Quiz IT certification exam

Question 1

A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources.

The data is in JSON format and Ingestion rates can be as high as 1 MB/s. When an EC2 instance is rebooted, the data in-flight is lost. The company's data science team wants to query Ingested data In near-real time. Which solution provides near-real -time data querying that is scalable with minimal data loss?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Publish data to Amazon Kinesis Data Streams Use Kinesis data Analytics to query the data.

Answer

Publish data to Amazon Kinesis Data Firehose with Amazon Redshift as the destination Use Amazon Redshift to query the data

Answer

Store ingested data m an EC2 Instance store Publish data to Amazon Kinesis Data Firehose with Amazon S3 as the destination. Use Amazon Athena to query the data.

Answer

Store ingested data m an Amazon Elastic Block Store (Amazon EBS) volume Publish data to Amazon ElastiCache tor Red Subscribe to the Redis channel to query the data

Question 2

A company recently migrated its entire IT environment to the AWS Cloud. The company discovers that users are provisioning oversized Amazon EC2 instances and modifying security group rules without using the appropriate change control process A solutions architect must devise a strategy to track and audit these inventory and configuration changes. Which actions should the solutions architect take to meet these requirements? (Select TWO )

Accepted Answer

Enable AWS CloudTrail and use it for auditing

Accepted Answer

Enable AWS Config and create rules for auditing and compliance purposes

Answer

Use data lifecycie policies for the Amazon EC2 instances

Answer

Enable AWS Trusted Advisor and reference the security dashboard

Answer

Restore previous resource configurations with an AWS CloudFormation template

Question 3

A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. On the first day of every month at midnight. The application becomes much slower when the month-end financial calcualtion bath runs. This causes the CPU utilization of the EC2 instaces to immediately peak to 100%, which disrupts the application. What should a solution architect recommend to ensure the application is able to handle the workload and avoid downtime?

Accepted Answer

Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.

Answer

Configure an Amazon CloudFront distribution in from of the ALB.

Answer

Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization.

Answer

Configure Amazon ElasticCache to remove some of the workload from tha EC2 instances.

Question 4

A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same high availability and resiliency, but the company wants to minimize storage costs.Which storage solution will meet these requirements?

Accepted Answer

Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

Answer

Move the data objects to S3 Glacier Deep Archive after 30 days.

Answer

Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.

Answer

Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately.

Question 5

A solutions architect must secure a VPC network that hosts Amazon EC2 instances The EC2 ^stances contain highly sensitive data and tun n a private subnet According to company policy the EC2 instances mat run m the VPC can access only approved third-party software repositories on the internet for software product updates that use the third party's URL Other internet traffic must be blocked. Which solution meets these requirements?

Accepted Answer

Update the route table for the private subnet to route the outbound traffic to an AWS Network Firewall. Configure domain list rule groups

Answer

Set up an AWS WAF web ACL. Create a custom set of rules that filter traffic requests based on source and destination IP address range sets.

Answer

Implement strict inbound security group roles Configure an outbound rule that allows traffic only to the authorized software repositories on the internet by specifying the URLs

Answer

Configure an Application Load Balancer (ALB) in front of the EC2 instances. Direct an outbound traffic to the ALB Use a URL-based rule listener in the ALB's target group for outbound access to the internet

Question 6

A company has hundreds of Amazon EC2 Linux-based instances in the AWS Cloud. Systems administrators have used shared SSH keys to manage the instances After a recent audit, the company's security team is mandating the removal of all shared keys. A solutions architect must design a solution that provides secure access to the EC2 instances. Which solution will meet this requirement with the LEAST amount of administrative overhead?

Accepted Answer

Use AWS Systems Manager Session Manager to connect to the EC2 instances.

Answer

Use AWS Security Token Service (AWS STS) to generate one-time SSH keys on demand.

Answer

Allow shared SSH access to a set of bastion instances. Configure all other instances to allow only SSH access from the bastion instances

Answer

Use an Amazon Cognito custom authorizer to authenticate users. Invoke an AWS Lambda function to generate a temporary SSH key.

Question 7

A company is building a data analysis platform on AWS by using AWS Lake Formation. The platform will ingest data from different sources such as Amazon S3 and Amazon RDS. The company needs a secure solution to prevent access to portions of the data that contain sensitive information.

Accepted Answer

Create data filters to implement row-level security and cell-level security.

Answer

Create an IAM role that includes permissions to access Lake Formation tables.

Answer

Create an AWS Lambda function that removes sensitive information before Lake Formation ingests re data.

Answer

Create an AWS Lambda function that perodically Queries and removes sensitive information from Lake Formation tables.

Question 8

A company wants to create an application to store employee data in a hierarchical structured relationship. The company needs a minimum-latency response to high-traffic queries for the employee data and must protect any sensitive dat a. The company also need to receive monthly email messages if any financial information is present in the employee data. Which combination of steps should a solutin architect take to meet these requirement? ( Select TWO.)

Accepted Answer

Use Amazon DynamoDB to store the employee data in hierarchies Export the data to Amazon S3 every month.

Accepted Answer

Configure Amazon Macie for the AWS account. integrate Macie with Amazon EventBridge to send monthly notifications through an Amazon Simple Notification Service (Amazon SNS) subscription.

Answer

Use Amazon Redshift to store the employee data in hierarchies. Unload the data to Amazon S3 every month.

Answer

Configure Amazon Macie for the AWS account Integrate Macie with Amazon EventBridge to send monthly events to AWS Lambda.

Answer

Use Amazon Athena to analyze the employee data in Amazon S3 integrate Athena with Amazon QuickSight to publish analysis dashboards and share the dashboards with users.

Question 9

A solutions architect is designing a multi-tier application for a company. The application's users upload images from a mobile device. The application generates a thumbnail of each image and returns a message to the user to confirm that the image was uploaded successfully.The thumbnail generation can take up to 60 seconds, but the company wants to provide a faster response time to its users to notify them that the original image was received. The solutions architect must design the application to asynchronously dispatch requests to the different application tiers.What should the solutions architect do to meet these requirements?

Accepted Answer

Create an Amazon Simple Queue Service (Amazon SQS) message queue. As images are uploaded, place a message on the SQS queue for thumbnail generation. Alert the user through an application message that the image was received

Answer

Write a custom AWS Lambda function to generate the thumbnail and alert the user. Use the image upload process as an event source to invoke the Lambda function.

Answer

Create an AWS Step Functions workflow Configure Step Functions to handle the orchestration between the application tiers and alert the user when thumbnail generation is complete

Answer

Create Amazon Simple Notification Service (Amazon SNS) notification topics and subscriptions Use one subscription with the application to generate the thumbnail after the image upload is complete. Use a second subscription to message the user's mobile app by way of a push notification after thumbnail generation is complete.

Question 10

A company uses a 100 GB Amazon RDS for Microsoft SQL Server Single-AZ DB instance in the us-east- 1 Region to store customer transactions. The company needs high availability and automate recovery for the DB instance. The companu must also run reports on the RDS database several times a year. The report process causes transactions to take longer than usual to post to the customer‘ accounts. Which combination of steps will meet these requirements? (Select TWO.)

Accepted Answer

Modify the DB instance from a Single-AZ DB instance to a Multi-AZ deployment.

Accepted Answer

Create a read replica of the DB instance in a different Availability Zone. Point All requests for reports to the read replica.

Answer

Take a snapshot of the current DB instance. Restore the snapshot to a new RDS deployment in another Availability Zone.

Answer

Migrate the database to RDS Custom.

Answer

Use RDS Proxy to limit reporting requests to the maintenance window.

Question 11

A solution architect needs to assign a new microsoft for a company’s application. Clients must be able to call an HTTPS endpoint to reach the micoservice. The microservice also must use AWS identity and Access Management (IAM) to authentication calls. The soltions architect will write the logic for this microservice by using a single AWS Lambda function that is written in Go 1.x. Which solution will deploy the function in the in the MOST operationally efficient way?

Accepted Answer

Create an Amazon API Gateway REST API. Configure the method to use the Lambda function.Enable IAM authentication on the API.

Answer

Create a Lambda function URL for the function. Specify AWS_IAM as the authentication type.

Answer

Create an Amazon CloudFront distribution. Deploy the function to Lambda@Edge. Integrate IAM authentication logic into the Lambda@Edge function.

Answer

Create an Amazon CloudFront distribuion. Deploy the function to CloudFront Functions. Specify AWS_IAM as the authentication type.

Question 12

A company is using Amazon CloudFront with lis website. The company has enabled logging on the CloudFront distribution, and togs are saved in one of the company's Amazon S3 buckets The company needs to perform advanced analyses on the logs and build visualizations What should a solutions architect do to meet these requirements'?

Accepted Answer

Use standard SQL queries in Amazon Athena to analyze the CloudFront togs in the S3 bucket Visualize the results with Amazon QuickSight

Answer

Use standard SQL queries in Amazon Athena to analyze the CloudFront togs in the S3 bucket Vrsualize the results with AWS Glue

Answer

Use standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs m the S3 bucket Visualize the results with AWS Glue

Answer

Use standard SQL queries in Amazon DynamoOB to analyze the CtoudFront logs m the S3 bucket Visualize the results with Amazon QuickSight

Question 13

A company provides an online service for posting video content and transcoding it for use by any mobile platform. The application architecture uses Amazon Elastic File System (Amazon EFS) Standard to collect and store the videos so that multiple Amazon EC2 Linux instances can access the video content for processing As the popularity of the service has grown over time, the storage costs have become too expensive. Which storage solution is MOST cost-effective?

Accepted Answer

Use Amazon S3 for storing the video content Move the files temporarily over to an Amazon Elastic Block Store (Amazon EBS) volume attached to the server for processing

Answer

Use AWS Storage Gateway for files to store and process the video content

Answer

Use AWS Storage Gateway for volumes to store and process the video content

Answer

Use Amazon EFS for storing the video content Once processing is complete transfer the files to Amazon Elastic Block Store (Amazon EBS)

Question 14

A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance After a routine compliance check, the company sets a standard that requires a recovery pant objective (RPO) of less than 1 second for all its production databases.Which solution meets these requirement?

Accepted Answer

Enable a Multi-AZ deployment for the DB Instance

Answer

Enable auto scaling for the OB instance m one Availability Zone.

Answer

Configure the 06 instance in one Availability Zone and create multiple read replicas in a separate Availability Zone

Answer

Configure the 06 instance m one Availability Zone, and configure AWS Database Migration Service (AWS DMS) change data capture (CDC) tasks

Question 15

A company's facility has badge readers at every entrance throughout the building. When badges are scanned, the readers send a message over HTTPS to indicate who attempted to access that particular entrance. A solutions architect must design a system to process these messages from the sensors. The solution must be highly available, and the results must be made available for the company's security team to analyze. Which system architecture should the solutions architect recommend?

Accepted Answer

Create an HTTPS endpoint in Amazon API Gateway. Configure the API Gateway endpoint to invokean AWS Lambda function to process the messages and save the results to an Amazon DynamoDBtable.

Answer

Launch an Amazon EC2 instance to serve as the HTTPS endpoint and to process the messagesConfigure the EC2 instance to save the results to an Amazon S3 bucket.

Answer

Use Amazon Route 53 to direct incoming sensor messages to an AWS Lambda function. Configure the Lambda function to process the messages and save the results to an Amazon DynamoDB table.

Answer

Create a gateway VPC endpoint for Amazon S3. Configure a Site-to-Site VPN connection from the facility network to the VPC so that sensor data can be written directly to an S3 bucket by way of the VPC endpoint.

Question 16

A company is designing a shared storage solution for a gaming application that is hosted in the AWS Cloud The company needs the ability to use SMB clients to access data solution must be fully managed. Which AWS solution meets these requirements?

Accepted Answer

Create an Amazon FSx for Windows File Server file system Attach the file system to the origin server Connect the application server to the file system

Answer

Create an AWS DataSync task that shares the data as a mountable file system Mount the file system to the application server

Answer

Create an Amazon EC2 Windows instance Install and configure a Windows file share role on the instance Connect the application server to the file share

Answer

Create an Amazon S3 bucket Assign an IAM role to the application to grant access to the S3 bucket Mount the S3 bucket to the application server

Question 17

A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application. What should a solutions architect do to meet these requirements?

Accepted Answer

Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.

Answer

Create an Amazon S3 Standard bucket with access to the web servers.

Answer

Configure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.

Answer

Configure a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume to all web servers.

Question 18

A company wants to run an in-memory database for a latency-sensitive application that runs on Amazon EC2 instances. The application processes more than 100,000 transactions each minute and requires high network throughput. A solutions architect needs to provide a cost-effective network design that minimizes data transfer charges. Which solution meets these requirements?

Accepted Answer

Launch all EC2 instances in the same Availability Zone within the same AWS Region. Specify a placement group with cluster strategy when launching EC2 instances.

Answer

Launch all EC2 instances in different Availability Zones within the same AWS Region. Specify a placement group with partition strategy when launching EC2 instances.

Answer

Deploy an Auto Scaling group to launch EC2 instances in different Availability Zones based on a network utilization target.

Answer

Deploy an Auto Scaling group with a step scaling policy to launch EC2 instances in different Availability Zones.

Question 19

A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance. Management says the application must be made more secure with the least amount of programming effort.What should a solutions architect do to meet these requirements?

Accepted Answer

Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager.

Answer

Use AWS Key Management Service (AWS KMS) customer master keys (CMKs) to create keys.Configure the application to load the database credentials from AWS KMS. Enable automatic key rotation.

Answer

Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager.

Answer

Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Systems Manager Parameter Store. Configure the application to load the database credentials from Parameter Store. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Parameter Store.

Question 20

A company is planning to store data on Amazon RDS DB instances. The company must encrypt the data at rest. What should a solutions architect do to meet this requirement?

Accepted Answer

Create a customer master key (CMK) in AWS Key Management Service (AWS KMS) Enable encryption for the DB instances

Answer

Create an encryption key and store the key in AWS Secrets Manager Use the key to encrypt the DB instances

Answer

Generate a certificate in AWS Certificate Manager (ACM). Enable SSL/TLS on the DB instances by using the certificate

Answer

Generate a certificate in AWS Identity and Access Management {IAM) Enable SSUTLS on the DB instances by using the certificate

Question 21

A company wants to migrate a Windows-based application from on premises to the AWS Cloud. The application has three tiers, a business tier, and a database tier with Microsoft SQL Server. The company wants to use specific features of SQL Server such as native backups and Data Quality Services. The company also needs to share files for process between the tiers. How should a solution architect design the architecture to meet these requirements?

Accepted Answer

Host all three on Amazon EC2 instances. Use Amazon FSx for Windows file sharing between the tiers.

Answer

Host all three on Amazon instances. Use Mmazon FSx File Gateway for file sharing between tiers.

Answer

Host the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use Amazon Elastic File system (Amazon EFS) for file sharing between the tiers.

Answer

Host the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume for file sharing between the tiers.

Question 22

A company uses Amazon EC2 instances and AWS Lambda functions to run its application. The company has VPCs with public subnets and private subnets in its AWS account. The EC2 instances run in a private subnet in one of the VPCs. The Lambda functions need direct network access to the EC2 instances for the application to work.The application will run for at least 1 year. The company expects the number of Lambda functions that the application uses to increase during that time. The company wants to maximize its savings on all application resources and to keep network latency between the services low.Which solution will meet these requirements?

Accepted Answer

Purchase a Compute Savings Plan. Optimize the Lambda functions duration and memory usage, the number of invocations, and the amount of data that is transferred Connect the Lambda function to the Private subnet that contains the EC2 instances.

Answer

Purchase on an EC2 instance Savings Plan. Optimize the Lambda functions duration and memory usage and the number of invocations. Connect the Lambda functions to the private subnet that contains the EC2 instances.

Answer

Purchase on an EC2 instance Savings Plan. Optimize the Lambda functions duration and memory usage and the number of invocation, and the amount of data that is transfered. Connect the Lambda functions to a public subnet in the same VPC where the EC2 instances run.

Answer

Purchase a Compute Savings Plan. Optimize the Lambda functions‘ duration and memory usage, the number of invocations, and the amount of data that is transferred Keep the Lambda functions in the Lambda service VPC.

Question 23

A company is building a mobile app on AWS. The company wants to expand its reach to millions of users The company needs to build a platform so that authorized users can watch the company's content on their mobile devices What should a solutions architect recommend to meet these requirements?

Accepted Answer

Use Amazon CloudFront Provide signed URLs to stream content.

Answer

Publish content to a public Amazon S3 bucket. Use AWS Key Management Service (AWS KMS) keys to stream content.

Answer

Set up IPsec VPN between the mobile app and the AWS environment to stream content

Answer

Set up AWS Client VPN between the mobile app and the AWS environment to stream content.

Question 24

A company has an on-premises MySQL database used by the global tales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrate wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users In the future.Which service should a solutions architect recommend?

Accepted Answer

Amazon Aurora Serverless tor MySQL

Answer

Amazon Aurora MySQL

Answer

Amazon Redshift Spectrum

Answer

Amazon RDS for MySQL

Question 25

A company deploys an appliation on five Amazon EC2 instances. An Applicatin Load Balancer (ALB) distributes traffic to the instances by using a target group. The average CPU usage on each of the insatances is below 10% most of the time. With occasional surges to 65%.A solution architect needs to implement a solution to automate the scalability of the application. The solution must optimize the cost of the architecture and must ensure that the application has enough CPU resources when surges occur. Which solution will meet these requirements?

Accepted Answer

Create an EC2 Auto Scaling. Select the exisiting ALB as the load balancer and the existing target group as the target group. Set a target tracking scaling policy that is based on the ASGAverageCPUUtilization metric. Set the minimum instances to 2, the desired capacity to 3, the desired capacity to 3, the maximum instances to 6, and the target value to 50%. And the EC2 instances to the Auto Scaling group.

Answer

Create an Amazon CloudWatch alarm that enters the ALARM state when the CPUUtilization metric is less than 20%. Create an AWS Lambda function that the CloudWatch alarm invokes to terminate one of the EC2 instances in the ALB target group.

Answer

Create an EC2 Auto Scaling. Select the exisiting ALB as the load balancer and the existing target group. Set the minimum instances to 2, the desired capacity to 3, and the maximum instances to 6 Add the EC2 instances to the Scaling group.

Answer

Create two Amazon CloudWatch alarms. Configure the first CloudWatch alarm to enter the ALARM satet when the average CPUTUilization metric is below 20%. Configure the seconnd CloudWatch alarm to enter the ALARM state when the average CPUUtilization metric is aboove 50%. Configure the alarms to publish to an Amazon Simple Notification Service (Amazon SNS) topic to send an email message. After receiving the message, log in to decrease or increase the number of EC2 instances that are running

Question 26

A company hosts a web application on multiple Amazon EC2 instances The EC2 instances are in an Auto Scaling group that scales in response to user demand The company wants to optimize cost savings without making a long-term commitment Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements'?

Accepted Answer

A mix of On-Demand instances and Spot Instances

Answer

Dedicated Instances only

Answer

On-Demand Instances only

Answer

A mix of On-Demand instances and Reserved instances

Question 27

A company is hosting a three-tier ecommerce application in the AWS Cloud. The company hosts the website on Amazon S3 and integrates the website with an API that handles sales requests. The company hosts the API on three Amazon EC2 instances behind an Application Load Balancer (ALB).The API consists of static and dynamic front-end content along with backend workers that process sales requests asynchronously. The company is expecting a significant and sudden increase in the number of sales requests during events for the launch of new products What should a solutions architect recommend to ensure that all the requests are processed successfully?

Accepted Answer

Add an Amazon CloudFront distribution for the static content. Place the EC2 instances in an Auto Scaling group to launch new instances based on network traffic.

Answer

Add an Amazon CloudFront distribution for the dynamic content. Increase the number of EC2 instances to handle the increase in traffic.

Answer

Add an Amazon CloudFront distribution for the dynamic content. Add an Amazon ElastiCache instance in front of the ALB to reduce traffic for the API to handle.

Answer

Add an Amazon CloudFront distribution for the static content. Add an Amazon Simple Queue Service (Amazon SOS) queue to receive requests from the website for later processing by the EC2 instances.

Question 28

A company's web application consists o( an Amazon API Gateway API in front of an AWS Lambda function and an Amazon DynamoDB database. The Lambda function handles the business logic, and the DynamoDB table hosts the dat a. The application uses Amazon Cognito user pools to identify the individual users of the application.A solutions architect needs to update the application so that only users who have a subscription can access premium content.

Accepted Answer

Implement API usage plans and API keys to limit the access of users who do not have a subscription.

Answer

Enable API caching and throttling on the API Gateway API

Answer

Set up AWS WAF on the API Gateway API Create a rule to filter users who have a subscription

Answer

Apply fine-grained IAM permissions to the premium content in the DynamoDB table

Question 29

A company's application runs on AWS. The application stores large documents in an Amazon S3 bucket that uses the S3 Standard-infrequent Access (S3 Standerd-IA) storage class. The company will continue paying to store the data but wants to save on its total S3 costs. The company wants authorized external users to have the ability to access the documents in milliseconds. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use Amazon CloudFront to handle all the requests to the S3 bucket

Answer

Configure the S3 bucket to be a Requester Pays bucket

Answer

Change the storage tier to S3 Standard for all existing and future objects.

Answer

Turn on S3 Transfer Acceleration tor the S3 Docket

Question 30

A company recently created a disaster recovery site in a Different AWS Region.The company needs to transfer large amounts of data back and forth between NFS file systems in the two Regions on a periods. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use AWS DataSync.

Answer

Use AWS Snowball devices

Answer

Set up an SFTP server on Amazon EC2

Answer

Use AWS Database Migration Service (AWS DMS)

Question 31

A company has an On-premises volume backup solution that has reached its end of life. The company wants to use AWS as part of a new backup solution and wants to maintain local access to all the data while it is backed up on AWS. The company wants to ensure that the data backed up on AWS is automatically and securely transferred.Which solution meets these requirements?

Accepted Answer

Use AWS Storage Gateway and configure a stored volume gateway. Run the Storage software application on premises and map the gateway storage volumes to on-premises storage. Mount the gateway storage volumes to provide local access to the data.

Answer

Use AWS Snowball to migrate data out of the on-premises solution to Amazon S3. Configure onpremises systems to mount the Snowball S3 endpoint to provide local access to the data.

Answer

Use AWS Snowball Edge to migrate data out of the on-premises solution to Amazon S3.Use the Snowball Edge file interface to provide on-premises systems with local access to the data.

Answer

Use AWS Storage Gateway and configure a cached volume gateway. Run the Storage Gateway software application on premises and configure a percentage of data to cache locally. Mount the gateway storage volumes to provide local access to the data.

Question 32

A transaction processing company has weekly scripted batch jobs that run on Amazon EC2 instances.The EC2 instances are in an Auto Scaling group. The number of transactions can vary but the beseline CPU utilization that is noted on each run is at least 60%. The company needs to provision the capacity 30 minutes before the jobs run. Currently engineering complete this task by manually modifying the Auto Scaling group parameters.The company does not have the resources to analyze the required capacity trends for the Auto Scaling group counts. The company needs an automated way to modify the Auto Scaling group’s capacity. Which solution will meet these requiements with the LEAST operational overhead?

Accepted Answer

Create a predictive scaling policy for the Auto Scaling group. Configure the policy to scale based on forecast. Set the scaling metric to CPU utilization. Set the target value for the metric to 60%. In the Policy, set the instances to pre- launch 30 minutes before the jobs run.

Answer

Ceate a dynamic scalling policy for the Auto Scaling group. Configure the policy to scale based on the CPU utilization metric to 60%.

Answer

Create a scheduled scaling polcy for the Auto Scaling group. Set the appropriate desired capacity, minimum capacity, and maximum capacity. Set the recurrence to weekly. Set the start time to 30 minutes. Before the batch jobs run.

Answer

Create an Amazon EventBridge event to invoke an AWS Lamda function when the CPU utilization metric value for the Auto Scaling group reaches 60%. Configure the Lambda function to increase the Auto Scaling group’s desired capacity and maximum capacity by 20%.

Question 33

A company experienced a breach that affected several applications in its on-premises data center The attacker took advantage of vulnerabilities in the custom applications that were running on the servers The company is now migrating its applications to run on Amazon EC2 instances The company wants to implement a solution that actively scans for vulnerabilities on the EC2 instances and sends a report that details the findings Which solution will meet these requirements?

Accepted Answer

Turn on Amazon Inspector Deploy the Amazon Inspector agent to the EC2 instances Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings

Answer

Deploy AWS Shield to scan the EC2 instances for vulnerabilities Create an AWS Lambda function to log any findings to AWS CloudTrail.

Answer

Deploy Amazon Macie and AWS Lambda functions to scan the EC2 instances for vulnerabilities Log any findings to AWS CloudTrail

Answer

Turn on Amazon GuardDuty Deploy the GuardDuty agents to the EC2 instances Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings

Question 34

A company stores confidential data in an Amazon Aurora PostgreSQL database in the ap-southeast-3 Region The database is encrypted with an AWS Key Management Service (AWS KMS) customer managed key The company was recently acquired and must securely share a backup of the database with the acquiring company's AWS account in ap-southeast-3. What should a solutions architect do to meet these requirements?

Accepted Answer

Create a database snapshot Add the acquiring company's AWS account to the KMS key policy Share the snapshot with the acquiring company's AWS account

Answer

Create a database snapshot Copy the snapshot to a new unencrypted snapshot Share the new snapshot with the acquiring company's AWS account

Answer

Create a database snapshot that uses a different AWS managed KMS key Add the acquiring company's AWS account to the KMS key alias. Share the snapshot with the acquiring company's AWS account.

Answer

Create a database snapshot Download the database snapshot Upload the database snapshot to an Amazon S3 bucket Update the S3 bucket policy to allow access from the acquiring company's AWS account

Question 35

A company is launching an application on AWS. The application uses an Application Load (ALB) to direct traffic to at least two Amazon EC2 instances in a single target group. The instances are in an Auto Scaling group for each environment. The company requires a development and a production environment. The production environment will have periods of high traffic. Which solution will configure the development environment MOST cost-effectively?

Accepted Answer

Reduce the maximum number of EC2 instances in the development environment’s Auto Scaling group

Answer

Reconfigure the target group in the development environment to have one EC2 instance as a target.

Answer

Change the ALB balancing algorithm to least outstanding requests.

Answer

Reduce the size of the EC2 instances in both environments.

Question 36

A company will deployed a web application on AWS. The company hosts the backend database on Amazon RDS for MySQL with a primary DB instance and five read replicas to support scaling needs. The read replicas must log no more than 1 second bahind the primary DB Instance. The database routinely runs scheduled stored procedures. As traffic on the website increases, the replicas experinces addtional lag during periods of peak lead. A solutions architect must reduce the replication lag as much as possible. The solutions architect must minimize changes to the applicatin code and must minimize ongoing overhead. Which solution will meet these requirements?Migrate the database to Amazon Aurora MySQL. Replace the read replicas with Aurora Replicas, and configure Aurora Auto Scaling. Replace the stored procedures with Aurora MySQL native functions. Deploy an Amazon ElasticCache for Redis cluser in front of the database. Modify the application to check the cache before the application queries the database. Repace the stored procedures with AWS Lambda funcions.

Accepted Answer

Migrate the database to a MYSQL database that runs on Amazn EC2 instances. Choose large, compute optimized for all replica nodes. Maintain the stored procedures on the EC2 instances.

Answer

Deploy an Amazon ElastiCache for Redis cluster in fornt of the database. Modify the application to check the cache before the application queries the database. Replace the stored procedures with AWS Lambda functions.

Answer

Migrate the database to a MySQL database that runs on Amazon EC2 instances. Choose large, compute optimized EC2 instances for all replica nodes, Maintain the stored procedures on the EC2 instances.

Answer

Migrate the database to Amazon DynamoDB, Provision number of read capacity units (RCUs) to support the required throughput, and configure on-demand capacity scaling. Replace the stored procedures with DynamoDB streams.

Question 37

A company hosts a multiplayer gaming application on AWS. The company wants the application to read data with sub-millisecond latency and run one-time queries on historical data. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use Amazon DynamoDB with DynamoDB Accelerator (DAX) for data that is frequently accessed.Export the data to an Amazon S3 bucket by using DynamoDB table export. Run one-time queries on the data in Amazon S3 by using Amazon Athena.

Answer

Use Amazon RDS for data that is frequently accessed. Run a periodic custom script to export the data to an Amazon S3 bucket.

Answer

Store the data directly in an Amazon S3 bucket. Implement an S3 Lifecycle policy to move older data to S3 Glacier Deep Archive for long-term storage. Run one-time queries on the data in Amazon S3 by using Amazon Athena

Answer

Use Amazon DynamoDB for data that is frequently accessed Turn on streaming to Amazon Kinesis Data Streams. Use Amazon Kinesis Data Firehose to read the data from Kinesis Data Streams. Store the records in an Amazon S3 bucket.

Question 38

A company collects data from thousands of remote devices by using a RESTful web services application that runs on an Amazon EC2 instance. The EC2 instance receives the raw data, transforms the raw data, and stores all the data in an Amazon S3 bucket. The number of remote devices will increase into the millions soon. The company needs a highly scalable solution that minimizes operational overhead. Which combination of steps should a solutions architect take to meet these requirements9 (Select TWO.)

Accepted Answer

Use AWS Glue to process the raw data in Amazon S3.

Accepted Answer

Use Amazon API Gateway to send the raw data to an Amazon Kinesis data stream. Configure Amazon Kinesis Data Firehose to use the data stream as a source to deliver the data to Amazon S3.

Answer

Use Amazon Route 53 to route traffic to different EC2 instances.

Answer

Add more EC2 instances to accommodate the increasing amount of incoming data.

Answer

Send the raw data to Amazon Simple Queue Service (Amazon SOS). Use EC2 instances to process the data.

Question 39

A company collects data from a large number of participants who use wearabledevices.The company stores the data in an Amazon DynamoDB table and uses applications to analyze the dat a. The data workload is constant and predictable. The company wants to stay at or below its forecasted budget for DynamoDB.Whihc solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use provisioned mode Specify the read capacity units (RCUs) and write capacity units (WCUs).

Answer

Use provisioned mode and DynamoDB Standard-Infrequent Access (DynamoDB Standard-IA).Reserve capacity for the forecasted workload.

Answer

Use on-demand mode. Set the read capacity unite (RCUs) and write capacity units (WCUs) high enough to accommodate changes in the workload.

Answer

Use on-demand mode. Specify the read capacity units (RCUs) and write capacity units (WCUs) with reserved capacity.

Question 40

A company hostss a three application on Amazon EC2 instances in a single Availability Zone. The web application uses a self-managed MySQL database that is hosted on an EC2 instances to store data in an Amazon Elastic Block Store (Amazon EBS) volumn. The MySQL database currently uses a 1 TB Provisioned IOPS SSD (io2) EBS volume. The company expects traffic of 1,000 IOPS for both reads and writes at peak traffic. The company wants to minimize any distruptions, stabilize perperformace, and reduce costs while retaining the capacity for double the IOPS. The company wants to more the database tier to a fully managed solution that is highly available and fault tolerant.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with a General Purpose SSD (gp2) EBS volume.

Answer

Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with an io2 Block Express EBS volume.

Answer

Use Amazon S3 Intelligent-Tiering access tiers.

Answer

Use two large EC2 instances to host the database in active-passive mode.

Amazon SAA-C03 Practice Test 7

Amazon SAA-C03 Practice Tests

Amazon SAA-C03 Practice Test 7

Question

Amazon SAA-C03 Practice Tests

Practice Tests