A company is migrating a document management application to AWS. The application runs on Linux servers. The company will migrate the application to Amazon EC2 instances in an Auto Scaling group. The company stores 7 TiB of documents in a shared storage file system. An external relational database tracks the documents.Documents are stored once and can be retrieved multiple times for reference at any time. The company cannot modify the application during the migration. The storage solution must be highly available and must support scaling over time.Which solution will meet these requirements MOST cost-effectively?

Create an Amazon.. System (Amazon fcFS) file system with mount points in multiple Availability Zones. Use the bFS Stondard-intrcqucnt Access (Standard-IA) storage class. Mount the NFS share on the EC2 instances in the Auto Scaling group.

Deploy an EC2 instance with enhanced networking as a shared NFS storage system. Export the NFS share. Mount the NFS share on the EC2 instances in the Auto Scaling group.

Create an Amazon S3 bucket that uses the S3 Standard-Infrequent Access (S3 Standard-IA) storage class Mount the S3 bucket on the EC2 instances in the Auto Scaling group.

Deploy an SFTP server endpoint by using AWS Transfer for SFTP and an Amazon S3 bucket. Configure the EC2 instances in the Auto Scaling group to connect to the SFTP server.

Create an Amazon.. System (Amazon fcFS) file system with mount points in multiple Availability Zones. Use the bFS Stondard-intrcqucnt Access (Standard-IA) storage class. Mount the NFS share on the EC2 instances in the Auto Scaling group.

A company uses an Amazon Aurora PostgreSQL provisioned cluster with its application. The application's peak traffic occurs several times a day for periods of 30 minutes to several hours.The database capacity is provisioned to handle peak traffic from the application, but the database has wasted capacity during non-peak hours. The company wants to reduce the database costs.Which solution will meet these requirements with the LEAST operational effort?

Migrate the database to an Amazon Aurora Serverless DB cluster to scale up or scale down the capacity based on the amount of traffic.

Set up an Amazon CloudWatch alarm to monitor database utilization. Scale up or scale down the database capacity based on the amount of traffic.

Migrate the database to Amazon EC2 instances in on Auto Scaling group. Increase or decrease the number of instances based on the amount of traffic.

Migrate the database to an Amazon Aurora Serverless DB cluster to scale up or scale down the capacity based on the amount of traffic.

Schedule an AWS Lambda function to provision the required database capacity at the start of each day. Schedule another Lambda function to reduce the capacity at the end of each day.

A solutions architect is designing an asynchronous application to process credit card data validation requests for a bank. The application must be secure and be able to process each request at least once.Which solution will meet these requirements MOST cost-effectively?

Use AWS Lambda event source mapping. Use Amazon Simple Queue Service (Amazon SQS) FIFO queues as the event source. Use SQS managed encryption keys (SSE-SQS) for encryption. Add the encryption key invocation permission for the Lambda function.

Use AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) standard queues as the event source. Use AWS Key Management Service (SSE-KMS) for encryption. Add the kms:Decrypt permission for the Lambda execution role.

Use AWS Lambda event source mapping. Use Amazon Simple Queue Service (Amazon SQS) FIFO queues as the event source. Use SQS managed encryption keys (SSE-SQS) for encryption. Add the encryption key invocation permission for the Lambda function.

Use the AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) FIFO queues as the event source. Use AWS KMS keys (SSE-KMS). Add the kms:Decrypt permission for the Lambda execution role.

Use the AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) standard queues as the event source. Use AWS KMS keys (SSE-KMS) for encryption. Add the encryption key invocation permission for the Lambda function.

A company runs a self-managed Microsoft SOL Server on Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS). Daily snapshots are taken of the EBS volumes.Recently, all the company's EBS snapshots were accidentally deleted while running a snapshot cleaning script that deletes all expired EBS snapshots. A solutions architect needs to update the architecture to prevent data loss without retaining EBS snapshots indefinitely.Which solution will meet these requirements with the LEAST development effort?

Create a 7-day EBS snapshot retention rule in Recycle Bin and apply the rule for all snapshots.

Change the 1AM policy of the user to deny EBS snapshot deletion.

Copy the EBS snapshots to another AWS Region after completing the snapshots daily.

Create a 7-day EBS snapshot retention rule in Recycle Bin and apply the rule for all snapshots.

Copy EBS snapshots to Amazon S3 Standard-Infrequent Access (S3 Standard-IA).

A video game company is deploying a new gaming application to its global users. The company requires a solution that will provide near real-time reviews and rankings of the players.A solutions architect must design a solution to provide fast access to the data. The solution must also ensure the data persists on disks in the event that the company restarts the application.Which solution will meet these requirements with the LEAST operational overhead?

Deploy an Amazon ElastiCache for Redis cluster. Store the player data in the ElastiCache cluster.

Configure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin. Store the player data in the S3 bucket.

Create Amazon EC2 instances in multiple AWS Regions. Store the player data on the EC2 instances. Configure Amazon Route 53 with geolocation records to direct users to the closest EC2 instance.

Deploy an Amazon ElastiCache for Redis cluster. Store the player data in the ElastiCache cluster.

Deploy an Amazon ElastiCache for Memcached cluster. Store the player data in the ElastiCache cluster.

A company hosts its core network services, including directory services and DNS, in its on-premises data center. The data center is connected to the AWS Cloud using AWS Direct Connect (DX). Additional AWS accounts are planned that will require quick, cost-effective, and consistent access to these network services.What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?

Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.

Create a DX connection in each new account. Route the network traffic to the on-premises servers.

Configure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on-premises servers.

Create a VPN connection between each new account and the DX VPC. Route the network traffic to the on-premises servers.

Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.

A company needs to design a hybrid network architecture The company's workloads are currently stored in the AWS Cloud and in on-premises data centers The workloads require single-digit latencies to communicate The company uses an AWS Transit Gateway transit gateway to connect multiple VPCsWhich combination of steps will meet these requirements MOST cost-effectively? (Select TWO.)

Associate an AWS Direct Connect gateway with the transit gateway that is attached to the VPCs.

Establish an AWS Direct Connect connection. Create a transit virtual interface (VIF) to a Direct Connect gateway.

Establish an AWS Site-to-Site VPN connection to each VPC.

Associate an AWS Direct Connect gateway with the transit gateway that is attached to the VPCs.

Establish an AWS Site-to-Site VPN connection to an AWS Direct Connect gateway.

Establish an AWS Direct Connect connection. Create a transit virtual interface (VIF) to a Direct Connect gateway.

Associate AWS Site-to-Site VPN connections with the transit gateway that is attached to the VPCs

A company is running a highly sensitive application on Amazon EC2 backed by an Amazon RDS database Compliance regulations mandate that all personally identifiable information (Pll) be encrypted at rest.Which solution should a solutions architect recommend to meet this requirement with the LEAST amount of changes to the infrastructure?

Configure Amazon Elastic Block Store (Amazon EBS) encryption and Amazon RDS encryption with AWS Key Management Service (AWS KMS) keys to encrypt instance and database volumes.

Deploy AWS Certificate Manager to generate certificates Use the certificates to encrypt the database volume

Deploy AWS CloudHSM. generate encryption keys, and use the keys to encrypt database volumes.

Configure SSL encryption using AWS Key Management Service {AWS KMS) keys to encrypt database volumes.

Configure Amazon Elastic Block Store (Amazon EBS) encryption and Amazon RDS encryption with AWS Key Management Service (AWS KMS) keys to encrypt instance and database volumes.

A global ecommerce company runs its critical workloads on AWS. The workloads use an Amazon RDS for PostgreSQL DB instance that is configured for a Multi-AZ deployment.Customers have reported application timeouts when the company undergoes database failovers. The company needs a resilient solution to reduce failover timeWhich solution will meet these requirements?

Create an Amazon RDS Proxy. Assign the proxy to the DB instance.

Create a read replica for the DB instance Move the read traffic to the read replica.

Enable Performance Insights. Monitor the CPU load to identify the timeouts.

Take regular automatic snapshots Copy the automatic snapshots to multiple AWS Regions

A company is planning to deploy its application on an Amazon Aurora PostgreSQL Serverless v2 cluster. The application will receive large amounts of traffic. The company wants to optimize the storage performance of the cluster as the load on the application increasesWhich solution will meet these requirements MOST cost-effectively?

Configure the cluster to use the Aurora l/O-Optimized storage configuration.

Configure the cluster to use the Aurora Standard storage configuration.

Configure the cluster storage type as Provisioned IOPS.

Configure the cluster storage type as General Purpose.

Configure the cluster to use the Aurora l/O-Optimized storage configuration.

A company is preparing to store confidential data in Amazon S3. For compliance reasons, the data must be encrypted at rest. Encryption key usage must be logged for auditing purposes. Keys must be rotated every year.Which solution meets these requirements and is the MOST operationally efficient?

Server-side encryption with AWS KMS keys (SSE-KMS) with automatic rotation

Server-side encryption with customer-provided keys (SSE-C)

Server-side encryption with Amazon S3 managed keys (SSE-S3)

Server-side encryption with AWS KMS keys (SSE-KMS) with manual rotation

Server-side encryption with AWS KMS keys (SSE-KMS) with automatic rotation

A company has several on-premises Internet Small Computer Systems Interface (iSCSI) network storage servers The company wants to reduce the number of these servers by moving to the AWS Cloud. A solutions architect must provide low-latency access to frequently used data and reduce the dependency on on-premises servers with a minimal number of infrastructure changes.Which solution will meet these requirements?

Deploy an AWS Storage Gateway volume gateway that is configured with cached volumes.

Deploy an Amazon S3 File Gateway

Deploy Amazon Elastic Block Store (Amazon EBS) storage with backups to Amazon S3

Deploy an AWS Storage Gateway volume gateway that is configured with stored volumes

Deploy an AWS Storage Gateway volume gateway that is configured with cached volumes.

A marketing company receives a large amount of new clickstream data in Amazon S3 from a marketing campaign The company needs to analyze the clickstream data in Amazon S3 quickly. Then the company needs to determine whether to process the data further in the data pipeline.Which solution will meet these requirements with the LEAST operational overhead?

Configure an AWS Glue crawler to crawl the data. Configure Amazon Athena to query the data.

Create external tables in a Spark catalog Configure jobs in AWS Glue to query the data

Configure an AWS Glue crawler to crawl the data. Configure Amazon Athena to query the data.

Create external tables in a Hive metastore. Configure Spark jobs in Amazon EMR to query the data.

Configure an AWS Glue crawler to crawl the data. Configure Amazon Kinesis Data Analytics to use SQL to query the data

A company has applications that run on Amazon EC2 instances in a VPC One of the applications needs to call the Amazon S3 API to store and read objects. According to the company's security regulations, no traffic from the applications is allowed to travel across the internet.Which solution will meet these requirements?

Configure an S3 gateway endpoint.

Create an S3 bucket in a private subnet.

Create an S3 bucket in the same AWS Region as the EC2 instances.

Configure a NAT gateway in the same subnet as the EC2 instances

A company wants to isolate its workloads by creating an AWS account for each workload. The company needs a solution that centrally manages networking components for the workloads. The solution also must create accounts with automatic security controls (guardrails).Which solution will meet these requirements with the LEAST operational overhead?

Use AWS Control Tower to deploy accounts. Create a networking account that has a VPC with private subnets and public subnets. Use AWS Resource Access Manager (AWS RAM) to share the subnets with the workload accounts.

Use AWS Organizations to deploy accounts. Create a networking account that has a VPC with private subnets and public subnets. Use AWS Resource Access Manager (AWS RAM) to share the subnets with the workload accounts.

Use AWS Control Tower to deploy accounts. Deploy a VPC in each workload account. Configure each VPC to route through an inspection VPC by using a transit gateway attachment.

Use AWS Organizations to deploy accounts. Deploy a VPC in each workload account. Configure each VPC to route through an inspection VPC by using a transit gateway attachment.

A company's SAP application has a backend SQL Server database in an on-premises environment. The company wants to migrate its on-premises application and database server to AWS. The company needs an instance type that meets the high demands of its SAP database. On-premises performance data shows that both the SAP application and the database have high memory utilization.Which solution will meet these requirements?

Use the memory optimized instance family for both the application and the database

Use the compute optimized Instance family for the application Use the memory optimized instance family for the database.

Use the storage optimized instance family for both the application and the database

Use the memory optimized instance family for both the application and the database

Use the high performance computing (HPC) optimized instance family for the application. Use the memory optimized instance family for the database.

A company plans to rehost an application to Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) as the attached storageA solutions architect must design a solution to ensure that all newly created Amazon EBS volumes are encrypted by default. The solution must also prevent the creation of unencrypted EBS volumesWhich solution will meet these requirements?

Configure the EC2 account attributes to always encrypt new EBS volumes.

Use AWS Config. Configure the encrypted-volumes identifier Apply the default AWS Key Management Service (AWS KMS) key.

Configure AWS Systems Manager to create encrypted copies of the EBS volumes. Reconfigure the EC2 instances to use the encrypted volumes

Create a customer managed key in AWS Key Management Service (AWS KMS) Configure AWS Migration Hub to use the key when the company migrates workloads.

A weather forecasting company needs to process hundreds of gigabytes of data with sub-millisecond latency. The company has a high performance computing (HPC) environment in its data center and wants to expand its forecasting capabilities.A solutions architect must identify a highly available cloud storage solution that can handle large amounts of sustained throughput Files that are stored in the solution should be accessible to thousands of compute instances that will simultaneously access and process the entire dataset.What should the solutions architect do to meet these requirements?

Use Amazon FSx for Lustre persistent file systems.

Use Amazon FSx for Lustre scratch file systems

Use Amazon FSx for Lustre persistent file systems.

Use Amazon Elastic File System (Amazon EFS) with Bursting Throughput mode.

Use Amazon Elastic File System (Amazon EFS) with Provisioned Throughput mode.

A company plans to run a high performance computing (HPC) workload on Amazon EC2 Instances The workload requires low-latency network performance and high network throughput with tightly coupled node-to-node communication.Which solution will meet these requirements?

Configure the EC2 instances to be part of a cluster placement group

Launch the EC2 instances with Dedicated Instance tenancy.

Launch the EC2 instances as Spot Instances.

Configure an On-Demand Capacity Reservation when the EC2 instances are launched.

A company needs a secure connection between its on-premises environment and AWS. This connection does not need high bandwidth and will handle a small amount of traffic. The connection should be set up quickly.What is the MOST cost-effective method to establish this type of connection?

Implement an AWS Site-to-Site VPN connection.

Implement a bastion host on Amazon EC2.

Implement an AWS Site-to-Site VPN connection.

A company is designing a new multi-tier web application that consists of the following components:* Web and application servers that run on Amazon EC2 instances as part of Auto Scaling groups* An Amazon RDS DB instance for data storageA solutions architect needs to limit access to the application servers so that only the web servers can access them. Which solution will meet these requirements?

Deploy an Application Load Balancer with a target group that contains the application servers' Auto Scaling group. Configure the security group to allow only the web servers to access the application servers.

Deploy AWS PrivateLink in front of the application servers. Configure the network ACL to allow only the web servers to access the application servers.

Deploy a VPC endpoint in front of the application servers Configure the security group to allow only the web servers to access the application servers

Deploy a Network Load Balancer with a target group that contains the application servers' Auto Scaling group Configure the network ACL to allow only the web servers to access the application servers.

Deploy an Application Load Balancer with a target group that contains the application servers' Auto Scaling group. Configure the security group to allow only the web servers to access the application servers.

A company has separate AWS accounts for its finance, data analytics, and development departments. Because of costs and security concerns, the company wants to control which services each AWS account can useWhich solution will meet these requirements with the LEAST operational overhead?

Create organization units (OUs) for each department in AWS Organizations. Attach service control policies (SCPs) to the OUs.

Use AWS Systems Manager templates to control which AWS services each department can use

Create organization units (OUs) for each department in AWS Organizations. Attach service control policies (SCPs) to the OUs.

Use AWS CloudFormation to automatically provision only the AWS services that each department can use.

Set up a list of products in AWS Service Catalog in the AWS accounts to manage and control the usage of specific AWS services

A global company runs its workloads on AWS The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled.Which solution will meet these requirements?

Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.

Set up an AWS CloudTrail event that has a rule to identify all S3 buckets that are not versioning-enabled across Regions

Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.

Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions

Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions

A media company uses an Amazon CloudFront distribution to deliver content over the internet The company wants only premium customers to have access to the media streams and file content. The company stores all content in an Amazon S3 bucket. The company also delivers content on demand to customers for a specific purpose, such as movie rentals or music downloads.Which solution will meet these requirements?

Generate and provide CloudFront signed URLs to premium customers.

Generate and provide S3 signed cookies to premium customers

Generate and provide CloudFront signed URLs to premium customers.

Use origin access control (OAC) to limit the access of non-premium customers

Generate and activate field-level encryption to block non-premium customers.

A company uses Amazon API Gateway to manage its REST APIs that third-party service providers access The company must protect the REST APIs from SQL injection and cross-site scripting attacks.What is the MOST operationally efficient solution that meets these requirements?

Set up API Gateway with an Amazon CloudFront distribution. Configure AWS WAF in CloudFront

Set up API Gateway with an Amazon CloudFront distribution Configure AWS Shield in CloudFront.

Set up API Gateway with an Amazon CloudFront distribution. Configure AWS WAF in CloudFront

A company runs its application on Oracle Database Enterprise Edition The company needs to migrate the application and the database to AWS. The company can use the Bring Your Own License (BYOL) model while migrating to AWS The application uses third-party database features that require privileged access.A solutions architect must design a solution for the database migration.Which solution will meet these requirements MOST cost-effectively?

Migrate the database to Amazon RDS Custom for Oracle by using native tools Customize the new database settings to support the third-party features.

Migrate the database to Amazon RDS for Oracle by using native tools. Replace the third-party features with AWS Lambda.

Migrate the database to Amazon RDS Custom for Oracle by using native tools Customize the new database settings to support the third-party features.

Migrate the database to Amazon DynamoDB by using AWS Database Migration Service {AWS DMS). Customize the new database settings to support the third-party features.

Migrate the database to Amazon RDS for PostgreSQL by using AWS Database Migration Service (AWS DMS). Rewrite the application code to remove the dependency on third-party features.

A news company that has reporters all over the world is hosting its broadcast system on AWS. The reporters send live broadcasts to the broadcast system. The reporters use software on their phones to send live streams through the Real Time Messaging Protocol (RTMP).A solutions architect must design a solution that gives the reporters the ability to send the highest quality streams The solution must provide accelerated TCP connections back to the broadcast system.What should the solutions architect use to meet these requirements?

Amazon EC2 instances and AWS Elastic IP addresses

A company serves its website by using an Auto Scaling group of Amazon EC2 instances in a single AWS Region. The website does not require a databaseThe company is expanding, and the company's engineering team deploys the website to a second Region. The company wants to distribute traffic across both Regions to accommodate growth and for disaster recovery purposes The solution should not serve traffic from a Region in which the website is unhealthy.Which policy or resource should the company use to meet these requirements?

An Amazon Route 53 multivalue answer routing policy

An Amazon Route 53 simple routing policy

An Amazon Route 53 multivalue answer routing policy

An Application Load Balancer in one Region with a target group that specifies the EC2 instance IDs from both Regions

An Application Load Balancer in one Region with a target group that specifies the IP addresses of the EC2 instances from both Regions

A company has an on-premises SFTP file transfer solution. The company is migrating to the AWS Cloud to scale the file transfer solution and to optimize costs by using Amazon S3. The company's employees will use their credentials for the on-premises Microsoft Active Directory (AD) to access the new solution The company wants to keep the current authentication and file access mechanisms.Which solution will meet these requirements with the LEAST operational overhead?

Create an AWS Transfer Family server with SFTP endpoints Choose the AWS Directory Service option as the identity provider Use AD Connector to connect the on-premises Active Directory.

Configure an S3 File Gateway. Create SMB file shares on the file gateway that use the existing Active Directory to authenticate

Configure an Auto Scaling group with Amazon EC2 instances to run an SFTP solution Configure the group to scale up at 60% CPU utilization.

Create an AWS Transfer Family server with SFTP endpoints Choose the AWS Directory Service option as the identity provider Use AD Connector to connect the on-premises Active Directory.

Create an AWS Transfer Family SFTP endpoint. Configure the endpoint to use the AWS Directory Service option as the identity provider to connect to the existing Active Directory.

A company has an application that serves clients that are deployed in more than 20.000 retail storefront locations around the world. The application consists of backend web services that are exposed over HTTPS on port 443 The application is hosted on Amazon EC2 Instances behind an Application Load Balancer (ALB). The retail locations communicate with the web application over the public internet. The company allows each retail location to register the IP address that the retail location has been allocated by its local ISP.The company's security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations.What should a solutions architect do to meet these requirements?

Associate an AWS WAF web ACL with the ALB Use IP rule sets on the ALB to filter traffic Update the IP addresses in the rule to Include the registered IP addresses

Deploy AWS Firewall Manager to manage the ALB. Configure firewall rules to restrict traffic to the ALB Modify the firewall rules to include the registered IP addresses.

Store the IP addresses in an Amazon DynamoDB table. Configure an AWS Lambda authorization function on the ALB to validate that incoming requests are from the registered IP addresses.

Configure the network ACL on the subnet that contains the public interface of the ALB Update the ingress rules on the network ACL with entries for each of the registered IP addresses.

A company hosts its application on several Amazon EC2 instances inside a VPC. The company creates a dedicated Amazon S3 bucket for each customer to store their relevant information in Amazon S3.The company wants to ensure that the application running on EC2 instances can securely access only the S3 buckets that belong to the company's AWS account.Which solution will meet these requirements with the LEAST operational overhead?

Create a gateway endpoint for Amazon S3 that is attached to the VPC Update the 1AM instance profile policy to provide access to only the specific buckets that the application needs.

Create a NAT gateway in a public subnet with a security group that allows access to only Amazon S3 Update the route tables to use the NAT Gateway.

Create a gateway endpoint for Amazon S3 that is attached to the VPC Update the 1AM instance profile policy with a Deny action and the following condition key:

Create a NAT Gateway in a public subnet Update route tables to use the NAT Gateway Assign bucket policies for all buckets with a Deny action and the following condition key:

A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability.Which storage solution meets these requirements?

Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)

A medical company wants to perform transformations on a large amount of clinical trial data that comes from several customers. The company must extract the data from a relational database that contains the customer data. Then the company will transform the data by using a series of complex rules. The company will load the data to Amazon S3 when the transformations are complete.All data must be encrypted where it is processed before the company stores the data in Amazon S3. All data must be encrypted by using customer-specific keys.Which solution will meet these requirements with the LEAST amount of operational effort?

Create one AWS Glue job for each customer Attach a security configuration to each job that uses client-side encryption with AWS KMS managed keys (CSE-KMS) to encrypt the data.

Create one AWS Glue job for each customer Attach a security configuration to each job that uses server-side encryption with Amazon S3 managed keys (SSE-S3) to encrypt the data.

Create one Amazon EMR cluster for each customer Attach a security configuration to each cluster that uses client-side encryption with a custom client-side root key (CSE-Custom) to encrypt the data.

Create one AWS Glue job for each customer Attach a security configuration to each job that uses client-side encryption with AWS KMS managed keys (CSE-KMS) to encrypt the data.

Create one Amazon EMR cluster for each customer Attach a security configuration to each cluster that uses server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the data.

A company uses an Amazon DynamoDB table to store data that the company receives from devices. The DynamoDB table supports a customer-facing website to display recent activity on customer devices The company configured the table with provisioned throughput for writes and readsThe company wants to calculate performance metrics for customer device data on a daily basis. The solution must have minimal effect on the table's provisioned read and write capacityWhich solution will meet these requirements?

Use an Amazon Athena SQL query with the Amazon Athena DynamoDB connector to calculate performance metrics on a recurring schedule.

Use an AWS Glue job with the AWS Glue DynamoDB export connector to calculate performance metrics on a recurring schedule.

Use an Amazon Redshift COPY command to calculate performance metrics on a recurring schedule.

Use an Amazon EMR job with an Apache Hive external table to calculate performance metrics on a recurring schedule.

An ecommerce company runs several internal applications in multiple AWS accounts. The company uses AWS Organizations to manage its AWS accounts.A security appliance in the company's networking account must inspect interactions between applications across AWS accounts.Which solution will meet these requirements?

Deploy a Gateway Load Balancer (GWLB) in the networking account to send traffic to the security appliance. Configure the application accounts to send traffic to the GWLB by using an interface GWLB endpoint in the application accounts

Deploy a Network Load Balancer (NLB) in the networking account to send traffic to the security appliance. Configure the application accounts to send traffic to the NLB by using an interface VPC endpoint in the application accounts

Deploy an Application Load Balancer (ALB) in the application accounts to send traffic directly to the security appliance.

Deploy a Gateway Load Balancer (GWLB) in the networking account to send traffic to the security appliance. Configure the application accounts to send traffic to the GWLB by using an interface GWLB endpoint in the application accounts

Deploy an interface VPC endpoint in the application accounts to send traffic directly to the security appliance.

A company uses Amazon EC2 instances and stores data on Amazon Elastic Block Store (Amazon EBS) volumes. The company must ensure that all data is encrypted at rest by using AWS Key Management Service (AWS KMS). The company must be able to control rotation of the encryption keys.Which solution will meet these requirements with the LEAST operational overhead?

Create a customer managed key Use the key to encrypt the EBS volumes.

Use an AWS managed key to encrypt the EBS volumes. Use the key to configure automatic key rotation.

Create an external KMS key with imported key material. Use the key to encrypt the EBS volumes.

Use an AWS owned key to encrypt the EBS volumes.

A weather forecasting company collects temperature readings from various sensors on a continuous basis. An existing data ingestion process collects the readings and aggregates the readings into larger Apache Parquet files. Then the process encrypts the files by using client-side encryption with KMS managed keys (CSE-KMS). Finally, the process writes the files to an Amazon S3 bucket with separate prefixes for each calendar day.The company wants to run occasional SQL queries on the data to take sample moving averages for a specific calendar day.Which solution will meet these requirements MOST cost-effectively?

Configure Amazon Athena to read the encrypted files. Run SQL queries on the data directly in Amazon S3.

Use Amazon S3 Select to run SQL queries on the data directly in Amazon S3.

Configure Amazon Redshift to read the encrypted files Use Redshift Spectrum and Redshift query editor v2 to run SQL queries on the data directly in Amazon S3.

Configure Amazon EMR Serverless to read the encrypted files. Use Apache SparkSQL to run SQL queries on the data directly in Amazon S3.

A company is planning to migrate a legacy application to AWS. The application currently uses NFS to communicate to an on-premises storage solution to store application data. The application cannot be modified to use any other communication protocols other than NFS for this purpose.Which storage solution should a solutions architect recommend for use after the migration?

Amazon Elastic File System (Amazon EF5)

Amazon Elastic Block Store (Amazon EB5)

Amazon Elastic File System (Amazon EF5)

Amazon EMR File System (Amazon EMRFS)

A company runs an environment where data is stored in an Amazon S3 bucket. The objects are accessed frequently throughout the day. The company has strict data encryption requirements for data that is stored in the S3 bucket. The company currently uses AWS Key Management Service (AWS KMS) for encryption.The company wants to optimize costs associated with encrypting S3 objects without making additional calls to AWS KMS.Which solution will meet these requirements?

Use an S3 Bucket Key for server-side encryption with AWS KMS keys (SSE-KMS) on the new objects.

Use server-side encryption with Amazon S3 managed keys (SSE-S3).

Use an S3 Bucket Key for server-side encryption with AWS KMS keys (SSE-KMS) on the new objects.

Use client-side encryption with AWS KMS customer managed keys.

Use server-side encryption with customer-provided keys (SSE-C) stored in AWS KMS.

Amazon SAA-C03 Practice Test 20 - Free Online Exam Prep & Questions

A company uses Amazon RDS with default backup settings for Its database tier The company needs to make a dally backup of the database to meet regulatory requirements. The company must retain the backups (or 30 days.

Which solution will meet these requirements with the LEAST operational overhead?

Become a Premium Member for full access

Unlock Premium Member

Amazon SAA-C03 Practice Test 20

Question

Amazon SAA-C03 Practice Tests

Practice Tests