AWS SAA-C03 Chapter 8 Practice Questions (65 Questions)

Practice questions for the AWS SAA-C03 (Solutions Architect Associate) exam, Chapter 8.

1. Q1. Q496. A company recently migrated its entire IT environment to the AWS Cloud. The company discovers that users are provisioning oversized Amazon EC2 instances and modifying security group rules without using the appropriate change control process. A solutions architect must devise a strategy to track and audit these inventory and configuration changes.Which actions should the solutions architect take to meet these requirements? (Choose two.)

   • A. Enable AWS CloudTrail and use it for auditing.
   • B. Use data lifecycle policies for the Amazon EC2 instances.
   • C. Enable AWS Trusted Advisor and reference the security dashboard.
   • D. Enable AWS Config and create rules for auditing and compliance purposes.
   • E. Restore previous resource configurations with an AWS CloudFormation template.

   View question →

2. Q2. Q497. A company has hundreds of Amazon EC2 Linux-based instances in the AWS Cloud. Systems administrators have used shared SSH keys to manage the instances. After a recent audit, the company security team is mandating the removal of all shared keys. A solutions architect must design a solution that provides secure access to the EC2 instances.Which solution will meet this requirement with the LEAST amount of administrative overhead?

   • A. Use AWS Systems Manager Session Manager to connect to the EC2 instances.
   • B. Use AWS Security Token Service (AWS STS) to generate one-time SSH keys on demand.
   • C. Allow shared SSH access to a set of bastion instances. Configure all other instances to allow only SSH access from the bastion instances.
   • D. Use an Amazon Cognito custom authorizer to authenticate users. Invoke an AWS Lambda function to generate a temporary SSH key.

   View question →

3. Q3. Q498. A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources. The data is in JSON format and ingestion rates can be as high as 1 MB/s. When an EC2 instance is rebooted, the data in-flight is lost. The company data science team wants to query ingested data in near-real time.Which solution provides near-real-time data querying that is scalable with minimal data loss?

   • A. Publish data to Amazon Kinesis Data Streams, Use Kinesis Data Analytics to query the data.
   • B. Publish data to Amazon Kinesis Data Firehose with Amazon Redshift as the destination. Use Amazon Redshift to query the data.
   • C. Store ingested data in an EC2 instance store. Publish data to Amazon Kinesis Data Firehose with Amazon S3 as the destination. Use Amazon Athena to query the data.
   • D. Store ingested data in an Amazon Elastic Block Store (Amazon EBS) volume. Publish data to Amazon ElastiCache for Redis. Subscribe to the Redis channel to query the data.

   View question →

4. Q4. Q499. What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?

   • A. Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set.
   • B. Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set to private.
   • C. Update the bucket policy to deny if the PutObject does not have an aws:SecureTransport header set to true.
   • D. Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.

   View question →

5. Q5. Q500. A solutions architect is designing a multi-tier application for a company. The application's users upload images from a mobile device. The application generates a thumbnail of each image and returns a message to the user to confirm that the image was uploaded successfully.The thumbnail generation can take up to 60 seconds, but the company wants to provide a faster response time to its users to notify them that the original image was received. The solutions architect must design the application to asynchronously dispatch requests to the different application tiers.What should the solutions architect do to meet these requirements?

   • A. Write a custom AWS Lambda function to generate the thumbnail and alert the user. Use the image upload process as an event source to invoke the Lambda function.
   • B. Create an AWS Step Functions workflow. Configure Step Functions to handle the orchestration between the application tiers and alert the user when thumbnail generation is complete.
   • C. Create an Amazon Simple Queue Service (Amazon SQS) message queue. As images are uploaded, place a message on the SQS queue for thumbnail generation. Alert the user through an application message that the image was received.
   • D. Create Amazon Simple Notification Service (Amazon SNS) notification topics and subscriptions. Use one subscription with the application to generate the thumbnail after the image upload is complete. Use a second subscription to message the user's mobile app by way of a push notification after thumbnail generation is complete.

   View question →

6. Q6. Q501. A company facility has badge readers at every entrance throughout the building. When badges are scanned, the readers send a message over HTTPS to indicate who attempted to access that particular entrance.A solutions architect must design a system to process these messages from the sensors. The solution must be highly available, and the results must be made available for the company security team to analyze.Which system architecture should the solutions architect recommend?

   • A. Launch an Amazon EC2 instance to serve as the HTTPS endpoint and to process the messages.Configure the EC2 instance to save the results to an Amazon S3 bucket.
   • B. Create an HTTPS endpoint in Amazon API Gateway. Configure the API Gateway endpoint to invoke an AWS Lambda function to process the messages and save the results to an Amazon DynamoDB table.
   • C. Use Amazon Route 53 to direct incoming sensor messages to an AWS Lambda function. Configure the Lambda function to process the messages and save the results to an Amazon DynamoDB table.
   • D. Create a gateway VPC endpoint for Amazon S3. Configure a Site-to-Site VPN connection from the facility network to the VPC so that sensor data can be written directly to an S3 bucket by way of the VPC endpoint.

   View question →

7. Q7. Q502. An image hosting company uploads its large assets to Amazon S3 Standard buckets. The company uses multipart upload in parallel by using S3 APIs and overwrites if the same object is uploaded again. For the first 30 days after upload, the objects will be accessed frequently. The objects will be used less frequently after 30 days, but the access patterns for each object will be inconsistent. The company must optimize its S3 storage costs while maintaining high availability and resiliency of stored assets. Which combination of actions should a solutions architect recommend to meet these requirements? (Choose two.)

   • A. Move assets to S3 Intelligent-Tiering after 30 days.
   • B. Configure an S3 Lifecycle policy to clean up incomplete multipart uploads.
   • C. Configure an S3 Lifecycle policy to clean up expired object delete markers.
   • D. Move assets to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.
   • E. Move assets to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.

   View question →

8. Q8. Q503. A company is hosting a three-tier ecommerce application in the AWS Cloud. The company hosts the website on Amazon S3 and integrates the website with an API that handles sales requests. The company hosts the API on three Amazon EC2 instances behind an Application Load Balancer (ALB). The API consists of static and dynamic front-end content along with backend workers that process sales requests asynchronously.The company is expecting a significant and sudden increase in the number of sales requests during events for the launch of new products.What should a solutions architect recommend to ensure that all the requests are processed successfully?

   • A. Add an Amazon CloudFront distribution for the dynamic content. Increase the number of EC2 instances to handle the increase in traffic.
   • B. Add an Amazon CloudFront distribution for the static content. Place the EC2 instances in an Auto Scaling group to launch new instances based on network traffic.
   • C. Add an Amazon CloudFront distribution for the dynamic content. Add an Amazon ElastiCache instance in front of the ALB to reduce traffic for the API to handle.
   • D. Add an Amazon CloudFront distribution for the static content. Add an Amazon Simple Queue Service (Amazon SQS) queue to receive requests from the website for later processing by the EC2 instances.

   View question →

9. Q9. Q504. A security audit reveals that Amazon EC2 instances are not being patched regularly. A solutions architect needs to provide a solution that will run regular security scans across a large fleet of EC2 instances. The solution should also patch the EC2 instances on a regular schedule and provide a report of each instance patch status.Which solution will meet these requirements?

   • A. Set up Amazon Macie to scan the EC2 instances for software vulnerabilities. Set up a cron job on each EC2 instance to patch the instance on a regular schedule.
   • B. Turn on Amazon GuardDuty in the account. Configure GuardDuty to scan the EC2 instances for software vulnerabilities. Set up AWS Systems Manager Session Manager to patch the EC2 instances on a regular schedule.
   • C. Set up Amazon Detective to scan the EC2 instances for software vulnerabilities. Set up an Amazon EventBridge scheduled rule to patch the EC2 instances on a regular schedule.
   • D. Turn on Amazon Inspector in the account. Configure Amazon Inspector to scan the EC2 instances for software vulnerabilities. Set up AWS Systems Manager Patch Manager to patch the EC2 instances on a regular schedule.

   View question →

10. Q10. Q505. A company is planning to store data on Amazon RDS DB instances. The company must encrypt the data at rest.What should a solutions architect do to meet this requirement?

    • A. Create a key in AWS Key Management Service (AWS KMS). Enable encryption for the DB instances.
    • B. Create an encryption key. Store the key in AWS Secrets Manager. Use the key to encrypt the DB instances.
    • C. Generate a certificate in AWS Certificate Manager (ACM). Enable SSL/TLS on the DB instances by using the certificate.
    • D. Generate a certificate in AWS Identity and Access Management (IAM). Enable SSL/TLS on the DB instances by using the certificate.

    View question →

11. Q11. Q506. A company must migrate 20 TB of data from a data center to the AWS Cloud within 30 days. The company network bandwidth is limited to 15 Mbps and cannot exceed 70% utilization.What should a solutions architect do to meet these requirements?

    • A. Use AWS Snowball.
    • B. Use AWS DataSync.
    • C. Use a secure VPN connection.
    • D. Use Amazon S3 Transfer Acceleration.

    View question →

12. Q12. Q507. A company application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. On the first day of every month at midnight, the application becomes much slower when the month-end financial calculation batch runs. This causes the CPU utilization of the EC2 instances to immediately peak to 100%, which disrupts the application.What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?

    • A. Configure an Amazon CloudFront distribution in front of the ALB.
    • B. Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization.
    • C. Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.
    • D. Configure Amazon ElastiCache to remove some of the workload from the EC2 instances.

    View question →

13. Q13. Q508. A company is experiencing sudden increases in demand. The company needs to provision large Amazon EC2 instances from an Amazon Machine Image (AMI). The instances will run in an Auto Scaling group. The company needs a solution that provides minimum initialization latency to meet the demand.Which solution meets these requirements?

    • A. Use the aws ec2 register-image command to create an AMI from a snapshot. Use AWS Step Functions to replace the AMI in the Auto Scaling group.
    • B. Enable Amazon Elastic Block Store (Amazon EBS) fast snapshot restore on a snapshot. Provision an AMI by using the snapshot. Replace the AMI in the Auto Scaling group with the new AMI.
    • C. Enable AMI creation and define lifecycle rules in Amazon Data Lifecycle Manager (Amazon DLM).Create an AWS Lambda function that modifies the AMI in the Auto Scaling group.
    • D. Use Amazon EventBridge to invoke AWS Backup lifecycle policies that provision AMIs. Configure Auto Scaling group capacity limits as an event source in EventBridge.

    View question →

14. Q14. Q509. A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage. The application tier is hosted on Amazon EC2 instances. The company IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days.What should a solutions architect do to meet this requirement with the LEAST operational effort?

    • A. Create a new AWS Key Management Service (AWS KMS) encryption key. Use AWS Secrets Manager to create a new secret that uses the KMS key with the appropriate credentials. Associate the secret with the Aurora DB cluster. Configure a custom rotation period of 14 days.
    • B. Create two parameters in AWS Systems Manager Parameter Store: one for the user name as a string parameter and one that uses the SecureString type for the password. Select AWS Key Management Service (AWS KMS) encryption for the password parameter, and load these parameters in the application tier. Implement an AWS Lambda function that rotates the password every 14 days.
    • C. Store a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system in all EC2 instances of the application tier. Restrict the access to the file on the file system so that the application can read the file and that only super users can modify the file. Implement an AWS Lambda function that rotates the key in Aurora every 14 days and writes new credentials into the file.
    • D. Store a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon S3 bucket that the application uses to load the credentials. Download the file to the application regularly to ensure that the correct credentials are used. Implement an AWS Lambda function that rotates the Aurora credentials every 14 days and uploads these credentials to the file in the S3 bucket.

    View question →

15. Q15. Q510. A company has deployed a web application on AWS. The company hosts the backend database on Amazon RDS for MySQL with a primary DB instance and five read replicas to support scaling needs. The read replicas must lag no more than 1 second behind the primary DB instance. The database routinely runs scheduled stored procedures.As traffic on the website increases, the replicas experience additional lag during periods of peak load. A solutions architect must reduce the replication lag as much as possible. The solutions architect must minimize changes to the application code and must minimize ongoing operational overhead.Which solution will meet these requirements?

    • A. Migrate the database to Amazon Aurora MySQL. Replace the read replicas with Aurora Replicas, and configure Aurora Auto Scaling. Replace the stored procedures with Aurora MySQL native functions.
    • B. Deploy an Amazon ElastiCache for Redis cluster in front of the database. Modify the application to check the cache before the application queries the database. Replace the stored procedures with AWS Lambda functions.
    • C. Migrate the database to a MySQL database that runs on Amazon EC2 instances. Choose large, compute optimized EC2 instances for all replica nodes. Maintain the stored procedures on the EC2 instances.
    • D. Migrate the database to Amazon DynamoDB. Provision a large number of read capacity units (RCUs) to support the required throughput, and configure on-demand capacity scaling. Replace the stored procedures with DynamoDB streams.

    View question →

16. Q16. Q511. A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance. Management says the application must be made more secure with the least amount of programming effort.What should a solutions architect do to meet these requirements?

    • A. Use AWS Key Management Service (AWS KMS) to create keys. Configure the application to load the database credentials from AWS KMS. Enable automatic key rotation.
    • B. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager.
    • C. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager.
    • D. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Systems Manager Parameter Store. Configure the application to load the database credentials from Parameter Store. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Parameter Store.

    View question →

17. Q17. Q512. A company has an Amazon S3 data lake that is governed by AWS Lake Formation. The company wants to create a visualization in Amazon QuickSight by joining the data in the data lake with operational data that is stored in an Amazon Aurora MySQL database. The company wants to enforce column-level authorization so that the company marketing team can access only a subset of columns in the database.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use Amazon EMR to ingest the data directly from the database to the QuickSight SPICE engine.Include only the required columns.
    • B. Use AWS Glue Studio to ingest the data from the database to the S3 data lake. Attach an IAM policy to the QuickSight users to enforce column-level access control. Use Amazon S3 as the data source in QuickSight.
    • C. Use AWS Glue Elastic Views to create a materialized view for the database in Amazon S3. Create an S3 bucket policy to enforce column-level access control for the QuickSight users. Use Amazon S3 as the data source in QuickSight.
    • D. Use a Lake Formation blueprint to ingest the data from the database to the S3 data lake. Use Lake Formation to enforce column-level access control for the QuickSight users. Use Amazon Athena as the data source in QuickSight.

    View question →

18. Q18. Q513. A transaction processing company has weekly scripted batch jobs that run on Amazon EC2 instances. The EC2 instances are in an Auto Scaling group. The number of transactions can vary, but the baseline CPU utilization that is noted on each run is at least 60%. The company needs to provision the capacity 30 minutes before the jobs run.Currently, engineers complete this task by manually modifying the Auto Scaling group parameters. The company does not have the resources to analyze the required capacity trends for the Auto Scaling group counts. The company needs an automated way to modify the Auto Scaling group desired capacity.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Create a dynamic scaling policy for the Auto Scaling group. Configure the policy to scale based on the CPU utilization metric. Set the target value for the metric to 60%.
    • B. Create a scheduled scaling policy for the Auto Scaling group. Set the appropriate desired capacity, minimum capacity, and maximum capacity. Set the recurrence to weekly. Set the start time to 30 minutes before the batch jobs run.
    • C. Create a predictive scaling policy for the Auto Scaling group. Configure the policy to scale based on forecast. Set the scaling metric to CPU utilization. Set the target value for the metric to 60%. In the policy, set the instances to pre-launch 30 minutes before the jobs run.
    • D. Create an Amazon EventBridge event to invoke an AWS Lambda function when the CPU utilization metric value for the Auto Scaling group reaches 60%. Configure the Lambda function to increase the Auto Scaling group desired capacity and maximum capacity by 20%.

    View question →

19. Q19. Q514. A company has a Java application that uses Amazon Simple Queue Service (Amazon SQS) to parse messages. The application cannot parse messages that are larger than 256 KB in size. The company wants to implement a solution to give the application the ability to parse messages as large as 50 MB.Which solution will meet these requirements with the FEWEST changes to the code?

    • A. Use the Amazon SQS Extended Client Library for Java to host messages that are larger than 256 KB in Amazon S3.
    • B. Use Amazon EventBridge to post large messages from the application instead of Amazon SQS.
    • C. Change the limit in Amazon SQS to handle messages that are larger than 256 KB.
    • D. Store messages that are larger than 256 KB in Amazon Elastic File System (Amazon EFS). Configure Amazon SQS to reference this location in the messages.

    View question →

20. Q20. Q515. A company wants to restrict access to the content of one of its main web applications and to protect the content by using authorization techniques available on AWS. The company wants to implement a serverless architecture and an authentication solution for fewer than 100 users. The solution needs to integrate with the main web application and serve web content globally. The solution must also scale as the company's user base grows while providing the lowest login latency possible.Which solution will meet these requirements MOST cost-effectively?

    • A. Use Amazon Cognito for authentication. Use Lambda@Edge for authorization. Use Amazon CloudFront to serve the web application globally.
    • B. Use AWS Directory Service for Microsoft Active Directory for authentication. Use AWS Lambda for authorization. Use an Application Load Balancer to serve the web application globally.
    • C. Use Amazon Cognito for authentication. Use AWS Lambda for authorization. Use Amazon S3 Transfer Acceleration to serve the web application globally.
    • D. Use AWS Directory Service for Microsoft Active Directory for authentication. Use Lambda@Edge for authorization. Use AWS Elastic Beanstalk to serve the web application globally.

    View question →

21. Q21. Q516. A company has an aging network-attached storage (NAS) array in its data center. The NAS array presents SMB shares and NFS shares to client workstations. The company does not want to purchase a new NAS array. The company also does not want to incur the cost of renewing the NAS array support contract. Some of the data is accessed frequently, but much of the data is inactive.A solutions architect needs to implement a solution that migrates the data to Amazon S3, uses S3 Lifecycle policies, and maintains the same look and feel for the client workstations. The solutions architect has identified AWS Storage Gateway as part of the solution.Which type of storage gateway should the solutions architect provision to meet these requirements?

    • A. Volume Gateway
    • B. Tape Gateway
    • C. Amazon FSx File Gateway
    • D. Amazon S3 File Gateway

    View question →

22. Q22. Q517. A company has an application that is running on Amazon EC2 instances. A solutions architect has standardized the company on a particular instance family and various instance sizes based on the current needs of the company.The company wants to maximize cost savings for the application over the next 3 years. The company needs to be able to change the instance family and sizes in the next 6 months based on application popularity and usage.Which solution will meet these requirements MOST cost-effectively?

    • A. Compute Savings Plan
    • B. EC2 Instance Savings Plan
    • C. Zonal Reserved Instances
    • D. Standard Reserved Instances

    View question →

23. Q23. Q518. A company collects data from a large number of participants who use wearable devices. The company stores the data in an Amazon DynamoDB table and uses applications to analyze the data. The data workload is constant and predictable. The company wants to stay at or below its forecasted budget for DynamoDB.Which solution will meet these requirements MOST cost-effectively?

    • A. Use provisioned mode and DynamoDB Standard-Infrequent Access (DynamoDB Standard-IA).Reserve capacity for the forecasted workload.
    • B. Use provisioned mode. Specify the read capacity units (RCUs) and write capacity units (WCUs).
    • C. Use on-demand mode. Set the read capacity units (RCUs) and write capacity units (WCUs) high enough to accommodate changes in the workload.
    • D. Use on-demand mode. Specify the read capacity units (RCUs) and write capacity units (WCUs) with reserved capacity.

    View question →

24. Q24. Q519. A company uses a 100 GB Amazon RDS for Microsoft SQL Server Single-AZ DB instance in the us-east-1 Region to store customer transactions. The company needs high availability and automatic recovery for the DB instance.The company must also run reports on the RDS database several times a year. The report process causes transactions to take longer than usual to post to the customers?accounts. The company needs a solution that will improve the performance of the report process.Which combination of steps will meet these requirements? (Choose two.)

    • A. Modify the DB instance from a Single-AZ DB instance to a Multi-AZ deployment.
    • B. Take a snapshot of the current DB instance. Restore the snapshot to a new RDS deployment in another Availability Zone.
    • C. Create a read replica of the DB instance in a different Availability Zone. Point all requests for reports to the read replica.
    • D. Migrate the database to RDS Custom.
    • E. Use RDS Proxy to limit reporting requests to the maintenance window.

    View question →

25. Q25. Q520. A company is moving its data management application to AWS. The company wants to transition to an event-driven architecture. The architecture needs to be more distributed and to use serverless concepts while performing the different aspects of the workflow. The company also wants to minimize operational overhead.Which solution will meet these requirements?

    • A. Build out the workflow in AWS Glue. Use AWS Glue to invoke AWS Lambda functions to process the workflow steps.
    • B. Build out the workflow in AWS Step Functions. Deploy the application on Amazon EC2 instances. Use Step Functions to invoke the workflow steps on the EC2 instances.
    • C. Build out the workflow in Amazon EventBridge. Use EventBridge to invoke AWS Lambda functions on a schedule to process the workflow steps.
    • D. Build out the workflow in AWS Step Functions. Use Step Functions to create a state machine. Use the state machine to invoke AWS Lambda functions to process the workflow steps.

    View question →

26. Q26. Q521. A company is designing the network for an online multi-player game. The game uses the UDP networking protocol and will be deployed in eight AWS Regions. The network architecture needs to minimize latency and packet loss to give end users a high-quality gaming experience.Which solution will meet these requirements?

    • A. Setup a transit gateway in each Region. Create inter-Region peering attachments between each transit gateway.
    • B. Set up AWS Global Accelerator with UDP listeners and endpoint groups in each Region.
    • C. Set up Amazon CloudFront with UDP turned on. Configure an origin in each Region.
    • D. Set up a VPC peering mesh between each Region. Turn on UDP for each VPC.

    View question →

27. Q27. Q522. A company hosts a three-tier web application on Amazon EC2 instances in a single Availability Zone. The web application uses a self-managed MySQL database that is hosted on an EC2 instance to store data in an Amazon Elastic Block Store (Amazon EBS) volume. The MySQL database currently uses a 1 TB Provisioned IOPS SSD (io2) EBS volume. The company expects traffic of 1,000 IOPS for both reads and writes at peak traffic.The company wants to minimize any disruptions, stabilize performance, and reduce costs while retaining the capacity for double the IOPS. The company wants to move the database tier to a fully managed solution that is highly available and fault tolerant.Which solution will meet these requirements MOST cost-effectively?

    • A. Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with an io2 Block Express EBS volume.
    • B. Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with a General Purpose SSD (gp2) EBS volume.
    • C. Use Amazon S3 Intelligent-Tiering access tiers.
    • D. Use two large EC2 instances to host the database in active-passive mode.

    View question →

28. Q28. Q523. A company is migrating an old application to AWS. The application runs a batch job every hour and is CPU intensive. The batch job takes 15 minutes on average with an on-premises server. The server has 64 virtual CPU (vCPU) and 512 GiB of memory.Which solution will run the batch job within 15 minutes with the LEAST operational overhead?

    • A. Use AWS Lambda with functional scaling.
    • B. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate.
    • C. Use Amazon Lightsail with AWS Auto Scaling.
    • D. Use AWS Batch on Amazon EC2.

    View question →

29. Q29. Q524. A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same high availability and resiliency, but the company wants to minimize storage costs.Which storage solution will meet these requirements?

    • A. Move the data objects to S3 Glacier Deep Archive after 30 days.
    • B. Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.
    • C. Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.
    • D. Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately.

    View question →

30. Q30. Q525. A social media company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. The application has more than a billion images stored in an Amazon S3 bucket and processes thousands of images each second. The company wants to resize the images dynamically and serve appropriate formats to clients.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Install an external image management library on an EC2 instance. Use the image management library to process the images.
    • B. Create a CloudFront origin request policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.
    • C. Use a Lambda@Edge function with an external image management library. Associate the Lambda@Edge function with the CloudFront behaviors that serve the images.
    • D. Create a CloudFront response headers policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

    View question →

31. Q31. Q526. A hospital needs to store patient records in an Amazon S3 bucket. The hospital compliance team must ensure that all protected health information (PHI) is encrypted in transit and at rest. The compliance team must administer the encryption key for data at rest.Which solution will meet these requirements?

    • A. Create a public SSL/TLS certificate in AWS Certificate Manager (ACM). Associate the certificate with Amazon S3. Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.
    • B. Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with S3 managed encryption keys (SSE-S3). Assign the compliance team to manage the SSE-S3 keys.
    • C. Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.
    • D. Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Use Amazon Macie to protect the sensitive data that is stored in Amazon S3. Assign the compliance team to manage Macie.

    View question →

32. Q32. Q527. A company uses Amazon API Gateway to run a private gateway with two REST APIs in the same VPC. The BuyStock RESTful web service calls the CheckFunds RESTful web service to ensure that enough funds are available before a stock can be purchased. The company has noticed in the VPC flow logs that the BuyStock RESTful web service calls the CheckFunds RESTful web service over the internet instead of through the VPC. A solutions architect must implement a solution so that the APIs communicate through the VPC.Which solution will meet these requirements with the FEWEST changes to the code?

    • A. Add an X-API-Key header in the HTTP header for authorization.
    • B. Use an interface endpoint.
    • C. Use a gateway endpoint.
    • D. Add an Amazon Simple Queue Service (Amazon SQS) queue between the two REST APIs.

    View question →

33. Q33. Q528. A company web application consists of an Amazon API Gateway API in front of an AWS Lambda function and an Amazon DynamoDB database. The Lambda function handles the business logic, and the DynamoDB table hosts the data. The application uses Amazon Cognito user pools to identify the individual users of the application. A solutions architect needs to update the application so that only users who have a subscription can access premium content.Which solution will meet this requirement with the LEAST operational overhead?

    • A. Enable API caching and throttling on the API Gateway API.
    • B. Set up AWS WAF on the API Gateway API. Create a rule to filter users who have a subscription.
    • C. Apply fine-grained IAM permissions to the premium content in the DynamoDB table.
    • D. Implement API usage plans and API keys to limit the access of users who do not have a subscription.

    View question →

34. Q34. Q529. A company has migrated an application to Amazon EC2 Linux instances. One of these EC2 instances runs several 1-hour tasks on a schedule. These tasks were written by different teams and have no common programming language. The company is concerned about performance and scalability while these tasks run on a single instance. A solutions architect needs to implement a solution to resolve these concerns.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Use AWS Batch to run the tasks as jobs. Schedule the jobs by using Amazon EventBridge (Amazon CloudWatch Events).
    • B. Convert the EC2 instance to a container. Use AWS App Runner to create the container on demand to run the tasks as jobs.
    • C. Copy the tasks into AWS Lambda functions. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events).
    • D. Create an Amazon Machine Image (AMI) of the EC2 instance that runs the tasks. Create an Auto Scaling group with the AMI to run multiple copies of the instance.

    View question →

35. Q35. Q530. A company hosts a frontend application that uses an Amazon API Gateway API backend that is integrated with AWS Lambda. When the API receives requests, the Lambda function loads many libraries. Then the Lambda function connects to an Amazon RDS database, processes the data, and returns the data to the frontend application. The company wants to ensure that response latency is as low as possible for all its users with the fewest number of changes to the company's operations.Which solution will meet these requirements?

    • A. Establish a connection between the frontend application and the database to make queries faster by bypassing the API.
    • B. Configure provisioned concurrency for the Lambda function that handles the requests.
    • C. Cache the results of the queries in Amazon S3 for faster retrieval of similar datasets.
    • D. Increase the size of the database to increase the number of connections Lambda can establish at one time.

    View question →

36. Q36. Q531. A company hosts a three-tier web application that includes a PostgreSQL database. The database stores the metadata from documents. The company searches the metadata for key terms to retrieve documents that the company reviews in a report each month. The documents are stored in Amazon S3. The documents are usually written only once, but they are updated frequently.The reporting process takes a few hours with the use of relational queries. The reporting process must not prevent any document modifications or the addition of new documents. A solutions architect needs to implement a solution to speed up the reporting process.Which solution will meet these requirements with the LEAST amount of change to the application code?

    • A. Set up a new Amazon DocumentDB (with MongoDB compatibility) cluster that includes a read replica.Scale the read replica to generate the reports.
    • B. Set up a new Amazon Aurora PostgreSQL DB cluster that includes an Aurora Replica. Issue queries to the Aurora Replica to generate the reports.
    • C. Set up a new Amazon RDS for PostgreSQL Multi-AZ DB instance. Configure the reporting module to query the secondary RDS node so that the reporting module does not affect the primary node.
    • D. Set up a new Amazon DynamoDB table to store the documents. Use a fixed write capacity to support new document entries. Automatically scale the read capacity to support the reports.

    View question →

37. Q37. Q532. A company wants to use an Amazon RDS for PostgreSQL DB cluster to simplify time-consuming database administrative tasks for production database workloads. The company wants to ensure that its database is highly available and will provide automatic failover support in most scenarios in less than 40 seconds. The company wants to offload reads off of the primary instance and keep costs as low as possible.Which solution will meet these requirements?

    • A. Use an Amazon RDS Multi-AZ DB instance deployment. Create one read replica and point the read workload to the read replica.
    • B. Use an Amazon RDS Multi-AZ DB duster deployment Create two read replicas and point the read workload to the read replicas.
    • C. Use an Amazon RDS Multi-AZ DB instance deployment. Point the read workload to the secondary instances in the Multi-AZ pair.
    • D. Use an Amazon RDS Multi-AZ DB cluster deployment Point the read workload to the reader endpoint.

    View question →

38. Q38. Q533. A company runs a highly available SFTP service. The SFTP service uses two Amazon EC2 Linux instances that run with elastic IP addresses to accept traffic from trusted IP sources on the internet. The SFTP service is backed by shared storage that is attached to the instances. User accounts are created and managed as Linux users in the SFTP servers.The company wants a serverless option that provides high IOPS performance and highly configurable security. The company also wants to maintain control over user permissions.Which solution will meet these requirements?

    • A. Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the EBS volume to the SFTP service endpoint. Grant users access to the SFTP service.
    • B. Create an encrypted Amazon Elastic File System (Amazon EFS) volume. Create an AWS Transfer Family SFTP service with elastic IP addresses and a VPC endpoint that has internet-facing access.Attach a security group to the endpoint that allows only trusted IP addresses. Attach the EFS volume to the SFTP service endpoint. Grant users access to the SFTP service.
    • C. Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.
    • D. Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a VPC endpoint that has internal access in a private subnet. Attach a security group that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

    View question →

39. Q39. Q534. A company is running a custom application on Amazon EC2 On-Demand Instances. The application has frontend nodes that need to run 24 hours a day, 7 days a week and backend nodes that need to run only for a short time based on workload. The number of backend nodes varies during the day.The company needs to scale out and scale in more instances based on workload.Which solution will meet these requirements MOST cost-effectively?

    • A. Use Reserved Instances for the frontend nodes. Use AWS Fargate for the backend nodes.
    • B. Use Reserved Instances for the frontend nodes. Use Spot Instances for the backend nodes.
    • C. Use Spot Instances for the frontend nodes. Use Reserved Instances for the backend nodes.
    • D. Use Spot Instances for the frontend nodes. Use AWS Fargate for the backend nodes.

    View question →

40. Q40. Q535. A company uses high block storage capacity to runs its workloads on premises. The company's daily peak input and output transactions per second are not more than 15,000 IOPS. The company wants to migrate the workloads to Amazon EC2 and to provision disk performance independent of storage capacity.Which Amazon Elastic Block Store (Amazon EBS) volume type will meet these requirements MOST cost- effectively?

    • A. GP2 volume type
    • B. io2 volume type
    • C. GP3 volume type
    • D. io1 volume type

    View question →

41. Q41. Q536. A serverless application uses Amazon API Gateway, AWS Lambda, and Amazon DynamoDB. The Lambda function needs permissions to read and write to the DynamoDB table.Which solution will give the Lambda function access to the DynamoDB table MOST securely?

    • A. Create an IAM user with programmatic access to the Lambda function. Attach a policy to the user that allows read and write access to the DynamoDB table. Store the access_key_id and secret_access_key parameters as part of the Lambda environment variables. Ensure that other AWS users do not have read and write access to the Lambda function configuration.
    • B. Create an IAM role that includes Lambda as a trusted service. Attach a policy to the role that allows read and write access to the DynamoDB table. Update the configuration of the Lambda function to use the new role as the execution role.
    • C. Create an IAM user with programmatic access to the Lambda function. Attach a policy to the user that allows read and write access to the DynamoDB table. Store the access_key_id and secret_access_key parameters in AWS Systems Manager Parameter Store as secure string parameters. Update the Lambda function code to retrieve the secure string parameters before connecting to the DynamoDB table.
    • D. Create an IAM role that includes DynamoDB as a trusted service. Attach a policy to the role that allows read and write access from the Lambda function. Update the code of the Lambda function to attach to the new role as an execution role.

    View question →

42. Q42. Q537. A company is running its production and nonproduction environment workloads in multiple AWS accounts. The accounts are in an organization in AWS Organizations. The company needs to design a solution that will prevent the modification of cost usage tags.Which solution will meet these requirements?

    • A. Create a custom AWS Config rule to prevent tag modification except by authorized principals.
    • B. Create a custom trail in AWS CloudTrail to prevent tag modification.
    • C. Create a service control policy (SCP) to prevent tag modification except by authorized principals.
    • D. Create custom Amazon CloudWatch logs to prevent tag modification.

    View question →

43. Q43. Q538. A company needs to migrate a MySQL database from its on-premises data center to AWS within 2 weeks. The database is 20 TB in size. The company wants to complete the migration with minimal downtime.Which solution will migrate the database MOST cost-effectively?

    • A. Order an AWS Snowball Edge Storage Optimized device. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with replication of ongoing changes. Send the Snowball Edge device to AWS to finish the migration and continue the ongoing replication.
    • B. Order an AWS Snowmobile vehicle. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with ongoing changes. Send the Snowmobile vehicle back to AWS to finish the migration and continue the ongoing replication.
    • C. Order an AWS Snowball Edge Compute Optimized with GPU device. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with ongoing changes. Send the Snowball device to AWS to finish the migration and continue the ongoing replication
    • D. Order a 1 GB dedicated AWS Direct Connect connection to establish a connection with the data center.Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with replication of ongoing changes.

    View question →

44. Q44. Q539. A company moved its on-premises PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. The company successfully launched a new product. The workload on the database has increased. The company wants to accommodate the larger workload without adding infrastructure.Which solution will meet these requirements MOST cost-effectively?

    • A. Buy reserved DB instances for the total workload. Make the Amazon RDS for PostgreSQL DB instance larger.
    • B. Make the Amazon RDS for PostgreSQL DB instance a Multi-AZ DB instance.
    • C. Buy reserved DB instances for the total workload. Add another Amazon RDS for PostgreSQL DB instance.
    • D. Make the Amazon RDS for PostgreSQL DB instance an on-demand DB instance.

    View question →

45. Q45. Q540. A solutions architect configured a VPC that has a small range of IP addresses. The number of Amazon EC2 instances that are in the VPC is increasing, and there is an insufficient number of IP addresses for future workloads.Which solution resolves this issue with the LEAST operational overhead?

    • A. Add an additional IPv4 CIDR block to increase the number of IP addresses and create additional subnets in the VPC. Create new resources in the new subnets by using the new CIDR.
    • B. Create a second VPC with additional subnets. Use a peering connection to connect the second VPC with the first VPC Update the routes and create new resources in the subnets of the second VPC.
    • C. Use AWS Transit Gateway to add a transit gateway and connect a second VPC with the first VPUpdate the routes of the transit gateway and VPCs. Create new resources in the subnets of the second VPC.
    • D. Create a second VPC. Create a Site-to-Site VPN connection between the first VPC and the second VPC by using a VPN-hosted solution on Amazon EC2 and a virtual private gateway. Update the route between VPCs to the traffic through the VPN. Create new resources in the subnets of the second VPC.

    View question →

46. Q46. Q541. A company stores data in PDF format in an Amazon S3 bucket. The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years.Which solution will meet these requirements with the LEAST operational overhead?

    • A. Turn on the S3 Versioning feature for the S3 bucket. Configure S3 Lifecycle to delete the data after 7 years. Configure multi-factor authentication (MFA) delete for all S3 objects.
    • B. Turn on S3 Object Lock with governance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.
    • C. Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.
    • D. Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance.

    View question →

47. Q47. Q542. A company runs its application on an Oracle database. The company plans to quickly migrate to AWS because of limited resources for the database, backup administration, and data center maintenance. The application uses third-party database features that require privileged access.Which solution will help the company migrate the database to AWS MOST cost-effectively?

    • A. Migrate the database to Amazon RDS for Oracle. Replace third-party features with cloud services.
    • B. Migrate the database to Amazon RDS Custom for Oracle. Customize the database settings to support third-party features.
    • C. Migrate the database to an Amazon EC2 Amazon Machine Image (AMI) for Oracle. Customize the database settings to support third-party features.
    • D. Migrate the database to Amazon RDS for PostgreSQL by rewriting the application code to remove dependency on Oracle APEX.

    View question →

48. Q48. Q543. A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS.Which activities will be managed by the company's operational team? (Choose three.)

    • A. Management of the Amazon RDS infrastructure layer, operating system, and platforms
    • B. Creation of an Amazon RDS DB instance and configuring the scheduled maintenance window
    • C. Configuration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection
    • D. Installation of patches for all minor and major database versions for Amazon RDS
    • E. Ensure the physical security of the Amazon RDS infrastructure in the data center
    • F. Encryption of the data that moves in transit through Direct Connect

    View question →

49. Q49. Q544. A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previous employee did not provide details about the resources inventory. The solutions architect needs to build and map the relationship details of the various workloads across all accounts.Which solution will meet these requirements in the MOST operationally efficient way?

    • A. Use AWS Systems Manager Inventory to generate a map view from the detailed view report.
    • B. Use AWS Step Functions to collect workload details. Build architecture diagrams of the workloads manually.
    • C. Use Workload Discovery on AWS to generate architecture diagrams of the workloads.
    • D. Use AWS X-Ray to view the workload details. Build architecture diagrams with relationships.

    View question →

50. Q50. Q545. A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. The company wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period.Which combination of solutions will meet these requirements? (Choose three.)

    • A. Use AWS Budgets to create a budget. Set the budget amount under the Cost and Usage Reports section of the required AWS accounts.
    • B. Use AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts.
    • C. Create an IAM user for AWS Budgets to run budget actions with the required permissions.
    • D. Create an IAM role for AWS Budgets to run budget actions with the required permissions.
    • E. Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate config rule to prevent provisioning of additional resources.
    • F. Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources.

    View question →

51. Q51. Q546. A company that uses AWS is building an application to transfer data to a product manufacturer. The company has its own identity provider (IdP). The company wants the IdP to authenticate application users while the users use the application to transfer data. The company must use Applicability Statement 2 (AS2) protocol.Which solution will meet these requirements?

    • A. Use AWS DataSync to transfer the data. Create an AWS Lambda function for IdP authentication.
    • B. Use Amazon AppFlow flows to transfer the data. Create an Amazon Elastic Container Service (Amazon ECS) task for IdP authentication.
    • C. Use AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication.
    • D. Use AWS Storage Gateway to transfer the data. Create an Amazon Cognito identity pool for IdP authentication.

    View question →

52. Q52. Q547. A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service. The application requires 1 GB of memory and 2 GB of storage for its computation resources. The application will require that the data is in a relational format.Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)

    • A. Amazon EC2
    • B. AWS Lambda
    • C. Amazon RDS
    • D. Amazon DynamoDB
    • E. Amazon Elastic Kubernetes Services (Amazon EKS)

    View question →

53. Q53. Q548. A company uses AWS Organizations to run workloads within multiple AWS accounts. A tagging policy adds department tags to AWS resources when the company creates tags.An accounting team needs to determine spending on Amazon EC2 consumption. The accounting team must determine which departments are responsible for the costs regardless ofAWS account. The accounting team has access to AWS Cost Explorer for all AWS accounts within the organization and needs to access all reports from Cost Explorer.Which solution meets these requirements in the MOST operationally efficient way?

    • A. From the Organizations management account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.
    • B. From the Organizations management account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.
    • C. From the Organizations member account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by the tag name, and filter by EC2.
    • D. From the Organizations member account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

    View question →

54. Q54. Q549. A company is developing a mobile gaming app in a single AWS Region. The app runs on multiple Amazon EC2 instances in an Auto Scaling group. The company stores the app data in Amazon DynamoDB. The app communicates by using TCP traffic and UDP traffic between the users and the servers. The application will be used globally. The company wants to ensure the lowest possible latency for all users.Which solution will meet these requirements?

    • A. Use AWS Global Accelerator to create an accelerator. Create an Application Load Balancer (ALB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB.
    • B. Use AWS Global Accelerator to create an accelerator. Create a Network Load Balancer (NLB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB.
    • C. Create an Amazon CloudFront content delivery network (CDN) endpoint. Create a Network Load Balancer (NLB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. Update CloudFront to use the NLB as the origin.
    • D. Create an Amazon CloudFront content delivery network (CDN) endpoint. Create an Application Load Balancer (ALB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. Update CloudFront to use the ALB as the origin.

    View question →

55. Q55. Q550. A company has an application that processes customer orders. The company hosts the application on an Amazon EC2 instance that saves the orders to an Amazon Aurora database. Occasionally when traffic is high the workload does not process orders fast enough.What should a solutions architect do to write the orders reliably to the database as quickly as possible?

    • A. Increase the instance size of the EC2 instance when traffic is high. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic.
    • B. Write orders to an Amazon Simple Queue Service (Amazon SQS) queue. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.
    • C. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SNS topic.
    • D. Write orders to an Amazon Simple Queue Service (Amazon SQS) queue when the EC2 instance reaches CPU threshold limits. Use scheduled scaling of EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.

    View question →

56. Q56. Q551. An IoT company is releasing a mattress that has sensors to collect data about a user sleep. The sensors will send data to an Amazon S3 bucket. The sensors collect approximately 2 MB of data every night for each mattress. The company must process and summarize the data for each mattress. The results need to be available as soon as possible. Data processing will require 1 GB of memory and will finish within 30 seconds.Which solution will meet these requirements MOST cost-effectively?

    • A. Use AWS Glue with a Scala job
    • B. Use Amazon EMR with an Apache Spark script
    • C. Use AWS Lambda with a Python script
    • D. Use AWS Glue with a PySpark job

    View question →

57. Q57. Q552. A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Single-AZ DB instance. Management wants to eliminate single points of failure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code.Which solution meets these requirements?

    • A. Convert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option.
    • B. Create a new RDS Multi-AZ deployment. Take a snapshot of the current RDS instance and restore the new Multi-AZ deployment with the snapshot.
    • C. Create a read-only replica of the PostgreSQL database in another Availability Zone. Use Amazon Route 53 weighted record sets to distribute requests across the databases.
    • D. Place the RDS for PostgreSQL database in an Amazon EC2 Auto Scaling group with a minimum group size of two. Use Amazon Route 53 weighted record sets to distribute requests across instances.

    View question →

58. Q58. Q553. A company is developing an application to support customer demands. The company wants to deploy the application on multiple Amazon EC2 Nitro-based instances within the same Availability Zone. The company also wants to give the application the ability to write to multiple block storage volumes in multiple EC2 Nitro- based instances simultaneously to achieve higher application availability.Which solution will meet these requirements?

    • A. Use General Purpose SSD (gp3) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi- Attach
    • B. Use Throughput Optimized HDD (st1) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
    • C. Use Provisioned IOPS SSD (io2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi- Attach
    • D. Use General Purpose SSD (gp2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi- Attach

    View question →

59. Q59. Q554. A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance. New company management wants to ensure the application is highly available.What should a solutions architect do to meet this requirement?

    • A. Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer
    • B. Configure the application to take snapshots of the EC2 instances and send them to a different AWS Region
    • C. Configure the application to use Amazon Route 53 latency-based routing to feed requests to the application
    • D. Configure Amazon Route 53 rules to handle incoming requests and create a Multi-AZ Application Load Balancer

    View question →

60. Q60. Q555. A company uses AWS Organizations. A member account has purchased a Compute Savings Plan. Because of changes in the workloads inside the member account, the account no longer receives the full benefit of the Compute Savings Plan commitment. The company uses less than 50% of its purchased compute power.

    • A. Turn on discount sharing from the Billing Preferences section of the account console in the member account that purchased the Compute Savings Plan.
    • B. Turn on discount sharing from the Billing Preferences section of the account console in the company's Organizations management account.
    • C. Migrate additional compute workloads from another AWS account to the account that has the Compute Savings Plan.
    • D. Sell the excess Savings Plan commitment in the Reserved Instance Marketplace.

    View question →

61. Q61. Q556. A company stores raw collected data in an Amazon S3 bucket. The data is used for several types of analytics on behalf of the company's customers. The type of analytics requested determines the access pattern on the S3 objects.The company cannot predict or control the access pattern. The company wants to reduce its S3 costs.Which solution will meet these requirements?

    • A. Use S3 replication to transition infrequently accessed objects to S3 Standard-Infrequent Access (S3 Standard-IA)
    • B. Use S3 Lifecycle rules to transition objects from S3 Standard to Standard-Infrequent Access (S3 Standard-IA)
    • C. Use S3 Lifecycle rules to transition objects from S3 Standard to S3 Intelligent-Tiering
    • D. Use S3 Inventory to identify and transition objects that have not been accessed from S3 Standard to S3 Intelligent-Tiering

    View question →

62. Q62. Q557. A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to be read with as little latency as possible. A solutions architect needs to design an optimal solution that requires minimal application changes.Which method should the solutions architect select?

    • A. Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAX endpoint.
    • B. Add DynamoDB read replicas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.
    • C. Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.
    • D. Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB.

    View question →

63. Q63. Q558. A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing, and the company is concerned about a potential increase in cost.

    • A. Create an Amazon CloudFront distribution to cache state files at edge locations
    • B. Create an Amazon ElastiCache cluster. Connect the ALB to the ElastiCache cluster to serve cached files
    • C. Create an AWS WAF web ACL and associate it with the ALB. Add a rule to the web ACL to cache static files
    • D. Create a second ALB in an alternative AWS Region. Route user traffic to the closest Region to minimize data transfer costs

    View question →

64. Q64. Q559. A company has multiple VPCs across AWS Regions to support and run workloads that are isolated from workloads in other Regions. Because of a recent application launch requirement, the company VPCs must communicate with all other VPCs across all Regions.Which solution will meet these requirements with the LEAST amount of administrative effort?

    • A. Use VPC peering to manage VPC communication in a single Region. Use VPC peering across Regions to manage VPC communications.
    • B. Use AWS Direct Connect gateways across all Regions to connect VPCs across regions and manage VPC communications.
    • C. Use AWS Transit Gateway to manage VPC communication in a single Region and Transit Gateway peering across Regions to manage VPC communications.
    • D. Use AWS PrivateLink across all Regions to connect VPCs across Regions and manage VPC communications

    View question →

65. Q65. Q560. A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS). The application needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours. The file system needs to provide a mount target m each Availability Zone within a Region.A solutions architect wants to use AWS Backup to manage the replication to another Region.Which solution will meet these requirements?

    • A. Amazon FSx for Windows File Server with a Multi-AZ deployment
    • B. Amazon FSx for NetApp ONTAP with a Multi-AZ deployment
    • C. Amazon Elastic File System (Amazon EFS) with the Standard storage class
    • D. Amazon FSx for OpenZFS

    View question →