AWS SAA-C03 Chapter 3 Practice Questions (65 Questions)

Practice questions for the AWS SAA-C03 (Solutions Architect Associate) exam, Chapter 3.

1. Q1. Q131. A company is designing an application where users upload small files into Amazon S3.After a user uploads a file, the file requires one-time simple processing to transform the data and save the data in JSON format for later analysis.Each file must be processed as quickly as possible after it is uploaded. Demand will vary. On some days, users will upload a high number of files. On other days, users will upload a few files or no files. Which solution meets these requirements with the LEAST operational overhead?

   • A. Configure Amazon EMR to read text files from Amazon S3. Run processing scripts to transform the data. Store the resulting JSON file in an Amazon Aurora DB cluster.
   • B. Configure Amazon S3to send an event notification to an Amazon Simple Queue Service (Amazon SQS) queue. Use Amazon EC2 instances to read from the queue and process the data Store the resulting JSON file in Amazon DynamoDB.
   • C. Configure Amazon S3to send an event notification to an Amazon Simple Queue Service (Amazon SQS) queue. Use an AWS Lambda function to read from the queue and process the data. Store the resulting JSON file in Amazon DynamoDB.
   • D. Configure Amazon EventBridge (Amazon CloudWatch Events) to send an event to Amazon Kinesis Data Streams when a new file is uploaded. Use an AWS Lambda function to consume the event from the stream and process the data Store the resulting JSON file in an Amazon Aurora DB cluster.

   View question →

2. Q2. Q132. A company hosts a marketing website in an on-premises data center. The website consists of static documents and runs on a single server.An administrator updates the website content infrequently and uses an SFTP client to upload new documents.The company decides to host its website on AWS and to use Amazon CloudFront. The company's solutions architect creates a CloudFront distribution. The solutions architect must design the most cost-effective and resilient architecture for website hosting to serve as the CloudFront origin.Which solution will meet these requirements?

   • A. Create a virtual server by using Amazon Lightsail Configure the web server in the Lightsail instance.Upload website content by using an SFTP client.
   • B. Create an AWS Auto Scaling group for Amazon EC2 instances. Use an Application Load Balancer Upload website content by using an SFTP client.
   • C. Create a private Amazon S3 bucket. Use an S3 bucket policy to allow access from a CloudFront origin access identity (OAI). Upload website content by using the AWS CL.
   • D. Create a public Amazon S3 bucket. Configure AWS Transfer for SFTP Configure the S3 bucket for website hosting. Upload website content by using the SFTP client.

   View question →

3. Q3. Q133. A company has a website hosted on AWS. The website is behind an Application Load Balancer (ALB) that is configured to handle HTTP and HTTPS separately. The company wants to forward all requests to the website so that the requests will use HTTPS.What should a solutions architect do to meet this requirement?

   • A. Update the ALB's network ACL to accept only HTTPS traffic
   • B. Create a rule that replaces the HTTP in the URL with HTTPS
   • C. Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.
   • D. Replace the ALB with a Network Load Balancer configured to use Server Name Indication (SNI)

   View question →

4. Q4. Q134. A startup company wants to decouple its three-tier application stack into microservices and use container technologies to build out the microservices. The company does not want to provision and manage the compute infrastructure for its containers on AWS.What should a solutions architect recommend to meet these requirements?

   • A. Provision an Amazon Elastic Container Service (Amazon ECS) cluster. Attach ECS nodes to an Amazon EC2 Auto Scaling group to host containers.
   • B. Provision an Amazon Elastic Container Service (Amazon ECS) cluster with AWS Fargate. Deploy containers to Fargate tasks.
   • C. Create AWS Lambda functions to host microservices. Integrate the functions with an Amazon API Gateway API to redirect application traffic.
   • D. Provision an Amazon Elastic Kubernetes Service (Amazon EKS) cluster.Attach EKS nodes to an Amazon EC2Auto Scaling group to host containers.

   View question →

5. Q5. Q135. A company needs to store data in Amazon S3 and must prevent the data from being changed. The company wants new objects that are uploaded to Amazon S3 to remain unchangeable for a nonspecific amount of time until the company decides to modify the objects. Only specific users in the company's AWS account can have the ability to delete the objects.What should a solutions architect do to meet these requirements?

   • A. Create an S3 Glacier vault. Apply a write-once, read-many (WORM) vault lock policy to the objects.
   • B. Create an S3 bucket with S3 Object Lock enabled Enable versioning. Set a retention period of 100 years. Use governance mode as the S3 bucket's default retention mode for new objects.
   • C. Create an S3 bucket. Use AWS CloudTrail to track any S3API events that modify the objects. Upon notification, restore the modified objects from any backup versions that the company has.
   • D. Create an S3 bucket with S3 Object Lock enabled. Enable versioning. Add a legal hold to the objects.Add the s3:PutObjectLegalHold permission to the IAM policies of users who need to delete the objects.

   View question →

6. Q6. Q136. A global company hosts its web application on Amazon EC2 instances behind an Application Load Balancer (ALB).The web application has static data and dynamic data. The company stores its static data in an Amazon S3 bucket The company wants to improve performance and reduce latency for the static data and dynamic data. The company is using its own domain name registered with Amazon Route 53. What should a solutions architect do to meet these requirements?

   • A. Create an Amazon CloudFront distribution that has the S3 bucket and the ALB as origins. Configure Route 53to route traffic to the CloudFront distribution.
   • B. Create an Amazon CloudFront distribution that has the ALB as an origin. Create an AWS Global Accelerator standard accelerator that has the S3 bucket as an endpoint Configure Route 53to route traffic to the CloudFront distribution.
   • C. Create an Amazon CloudFront distribution that has the S3 bucket as an origin. Create an AWS Global Accelerator standard accelerator that has the ALB and the CloudFront distribution as endpoints. Create a custom domain name that points to the accelerator DNS name. Use the custom domain name as an endpoint for the web application.
   • D. Create an Amazon CloudFront distribution that has the ALB as an origin. Create an AWS Global Accelerator standard accelerator that has the S3 bucket as an endpoint Create two domain names.Point one domain name to the CloudFront DNS name for dynamic content. Point the other domain name to the accelerator DNS name for static content. Use the domain names as endpoints for the web application.

   View question →

7. Q7. Q137. A company recently migrated to AWS and wants to implement a solution to protect the traffic that flows in and out of the production VPC. The company had an inspection server in its on-premises data center. The inspection server performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities in the AWS Cloud.Which solution will meet these requirements?

   • A. Use Amazon GuardDuty for traffic inspection and traffic filtering in the production VPC.
   • B. Use Traffic Mirroring to mirror traffic from the production VPC for traffic inspection and filtering.
   • C. Use AWS Network Firewall to create the required rules for traffic inspection and traffic filtering for the production VPC.
   • D. Use AWS Firewall Manager to create the required rules for traffic inspection and traffic filtering for the production VPC.

   View question →

8. Q8. Q138. A company has an ordering application that stores customer information in Amazon RDS for MySQL. During regular business hours, employees run one-time queries for reporting purposes. Timeouts are occurring during order processing because the reporting queries are taking along time to run. The company needs to eliminate the timeouts without preventing employees from performing queries. What should a solutions architect do to meet these requirements?

   • A. Create a read replica. Move reporting queries to the read replica.
   • B. Create a read replica. Distribute the ordering application to the primary DB instance and the read replica.
   • C. Migrate the ordering application to Amazon DynamoDB with on-demand capacity.
   • D. Schedule the reporting queries for non-peak hours.

   View question →

9. Q9. Q139. A company stores its application logs in an Amazon CloudWatch Logs log group. A new policy requires the company to store all application logs in Amazon OpenSearch Service (Amazon Elasticsearch Service) in near-real time.Which solution will meet this requirement with the LEAST operational overhead?

   • A. Configure a CloudWatch Logs subscription to stream the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service).
   • B. Create an AWS Lambda function. Use the log group to invoke the function to write the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service)
   • C. Create an Amazon Kinesis Data Firehose delivery stream. Configure the log group as the delivery stream's source. Configure Amazon OpenSearch Service (Amazon Elasticsearch Service) as the delivery stream's destination.
   • D. Install and configure Amazon Kinesis Agent on each application server to deliver the logs to Amazon Kinesis Data Streams. Configure Kinesis Data Streams to deliver the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service)

   View question →

10. Q10. Q140. A company stores data in an Amazon Aurora PostgreSQl DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora.Which combination of steps should a solutions architect take to meet these requirements?(Select TWO.)

    • A. Take a manual snapshot of the DB cluster.
    • B. Create a lifecycle policy for the automated backups.
    • C. Configure automated backup retention for 5 years.
    • D. Configure an Amazon CloudWatch Logs export for the DB cluster
    • E. Use AWS Backup to take the backups and to keep the backups for 5 years.

    View question →

11. Q11. Q141. A rapidly growing ecommerce company is running its workloads in a single AWS Region. A solutions architect must create a disaster recovery (DR) strategy that includes a different AWS Region. The company wants its database to be up to date in the DR Region with the least possible latency. The remaining infrastructure in the DR Region needs to run at reduced capacity and must be able to scale up if necessary. Which solution will meet these requirements with the LOWEST recovery time objective (RTO)?

    • A. Use an Amazon Aurora global database with a pilot light deployment.
    • B. Use an Amazon Aurora global database with a warm standby deployment.
    • C. Use an Amazon RDS Multi-AZ DB instance with a pilot light deployment.
    • D. Use an Amazon RDS Multi-AZ DB instance with a warm standby deployment

    View question →

12. Q12. Q142. A company produces batch data that comes from different databases. The company also produces live stream data from network sensors and application APIs. The company needs to consolidate all the data into one place for business analytics. The company needs to process the incoming data and then stage the data in different Amazon S3 buckets. Teams will later run one-time queries and import the data into a business intelligence tool to show key performance indicators (KPIs). Which combination of steps will meet these requirements with the LEAST operational overhead? (Select TWO.)

    • A. Use Amazon Athena for one-time queries. Use Amazon QuickSight to create dashboards for KPls.
    • B. Use Amazon Kinesis Data Analytics for one-time queries. Use Amazon QuickSightto create dashboards for KPls.
    • C. Create custom AWS Lambda functions to move the individual records from the databases to an Amazon Redshift cluster.
    • D. Use an AWS Glue extract, transform, and load (ETL)job to convert the data into JSON format. Load the data into multiple Amazon OpenSearch Service (Amazon Elasticsearch Service) clusters.
    • E. Use blueprints in AWS Lake Formation to identify the data that can be ingested into a data lake. Use AWS Glue to crawl the source, extract the data, and load the data into Amazon S3 in Apache Parquet format.

    View question →

13. Q13. Q143. A company runs its ecommerce application on AWS. Every new order is published as a message in a RabbitMQ queue that runs on an Amazon EC2 instance in a single Availability Zone. These messages are processed by a different application that runs on a separate EC2 instance. This application stores the details in a PostgreSQL database on another EC2 instance. All the EC2 instances are in the same Availability Zone.The company needs to redesign its architecture to provide the highest availability with the least operational overheadWhat should a solutions architect do to meet these requirements?

    • A. Migrate the queue to a redundant pair (active/standby) of RabbitMQ instances on Amazon MQ. Create a Multi-AZ Auto Scaling group for EC2 instances that host the application. Create another Multi-AZ Auto Scaling group for EC2 instances that host the PostgreSQL database.
    • B. Migrate the queue to a redundant pair (active/standby) of RabbitMQ instances on Amazon MQ. Create a Multi-AZ Auto Scaling group for EC2 instances that host the application. Migrate the database to run on a Multi-AZ deployment of Amazon RDS for PostgreSQL.
    • C. Create a Multi-AZ Auto Scaling group for EC2 instances that host the RabbitMQ queue. Create another Multi-AZ Auto Scaling group for EC2 instances that host the application. Migrate the database to run on a Multi-AZ deployment of Amazon RDS for PostgreSQL.
    • D. Create a Multi-AZ Auto Scaling group for EC2 instances that host the RabbitMQ queue. Create another Multi-AZ Auto Scaling group for EC2 instances that host the application. Create a third Muti-AZ Auto Scaling group for EC2 instances that host the PostgreSQL database.

    View question →

14. Q14. Q144. A company is deploying a new public web application to AWS. The application will run behind an Application Load Balancer (ALB). The application needs to be encrypted at the edge with an SSLTLS certificate that is issued by an external certificate authority (CA).The certificate must be rotated each year before the certificate expires.What should a solutions architect do to meet these requirements?

    • A. Use AWS Certificate Manager (ACM) to issue an SSL/TLS certificate.Apply the certificate to the ALB.Use the managed renewal feature to automatically rotate the certificate.
    • B. Use AWS Certificate Manager (ACM) to issue an SSL/TLS certificate.Import the key material from the certificate. Apply the certificate to the ALB. Use the managed renewal feature to automatically rotate the certificate.
    • C. Use AWS Certificate Manager (ACM) Private Certificate Authority to issue an SSL/TLS certificate from the root CA.Apply the certificate to the ALB. Use the managed renewal feature to automatically rotate the certificate.
    • D. Use AWS Certificate Manager (ACM) to import an SSL/TLS certificate.Apply the certificate to the ALB.Use Amazon EventBridge (Amazon CloudWatch Events) to send a notification when the certificate is nearing expiration. Rotate the certificate manually.

    View question →

15. Q15. Q145. A company uses NFS to store large video files in on-premises network attached storage. Each video file ranges in size from 1MB to 500 GB. The total storage is 70 TB and is no longer growing. The company decides to migrate the video files to Amazon S3. The company must migrate the video files as soon as possible while using the least possible network bandwidth.Which solution will meet these requirements?

    • A. Create an S3 bucket. Create an IAM role that has permissions to write to the S3 bucket. Use the AWS CLl to copy all files locally to the S3 bucket.
    • B. Create an AWS Snowball Edge job. Receive a Snowball Edge device on premise. Use the Snowball Edge client to transfer data to the device. Return the device so that AWS can import the data into Amazon S3.
    • C. Deploy an S3 File Gateway on premises. Create a public service endpoint to connect to the S3 File Gateway. Create an S3 bucket. Create a new NFS file share on the S3 File Gateway. Point the new file share to the S3 bucket. Transfer the data from the existing NFS file share to the S3File Gateway.
    • D. Setup an AWS Direct Connect connection between the on-premises network and AWS. Deploy an S3 File Gateway on premises. Create a public virtual interface (VlF) to connect to the S3 File Gateway.Create an S3 bucket. Create a new NFS file share on the S3 File Gateway. Point the new file share to the S3 bucket. Transfer the data from the existing NFS file share to the S3 File Gateway.

    View question →

16. Q16. Q146. A company uses Amazon S3 as its data lake. The company has a new partner that must use SFTP to upload data files.A solutions architect needs to implement a highly available SFTP solution that minimizes operational overhead.Which solution will meet these requirements?

    • A. Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint.Choose the S3 data lake as the destination.
    • B. Use Amazon S3 File Gateway as an SFTP server. Expose the S3 File Gateway endpoint URL to the new partner. Share the S3 File Gateway endpoint with the new partner.
    • C. Launch an Amazon EC2 instance in a private subnet in a VPC. Instruct the new partner to upload files to the EC2 instance by using a VPN. Run a cron job script on the EC2 instance to upload files to the S3 data lake.
    • D. Launch Amazon EC2 instances in a private subnet in a VPC. Place a Network Load Balancer (NLB) in front of the EC2 instances. Create an SFTP listener port for the NLB.Share the NLB hostname with the new partner. Run a cron job script on the EC2 instances to upload files to the S3 data lake.

    View question →

17. Q17. Q147. A company has migrated a two-tier application from its on-premises data center to the AWS Cloud. The data tier is a Multi-AZ deployment of Amazon RDS for Oracle with 12TB of General Purpose SSD Amazon Elastic Block Store (Amazon EBS) storage. The application is designed to process and store documents in the database as binary large objects (blobs) with an average document size of 6 MB. The database size has grown over time, reducing the performance and increasing the cost of storage. The company must improve the database performance and needs a solution that is highly available and resilient. Which solution will meet these requirements MOST cost-effectively?

    • A. Reduce the RDS DB instance size. Increase the storage capacity to 24 TiB.Change the storage type to Magnetic.
    • B. Increase the RDS DB instance size. Increase the storage capacity to 24 TiB.Change the storage type to Provisioned IOPS.
    • C. Create an Amazon S3 bucket. Update the application to store documents in the S3 bucket. Store the object metadata in the existing database.
    • D. Create an Amazon DynamoDB table. Update the application to use DynamoDB. Use AWS Database Migration Service (AWS DMS) to migrate data from the Oracle database to DynamoDB.

    View question →

18. Q18. Q148. A company has a small Python application that processes JSON documents and outputs the results to an on-premises SQL database. The application runs thousands of times each day. The company wants to move the application to the AWS Cloud. The company needs a highly available solution that maximizes scalability and minimizes operational overhead.Which solution will meet these requirements?

    • A. Place the JSON documents in an Amazon S3 bucket. Run the Python code on multiple Amazon EC2 instances to process the documents. Store the results in an Amazon Aurora DB cluster.
    • B. Place the JSON documents in an Amazon S3 bucket. Create an AWS Lambda function that runs the Python code to process the documents as they arrive in the S3 bucket. Store the results in an Amazon Aurora DB cluster.
    • C. Place the JSON documents in an Amazon Elastic Block Store (Amazon EBS) volume. Use the EBS Multi-Attach feature to attach the volume to multiple Amazon EC2 instances. Run the Python code on the EC2 instances to process the documents. Store the results on an Amazon RDS DB instance.
    • D. Place the JSON documents in an Amazon Simple Queue Service (Amazon SQS) queue as messages.Deploy the Python code as a container on an Amazon Elastic Container Service (Amazon ECS) cluster that is configured with the Amazon EC2 launch type. Use the container to process the SQS messages.Store the results on an Amazon RDS DB instance.

    View question →

19. Q19. Q149. A company is running several business applications in three separate VPCs within the us-east-1 Region. The applications must be able to communicate between VPCs. The applications also must be able to consistently send hundreds of gigabytes of data each day to a latency-sensitive application that runs in a single on-premises data center.A solutions architect needs to design a network connectivity solution that maximizes cost-effectiveness.Which solution meets these requirements?

    • A. Configure three AWS Site-to-Site VPN connections from the data center to AWS. Establish connectivity by configuring one VPN connection for each VPC.
    • B. Launch a third-party virtual network appliance in each VPC.Establish an IPsec VPN tunnel between the data center and each virtual appliance.
    • C. Set up three AWS Direct Connect connections from the data center to a Direct Connect gateway in us- east-1.Establish connectivity by configuring each VPC to use one of the Direct Connect connections.
    • D. Set up one AWS Direct Connect connection from the data center to AWS. Create a transit gateway, and attach each VPC to the transit gateway. Establish connectivity between the Direct Connect connection and the transit gateway.

    View question →

20. Q20. Q150. A company needs to store data from its healthcare application. The application's data frequently changes.Anew regulation requires audit access a tall levels of the stored data. The company hosts the application on an on-premises infrastructure that is running out of storage capacity.A solutions architect must securely migrate the existing data to AWS while satisfying the new regulation.Which solution will meet these requirements?

    • A. Use AWS DataSync to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.
    • B. Use AWS Snowcone to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.
    • C. Use Amazon S3 Transfer Acceleration to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.
    • D. Use AWS Storage Gateway to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.

    View question →

21. Q21. Q151. A company has an ecommerce checkout workflow that writes an order to a database and calls a service to process the payment. Users are experiencing timeouts during the checkout process. When users resubmit the checkout form, multiple unique orders are created for the same desired transaction. How should a solutions architect refactor this workflow to prevent the creation of multiple orders?

    • A. Configure the web application to send an order message to Amazon Kinesis Data Firehose. Set the payment service to retrieve the message from Kinesis Data Firehose and process the order.
    • B. Create a rule in AWS CloudTrail to invoke an AWS Lambda function based on the logged application path request. Use Lambda to query the database, call the payment service, and pass in the order information.
    • C. Store the order in the database. Send a message that includes the order number to Amazon Simple Notification Service (Amazon SNS).Set the payment service to poll Amazon SNS, retrieve the message, and process the order.
    • D. Store the order in the database. Send a message that includes the order number to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the paymentservice to retrieve the message and process the order. Delete the message from the queue.

    View question →

22. Q22. Q152. A company used an Amazon RDS for MySQL DB instance during application testing. Before terminating the DB instance at the end of the test cycle, a solutions architect created two backups. The solutions architect created the first backup by using the mysqldump utility to create a database dump. The solutions architect created the second backup by enabling the final DB snapshot option on RDS termination. The company is now planning fora new test cycle and wants to create anew DB instance from the most recent backup. The company has chosen a MySQL-compatible edition of Amazon Aurora to host the DB instance. Which solutions will create the new DB instance? (Select TWO.)

    • A. Import the RDS snapshot directly into Aurora.
    • B. Upload the RDS snapshot to Amazon S3. Then import the RDS snapshot into Aurora.
    • C. Upload the database dump to Amazon S3. Then import the database dump into Aurora.
    • D. Use AWS Database Migration Service (AWS DMS) to import the RDS snapshot into Aurora.
    • E. Upload the database dump to Amazon S3.Then use AWS Database Migration Service (AWS DMS) to import the database dump into Aurora

    View question →

23. Q23. Q153. A company is creating an application that runs on containers in a VPC. The application stores and accesses data in an Amazon S3 bucket. During the development phase, the application will store and access 1 TB of data in Amazon S3 each day. The company wants to minimize costs and wants to prevent traffic from traversing the internet whenever possible.Which solution will meet these requirements?

    • A. Enable S3 Intelligent-Tiering for the S3 bucket.
    • B. Enable S3 Transfer Acceleration for the S3 bucket.
    • C. Create a gateway VPC endpoint for Amazon S3.Associate this endpoint with all route tables in the VPC.
    • D. Create an interface endpoint for Amazon S3in the VPC.Associate this endpoint with all route tables in the VPC.

    View question →

24. Q24. Q154. A rapidly growing global ecommerce company is hosting its web application on AWS. The web application includes static content and dynamic content. The website stores online transaction processing (OLTP) data in an Amazon RDS database. The website's users are experiencing slow page loads. Which combination of actions should a solutions architect take to resolve this issue? (Select TWO.)

    • A. Configure an Amazon Redshift cluster.
    • B. Set up an Amazon CloudFront distribution.
    • C. Host the dynamic web content in Amazon S3.
    • D. Create a read replica for the RDS DB instance.
    • E. Configure a Multi-AZ deployment for the RDS DB instance.

    View question →

25. Q25. Q155. A company needs to store contract documents. A contract lasts for 5 years. During the 5-year period, the company must ensure that the documents cannot be overwritten or deleted. The company needs to encrypt the documents at rest and rotate the encryption keys automatically every year. Which combination of steps should a solutions architect take to meet these requirements with the LEAST operational overhead? (Select TWO.)

    • A. Store the documents in Amazon S3.Use S3 Object Lock in governance mode.
    • B. Store the documents in Amazon S3. Use S3 Object Lock in compliance mode.
    • C. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3).Configure key rotation.
    • D. Use server-side encryption with AWS Key Management Service (AWS KMS) customer managed keys.Configure key rotation.
    • E. Use server-side encryption with AWS Key Management Service (AWS KMS) customer provided (imported) keys. Configure key rotation.

    View question →

26. Q26. Q156. A solutions architect is migrating a document management workload to AWS. The workload keeps 7 TiB of contract documents on a shared storage file system and tracks them on an external database. Most of the documents are stored and retrieved eventually for reference in the future. The application cannot be modified during the migration, and the storage solution must be highly available. Documents are retrieved and stored by web servers that run on Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group can have up to 12 instances. Which solution meets these requirements MOST cost-effectively?

    • A. Provision an enhanced networking optimized EC2 instance to serve as a shared NFS storage system.
    • B. Create an Amazon S3 bucket that uses the S3 Standard-Infrequent Access (S3Standard-lA) storage class. Mount the S3 bucket to the EC2 instances in the Auto Scaling group.
    • C. Create an SFTP server endpoint by using AWS Transfer for SFTP and an Amazon S3 bucket.Configure the EC2 instances in the Auto Scaling group to connect to the SFTP server.
    • D. Create an Amazon Elastic File System (Amazon EFS) file system that uses the EFS Standard- Infrequent Access (EFS Standard-IA) storage class. Mount the file system to the EC2 instances in the Auto Scaling group.

    View question →

27. Q27. Q157. A company is using a SQL database to store movie data that is publicly accessible. The database runs on an Amazon RDS Single-AZ DB instance.A script runs queries at random intervals each day to record the number of new movies that have been added to the database. The script must report a final total during business hours.The company's development team notices that the database performance is inadequate for development tasks when the script is running. A solutions architect must recommend a solution to resolve this issue Which solution will meet this requirement with the LEAST operational overhead?

    • A. Modify the DB instance to be a Multi-AZ deployment.
    • B. Create a read replica of the database. Configure the script to query only the read replica.
    • C. Instruct the development team to manually export the entries in the database at the end of each day.
    • D. Use Amazon ElastiCache to cache the common queries that the script runs against the database.

    View question →

28. Q28. Q158. A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code.Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

    • A. Store the static files on Amazon S3. Use Amazon CloudFront to cache objects at the edge.
    • B. Store the static files on Amazon S3.Use Amazon ElastiCache to cache objects at the edge.
    • C. Store the server-side code on Amazon Elastic File System (Amazon EFS).Mount the EFS volume on each EC2 instance to share the files.
    • D. Store the server-side code on Amazon FSx for Windows File Server. Mount the FSx for Windows File Server volume on each EC2 instance to share the files.
    • E. Store the server-side code on a General Purpose SSD (gp2)Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on each EC2 instance to share the files.

    View question →

29. Q29. Q159. A company has an application that places hundreds of .csv files into an Amazon S3 bucket every hour. The files are 1GB in size. Each time a file is uploaded, the company needs to convert the file to Apache Parquet format and place the output file into an S3 bucket.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create an AWS Lambda function to download the .csv files, convert the files to Parquet format, and place the output files in an S3 bucket. Invoke the Lambda function for each S3 PUT event.
    • B. Create an Apache Spark job to read the .csv files, convert the files to Parquet format, and place the output files in an S3 bucket. Create an AWS Lambda function for each S3PUTevent to invoke the Spark job.
    • C. Create an AWS Glue table and an AWS Glue crawler for the S3 bucket where the application places the .csv files. Schedule an AWS Lambda function to periodically use Amazon Athena to query the AWS Glue table, convert the query results into Parquet format, and place the output files into an S3 bucket.
    • D. Create an AWS Glue extract, transform, and load (ETL)job to convert the .csv files to Parquet format and place the output files into an S3 bucket. Create an AWS Lambda function for each S3PUT event to invoke the ETL job.

    View question →

30. Q30. Q160. A company is creating a prototype of an ecommerce website on AWS. The website consists of an Application Load Balancer, an Auto Scaling group of Amazon EC2 instances for web servers, and an Amazon RDS for MySQL DB instance that runs with the Single-AZ configuration. The website is slow to respond during searches of the product catalog. The product catalog is a group of tables in the MySQL database that the company does not update frequently.A solutions architect has determined that the CPU utilization on the DB instance is high when product catalog searches occur. What should the solutions architect recommend to improve the performance of the website during searches of the product catalog?

    • A. Migrate the product catalog to an Amazon Redshift database. Use the COPY command to load the product catalog tables.
    • B. Implement an Amazon ElastiCache for Redis cluster to cache the product catalog. Use lazy loading to populate the cache.
    • C. Add an additional scaling policy to the Auto Scaling group to launch additionalEC2 instances when database response is slow.
    • D. Turn on the Multi-AZ configuration for the DB instance. Configure the EC2 instances to throttle the product catalog queries that are sent to the database.

    View question →

31. Q31. Q161. A company hosts a data lake on AWS. The data lake consists of data in Amazon S3 and Amazon RDS for PostgreSQL. The company needs a reporting solution that provides data visualization and includes all the data sources within the data lake. Only the company's management team should have full access to all the visualizations. The rest of the company should have only limited access.Which solution will meet these requirements?

    • A. Create an analysis in Amazon QuickSight. Connect all the data sources and create new datasets.Publish dashboards to visualize the data. Share the dashboards with the appropriate IAM roles.
    • B. Create an analysis in Amazon QuickSight. Connect all the data sources and create new datasets.Publish dashboards to visualize the data. Share the dashboards with the appropriate users and groups.
    • C. Create an AWS Glue table and crawler for the data in Amazon S3. Create an AWS Glue extract, transform, and load (ETL)job to produce reports. Publish the reports to Amazon S3. Use S3 bucket policies to limit access to the reports.
    • D. Create an AWS Glue table and crawler for the data in Amazon S3. Use Amazon Athena Federated Query to access data within Amazon RDS for PostgreSQL. Generate reports by using Amazon Athena.Publish the reports to Amazon S3.Use S3 bucket policies to limit access to the reports.

    View question →

32. Q32. Q162. A company needs to move data from an Amazon EC2 instance to an Amazon S3 bucket. The company must ensure that no API calls and no data are routed through public internet routes. Only the EC2 instance can have access to upload data to the S3 bucket.Which solution will meet these requirements?

    • A. Create an interface VPC endpoint for Amazon S3 in the subnet where the EC2 instance is located.Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.
    • B. Create a gateway VPC endpoint for Amazon S3 in the Availability Zone where the EC2 instance is located. Attach appropriate security groups to the endpoint. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.
    • C. Run the nslookup tool from inside the EC2 instance to obtain the private IP address of the S3 bucket's service API endpoint. Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucket. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.
    • D. Use the AWS provided, publicly available ip-ranges.json file to obtain the private IP address of the S3 bucket's service API endpoint. Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucket. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.

    View question →

33. Q33. Q163. A company runs a global web application on Amazon EC2 instances behind an Application Load Balancer. The application stores data in Amazon Aurora The company needs to create a disaster recovery solution and can tolerate up to 30 minutes of downtime and potential data loss. The solution does not need to handle the load when the primary infrastructure is healthy. What should a solutions architect do to meet these requirements?

    • A. Deploy the application with the required infrastructure elements in place. Use Amazon Route 53 to configure active-passive failover. Create an Aurora Replica in a second AWS Region
    • B. Host a scaled-down deployment of the application in a second AWS Region. Use Amazon Route 53 to configure active-active failover. Create an Aurora Replica in the second Region.
    • C. Replicate the primary infrastructure in a second AWS Region. Use Amazon Route 53to configure active- active failover. Create an Aurora database that is restored from the latest snapshot
    • D. Back up data with AWS Backup. Use the backup to create the required infrastructure in a second AWS Region. Use Amazon Route 53to configure active-passive failover. Create an Aurora second primary instance in the second Region.

    View question →

34. Q34. Q164. A company performs monthly maintenance on its AWS infrastructure. During these maintenance activities, the company needs to rotate the credentials for its Amazon RDS for MySQL databases across multiple AWS Regions.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Store the credentials as secrets in AWS Secrets Manager. Use multi-Region secret replication for the required Regions. Configure Secrets Manager to rotate the secrets on a schedule
    • B. Store the credentials as secrets in AWS Systems Manager by creating a secure string parameter. Use multi-Region secret replication for the required Regions. Configure Systems Manager to rotate the secrets on a schedule.
    • C. Store the credentials in an Amazon S3 bucket that has server-side encryption (SSE) enabled. Use Amazon EventBridge (Amazon CloudWatch Events) to invoke an AWS Lambda function to rotate the credentials.
    • D. Encrypt the credentials as secrets by using AWS Key Management Service (AWS KMS) multi-Region customer managed keys. Store the secrets in an Amazon DynamoDB global table. Use an AWS Lambda function to retrieve the secrets from DynamoDB. Use the RDS API to rotate the secrets.

    View question →

35. Q35. Q165. A payment processing company records all voice communication with its customers and stores the audio files in an Amazon S3 bucket. The company needs to capture the text from the audio files. The company must remove from the text any personally identifiable information (PII) that belongs to customers. What should a solutions architect do to meet these requirements?

    • A. Process the audio files by using Amazon Kinesis Video Streams. Use an AWS Lambda function to scan for known PII patterns
    • B. When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start an Amazon Textract task to analyze the call recordings
    • C. Configure an Amazon Transcribe transcription job with PII redaction turned on. When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start the transcription job. Store the output in a separate S3 bucket
    • D. Create an Amazon Connect contact flow that ingests the audio files with transcription turned on. Embed an AWS Lambda function to scan for known PII patterns. Use Amazon EventBridge (Amazon CloudWatch Events) to start the contact flow when an audio file is uploaded to the S3 bucket.

    View question →

36. Q36. Q166. A company has a business system that generates hundreds of reports each day. The business system saves the reports to a network share in CSV format. The company needs to store this data in the AWS Cloud in near-real time for analysis.Which solution will meet these requirements with the LEAST administrative overhead?

    • A. Use AWS DataSync to transfer the files to Amazon S3. Create a scheduled task that runs at the end of each day
    • B. Create an Amazon S3 File Gateway. Update the business system to use a new network share from the S3 File Gateway.
    • C. Use AWS DataSync to transfer the files to Amazon S3. Create an application that uses the DataSync API in the automation workflow
    • D. Deploy an AWS Transfer for SFTP endpoint. Create a script that checks for new files on the network share and uploads the new files by using SFTP

    View question →

37. Q37. Q167. A company stores confidential data in an Amazon Aurora PostgreSQL database in the ap-southeast-3 Region. The database is encrypted with an AWS Key Management Service (AWS KMS) customer managed key. The company was recently acquired and must securely share a backup of the database with the acquiring company's AWS account in ap-southeast-3.What should a solutions architect do to meet these requirements?

    • A. Create a database snapshot. Copy the snapshot to a new unencrypted snapshot. Share the new snapshot with the acquiring company's AWS account
    • B. Create a database snapshot. Add the acquiring company's AWS account to the KMS key policy. Share the snapshot with the acquiring company's AWS account.
    • C. Create a database snapshot that uses a different AWS managed KMS key. Add the acquiring company's AWS account to the KMS key alias. Share the snapshot with the acquiring company's AWS account.
    • D. Create a database snapshot. Download the database snapshot. Upload the database snapshot to an Amazon S3 bucket. Update the S3 bucket policy to allow access from the acquiring company's AWS account.

    View question →

38. Q38. Q168. A company hosts a serverless application on AWS. The application uses Amazon API Gateway, AWS Lambda, and an Amazon RDS for PostgreSQL database.The company notices an increase in application errors that result from database connection timeouts during times of peak traffic or unpredictable traffic. The company needs a solution that reduces the application failures with the least amount of change to the code.What should a solutions architect do to meet these requirements?

    • A. Reduce the Lambda concurrency rate.
    • B. Enable RDS Proxy on the RDS DB instance.
    • C. Resize the RDS DB instance class to accept more connections.
    • D. Migrate the database to Amazon DynamoDB with on-demand scaling.

    View question →

39. Q39. Q169. A company is building a new dynamic ordering website. The company wants to minimize server maintenance and patching. The website must be highly available and must scale read and write capacity as quickly as possible to meet changes in user demand.Which solution will meet these requirements?

    • A. Host static content in Amazon S3. Host dynamic content by using Amazon API Gateway and AWS Lambda. Use Amazon DynamoDB with on-demand capacity for the database. Configure Amazon CloudFront to deliver the website content.
    • B. Host static content in Amazon S3. Host dynamic content by using Amazon API Gateway and AWS Lambda. Use Amazon Aurora with Aurora Auto Scaling for the database. Configure Amazon CloudFront to deliver the website content.
    • C. Host all the website content on Amazon EC2 instances. Create an Auto Scaling group to scale the EC2instances. Use an Application Load Balancer to distribute traffic. Use Amazon DynamoDB with provisioned write capacity for the database.
    • D. Host all the website content on Amazon EC2 instances. Create an Auto Scaling group to scale the EC2instances Use an Application Load Balancer to distribute traffic. Use Amazon Aurora with Aurora Auto Scaling for the database.

    View question →

40. Q40. Q170. An online retail company has more than 50 million active customers and receives more than 25,000 orders each day. The company collects purchase data for customers and stores this data in Amazon S3.Additional customer data is stored in Amazon RDS.The company wants to make all the data available to various teams so that the teams can perform analytics. The solution must provide the ability to manage fine-grained permissions for the data and must minimize operational overheadWhich solution will meet these requirements?

    • A. Migrate the purchase data to write directly to Amazon RDS. Use RDS access controls to limit access
    • B. Schedule an AWS Lambda function to periodically copy data from Amazon RDS to Amazon S3. Create an AWS Glue crawler. Use Amazon Athena to query the data Use S3 policies to limit access
    • C. Create a data lake by using AWS Lake Formation. Create an AWS Glue JDBC connection to Amazon RDS. Register the S3 bucket in Lake Formation. Use Lake Formation access controls to limit access
    • D. Create an Amazon Redshift cluster. Schedule an AWS Lambda function to periodically copy data from Amazon S3 and Amazon RDS to Amazon Redshift. Use Amazon Redshift access controls to limit access

    View question →

41. Q41. Q171. A solutions architect needs to implement a solution to reduce a company's storage costs.All the company's data is in the Amazon S3 Standard storage class. The company must keep all data for at least 25 years. Data from the most recent 2 years must be highly available and immediately retrievable.Which solution will meet these requirements?

    • A. Set up an S3 Lifecycle policy to transition objects to S3 Glacier Deep Archive immediately.
    • B. Set up an S3 Lifecycle policy to transition objects to S3 Glacier Deep Archive after 2 years.
    • C. Use S3 Intelligent-Tiering. Activate the archiving option to ensure that data is archived in S3 Glacier Deep Archive.
    • D. Set up an S3 Lifecycle policy to transition objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately and to S3 Glacier Deep Archive after 2 years.

    View question →

42. Q42. Q172. A company wants to migrate its existing on-premises monolithic application to AWS. The company wants to keep as much of the front-end code and the backend code as possible. However, the company wants to break the application into smaller applications.A different team will manage each application. The company needs a highly scalable solution that minimizes operational overhead.Which solution will meet these requirements?

    • A. Host the application on AWS Lambda. Integrate the application with Amazon API Gateway
    • B. Host the application with AWS Amplify. Connect the application to an Amazon API Gateway API that is integrated with AWS Lambda
    • C. Host the application on Amazon EC2 instances. Set up an Application Load Balancer with EC2 instances in an Auto Scaling group as targets
    • D. Host the application on Amazon Elastic Container Service (Amazon ECS). Set up an Application Load Balancer with Amazon ECS as the target

    View question →

43. Q43. Q173. A company is preparing a new data platform that will ingest real-time streaming data from multiple sources. The company needs to transform the data before writing the data to Amazon S3. The company needs the ability to use SQL to query the transformed data.Which solutions will meet these requirements? (Select TWO.)

    • A. Use Amazon Kinesis Data Streams to stream the data. Use Amazon Kinesis Data Analytics to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3
    • B. Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use AWS Glue to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3
    • C. Use AWS Database Migration Service (AWS DMS) to ingest the data. Use Amazon EMR to transform the data and to write the data to Amazon S3.Use Amazon Athena to query the transformed data from Amazon S3
    • D. Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use Amazon Kinesis Data Analytics to transform the data and towrite the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3
    • E. Use Amazon Kinesis Data Streams to stream the data. Use AWS Glue to transform the data. Use Amazon Kinesis Data Firehose to write the data toAmazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3

    View question →

44. Q44. Q174. A company has a three-tier web application that is deployed on AWS. The web servers are deployed in a public subnet in a VPC. The application servers and database servers are deployed in private subnets in the same VPC. The company has deployed a third-party virtual firewall appliance from AWS Marketplace in an inspection VPC. The appliance is configured with an IP interface that can accept IP packets. A solutions architect needs to integrate the web application with the appliance to inspect all traffic to the application before the traffic reaches the web server.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create a Network Load Balancer in the public subnet of the application's VPC to route the traffic to the appliance for packet inspection.
    • B. Create an Application Load Balancer in the public subnet of the application's VPC to route the traffic to the appliance for packet inspection.
    • C. Deploy a transit gateway in the inspection VPC. Configure route tables to route the incoming packets through the transit gateway.
    • D. Deploy a Gateway Load Balancer in the inspection VPC. Create a Gateway Load Balancer endpoint to receive the incoming packets and forward the packets to the appliance.

    View question →

45. Q45. Q175. A company recently launched a variety of new workloads on Amazon EC2 instances in its AWS account. The company needs to create a strategy to access and administer the instances remotely and securely The company needs to implement a repeatable process that works with native AWS services and follows the AWS Well-Architected Framework.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use the EC2 serial console to directly access the terminal interface of each instance for administration.
    • B. Attach the appropriate IAM role to each existing instance and new instance. Use AWS Systems Manager Session Manager to establish a remote SSH session.
    • C. Create an administrative SSH key pair. Load the public key into each EC2 instance. Deploy a bastion host in a public subnet to provide a tunnel for administration of each instance.
    • D. Establish an AWS Site-to-Site VPN connection. Instruct administrators to use their local on-premises machines to connect directly to the instances by using SSH keys across the VPN tunnel.

    View question →

46. Q46. Q176. A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3. The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard. The solution must not affect the speed of EC2 instance launches. How should the company move the data to Amazon S3 to meet these requirements?

    • A. Use an Amazon CloudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose. Store the data in Amazon S3
    • B. Launch an Amazon EMR cluster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.
    • C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a schedule. Configure the Lambda function to send the EC2Auto Scaling status data directly to Amazon S3
    • D. Use a bootstrap script during the launch of an EC2 instance to install Amazon Kinesis Agent. Configure Kinesis Agent to collect the EC2Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.

    View question →

47. Q47. Q177. A company uses a popular content management system (CMS) for its corporate website. However, the required patching and maintenance are burdensome.The company is redesigning its website and wants a new solution. The website will be updated four times a year and does not need to have any dynamic content available. The solution must provide high scalability and enhanced security. Which combination of changes will meet these requirements with the LEAST operational overhead? (Select TWO.)

    • A. Configure Amazon CloudFront in front of the website to use HTTPS functionality.
    • B. Deploy an AWS WAF web ACL in front of the website to provide HTTPS functionality.
    • C. Create and deploy an AWS Lambda function to manage and serve the website content.
    • D. Create the new website and an Amazon S3 bucket. Deploy the website on the S3 bucket with static website hosting enabled.
    • E. Create the new website. Deploy the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer.

    View question →

48. Q48. Q178. A company is building a containerized application on premises and decides to move the application to AWS. The application will have thousands of users soonafter it is deployed. The company is unsure how to manage the deployment of containers at scale. The company needs to deploy the containerized application ina highly available architecture that minimizes operational overhead.Which solution will meet these requirements?

    • A. Store container images in an Amazon Elastic Container Registry (Amazon ECR) repository. Use an Amazon Elastic Container Service (Amazon ECS) cluster with the AWS Fargate launch type to run the containers. Use target tracking to scale automatically based on demand.
    • B. Store container images in an Amazon Elastic Container Registry (Amazon ECR) repository. Use an Amazon Elastic Container Service (Amazon ECS) cluster with the Amazon EC2 launch type to run the containers. Use target tracking to scale automatically based on demand.
    • C. Store container images in a repository that runs on an Amazon EC2 instance. Run the containers on EC2instances that are spread across multiple Availability Zones. Monitor the average CPU utilization in Amazon CloudWatch. Launch new EC2 instances as needed.
    • D. Create an Amazon EC2 Amazon Machine Image (AMI) that contains the container image. Launch EC2instances in an Auto Scaling group across multiple Availability Zones. Use an Amazon CloudWatch alarm to scale out EC2 instances when the average CPU utilization threshold is breached.

    View question →

49. Q49. Q179. A company is running a business-citical web application on Amazon EC2 instances behind an Application Load Balancer. The EC2instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database that is deployed in a single Availability Zone. The company wants the application to be highly available with minimum downtime and minimum loss of data. Which solution will meet these requirements with the LEAST operational effort?

    • A. Place the EC2 instances in different AWS Regions. Use Amazon Route 53 health checks to redirect traffic Use Aurora PostgreSQL Cross-Region Replication.
    • B. Configure the Auto Scaling group to use multiple Availability Zones. Configure the database as Multi-AZ.Configure an Amazon RDS Proxy instance for the database.
    • C. Configure the Auto Scaling group to use one Availability Zone. Generate hourly snapshots of the database. Recover the database from the snapshots in the event of a failure.
    • D. Configure the Auto Scaling group to use multiple AWS Regions. Write the data from the application to Amazon S3. Use S3Event Notifications to launch an AWS Lambda function to write the data to the database.

    View question →

50. Q50. Q180. A company is migrating its on-premises PostgreSQL database to Amazon Aurora PostgreSQL. The on- premises database must remain online and accessible during the migration. The Aurora database must remain synchronized with the on-premises database.Which combination of actions must a solutions architect take to meet these requirements? (Select TWO.)

    • A. Create an ongoing replication task.
    • B. Create a database backup of the on-premises database.
    • C. Create an AWS Database Migration Service (AWS DMS) replication server.
    • D. Convert the database schema by using the AWS Schema Conversion Tool (AWS SCT)
    • E. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor the database synchronization.

    View question →

51. Q51. Q181. A company is developing an ecommerce application that will consist of a load-balanced front end, a container-based application, and a relational database.A solutions architect needs to create a highly available solution that operates with as little manual intervention as possible.Which solutions meet these requirements? (Select TWO.)

    • A. Create an Amazon RDS DB instance in Multi-AZ mode.
    • B. Create an Amazon RDS DB instance and one or more replicas in another Availability Zone.
    • C. Create an Amazon EC2 instance-based Docker cluster to handle the dynamic application load.
    • D. Create an Amazon Elastic Container Service (Amazon ECS) cluster with a Fargate launch type to handle the dynamic application load.
    • E. Create an Amazon Elastic Container Service (Amazon ECS) cluster with an Amazon EC2 launch type to handle the dynamic application load.

    View question →

52. Q52. Q182. A solutions architect is designing the architecture of a new application being deployed to the AWS Cloud. The application will run on Amazon EC2 On-Demand Instances and will automatically scale across multiple Availability Zones. The EC2 instances will scale up and down frequently throughout the day. An Application Load Balancer (ALB) will handle the load distribution. The architecture needs to support distributed session data management. The company is willing to make changes to code if needed. What should the solutions architect do to ensure that the architecture supports distributed session data management?

    • A. Use Amazon ElastiCache to manage and store session data.
    • B. Use session affinity (sticky sessions) of the ALB to manage session data.
    • C. Use Session Manager from AWS Systems Manager to manage the session.
    • D. Use the GetSessionToken APl operation in AWS Security Token Service (AWS STS) to manage the session.

    View question →

53. Q53. Q183. A company uses a three-tier web application to provide training to new employees. The application is accessed for only 12 hours every day. The company is using an Amazon RDS for MySQL DB instance to store information and wants to minimize costs.What should a solutions architect do to meet these requirements?

    • A. Configure an IAM policy for AWS Systems Manager Session Manager. Create an IAM role for the policy. Update the trust relationship of the role. Set up automatic start and stop for the DB instance.
    • B. Create an Amazon ElastiCache for Redis cache cluster that gives users the ability to access the data from the cache when the DB instance is stopped. Invalidate the cache after the DB instance is started.
    • C. Launch an Amazon EC2 instance. Create an IAM role that grants access to Amazon RDS. Attach the role to the EC2 instance. Configure a cron job to start and stop the EC2 instance on the desired schedule.
    • D. Create AWS Lambda functions to start and stop the DB instance. Create Amazon EventBridge (Amazon CloudWatch Events) scheduled rules to invoke the Lambda functions. Configure the Lambda functions as event targets for the rules.

    View question →

54. Q54. Q184. A company needs to save the results from a medical trial to an Amazon S3 repository. The repository must allow a few scientists to add new files and must restrict all other users to read-only access.No users can have the ability to modify or delete any files in the repository. The company must keep every file in the repository fora minimum of 1 year after its creation date.Which solution will meet these requirements?

    • A. Use S3 Object Lock in governance mode with a legal hold of 1 year.
    • B. Use S3 Object Lock in compliance mode with a retention period of 365 days.
    • C. Use an IAM role to restrict all users from deleting or changing objects in the S3 bucket. Use an S3 bucket policy to only allow the IAM role.
    • D. Configure the S3 bucket to invoke an AWS Lambda function every time an object is added. Configure the function to track the hash of the saved object so that modified objects can be marked accordingly.

    View question →

55. Q55. Q185. A company is migrating an application from on-premises servers to Amazon EC2instances. As part of the migration design requirements, a solutions architect must implement infrastructure metric alarms. The company does not need to take action if CPU utilization increases to more than 50% for a short burst of time. However, if the CPU utilization increases to more than 50% and read IOPS on the disk are high at the same time, the company needs to act as soon as possible. The solutions architect also must reduce false alarms.What should the solutions architect do to meet these requirements?

    • A. Create Amazon CloudWatch composite alarms where possible.
    • B. Create Amazon CloudWatch dashboards to visualize the metrics and react to issues quickly.
    • C. Create Amazon CloudWatch Synthetics canaries to monitor the application and raise an alarm.
    • D. Create single Amazon CloudWatch metric alarms with multiple metric thresholds where possible.

    View question →

56. Q56. Q186. A solutions architect needs to securely store a database user name and password that an application uses to access an Amazon RDS DB instance. The application that accesses the database runs on an Amazon EC2 instance. The solutions architect wants to create a secure parameter in AWS Systems Manager Parameter Store.What should the solutions architect do to meet this requirement?

    • A. Create an IAM role that has read access to the Parameter Store parameter. Allow Decrypt access to an AWS Key Management Service (AWS KMS) key that is used to encrypt the parameter.Assign this IAM role to the EC2 instance.
    • B. Create an IAM policy that allows read access to the Parameter Store parameter. Allow Decrypt access to an AWS Key Management Service (AWS KMS) key that is used to encrypt the parameter.Assign this IAM policy to the EC2 instance.
    • C. Create an IAM trust relationship between the Parameter Store parameter and the EC2 instance. Specify Amazon RDS as a principal in the trust policy.
    • D. Create an IAM trust relationship between the DB instance and the EC2 instance. Specify Systems Manager as a principal in the trust policy

    View question →

57. Q57. Q187. A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance. The analytics software is written in PHP and uses a MySQL database. The analytics software, the web server that provides PHP, and the database server are all hosted on the EC2 instance. The application is showing signs of performance degradation during busy times and is presenting 5xx errors. The company needs to make the application scale seamlessly.Which solution will meet these requirements MOST cost-effectively?

    • A. Migrate the database to an Amazon RDS for MySQL DB instance. Create an AMI of the web application.Use the AMI to launch a second EC2 On-Demand Instance. Use an Application Load Balancer to distribute the load to each EC2 instance.
    • B. Migrate the database to an Amazon RDS for MySQL DB instance. Create an AMI of the web application.Use the AMI to launch a second EC2 On-Demand Instance. Use Amazon Route 53weighted routing to distribute the load across the two EC2 instances.
    • C. Migrate the database to an Amazon Aurora MySQL DB instance. Create an AWS Lambda function to stop the EC2 instance and change the instance type. Create an Amazon CloudWatch alarm to invoke the Lambda function when CPU utilization surpasses 75%.
    • D. Migrate the database to an Amazon Aurora MySQL DB instance. Create an AMI of the web application.Apply the AMI to a launch template. Create an Auto Scaling group with the launch template.Configure the launch template to use a Spot Fleet. Attach an Application Load Balancer to the Auto Scaling group.

    View question →

58. Q58. Q188. An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about 300 MB of data each month. The data is stored in JSON format. The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.Which solution meets these requirements MOST cost-effectively?

    • A. Amazon OpenSearch Service (Amazon Elasticsearch Service)
    • B. Amazon S3 Glacier
    • C. Amazon S3 Standard
    • D. Amazon RDS for PostgreSQL

    View question →

59. Q59. Q189. A company runs workloads on AWS. The company needs to connect to a service from an external provider. The service is hosted in the provider's VPC. According to the company's security team, the connectivity must be private and must be restricted to the target service. The connection must be initiated only from the company's VPC.Which solution will meet these requirements?

    • A. Create a VPC peering connection between the company's VPC and the provider's VPC. Update the route table to connect to the target service.
    • B. Ask the provider to create a virtual private gateway in its VPC. Use AWS Privatelink to connect to the target service.
    • C. Create a NAT gateway in a public subnet of the company's VPC. Update the route table to connect to the target service.
    • D. Ask the provider to create a VPC endpoint for the target service. Use AWS PrivateLink to connect to the target service.

    View question →

60. Q60. Q190. A company has created an image analysis application in which users can upload photos and add photo frames to their images. The users upload images and metadata to indicate which photo frames they want to add to their images. The application uses a single Amazon EC2instance and Amazon DynamoDB to store the metadata.The application is becoming more popular, and the number of users is increasing. The company expects the number of concurrent users to vary significantly depending on the time of day and day of week. The company must ensure that the application can scale to meet the needs of the growing user base.Which solution meets these requirements?

    • A. Use AWS Lambda to process the photos. Store the photos and metadata in DynamoDB.
    • B. Use Amazon Kinesis Data Firehose to process the photos and to store the photos and metadata
    • C. Use AWS Lambda to process the photos. Store the photos in Amazon S3. Retain DynamoDB to store the metadata
    • D. increase the number of EC2 instances to three. Use Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volumes to store the photos and metadata

    View question →

61. Q61. Q191. A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis. Which solution will meet these requirements with the LEAST operational overhead?

    • A. Store the database credentials in the instance metadata. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and instance metadata at the same time.
    • B. Store the database credentials in a configuration file in an encrypted Amazon S3 bucket. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and the credentials in the configuration file at the same time. Use S3 Versioning to ensure the ability to fall back to previous values.
    • C. Store the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation for the secret. Attach the required permission to the EC2 role to grant access to the secret.
    • D. Store the database credentials as encrypted parameters in AWS Systems Manager Parameter Store.Turn on automatic rotation for the encrypted parameters. Attach the required permission to the EC2 role to grant access to the encrypted parameters.

    View question →

62. Q62. Q192. A company is planning to use an Amazon DynamoDB table for data storage. The company is concerned about cost optimization. The table will not be used on most mornings. In the evenings, the read and write traffic will often be unpredictable. When traffic spikes occur, they will happen very quickly.What should a solutions architect recommend?

    • A. Create a DynamoDB table in on-demand capacity mode.
    • B. Create a DynamoDB table with a global secondary index.
    • C. Create a DynamoDB table with provisioned capacity and auto scaling.
    • D. Create a DynamoDB table in provisioned capacity mode, and configure it as a global table.

    View question →

63. Q63. Q193. A company runs an application on Amazon EC2 instances. The company needs to implement a disaster recovery (DR) solution for the application. The DR solution needs to have a recovery time objective (RTO) of less than 4 hours. The DR solution also needs to use the fewest possible AWS resources during normal operations.Which solution will meet these requirements in the MOST operationally efficient way?

    • A. Create Amazon Machine Images (AMIs) to back up the EC2 instances. Copy the AMIS to a secondary AWS Region.Automate infrastructure deployment in the secondary Region by using AWS Lambda and custom scripts.
    • B. Create Amazon Machine Images (AMIs) to back up the EC2 instances. Copy the AMIs to a secondary AWS Region. Automate infrastructure deployment in the secondary Region by using AWS CloudFormation.
    • C. Launch EC2 instances in a secondary AWS Region. Keep the EC2 instances in the secondary Region active at all times.
    • D. Launch EC2 instances in a secondary Availability Zone. Keep the EC2 instances in the secondary Availability Zone active a tall times.

    View question →

64. Q64. Q194. A telemarketing company is designing its customer call center functionality on AWS. The company needs a solution that provides multiple speaker recognition and generates transcript files. The company wants to query the transcript files to analyze the business patterns. The transcript files must be stored for 7 years for auditing purposes.Which solution will meet these requirements?

    • A. Use Amazon Rekognition for multiple speaker recognition. Store the transcript files in Amazon S3. Use machine learning models for transcript file analysis.
    • B. Use Amazon Transcribe for multiple speaker recognition. Use Amazon Athena for transcript file analysis.
    • C. Use Amazon Translate for multiple speaker recognition. Store the transcript files in Amazon Redshift Use SQL queries for transcript file analysis
    • D. Use Amazon Rekognition for multiple speaker recognition. Store the transcript files in Amazon S3. Use Amazon Textract for transcript file analysis.

    View question →

65. Q65. Q195. A company wants to manage Amazon Machine Images (AMIS). The company currently copies AMIs to the same AWS Region where the AMIS were created. The company needs to design an application that captures AWS API calls and sends alerts whenever the Amazon EC2 CreateImage API operation is called within the company's account.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create an AWS Lambda function to query AWS CloudTrail logs and to send an alert when a CreateImage API call is detected.
    • B. Configure AWS CloudTrail with an Amazon Simple Notification Service (Amazon SNS) notification that occurs when updated logs are sent to Amazon S3. Use Amazon Athena to create a new table and to query on CreateImage when an API call is detected.
    • C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule for the CreateImage API cal.Configure the target as an Amazon Simple Notification Service (Amazon SNS) topic to send an alert when a CreateImage API call is detected.
    • D. Configure an Amazon Simple Queue Service (Amazon SQS) FIFO queue as a target for AWS CloudTrail logs. Create an AWS Lambda function to send an alert to an Amazon Simple Notification Service (Amazon SNS) topic when a CreateImage API call is detected.

    View question →