Quiz IT certification exam

Question 1

A finance company is migrating its trading platform to AWS. The trading platform processes a high volume of market data and processes stock trades. The company needs to establish a consistent, low-latency network connection from its on-premises data center to AWS.

The company will host resources in a VPC. The solution must not use the public internet.

Which solution will meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Use AWS Direct Connect to set up a connection from the on-premises data center to AWS

Answer

Use AWS Client VPN to connect the on-premises data center to AWS.

Answer

Use AWS PrivateLink to set up a connection from the on-premises data center to AWS.

Answer

Use AWS Site-to-Site VPN to connect the on-premises data center to AWS.

Question 2

A company tracks customer satisfaction by using surveys that the company hosts on its website. The surveys sometimes reach thousands of customers every hour. Survey results are currently sent in email messages to the company so company employees can manually review results and assess customer sentiment.The company wants to automate the customer survey process. Survey results must be available for the previous 12 months.Which solution will meet these requirements in the MOST scalable way?

Accepted Answer

Send the survey results data to an Amazon API Gateway endpoint that is connected to an Amazon Simple Queue Service (Amazon SQS) queue. Create an AWS Lambda function to poll the SQS queue, call Amazon Comprehend for sentiment analysis, and save the results to an Amazon DynamoDB table. Set the TTL for all records to 365 days in the future.

Answer

Send the survey results data to an API that is running on an Amazon EC2 instance. Configure the API to store the survey results as a new record in an Amazon DynamoDB table, call Amazon Comprehend for sentiment analysis, and save the results in a second DynamoDB table. Set the TTL for all records to 365 days in the future.

Answer

Write the survey results data to an Amazon S3 bucket. Use S3 Event Notifications to invoke an AWS Lambda function to read the data and call Amazon Rekognition for sentiment analysis. Store the sentiment analysis results in a second S3 bucket. Use S3 Lifecycle policies on each bucket to expire objects after 365 days.

Answer

Send the survey results data to an Amazon API Gateway endpoint that is connected to an Amazon Simple Queue Service (Amazon SQS) queue. Configure the SQS queue to invoke an AWS Lambda function that calls Amazon Lex for sentiment analysis and saves the results to an Amazon DynamoDB table. Set the TTL for all records to 365 days in the future.

Question 3

An online gaming company is transitioning user data storage to Amazon DynamoDB to support the company's growing user base. The current architecture includes DynamoDB tables that contain user profiles, achievements, and in-game transactions.The company needs to design a robust, continuously available, and resilient DynamoDB architecture to maintain a seamless gaming experience for users.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use DynamoDB global tables for automatic multi-Region replication. Deploy tables in multiple AWS Regions. Use provisioned capacity mode. Enable auto scaling.

Answer

Create DynamoDB tables in a single AWS Region. Use on-demand capacity mode. Use global tables to replicate data across multiple Regions.

Answer

Use DynamoDB Accelerator (DAX) to cache frequently accessed data. Deploy tables in a single AWS Region and enable auto scaling. Configure Cross-Region Replication manually to additional Regions.

Answer

Create DynamoDB tables in multiple AWS Regions. Use on-demand capacity mode. Use DynamoDB Streams for Cross-Region Replication between Regions.

Question 4

A logistics company is creating a data exchange platform to share shipment status information with shippers. The logistics company can see all shipment information and metadata. The company distributes shipment data updates to shippers.Each shipper should see only shipment updates that are relevant to their company. Shippers should not see the full detail that is visible to the logistics company. The company creates an Amazon Simple Notification Service (Amazon SNS) topic for each shipper to share data. Some shippers use a mobile app to submit shipment status updates.The company needs to create a data exchange platform that provides each shipper specific access to the data that is relevant to their company.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Ingest the shipment updates from the mobile app into Amazon Simple Queue Service (Amazon SQS). Use an AWS Lambda function to consume the updates from Amazon SQS and rewrite the body of each message. Publish the updates to the SNS topic.

Answer

Ingest the shipment updates from the mobile app into Amazon Simple Queue Service (Amazon SQS). Publish the updates to the SNS topic. Apply a filter policy to rewrite the body of each message.

Answer

Ingest the shipment updates from the mobile app into a second SNS topic. Publish the updates to the shipper SNS topic. Apply a filter policy to rewrite the body of each message.

Answer

Ingest the shipment updates from the mobile app into Amazon Simple Queue Service (Amazon SQS). Filter and rewrite the messages in Amazon EventBridge Pipes. Publish the updates to the SNS topic.

Question 5

A company is deploying a new gaming application on Amazon EC2 instances. The gaming application needs to have access to shared storage.The company requires a high-performance solution to give the application the ability to use an existing custom protocol to access shared storage. The solution must ensure low latency and must be operationally efficient.Which solution will meet these requirements?

Accepted Answer

Create an Amazon FSx for Lustre file system. Connect the EC2 instances that host the application to the file system.

Answer

Create an Amazon FSx File Gateway. Create a file share that uses the existing custom protocol. Connect the EC2 instances that host the application to the file share.

Answer

Create an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the EC2 instances that host the application to the file share.

Answer

Create an Amazon Elastic File System (Amazon EFS) file system. Configure the file system to support Lustre. Connect the EC2 instances that host the application to the file system.

Question 6

A company is developing a rating system for its ecommerce web application. The company needs a solution to save ratings that users submit in an Amazon DynamoDB table.The company wants to ensure that developers do not need to interact directly with the DynamoDB table. The solution must be scalable and reusable.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an Amazon API Gateway REST API Define a resource and create a new POST method Choose AWS as the integration type, and select DynamoDB as the service. Set the action to PutItem.

Answer

Create an Application Load Balancer (ALB). Create an AWS Lambda function, and set the function as a target group in the ALB. Invoke the Lambda function by using the put_item method through the ALB.

Answer

Create an AWS Lambda function. Configure the Lambda function to interact with the DynamoDB table by using the put-item method from Boto3. Invoke the Lambda function from the web application.

Answer

Create an Amazon Simple Queue Service (Amazon SQS) queue and an AWS Lambda function that has an SQS trigger type. Instruct the developers to add customer ratings to the SQS queue as JSON messages. Configure the Lambda function to fetch the ratings from the queue and store the ratings in DynamoDB.

Question 7

An ecommerce company is planning to migrate an on-premises Microsoft SQL Server database to the AWS Cloud. The company needs to migrate the database to SQL Server Always On availability groups. The cloud-based solution must be highly available.Which solution will meet these requirements?

Accepted Answer

Deploy three Amazon EC2 instances with SQL Server across three Availability Zones. Use Amazon FSx for Windows File Server as the storage tier.

Answer

Deploy three Amazon EC2 instances with SQL Server across three Availability Zones. Attach one Amazon Elastic Block Store (Amazon EBS) volume to the EC2 instances.

Answer

Migrate the database to Amazon RDS for SQL Server. Configure a Multi-AZ deployment and read replicas.

Answer

Deploy three Amazon EC2 instances with SQL Server across three Availability Zones. Use Amazon S3 as the storage tier.

Question 8

A company is developing a highly available natural language processing (NLP) application. The application handles large volumes of concurrent requests. The application performs NLP tasks such as entity recognition, sentiment analysis, and key phrase extraction on text data.The company needs to store data that the application processes in a highly available and scalable database.Which solution will meet these requirements?

Accepted Answer

Create an Amazon API Gateway REST API endpoint to handle incoming requests. Configure the REST API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Comprehend to perform NLP tasks on the text data. Store the processed data in Amazon DynamoDB.

Answer

Create an Amazon API Gateway HTTP API endpoint to handle incoming requests. Configure the HTTP API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Translate to perform NLP tasks on the text data. Store the processed data in Amazon ElastiCache.

Answer

Create an Amazon SQS queue to buffer incoming requests. Deploy the NLP application on Amazon EC2 instances in an Auto Scaling group. Use Amazon Comprehend to perform NLP tasks. Store the processed data in an Amazon RDS database.

Answer

Create an Amazon API Gateway WebSocket API endpoint to handle incoming requests. Configure the WebSocket API to invoke an AWS Lambda function for each request. Configure the Lambda function to call Amazon Textract to perform NLP tasks on the text data. Store the processed data in Amazon ElastiCache.

Question 9

A company has developed an API using an Amazon API Gateway REST API and AWS Lambda functions. The API serves static and dynamic content to users worldwide. The company wants to decrease the latency of transferring content for API requests.Which solution will meet these requirements?

Accepted Answer

Deploy the REST API as an edge-optimized API endpoint. Enable caching. Enable content encoding in the API definition to compress the application data in transit.

Answer

Deploy the REST API as a Regional API endpoint. Enable caching. Enable content encoding in the API definition to compress the application data in transit.

Answer

Deploy the REST API as an edge-optimized API endpoint. Enable caching. Configure reserved concurrency for the Lambda functions.

Answer

Deploy the REST API as a Regional API endpoint. Enable caching. Configure reserved concurrency for the Lambda functions.

Question 10

A solutions architect is designing the architecture for a company website that is composed of static content. The company's target customers are located in the United States and Europe.Which architecture should the solutions architect recommend to MINIMIZE cost?

Accepted Answer

Store the website files on Amazon S3 in the us-east-2 Region. Use an Amazon CloudFront distribution with the price class configured to limit the edge locations in use.

Answer

Store the website files on Amazon S3 in the us-east-2 Region. Use an Amazon CloudFront distribution with the price class configured to maximize the use of edge locations.

Answer

Store the website files on Amazon S3 in the us-east-2 Region and the eu-west-1 Region. Use an Amazon CloudFront geolocation routing policy to route requests to the closest Region to the user.

Answer

Store the website files on Amazon S3 in the us-east-2 Region and the eu-west-1 Region. Use an Amazon CloudFront distribution with an Amazon Route 53 latency routing policy to route requests to the closest Region to the user.

Question 11

A company hosts a database that runs on an Amazon RDS instance deployed to multiple Availability Zones. A periodic script negatively affects a critical application by querying the database. How can application performance be improved with minimal costs?

Accepted Answer

Create a read replica of the database. Configure the script to query only the read replica.

Answer

Add functionality to the script to identify the instance with the fewest active connections and query that instance.

Answer

Instruct the development team to manually export new entries at the end of the day.

Answer

Use Amazon ElastiCache to cache the common queries the script runs.

Question 12

How can a company detect and notify security teams about PII in S3 buckets?

Accepted Answer

Use Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.

Answer

Use Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SNS notification.

Answer

Use Amazon Macie. Create an EventBridge rule for SensitiveData:S3Object/Personal findings and send an SQS notification.

Answer

Use Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SQS notification.

Question 13

A company runs HPC workloads requiring high IOPS.Which combination of steps will meet these requirements? (Select TWO)

Accepted Answer

Use Amazon FSx for Lustre as a high-performance file system.

Accepted Answer

Create an Auto Scaling group of EC2 instances. Use mixed instance types and a cluster placement group. Use Amazon EMR for analytics.

Answer

Use Amazon EFS as a high-performance file system.

Answer

Create an Auto Scaling group of EC2 instances. Use Reserved Instances. Configure a spread placement group. Use AWS Batch for analytics.

Answer

Use Mountpoint for Amazon S3 as a high-performance file system.

Question 14

A company has developed an API using Amazon API Gateway REST API and AWS Lambda. How can latency be reduced for users worldwide?

Accepted Answer

Deploy the REST API as an edge-optimized API endpoint. Enable caching. Enable content encoding to compress data in transit.

Answer

Deploy the REST API as a Regional API endpoint. Enable caching. Enable content encoding to compress data in transit.

Answer

Deploy the REST API as an edge-optimized API endpoint. Enable caching. Configure reserved concurrency for Lambda functions.

Answer

Deploy the REST API as a Regional API endpoint. Enable caching. Configure reserved concurrency for Lambda functions.

Question 15

How can a law firm make files publicly readable while preventing modifications or deletions until a specific future date?

Accepted Answer

Create an S3 bucket. Enable S3 Versioning. Use S3 Object Lock with a retention period. Create a CloudFront distribution. Use a bucket policy to restrict access.

Answer

Upload files to an Amazon S3 bucket configured for static website hosting. Grant read-only IAM permissions to any AWS principals.

Answer

Create an S3 bucket. Enable S3 Versioning. Configure an event trigger with AWS Lambda to restore modified objects from a private S3 bucket.

Answer

Upload files to an S3 bucket for static website hosting. Use S3 Object Lock with a retention period. Grant read-only IAM permissions.

Question 16

A media company hosts a web application on AWS for uploading videos. Only authenticated users should upload within a specified time frame after authentication.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an AWS Lambda function that generates pre-signed URLs when a user authenticates.

Answer

Configure the application to generate IAM temporary security credentials for authenticated users.

Answer

Develop a custom authentication service that integrates with Amazon Cognito to control and log direct S3 bucket access through the application.

Answer

Use AWS Security Token Service (AWS STS) to assume a pre-defined IAM role that grants authenticated users temporary permissions to upload videos directly to the S3 bucket.

Question 17

A company needs to ingest and analyze telemetry data from vehicles at scale for machine learning and reporting.Which solution will meet these requirements?

Accepted Answer

Use Amazon Timestream for LiveAnalytics to store data points. Grant Amazon SageMaker permission to access the data. Use Amazon QuickSight to visualize the data.

Answer

Use Amazon DynamoDB to store data points. Use DynamoDB Connector to ingest data into Amazon EMR for processing. Use Amazon QuickSight to visualize the data.

Answer

Use Amazon Neptune to store data points. Use Amazon Kinesis Data Streams to ingest data into a Lambda function for processing. Use Amazon QuickSight to visualize the data.

Answer

Use Amazon Timestream for LiveAnalytics to store data points. Grant Amazon SageMaker permission to access the data. Use Amazon Athena to visualize the data.

Question 18

A company runs an application on EC2 instances that need access to RDS credentials stored in AWS Secrets Manager.Which solution meets this requirement?

Accepted Answer

Create an IAM role, and attach the role to each EC2 instance profile. Use an identity-based policy to grant the role access to the secret.

Answer

Create an IAM user, and attach the user to each EC2 instance profile. Use a resource-based policy to grant the user access to the secret.

Answer

Create a resource-based policy for the secret. Use EC2 Instance Connect to access the secret.

Answer

Create an identity-based policy for the secret. Grant direct access to the EC2 instances.

Question 19

A company needs a cloud-based solution for backup, recovery, and archiving while retaining encryption key material control.Which combination of solutions will meet these requirements? (Select TWO)

Accepted Answer

Create an AWS Key Management Service (AWS KMS) key without key material. Import the company's key material into the KMS key.

Accepted Answer

Store the data in an Amazon S3 Glacier storage class. Use server-side encryption with customer-provided keys (SSE-C).

Answer

Create an AWS KMS encryption key that contains key material generated by AWS KMS.

Answer

Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Use S3 Bucket Keys with AWS KMS keys.

Answer

Store the data in AWS Snowball devices. Use server-side encryption with AWS KMS keys (SSE-KMS).

Question 20

A website uses EC2 instances with Auto Scaling and EFS. How can the company optimize costs?

Accepted Answer

Reconfigure the Auto Scaling group to use a target tracking scaling policy.

Answer

Reconfigure the Auto Scaling group to set a desired number of instances. Turn off scheduled scaling.

Answer

Create a new launch template version that uses larger EC2 instances.

Answer

Replace the EFS volume with instance store volumes.

Question 21

A company is developing a social media application that must scale to meet demand spikes and handle ordered processes.Which AWS services meet these requirements?

Accepted Answer

ECS with Fargate, RDS, and SQS for decoupling.

Answer

ECS with Fargate, RDS, and SNS for decoupling.

Answer

DynamoDB, Lambda, DynamoDB Streams, and Step Functions.

Answer

Elastic Beanstalk, RDS, and SNS for decoupling.

Question 22

A company wants to implement a data lake in the AWS Cloud. The company must ensure that only specific teams have access to sensitive data in the data lake. The company must have row-level access control for the data lake.Which solution will meet these requirements?

Accepted Answer

Use Amazon S3 to store the data. Use AWS Lake Formation for data governance and access control.

Answer

Use Amazon RDS to store the data. Use IAM roles and permissions for data governance and access control.

Answer

Use Amazon Redshift to store the data. Use IAM roles and permissions for data governance and access control.

Answer

Use AWS Glue Catalog to store the data. Use AWS Glue DataBrew for data governance and access control.

Question 23

A company hosts a multi-tier inventory reporting application on AWS. The company needs a cost-effective solution to generate inventory reports on demand. Admin users need to have the ability to generate new reports. Reports take approximately 5-10 minutes to finish. The application must send reports to the email address of the admin user who generates each report.Which solution will meet these requirements?

Accepted Answer

Create an AWS Lambda function to generate the reports. Use a function URL to invoke the function. Use Amazon Simple Email Service (Amazon SES) to send the reports to admin users.

Answer

Use Amazon Elastic Container Service (Amazon ECS) to host the report generation code. Use an Amazon API Gateway HTTP API to invoke the code. Use Amazon Simple Email Service (Amazon SES) to send the reports to admin users.

Answer

Use Amazon EventBridge to invoke a scheduled AWS Lambda function to generate the reports. Use Amazon Simple Notification Service (Amazon SNS) to send the reports to admin users.

Answer

Use Amazon Elastic Kubernetes Service (Amazon EKS) to host the report generation code. Use an Amazon API Gateway REST API to invoke the code. Use Amazon Simple Notification Service (Amazon SNS) to send the reports to admin users.

Question 24

A company that has multiple AWS accounts maintains an on-premises Microsoft Active Directory. The company needs a solution to implement Single Sign-On for its employees. The company wants to use AWS IAM Identity Center.The solution must meet the following requirements:Allow users to access AWS accounts and third-party applications by using existing Active Directory credentials.Enforce multi-factor authentication (MFA) to access AWS accounts.Centrally manage permissions to access AWS accounts and applications.Which solution will meet these requirements?

Accepted Answer

Use IAM Identity Center with the existing Active Directory as the identity source. Enforce MFA for all users. Use AWS Organizations and Active Directory groups to manage access permissions for AWS accounts and application access.

Answer

Create an IAM identity provider for Active Directory in each AWS account. Ensure that Active Directory users and groups access AWS accounts directly through IAM roles. Use IAM Identity Center to enforce MFA in each account for all users.

Answer

Use AWS Directory Service to create a new AWS Managed Microsoft AD Active Directory. Configure IAM Identity Center in each account to use the new AWS Managed Microsoft AD Active Directory as the identity source. Use IAM Identity Center to enforce MFA for all users.

Answer

Use AWS Lambda functions to periodically synchronize Active Directory users and groups with IAM users and groups in each AWS account. Use IAM roles and policies to manage application access. Create a second Lambda function to enforce MFA.

Question 25

A company runs an order management application on AWS. The application allows customers to place orders and pay with a credit card. The company uses an Amazon CloudFront distribution to deliver the application.A security team has set up logging for all incoming requests. The security team needs a solution to generate an alert if any user modifies the logging configuration.Which solution will meet these requirements? (Select TWO)

Accepted Answer

Configure an Amazon EventBridge rule that is invoked when a user creates or modifies a CloudFront distribution. Add the AWS Lambda function as a target of the EventBridge rule.

Accepted Answer

Create an AWS Lambda function to detect changes in CloudFront distribution logging. Configure the Lambda function to use Amazon Simple Notification Service (Amazon SNS) to send notifications to the security team.

Answer

Create an Application Load Balancer (ALB). Enable AWS WAF rules for the ALB. Configure an AWS Config rule to detect security violations.

Answer

Set up Amazon GuardDuty. Configure GuardDuty to monitor findings from the CloudFront distribution. Create an AWS Lambda function to address the findings.

Answer

Create a private API in Amazon API Gateway. Use AWS WAF rules to protect the private API from common security problems.

Question 26

A company recently migrated a data warehouse to AWS. The company has an AWS Direct Connect connection to AWS. Company users query the data warehouse by using a visualization tool. The average size of the queries that the data warehouse returns is 50 MB. The average visualization that the visualization tool produces is 500 KB in size. The result sets that the data warehouse returns are not cached.The company wants to optimize costs for data transfers between the data warehouse and the company.Which solution will meet this requirement?

Accepted Answer

Host the visualization tool in the same AWS Region as the data warehouse. Access the visualization tool through the Direct Connect connection.

Answer

Host the visualization tool on premises. Connect to the data warehouse directly through the internet.

Answer

Host the visualization tool in the same AWS Region as the data warehouse. Access the visualization tool through the internet.

Answer

Host the visualization tool on premises. Connect to the data warehouse through the Direct Connect connection

Question 27

How can trade data from DynamoDB be ingested into an S3 data lake for near real-time analysis?

Accepted Answer

Use DynamoDB Streams to invoke a Lambda function that writes to S3.

Answer

Use DynamoDB Streams to invoke a Lambda function that writes to Data Firehose, which writes to S3.

Answer

Enable Kinesis Data Streams on DynamoDB. Configure it to invoke a Lambda function that writes to S3.

Answer

Enable Kinesis Data Streams on DynamoDB. Use Data Firehose to write to S3.

Question 28

How can DynamoDB data be made available for long-term analytics with minimal operational overhead?

Accepted Answer

Configure DynamoDB incremental exports to S3.

Answer

Configure DynamoDB Streams to write records to S3.

Answer

Configure EMR to copy DynamoDB data to S3.

Answer

Configure EMR to copy DynamoDB data to HDFS.

Question 29

A company runs a Microsoft Windows SMB file share on-premises to support an application. The company wants to migrate the application to AWS. The company wants to share storage across multiple Amazon EC2 instances.Which solutions will meet these requirements with the LEAST operational overhead? (Select TWO.)

Accepted Answer

Create an Amazon Elastic File System (Amazon EFS) file system with elastic throughput.

Accepted Answer

Create an Amazon FSx for Windows File Server file system

Answer

Create an Amazon FSx for NetApp ONTAP file system.

Answer

Use Amazon Elastic Block Store (Amazon EBS) to create a self-managed Windows file share on the instances

Answer

Create an Amazon FSx for OpenZFS file system.

Question 30

A solutions architect needs to implement a solution that can handle up to 5,000 messages per second. The solution must publish messages as events to multiple consumers. The messages are up to 500 KB in size. The message consumers need to have the ability to use multiple programming languages to consume the messages with minimal latency. The solution must retain published messages for more than 3 months. The solution must enforce strict ordering of the messages.Which solution will meet these requirements?

Accepted Answer

Publish messages to an Amazon Kinesis Data Streams data stream. Enable enhanced fan-out. Ensure that consumers ingest the data stream by using dedicated throughput.

Answer

Publish messages to an Amazon Simple Notification Service (Amazon SNS) topic. Ensure that consumers use an Amazon Simple Queue Service (Amazon SQS) FIFO queue to subscribe to the topic.

Answer

Publish messages to Amazon EventBridge. Allow each consumer to create rules to deliver messages to the consumer's own target.

Answer

Publish messages to an Amazon Simple Notification Service (Amazon SNS) topic. Ensure that consumers use Amazon Data Firehose to subscribe to the topic.

Question 31

A company is planning to migrate an on-premises online transaction processing (OLTP) database that uses MySQL to an AWS managed database management system. Several reporting and analytics applications use the on-premises database heavily on weekends and at the end of each month. The cloud-based solution must be able to handle read-heavy surges during weekends and at the end of each month.Which solution will meet these requirements?

Accepted Answer

Migrate the database to an Amazon Aurora MySQL cluster. Configure Aurora Auto Scaling to use replicas to handle surges

Answer

Migrate the database to an Amazon EC2 instance that runs MySQL. Use an EC2 instance type that has ephemeral storage. Attach Amazon EBS Provisioned IOPS SSD (io2) volumes to the instance.

Answer

Migrate the database to an Amazon RDS for MySQL database. Configure the RDS for MySQL database for a Multi-AZ deployment, and set up auto scaling

Answer

Migrate from the database to Amazon Redshift. Use Amazon Redshift as the database for both OLTP and analytics applications.

Question 32

A company is migrating a new application from an on-premises data center to a new VPC in the AWS Cloud. The company has multiple AWS accounts and VPCs that share many subnets and applications. The company wants to have fine-grained access control for the new application. The company wants to ensure that all network resources across accounts and VPCs that are granted permission to access the new application can access the application.Which solution will meet these requirements?

Accepted Answer

Deploy a transit gateway in the account that hosts the new application. Share the transit gateway with each account that needs to connect to the application. Update route tables in the VPC that hosts the new application and in the transit gateway to enable connectivity

Answer

Set up a VPC peering connection for each VPC that needs access to the new application VPC. Update route tables in each VPC to enable connectivity.

Answer

Use an AWS PrivateLink endpoint service to make the new application accessible to other VPCs. Control access to the application by using an endpoint policy

Answer

Use an Application Load Balancer (ALB) to expose the new application to the internet. Configure authentication and authorization processes to ensure that only specified VPCs can access the application.

Question 33

A company is creating an application. The company stores data from tests of the application in multiple on-premises locations. The company needs to connect the on-premises locations to VPCs in an AWS Region in the AWS Cloud. The number of accounts and VPCs will increase during the next year. The network architecture must simplify the administration of new connections and must provide the ability to scale.Which solution will meet these requirements with the LEAST administrative overhead?

Accepted Answer

Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.

Answer

Create a peering connection between the VPCs. Create a VPN connection between the VPCs and the on-premises locations

Answer

Launch an Amazon EC2 instance. On the instance, include VPN software that uses a VPN connection to connect all VPCs and on-premises locations.

Answer

Create an AWS Direct Connect connection between the on-premises locations and a central VPC. Connect the central VPC to other VPCs by using peering connections.

Question 34

A company is enhancing the security of its AWS environment, where the company stores a significant amount of sensitive customer data. The company needs a solution that automatically identifies and classifies sensitive data that is stored in multiple Amazon S3 buckets. The solution must automatically respond to data breaches and alert the company's security team through email immediately when noncompliant data is found.Which solution will meet these requirements?

Accepted Answer

Use Amazon Macie. Integrate Amazon EventBridge with Macie, and configure EventBridge to send alerts to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the security team to the SNS topic.

Answer

Use Amazon GuardDuty. Configure an AWS Lambda function to route alerts to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the security team to the SNS topic.

Answer

Use Amazon GuardDuty. Configure an AWS Lambda function to route alerts to an Amazon Simple Queue Service (Amazon SQS) queue. Configure a second Lambda function to periodically poll the SQS queue and to send emails to the security team by using Amazon Simple Email Service (Amazon SES).

Answer

Use Amazon Macie. Integrate Amazon EventBridge with Macie, and configure EventBridge to route alerts to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an AWS Lambda function to periodically poll the SQS queue and to send alerts to the security team by using Amazon Simple Email Service (Amazon SES).

Question 35

A gaming company is building an application that uses a database to store user data. The company wants the database to have an active-active configuration that allows data writes to a secondary AWS Region. The database must achieve a sub-second recovery point objective (RPO).Which solution will meet these requirements?

Accepted Answer

Deploy an Amazon DynamoDB table in the primary Region. Configure global tables for the secondary Region.

Answer

Deploy an Amazon ElastiCache (Redis OSS) cluster. Configure a global data store for disaster recovery. Configure the ElastiCache cluster to cache data from an Amazon RDS database that is deployed in the primary Region.

Answer

Deploy an Amazon DynamoDB table in the primary Region and the secondary Region. Configure Amazon DynamoDB Streams to invoke an AWS Lambda function to write changes from the table in the primary Region to the table in the secondary Region.

Answer

Deploy an Amazon Aurora MySQL database in the primary Region. Configure a global database for the secondary Region.

Question 36

A company runs an order management application on AWS. The application allows customers to place orders and pay with a credit card. The company uses an Amazon CloudFront distribution to deliver the application. A security team has set up logging for all incoming requests. The security team needs a solution to generate an alert if any user modifies the logging configuration.Which combination of solutions will meet these requirements? (Select TWO.)

Accepted Answer

Configure an Amazon EventBridge rule that is invoked when a user creates or modifies a CloudFront distribution. Add the AWS Lambda function as a target of the EventBridge rule.

Accepted Answer

Create an AWS Lambda function to detect changes in CloudFront distribution logging. Configure the Lambda function to use Amazon Simple Notification Service (Amazon SNS) to send notifications to the security team.

Answer

Create an Application Load Balancer (ALB). Enable AWS WAF rules for the ALB. Configure an AWS Config rule to detect security violations.

Answer

Set up Amazon GuardDuty. Configure GuardDuty to monitor findings from the CloudFront distribution. Create an AWS Lambda function to address the findings.

Answer

Create a private API in Amazon API Gateway. Use AWS WAF rules to protect the private API from common security problems.

Question 37

A company has a website that handles dynamic traffic loads. The website architecture is based on Amazon EC2 instances in an Auto Scaling group that is configured to use scheduled scaling. Each EC2 instance runs code from an Amazon Elastic File System (Amazon EFS) volume and stores shared data back to the same volume.The company wants to optimize costs for the website.Which solution will meet this requirement?

Accepted Answer

Reconfigure the Auto Scaling group to use a target tracking scaling policy

Answer

Reconfigure the Auto Scaling group to set a desired number of instances. Turn off scheduled scaling

Answer

Create a new launch template version for the Auto Scaling group that uses larger EC2 instances

Answer

Replace the EFS volume with instance store volumes.

Question 38

A company wants to provide a third-party system that runs in a private data center with access to its AWS account. The company wants to call AWS APIs directly from the third-party system. The company has an existing process for managing digital certificates. The company does not want to use SAML or OpenID Connect (OIDC) capabilities and does not want to store long-term AWS credentials.Which solution will meet these requirements?

Accepted Answer

Configure AWS Identity and Access Management (IAM) Roles Anywhere to exchange X.509 certificates for AWS credentials to interact with AWS APIs.

Answer

Configure mutual TLS to allow authentication of the client and server sides of the communication channel.

Answer

Configure AWS Signature Version 4 to authenticate incoming HTTPS requests to AWS APIs

Answer

Configure Kerberos to exchange tickets for assertions that can be validated by AWS APIs

Question 39

A media company is launching a new product platform that artists from around the world can use to upload videos and images directly to an Amazon S3 bucket. The company owns and maintains the S3 bucket. The artists must be able to upload files from personal devices without the need for AWS credentials or an AWS account.Which solution will meet these requirements MOST securely?

Accepted Answer

Use an IAM role that has upload permissions for the S3 bucket to generate presigned URLs for S3 prefixes that are specific to each artist. Share the URLs to the artists.

Answer

Enable cross-origin resource sharing (CORS) on the S3 bucket.

Answer

Turn off block public access for the S3 bucket. Share the bucket URL to the artists to enable uploads without credentials.

Answer

Create a web interface that uses an IAM role that has permission to upload and view objects in the S3 bucket. Share the web interface URL to the artists.

Question 40

A company is building a serverless application to process clickstream data from its website. The clickstream data is sent to an Amazon Kinesis Data Streams data stream from the application web servers.The company wants to enrich the clickstream data by joining the clickstream data with customer profile data from an Amazon Aurora Multi-AZ database. The company wants to use Amazon Redshift to analyze the enriched data. The solution must be highly available.Which solution will meet these requirements?

Accepted Answer

Use an AWS Lambda function to process and enrich the clickstream data. Use the same Lambda function to write the clickstream data to Amazon S3. Use Amazon Redshift Spectrum to query the enriched data in Amazon S3.

Answer

Use an Amazon EC2 Spot Instance to poll the data stream and enrich the clickstream data. Configure the EC2 instance to use the COPY command to send the enriched results to Amazon Redshift.

Answer

Use an Amazon Elastic Container Service (Amazon ECS) task with AWS Fargate Spot capacity to poll the data stream and enrich the clickstream data. Configure an Amazon EC2 instance to use the COPY command to send the enriched results to Amazon Redshift.

Answer

Use Amazon Kinesis Data Firehose to load the clickstream data from Kinesis Data Streams to Amazon S3. Use AWS Glue crawlers to infer the schema and populate the AWS Glue Data Catalog. Use Amazon Athena to query the raw data in Amazon S3.

Amazon SAA-C03 Practice Test 23

Amazon SAA-C03 Practice Tests

Amazon SAA-C03 Practice Test 23

Question

Amazon SAA-C03 Practice Tests

Practice Tests