AWS SAA-C03 Chapter 7 Practice Questions (65 Questions)

Practice questions for the AWS SAA-C03 (Solutions Architect Associate) exam, Chapter 7.

1. Q1. Q431. A company is concerned that two NAT instances in use will no longer be able to support the traffic needed for the company application. A solutions architect wants to implement a solution that is highly available, fault tolerant, and automatically scalable.What should the solutions architect recommend?

   • A. Remove the two NAT instances and replace them with two NAT gateways in the same Availability Zone.
   • B. Use Auto Scaling groups with Network Load Balancers for the NAT instances in different Availability Zones.
   • C. Remove the two NAT instances and replace them with two NAT gateways in different Availability Zones.
   • D. Replace the two NAT instances with Spot Instances in different Availability Zones and deploy a Network Load Balancer.

   View question →

2. Q2. Q432. An application runs on an Amazon EC2 instance that has an Elastic IP address in VPC A. The application requires access to a database in VPC B. Both VPCs are in the same AWS account.Which solution will provide the required access MOST securely?

   • A. Create a DB instance security group that allows all traffic from the public IP address of the application server in VPC A.
   • B. Configure a VPC peering connection between VPC A and VPC B.
   • C. Make the DB instance publicly accessible. Assign a public IP address to the DB instance.
   • D. Launch an EC2 instance with an Elastic IP address into VPC B. Proxy all requests through the new EC2 instance.

   View question →

3. Q3. Q433. A company runs demonstration environments for its customers on Amazon EC2 instances. Each environment is isolated in its own VPC. The company operations team needs to be notified when RDP or SSH access to an environment has been established.

   • A. Configure Amazon CloudWatch Application Insights to create AWS Systems Manager OpsItems when RDP or SSH access is detected.
   • B. Configure the EC2 instances with an IAM instance profile that has an IAM role with the AmazonSSMManagedInstanceCore policy attached.
   • C. Publish VPC flow logs to Amazon CloudWatch Logs. Create required metric filters. Create an Amazon CloudWatch metric alarm with a notification action for when the alarm is in the ALARM state.
   • D. Configure an Amazon EventBridge rule to listen for events of type EC2 Instance State-change Notification. Configure an Amazon Simple Notification Service (Amazon SNS) topic as a target.Subscribe the operations team to the topic.

   View question →

4. Q4. Q434. A solutions architect has created a new AWS account and must secure AWS account root user access.Which combination of actions will accomplish this? (Choose two.)

   • A. Ensure the root user uses a strong password.
   • B. Enable multi-factor authentication to the root user.
   • C. Store root user access keys in an encrypted Amazon S3 bucket.
   • D. Add the root user to a group containing administrative permissions.
   • E. Apply the required permissions to the root user with an inline policy document.

   View question →

5. Q5. Q435. A company is moving its on-premises Oracle database to Amazon Aurora PostgreSQL. The database has several applications that write to the same tables. The applications need to be migrated one by one with a month in between each migration. Management has expressed concerns that the database has a high number of reads and writes. The data must be kept in sync across both databases throughout the migration.What should a solutions architect recommend?

   • A. Use AWS DataSync for the initial migration. Use AWS Database Migration Service (AWS DMS) to create a change data capture (CDC) replication task and a table mapping to select all tables.
   • B. Use AWS DataSync for the initial migration. Use AWS Database Migration Service (AWS DMS) to create a full load plus change data capture (CDC) replication task and a table mapping to select all tables.
   • C. Use the AWS Schema Conversion Tool with AWS Database Migration Service (AWS DMS) using a memory optimized replication instance. Create a full load plus change data capture (CDC) replication task and a table mapping to select all tables.
   • D. Use the AWS Schema Conversion Tool with AWS Database Migration Service (AWS DMS) using a compute optimized replication instance. Create a full load plus change data capture (CDC) replication task and a table mapping to select the largest tables.

   View question →

6. Q6. Q436. A company has a three-tier application for image sharing. The application uses an Amazon EC2 instance for the front-end layer, another EC2 instance for the application layer, and a third EC2 instance for a MySQL database. A solutions architect must design a scalable and highly available solution that requires the least amount of change to the application.Which solution meets these requirements?

   • A. Use Amazon S3 to host the front-end layer. Use AWS Lambda functions for the application layer. Move the database to an Amazon DynamoDB table. Use Amazon S3 to store and serve users?images.
   • B. Use load-balanced Multi-AZ AWS Elastic Beanstalk environments for the front-end layer and the application layer. Move the database to an Amazon RDS DB instance with multiple read replicas to serve users?images.
   • C. Use Amazon S3 to host the front-end layer. Use a fleet of EC2 instances in an Auto Scaling group for the application layer. Move the database to a memory optimized instance type to store and serve users ?images.
   • D. Use load-balanced Multi-AZ AWS Elastic Beanstalk environments for the front-end layer and the application layer. Move the database to an Amazon RDS Multi-AZ DB instance. Use Amazon S3 to store and serve users?images.

   View question →

7. Q7. Q437. An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B. Both VPCs are in separate AWS accounts. The network administrator needs to design a solution to configure secure access to EC2 instance in VPC-B from VPC-A. The connectivity should not have a single point of failure or bandwidth concerns.Which solution will meet these requirements?

   • A. Set up a VPC peering connection between VPC-A and VPC-B.
   • B. Set up VPC gateway endpoints for the EC2 instance running in VPC-B.
   • C. Attach a virtual private gateway to VPC-B and set up routing from VPC-A.
   • D. Create a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-A.

   View question →

8. Q8. Q438. A company wants to experiment with individual AWS accounts for its engineer team. The company wants to be notified as soon as the Amazon EC2 instance usage for a given month exceeds a specific threshold for each account.What should a solutions architect do to meet this requirement MOST cost-effectively?

   • A. Use Cost Explorer to create a daily report of costs by service. Filter the report by EC2 instances.Configure Cost Explorer to send an Amazon Simple Email Service (Amazon SES) notification when a threshold is exceeded.
   • B. Use Cost Explorer to create a monthly report of costs by service. Filter the report by EC2 instances.Configure Cost Explorer to send an Amazon Simple Email Service (Amazon SES) notification when a threshold is exceeded.
   • C. Use AWS Budgets to create a cost budget for each account. Set the period to monthly. Set the scope to EC2 instances. Set an alert threshold for the budget. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive a notification when a threshold is exceeded.
   • D. Use AWS Cost and Usage Reports to create a report with hourly granularity. Integrate the report data with Amazon Athena. Use Amazon EventBridge to schedule an Athena query. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive a notification when a threshold is exceeded.

   View question →

9. Q9. Q439. A company previously migrated its data warehouse solution to AWS. The company also has an AWS Direct Connect connection. Corporate office users query the data warehouse using a visualization tool. The average size of a query returned by the data warehouse is 50 MB and each webpage sent by the visualization tool is approximately 500 KB. Result sets returned by the data warehouse are not cached.Which solution provides the LOWEST data transfer egress cost for the company?

   • A. Host the visualization tool on premises and query the data warehouse directly over the internet.
   • B. Host the visualization tool in the same AWS Region as the data warehouse. Access it over the internet.
   • C. Host the visualization tool on premises and query the data warehouse directly over a Direct Connect connection at a location in the same AWS Region.
   • D. Host the visualization tool in the same AWS Region as the data warehouse and access it over a Direct Connect connection at a location in the same Region.

   View question →

10. Q10. Q440. An online learning company is migrating to the AWS Cloud. The company maintains its student records in a PostgreSQL database. The company needs a solution in which its data is available and online across multiple AWS Regions at all times.Which solution will meet these requirements with the LEAST amount of operational overhead?

    • A. Migrate the PostgreSQL database to a PostgreSQL cluster on Amazon EC2 instances.
    • B. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance with the Multi-AZ feature turned on.
    • C. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Create a read replica in another Region.
    • D. Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Set up DB snapshots to be copied to another Region.

    View question →

11. Q11. Q441. A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries.Which policy should be used to meet this requirement?

    • A. Simple routing policy
    • B. Latency routing policy
    • C. Multivalue routing policy
    • D. Geolocation routing policy

    View question →

12. Q12. Q442. A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimum latency to clinics across the country for their on-premises, file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic.What should a solutions architect recommend to meet these requirements?

    • A. Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic
    • B. Migrate the files to each clinic on-premises applications by using AWS DataSync for processing.
    • C. Deploy an AWS Storage Gateway volume gateway as a virtual machine (VM) on premises at each clinic.
    • D. Attach an Amazon Elastic File System (Amazon EFS) file system to each clinic on-premises servers.

    View question →

13. Q13. Q443. A company is using a content management system that runs on a single Amazon EC2 instance. The EC2 instance contains both the web server and the database software. The company must make its website platform highly available and must enable the website to scale to meet user demand.What should a solutions architect recommend to meet these requirements?

    • A. Move the database to Amazon RDS, and enable automatic backups. Manually launch another EC2 instance in the same Availability Zone. Configure an Application Load Balancer in the Availability Zone, and set the two instances as targets.
    • B. Migrate the database to an Amazon Aurora instance with a read replica in the same Availability Zone as the existing EC2 instance. Manually launch another EC2 instance in the same Availability Zone.Configure an Application Load Balancer, and set the two EC2 instances as targets.
    • C. Move the database to Amazon Aurora with a read replica in another Availability Zone. Create an Amazon Machine Image (AMI) from the EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach an Auto Scaling group that uses the AMI across two Availability Zones.
    • D. Move the database to a separate EC2 instance, and schedule backups to Amazon S3. Create an Amazon Machine Image (AMI) from the original EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach an Auto Scaling group that uses the AMI across two Availability Zones.

    View question →

14. Q14. Q444. A company is launching an application on AWS. The application uses an Application Load Balancer (ALB) to direct traffic to at least two Amazon EC2 instances in a single target group. The instances are in an Auto Scaling group for each environment. The company requires a development environment and a production environment. The production environment will have periods of high traffic.Which solution will configure the development environment MOST cost-effectively?

    • A. Reconfigure the target group in the development environment to have only one EC2 instance as a target.
    • B. Change the ALB balancing algorithm to least outstanding requests.
    • C. Reduce the size of the EC2 instances in both environments.
    • D. Reduce the maximum number of EC2 instances in the development environment Auto Scaling group.

    View question →

15. Q15. Q445. A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the internet traffic is not reaching the EC2 instances.How should the solutions architect reconfigure the architecture to resolve this issue?

    • A. Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.
    • B. Move the EC2 instances to public subnets. Add a rule to the EC2 instances?security groups to allow outbound traffic to 0.0.0.0/0.
    • C. Update the route tables for the EC2 instances?subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add a rule to the EC2 instances?security groups to allow outbound traffic to 0.0.0.0/0.
    • D. Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

    View question →

16. Q16. Q446. A company has deployed a database in Amazon RDS for MySQL. Due to increased transactions, the database support team is reporting slow reads against the DB instance and recommends adding a read replica.Which combination of actions should a solutions architect take before implementing this change? (Choose two.)

    • A. Enable binlog replication on the RDS primary node.
    • B. Choose a failover priority for the source DB instance.
    • C. Allow long-running transactions to complete on the source DB instance.
    • D. Create a global table and specify the AWS Regions where the table will be available.
    • E. Enable automatic backups on the source instance by setting the backup retention period to a value other than 0.

    View question →

17. Q17. Q447. A company runs analytics software on Amazon EC2 instances. The software accepts job requests from users to process data that has been uploaded to Amazon S3. Users report that some submitted data is not being processed Amazon CloudWatch reveals that the EC2 instances have a consistent CPU utilization at or near 100%. The company wants to improve system performance and scale the system based on user load.What should a solutions architect do to meet these requirements?

    • A. Create a copy of the instance. Place all instances behind an Application Load Balancer.
    • B. Create an S3 VPC endpoint for Amazon S3. Update the software to reference the endpoint.
    • C. Stop the EC2 instances. Modify the instance type to one with a more powerful CPU and more memory.Restart the instances.
    • D. Route incoming requests to Amazon Simple Queue Service (Amazon SQS). Configure an EC2 Auto Scaling group based on queue size. Update the software to read from the queue.

    View question →

18. Q18. Q448. A company security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently.What should a solutions architect do to meet these requirements when configuring the logs?

    • A. Use Amazon CloudWatch as the target. Set the CloudWatch log group with an expiration of 90 days
    • B. Use Amazon Kinesis as the target. Configure the Kinesis stream to always retain the logs for 90 days.
    • C. Use AWS CloudTrail as the target. Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering.
    • D. Use Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard- Infrequent Access (S3 Standard-IA) after 90 days.

    View question →

19. Q19. Q449. An Amazon EC2 instance is located in a private subnet in a new VPC. This subnet does not have outbound internet access, but the EC2 instance needs the ability to download monthly security updates from an outside vendor.What should a solutions architect do to meet these requirements?

    • A. Create an internet gateway, and attach it to the VPC. Configure the private subnet route table to use the internet gateway as the default route.
    • B. Create a NAT gateway, and place it in a public subnet. Configure the private subnet route table to use the NAT gateway as the default route.
    • C. Create a NAT instance, and place it in the same subnet where the EC2 instance is located. Configure the private subnet route table to use the NAT instance as the default route.
    • D. Create an internet gateway, and attach it to the VPC. Create a NAT instance, and place it in the same subnet where the EC2 instance is located. Configure the private subnet route table to use the internet gateway as the default route.

    View question →

20. Q20. Q450. A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time.The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy.Which solution meets these requirements?

    • A. Amazon Elastic File System (Amazon EFS)
    • B. Amazon Elastic Block Store (Amazon EBS)
    • C. Amazon S3 Glacier Deep Archive
    • D. AWS Backup

    View question →

21. Q21. Q451. A solutions architect has created two IAM policies: Policy1 and Policy2. Both policies are attached to an IAM group.A cloud engineer is added as an IAM user to the IAM group. Which action will the cloud engineer be able to perform?

    • A. Deleting IAM users
    • B. Deleting directories
    • C. Deleting Amazon EC2 instances
    • D. Deleting logs from Amazon CloudWatch Logs

    View question →

22. Q22. Q452. A company is reviewing a recent migration of a three-tier application to a VPC. The security team discovers that the principle of least privilege is not being applied to Amazon EC2 security group ingress and egress rules between the application tiers.What should a solutions architect do to correct this issue?

    • A. Create security group rules using the instance ID as the source or destination.
    • B. Create security group rules using the security group ID as the source or destination.
    • C. Create security group rules using the VPC CIDR blocks as the source or destination.
    • D. Create security group rules using the subnet CIDR blocks as the source or destination.

    View question →

23. Q23. Q453. A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to download, modify, and upload documents.Which combination of actions should be taken to meet these requirements? (Choose two.)

    • A. Enable a read-only bucket ACL.
    • B. Enable versioning on the bucket.
    • C. Attach an IAM policy to the bucket.
    • D. Enable MFA Delete on the bucket.
    • E. Encrypt the bucket using AWS KMS.

    View question →

24. Q24. Q454. A company is implementing new data retention policies for all databases that run on Amazon RDS DB instances. The company must retain daily backups for a minimum period of 2 years. The backups must be consistent and restorable.Which solution should a solutions architect recommend to meet these requirements?

    • A. Create a backup vault in AWS Backup to retain RDS backups. Create a new backup plan with a daily schedule and an expiration period of 2 years after creation. Assign the RDS DB instances to the backup plan.
    • B. Configure a backup window for the RDS DB instances for daily snapshots. Assign a snapshot retention policy of 2 years to each RDS DB instance. Use Amazon Data Lifecycle Manager (Amazon DLM) to schedule snapshot deletions.
    • C. Configure database transaction logs to be automatically backed up to Amazon CloudWatch Logs with an expiration period of 2 years.
    • D. Configure an AWS Database Migration Service (AWS DMS) replication task. Deploy a replication instance, and configure a change data capture (CDC) task to stream database changes to Amazon S3 as the target. Configure S3 Lifecycle policies to delete the snapshots after 2 years.

    View question →

25. Q25. Q455. A company compliance team needs to move its file shares to AWS. The shares run on a Windows Server SMB file share. A self-managed on-premises Active Directory controls access to the files and folders.The company wants to use Amazon FSx for Windows File Server as part of the solution. The company must ensure that the on-premises Active Directory groups restrict access to the FSx for Windows File Server SMB compliance shares, folders, and files after the move to AWS. The company has created an FSx for Windows File Server file system.Which solution will meet these requirements?

    • A. Create an Active Directory Connector to connect to the Active Directory. Map the Active Directory groups to IAM groups to restrict access.
    • B. Assign a tag with a Restrict tag key and a Compliance tag value. Map the Active Directory groups to IAM groups to restrict access.
    • C. Create an IAM service-linked role that is linked directly to FSx for Windows File Server to restrict access.
    • D. Join the file system to the Active Directory to restrict access.

    View question →

26. Q26. Q456. A company recently announced the deployment of its retail website to a global audience. The website runs on multiple Amazon EC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones.The company wants to provide its customers with different versions of content based on the devices that the customers use to access the website.Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

    • A. Configure Amazon CloudFront to cache multiple versions of the content.
    • B. Configure a host header in a Network Load Balancer to forward traffic to different instances.
    • C. Configure a Lambda@Edge function to send specific objects to users based on the User-Agent header.
    • D. Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up host-based routing to different EC2 instances.
    • E. Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up path-based routing to different EC2 instances.

    View question →

27. Q27. Q457. A company plans to use Amazon ElastiCache for its multi-tier web application. A solutions architect creates a Cache VPC for the ElastiCache cluster and an App VPC for the application Amazon EC2 instances.Both VPCs are in the us-east-1 Region.The solutions architect must implement a solution to provide the application EC2 instances with access to the ElastiCache cluster.Which solution will meet these requirements MOST cost-effectively?

    • A. Create a peering connection between the VPCs. Add a route table entry for the peering connection in both VPCs. Configure an inbound rule for the ElastiCache cluster security group to allow inbound connection from the application security group.
    • B. Create a Transit VPC. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VPC. Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application security group.
    • C. Create a peering connection between the VPCs. Add a route table entry for the peering connection in both VPCs. Configure an inbound rule for the peering connection security group to allow inbound connection from the application security group.
    • D. Create a Transit VPC. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VPC. Configure an inbound rule for the Transit VPC security group to allow inbound connection from the application security group.

    View question →

28. Q28. Q458. A company is building an application that consists of several microservices. The company has decided to use container technologies to deploy its software on AWS. The company needs a solution that minimizes the amount of ongoing effort for maintenance and scaling. The company cannot manage additional infrastructure.Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

    • A. Deploy an Amazon Elastic Container Service (Amazon ECS) cluster.
    • B. Deploy the Kubernetes control plane on Amazon EC2 instances that span multiple Availability Zones.
    • C. Deploy an Amazon Elastic Container Service (Amazon ECS) service with an Amazon EC2 launch type.Specify a desired task number level of greater than or equal to 2.
    • D. Deploy an Amazon Elastic Container Service (Amazon ECS) service with a Fargate launch type.Specify a desired task number level of greater than or equal to 2.
    • E. Deploy Kubernetes worker nodes on Amazon EC2 instances that span multiple Availability Zones.Create a deployment that specifies two or more replicas for each microservice.

    View question →

29. Q29. Q459. A company has a web application hosted over 10 Amazon EC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application. The networking team finds that some DNS queries return IP addresses of unhealthy instances, resulting in the timeout error.What should a solutions architect implement to overcome these timeout errors?

    • A. Create a Route 53 simple routing policy record for each EC2 instance. Associate a health check with each record.
    • B. Create a Route 53 failover routing policy record for each EC2 instance. Associate a health check with each record.
    • C. Create an Amazon CloudFront distribution with EC2 instances as its origin. Associate a health check with the EC2 instances.
    • D. Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances. Route to the ALB from Route 53.

    View question →

30. Q30. Q460. A solutions architect needs to design a highly available application consisting of web, application, and database tiers. HTTPS content delivery should be as close to the edge as possible, with the least delivery time.Which solution meets these requirements and is MOST secure?

    • A. Configure a public Application Load Balancer (ALB) with multiple redundant Amazon EC2 instances in public subnets. Configure Amazon CloudFront to deliver HTTPS content using the public ALB as the origin.
    • B. Configure a public Application Load Balancer with multiple redundant Amazon EC2 instances in private subnets. Configure Amazon CloudFront to deliver HTTPS content using the EC2 instances as the origin.
    • C. Configure a public Application Load Balancer (ALB) with multiple redundant Amazon EC2 instances in private subnets. Configure Amazon CloudFront to deliver HTTPS content using the public ALB as the origin.
    • D. Configure a public Application Load Balancer with multiple redundant Amazon EC2 instances in public subnets. Configure Amazon CloudFront to deliver HTTPS content using the EC2 instances as the origin.

    View question →

31. Q31. Q461. A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and introduce unfair advantages to some players. The application is deployed in every AWS Region. It runs on Amazon EC2 instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs). A solutions architect needs to implement a mechanism to monitor the health of the application and redirect traffic to healthy endpoints.Which solution meets these requirements?

    • A. Configure an accelerator in AWS Global Accelerator. Add a listener for the port that the application listens on, and attach it to a Regional endpoint in each Region. Add the ALB as the endpoint.
    • B. Create an Amazon CloudFront distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.
    • C. Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.
    • D. Configure an Amazon DynamoDB database to serve as the data store for the application. Create a DynamoDB Accelerator (DAX) cluster to act as the in-memory cache for DynamoDB hosting the application data.

    View question →

32. Q32. Q462. A company has one million users that use its mobile app. The company must analyze the data usage in near-real time. The company also must encrypt the data in near-real time and must store the data in a centralized location in Apache Parquet format for further processing.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data. Invoke an AWS Lambda function to send the data to the Kinesis Data Analytics application.
    • B. Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data. Invoke an AWS Lambda function to send the data to the EMR cluster.
    • C. Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data.
    • D. Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data.

    View question →

33. Q33. Q463. An ecommerce company has noticed performance degradation of its Amazon RDS based web application. The performance degradation is attributed to an increase in the number of read-only SQL queries triggered by business analysts. A solutions architect needs to solve the problem with minimal changes to the existing web application.What should the solutions architect recommend?

    • A. Export the data to Amazon DynamoDB and have the business analysts run their queries.
    • B. Load the data into Amazon ElastiCache and have the business analysts run their queries.
    • C. Create a read replica of the primary database and have the business analysts run their queries.
    • D. Copy the data into an Amazon Redshift cluster and have the business analysts run their queries.

    View question →

34. Q34. Q464. A company is using a centralized AWS account to store log data in various Amazon S3 buckets. A solutions architect needs to ensure that the data is encrypted at rest before the data is uploaded to the S3 buckets.The data also must be encrypted in transit.Which solution meets these requirements?

    • A. Use client-side encryption to encrypt the data that is being uploaded to the S3 buckets.
    • B. Use server-side encryption to encrypt the data that is being uploaded to the S3 buckets.
    • C. Create bucket policies that require the use of server-side encryption with S3 managed encryption keys (SSE-S3) for S3 uploads.
    • D. Enable the security option to encrypt the S3 buckets through the use of a default AWS Key Management Service (AWS KMS) key.

    View question →

35. Q35. Q465. A solutions architect observes that a nightly batch processing job is automatically scaled up for 1 hour before the desired Amazon EC2 capacity is reached. The peak capacity is the ame every night and the batch jobs always start at 1 AM. The solutions architect needs to find a cost-effective solution that will allow for the desired EC2 capacity to be reached quickly and allow the Auto Scaling group to scale down after the batch jobs are complete.What should the solutions architect do to meet these requirements?

    • A. Increase the minimum capacity for the Auto Scaling group.
    • B. Increase the maximum capacity for the Auto Scaling group.
    • C. Configure scheduled scaling to scale up to the desired compute level.
    • D. Change the scaling policy to add more EC2 instances during each scaling operation.

    View question →

36. Q36. Q466. A company runs an internal browser-based application. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight. Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.How should the scaling be changed to address the staff complaints and keep costs to a minimum?

    • A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens.
    • B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.
    • C. Implement a target tracking action triggered at a lower CPU threshold, and decrease the cooldown period.
    • D. Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens.

    View question →

37. Q37. Q467. A company has a multi-tier application deployed on several Amazon EC2 instances in an Auto Scaling group. An Amazon RDS for Oracle instance is the application?s data layer that uses Oracle-specific PL/ SQL functions. Traffic to the application has been steadily increasing. This is causing the EC2 instances to become overloaded and the RDS instance to run out of storage. The Auto Scaling group does not have any scaling metrics and defines the minimum healthy instance count only. The company predicts that traffic will continue to increase at a steady but unpredictable rate before leveling off.What should a solutions architect do to ensure the system can automatically scale for the increased traffic? (Choose two.)

    • A. Configure storage Auto Scaling on the RDS for Oracle instance.
    • B. Migrate the database to Amazon Aurora to use Auto Scaling storage.
    • C. Configure an alarm on the RDS for Oracle instance for low free storage space.
    • D. Configure the Auto Scaling group to use the average CPU as the scaling metric.
    • E. Configure the Auto Scaling group to use the average free memory as the scaling metric.

    View question →

38. Q38. Q468. A company provides an online service for posting video content and transcoding it for use by any mobile platform. The application architecture uses Amazon Elastic File System (Amazon EFS) Standard to collect and store the videos so that multiple Amazon EC2 Linux instances can access the video content for processing. As the popularity of the service has grown over time, the storage costs have become too expensive.Which storage solution is MOST cost-effective?

    • A. Use AWS Storage Gateway for files to store and process the video content.
    • B. Use AWS Storage Gateway for volumes to store and process the video content.
    • C. Use Amazon EFS for storing the video content. Once processing is complete, transfer the files to Amazon Elastic Block Store (Amazon EBS).
    • D. Use Amazon S3 for storing the video content. Move the files temporarily over to an Amazon Elastic Block Store (Amazon EBS) volume attached to the server for processing.

    View question →

39. Q39. Q469. A company wants to create an application to store employee data in a hierarchical structured relationship. The company needs a minimum-latency response to high-traffic queries for the employee data and must protect any sensitive data. The company also needs to receive monthly email messages if any financial information is present in the employee data.Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

    • A. Use Amazon Redshift to store the employee data in hierarchies. Unload the data to Amazon S3 every month.
    • B. Use Amazon DynamoDB to store the employee data in hierarchies. Export the data to Amazon S3 every month.
    • C. Configure Amazon Macie for the AWS account. Integrate Macie with Amazon EventBridge to send monthly events to AWS Lambda.
    • D. Use Amazon Athena to analyze the employee data in Amazon S3. Integrate Athena with Amazon QuickSight to publish analysis dashboards and share the dashboards with users.
    • E. Configure Amazon Macie for the AWS account. Integrate Macie with Amazon EventBridge to send monthly notifications through an Amazon Simple Notification Service (Amazon SNS) subscription.

    View question →

40. Q40. Q470. A company is using Amazon CloudFront with its website. The company has enabled logging on the CloudFront distribution, and logs are saved in one of the company Amazon S3 buckets. The company needs to perform advanced analyses on the logs and build visualizations.What should a solutions architect do to meet these requirements?

    • A. Use standard SQL queries in Amazon Athena to analyze the CloudFront logs in the S3 bucket.Visualize the results with AWS Glue.
    • B. Use standard SQL queries in Amazon Athena to analyze the CloudFront logs in the S3 bucket.Visualize the results with Amazon QuickSight.
    • C. Use standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs in the S3 bucket.Visualize the results with AWS Glue.
    • D. Use standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs in the S3 bucket.Visualize the results with Amazon QuickSight.

    View question →

41. Q41. Q471. A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, the company sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases.Which solution meets these requirements?

    • A. Enable a Multi-AZ deployment for the DB instance.
    • B. Enable auto scaling for the DB instance in one Availability Zone.
    • C. Configure the DB instance in one Availability Zone, and create multiple read replicas in a separate Availability Zone.
    • D. Configure the DB instance in one Availability Zone, and configure AWS Database Migration Service (AWS DMS) change data capture (CDC) tasks.

    View question →

42. Q42. Q472. A research company runs experiments that are powered by a simulation application and a visualization application. The simulation application runs on Linux and outputs intermediate data to an NFS share every 5 minutes. The visualization application is a Windows desktop application that displays the simulation output and requires an SMB file system.The company maintains two synchronized file systems. This strategy is causing data duplication and inefficient resource usage. The company needs to migrate the applications to AWS without making code changes to either application.Which solution will meet these requirements?

    • A. Migrate both applications to AWS Lambda. Create an Amazon S3 bucket to exchange data between the applications.
    • B. Migrate both applications to Amazon Elastic Container Service (Amazon ECS). Configure Amazon FSx File Gateway for storage.
    • C. Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon Simple Queue Service (Amazon SQS) to exchange data between the applications.
    • D. Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon FSx for NetApp ONTAP for storage.

    View question →

43. Q43. Q473. A company hosts its static website by using Amazon S3. The company wants to add a contact form to its webpage. The contact form will have dynamic server-side components for users to input their name, email address, phone number, and user message. The company anticipates that there will be fewer than 100 site visits each month.Which solution will meet these requirements MOST cost-effectively?

    • A. Host a dynamic contact form page in Amazon Elastic Container Service (Amazon ECS). Set up Amazon Simple Email Service (Amazon SES) to connect to any third-party email provider.
    • B. Create an Amazon API Gateway endpoint with an AWS Lambda backend that makes a call to Amazon Simple Email Service (Amazon SES).
    • C. Convert the static webpage to dynamic by deploying Amazon Lightsail. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.
    • D. Create a t2.micro Amazon EC2 instance. Deploy a LAMP (Linux, Apache, MySQL, PHP/Perl/Python) stack to host the webpage. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.

    View question →

44. Q44. Q474. A company has a static website that is hosted on Amazon CloudFront in front of Amazon S3. The static website uses a database backend. The company notices that the website does not reflect updates that have been made in the website Git repository. The company checks the continuous integration and continuous delivery (CI/CD) pipeline between the Git repository and Amazon S3. The company verifies that the webhooks are configured properly and that the CI/CD pipeline is sending messages that indicate successful deployments.A solutions architect needs to implement a solution that displays the updates on the website.Which solution will meet these requirements?

    • A. Add an Application Load Balancer.
    • B. Add Amazon ElastiCache for Redis or Memcached to the database layer of the web application.
    • C. Invalidate the CloudFront cache.
    • D. Use AWS Certificate Manager (ACM) to validate the website SSL certificate.

    View question →

45. Q45. Q475. A company wants to migrate a Windows-based application from on premises to the AWS Cloud. The application has three tiers: an application tier, a business tier, and a database tier with Microsoft SQL Server. The company wants to use specific features of SQL Server such as native backups and Data Quality Services. The company also needs to share files for processing between the tiers.How should a solutions architect design the architecture to meet these requirements?

    • A. Host all three tiers on Amazon EC2 instances. Use Amazon FSx File Gateway for file sharing between the tiers.
    • B. Host all three tiers on Amazon EC2 instances. Use Amazon FSx for Windows File Server for file sharing between the tiers.
    • C. Host the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use Amazon Elastic File System (Amazon EFS) for file sharing between the tiers.
    • D. Host the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume for file sharing between the tiers.

    View question →

46. Q46. Q476. A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application.What should a solutions architect do to meet these requirements?

    • A. Create an Amazon S3 Standard bucket with access to the web servers.
    • B. Configure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.
    • C. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.
    • D. Configure a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume to all web servers.

    View question →

47. Q47. Q477. A company hosts a web application on multiple Amazon EC2 instances. The EC2 instances are in an Auto Scaling group that scales in response to user demand. The company wants to optimize cost savings without making a long-term commitment.Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements?

    • A. Dedicated Instances only
    • B. On-Demand Instances only
    • C. A mix of On-Demand Instances and Spot Instances
    • D. A mix of On-Demand Instances and Reserved Instances

    View question →

48. Q48. Q478. A company has an on-premises volume backup solution that has reached its end of life. The company wants to use AWS as part of a new backup solution and wants to maintain local access to all the data while it is backed up on AWS. The company wants to ensure that the data backed up on AWS is automatically and securely transferred.Which solution meets these requirements?

    • A. Use AWS Snowball to migrate data out of the on-premises solution to Amazon S3. Configure on- premises systems to mount the Snowball S3 endpoint to provide local access to the data.
    • B. Use AWS Snowball Edge to migrate data out of the on-premises solution to Amazon S3. Use the Snowball Edge file interface to provide on-premises systems with local access to the data.
    • C. Use AWS Storage Gateway and configure a cached volume gateway. Run the Storage Gateway software appliance on premises and configure a percentage of data to cache locally. Mount the gateway storage volumes to provide local access to the data.
    • D. Use AWS Storage Gateway and configure a stored volume gateway. Run the Storage Gateway software appliance on premises and map the gateway storage volumes to on-premises storage. Mount the gateway storage volumes to provide local access to the data.

    View question →

49. Q49. Q479. A development team has launched a new application that is hosted on Amazon EC2 instances inside a development VPC. A solutions architect needs to create a new VPC in the same account. The new VPC will be peered with the development VPC. The VPC CIDR block for the development VPC is 192.168.0.0/24. The solutions architect needs to create a CIDR block for the new VPC. The CIDR block must be valid for a VPC peering connection to the development VPC.What is the SMALLEST CIDR block that meets these requirements?

    • A. 10.0.1.0/32
    • B. 192.168.0.0/24
    • C. 192.168.1.0/32
    • D. 10.0.1.0/24

    View question →

50. Q50. Q480. A company is running a critical business application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances run in an Auto Scaling group and access an Amazon RDS DB instance.The design did not pass an operational review because the EC2 instances and the DB instance are all located in a single Availability Zone. A solutions architect must update the design to use a second Availability Zone.Which solution will make the application highly available?

    • A. Provision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance with connections to each network.
    • B. Provision two subnets that extend across both Availability Zones. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance with connections to each network.
    • C. Provision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment.
    • D. Provision a subnet that extends across both Availability Zones. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment.

    View question →

51. Q51. Q481. A research laboratory needs to process approximately 8 TB of data. The laboratory requires sub- millisecond latencies and a minimum throughput of 6 GBps for the storage subsystem. Hundreds of Amazon EC2 instances that run Amazon Linux will distribute and process the data.Which solution will meet the performance requirements?

    • A. Create an Amazon FSx for NetApp ONTAP file system. Sat each volume?tiering policy to ALL. Import the raw data into the file system. Mount the fila system on the EC2 instances.
    • B. Create an Amazon S3 bucket to store the raw data. Create an Amazon FSx for Lustre file system that uses persistent SSD storage. Select the option to import data from and export data to Amazon S3.Mount the file system on the EC2 instances.
    • C. Create an Amazon S3 bucket to store the raw data. Create an Amazon FSx for Lustre file system that uses persistent HDD storage. Select the option to import data from and export data to Amazon S3.Mount the file system on the EC2 instances.
    • D. Create an Amazon FSx for NetApp ONTAP file system. Set each volume tiering policy to NONE.Import the raw data into the file system. Mount the file system on the EC2 instances.

    View question →

52. Q52. Q482. A company needs to migrate a legacy application from an on-premises data center to the AWS Cloud because of hardware capacity constraints. The application runs 24 hours a day, 7 days a week. The application database storage continues to grow over time.What should a solutions architect do to meet these requirements MOST cost-effectively?

    • A. Migrate the application layer to Amazon EC2 Spot Instances. Migrate the data storage layer to Amazon S3.
    • B. Migrate the application layer to Amazon EC2 Reserved Instances. Migrate the data storage layer to Amazon RDS On-Demand Instances.
    • C. Migrate the application layer to Amazon EC2 Reserved Instances. Migrate the data storage layer to Amazon Aurora Reserved Instances.
    • D. Migrate the application layer to Amazon EC2 On-Demand Instances. Migrate the data storage layer to Amazon RDS Reserved Instances.

    View question →

53. Q53. Q483. A company is launching a new application deployed on an Amazon Elastic Container Service (Amazon ECS) cluster and is using the Fargate launch type for ECS tasks. The company is monitoring CPU and memory usage because it is expecting high traffic to the application upon its launch. However, the company wants to reduce costs when utilization decreases.What should a solutions architect recommend?

    • A. Use Amazon EC2 Auto Scaling to scale at certain periods based on previous traffic patterns.
    • B. Use an AWS Lambda function to scale Amazon ECS based on metric breaches that trigger an Amazon CloudWatch alarm.
    • C. Use Amazon EC2 Auto Scaling with simple scaling policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm.
    • D. Use AWS Application Auto Scaling with target tracking policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm.

    View question →

54. Q54. Q484. A company recently created a disaster recovery site in a different AWS Region. The company needs to transfer large amounts of data back and forth between NFS file systems in the two Regions on a periodic basis.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use AWS DataSync.
    • B. Use AWS Snowball devices.
    • C. Set up an SFTP server on Amazon EC2.
    • D. Use AWS Database Migration Service (AWS DMS).

    View question →

55. Q55. Q485. A company wants to run an in-memory database for a latency-sensitive application that runs on Amazon EC2 instances. The application processes more than 100,000 transactions each minute and requires high network throughput. A solutions architect needs to provide a cost-effective network design that minimizes data transfer charges.Which solution meets these requirements?

    • A. Launch all EC2 instances in the same Availability Zone within the same AWS Region. Specify a placement group with cluster strategy when launching EC2 instances.
    • B. Launch all EC2 instances in different Availability Zones within the same AWS Region. Specify a placement group with partition strategy when launching EC2 instances.
    • C. Deploy an Auto Scaling group to launch EC2 instances in different Availability Zones based on a network utilization target.
    • D. Deploy an Auto Scaling group with a step scaling policy to launch EC2 instances in different Availability Zones.

    View question →

56. Q56. Q486. A company that primarily runs its application servers on premises has decided to migrate to AWS. The company wants to minimize its need to scale its Internet Small Computer Systems Interface (iSCSI) storage on premises. The company wants only its recently accessed data to remain stored locally.Which AWS solution should the company use to meet these requirements?

    • A. Amazon S3 File Gateway
    • B. AWS Storage Gateway Tape Gateway
    • C. AWS Storage Gateway Volume Gateway stored volumes
    • D. AWS Storage Gateway Volume Gateway cached volumes

    View question →

57. Q57. Q487. A company has multiple AWS accounts that use consolidated billing. The company runs several active high performance Amazon RDS for Oracle On-Demand DB instances for 90 days. The company finance team has access to AWS Trusted Advisor in the consolidated billing account and all other AWS accounts.The finance team needs to use the appropriate AWS account to access the Trusted Advisor check recommendations for RDS. The finance team must review the appropriate Trusted Advisor check to reduce RDS costs.Which combination of steps should the finance team take to meet these requirements? (Choose two.)

    • A. Use the Trusted Advisor recommendations from the account where the RDS instances are running.
    • B. Use the Trusted Advisor recommendations from the consolidated billing account to see all RDS instance checks at the same time.
    • C. Review the Trusted Advisor check for Amazon RDS Reserved Instance Optimization.
    • D. Review the Trusted Advisor check for Amazon RDS Idle DB Instances.
    • E. Review the Trusted Advisor check for Amazon Redshift Reserved Node Optimization.

    View question →

58. Q58. Q488. A solutions architect needs to optimize storage costs. The solutions architect must identify any Amazon S3 buckets that are no longer being accessed or are rarely accessed.Which solution will accomplish this goal with the LEAST operational overhead?

    • A. Analyze bucket access patterns by using the S3 Storage Lens dashboard for advanced activity metrics.
    • B. Analyze bucket access patterns by using the S3 dashboard in the AWS Management Console.
    • C. Turn on the Amazon CloudWatch BucketSizeBytes metric for buckets. Analyze bucket access patterns by using the metrics data with Amazon Athena.
    • D. Turn on AWS CloudTrail for S3 object monitoring. Analyze bucket access patterns by using CloudTrail logs that are integrated with Amazon CloudWatch Logs.

    View question →

59. Q59. Q489. A company sells datasets to customers who do research in artificial intelligence and machine learning (AI/ ML). The datasets are large, formatted files that are stored in an Amazon S3 bucket in the us-east-1 Region. The company hosts a web application that the customers use to purchase access to a given dataset. The web application is deployed on multiple Amazon EC2 instances behind an Application Load Balancer. After a purchase is made, customers receive an S3 signed URL that allows access to the files.The customers are distributed across North America and Europe. The company wants to reduce the cost that is associated with data transfers and wants to maintain or improve performance.What should a solutions architect do to meet these requirements?

    • A. Configure S3 Transfer Acceleration on the existing S3 bucket. Direct customer requests to the S3 Transfer Acceleration endpoint. Continue to use S3 signed URLs for access control.
    • B. Deploy an Amazon CloudFront distribution with the existing S3 bucket as the origin. Direct customer requests to the CloudFront URL. Switch to CloudFront signed URLs for access control.
    • C. Set up a second S3 bucket in the eu-central-1 Region with S3 Cross-Region Replication between the buckets. Direct customer requests to the closest Region. Continue to use S3 signed URLs for access control.
    • D. Modify the web application to enable streaming of the datasets to end users. Configure the web application to read the data from the existing S3 bucket. Implement access control directly in the application.

    View question →

60. Q60. Q490. A company is using AWS to design a web application that will process insurance quotes. Users will request quotes from the application. Quotes must be separated by quote type, must be responded to within 24 hours, and must not get lost. The solution must maximize operational efficiency and must minimize maintenance.Which solution meets these requirements?

    • A. Create multiple Amazon Kinesis data streams based on the quote type. Configure the web application to send messages to the proper data stream. Configure each backend group of application servers to use the Kinesis Client Library (KCL) to pool messages from its own data stream.
    • B. Create an AWS Lambda function and an Amazon Simple Notification Service (Amazon SNS) topic for each quote type. Subscribe the Lambda function to its associated SNS topic. Configure the application to publish requests for quotes to the appropriate SNS topic.
    • C. Create a single Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic. Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type. Configure each backend application server to use its own SQS queue.
    • D. Create multiple Amazon Kinesis Data Firehose delivery streams based on the quote type to deliver data streams to an Amazon OpenSearch Service cluster. Configure the application to send messages to the proper delivery stream. Configure each backend group of application servers to search for the messages from OpenSearch Service and process them accordingly.

    View question →

61. Q61. Q491. A company has an application that runs on several Amazon EC2 instances. Each EC2 instance has multiple Amazon Elastic Block Store (Amazon EBS) data volumes attached to it. The application EC2 instance configuration and data need to be backed up nightly. The application also needs to be recoverable in a different AWS Region.Which solution will meet these requirements in the MOST operationally efficient way?

    • A. Write an AWS Lambda function that schedules nightly snapshots of the application EBS volumes and copies the snapshots to a different Region.
    • B. Create a backup plan by using AWS Backup to perform nightly backups. Copy the backups to another Region. Add the application EC2 instances as resources.
    • C. Create a backup plan by using AWS Backup to perform nightly backups. Copy the backups to another Region. Add the application EBS volumes as resources.
    • D. Write an AWS Lambda function that schedules nightly snapshots of the application's EBS volumes and copies the snapshots to a different Availability Zone.

    View question →

62. Q62. Q492. A company is building a mobile app on AWS. The company wants to expand its reach to millions of users. The company needs to build a platform so that authorized users can watch the company content on their mobile devices.What should a solutions architect recommend to meet these requirements?

    • A. Publish content to a public Amazon S3 bucket. Use AWS Key Management Service (AWS KMS) keys to stream content.
    • B. Set up IPsec VPN between the mobile app and the AWS environment to stream content.
    • C. Use Amazon CloudFront. Provide signed URLs to stream content.
    • D. Set up AWS Client VPN between the mobile app and the AWS environment to stream content.

    View question →

63. Q63. Q493. A company has an on-premises MySQL database used by the global sales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrator wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users in the future.Which service should a solutions architect recommend?

    • A. Amazon Aurora MySQL
    • B. Amazon Aurora Serverless for MySQL
    • C. Amazon Redshift Spectrum
    • D. Amazon RDS for MySQL

    View question →

64. Q64. Q494. A company experienced a breach that affected several applications in its on-premises data center. The attacker took advantage of vulnerabilities in the custom applications that were running on the servers. The company is now migrating its applications to run on Amazon EC2 instances. The company wants to implement a solution that actively scans for vulnerabilities on the EC2 instances and sends a report that details the findings.Which solution will meet these requirements?

    • A. Deploy AWS Shield to scan the EC2 instances for vulnerabilities. Create an AWS Lambda function to log any findings to AWS CloudTrail.
    • B. Deploy Amazon Macie and AWS Lambda functions to scan the EC2 instances for vulnerabilities. Log any findings to AWS CloudTrail.
    • C. Turn on Amazon GuardDuty. Deploy the GuardDuty agents to the EC2 instances. Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings.
    • D. Turn on Amazon Inspector. Deploy the Amazon Inspector agent to the EC2 instances. Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings.

    View question →

65. Q65. Q495. A company uses an Amazon EC2 instance to run a script to poll for and process messages in an Amazon Simple Queue Service (Amazon SQS) queue. The company wants to reduce operational costs while maintaining its ability to process a growing number of messages that are added to the queue.What should a solutions architect recommend to meet these requirements?

    • A. Increase the size of the EC2 instance to process messages faster.
    • B. Use Amazon EventBridge to turn off the EC2 instance when the instance is underutilized.
    • C. Migrate the script on the EC2 instance to an AWS Lambda function with the appropriate runtime.
    • D. Use AWS Systems Manager Run Command to run the script on demand.

    View question →