Quiz IT certification exam

Question 1

A company runs a microservice-based serverless web application. The application must be able to retrieve data from multiple Amazon DynamoDB tables. A solutions architect needs to give the application the ability to retrieve the data with no impact on the baseline performance of the application.

Which solution will meet these requirements in the MOST operationally efficient way?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Edge-optimized Amazon API Gateway with AWS Lambda functions

Answer

AWSAppSync pipeline resolvers

Answer

Amazon CloudFront with Lambda@Edge functions

Answer

Amazon Athena Federated Query with a DynamoDB connector

Question 2

A company has an application that processes customer orders. The company hosts the application on an Amazon EC2 instance that saves the orders to an Amazon Aurora database. Occasionally when traffic is high: the workload does not process orders fast enough.What should a solutions architect do to write the orders reliably to the database as quickly as possible?

Accepted Answer

Write orders to an Amazon Simple Queue Service (Amazon SQS) queue. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.

Answer

Increase the instance size of the EC2 instance when traffic is high. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic.

Answer

Write orders to Amazon Simple Notification Service (Amazon SNS) Subscribe the database endpoint to the SNS topic Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SNS topic.

Answer

Write orders to an Amazon Simple Queue Service (Amazon SQS) queue when the EC2 instance reaches CPU threshold limits. Use scheduled scaling of EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database

Question 3

A company is conducting an internal audit. The company wants to ensure that the data in an Amazon S3 bucket that is associated with the company's AWS Lake Formation data lake does not contain sensitive customer or employee data.  The company wants to discover personally identifiable information (Pll) or financial information, including passport numbers and credit card numbers.Which solution will meet these requirements?

Accepted Answer

Configure Amazon Macie to run a data discovery job that uses managed identifiers for the required data types.

Answer

Configure AWS Audit Manager on the account. Select the Payment Card Industry Data Security Standards (PCI DSS) for auditing.

Answer

Configure Amazon S3 Inventory on the S3 bucket. Configure Amazon Athena to query the inventory.

Answer

Use Amazon S3 Select to run a report across the S3 bucket.

Question 4

A company containerized a Windows job that runs on .NET 6 Framework under a Windows container. The company wants to run this job in the AWS Cloud. The job runs every 10 minutes. The job's runtime varies between 1 minute and 3 minutes.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Create an AWS Lambda function based on the container image of the job. Configure Amazon EventBridge to invoke the function every 10 minutes.

Answer

Use AWS Batch to create a job that uses AWS Fargate resources. Configure the job scheduling to run every 10 minutes.

Answer

Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to run the job. Create a scheduled task based on the container image of the job to run every 10 minutes.

Answer

Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to run the job. Create a standalone task based on the container image of the job. Use Windows task scheduler to run the job every 10 minutes.

Question 5

A company uses AWS Organizations with all features enabled and runs multiple Amazon EC2 workloads in the ap-southeast-2 Region. The company has a service control policy (SCP) that prevents any resources from being created in any other Region. A security policy requires the company to encrypt all data at rest.An audit discovers that employees have created Amazon Elastic Block Store (Amazon EBS) volumes for EC2 instances without encrypting the volumes. The company wants any new EC2 instances that any IAM user or root user launches in ap-southeast-2 to use encrypted EBS volumes. The company wants a solution that will have minimal effect on employees who create EBS volumes.Which combination of steps will meet these requirements? (Select TWO.)

Accepted Answer

Create an SCR Attach the SCP to the root organizational unit (OU). Define the SCP to deny the ec2:CreateVolume action when the ec2:Encrypted condition equals false.

Accepted Answer

In the Organizations management account, specify the Default EBS volume encryption setting.

Answer

In the Amazon EC2 console, select the EBS encryption account attribute and define a default encryption key.

Answer

Create an IAM permission boundary. Attach the permission boundary to the root organizational unit (OU). Define the boundary to deny the ec2:CreateVolume action when the ec2:Encrypted condition equals false.

Answer

Update the IAM policies for each account to deny the ec2:CreateVolume action when the ec2:Encrypted condition equals false.

Question 6

A company runs a highly available SFTP service. The SFTP service uses two Amazon EC2 Linux instances that run with elastic IP addresses to accept traffic from trusted IP sources on the internet. The SFTP service is backed by shared storage that is attached to the instances. User accounts are created and managed as Linux users in the SFTP servers.The company wants a serverless option that provides high IOPS performance and highly configurable security. The company also wants to maintain control over user permissions.Which solution will meet these requirements?

Accepted Answer

Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

Answer

Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the EBS volume to the SFTP service endpoint. Grant users access to the SFTP service.

Answer

Create an encrypted Amazon Elastic File System (Amazon EFS) volume. Create an AWS Transfer Family SFTP service with elastic IP addresses and a VPC endpoint that has internet-facing access. Attach a security group to the endpoint that allows only trusted IP addresses. Attach the EFS volume to the SFTP service endpoint. Grant users access to the SFTP service.

Answer

Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a VPC endpoint that has internal access in a private subnet. Attach a security group that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

Question 7

A company is expecting rapid growth in the near future. A solutions architect needs to configure existing users and grant permissions to new users on AWS. The solutions architect has decided to create IAM groups. The solutions architect will add the new users to IAM groups based on department.Which additional action is the MOST secure way to grant permissions to the new users?

Accepted Answer

Create an IAM policy that grants least privilege permission. Attach the policy to the IAM groups.

Answer

Apply service control policies (SCPs) to manage access permissions.

Answer

Create IAM roles that have least privilege permission. Attach the roles to the IAM groups.

Answer

Create IAM roles. Associate the roles with a permissions boundary that defines the maximum permissions.

Question 8

A company has a serverless application on AWS that uses Amazon RDS as a backend database. The application sometimes experiences a sudden unpredictable increase in traffic. During traffic increases, the application frequently opens and closes connections to the database, which causes the application to receive errors from the database or run out of connections. The company needs to ensure that the application is always scalable and highly available.Which solution will meet these requirements WITHOUT any code changes to the application?

Accepted Answer

Deploy Amazon RDS Proxy between the serverless application and Amazon RDS.

Answer

Increase the maximum number of connections in the option group of the RDS database of the serverless application.

Answer

Increase the instance size of the RDS DB instance to meet the peak load traffic.

Answer

Purchase Reserved Instances for Amazon RDS to ensure that the database is highly available during peak load traffic.

Question 9

A company is building a three-tier application on AWS. The presentation tier will serve a static website. The logic tier is a containerized application. This application will store data in a relational database. The company wants to simplify deployment and to reduce operational costs.Which solution will meet these requirements?

Accepted Answer

Use Amazon S3 to host static content. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute power. Use a managed Amazon RDS cluster for the database.

Answer

Use Amazon CloudFront to host static content. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 for compute power. Use a managed Amazon RDS cluster for the database.

Answer

Use Amazon S3 to host static content. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute power. Use a managed Amazon RDS cluster for the database.

Answer

Use Amazon EC2 Reserved Instances to host static content. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 for compute power. Use a managed Amazon RDS cluster for the database.

Question 10

A company has a workload in an AWS Region. Customers connect to and access the workload by using an Amazon API Gateway REST API. The company uses Amazon Route 53 as its DNS provider. The company wants to provide individual and secure URLs for all customers.Which combination of steps will meet these requirements with the MOST operational efficiency? (Select THREE.)

Accepted Answer

Register the required domain in a registrar. Create a wildcard custom domain name in a Route 53 hosted zone and record in the zone that points to the API Gateway endpoint.

Accepted Answer

Request a wildcard certificate that matches the custom domain name in AWS Certificate Manager (ACM) in the same Region.

Accepted Answer

Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM).

Answer

Request a wildcard certificate that matches the domains in AWS Certificate Manager (ACM) in a different Region.

Answer

Create hosted zones for each customer as required in Route 53. Create zone records that point to the API Gateway endpoint.

Answer

Create multiple API endpoints for each customer in API Gateway.

Question 11

A company hosts an internal serverless application on AWS by using Amazon API Gateway and AWS Lambda. The company's employees report issues with high latency when they begin using the application each day. The company wants to reduce latency.Which solution will meet these requirements?

Accepted Answer

Set up a scheduled scaling to increase Lambda provisioned concurrency before employees begin to use the application each day.

Answer

Increase the API Gateway throttling limit.

Answer

Create an Amazon CloudWatch alarm to initiate a Lambda function as a target for the alarm at the beginning of each day.

Answer

Increase the Lambda function memory.

Question 12

A company wants to migrate 100 GB of historical data from an on-premises location to an Amazon S3 bucket. The company has a 100 megabits per second (Mbps) internet connection on premises. The company needs to encrypt the data in transit to the S3 bucket. The company will store new data directly in Amazon S3.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use AWS DataSync to migrate the data from the on-premises location to an S3 bucket.

Answer

Use the s3 sync command in the AWS CLI to move the data directly to an S3 bucket.

Answer

Use AWS Snowball to move the data to an S3 bucket.

Answer

Set up an IPsec VPN from the on-premises location to AWS. Use the s3 cp command in the AWS CLI to move the data directly to an S3 bucket.

Question 13

A company wants to implement a backup strategy for Amazon EC2 data and multiple Amazon S3 buckets. Because of regulatory requirements, the company must retain backup files for a specific time period. The company must not alter the files for the duration of the retention period.Which solution will meet these requirements?

Accepted Answer

Use AWS Backup to create a backup vault that has a vault lock in compliance mode. Create the required backup plan.

Answer

Use AWS Backup to create a backup vault that has a vault lock in governance mode. Create the required backup plan.

Answer

Use Amazon Data Lifecycle Manager to create the required automated snapshot policy.

Answer

Use Amazon S3 File Gateway to create the backup. Configure the appropriate S3 Lifecycle management.

Question 14

A company is subscribed to the AWS Business Support plan. Compliance rules require the company to check on AWS infrastructure health before deployments can proceed. The company needs a programmatic and automated way to check on infrastructure health at the beginning of new deployments.Which solution will meet these requirements?

Accepted Answer

Use the AWS Health API at the start of each deployment. Pause all new deployments if the API returns any issues.

Answer

Use the AWS Trusted Advisor API at the start of each deployment. Pause all new deployments if the API returns any issues.

Answer

Query the AWS Support API at the start of each deployment. Pause all new deployments if the API returns any open issues.

Answer

Send an API call to each workload ahead of deployment. Pause the deployments if the API call fails.

Question 15

A company needs to migrate a MySQL database from its on-premises data center to AWS within 2 weeks. The database is 20 TB in size. The company wants to complete the migration with minimal downtime.Which solution will migrate the database MOST cost-effectively?

Accepted Answer

Order an AWS Snowball Edge Storage Optimized device. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with replication of ongoing changes. Send the Snowball Edge device to AWS to finish the migration and continue the ongoing replication.

Answer

Order an AWS Snowmobile vehicle. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database wjgh ongoing changes. Send the Snowmobile vehicle back to AWS to finish the migration and continue the ongoing replication.

Answer

Order an AWS Snowball Edge Compute Optimized with GPU device. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with ongoing changes. Send the Snowball device to AWS to finish the migration and continue the ongoing replication.

Answer

Order a 1 GB dedicated AWS Direct Connect connection to establish a connection with the data center. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool(AWS SCT) to migrate the database with replication of ongoing changes.

Question 16

A company wants to host a scalable web application on AWS. The application will be accessed by users from different geographic regions of the world. Application users will be able to download and upload unique data up to gigabytes in size. The development team wants a cost-effective solution to minimize upload and download latency and maximize performance.What should a solutions architect do to accomplish this?

Accepted Answer

Use Amazon EC2 with Auto Scaling and Amazon CloudFront to host the application.

Answer

Use Amazon S3 with Transfer Acceleration to host the application.

Answer

Use Amazon S3 with CacheControl headers to host the application.

Answer

Use Amazon EC2 with Auto Scaling and Amazon ElastiCache to host the application.

Question 17

A company runs an application using Amazon ECS. The application creates resized versions of an original image and then makes Amazon S3 API calls to store the resized images in Amazon S3.How can a solutions architect ensure that the application has permission to access Amazon $3?

Accepted Answer

Create an IAM role with S3 permissions, and then specify that role as the taskRoleArn in the task definition.

Answer

Update the S3 role in AWS IAM to allow read/write access from Amazon ECS, and then relaunch the container.

Answer

Create a security group that allows access from Amazon ECS to Amazon $3, and update the launch configuration used by the ECS cluster.

Answer

Create an IAM user with S3 permissions, and then relaunch the Amazon EC2 instances for the ECS cluster while logged in as this account.

Question 18

A solutions architect is implementing a complex Java application with a MySQL database. The Java application must be deployed on Apache Tomcat and must be highly available.What should the solutions architect do to meet these requirements?

Accepted Answer

Deploy the application by using AWS Elastic Beanstalk. Configure a load-balanced environment and a rolling deployment policy.

Answer

Deploy the application in AWS Lambda. Configure an Amazon API Gateway API to connect with the Lambda functions.

Answer

Migrate the database to Amazon ElastiCache. Configure the ElastiCache security group to allow access from the application.

Answer

Yauch an Amazon EC2 instance. Install a MySQL server on the EC2 instance. Configure the application on the server. Create an AMI. Use the AMI to create a launch template with an Auto caling group.

Question 19

A 4-year-old media company is using the AWS Organizations all features feature set fo organize its AWS accounts. According to he company's finance team, the billing information on the member accountsmust not be accessible to anyone, including the root user of the member accounts.Which solution will meet these requirements?

Accepted Answer

Create a service control policy (SCP) to deny access to the billing information. Attach the SCP to the root organizational unit (OU).

Answer

Add all finance team users to an IAM group. Attach an AWS managed policy named Billing to the group.

Answer

Attach an identity-based policy to deny access to the billing information to all users, including the root user.

Answer

Convert from the Organizations all features feature set to the Organizations consolidated billing feature set.

Question 20

A company has two VPCs named Management and Production. The Management VPC uses VPNs through a customer gateway to connect to a single device in the data center. The Production VPC uses a virtual private gateway AWS Direct Connect connections. The Management and Production VPCs both use a single VPC peering connection to allow communication between theWhat should a solutions architect do to mitigate any single point of failure in this architecture?

Accepted Answer

Add a second set of VPNs to the Management VPC from a second customer gateway device.

Answer

Add a set of VPNs between the Management and Production VPCs.

Answer

Add a second virtual private gateway and attach it to the Management VPC.

Answer

Add a second VPC peering connection between the Management VPC and the Production VPC.

Question 21

A solutions architect is designing a highly available Amazon ElastiCache for Redis based solution. The solutions architect needs to ensure that failures do not result in performance degradation or loss of data locally and within an AWS Region. The solution needs to provide high availability at the node level and at the Region level.Which solution will meet these requirements?

Accepted Answer

Use Multi-AZ Redis replication groups with shards that contain multiple nodes.

Answer

Use Redis shards that contain multiple nodes with Redis append only files (AOF) tured on.

Answer

Use a Multi-AZ Redis cluster with more than one read replica in the replication group.

Answer

Use Redis shards that contain multiple nodes with Auto Scaling turned on.

Question 22

A company has an online gaming application that has TCP and UDP multiplayer gaming capabilities. The company uses Amazon Route 53 to point the application traffic to multiple Network Load Balancers (NLBs) in different AWS Regions. The company needs to improve application performance and decrease latency for the online game in preparation for user growth.Which solution will meet these requirements?

Accepted Answer

Add AWS Global Accelerator in front of the NLBs. Configure a Global Accelerator endpoint to use the correct listener ports.

Answer

Add an Amazon CloudFront distribution in front of the NLBs. Increase the Cache-Control: max-age parameter.

Answer

Replace the NLBs with Application Load Balancers (ALBs). Configure Route 53 to use latency-based routing.

Answer

'Add an Amazon API Gateway endpoint behind the NLBs. Enable API caching. Override method caching for the different stages.

Question 23

A company has a stateless web application that runs on AWS Lambda functions that are invoked by Amazon API Gateway. The company v wants to deploy the application across multiple AWS Regions to provide Regional failover capabilities.What should a solutions architect do to route traffic to multiple Regions?

Accepted Answer

Create a transit gateway. Attach the transit gateway to the API Gateway endpoint in each Region. Configure the transit gateway to route requests.

Answer

Create Amazon Route 53 health checks for each Region. Use an active-active failover configuration.

Answer

Create an Amazon CloudFront distribution with an origin for each Region. Use CloudFront health checks to route traffic.

Answer

Create an Application Load Balancer in the primary Region. Set the target group to point to the API Gateway endpoint hostnames in each Region.

Question 24

A company runs a three-tier web application in the AWS Cloud that operates across three Availability Zones. The application architecture has an Application Load Balancer, an Amazon EC2 web server that hosts user session states, and a MySQL database that runs on an EC2 instance. The company expects sudden increases in application traffic. The company wants to be able to scale to meet future application capacity demands and to ensure high availability across all three Availability Zones.Which solution will meet these requirements?

Accepted Answer

Migrate the MySQL database to Amazon RDS for MySQL with a Multi-AZ DB cluster deployment. Use Amazon ElastiCache for Redis with high availability to store session data and to cache reads. Migrate the web server to an Auto Scaling group that is in three Availability Zones.

Answer

Migrate the MySQL database to Amazon RDS for MySQL with a Multi-AZ DB cluster deployment. Use Amazon ElastiCache for Memcached with high availability to store session data and to cache reads. Migrate the web server to an Auto Scaling group that is in three Availability Zones.

Answer

Migrate the MySQL database to Amazon DynamoDB. Use DynamoDB Accelerator (DAX) to cache reads. Store the session data in DynamoDB. Migrate the web server to an Auto Scaling group that is in three Availability Zones.

Answer

Migrate the MySQL database to Amazon RDS for MySQL in a single Availability Zone. Use Amazon ElastiCache for Redis with high availability to store session data and to cache reads. Migrate the web server to an Auto Scaling group that is in three Availability Zones.

Question 25

The following IAM policy is attached to an IAM group. This is the only policy applied to the group.<img alt="Amazon SAA-C03 image Question 465 5376 09162024005823000000"   width="636" height="518" src="https://examgecko.com/getfile/efc0b90e-0d39-4d08-a8ef-45f9bf97793d">

Accepted Answer

Group members are allowed the ec2:Stoplnstances and ec2:Terminatelnstances permissions for the us-east-1 Region only when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action within the us-east-1 Region.

Answer

A Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

Answer

Group members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

Answer

Group members are allowed the ec2:Stoplnstances and ec2:Terminatelnstances permissions for all Regions when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action.

Question 26

A company needs to store data from its healthcare application. The application's data frequently changes. A new regulation requires audit z access at all levels of the stored data.The company hosts the application on an on-premises infrastructure that is running out of storage capacity. A solutions architect must securely migrate the existing data to AWS while satisfying the new regulation.Which solution will meet these requirements?

Accepted Answer

Use AWS DataSync to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.

Answer

Use AWS Snowcone to move the existing data to Amazon $3. Use AWS CloudTrail to log management events.

Answer

Use Amazon S3 Transfer Acceleration to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.

Answer

Use AWS Storage Gateway to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.

Question 27

A company has hired a solutions architect to design a reliable architecture for its application. The application consists of one Amazon RDS DB instance and two manually provisioned Amazon EC2 instances that run web servers. The EC2 instances are located in a single Availability Zone.An employee recently deleted the DB instance, and the application was unavailable for 24 hours as a result. The company is concerned with the overall reliability of its environment.What should the solutions architect do to maximize reliability of the application's infrastructure?

Accepted Answer

Update the DB instance to be Multi-AZ, and enable deletion protection. Place the EC2 instances behind an Application Load Balancer, and run them in an EC2 Auto Scaling group across multiple Availability Zones.

Answer

Delete one EC2 instance and enable termination protection on the other EC2 instance. Update the DB instance to be Multi-AZ, and enable deletion protection.

Answer

Create an additional DB instance along with an Amazon API Gateway and an AWS Lambda function. Configure the application to invoke the Lambda function through API Gateway. Have the Lambda function write the data to the two DB instances.

Answer

Place the EC2 instances in an EC2 Auto Scaling group that has multiple subnets located in multiple Availability Zones. Use Spot Instances instead of On-Demand Instances. Set up Amazon CloudWatch alarms to monitor the health of the instances. Update the DB instance to be Multi-AZ, and enable deletion protection.

Question 28

A development team needs to host a website that will be accessed by other teams. The website contents consist of HTML, CSS, client-side JavaScript, and images Which method is the MOST costeffective for hosting the website?

Accepted Answer

Create an Amazon S3 bucket and host the website there

Answer

Containerize the website and host it in AWS Fargate.

Answer

Deploy a web server on an Amazon EC2 instance to host the website.

Answer

Configure an Application Loa d Balancer with an AWS Lambda target that uses the Express js framework.

Question 29

A company's dynamic website is hosted using on-premises servers in the United States. The company is launching its product in Europe, and it wants to optimize site loading times for new European users. The site's backend must remain in the United States. The product is being launched in a few days, and an immediate solution is needed.What should the solutions architect recommend?

Accepted Answer

Use Amazon CloudFront with a custom origin pointing to the on-premises servers.

Answer

Launch an Amazon EC2 instance in us-east-1 and migrate the site to it.

Answer

Move the website to Amazon S3. Use cross-Region replication between Regions.

Answer

Use an Amazon Route 53 geo-proximity routing policy pointing to on-premises servers.

Question 30

A company hosts its application in the AWS Cloud. The application runs on Amazon EC2 instances behind an Elastic Load Balancer in an Auto Scaling group and with an Amazon DynamoDB table. The 'company wants to ensure the application can be made available in another AWS Region with minimal downtime.What should a solutions architect do to meet these requirements with the LEAST amount of downtime?

Accepted Answer

Create an Auto Scaling group and a load balancer in the disaster recovery Region. Configure the DynamoDB table as a global table. Configure DNS failover to point to the new disaster recovery Region's load balancer.

Answer

Create an AWS CloudFormation template to create EC2 instances, load balancers, and DynamoDB tables to be launched when needed. Configure DNS failover to point to the new disaster recovery Region's load balancer.

Answer

Create an AWS CloudFormation template to create EC2 instances and a load balancer to be launched when needed. Configure the DynamoDB table as a global table. Configure DNS failover to point to the new disaster recovery Region's load balancer.

Answer

Create an Auto Scaling group and load balancer in the disaster recovery Region. Configure the DynamoDB table as a global table. Create an Amazon CloudWatch alarm to trigger an AWS Lambda function that updates Amazon Route 53 pointing to the disaster recovery load balancer.

Question 31

A company wants to use Amazon Elastic Container Service (Amazon ECS) clusters and Amazon RDS DB instances to build and run a payment processing application. The company will run the application in its on-premises data center for compliance purposes.A solutions architect wants to use AWS Outposts as part of the solution. The solutions architect is working with the company's operational team to build the application.Which activities are the responsibility of the company's operational team? (Select THREE.)

Accepted Answer

Providing resilient power and network connectivity to the Outposts racks

Accepted Answer

Physical security and access controls of the data center environment

Accepted Answer

Providing extra capacity for Amazon ECS clusters to mitigate server failures and maintenance events

Answer

Managing the virtualization hypervisor, storage systems, and the AWS services that run on Outposts

Answer

Availability of the Outposts infrastructure including the power supplies, servers, and network-ing equipment within the Outposts racks

Answer

Physical maintenance of Outposts components

Question 32

A company is developing a new machine learning (ML) model solution on AWS. The models are developed as independent microservices that fetch approximately 1 GB of model data from Amazon $3 at startup and load the data into memory. Users access the models through an asynchronous API. Users can send a request or a batch of requests and specify where the results should be sent.The company provides models to hundreds of users. The usage patterns for the models are irregular. Some models could be unused for days or weeks. Other models could receive batches of thousands of requests at a time.Which design should a solutions architect recommend to meet these requirements?

Accepted Answer

Direct the requests from the API into an Amazon Simple Queue Service (Amazon SQS) queue. Deploy the models as Amazon Elastic Container Service (Amazon ECS) services that read from the queue. Enable AWS Auto Scaling on Amazon ECS for both the cluster and copies of the service based on the queue size.

Answer

Direct the requests from the API to a Network Load Balancer (NLB). Deploy the models as AWS Lambda functions that are invoked by the NLB.

Answer

Direct the requests from the API to an Application Load Balancer (ALB). Deploy the models as Amazon Elastic Container Service (Amazon ECS) services that read from an Amazon Simple Queue Service (Amazon SQS) queue. Use AWS App Mesh to scale the instances of the ECS cluster based on the SQS queue size.

Answer

Direct the requests from the API into an Amazon Simple Queue Service (Amazon SQS) queue. Deploy the models as AWS Lambda functions that are invoked by SQS events. Use AWS Auto Scaling to increase the number of vCPUs for the Lambda functions based on the SQS queue size.

Question 33

A company operates an ecommerce website on Amazon EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group. The site is experiencing performance issues related to a high request rate from illegitimate external systems with changing IP addresses. The security team is worried about potential DDoS attacks against the website. The company must block the illegitimate incoming requests in a way that has a minimal impact on legitimate users.What should a solutions architect recommend?

Accepted Answer

Deploy AWS WAF, associate it with the ALB, and configure a rate-limiting rule.

Answer

Deploy Amazon Inspector and associate it with the ALB.

Answer

Deploy rules to the network ACLs associated with the ALB to block the incoming traffic.

Answer

Deploy Amazon GuardDuty and enable rate-limiting protection when configuring GuardDuty.

Question 34

A company wants to use artificial intelligence (Al) to determine the quality of its customer service calls. The company currently manages calls in four different languages, including English. The company will offer new languages in the future. The company does not have the resources to regularly maintain machine learning (ML) models.The company needs to create written sentiment analysis reports from the customer service call recordings. The customer service call recording text must be translated into English.Which combination of steps will meet these requirements? (Select THREE.)

Accepted Answer

Use Amazon Transcribe to convert the audio recordings in any language into text.

Accepted Answer

Use Amazon Translate to translate text in any language to English.

Accepted Answer

Use Amazon Comprehend to create the sentiment analysis reports.

Answer

Use Amazon Comprehend to translate the audio recordings into English.

Answer

Use Amazon Lex to create the written sentiment analysis reports.

Answer

Use Amazon Polly to convert the audio recordings into text.

Question 35

A manufacturing company has machine sensors that upload .csv files to an Amazon S3 bucket. These .csv files must be converted into images and must be made available as soon as possible for the automatic generation of graphical reports.The images become irrelevant after 1 month, but the .csv files must be kept to train machine learning (ML) models twice a year. The ML trainings and audits are planned weeks in advance.Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO.)

Accepted Answer

Design an AWS Lambda function that converts the .csv files into images and stores the images in the S3 bucket. Invoke the Lambda function when a .csv file is uploaded.

Accepted Answer

Create S3 Lifecycle rules for .csv files and image files in the S3 bucket. Transition the .csv files from S3 Standard to S3 Glacier 1 day after they are uploaded. Expire the image files after 30 days.

Answer

Launch an Amazon EC2 Spot Instance that downloads the .csv files every hour, generates the image files, and uploads the images to the S3 bucket.

Answer

Create S3 Lifecycle rules for .csv files and image files in the S3 bucket. Transition the .csv files from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) 1 day after they are uploaded. Expire the image files after 30 days.

Answer

Create S3 Lifecycle rules for .csv files and image files in the S3 bucket. Transition the .csv files from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-IA) 1 day after they are uploaded. Keep the image files in Reduced Redundancy Storage (RRS).

Question 36

A company used an Amazon RDS for MySQL DB instance during application testing. Before terminating the DB instance at the end of the test cycle, a solutions architect created two backups. The solutions architect created the first backup by using the mysqldump utility to create a database dump. The solutions architect created the second backup by enabling the final DB snapshot option on RDS termination.The company is now planning for a new test cycle and wants to create a new DB instance from the most recent backup. The company has chosen a MySQL-compatible edition of Amazon Aurora to host the DB instance.Which solutions will create the new DB instance? (Select TWO.)

Accepted Answer

Import the RDS snapshot directly into Aurora.

Accepted Answer

Upload the database dump to Amazon S3. Then import the database dump into Aurora.

Answer

Upload the RDS snapshot to Amazon S3. Then import the RDS snapshot into Aurora.

Answer

Use AWS Database Migration Service (AWS DMS) to import the RDS snapshot into Aurora.

Answer

Upload the database dump to Amazon S3. Then use AWS Database Migration Service (AWS DMS) to import the database dump into Aurora.

Question 37

A company is storing 700 terabytes of data on a large network-attached storage (NAS) system in fts corporate data center. The company has a hybrid environment with a 10 Gbps AWS Direct Connect connection.After an audit from a regulator, the company has 90 days to move the data to the cloud. The company needs to move the data efficiently and without disruption. The company still needs to be able to access and update the data during the transfer window.Which solution will meet these requirements?

Accepted Answer

Create an AWS DataSync agent in the corporate data center. Create a data transfer task. Start the transfer to an Amazon S3 bucket.

Answer

Back up the data to AWS Snowball Edge Storage Optimized devices. Ship the devices to an AWS data center. Mount a target Amazon S3 bucket on the on-premises file system.

Answer

Use rsync to copy the data directly from local storage to a designated Amazon S3 bucket over the Direct Connect connection.

Answer

Back up the data on tapes. Ship the tapes to an AWS data center. Mount a target Amazon S3 bucket on the on-premises file system.

Question 38

A company moved its on-premises PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. The company successfully launched a new product. The workload on the database has increased.The company wants to accommodate the larger workload without adding infrastructure.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Buy reserved DB instances for the total workload. Make the Amazon RDS for PostgreSQL DB instance larger.

Answer

Make the Amazon RDS for PostgreSQL DB instance a Multi-AZ DB instance.

Answer

Buy reserved DB instances for the total workload. Add another Amazon RDS for PostgreSQL DB instance.

Answer

Make the Amazon RDS for PostgreSQL DB instance an on-demand DB instance.

Question 39

A company hosts a multi-tier web application on Amazon Linux Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The company observes that the Auto Scaling group launches more On-Demand Instances when the application's end users access high volumes of static web content. The company wants to optimize cost.What should a solutions architect do to redesign the application MOST cost-effectively?

Accepted Answer

Create an Amazon CloudFront distribution to host the static web contents from an Amazon S3 bucket.

Answer

Update the Auto Scaling group to use Reserved Instances instead of On-Demand Instances.

Answer

Update the Auto Scaling group to scale by launching Spot Instances instead of On-Demand Instances.

Answer

Create an AWS Lambda function behind an Amazon API Gateway API to host the static website contents.

Question 40

A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS). The application needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours. The file system needs to provide a mount target in each Availability Zone within a Region.A solutions architect wants to use AWS Backup to manage the replication to another Region.Which solution will meet these requirements?

Accepted Answer

Amazon FSx for NetApp ONTAP with a Multi-AZ deployment

Answer

'Amazon FSx for Windows File Server with a Multi-AZ deployment

Answer

'Amazon Elastic File System (Amazon EFS) with the Standard storage class

Answer

Amazon FSx for OpenZFS

Amazon SAA-C03 Practice Test 12

Amazon SAA-C03 Practice Tests