AWS SAA-C03 Chapter 2 Practice Questions (65 Questions)

Practice questions for the AWS SAA-C03 (Solutions Architect Associate) exam, Chapter 2.

1. Q1. Q66. A gaming company is designing a highly available architecture. The application runs on a modified Linux kernel and support only UDP-based traffic. The company needs the front-end tier to provide the best possible user experience. The tier must have low latency, route traffic to the nearest edge location, and possible static IP addresses for entry into the application endpoints. What should a solution architect do to meet these requirements?

   • A. Configure Amazon Route 53 to forward requests to an Application Load Balancer.Use AWS Lambda for the application in AWS Application Auto Scaling.
   • B. Configure Amazon CloudFront to forward requests to a network Load Balancer.Use AWS Lambda for the application in a AWS Application Auto Scaling group
   • C. Configure AWS Global Accelerator to forward requests to a Network Load Balancer.Use Amazon EC2 instances for the application in an EC2 Auto Sca ing group.
   • D. Configure Amazon API Gateway to forward requests to an Application Load Balancer.Use Amazon EC2 instances for the application in an EC2 Auto Scaling group.

   View question →

2. Q2. Q67. A company has an application mat provides marketing services to stores. The services are based on previous purchases by store customers. The stores upload transaction data to the company through SFTP, and the data is processed and analyzed to generate new marketing offers.Some of the files can exceed 200 GB in size.Recently, the company discovered that some of the stores have uploaded tiles that contain personally identifiable information (PII) mat should not have been included. The company wants administrators to be alerted if PII is shared again. The company also wants to automate remediation. What should a solutions architect do to meet these requirements with the LEAS F development effort?

   • A. Use an Amazon S3 bucket as a secure transfer point.Use Amazon inspector to scan the objects in the bucket If objects contain PII, trigger an S3 Lifecycle policy to remove the objects that contain PII.
   • B. Use an Amazon S3 bucket as a secure transfer point.Use Amazon Macie to scan the objects in the bucketIf objects contain PII, use Amazon Simple Notification Service (Amazon SNS) to trigger a notification to the administrators to remove the objects that contain PII.
   • C. Implement custom scanning algorithms in an AWS Lambda function.Trigger the function when objects are loaded into the bucket.If objects contain PII, use Amazon Simple Notification Service (Amazon SNS) to trigger a notification to the administrators to remove the objects that contain PII.
   • D. Implement custom scanning algorithms in an AWS Lambda function.Trigger the function when objects are loaded into the bucket.If objects contain PII, use Amazon Simple Email Service (Amazon SES) to Trigger a notification to the administrators and trigger an S3 Lifecycle policy to remove the objects that contain PII.

   View question →

3. Q3. Q68. An entertainment company is using Amazon DynamoDB to store media metadata. The application is read intensive and experiencing delays. The company does not have staff to handle additional operational overhead and needs to improve the performance efficiency of DynamoDB without reconfiguring the application. What should a solutions architect recommend to meet this requirement?

   • A. Use Amazon ElastiCache for Redis
   • B. Use Amazon DynamoDB Accelerate (DAX)
   • C. Replicate data by using DynamoDB global tables
   • D. Use Amazon ElastiCache for Memcached with Auto Discovery enabled

   View question →

4. Q4. Q69. A company runs a photo processing application that needs to frequently upload and download pictures from Amazon S3 buckets that are located in the same AWS Region. A solutions architect has noticed an increased cost in data transfer fees and needs to implement a solution to reduce these costs.How can the solutions architect meet this requirement?

   • A. Deploy Amazon API Gateway into a public subnet and adjust the oute table to route S3 calls through It.
   • B. Deploy a NAT gateway into a public subnet and attach an end point policy that allows access to the S3 buckets.
   • C. Deploy the application Into a public subnet and allow it to route through an internet gateway to access the S3 Buckets
   • D. Deploy an S3 VPC gateway endpoint into the VPC and attach an endpoint policy that allows access to the S3 buckets.

   View question →

5. Q5. Q70. A company needs guaranteed Amazon EC2 capacity in three specific Availability Zones in a specific AWS Region for an upcoming event that will last 1 week. What should the company do to guarantee the EC2 capacity?If you have any questions, please contact wechat :ANYPASS. If you don't want to memorize the questions, please register for the through train.

   • A. Purchase Reserved Instances that specify the Region needed.
   • B. Create an On-Demand Capacity Reservation that specifies the Region needed.
   • C. Purchase Reserved Instances that specify the Region and three Availability Zones needed.
   • D. Create an On-Demand Capacity Reservation that specifies the Region and three Availability Zones needed.

   View question →

6. Q6. Q71. A company sells ringtones created from clips of popular songs. The files containing the ringtones are stored in Amazon S3 Standard and are at least 123 KB m size. The company has millions of files but downloads are infrequent for ringtones older than 90 days. The company needs to save money on storage while keeping the most accessed files readily available for its users. Which action should the company take to meet hese requirements MOST cost-effectively?

   • A. Configure S3 Standard-infrequent Access (S3 Standard-IA) storage for the initial storage tier of the objects
   • B. Move the files to S3 Intelligent-Tiering and configure it to move objects to a less expensive storage tier after 90 days
   • C. Configure S3 inventory to manage objects and move them to S3 Standard-infrequent Access (S3 Standard-IA) after 90 days
   • D. Implement an S3 Lifecycle policy that moves the objects from S3 Standard to S3 Standard- Infrequent Access (S3 Standard-IA) after 90 days

   View question →

7. Q7. Q72. A company is designing a cloud communications platform trial is driven by APIs. The application is hosted on Amazon EC2 instances behind a Network Load Balancer (NLB). The company uses Amazon API Gateway to provide external users with access to the application through APIs. The company wants to protect the platform against web exploits like SQL Injection and also wants to detect and mitigate large, sophisticated DDoS attacks. Which combination of solutions provides the MOST protection? (Select TWO.)

   • A. Use AWS WAF to protect the NLB
   • B. Use AWS Shield Advanced with the NLB
   • C. Use AWS WAF to protect Amazon API Gateway
   • D. Use Amazon GuardDuty with AWS Shield Standard
   • E. Use AWS Shield Standard with Amazon API Gateway

   View question →

8. Q8. Q73. A company has an AWS account used for software engineering. The AWS account has access to the company's on-premises data center through a pair of AWS Direct Connect connections All non-VPC traffic routes to the virtual private gateway. A development team recently created an AWS Lambada function through the console. The development team needs to allow the function to access a database that runs in a private subnet in the company's data center.Which solution will meet these requirements?

   • A. Configure the Lambda function to run in the VPC with the appropriate security group.
   • B. Set up a VPN connection from AWS to the data center.Route the traffic from the Lambda function through the VPN
   • C. Update the route tables in the VPC to allow the Lambda function to access the on-premises data center through direct connect.
   • D. Create an Elastic IP address.Configure the Lambda function to send traffic through the Elastic IP address without an elastic network interface.

   View question →

9. Q9. Q74. A development team runs monthly resource-intensive tests on its general purpose Amazon RDS (or MySQL DB instance with Performance insights enabled. The testing lasts for 48 hours once a month and is the only process that uses the database. The team wants to reduce the cost of running the tests without reducing the compute and memory attributes of the DB instance. Which solution meets these requirements MOST cost-effectively?

   • A. Stop the DB instance when tests are completed Restart the DB instance when required
   • B. Use an Auto Scaling policy with me DB instance to automatically scale when tests are completed
   • C. Create a snapshot when tests are completed Terminate the DB instance and restore the snapshot when required
   • D. Modify the DB instance to a low-capacity instance when tests are completed Modify the DB instance again when required

   View question →

10. Q10. Q75. A company hosts its web applications in the AWS Cloud. The company configures Elastic Load Balancers to use certificates that are imported into AWS Certificate Manager (ACM). The company's security team must be notified 30 days before the expiration of each certificate. What should a solutions architect recommend to meet this requirement?

    • A. Add a rule in ACM to publish a custom message to an Amazon Simple Notification Service (Amazon SNS) topic every day beginning 30 days before any certificate will expire
    • B. Create an AWS Config rule that checks for certificates that will expire within 30 days. Configure Amazon EventBridge (Amazon CloudWatch Events) to invoke a custom alert by way of Amazon Simple Notification Service (Amazon SNS) when AWS Config reports a noncompliant resource.
    • C. Use AWS Trusted Advisor to check for certificates that will expire within 30 days. Create an Amazon CloudWatch alarm that is based on Trusted Advisor metrics for check status changes. Configure the alarm to send a custom alert by way of Amazon Simple Notification Service (Amazon SNS).
    • D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to detect any certificates that will expire within 30 days Configure the rule to invoke an AWS Lambda function. Configure the Lambda function to send a custom alert by way of Amazon Simple Notification Service (Amazon SNS).

    View question →

11. Q11. Q76. A medical records company is hosting an application on Amazon EC2 instances. The application processes customer data files that are stored on Amazon S3. The EC2 instances are hosted in public subnets. The EC2 instances access Amazon S3 over the internet, but they do not require any other network access. A new requirement mandates that the network traffic for file transfers take a private route and not be sent over the internet Which change to the network architecture should a solutions architect recommend to meet this requirement?

    • A. Create a NAT gateway. Configure the route table for the public subnets to send traffic to Amazon S3 through the NAT gateway.
    • B. Configure the security group for the EC2 instances to restrict outbound traffic so that only traffic to the S3 prefix list is permitted.
    • C. Move the EC2instances to private subnets. Create a VPC endpoint for Amazon S3, and link the endpoint to the route table for the private subnets
    • D. Remove the internet gateway from the VPC. Set up an AWS Direct Connect connection, and route traffic to Amazon S3 over the Direct Connect connection.

    View question →

12. Q12. Q77. A social media company allows users to upload images to its website. The website runs on Amazon EC2instances. During upload requests, the website resizes the images to a standard size and stores the resized images in Amazon S3 Users are experiencing slow upload requests to the website. The company needs to reduce coupling within the application and improve website performance. A solutions architect must design the most operationally efficient process for image uploads. Which combination of actions should the solutions architect take to meet these requirements? (Select TWO.)

    • A. Configure the application to upload images to S3 Glacier
    • B. Configure the web server to upload the original images to Amazon S3
    • C. Configure the application to upload images directly from each users browser to Amazon S3 through the use of a presigned URL.
    • D. Configure S3 Event Notifications to invoke an AWS Lambda function when an image is uploaded. Use the function to resize the image.
    • E. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function on a schedule to resize uploaded images.

    View question →

13. Q13. Q78. A company wants to run its critical applications in containers to meet requirements for scalability and availability. The company prefers to focus on maintenance of the critical applications. The company does not want to be responsible for provisioning and managing the underlying infrastructure that runs the containerized workload.What should a solutions architect do to meet these requirements?

    • A. Use Amazon EC2 instances and install Docker on the instances.
    • B. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 worker nodes.
    • C. Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.
    • D. Use Amazon EC2 instances from an Amazon Elastic Container Service (Amazon ECS)-optimized Amazon Machine Image(AMI).

    View question →

14. Q14. Q79. A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses.Downtime is not acceptable for the website.Which actions should the solutions architect take to protect the website from such an attack? (Select TWO)

    • A. Use AWS Shield Advanced to stop the DDoS attack.
    • B. Configure Amazon GuardDuty to automatically block the attackers.
    • C. Configure the website to use Amazon CloudFront for both static and dynamic content.
    • D. Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
    • E. Use EC2Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization.

    View question →

15. Q15. Q80. A company recently signed a contract with an AWS Managed Service Provider (MSP) Partner for help with an application migration initiative. A solutions architect needs to share an Amazon Machine Image (AMI) from an existing AWS account with the MSP Partner's AWS account The AMI is backed by Amazon Elastic Block Store (Amazon EBS)and uses a customer managed customer master key (CMK) to encrypt EBS volume snapshots.What is the MOST secure way for the solutions architect to share the AMI with the MSP Partner's AWS account?If you have any questions, please contact wechat :ANYPASS. If you don't want to memorize the questions, please register for the through train.

    • A. Make the encrypted AMI and snapshots publicly available Modify the CMKs key policy to allow the MSP Partner's AWS account to use the key
    • B. Modify the launch Permission property of the AMI Share the AMI with the MSP Partner's AWS account only. Modify the CMKs key policy to allow the MSP Partner's AWS account to use the key
    • C. Modify the launch Permission property of the AMI. Share the AMI with the MSP Partner's AWS account only. Modify the CMKs key policy to trust a new CMK that is owned by the MSP Partner for encryption.
    • D. Export the AMI from the source account to an Amazon S3 bucket in the MSP Partner's AWS account.Encrypt the S3 bucket with a CMK that is owned by the MSP Partner. Copy and launch the AMI in the MSP Partner's AWS account.

    View question →

16. Q16. Q81. A company runs an on-premises application that is powered by a MySQL database. The company is migrating the application to AWS to increase the application's elasticity and availability The current architecture shows heavy read activity on the database during times of normal operation. Every 4 hours, the company's development team pulls a full export of the production database to populate a database in the staging environment. During this period, users experience unacceptable application latency. The development team is unable to use the staging environment until the procedure completes. A solutions architect must recommend replacement architecture that alleviates the application latency issue. The replacement architecture also must give the development team the ability to continue using the staging environment without delay.Which solution meets these requirements?

    • A. Use Amazon Aurora MySQL with Multi-AZ Aurora Replicas for production Populate the staging database by implementing a backup and restore process that uses the mysqldump utility.
    • B. Use Amazon Aurora MySQL with Multi-AZ Aurora Replicas for production Use database cloning to create the staging database on-demand.
    • C. Use Amazon RDS for MySQL with a Multi-AZ deployment and read replicas for production. Use the standby instance for the staging database.
    • D. Use Amazon RDS for MySQL with a Multi-AZ deployment and read replicas for production Populate the staging database by implementing a backup and restore process that uses the mysqldump utility.

    View question →

17. Q17. Q82. A company is implementing a shared storage solution for a media application that is hosted in the AWS Cloud. The company needs the ability to use SMB clients to access data. The solution must be fully managed Which AWS solution meets these requirements?

    • A. Create an AWS Storage Gateway volume gateway. Create a file share that uses the required client protocol Connect the application server to the file share.
    • B. Create an AWS Storage Gateway tape gateway. Configure tapes to use Amazon S3. Connect the application server to the tape gateway.
    • C. Create an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
    • D. Create an Amazon FSx for Windows File Server file system. Attach the file system to the origin server.Connect the application server to the file system.

    View question →

18. Q18. Q83. A company is concermned about the security of its public web application due to recent web attacks. The application uses an Application Load Balancer (ALB). A solutions architect must reduce the risk of DDoS attacks against the application.What should the solutions architect do to meet this requirement?

    • A. Add an Amazon Inspector agent to the ALB.
    • B. Configure Amazon Macie to prevent attacks.
    • C. Enable AWS Shield Advanced to prevent attacks.
    • D. Configure Amazon GuardDuty to monitor the ALB.

    View question →

19. Q19. Q84. A company needs the ability to analyze the log files of its proprietary application. The logs are stored in JSON format in an Amazon S3 bucket Queries will be simple and will run on-demand. A solutions architect needs to perform the analysis with minimal changes to the existing architecture. What should the solutions architect do to meet these requirements with the LEAST amount of operational overhead?

    • A. Use Amazon Redshift to load all the content into one place and run the SQL queries as needed
    • B. Use Amazon CloudWatch Logs to store the logs. Run SQL queries as needed from the Amazon CloudWatch console.
    • C. Use Amazon Athena directly with Amazon S3 to run the queries as needed
    • D. Use AWS Glue to catalog the logs. Use a transient Apache Spark cluster on Amazon EMR to run the SQL queries as needed.

    View question →

20. Q20. Q85. A solutions architect is designing an infrastructure to run a web application on Amazon EC2 instances. The company wants to ensure high availability and adjust the number of running instances based on demand to optimize costs.What should the solutions architect do to meet these requirements?

    • A. Configure an Application Load Balancer in front of an Auto Scaling group to deploy instances to multiple AWS Regions.
    • B. Configure an Amazon CloudFront distribution in front of an Auto Scaling group to deploy instances to multiple AWS Regions.
    • C. Configure an Application Load Balancer in front of an Auto Scaling group to deploy instances to multiple Availability Zones.
    • D. Configure an Amazon API Gateway API in front of an Auto Scaling group to deploy instances to multiple Availability Zones.

    View question →

21. Q21. Q86. A global company currently gathers 100 GB of information daily from deployed sensors on smart devices with an average record size of 10 KB. A solutions architect must design a solution that allows real-time access to the data.What should the solutions architect do to meet these requirements?

    • A. Configure each sensor to upload data directly to an Amazon EC2 instance in each AWS Region.
    • B. Configure the sensors to use Amazon Kinesis Data Streams for batching and data collection.
    • C. Provision an Amazon Snowball appliance and install the Snowball client to optimize the transfer speed.
    • D. Deploy the website on Amazon CloudFront and configure each device to upload data to the closest edge location.

    View question →

22. Q22. Q87. A company needs to meet a strict service level agreement (SLA) with its users for application availability. The primary application stack is hosted in the us-east-1 Region and a replica of the stack is in us-west-2 for disaster recovery. The company requires that no user traffic be served by the application stack in us-west-2 unless there is an issue with the application stack in us-east-1. What should a solutions architect do to meet the company's needs without manual intervention?

    • A. Configure a weighted routing policy in Amazon Route 53. Set the weight of us-east-1 to 100 and us- west-2 to 0.
    • B. Configure a weighted routing policy in Amazon Route 53. Set the weight of us-west-2 to 5O and us-east- 1to 50.
    • C. Configure a failover routing policy in Amazon Route 53. Set us-east-1as the primary and us-west-2 as the secondary.
    • D. Configure a failover routing policy in Amazon Route 53. Set us-west-2 as the primary and us-east-1 as the secondary.

    View question →

23. Q23. Q88. A company has an application running on a single server in one Availability Zone.A solutions architect needs to improve the availability of this application as it grows in importance.Which set of actions would accomplish this?

    • A. Deploy a second application instance in the same Availability Zone. Add the instances to Amazon Route 53in a round-robin configuration.
    • B. Deploy a second application instance in a public subnet in the same Availability Zone. Attach an Elastic IP address to both instances for high availability.
    • C. Redeploy the application instance in an Amazon EC2 Auto Scaling group with a minimum of 1 and a maximum of 1. Use AWS CloudFormation to automate the deployment.
    • D. Deploy an Elastic Load Balancer and a second application instance in a second Availability Zone. Attach both instances to the Elastic Load Balancer and route all traffic through the load balancer.

    View question →

24. Q24. Q89. A company's HTTP application is behind a Network Load Balancer (NLB). The NLB's target group is configured to use an Amazon EC2 Auto Scaling group with multiple EC2 instances that run the web service. The company notices that the NLB is not detecting HTTP errors for the application. These errors require a manual restart of the EC2 instances that run the web service. The company needs to improve the application's availability without writing custom scripts or code. What should a solutions architect do to meet these requirements?

    • A. Enable HTTP health checks on the NLB supplying the URL of the company's application
    • B. Add a cron job to the EC2 instances to check the local application's logs once each minute. If HTTP errors are detected, the application will restart
    • C. Replace the NLB with an Application Load Balancer. Enable HTTP health checks by supplying the URL of the company's application. Configure an Auto Scaling action to replace unhealthy instances
    • D. Create an Amazon CloudWatch alarm that monitors the UnhealthyHostCount metric for the NLB.Configure an Auto Scaling action to replace unhealthy instances when the alarm is in the ALARM state

    View question →

25. Q25. Q90. A company is implementing a shared storage solution for a gaming application that is hosted in anon- premises data center. The company needs the ability to use Lustre clients to access data The solution must be fully managed.Which solution meets these requirements?If you have any questions, please contact wechat :ANYPASS. If you don't want to memorize the questions, please register for the through train.

    • A. Create an AWS Storage Gateway file gateway. Create a file share that uses the required client protocol.Connect theapplication server to the file share.
    • B. Create an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
    • C. Create an Amazon Elastic File System (Amazon EFS) file system, and configure it to support Lustre.Attach the file system to the origin server. Connect the application server to the file system
    • D. Create an Amazon FSx for Lustre file system. Attach the file system to the origin server Connect the application server to the file system.

    View question →

26. Q26. Q91. A company hosts more than 300 global websites and applications. The company requires a platform to analyze more than3o TB of clickstream data each day.What should a solutions architect do to transmit and process the clickstream data?

    • A. Design an AWS Data Pipeline to archive the data to an Amazon S3 bucket and run an Amazon EMR cluster with the data to generate analytics.
    • B. Create an Auto Scaling group of Amazon EC2instances to process the data and send it to an Amazon s3 data lake for Amazon Redshift to use for analysis.
    • C. Cache the data to Amazon CloudFront. Store the data in an Amazon S3 bucket. When an object is added to the s3 bucket run an AWS Lambda function to process the data for analysis
    • D. Collect the data from Amazon Kinesis Data Streams Use Amazon Kinesis Data Firehose to transmit the data to an Amazon S3 data lake. Load the data in Amazon Redshift for analysis

    View question →

27. Q27. Q92. A company has a production web application in which users upload documents through a web interface or a mobile app According to a new regulatory requirement, new documents cannot be modified or deleted after they are stored.What should a solutions architect do to meet this requirement?

    • A. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning and S3 Object Lock enabled
    • B. Store the uploaded documents in an Amazon S3 bucket Configure an s3 Lifecycle policy to archive the documents periodically.
    • C. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning enabled. Configure an ACL to restrict all access to read-only.
    • D. Store the uploaded documents on an Amazon Elastic File System Amazon EFS volume Access the data by mounting the volume in read-only mode.

    View question →

28. Q28. Q93. An application development team is designing a microservice that will convert large images to smaller, compressed images. When a user uploads an image through the web interface, the microservice should store the image in an Amazon S3 bucket, process and compress the image with an AWS Lambda function, and store the image in its compressed form in a different S3 bucket. A solutions architect needs to design a solution that uses durable, stateless components to process the images automatically. Which combination of actions will meet these requirements? (Select TWO)

    • A. Create an Amazon Simple Queue Service (Amazon SQS) queue Configure the s3 bucket to send a notification to theSQS queue when an image is uploaded to the S3 bucket
    • B. Configure the Lambda function to use the Amazon Simple Queue Service (Amazon SQS) queue as the invocationsource. When the SQS message is successfully processed, delete the message in the queue
    • C. Configure the Lambda function to monitor the S3bucketfor new uploads When an uploaded image is detected, write the file name to a text file in memory and use the text file to keep track of the images that were processed.
    • D. Launch an Amazon EC2instance to monitor an Amazon Simple Queue Service (Amazon SQS)queue.When items are added to the queue, log the file name in a text file on the EC2instance and invoke the Lambda function
    • E. Configure an Amazon Event Bridge (Amazon CloudWatch Events) event to monitor the s3 bucket.When an image is uploaded, send an alert to an Amazon Simple Notification Service (Amazon SNS) topic with the application owners email address for further processing.

    View question →

29. Q29. Q94. A company uses AWS Organizations to manage multiple AWS accounts for different departments. The management account has an Amazon S3 bucket that contains project reports. The company wants to limit access to this S3 bucket to only users of accounts within the organization in AWS Organizations. Which solution meets these requirements with the LEAST amount of operational overhead?

    • A. Add the aws:PrincipalOrglD global condition key with a reference to the organization ID to the s3 bucket policy
    • B. Create an organizational unit (Ou) for each department Add the aws:PrincipalOrgPaths global condition key to the S3 bucket policy.
    • C. Use AWS CloudTrail to monitor the Create Account, InviteAccountToorganization, LeaveOrganization, andRemoveAccountFromOrganization events. Update the S3 bucket policy accordingly
    • D. Tag each user that needs access to the S3 bucket. Add the awsPrincipalTag global condition key to the S3 bucket policy.

    View question →

30. Q30. Q95. A company hosts an application on AWS Lambda functions that are invoked by an Amazon API Gateway API. The Lambda functions save customer data to an Amazon Aurora MySQL database Whenever the company upgrades the database, the Lambda functions fail to establish database connections until the upgrade is complete. The result is that customer data is not recorded for some of the event. A solutions architect needs to design a solution that stores customer data that is created during database upgrades Which solution will meet these requirements?

    • A. Provision an Amazon RDS proxy to sit between the Lambda functions and the database. Configure the Lambda functions to connect to the RDS proxy.
    • B. Increase the run time of the Lambda functions to the maximum. Create are try mechanism in the code that stores the customer data in the database.
    • C. Persist the customer data to Lambda local storage. Configure new Lambda functions to scan the local storage to save the customer data to the database.
    • D. Store the customer data in an Amazon Simple Queue Service (Amazon SQS) FIFO queue Create anew Lambda function that polls the queue and stores the customer data in the database.

    View question →

31. Q31. Q96. A company collects data for temperature, humidity, and atmospheric pressure in cities across multiple continents. The average volume of data that the company collects from each site daily is 5o0 GB Each site has a high-speed internet connection.The company wants to aggregate the data from all these global sites as quickly as possible in a single Amazon S3 bucket. The solution must minimize operational complexity.Which solution meets these requirements?

    • A. Turn on S3 Transfer Acceleration on the destination S3 bucket Use multipart uploads to directly upload site data to the destination S3 bucket
    • B. Upload the data from each site to an S3 bucket in the closest Region. Use S3 Cross-Region Replication to copy objects to the destination S3 bucket. Then remove the data from the origin S3 bucket
    • C. Schedule AWS Snowball Edge Storage Optimized device jobs daily to transfer data from each site to the closest Region.Use S3 Cross-Region Replication to copy objects to the destination S3 bucket.
    • D. Upload the data from each site to an Amazon EC2 instance in the closest Region. Store the data in an Amazon Elastic Block Store (Amazon EBS) volume. At regular intervals, take an EBS snapshot and copy it to the Region that contains the destination S3 bucket. Restore the EBS volume in that Region.

    View question →

32. Q32. Q97. A company has a Windows-based application that must be migrated to AWS. The application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances that are deployed across multiple Availability Zones.What should a solutions architect do to meet this requirement?

    • A. Configure AWS Storage Gateway in volume gateway mode. Mount the volume to each Windows instance
    • B. Configure Amazon FSx for Windows File Server Mount the Amazon FSx file system to each Windows instance.
    • C. Configure a file system by using Amazon Elastic File System (Amazon EFS) Mount the EFS file system to each Windows instance.
    • D. Configure an Amazon Elastic Block Store (Amazon EBS) volume with the required size. Attach each EC2 instance to the volume. Mount the file system within the volume to each Windows instance

    View question →

33. Q33. Q98. A solutions architect is creating a new Amazon CloudFront distribution for an application. Some of the information submitted by users is sensitive. The application uses HTTPS but needs another layer of security. The sensitive information should be protected throughout the entire application stack, and access to the information should be restricted to certain applications.Which action should the solutions architect take?

    • A. Configure a CloudFront signed URL
    • B. Configure a CloudFront signed cookie.
    • C. Configure a CloudFront field-level encryption profile.
    • D. Configure CloudFront and set the Origin Protocol Policy setting to HTTPS Only for the viewer Protocol Policy

    View question →

34. Q34. Q99. A company has thousands of edge devices that collectively generate 1 TB of status alerts each day Each alert is approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis.The company wants a highly available solution. However, the company needs to minimize costs and does not want to manage additional infrastructure. Additionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older than 14 days. What is the MOST operationally efficient solution that meets these requirements?

    • A. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket Set up an s3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days
    • B. Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts. Create a script on the EC2instances that will store the alerts in an Amazon S3 bucket. Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days
    • C. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon Elasticsearch Service (Amazon ES) cluster.Set up the Amazon ES cluster to take manual snapshots every day and delete data from the cluster that is older than 14 days.
    • D. Create an Amazon Simple Queue Service (Amazon SQS) standard queue to ingest the alerts, and set the message retention period to 14 days. Configure consumers to poll the SQS queue, check the age of the message, and analyze the message data as needed If the message is 14 days old, the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue

    View question →

35. Q35. Q100. A company is running an online transaction processing (OITP) workload on AWS. This workload uses an unencrypted Amazon RDS DB instance in a Multi-AZ deployment. Daily database snapshots are taken from this instance.What should a solutions architect do to ensure the database and snapshots are always encrypted moving forward?

    • A. Encrypt a copy of the latest DB snapshot. Replace existing DB instance by restoring the encrypted snapshot
    • B. Create a new encrypted Amazon Elastic Block Store Amazon EBS) volume and copy the snapshots to it Enable encryption on the DB instance
    • C. Copy the snapshots and enable encryption using AWS Key Management Service (AWS KMS). Restore encrypted snapshot to an existing DB instance
    • D. Copy the snapshots to an Amazon S3 bucket that is encrypted using server-side encryption with AWS Key Management Service (AWS KMS) managed keys (SSE-KMS)

    View question →

36. Q36. Q101. A company runs multiple applications in containers on Amazon Elastic Container Service (Amazon ECS instances. The applications run in an ECS cluster. Users access the applications through an Application Load Balancer (ALB).The users report that the applications are slow every morning from 9-00 until 9:30 After that time period, no issues occur. What should a solutions architect recommend to resolve this issue?

    • A. Configure an Auto Scaling group with a step scaling policy. Attach the ECS instances to the Auto Scaling group
    • B. Configure an Auto Scaling group with a scheduled scaling policy. Attach the ECS instances to the Auto Scaling group
    • C. Create a second ECS cluster with two ECS instances Deploy some of the applications to the second ECS cluster
    • D. Add a second ALB in front of ECS instances. Configure the second ALB to route traffic to some of the applications on the ECS instances.

    View question →

37. Q37. Q102. A company runs a containerized application on a Kubernetes cluster in an on-premises data center. The company is using a MongoDB database for data storage. The company wants to migrate some of these environments to AWS, but no code changes or deployment method changes are possible at this time. The company needs a solution that minimizes operational overhead.Which solution meets these requirements?

    • A. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes for compute and MongoDB on EC2 for data storage.
    • B. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute and Amazon DynamoDB for data storage.
    • C. Use Amazon Elastic Kubemnetes Service (Amazon EKS) with Amazon EC2 worker nodes for compute and Amazon DynamoDB for data storage
    • D. Use Amazon Elastic Kubemnetes Service (Amazon EKS) with AWS Fargate for compute and Amazon DocumentDB (with MongoDB compatibility) for data storage

    View question →

38. Q38. Q103. A survey company has gathered data for several years from areas in the United States. The company hosts the data in an Amazon S3 bucket that is 3 TB in size and growing. The company has started to share the data with a European marketing firm that has S3 buckets. The company wants to ensure that its data transfer costs remain as lo was possible.Which solution will meet these requirements?

    • A. Configure the Requester Pays feature on the company's S3 bucket.
    • B. Configure S3 Cross-Region Replication from the company's S3 bucket to one of the marketing firm's S3 buckets.
    • C. Configure cross-account access for the marketing firm so that the marketing firm has access to the company's S3 bucket.
    • D. Configure the company's S3 bucket to use S3Intelligent-Tiering. Sync the S3 bucket to one of the marketing firm's S3 buckets.

    View question →

39. Q39. Q104. A company runs its infrastructure on AWS and has a registered base of 700000 users for its document management application. The company intends to create a product that converts large .pdf files to .jpg image files. The .pdf files average 5 MB in size. The company needs to store the original files and the converted files. A solutions architect must design a scalable solution to accommodate demand that will grow rapidly over time.Which solution meets these requirements MOST cost-effectively?

    • A. Save the .pdf files to Amazon S3. Configure an S3 PUT event to invoke an AWS Lambda function to convert the files to .jpg format and store them back in Amazon S3.
    • B. Save the .pdf files to Amazon DynamoDB. Uso the DynamoDB Strcams feature to invokc an AWS Lambda function to convert the files to jpg format and store them back in DynamoDB.
    • C. Upload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2instances, Amazon Elastic Block Store (Amazon EBS) storage, and an Auto Scaling group. Use a program in the EC2 instances to convert the files to .jpg format. Save the .pdf files and the .jpg files in the EBS store.
    • D. Upload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances, Amazon Elastic File System (Amazon EFS) storage, and an Auto Scaling group. Use a program in the EC2 instances to convert the file to jpg format. Save the pdf files and the jpg files in the EBS store

    View question →

40. Q40. Q105. A company runs a stateless web application in production on a group of Amazon EC2 On-Demand Instances behind an Application Load Balancer. The application experiences heavy usage during an 8-hour period each business day. Application usage is moderate and steady overnight. Application usage is low during weekends.The company wants to minimize its EC2 costs without affecting the availability of the application.Which solution will meet these requirements?

    • A. Use Spot Instances for the entire workload.
    • B. Use Reserved Instances for the baseline level of usage. Use Spot Instances for any additional capacity that the application needs.
    • C. Use On-Demand Instances for the baseline level of usage. Use Spot Instances for any additional capacity that the application needs.
    • D. Use Dedicated Instances for the baseline level of usage. Use On-Demand Instances for any additional capacity that the application needs.

    View question →

41. Q41. Q106. A company that has a global user base is launching a new service. The service is highly anticipated because of along marketing campaign. The company has built the service on Amazon EC2 instances that run behind an Application Load Balancer (ALB).The company uses an Amazon RDS for MySQL DB instance and Amazon S3 to store data.Previously, the company experienced a large-scale cyberattack that originated from a specific country where the company has no user base. Before the launch of the service, the company wants to block all traffic that originates from that specific country.Which solution will meet this requirement?

    • A. Create an EC2 security group to deny any traffic that comes from the specific country's CIDR ranges.Attach the security group to the ALB
    • B. Create an RDS security group to deny any traffic that comes from the specific country's CIDR ranges Attach the security group to the DB instance
    • C. Create a Deny statement on the S3 bucket policy. Use a condition that specifies which country code to deny access to
    • D. Create an AWS WAF web ACL that has a rule to block the traffic based on a geographical match condition. Associate the web ACL with the ALB

    View question →

42. Q42. Q107. A company runs an application on a large fleet of Amazon EC2 instances. The application reads and write entries into an Amazon DynamoDB table. The size of the DynamoDB table continuously grows, but the application needs only data from the last 30 days. The company needs a solution that minimizes cost and development effort.Which solution meets these requirements?

    • A. Use an AWS CloudFormation template to deploy the complete solution. Redeploy the CloudFormation stack every 30 days, and delete the original stack.
    • B. Use an EC2 instance that runs a monitoring application from AWS Marketplace. Configure the monitoring application to use Amazon DynamoDB Streams to store the timestamp when a new item is created in the table. Use a script that runs on the EC2 instance to delete items that have a timestamp that is older than 30 days
    • C. Configure Amazon DynamoDB Streams to invoke an AWS Lambda function when a new item is created in the table.Configure the Lambda function to delete items in the table that are older than 30 days
    • D. Extend the application to add an attribute that has a value of the current timestamp plus 30 days to each new item that is created in the table. Configure DynamoDB to use the attribute as the TTL attribute.

    View question →

43. Q43. Q108. A solutions architect needs to help a company optimize the cost of running an application on AWS. The application will use Amazon EC2 instances. AWS Fargate and AWS Lambda for compute within the architecture.The EC2instances will run the data ingestion layer of the application. EC2 usage will be sporadic and unpredictable. Workloads that run on EC2 instances can be interrupted at any time. The application front end will run on Fargate, and Lambda will serve the API layer. The front-end utilization and API layer utilization will be predictable over the course of the next year. Which combination of purchasing options will provide the MOST cost-effective solution for hosting this application?(Select TWO)

    • A. Use Spot Instances for the data ingestion layer
    • B. Use On-Demand Instances for the data ingestion layer
    • C. Purchase a 1-year Compute Savings Plan for the front end and API layer
    • D. Purchase 1-year Al Upfront Reserved Instances for the data ingestion layer
    • E. Purchase a 1-year EC2Instance Savings Plan for the front end and API layer

    View question →

44. Q44. Q109. A company has a legacy data processing application that runs on Amazon EC2instances Data is processed sequentially, but the order of results does not matter. The application uses a monolithic architecture. The only way that the company can scale the application to meet increased demand is to increase the size of the instancesThe company's developers have decided to rewrite the application to use a microservices architecture on Amazon Elastic Container Service (Amazon ECS).What should a solutions architect recommend for communication between the microservices?

    • A. Create an Amazon Simple Queue Service (Amazon SQS)queue. Add code to the data producers, and send data to the queue. Add code to the data consumers to process data from the queue
    • B. Create an Amazon Simple Notification Service (Amazon SNS) topic. Add code to the data producers, and publish notifications to the topic. Add code to the data consumers to subscribe to the topic
    • C. Create an AWS Lambda function to pass messages. Add code to the data producers to call the Lambda function with a data object. Add code to the data consumers to receive a data object that is passed from the Lambda function
    • D. Create an Amazon DynamoDB table. Enable DynamoDB Streams. Add code to the data producers to insert data into the table. Add code to the data consumers to use the DynamoDB Streams API to detect new table entries and retrieve the data

    View question →

45. Q45. Q110. A company has applications that run on Amazon EC2instances in a VPC. One of the applications needs to call the Amazon S3 API to store and read objects. According to the company's security regulations, no traffic from the applications is allowed to travel across the internet.Which solution will meet these requirements?

    • A. Configure an S3 gateway endpoint
    • B. Create an S3 bucket in a private subnet
    • C. Create an S3 bucket in the same AWS Region as the EC2 instances
    • D. Configure a NAT gateway in the same subnet as the EC2 instances

    View question →

46. Q46. Q111. A company has a dataingestion workflow thatincludes the following components:-- An Amazon Simple Notification Service (Amazon SNS) topic that receives notifications about new data deliveries.-- An AWS Lambda function that processes and stores the data. The ingestion workflow occasionally fails because of network connectivity issues. When failure occurs, the corresponding data is not ingested unless the company manually reruns the job What should a solutions architect do to ensure that all notifications are eventually processed?

    • A. Configure the Lambda function for deployment across multiple Availability Zones
    • B. Modify the Lambda function's configuration to increase the CPU and memory allocations for the function
    • C. Configure the SNS topic's retry strategy to increase both the number of retries and the wait time between retries
    • D. Configure an Amazon Simple Queue Service (Amazon SQS) queue as the on-failure destination. Modify the Lambda function to process messages in the queue

    View question →

47. Q47. Q112. A company wants to migrate an on-premises data center to AWS. The data center hosts an SFTP server that stores its data on an NFS-based file system. The server holds 200 GB of data that needs to be transferred. The server must be hosted on an Amazon EC2 instance that uses an Amazon Elastic File System(Amazon EFS) file system.Which combination of steps should a solutions architect take to automate this task? (Select TWO.)

    • A. Launch the EC2 instance into the same Availability Zone as the EFS file system.
    • B. Install an AWS DataSync agent in the on-premises data center
    • C. Create a secondary Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instance for the data.
    • D. Manually use an operating system copy command to push the data to the EC2 instance
    • E. Use AWS DataSync to create a suitable location configuration for the on-premises SFTP server.

    View question →

48. Q48. Q113. A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi- AZ DB instance. The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently.Which solution meets these requirements?

    • A. Store the database user credentials in AWS Secrets Manager. Grant the necessary IAM permissions to allow the web servers to access AWS Secrets Manager
    • B. Store the database user credentials in AWS Systems Manager OpsCenter. Grant the necessary IAM permissions to allow the web servers to access OpsCenter
    • C. Store the database user credentials in a secure Amazon S3 bucket Grant the necessary IAM permissions to allow the web servers to retrieve credentials and access the database
    • D. Store the database user credentials in files encrypted with AWS Key Management Service (AWS KMS) on the web server file system. The web server should be able to decrypt the files and access the database

    View question →

49. Q49. Q114. A company is hosing a static website on Amazon S3 and is using Amazon Route 53 for DNS. The website is experiencing increased demand from around the world. The company must decrease latency for users who access the website.Which solution meets these requirements MOST cost-effectively?

    • A. Replicate the S3 bucket that contains the website to all AWS Regions.Add Route 53 geolocaton routing entries
    • B. Provision accelerators in AWS Global Accelerator. Associate the supplied IP addresses with the S3bucket. Edit the Route 53entries to point to the IP addresses of the accelerators
    • C. Add an Amazon CloudFront distribution in front of the S3 bucket. Edit the Route 53 entries to point to the CloudFront distribution
    • D. Enable S3 Transfer Acceleration on the bucket Edit the Route 53 entries to point to the new endpoint

    View question →

50. Q50. Q115. A company is developing a file-sharing application that will use an Amazon S3 bucket for storage. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL. What should a solutions architect do to meet these requirements?

    • A. Write individual policies for each S3 bucket to grant read permission for only CloudFront access
    • B. Create an IAM user Grant the user read permission to objects in the S3 bucket Assign the user to CloudFront
    • C. Write an S3 bucket policy that assigns the CloudFront distribution ID as the Principal and assigns the target S3 bucket as the Amazon Resource Name (ARN)
    • D. Create an origin access identity (OAI) Assign the OAI to the CloudFront distribution. Configure the S3 bucket permissions so that only the OAI has read permission.

    View question →

51. Q51. Q116. A company wants to run applications in containers in the AWS Cloud. These applications are stateless and can tolerate disruptions within the underlying infrastructure. The company needs a solution that minimizes cost and operational overhead.What should a solutions architect do to meet these requirements?

    • A. Use Spot Instances in an Amazon EC2 Auto Scaling group to run the application containers
    • B. Use Spot Instances in an Amazon Elastic Kubernetes Service (Amazon EKS) managed node group
    • C. Use On-Demand Instances in an Amazon EC2Auto Scaling group to run the application containers
    • D. Use On-Demand Instances in an Amazon Elastic Kubernetes Service (Amazon EKS) managed node group

    View question →

52. Q52. Q117. A company wants to reduce the cost of its existing three-tier web architecture. The web, application, and database servers are running on Amazon EC2 instances for the development, test, and production environments. The EC2 instances average 30% CPU utilization during peak hours and 10% CPU utilization during non-peak hours.The production EC2instances run 24 hours a day. The development and test EC2 instances run for at least 8 hours each day. The company plans to implement automation to stop the development and test EC2 instances when they are not in use.Which EC2 instance purchasing solution will meet the company's requirements MOST cost-effectively?

    • A. Use Spot Instances for the production EC2 instances. Use Reserved Instances for the development and test EC2 instances.
    • B. Use Reserved Instances for the production EC2 instances Use On-Demand Instances for the development and test EC2 instances.
    • C. Use Spot blocks for the production EC2 instances Use Reserved Instances for the development and testEc2instances
    • D. Use On-Demand Instances for the production EC2 instances. Use Spot blocks for the development and test EC2 instances.

    View question →

53. Q53. Q118. A company needs to retain application log files for a critical application for 10years. The application team regularly accesses logs from the past month for troubleshooting. but logs older than 1 month are rarely accessed. The application generates more than 10 TB of logs per month. Which storage option meets these requirements MOST cost-effectively?

    • A. Store the logs in Amazon S3. Use AWS Backup to move logs more than 1month old to S3 Glacier Deep Archive
    • B. Store the logs in Amazon S3. Use S3Lfecycle policies to move logs more than 1month old to S3 Glacier Deep Archive
    • C. Store the logs in Amazon CloudWatch Logs. Use AWS Backup to move logs more than 1month old to S3 Glacier Deep Archive
    • D. Store the logs in Amazon CloudWatch Logs. Use Amazon S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive

    View question →

54. Q54. Q119. A company is migrating a distributed application to AWS. The application serves variable workloads. The legacy platform consists of a primary server that coordinates jobs across multiple compute nodes. The company wants to modernize the application with a solution that maximizes resiliency and scalability How should a solutions architect design the architecture to meet these requirements?

    • A. Configure an Amazon Simple Queue Service (Amazon SQS)queue as a destination for the jobs.Implement the compute nodes with Amazon EC2 instances that are managed in an Auto Scaling group.Configure EC2 Auto Scaling to use scheduled scaling
    • B. Configure an Amazon Simple Queue Service (Amazon SQS)queue as a destination for the jobs.Implement the compute nodes with Amazon EC2 instances that are managed in an Auto Scaling group.Configure EC2 Auto Scaling based on the size of the queue
    • C. Implement the primary server and the compute nodes with Amazon EC2 instances that are managed in an Auto Scaling group. Configure AWS CloudTrail as a destination for the jobs. Configure EC2 Auto Scaling based on the load on the primary server.
    • D. Implement the primary server and the compute nodes with Amazon EC2 instances that are managed in an Auto Scaling group. Configure Amazon EventBridge (Amazon CloudWatch Events) as a destination for the jobs. Configure EC2 Auto Scaling based on the load on the compute nodes.

    View question →

55. Q55. Q120. A company is storing backup files by using Amazon S3 Standard storage. The files are accessed frequently for 1 month. However, the files are not accessed after 1 month. The company must keep the files indefinitely.Which storage solution will meet these requirements MOST cost-effectively?

    • A. Configure S3 Intlligent-Tiering to automatically migrate objects
    • B. Create an S3 Lifecycle configuration to transition objects from S3 Standard to S3 Glacier Deep Archive after 1 month
    • C. Create an S3 Lifecvcle configuration to transition objects from S3 Standard to s3 Standard-Infrequent Access (S3 Standard-IA) after 1 month.
    • D. Create an S3 Lifecycle configuration to transition objects from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1month

    View question →

56. Q56. Q121. A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us- east-1 Region and the ap-southeast-2 Region.A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks.Which solution will meet these requirements with the LEAST amount of administrative effort?

    • A. Set up AWS WAF in both Regions. Associate Regional web ACLs with an API stage
    • B. Set up AWS Firewall Manager in both Regions. Centrally configure AWS WAF rules.
    • C. Set up AWS Shield in both Regions. Associate Regional web ACLs with an API stage.
    • D. Set up AWS Shield in one of the Regions. Associate Regional web ACLs with an API stage

    View question →

57. Q57. Q122. A company delivers files in Amazon S3 to certain users who do not have AWS credentials. These users must be given access for a limited time.What should a solutions architect do to securely meet these requirements?

    • A. Configure public access on an Amazon S3 bucket.
    • B. Generate a presigned URL to share with the users
    • C. Encrypt files using AWS KMS and provide keys to the users
    • D. Create and assign IAM roles that will grant GetObject permissions to the users

    View question →

58. Q58. Q123. A company is building an interactive knowledge base system to help its call center staff work more efficiently. The system will be deployed on AWS and will be used 24 hours a day, 7 days a week. The company has more than 10 years of customer support transcripts stored in plaintext files. The company needs a database solution in which the company can bulk load existing transcripts and can individually load new transcripts as they are captured. The solution must provide search functionality to identify transcripts in which keywords and phrases occur.Which solution meets these requirements MOST cost-effectively?

    • A. Amazon Athena
    • B. Amazon RDS
    • C. Amazon OpenSearch Service (Amazon Elasticsearch Service)
    • D. Amazon DynamoDB

    View question →

59. Q59. Q124. A company recently experienced a DDoS attack on its web application. The application is hosted on Amazon EC2 instances and is architected for high availability with Elastic Load Balancers and Auto Scaling groups. The DDoS attack lasted for an extended period of time and resulted in additional cost to the company. The company wants to acquire financial protection from future DDoS attacks Which solution will provide this protection MOST cost-effectively?

    • A. AWS WAF
    • B. AWS Shield Standard
    • C. AWS Shield Advanced
    • D. Amazon Detective

    View question →

60. Q60. Q125. A gaming company hosts a browser-based application on AWS. The users of the application consume a large number of videos and images that are stored in Amazon S3. This content is the same for all users. The application has increased in popularity, and millions of users worldwide are accessing these media files. The company wants to provide the files to the users while reducing the load on the origin. Which solution meets these requirements MOST cost-effectively?

    • A. Deploy an AWS Global Accelerator accelerator in front of the web servers
    • B. Deploy an Amazon CloudFront web distribution in front of the S3 bucket
    • C. Deploy an Amazon ElastiCache for Redis instance in front of the web servers
    • D. Deploy an Amazon ElastiCache for Memcached instance in front of the web servers

    View question →

61. Q61. Q126. A company runs its two-tier ecommerce website on AWS. The web tier consists of a load balancer that sends traffic to Amazon EC2 instances. The database tier uses an Amazon RDS DB instance. The EC2 instances and the RDS DB instance should not be exposed to the public internet. The EC2instances require internet access to complete payment processing of orders through a third-party web service. The application must be highly available.Which combination of configuration options will meet these requirements? (Select TWO.)

    • A. Use an Auto Scaling group to launch the EC2 instances in private subnets. Deploy an RDS Multi-AZ DB instance in private subnets
    • B. Configure a VPC with two private subnets and two NAT gateways across two Availability Zones. Deploy an Application Load Balancer in the private subnets
    • C. Use an Auto Scaling group to launch the EC2 instances in public subnets across two Availability Zones.Deploy an RDS Multi-AZ DB instance in private subnets
    • D. Configure a VPC with one public subnet, one private subnet, and two NAT gateways across two Availability Zones. Deploy an Application Load Balancer in the public subnet.
    • E. Configure a VPC with two public subnets, two private subnets, and two NAT gateways across two Availability Zones. Deploy an Application Load Balancer in the public subnets

    View question →

62. Q62. Q127. A company is serving an application through Amazon CloudFront. The company wants to protect the application from common SQL injection and cross-site scripting attacks. The company also wants the ability to block IP addresses and apply rate limiting.Which AWS service meets these requirements?

    • A. Amazon GuardDuty
    • B. AWS Shield
    • C. Amazon Inspector
    • D. AWS WAF

    View question →

63. Q63. Q128. A solutions architect is designing a new hybrid architecture to extend a company's on-premises infrastructure to AWS. The company requires a highly available connection with consistent low latency to an AWS Region. The company needs to minimize costs and is willing to accept slower traffic if the primary connection fails.What should the solutions architect do to meet these requirements?

    • A. Provision an AWS Direct Connect connection to a Region. Provision a VPN connection as a backup if the primary Direct Connect connection fails
    • B. Provision a VPN tunnel connection to a Region for private connectivity. Provision a second VPN tunnel for private connectivity and as a backup if the primary VPN connection fails
    • C. Provision an AWS Direct Connect connection to a Region. Provision a second Direct Connect connection to the same Region as a backup if the primary Direct Connect connection fails
    • D. Provision an AWS Direct Connect connection to a Region. Use the Direct Connect failover attribute from the AWS CLI to automatically create a backup connection if the primary Direct Connect connection fails

    View question →

64. Q64. Q129. A company wants to store large amounts of data in Amazon S3 buckets. Numerous applications access the data, and the access pattern of the data is irregular. A solutions architect must recommend a cost-effective storage solution that does not affect performance or require operational overhead.Which solution meets these requirements?

    • A. AWS Trusted Advisor
    • B. S3 Analytics
    • C. S3 Intelligent-Tiering
    • D. Cost Explorer

    View question →

65. Q65. Q130. A company needs to store its accounting records in Amazon S3. The records must be immediately accessible for 1year and then must be archived for an additional 9 years. No one at the company, including administrative users and root users, can be able to delete the records during the entire 10-year period. The records must be stored with maximum resiliency.Which solution will meet these requirements?

    • A. Store the records in S3 Glacier for the entire 10-year period. Use an access control policy to deny deletion of the records for a period of 10 years
    • B. Store the records by using S3Intelligent-Tiering. Use an IAM policy to deny deletion of the records. After 10years, change the IAM policy to allow deletion
    • C. Use an S3 Lifecycle policy to transition there cords from S3 Standard to S3 Glacier Deep Archive after 1year,Use S3 Object Lock in compliance mode for a period of 10 years
    • D. Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1 year. Use S3 Object Lock in governance mode for a period of 10 years

    View question →