Quiz IT certification exam

Question 1

A company has developed a new video game as a web application. The application is in a three-tier architecture in a VPC with Amazon RDS for MySQL in the database layer. Several players will compete concurrently online. The game's developers want to display a top-10 scoreboard in near-real time and offer the ability to stop and restore the game while preserving the current scores.

What should a solutions architect do to meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Set up an Amazon ElastiCache for Redis cluster to compute and cache the scores for the web application to display.

Answer

Set up an Amazon ElastiCache for Memcached cluster to cache the scores for the web application to display.

Answer

Place an Amazon CloudFront distribution in front of the web application to cache the scoreboard in a section of the application.

Answer

Create a read replica on Amazon RDS for MySQL to run queries to compute the scoreboard and serve the read traffic to the web application.

Question 2

A company wants to share accounting data with an external auditor. The data is stored in an Amazon RDS DB instance that resides in a private subnet. The auditor has its own AWS account and requires its own copy of the database.What is the MOST secure way for the company to share the database with the auditor?

Accepted Answer

Create an encrypted snapshot of the database. Share the snapshot with the auditor. Allow access to the AWS Key Management Service (AWS KMS) encryption key.

Answer

Create a read replica of the database. Configure IAM standard database authentication to grant the auditor access.

Answer

Export the database contents to text files. Store the files in an Amazon S3 bucket. Create a new IAM user for the auditor. Grant the user access to the S3 bucket.

Answer

Copy a snapshot of the database to an Amazon S3 bucket. Create an IAM user. Share the user's keys with the auditor to grant access to the object in the $3 bucket.

Question 3

A retail company uses a regional Amazon API Gateway API for its public REST APIs. The API Gateway endpoint is a custom domain name that points to an Amazon Route 53 alias record. A solutions architect needs to create a solution that has minimal effects on customers and minimal data loss to release the new version of APIs.Which solution will meet these requirements?

Accepted Answer

Create a canary release deployment stage for API Gateway. Deploy the latest API version. Point an appropriate percentage of traffic to the canary stage. After API verification, promote the canary stage to the production stage.

Answer

Create a new API Gateway endpoint with a new version of the API in OpenAPI YAML file format. Use the import-to-update operation in merge mode into the API in API Gateway. Deploy the new version of the API to the production stage.

Answer

Create a new API Gateway endpoint with a new version of the API in OpenAPI JSON file format. Use the import-to-update operation in overwrite mode into the API in API Gateway. Deploy the new version of the API to the production stage.

Answer

Create a new API Gateway endpoint with new versions of the API definitions. Create a custom domain name for the new API Gateway API. Point the Route 53 alias record to the new API Gateway API custom domain name.

Question 4

A company has a web application for travel ticketing. The application is based on a database that runs in a single data center in North America.  The company wants to expand the application to serve a global user base. The company needs to deploy the application to multiple AWS Regions. Average latency must be less than 1 second on updates to the reservation database.The company wants to have separate deployments of its web platform across multiple Regions. However the company must maintain a single primary reservation database that is globally consistent.Which solution should a solutions architect recommend to meet these requirements?

Accepted Answer

Migrate the database to an Amazon Aurora MySQL database. Deploy Aurora Read Replicas in each Region. Use the correct Regional endpoint in each Regional deployment for access to the database.

Answer

Convert the application to use Amazon DynamoDB. Use a global table for the center reservation table. Use the correct Regional endpoint in each Regional deployment.

Answer

Migrate the database to an Amazon RDS for MySQL database Deploy MySQL read replicas in each Region. Use the correct Regional endpoint in each Regional deployment for access to the database.

Answer

Migrate the application to an Amazon Aurora Serverless database. Deploy instances of the database to each Region. Use the correct Regional endpoint in each Regional deployment to access the database. Use AWS Lambda functions to process event streams in each Region to synchronize the databases.

Question 5

An application uses an Amazon RDS MySQL DB instance. The RDS database is becoming low on disk space. A solutions architect wants to increase the disk space without downtime.Which solution meets these requirements with the LEAST amount of effort?

Accepted Answer

Enable storage autoscaling in RDS.

Answer

Increase the RDS database instance size.

Answer

Change the RDS database instance storage type to Provisioned IOPS.

Answer

Back up the RDS database, increase the storage capacity, restore the database, and stop the previous instance

Question 6

A company wants to use high-performance computing and artificial intelligence to improve its fraud prevention and detection technology. The company requires distributed processing to complete a single workload as quickly as possible.Which solution will meet these requirements?

Accepted Answer

Use AWS ParallelCluster and the Message Passing Interface (MPI) libraries.

Answer

Use Amazon Elastic Kubernetes Service (Amazon EKS) and multiple containers.

Answer

Use an Application Load Balancer and Amazon EC2 instances.

Answer

Use AWS Lambda functions.

Question 7

A company needs to connect several VPCs in the us-east-1 Region that span hundreds of AWS accounts. The company's networking team has its own AWS account to manage the cloud network.What is the MOST operationally efficient solution to connect the VPCs?

Accepted Answer

Create an AWS Transit Gateway in the networking team's AWS account. Configure static routes from each VPC.

Answer

Set up VPC peering connections between each VPC. Update each associated subnet's route table.

Answer

Configure a NAT gateway and an internet gateway in each VPC to connect each VPC through the internet.

Answer

Deploy VPN gateways in each VPC. Create a transit VPC in the networking team's AWS account to connect to each VPC.

Question 8

A company's data platform uses an Amazon Aurora MySQL database. The database has multiple read replicas and multiple DB instances across different Availability Zones. Users have recently reported errors from the database that indicate that there are too many connections. The company wants to reduce the failover time by 20% when a read replica is promoted to primary writer.Which solution will meet this requirement?

Accepted Answer

Use Amazon RDS Proxy in front of the Aurora database.

Answer

Switch from Aurora to Amazon RDS with Multi-AZ cluster deployment.

Answer

Switch to Amazon DynamoDB with DynamoDB Accelerator (DAX) for read connections.

Answer

Switch to Amazon Redshift with relocation capability.

Question 9

A global marketing company has applications that run in the ap-southeast-2 Region and the eu-west-1 Region. Applications that run in a VPC in eu-west-1 need to communicate securely with databases that run in a VPC in ap-southeast-2.Which network design will meet these requirements?

Accepted Answer

Configure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPC. Update the subnet route tables Create an inbound rule in the ap-southeast-2 database security group that allows traffic from the eu-west-1 application server IP addresses.

Answer

Create a VPC peering connection between the eu-west-1 VPC and the ap-southeast-2 VPC. Create an inbound rule in the eu-west-1 application security group that allows traffic from the database server IP addresses in the ap-southeast-2 security group.

Answer

Configure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPC. Update the subnet route tables. Create an inbound rule in the ap-southeast-2 database security group that references the security group ID of the application servers in eu-west-1.

Answer

Create a transit gateway with a peering attachment between the eu-west-1 VPC and the ap-southeast-2 VPC. After the transit gateways are properly peered and routing is configured, create an inbound rule in the database security group that references the security group ID of the application servers in eu-west-1.

Question 10

A company needs to store contract documents. A contract lasts for 5 years. During the 5-year period, the company must ensure that the documents cannot be overwritten or deleted. The company needs to encrypt the documents at rest and rotate the encryption keys automatically every year.Which combination of steps should a solutions architect take to meet these requirements with the LEAST operational overhead? (Select TWO.)

Accepted Answer

Store the documents in Amazon S3. Use S3 Object Lock in compliance mode.

Accepted Answer

Use server-side encryption with AWS Key Management Service (AWS KMS) customer managed keys. Configure key rotation.

Answer

Store the documents in Amazon S3. Use S3 Object Lock in governance mode.

Answer

Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Configure key rotation.

Answer

Use server-side encryption with AWS Key Management Service (AWS KMS) customer provided (imported) keys. Configure key rotation.

Question 11

A company runs a website that uses a content management system (CMS) on Amazon EC2. The CMS runs on a single EC2 instance and uses an Amazon Aurora MySQL Multi-AZ DB instance for the data tier. Website images are stored on an Amazon Elastic Block Store (Amazon EBS) volume that is mounted inside the EC2 instance.Which combination of actions should a solutions architect take to improve the performance and resilience of the website? (Select TWO.)

Accepted Answer

Move the website images onto an Amazon Elastic File System (Amazon EFS) file system that is mounted on every EC2 instance.

Accepted Answer

Create an Amazon Machine Image (AMI) from the existing EC2 instance. Use the AMI to provision new instances behind an Application Load Balancer as part of an Auto Scaling group. Configure the Auto Scaling group to maintain a minimum of two instances. Configure an Amazon CloudFront distribution for the website.

Answer

Move the website images into an Amazon S3 bucket that is mounted on every EC2 instance.

Answer

Share the website images by using an NFS share from the primary EC2 instance. Mount this share on the other EC2 instances.

Answer

Create an Amazon Machine Image (AMI) from the existing EC2 instance Use the AMI to provision new instances behind an Application Load Balancer as part of an Auto Scaling group. Configure the Auto Scaling group to maintain a minimum of two instances. Configure an accelerator in AWS Global Accelerator for the website.

Question 12

A company runs container applications by using Amazon Elastic Kubernetes Service (Amazon EKS) and the Kubernetes Horizontal Pod Autoscaler. The workload is not consistent throughout the day. A solutions architect notices that the number of nodes does not automatically scale out when the existing nodes have reached maximum capacity in the cluster, which causes performance issuesWhich solution will resolve this issue with the LEAST administrative overhead?

Accepted Answer

Use the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster.

Answer

Scale out the nodes by tracking the memory usage

Answer

Use an AWS Lambda function to resize the EKS cluster automatically.

Answer

Use an Amazon EC2 Auto Scaling group to distribute the workload.

Question 13

A company is running a microservices application on Amazon EC2 instances. The company wants to migrate the application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for scalability. The company must configure the Amazon EKS control plane with endpoint private access set to true and endpoint public access set to false to maintain security compliance The company must also put the data plane in private subnets. However, the company has received error notifications because the node cannot join the cluster.Which solution will allow the node to join the cluster?

Accepted Answer

Create interface VPC endpoints to allow nodes to access the control plane.

Answer

Grant the required permission in AWS Identity and Access Management (IAM) to the AmazonEKSNodeRole IAM role.

Answer

Recreate nodes in the public subnet Restrict security groups for EC2 nodes

Answer

Allow outbound traffic in the security group of the nodes.

Question 14

A company has a small Python application that processes JSON documents and outputs the results to an on-premises SQL database. The application runs thousands of times each day. The company wants to move the application to the AWS Cloud. The company needs a highly available solution that maximizes scalability and minimizes operational overhead.Which solution will meet these requirements?

Accepted Answer

Place the JSON documents in an Amazon S3 bucket. Create an AWS Lambda function that runs the Python code to process the documents as they arrive in the S3 bucket. Store the results in an Amazon Aurora DB cluster.

Answer

Place the JSON documents in an Amazon S3 bucket. Run the Python code on multiple Amazon EC2 instances to process the documents. Store the results in an Amazon Aurora DB cluster

Answer

Place the JSON documents in an Amazon Elastic Block Store (Amazon EBS) volume. Use the EBS Multi-Attach feature to attach the volume to multiple Amazon EC2 instances. Run the Python code on the EC2 instances to process the documents. Store the results on an Amazon RDS DB instance.

Answer

Place the JSON documents in an Amazon Simple Queue Service (Amazon SQS) queue as messages Deploy the Python code as a container on an Amazon Elastic Container Service (Amazon ECS) cluster that is configured with the Amazon EC2 launch type. Use the container to process the SQS messages. Store the results on an Amazon RDS DB instance.

Question 15

A company needs to minimize the cost of its 1 Gbps AWS Direct Connect connection. The company's average connection utilization is less than 10%. A solutions architect must recommend a solution that will reduce the cost without compromising security.Which solution will meet these requirements?

Accepted Answer

Contact an AWS Direct Connect Partner to order a 200 Mbps hosted connection for an existing AWS account.

Answer

Set up a new 1 Gbps Direct Connect connection. Share the connection with another AWS account.

Answer

Set up a new 200 Mbps Direct Connect connection in the AWS Management Console.

Answer

Contact an AWS Direct Connect Partner to order a 1 Gbps connection. Share the connection with another AWS account.

Question 16

A company has migrated multiple Microsoft Windows Server workloads to Amazon EC2 instances that run in the us-west-1 Region. The company manually backs up the workloads to create an image as needed.In the event of a natural disaster in the us-west-1 Region, the company wants to recover workloads quickly in the us-west-2 Region. The company wants no more than 24 hours of data loss on the EC2 instances. The company also wants to automate any backups of the EC2 instances.Which solutions will meet these requirements with the LEAST administrative effort? (Select TWO.)

Accepted Answer

Create an Amazon EC2-backed Amazon Machine Image (AMI) lifecycle policy to create a backup based on tags. Schedule the backup to run twice daily. Configure the copy to the us-west-2 Region.

Accepted Answer

Create a backup vault by using AWS Backup. Use AWS Backup to create a backup plan for the EC2 instances based on tag values. Define the destination for the copy as us-west-2. Specify the backup schedule to run twice daily.

Answer

Create an Amazon EC2-backed Amazon Machine Image (AMI) lifecycle policy to create a backup based on tags. Schedule the backup to run twice daily. Copy the image on demand.

Answer

Create backup vaults in us-west-1 and in us-west-2 by using AWS Backup. Create a backup plan for the EC2 instances based on tag values. Create an AWS Lambda function to run as a scheduled job to copy the backup data to us-west-2.

Answer

Create a backup vault by using AWS Backup. Use AWS Backup to create a backup plan for the EC2 instances based on tag values. Specify the backup schedule to run twice daily. Copy on demand to us-west-2.

Question 17

A serverless application uses Amazon API Gateway. AWS Lambda, and Amazon DynamoDB. The Lambda function needs permissions to read and write to the DynamoDB table.Which solution will give the Lambda function access to the DynamoDB table MOST securely?

Accepted Answer

Create an IAM role that includes Lambda as a trusted service. Attach a policy to the role that allows read and write access to the DynamoDB table. Update the configuration of the Lambda function to use the new role as the execution role.

Answer

Create an IAM user with programmatic access to the Lambda function. Attach a policy to the user that allows read and write access to the DynamoDB table. Store the access_key_id and secret_access_key parameters as part of the Lambda environment variables. Ensure that other AWS users do not have read and write access to the Lambda function configuration

Answer

Create an IAM user with programmatic access to the Lambda function. Attach a policy to the user that allows read and write access to the DynamoDB table. Store the access_key_id and secret_access_key parameters in AWS Systems Manager Parameter Store as secure string parameters. Update the Lambda function code to retrieve the secure string parameters before connecting to the DynamoDB table.

Answer

Create an IAM role that includes DynamoDB as a trusted service. Attach a policy to the role that allows read and write access from the Lambda function. Update the code of the Lambda function to attach to the new role as an execution role.

Question 18

A company operates a two-tier application for image processing. The application uses two Availability Zones, each with one public subnet and one private subnet. An Application Load Balancer (ALB) for the web tier uses the public subnets. Amazon EC2 instances for the application tier use the private subnets.Users report that the application is running more slowly than expected. A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses. A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution.What should the solutions architect recommend to meet this requirement?

Accepted Answer

Modify the network ACL for the web tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources

Answer

Modify the inbound security group for the web tier. Add a deny rule for the IP addresses that are consuming resources.

Answer

Modify the inbound security group for the application tier. Add a deny rule for the IP addresses that are consuming resources.

Answer

Modify the network ACL for the application tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources

Question 19

An loT company is releasing a mattress that has sensors to collect data about a user's sleep. The sensors will send data to an Amazon S3 bucket. The sensors collect approximately 2 MB of data every night for each mattress. The company must process and summarize the data for each mattress. The results need to be available as soon as possible Data processing will require 1 GB of memory and will finish within 30 seconds.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use AWS Lambda with a Python script.

Answer

Use AWS Glue with a Scalajob.

Answer

Use Amazon EMR with an Apache Spark script.

Answer

Use AWS Glue with a PySpark job.

Question 20

A company wants lo build a web application on AWS. Client access requests to the website are not predictable and can be idle for a long time. Only customers who have paid a subscription fee can have the ability to sign in and use the web application.Which combination of steps will meet these requirements MOST cost-effectively? (Select THREE.)

Accepted Answer

Create an AWS Lambda function to retrieve user information from Amazon DynamoDB. Create an Amazon API Gateway endpoint to accept RESTful APIs. Send the API calls to the Lambda function.

Accepted Answer

Create an Amazon Cogmto user pool to authenticate users

Accepted Answer

Use AWS Amplify to serve the frontend web content with HTML. CSS, and JS. Use an integrated Amazon CloudFront configuration.

Answer

Create an Amazon Elastic Container Service (Amazon ECS) service behind an Application Load Balancer to retrieve user information from Amazon RDS. Create an Amazon API Gateway endpoint to accept RESTful APIs. Send the API calls to the Lambda function.

Answer

Create an Amazon Cognito identity pool to authenticate users.

Answer

Use Amazon S3 static web hosting with PHP. CSS. and JS. Use Amazon CloudFront to serve the frontend web content.

Question 21

A company runs a container application by using Amazon Elastic Kubernetes Service (Amazon EKS). The application includes microservices that manage customers and place orders. The company needs to route incoming requests to the appropriate microservices.Which solution will meet this requirement MOST cost-effectively?

Accepted Answer

Use the AWS Load Balancer Controller to provision an Application Load Balancer.

Answer

Use the AWS Load Balancer Controller to provision a Network Load Balancer.

Answer

Use an AWS Lambda function to connect the requests to Amazon EKS.

Answer

Use Amazon API Gateway to connect the requests to Amazon EKS.

Question 22

A company migrated a MySQL database from the company's on-premises data center to an Amazon RDS for MySQL DB instance. The company sized the RDS DB instance to meet the company's average daily workload. Once a month, the database performs slowly when the company runs queries for a report. The company wants to have the ability to run reports and maintain the performance of the daily workloads.Which solution will meet these requirements?

Accepted Answer

Export the data to Amazon S3. Use Amazon Athena to query the S3 bucket.

Answer

Create a read replica of the database. Direct the queries to the read replica.

Answer

Create a backup of the database. Restore the backup to another DB instance. Direct the queries to the new database.

Answer

Resize the DB instance to accommodate the additional workload.

Question 23

A gaming company uses Amazon DynamoDB to store user information such as geographic location, player data, and leaderboards. The company needs to configure continuous backups to an Amazon S3 bucket with a minimal amount of coding. The backups must not affect availability of the application and must not affect the read capacity units (RCUs) that are defined for the tableWhich solution meets these requirements?

Accepted Answer

Export the data directly from DynamoDB to Amazon S3 with continuous backups. Turn on point-in-time recovery for the table.

Answer

Use an Amazon EMR cluster. Create an Apache Hive job to back up the data to Amazon S3.

Answer

Configure Amazon DynamoDB Streams. Create an AWS Lambda function to consume the stream and export the data to an Amazon S3 bucket.

Answer

Create an AWS Lambda function to export the data from the database tables to Amazon S3 on a regular basis. Turn on point-in-time recovery for the table.

Question 24

A company is deploying a new application on Amazon EC2 instances. The application writes data to Amazon Elastic Block Store (Amazon EBS) volumes. The company needs to ensure that all data that is written to the EBS volumes is encrypted at rest.Which solution will meet this requirement?

Accepted Answer

Create the EBS volumes as encrypted volumes. Attach the EBS volumes to the EC2 instances

Answer

Create an IAM role that specifies EBS encryption. Attach the role to the EC2 instances.

Answer

Create an EC2 instance tag that has a key of Encrypt and a value of True. Tag all instances that require encryption at the EBS level.

Answer

Create an AWS Key Management Service (AWS KMS) key policy that enforces EBS encryption in the account. Ensure that the key policy is active

Question 25

A company uses on-premises servers to host its applications The company is running out of storage capacity. The applications use both block storage and NFS storage. The company needs a high-performing solution that supports local caching without re-architecting its existing applications.Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)

Accepted Answer

Deploy an AWS Storage Gateway file gateway to replace NFS storage.

Accepted Answer

Deploy an AWS Storage Gateway volume gateway to replace the block storage

Answer

Mount Amazon S3 as a file system to the on-premises servers.

Answer

Deploy AWS Snowball Edge to provision NFS mounts to on-premises servers.

Answer

Deploy Amazon Elastic File System (Amazon EFS) volumes and mount them to on-premises servers.

Question 26

A company uses Amazon EC2 instances to host its internal systems. As part of a deployment operation, an administrator tries to use the AWS CLI to terminate an EC2 instance. However, the administrator receives a 403 (Access Denied) error message.The administrator is using an IAM role that has the following IAM policy attached:<img alt="Amazon SAA-C03 image Question 506 5417 09162024005823000000"   width="540" height="539" src="https://examgecko.com/getfile/f0f56fe1-1c33-449c-855b-a5a0551a7f42">What is the cause of the unsuccessful request?

Accepted Answer

The request to terminate the EC2 instance does not originate from the CIDR blocks 192.0.2.0/24 or 203.0 113.0/24

Answer

The EC2 instance has a resource-based policy with a Deny statement.

Answer

The principal has not been specified in the policy statement

Answer

The 'Action' field does not grant the actions that are required to terminate the EC2 instance.

Question 27

A company runs an infrastructure monitoring service. The company is building a new feature that will enable the service to monitor data in customer AWS accounts. The new feature will call AWS APIs in customer accounts to describe Amazon EC2 instances and read Amazon CloudWatch metrics.What should the company do to obtain access to customer accounts in the MOST secure way?

Accepted Answer

Ensure that the customers create an IAM role in their account with read-only EC2 and CloudWatch permissions and a trust policy to the company's account.

Answer

Create a serverless API that implements a token vending machine to provide temporary AWS credentials for a role with read-only EC2 and CloudWatch permissions.

Answer

Ensure that the customers create an IAM user in their account with read-only EC2 and CloudWatch permissions. Encrypt and store customer access and secret keys in a secrets management system.

Answer

Ensure that the customers create an Amazon Cognito user in their account to use an IAM role with read-only EC2 and CloudWatch permissions. Encrypt and store the Amazon Cognito user and password in a secrets management system.

Question 28

A company has multiple Windows file servers on premises. The company wants to migrate and consolidate its files into an Amazon FSx for Windows File Server file system. File permissions must be preserved to ensure that access rights do not change.Which solutions will meet these requirements? (Select TWO.)

Accepted Answer

Deploy AWS DataSync agents on premises. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system.

Accepted Answer

Order an AWS Snowcone device. Connect the device to the on-premises network. Launch AWS DataSync agents on the device. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system,

Answer

Copy the shares on each file server into Amazon S3 buckets by using the AWS CLI Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.

Answer

Remove the drives from each file server Ship the drives to AWS for import into Amazon S3. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system

Answer

Order an AWS Snowball Edge Storage Optimized device. Connect the device to the on-premises network. Copy data to the device by using the AWS CLI. Ship the device back to AWS for import into Amazon S3. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.

Question 29

A company wants to create an application to store employee data in a hierarchical structured relationship. The company needs a minimum-latency response to high-traffic queries for the employee data and must protect any sensitive data.  The company also needs to receive monthly email messages if any financial information is present in the employee data.Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

Accepted Answer

Use Amazon DynamoDB to store the employee data in hierarchies. Export the data to Amazon S3 every month.

Accepted Answer

Configure Amazon Macie for the AWS account Integrate Macie with Amazon EventBridge to send monthly notifications through an Amazon Simple Notification Service (Amazon SNS) subscription.

Answer

Use Amazon Redshift to store the employee data in hierarchies. Unload the data to Amazon S3 every month.

Answer

Configure Amazon fvlacie for the AWS account. Integrate Macie with Amazon EventBridge to send monthly events to AWS Lambda.

Answer

Use Amazon Athena to analyze the employee data in Amazon S3. Integrate Athena with Amazon QuickSight to publish analysis dashboards and share the dashboards with users.

Question 30

A company needs to configure a real-time data ingestion architecture for its application. The company needs an API. a process that transforms data as the data is streamed, and a storage solution for the data.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Configure an Amazon API Gateway API to send data to an Amazon Kinesis data stream. Create an Amazon Kinesis Data Firehose delivery stream that uses the Kinesis data stream as a data source. Use AWS Lambda functions to transform the data. Use the Kinesis Data Firehose delivery stream to send the data to Amazon S3.

Answer

Deploy an Amazon EC2 instance to host an API that sends data to an Amazon Kinesis data stream. Create an Amazon Kinesis Data Firehose delivery stream that uses the Kinesis data stream as a data source. Use AWS Lambda functions to transform the data. Use the Kinesis Data Firehose delivery stream to send the data to Amazon S3.

Answer

Deploy an Amazon EC2 instance to host an API that sends data to AWS Glue. Stop source/destination checking on the EC2 instance. Use AWS Glue to transform the data and to send the data to Amazon S3.

Answer

Configure an Amazon API Gateway API to send data to AWS Glue. Use AWS Lambda functions to transform the data. Use AWS Glue to send the data to Amazon S3.

Question 31

A social media company is building a feature for its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users.Which solution meets these requirements with the MOST scalability?

Accepted Answer

Generate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket.

Answer

Upload files from the user's browser to the application servers. Transfer the files to an Amazon S3 bucket.

Answer

Provision an AWS Storage Gateway file gateway. Upload files directly from the user's browser to the file gateway.

Answer

Provision an Amazon Elastic File System (Amazon EFS) file system Upload files directly from the user's browser to the file system

Question 32

A company is planning to use an Amazon DynamoDB table for data storage. The company is concerned about cost optimization. The table will not be used on most mornings. In the evenings, the read and write traffic will often be unpredictable. When traffic spikes occur, they will happen very quickly.What should a solutions architect recommend?

Accepted Answer

Create a DynamoDB table in on-demand capacity mode.

Answer

Create a DynamoDB table with a global secondary index

Answer

Create a DynamoDB table with provisioned capacity and auto scaling.

Answer

Create a DynamoDB table in provisioned capacity mode, and configure it as a global table

Question 33

A social media company wants to allow its users to upload images in an application that is hosted in the AWS Cloud. The company needs a solution that automatically resizes the images so that the images can be displayed on multiple device types. The application experiences unpredictable traffic patterns throughout the day. The company is seeking a highly available solution that maximizes scalability.What should a solutions architect do to meet these requirements?

Accepted Answer

Create a static website hosted in Amazon S3 that invokes AWS Lambda functions to resize the images and store the images in an Amazon S3 bucket.

Answer

Create a static website hosted in Amazon CloudFront that invokes AWS Step Functions to resize the images and store the images in an Amazon RDS database.

Answer

Create a dynamic website hosted on a web server that runs on an Amazon EC2 instance Configure a process that runs on the EC2 instance to resize the images and store the images in an Amazon S3 bucket.

Answer

Create a dynamic website hosted on an automatically scaling Amazon Elastic Container Service (Amazon ECS) cluster that creates a resize job in Amazon Simple Queue Service (Amazon SQS). Set up an image-resizing program that runs on an Amazon EC2 instance to process the resize jobs

Question 34

A company runs applications on AWS that connect to the company's Amazon RDS database. The applications scale on weekends and at peak times of the year. The company wants to scale the database more effectively for its applications that connect to the database.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use Amazon RDS Proxy with a target group for the database. Change the applications to use the RDS Proxy endpoint.

Answer

Use Amazon DynamoDB with connection pooling with a target group configuration for the database. Change the applications to use the DynamoDB endpoint.

Answer

Use a custom proxy that runs on Amazon EC2 as an intermediary to the database. Change the applications to use the custom proxy endpoint.

Answer

Use an AWS Lambda function to provide connection pooling with a target group configuration for the database. Change the applications to use the Lambda function.

Question 35

A company runs an application that uses Amazon RDS for PostgreSQL. The application receives traffic only on weekdays during business hours. The company wants to optimize costs and reduce operational overhead based on this usage.Which solution will meet these requirements?

Accepted Answer

Use the Instance Scheduler on AWS to configure start and stop schedules.

Answer

Turn off automatic backups. Create weekly manual snapshots of the database.

Answer

Create a custom AWS Lambda function to start and stop the database based on minimum CPU utilization.

Answer

Purchase All Upfront reserved DB instances.

Question 36

A company is building a RESTful serverless web application on AWS by using Amazon API Gateway and AWS Lambd a. The users of this web application will be geographically distributed, and the company wants to reduce the latency of API requests to these users Which type of endpoint should a solutions architect use to meet these requirements?

Accepted Answer

Edge-optimzed endpoint

Answer

Private endpoint

Answer

Regional endpoint

Answer

Interface VPC endpoint

Question 37

A company is deploying a new public web application toAWS. The application Will run behind an Application Load Balancer (ALE). The application needs to be encrypted at the edge with an SSL/TLS certificate that is issued by an external certificate authority (CA). The certificate must be rotated each year before the certificate expires.What should a solutions architect do to meet these requirements?

Accepted Answer

Use AWS Certificate Manager (ACM) to import an SSL/TLS certificate. Apply the certificate to the ALB_ Use Amazon EventBridge to send a notification when the certificate is nearing expiration.Rotate the certificate manually.

Answer

Use AWS Certificate Manager (ACM) to issue an SSUTLS certificate. Apply the certificate to the ALB Use the managed renewal feature to automatically rotate the certificate.

Answer

Use AWS Certificate Manager (ACM) to issue an SSUTLS certificate_ Import the key material from the certificate. Apply the certificate to the ALB Use the managed renewal teature to automatically rotate the certificate.

Answer

Use AWS Private Certificate Authority to issue an SSL/TLS certificate from the root CA. Apply the certificate to the ALB. use the managed renewal feature to automatically rotate the certificate

Question 38

A company has an on-premises MySQL database that handles transactional dat a. The company is migrating the database to the AWS Cloud. The migrated database must maintain compatibility with the company's applications that use the database. The migrated database also must scale automatically during periods of increased demand.Which migration solution will meet these requirements?

Accepted Answer

Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon Aurora. Turn on Aurora Auto Scaling.

Answer

Use native MySQL tools to migrate the database to Amazon RDS for MySQL. Configure elastic storage scaling.

Answer

Migrate the database to Amazon Redshift by using the mysqldump utility. Turn on Auto Scaling for the Amazon Redshift cluster.

Answer

Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon DynamoDB.Configure an Auto Scaling policy.

Question 39

A company's infrastructure consists of Amazon EC2 instances and an Amazon RDS DB instance in a single AWS Region. The company wants to back up its data in a separate Region.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use AWS Backup to copy EC2 backups and RDS backups to the separate Region.

Answer

Use Amazon Data Lifecycle Manager (Amazon DLM) to copy EC2 backups and RDS backups to the separate Region.

Answer

Create Amazon Machine Images (AMIs) of the EC2 instances. Copy the AMIs to the separate Region. Create a read replica for the RDS DB instance in the separate Region.

Answer

Create Amazon Elastic Block Store (Amazon EBS) snapshots. Copy the EBS snapshots to the separate Region. Create RDS snapshots. Export the RDS snapshots to Amazon S3. Configure S3 Cross-Region Replication (CRR) to the separate Region.

Question 40

A company runs a web application that is deployed on Amazon EC2 instances in the private subnet of a VPC. An Application Load Balancer (ALB) that extends across the public subnets directs web traffic to the EC2 instances. The company wants to implement new security measures to restrict inbound traffic from the ALB to the EC2 instances while preventing access from any other source inside or outside the private subnet of the EC2 instances.Which solution will meet these requirements?

Accepted Answer

Configure the security group for the EC2 instances to only allow traffic that comes from the security group for the ALB.

Answer

Configure a route in a route table to direct traffic from the internet to the private IP addresses of the EC2 instances.

Answer

Move the EC2 instances into the public subnet. Give the EC2 instances a set of Elastic IP addresses.

Answer

Configure the security group for the ALB to allow any TCP traffic on any port.

Amazon SAA-C03 Practice Test 13

Amazon SAA-C03 Practice Tests