Q69 — AWS SAP-C02 Ch.2

Question 69 of 75 | ← Chapter 2

Q219. A company is migrating a legacy application from an on-premises data center to AWS. The application uses MongoDB as a key-value database.According to the company's technical guidelines, all Amazon EC2instances must be hosted in a private subnet without an internet connection. In addition, all connectivity between applications and databases must be encrypted. The database must be able to scale based on demand. Which solution will meet these requirements?

Correct Answer: D. Create new Amazon DocumentDB (with MongoDB compatibility) tables for the application with Provisioned IOPS volumes. Use the cluster endpoint to connect to Amazon DocumentDB

Explanation

Option A suggests creating Amazon DocumentDB (with MongoDB compatibility) tables for the application with provisioned IOPS volumes and using the instance endpoint to connect to Amazon DocumentDB. However, this approach does not address the requirement for encrypting all connectivity between applications and databases or explain how the database can scale based on demand. Option B suggests creating new Amazon DynamoDB tables for the application with on-demand capacity and using a gateway VPC endpoint for DynamoDB. However, this approach cannot support MongoDB syntax or provide the required encryption for connectivity. Option C suggests creating new Amazon DynamoDB tables for the application with on-demand capacity and using an interface VPC endpoint for DynamoDB. This option also cannot support MongoDB syntax or provide the required encryption for connectivity. Therefore, option D provides the most suitable solution by creating new Amazon DocumentDB (with MongoDB compatibility) tables for the application with provisioned IOPS volumes, which can handle scaling based on demand. The solution also uses the cluster endpoint to connect to Amazon DocumentDB, ensuring all connectivity between applications and databases is encrypted. This approach meets all the requirements stated in the scenario.