent calls on the database cause performance slowdowns. Asolutions architect must improve the performance of the application backend.Which solution will meet this requirement?

    • A. Configure an Amazon SNS topic between the EC2 instances and the RDS DB instance.
    • B. Configure an Amazon ElastiCache(Redis OSS) cache. Configure the backend EC2 instances to read from the cache.
    • C. Configure an Amazon DynamoDB Accelerator(DAX) cluster. Configure the backend EC2 instances to read from the cluster.
    • D. Configure Amazon Data Firehose to stream the calls to the database.

    View question →

74. Q74. Q1374. A company operates a data lake in Amazon S3 that stores large datasets in multiple formats. The company has an application that retrieves and processes subsets of data from multiple objects in the data lake based on filtering criteria. For each data query, the application currently downloads the entire S3 object and performs transformations. The current process requires a large amount of transformation time.The company wants a solution that will give the application the ability to query and filter directly on S3 objects without downloading the objects.Which solution will meet these requirements?

    • A. Use Amazon Athena to query and filter the objects in Amazon S3.
    • B. Use Amazon EMR to process and filter the objects.
    • C. Use Amazon API Gateway to create an API to retrieve filtered results from Amazon S3.
    • D. Use Amazon ElastiCache(Valkey) to cache the objects.

    View question →

75. Q75. Q1375. A company generates SSL certificates from a third-party provider. The company imports the certificates into AWS Certificate Manager(ACM) to use with public web applications.A solutions architect must implement a solution to notify the company's security team 30 days before an imported certificate expires. The company already has an Amazon SQS queue. The company also has an Amazon SNS topic that has the security team's email address as a subscriber.Which solution will provide the security team with the required notification about certificates?

    • A. Create an AWS Lambda function to scan for expiring certificates. Program the Lambda function to list the certificates in a JSON message and to deliver the message to the SQS queue.
    • B. Create an AWS Lambda function to scan for expiring certificates. Program the Lambda function to list the certificates in a JSON message and to deliver the message to the SNS topic.
    • C. Create an Amazon EventBridge rule that specifies the ACM Certificate Approaching Expiration event type. Set the SQS queue as the rule's target.
    • D. Create an Amazon EventBridge rule that specifies the ACM Certificate Approaching Expiration event type. Set the SNS topic as the rule's target.

    View question →

76. Q76. Q1376. A company has an application that runs on Amazon EC2 instances in an Auto Scaling group. The application uses hardcoded credentials to access an Amazon RDS database.To comply with new regulations, the company needs to automatically rotate the database password for the application service account every 90 days.Which solution will meet these requirements?

    • A. Create an AWS Lambda function to generate new randomized passwords. Configure an Amazon EventBridge rule to invoke the Lambda function every 90 days. Configure the Lambda function to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.
    • B. Create a secret for the database credentials in AWS Secrets Manager. Schedule an AWS Lambda function in Secrets Manager to rotate the secret every 90 days. Modify the application to read the database credentials from Secrets Manager.
    • C. Create a new Amazon ECS task to generate new randomized passwords. Configure the task to launch every 90 days. Configure the task to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.
    • D. Create a new EC2 instance that runs a cron job every 90 days. Use the cron job to generate new randomized passwords. Configure the new EC2 instance to upload a JSON file that contains the new password to the existing EC2 instances by using SSH.

    View question →

77. Q77. Q1377. A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the Aurora database by using user names and passwords that the company stores locally in a file.The company changes the user names and passwords every month. The company wants to minimize the operational overhead of credential management.Which solution will meet these requirements?

    • A. Store the credentials as a secret within AWS Secrets Manager. Assign IAM permissions to the secret.Reconfigure the application to call the secret. Enable rotation on the secret and configure rotation to occur on a monthly schedule.
    • B. The company changes the user names and passwords every month. The company wants to minimize the operational overhead of credential management. To the parameter. Reconfigure the application to access the parameter.
    • C. Create an Amazon S3 bucket to store objects. Use an AWS KMS key to encrypt the objects. Migrate the credentials file to the S3 bucket. Update the application to retrieve the credentials file from the S3 bucket.
    • D. Create an encrypted Amazon EBS volume for each EC2 instance. Attach the encrypted EBS volumes to the EC2 instances. Migrate the credentials file to the new EBS volumes. Point the application to the encrypted EBS volumes.

    View question →

78. Q78. Q1378. A company has deployed a non-production Amazon EC2 instance by using an Amazon Linux Amazon Machine Image (AMI) in a private subnet. The company wants to allow a group of developers to connect to the EC2 instance remotely by using SSH without exposing the EC2 instance to the internet. The developers must be able to connect to the EC2 instance through the AWS Management Console.Which solution will meet these requirements?

    • A. Create a VPC endpoint for AWS Systems Manager in the same subnet as the EC2 instance. Allow inbound access from the endpoint security group to the EC2 instance security group on port 22. Create an IAM role for the EC2 instance and attach the AmazonSSMManagedInstanceCore policy.
    • B. Create an EC2 Instance Connect Endpoint in the same subnet as the EC2 instance. Attach a security group to the endpoint that allows inbound connections on port 443. Assign the AmazonEC2InstanceConnect IAM managed policy to the group of developers.
    • C. Create an EC2 Instance Connect Endpoint in the same subnet as the EC2 instance. Attach a security group to the endpoint that allows inbound connections on port 22. Assign the AmazonEC2InstanceConnect IAM managed policy to the group of developers.
    • D. Create a VPC endpoint for AWS Systems Manager in the same subnet as the EC2 instance. Allow inbound access from the endpoint security group to the EC2 instance security group on port 22. Create an IAM role for the EC2 instance and attach the AmazonSSMReadOnlyAccess policy.

    View question →

79. Q79. Q1379. A company website runs on Amazon EC2 instances behind an Application Load Balancer(ALB). The instances run in an Auto Scaling group across multiple Availability Zones. There is an Amazon CloudFront distribution in front of the ALB. Users are reporting performance problems. A solutions architect discovers that the website is receiving a high rate of unwanted requests to the CloudFront distribution originating from a series of source IP addresses.How should the solutions architect address this problem?

    • A. Using AWS Shield, configure a deny rule with an IP match condition containing the source IPs of the unwanted requests.
    • B. Using Auto Scaling, configure the maximum instance value to an increased count that will absorb the unwanted requests.
    • C. Using an Amazon VPC network ACL, configure an inbound deny rule for each source IP CIDR address of the unwanted requests.
    • D. Using AWS WAF, configure a web ACL rate-based rule on the CloudFront distribution with a rate limit below that of the unwanted requesters.

    View question →

80. Q80. Q1380. A company is using an Active Directory based Identity service that supports SAML 2.0. The company wants to use the existing authentication solution to access the AWS Management Console. A solutions architect needs to configure federated authentication.Which solution will meet these requirements?

    • A. Use AWS Verified Access to create a new trust provider. Connect the existing Active Directory IdP service to the Verifed Access endpoint.
    • B. Use Amazon Cognito to create an identity pool. Add the existing Active Directory IdP to the user pool.Upload the SAML metadata
    • C. Use AWS Amplify to configure a custom authentication backend by using Amplify Auth. Set up an Amazon EC2 instance that runs a Node.js application that links AWS IAM Identity Center with the on- premises Active Directory through LDAP.
    • D. Configure AWS IAM Identity Center to use an external IdP. Provide the SAML metadata from the identity provider.

    View question →

81. Q81. Q1381. A company is planning to deploy a business-critical application in the AWS Cloud. The application requires durable storagewith consistent, low-latency performance.Which type of storage should a solutions architect recommend to meet these requirements?

    • A. Instance store volume
    • B. Amazon ElastiCache(Memcached) cluster
    • C. Provisioned IOPS SSD Amazon EBS volume
    • D. Throughput Optimized HDD Amazon EBS volume

    View question →

82. Q82. Q1382. A financial company processes transactions from multiple payment providers by using its AWS infrastructure. The company needs to implement a system that sends high-value transactions to a fraud detection service. The system must route failed transactions to a retry queue. The system must also copy international transactions to a compliance monitoring system and archive all transactions for audit purposes.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Configure Amazon EventBridge input transformers to modify the event structure before applying basic filtering on event types.
    • B. Create separate Amazon EventBridge event buses for each payment provider. Use context-based routing with event patterns that match the provided conditions.
    • C. Use Amazon EventBridge Pipes to filter the events and route the events to different target systems.
    • D. Create an Amazon EventBridge event bus with multiple rules. Configure each rule to use event pattern matching for the provided conditions.

    View question →

83. Q83. Q1383. A company creates a VPC that has one public subnet and one private subnet. The company attaches an internet gateway to the VPC. An Application Load Balancer (ALB) in the public subnet communicates with Amazon EC2 instances in the private subnet.The EC2 instances in the private subnet must be able to download operating system(OS) and application updates from the internet. The instances must not be accessible from the internet.Which combination of steps will meet these requirements?(Select THREE.)

    • A. Associate an Elastic IP address with the NAT gateway.
    • B. Add a route of 0.0.0.0/0 to the private subnet route table. Set the NAT gateway as a target.
    • C. Deploy a NAT gateway in the public subnet.
    • D. Deploy a NAT gateway in the private subnet.
    • E. Add a route of 0.0.0.0/0 to the public subnet route table. Set the NAT gateway as a target.
    • F. Associate an Elastic IP address with the internet gateway.

    View question →

84. Q84. Q1384. A company has an Amazon RDS for MySQL database that runs in the AWS Cloud. The company needs to implement a disaster recovery (DR) plan. The company wants to regularly back up the database. The DR plan must also retain copies in the company's on-premises DR data center that can be restored in the on- premises DRenvironment if needed.Which solution meets these requirements with the LEAST operational overhead?

    • A. Create individual RDS DB snapshots and export the snapshots to Amazon S3. Sync the snapshots to the on-premises DR data center by using the aws s3 sync command.
    • B. Configure AWS Backup to run and manage RDS backups. Copy the backups to a vault in the on- premises DR data center.
    • C. Use the mysqldump utility to export the database, store the dump in Amazon S3, and sync the dump to the on-premises DR data center every day.
    • D. Create individual RDS DB snapshots and export the snapshots to Amazon S3. Use AWS DataSync to transfer the snapshots to the on-premises DR data center.

    View question →

85. Q85. Q1385. A company has multiple applications that run on Amazon EC2 instances in a single VPC. The applications need to encrypt and decrypt a specific data item in the records exchanged between the applications.Which solution will meet this requirement?

    • A. Encrypt the Amazon EBS storage that is associated with each application EC2 instance.
    • B. Use an AWS KMS AWS owned symmetric key.
    • C. Use an AWS KMS customer-managed symmetric key.
    • D. Use a virtual private gateway to encrypt traffic between the applications.

    View question →

86. Q86. Q1386. A company manages millions of documents in hundreds of Amazon S3 buckets in multiple AWS Regions. The company must determine whether any of the S3 buckets contain personally identifiable information (PII).Which solution will meet this requirement with the LEAST operational overhead?

    • A. Use Amazon Detective to detect PII in the S3 buckets.
    • B. Use AWS Trusted Advisor to generate PII notifications.
    • C. Use Amazon Macie to detect PII in the S3 buckets.
    • D. Use AWS Lambda functions to review each file in the S3 buckets to identify PII.

    View question →

87. Q87. Q1387. A company is deploying an application that processes streaming data in near-real time. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to provide the lowest possible latency between nodes.Which networking solution meets these requirements?

    • A. Place the EC2 instances in multiple VPCs, and configure VPC peering.
    • B. Attach an Elastic Fabric Adapter(EFA) to each EC2 instance.
    • C. Run the EC2 instances in a spread placement group.
    • D. Use Amazon EBS optimized instance types.

    View question →

88. Q88. Q1388. A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needsto ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates. Which solution will meet these requirements with the MOST operational efficiency?

    • A. Use a CloudFront security policy to create a certificate.
    • B. Use a CloudFront origin access control(OAC) to create a certificate.
    • C. Use AWS Certificate Manager(ACM) to create a certificate. Use DNS validation for the domain.
    • D. Use AWS Certificate Manager(ACM) to create a certificate. Use email validation for the domain.

    View question →

89. Q89. Q1389. A solutions architect has AWS Lambda functions that need to access a company's internal data science libraries and reference data. Separate teams manage the libraries and the data. The teams must be able to update and upload new data independently. The Lambda functions are connected to the company's central VPC.Which solution will provide the Lambda functions with access to the libraries and data?

    • A. Attach an Amazon EBS volume to the Lambda functions by using EBS Multi-Attach in the central VPC.Update the Lambda function execution roles to give the functions access to the EBS volume. Update the Lambda function code to reference the files in the EBS volume.
    • B. Compress the libraries and reference data in a Lambda/tmp folder. Update the Lambda function code to reference the files in the/tmp folder.
    • C. Set up an Amazon EFS file system with mount targets in the central VPC. Configure the Lambda functions to mount the EFS file system. Update the Lambda function execution roles to give the functions access to the EFS file system.
    • D. Set up an Amazon FSx for Windows File Server file system with mount targets in the central VPC.Configure the Lambda functions to mount the Amazon FSx file system. Update the Lambda function execution roles to give the functions access to the Amazon FSx file system.

    View question →