Quiz IT certification exam

Question 1

A social media company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. The application has more than a billion images stored in an Amazon S3 bucket and processes thousands of images each second. The company wants to resize the images dynamically and serve appropriate formats to clients.

Which solution will meet these requirements with the LEAST operational overhead?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Use a Lambda@Edge function with an external image management library. Associate the Lambda@Edge function with the CloudFront behaviors that serve the images.

Answer

Install an external image management library on an EC2 instance. Use the image management library to process the images.

Answer

Create a CloudFront origin request policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

Answer

Create a CloudFront response headers policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

Question 2

A company hosts an application on Amazon EC2 instances that run in a single Availability Zone. The application is accessible by using the transport layer of the Open Systems Interconnection (OSI) model. The company needs the application architecture to have high availability Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO_)

Accepted Answer

Configure new EC2 instances in a different AvailabiIity Zone. Use Amazon Route 53 to route traffic to all instances.

Accepted Answer

Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group to use multiple Availability Zones. Configure the Auto Scaling group to run application health checks on the instances_

Answer

Configure a Network Load Balancer in front of the EC2 instances.

Answer

Configure a Network Load Balancer tor TCP traffic to the instances. Configure an Application Load Balancer tor HTTP and HTTPS traffic to the instances.

Answer

Create an Amazon CloudWatch alarm. Configure the alarm to restart EC2 instances that transition to a stopped state

Question 3

A company is preparing a new data platform that will ingest real-time streaming data from multiple sources. The company needs to transform the data before writing the data to Amazon S3. The company needs the ability to use SQL to query the transformed data.Which solutions will meet these requirements? (Choose two.)

Accepted Answer

Use Amazon Kinesis Data Streams to stream the data. Use Amazon Kinesis Data Analytics to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.

Accepted Answer

Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use AWS Glue to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.

Answer

Use AWS Database Migration Service (AWS DMS) to ingest the data. Use Amazon EMR to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.

Answer

Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use Amazon Kinesis Data Analytics to transform the data and to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3.

Answer

Use Amazon Kinesis Data Streams to stream the data. Use AWS Glue to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3.

Question 4

A company has two VPCs that are located in the us-west-2 Region within the same AWS account. The company needs to allow network traffic between these VPCs. Approximately 500 GB of data transfer will occur between the VPCs each month.What is the MOST cost-effective solution to connect these VPCs?

Accepted Answer

Set up a VPC peering connection between the VPCs. Update the route tables of each VPC to use the VPC peering connection for inter-VPC communication.

Answer

Implement AWS Transit Gateway to connect the VPCs. Update the route tables of each VPC to use the transit gateway for inter-VPC communication.

Answer

Implement an AWS Site-to-Site VPN tunnel between the VPCs. Update the route tables of each VPC to use the VPN tunnel for inter-VPC communication.

Answer

Set up a 1 GB AWS Direct Connect connection between the VPCs. Update the route tables of each VPC to use the Direct Connect connection for inter-VPC communication.

Question 5

A company wants to use an event-driven programming model with AWS Lambd a. The company wants to reduce startup latency for Lambda functions that run on Java 11. The company does not have strict latency requirements for the applications. The company wants to reduce cold starts and outlier latencies when a function scales up.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Configure Lambda SnapStart.

Answer

Configure Lambda provisioned concurrency.

Answer

Increase the timeout of the Lambda functions.

Answer

Increase the memory of the Lambda functions.

Question 6

A company has created a multi-tier application for its ecommerce website. The website uses an Application Load Balancer that resides in the public subnets, a web tier in the public subnets, and a MySQL cluster hosted on Amazon EC2 instances in the private subnets. The MySQL database needs to retrieve product catalog and pricing information that is hosted on the internet by a third-party provider. A solutions architect must devise a strategy that maximizes security without increasing operational overhead.What should the solutions architect do to meet these requirements?

Accepted Answer

Deploy a NAT gateway in the public subnets. Modify the private subnet route table to direct all internet-bound traffic to the NAT gateway.

Answer

Deploy a NAT instance in the VPC. Route all the internet-based traffic through the NAT instance.

Answer

Configure an internet gateway and attach it to the VPC. Modify the private subnet route table to direct internet-bound traffic to the internet gateway.

Answer

Configure a virtual private gateway and attach it to the VPC. Modify the private subnet route table to direct internet-bound traffic to the virtual private gateway.

Question 7

A solutions architect is designing a workload that will store hourly energy consumption by business tenants in a building. The sensors will feed a database through HTTP requests that will add up usage for each tenant. The solutions architect must use managed services when possible. The workload will receive more features in the future as the solutions architect adds independent components.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in an Amazon DynamoDB table.

Answer

Use an Elastic Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon S3 bucket to store the processed data.

Answer

Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in a Microsoft SQL Server Express database on an Amazon EC2 instance.

Answer

Use an Elastic Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon Elastic File System (Amazon EFS) shared file system to store the processed data.

Question 8

A company has a financial application that produces reports. The reports average 50 KB in size and are stored in Amazon S3. The reports are frequently accessed during the first week after production and must be stored for several years. The reports must be retrievable within 6 hours.Which solution meets these requirements MOST cost-effectively?

Accepted Answer

Use S3 Standard. Use an S3 Lifecycle rule to transition the reports to S3 Glacier after 7 days.

Answer

Use S3 Standard. Use an S3 Lifecycle rule to transition the reports to S3 Standard-Infrequent Access (S3 Standard-IA) after 7 days.

Answer

Use S3 Intelligent-Tiering. Configure S3 Intelligent-Tiering to transition the reports to S3 Standard-Infrequent Access (S3 Standard-IA) and S3 Glacier.

Answer

Use S3 Standard. Use an S3 Lifecycle rule to transition the reports to S3 Glacier Deep Archive after 7 days.

Question 9

A company has data collection sensors at different locations. The data collection sensors stream a high volume of data to the company. The company wants to design a platform on AWS to ingest and process high-volume streaming dat a. The solution must be scalable and support data collection in near real time. The company must store the data in Amazon S3 for future reporting.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use Amazon Kinesis Data Firehose to deliver streaming data to Amazon S3.

Answer

Use AWS Glue to deliver streaming data to Amazon S3.

Answer

Use AWS Lambda to deliver streaming data and store the data to Amazon S3.

Answer

Use AWS Database Migration Service (AWS DMS) to deliver streaming data to Amazon S3.

Question 10

A solutions architect is designing the storage architecture for a new web application used for storing and viewing engineering drawings. All application components will be deployed on the AWS infrastructure.The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load. The application must be able to store petabytes of dat a. Which combination of storage and caching should the solutions architect use?

Accepted Answer

Amazon S3 with Amazon CloudFront

Answer

Amazon S3 Glacier with Amazon ElastiCache

Answer

Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront

Answer

AWS Storage Gateway with Amazon ElastiCache

Question 11

A company runs its applications on Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS). The EC2 instances run the most recent Amazon Linux release. The applications are experiencing availability issues when the company's employees store and retrieve files that are 25 GB or larger. The company needs a solution that does not require the company to transfer files between EC2 instances. The files must be available across many EC2 instances and across multiple Availability Zones.Which solution will meet these requirements?

Accepted Answer

Mount an Amazon Elastic File System (Amazon EFS) file system across all the EC2 instances.Instruct the employees to access the files from the EC2 instances.

Answer

Migrate all the files to an Amazon S3 bucket. Instruct the employees to access the files from the S3 bucket.

Answer

Take a snapshot of the existing EBS volume. Mount the snapshot as an EBS volume across the EC2 instances. Instruct the employees to access the files from the EC2 instances.

Answer

Create an Amazon Machine Image (AMI) from the EC2 instances. Configure new EC2 instances from the AMI that use an instance store volume. Instruct the employees to access the files from the EC2 instances

Question 12

A solutions architect is using an AWS CloudFormation template to deploy a three-tier web application. The web application consists of a web tier and an application tier that stores and retrieves user data in Amazon DynamoDB tables. The web and application tiers are hosted onAmazon EC2 instances, and the database tier is not publicly accessible. The application EC2 instances need to access the DynamoDB tables without exposing API credentials in the template.What should the solutions architect do to meet these requirements?

Accepted Answer

Create an IAM role that has the required permissions to read and write from the DynamoDB tables. Add the role to the EC2 instance profile, and associate the instance profile with the application instances.

Answer

Create an IAM role to read the DynamoDB tables. Associate the role with the application instances by referencing an instance profile.

Answer

Use the parameter section in the AWS CloudFormation template to have the user input access and secret keys from an already-created IAM user that has the required permissions to read and write from the DynamoDB tables.

Answer

Create an IAM user in the AWS CloudFormation template that has the required permissions to read and write from the DynamoDB tables. Use the GetAtt function to retrieve the access and secret keys, and pass them to the application instances through the user data.

Question 13

A company sends AWS CloudTrail logs from multiple AWS accounts to an Amazon S3 bucket in a centralized account. The company must keep the CloudTrail logs. The company must also be able to query the CloudTrail logs at any time Which solution will meet these requirements?

Accepted Answer

Use the CloudTraiI event history in the centralized account to create an Amazon Athena table.Query the CloudTrail logs from Athena.

Answer

Configure an Amazon Neptune instance to manage the CloudTrail logs. Query the CloudTraiI logs from Neptune.

Answer

Configure CloudTrail to send the logs to an Amazon DynamoDB table. Create a dashboard in Amazon QulCkSight to query the logs in the table.

Answer

use Amazon Athena to create an Athena notebook. Configure CloudTrail to send the logs to the notebook. Run queries from Athena.

Question 14

A company has five organizational units (OUs) as part of its organization in AWS Organizations. Each OU correlates to the five businesses that the company owns. The company's research and development (R&D) business is separating from the company and will need its own organization. A solutions architect creates a separate new management account for this purpose.What should the solutions architect do next in the new management account?

Accepted Answer

Invite the R&D AWS account to be part of the new organization after the R&D AWS account has left the prior organization.

Answer

Have the R&D AWS account be part of both organizations during the transition.

Answer

Create a new R&D AWS account in the new organization. Migrate resources from the prior R&D AWS account to the new R&D AWS account.

Answer

Have the R&D AWS account join the new organization. Make the new management account a member of the prior organization.

Question 15

A company is deploying an application that processes large quantities of data in parallel. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to prevent groups of nodes from sharing the same underlying hardware.Which networking solution meets these requirements?

Accepted Answer

Run the EC2 instances in a spread placement group.

Answer

Group the EC2 instances in separate accounts.

Answer

Configure the EC2 instances with dedicated tenancy.

Answer

Configure the EC2 instances with shared tenancy.

Question 16

A solutions architect is creating a new Amazon CloudFront distribution for an application. Some of the information submitted by users is sensitive. The application uses HTTPS but needs another layer of security. The sensitive information should.be protected throughout the entire application stack, and access to the information should be restricted to certain applications.Which action should the solutions architect take?

Accepted Answer

Configure a CloudFront field-level encryption profile.

Answer

Configure a CloudFront signed URL.

Answer

Configure a CloudFront signed cookie.

Answer

Configure CloudFront and set the Origin Protocol Policy setting to HTTPS Only for the Viewer Protocol Policy.

Question 17

A company runs its applications on Amazon EC2 instances. The company performs periodic financial assessments of itsAWS costs. The company recently identified unusual spending.The company needs a solution to prevent unusual spending. The solution must monitor costs and notify responsible stakeholders in the event of unusual spending.Which solution will meet these requirements?

Accepted Answer

Create an AWS Cost Anomaly Detection monitor in the AWS Billing and Cost Management console.

Answer

Use an AWS Budgets template to create a zero spend budget

Answer

CreateAWS Pricing Calculator estimates for the current running workload pricing details_

Answer

Use Amazon CloudWatch to monitor costs and to identify unusual spending

Question 18

A recent analysis of a company's IT expenses highlights the need to reduce backup costs. The company's chief information officer wants to simplify the on- premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. The company must preserve the existing investment in the on- premises backup applications and workflows.What should a solutions architect recommend?

Accepted Answer

Set up AWS Storage Gateway to connect with the backup applications using the iSCSI-virtual tape library (VTL) interface.

Answer

Set up AWS Storage Gateway to connect with the backup applications using the NFS interface.

Answer

Set up an Amazon EFS file system that connects with the backup applications using the NFS interface.

Answer

Set up an Amazon EFS file system that connects with the backup applications using the iSCSI interface.

Question 19

A company is moving its data and applications to AWS during a multiyear migration project. The company wants to securely access data on Amazon S3 from the company's AWS Region and from the company's on-premises location. The data must not traverse the internet. The company has established an AWS Direct Connect connection between its Region and its on-premises location Which solution will meet these requirements?

Accepted Answer

Create a gateway in AWS Transit Gateway to access Amazon S3 securely from the Region and the on-premises location.

Answer

Create gateway endpoints for Amazon S3. Use the gateway endpoints to securely access the data from the Region and the on-premises location.

Answer

Create interface endpoints for Amazon S3_ Use the interface endpoints to securely access the data from the Region and the on-premises location.

Answer

Use an AWS Key Management Service (AWS KMS) key to access the data securely from the Region and the on-premises location.

Question 20

A company's website handles millions of requests each day, and the number of requests continues to increase. A solutions architect needs to improve the response time of the web application. The solutions architect determines that the application needs to decrease latency when retrieving product details from the Amazon DynamoDB table.Which solution will meet these requirements with the LEAST amount of operational overhead?

Accepted Answer

Set up a DynamoDB Accelerator (DAX) cluster. Route all read requests through DAX.

Answer

Set up Amazon ElastiCache for Redis between the DynamoDB table and the web application.Route all read requests through Redis.

Answer

Set up Amazon ElastiCache for Memcached between the DynamoDB table and the web application. Route all read requests through Memcached.

Answer

Set up Amazon DynamoDB Streams on the table, and have AWS Lambda read from the table and populate Amazon ElastiCache. Route all read requests through ElastiCache.

Question 21

A company runs a three-tier application in two AWS Regions. The web tier, the application tier, and the database tier run on Amazon EC2 instances. The company uses Amazon RDS for Microsoft SQL Server Enterprise for the database tier The database tier is experiencing high load when weekly and monthly reports are run. The company wants to reduce the load on the database tier.Which solution will meet these requirements with the LEAST administrative effort?

Accepted Answer

Create read replicas. Configure the reports to use the new read replicas.

Answer

Convert the RDS database to Amazon DynamoDB_ Configure the reports to use DynamoDB

Answer

Modify the existing RDS DB instances by selecting a larger instance size.

Answer

Modify the existing ROS DB instances and put the instances into an Auto Scaling group.

Question 22

A company runs a website that stores images of historical events. Website users need the ability to search and view images based on the year that the event in the image occurred. On average, users request each image only once or twice a year The company wants a highly available solution to store and deliver the images to users.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Store images in Amazon S3 Standard. use S3 Standard to directly deliver images by using a static website.

Answer

Store images in Amazon Elastic Block Store (Amazon EBS). Use a web server that runs on Amazon EC2.

Answer

Store images in Amazon Elastic File System (Amazon EFS). Use a web server that runs on Amazon EC2.

Answer

Store images in Amazon S3 Standard-InfrequentAccess (S3 Standard-IA). use S3 Standard-IA to directly deliver images by using a static website.

Question 23

A solutions architect needs to review a company's Amazon S3 buckets to discover personally identifiable information (Pll). The company stores the Pll data in the us-east-I Region and us-west-2 Region.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3_

Answer

Configure AWS Security Hub for all Regions. Create an AWS Config rule to analyze the data that is in Amazon S3_

Answer

Configure Amazon Inspector to analyze the data that IS in Amazon S3.

Answer

Configure Amazon GuardDuty to analyze the data that is in Amazon S3.

Question 24

A company is building an ecommerce application and needs to store sensitive customer information.The company needs to give customers the ability to complete purchase transactions on the website.The company also needs to ensure that sensitive customer data is protected, even from database administrators.Which solution meets these requirements?

Accepted Answer

Store sensitive data in Amazon RDS for MySQL. Use AWS Key Management Service (AWS KMS) client-side encryption to encrypt the data.

Answer

Store sensitive data in an Amazon Elastic Block Store (Amazon EBS) volume. Use EBS encryption to encrypt the data. Use an IAM instance role to restrict access.

Answer

Store sensitive data in Amazon S3. Use AWS Key Management Service (AWS KMS) server-side encryption to encrypt the data. Use S3 bucket policies to restrict access.

Answer

Store sensitive data in Amazon FSx for Windows Server. Mount the file share on application servers. Use Windows file permissions to restrict access.

Question 25

A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not travel across the internet.Which combination of steps should the solutions architect take to meet this requirement? (Choose two.)

Accepted Answer

Create a gateway endpoint for DynamoDB.

Accepted Answer

Create a security group entry in the endpoint's security group to provide access.

Answer

Create a route table entry for the endpoint.

Answer

Create an interface endpoint for Amazon EC2.

Answer

Create an elastic network interface for the endpoint in each of the subnets of the VPC.

Question 26

A company has a service that reads and writes large amounts of data from an Amazon S3 bucket in the same AWS Region. The service is deployed on Amazon EC2 instances within the private subnet of a VPC. The service communicates with Amazon S3 over a NAT gateway in the public subnet.However, the company wants a solution that will reduce the data output costs.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Provision a VPC gateway endpoint. Configure the route table for the private subnet to use the gateway endpoint as the route for all S3 traffic.

Answer

Provision a dedicated EC2 NAT instance in the public subnet. Configure the route table for the private subnet to use the elastic network interface of this instance as the destination for all S3 traffic.

Answer

Provision a dedicated EC2 NAT instance in the private subnet. Configure the route table for the public subnet to use the elastic network interface of this instance as the destination for all S3 traffic.

Answer

Provision a second NAT gateway. Configure the route table for the private subnet to use this NAT gateway as the destination for all S3 traffic.

Question 27

A company runs multiple Amazon EC2 Linux instances in a VPC across two Availability Zones. The instances host applications that use a hierarchical directory structure. The applications need to read and write rapidly and concurrently to shared storage.What should a solutions architect do to meet these requirements?

Accepted Answer

Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system from each EC2 instance.

Answer

Create an Amazon S3 bucket. Allow access from all the EC2 instances in the VPC.

Answer

Create a file system on a Provisioned IOPS SSD (102) Amazon Elastic Block Store (Amazon EBS) volume. Attach the EBS volume to all the EC2 instances.

Answer

Create file systems on Amazon Elastic Block Store (Amazon EBS) volumes that are attached to each EC2 instance. Synchromze the EBS volumes across the different EC2 instances.

Question 28

A company is using AWS Key Management Service (AWS KMS) keys to encrypt AWS Lambda environment variables. A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables.Which steps must the solutions architect take to implement the correct permissions? (Choose two.)

Accepted Answer

Add AWS KMS permissions in the Lambda execution role.

Accepted Answer

Allow the Lambda execution role in the AWS KMS key policy.

Answer

Add AWS KMS permissions in the Lambda resource policy.

Answer

Add AWS KMS permissions in the Lambda function policy.

Answer

Allow the Lambda resource policy in the AWS KMS key policy.

Question 29

A company wants to use an AWS CloudFormatlon stack for its application in a test environment. The company stores the CloudFormation template in an Amazon S3 bucket that blocks public access. The company wants to grant CloudFormation access to the template in the S3 bucket based on specific user requests to create the test environment The solution must follow security best practices.Which solution will meet these requirements?

Accepted Answer

Create a presigned URL for the template object_ Configure the CloudFormation stack to use the presigned URL.

Answer

Create a gateway VPC endpoint for Amazon S3. Configure the CloudFormation stack to use the S3 object URL

Answer

Create an Amazon API Gateway REST API that has the S3 bucket as the target. Configure the CloudFormat10n stack to use the API Gateway URL _

Answer

Allow public access to the template object in the S3 bucket. Block the public access after the test environment is created

Question 30

A company runs an application on AWS. The application receives inconsistent amounts of usage. The application uses AWS Direct Connect to connect to an on-premises MySQL-compatible database. The on-premises database consistently uses a minimum of 2 GiB of memory.The company wants to migrate the on-premises database to a managed AWS service. The company wants to use auto scaling capabilities to manage unexpected workload increases.Which solution will meet these requirements with the LEAST administrative overhead?

Accepted Answer

Provision an Amazon Aurora Serverless v2 database with a minimum capacity of 1 Aurora capacity unit (ACU).

Answer

Provision an Amazon DynamoDB database with default read and write capacity settings.

Answer

Provision an Amazon Aurora database with a minimum capacity of 1 Aurora capacity unit (ACU).

Answer

Provision an Amazon RDS for MySQL database with 2 GiB of memory.

Question 31

A company uses Amazon Elastic Kubernetes Service (Amazon EKS) to run a container application. The EKS cluster stores sensitive information in the Kubernetes secrets object. The company wants to ensure that the information is encrypted Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Enable secrets encryption in the EKS cluster by using AWS Key Management Service (AWS KMS)_

Answer

Use the container application to encrypt the information by using AWS Key Management Service (AWS KMS).

Answer

Implement an AWS Lambda tuncüon to encrypt the information by using AWS Key Management Service (AWS KMS).

Answer

use AWS Systems Manager Parameter Store to encrypt the information by using AWS Key Management Service (AWS KMS).

Question 32

A company runs a web application on Amazon EC2 instances in an Auto Scaling group that has a target group. The company desgned the application to work with session affinity (sticky sessions) for a better user experience.The application must be available publicly over the internet as an endpoint_ A WAF must be applied to the endpoint for additional security. Session affinity (sticky sessions) must be configured on the endpoint Which combination of steps will meet these requirements? (Select TWO)

Accepted Answer

Create a public Application Load Balancer Specify the application target group.

Accepted Answer

Create a web ACL in AWS WAF Associate the web ACL with the endpoint

Answer

Create a public Network Load Balancer Specify the application target group.

Answer

Create a Gateway Load Balancer Specify the application target group.

Answer

Create a second target group. Add Elastic IP addresses to the EC2 instances

Question 33

A company runs an application on Amazon EC2 instances. The company needs to implement a disaster recovery (DR) solution for the application. The DR solution needs to have a recovery time objective (RTO) of less than 4 hours. The DR solution also needs to use the fewest possible AWS resources during normal operations.Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Create Amazon Machine Images (AMIs) to back up the EC2 instances. Copy the AMIs to a secondary AWS Region. Automate infrastructure deployment in the secondary Region by using AWS CloudFormation.

Answer

Create Amazon Machine Images (AMIs) to back up the EC2 instances. Copy the AMIs to a secondary AWS Region. Automate infrastructure deployment in the secondary Region by using AWS Lambda and custom scripts.

Answer

Launch EC2 instances in a secondary AWS Region. Keep the EC2 instances in the secondary Region active at all times.

Answer

Launch EC2 instances in a secondary Availability Zone. Keep the EC2 instances in the secondary Availability Zone active at all times.

Question 34

A company stores its data on premises. The amount of data is growing beyond the company's available capacity.The company wants to migrate its data from the on-premises location to an Amazon S3 bucket The company needs a solution that will automatically validate the integrity of the data after the transfer Which solution will meet these requirements?

Accepted Answer

Deploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket.

Answer

Order an AWS Snowball Edge device Configure the Snowball Edge device to perform the online data transfer to an S3 bucket.

Answer

Create an Amazon S3 File Gateway on premises. Configure the S3 File Gateway to perform the online data transfer to an S3 bucket

Answer

Configure an accelerator in Amazon S3 Transfer Acceleration on premises. Configure the accelerator to perform the online data transfer to an S3 bucket.

Question 35

A company has a large workload that runs every Friday evening. The workload runs on Amazon EC2 instances that are in two Availability Zones in the us-east-1 Region. Normally, the company must run no more than two instances at all times. However, the company wants to scale up to six instances each Friday to handle a regularly repeating increased workload.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an Auto Scaling group that has a scheduled action.

Answer

Create a reminder in Amazon EventBridge to scale the instances.

Answer

Create an Auto Scaling group that uses manual scaling.

Answer

Create an Auto Scaling group that uses automatic scaling.

Question 36

A company uses an on-premises network-attached storage (NAS) system to provide file shares to its high performance computing (HPC) workloads. The company wants to migrate its latency-sensitive HPC workloads and its storage to the AWS Cloud. The company must be able to provide NFS and SMB multi-protocol access from the file system.Which solution will meet these requirements with the LEAST latency? (Select TWO.)

Accepted Answer

Deploy compute optimized EC2 instances into a cluster placement group.

Accepted Answer

Attach the EC2 instances to an Amazon FSx for NetApp ONTAP file system.

Answer

Deploy compute optimized EC2 instances into a partition placement group.

Answer

Attach the EC2 instances to an Amazon FSx for Lustre file system.

Answer

Attach the EC2 instances to an Amazon FSx for OpenZFS file system.

Question 37

A solutions architect needs to copy files from an Amazon S3 bucket to an Amazon Elastic File System (Amazon EFS) file system and another S3 bucket. The files must be copied continuously. New files are added to the original S3 bucket consistently. The copied files should be overwritten only if the source file changes.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer only data that has changed.

Answer

Create an AWS Lambda function. Mount the file system to the function. Set up an S3 event notification to invoke the function when files are created and changed in Amazon S3. Configure the function to copy files to the file system and the destination S3 bucket.

Answer

Create an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer all data.

Answer

Launch an Amazon EC2 instance in the same VPC as the file system. Mount the file system. Create a script to routinely synchronize all objects that changed in the origin S3 bucket to the destination S3 bucket and the mounted file system.

Question 38

A company deployed a serverless application that uses Amazon DynamoDB as a database layer The application has experienced a large increase in users. The company wants to improve database response time from milliseconds to microseconds and to cache requests to the database.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use DynamoDB Accelerator (DAX).

Answer

Migrate the database to Amazon Redshift.

Answer

Migrate the database to Amazon RDS.

Answer

Use Amazon ElastiCache for Redis.

Question 39

A company hosts multiple applications on AWS for different product lines. The applications use different compute resources, including Amazon EC2 instances and Application Load Balancers. The applications run in different AWS accounts under the same organization in AWS Organizations across multiple AWS Regions. Teams for each product line have tagged each compute resource in the individual accounts.The company wants more details about the cost for each product line from the consolidated billing feature in Organizations.Which combination of steps will meet these requirements? (Select TWO.)

Accepted Answer

Select a specific user-defined tag in the AWS Billing console.

Accepted Answer

Activate the selected tag from the Organizations management account.

Answer

Select a specific AWS generated tag in the AWS Billing console.

Answer

Select a specific user-defined tag in the AWS Resource Groups console.

Answer

Activate the selected tag from each AWS account.

Question 40

A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to run an application. The company creates one snapshot of each EBS volume every day to meet compliance requirements. The company wants to implement an architecture that prevents the accidental deletion of EBS volume snapshots. The solution must not change the administrative rights of the storage administrator user.Which solution will meet these requirements with the LEAST administrative effort?

Accepted Answer

Lock the EBS snapshots to prevent deletion.

Answer

Create an IAM role that has permission to delete snapshots. Attach the role to a new EC2 instance. Use the AWS CLI from the new EC2 instance to delete snapshots.

Answer

Create an IAM policy that denies snapshot deletion. Attach the policy to the storage administrator user.

Answer

Add tags to the snapshots. Create retention rules in Recycle Bin for EBS snapshots that have the tags.

Amazon SAA-C03 Practice Test 14

Amazon SAA-C03 Practice Tests

Amazon SAA-C03 Practice Test 14

Question

Amazon SAA-C03 Practice Tests

Practice Tests