Quiz IT certification exam

Question 1

A solutions architect is designing the architecture for a software demonstration environment The environment will run on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) The system will experience significant increases in traffic during working hours but Is not required to operate on weekends. Which combination of actions should the solutions architect take to ensure that the system can scale to meet demand? (Select TWO)

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Use a target tracking scaling policy to scale the Auto Scaling group based on instance CPU utilization

Accepted Answer

Use scheduled scaling to change the Auto Scaling group minimum, maximum, and desired capacity to zero for weekends Revert to the default values at the start of the week

Answer

Use AWS Auto Scaling to adjust the ALB capacity based on request rate

Answer

Use AWS Auto Scaling to scale the capacity of the VPC internet gateway

Answer

Launch the EC2 instances in multiple AWS Regions to distribute the load across Regions

Question 2

A company has deployed a server less application that invokes an AWS Lambda function when new documents are uploaded to an Amazon S3 bucket The application uses the Lambda function to process the documents After a recent marketing campaign the company noticed that the application did not process many of The documents What should a solutions architect do to improve the architecture of this application?

Accepted Answer

Create an Amazon Simple Queue Service (Amazon SOS) queue Send the requests to the queue Configure the queue as an event source for Lambda.

Answer

Set the Lambda function's runtime timeout value to 15 minutes

Answer

Configure an S3 bucket replication policy Stage the documents m the S3 bucket for later processing

Answer

Deploy an additional Lambda function Load balance the processing of the documents across the two Lambda functions

Question 3

A developer has an application that uses an AWS Lambda function to upload files to Amazon S3 and needs the required permissions to perform the task The developer already has an IAM user with valid IAM credentials required for Amazon S3 What should a solutions architect do to grant the permissions?

Accepted Answer

Create an IAM execution role with the required permissions and attach the IAM rote to the Lambda function

Answer

Add required IAM permissions in the resource policy of the Lambda function

Answer

Create a signed request using the existing IAM credentials n the Lambda function

Answer

Create a new IAM user and use the existing IAM credentials in the Lambda function.

Question 4

A company has a large dataset for its online advertising business stored in an Amazon RDS for MySQL DB instance in a single Availability Zone. The company wants business reporting queries to run without impacting the write operations to the production DB instance.Which solution meets these requirements?

Accepted Answer

Deploy RDS read replicas to process the business reporting queries.

Answer

Scale out the DB instance horizontally by placing it behind an Elastic Load Balancer

Answer

Scale up the DB instance to a larger instance type to handle write operations and queries

Answer

Deploy the OB distance in multiple Availability Zones to process the business reporting queries

Question 5

A meteorological startup company has a custom web application to sell weather data to its users online. The company uses Amazon DynamoDB to store is data and wants to bu4d a new service that sends an alert to the managers of four Internal teams every time a new weather event is recorded.The company does not want true new service to affect the performance of the current application What should a solutions architect do to meet these requirement with the LEAST amount of operational overhead?

Accepted Answer

Enable Amazon DynamoDB Streams on the table. Use triggers to write to a mingle Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe.

Answer

Use DynamoDB transactions to write new event data to the table Configure the transactions to notify internal teams.

Answer

Have the current application publish a message to four Amazon Simple Notification Service(Amazon SNS) topics. Have each team subscribe to one topic.

Answer

Add a custom attribute to each record to flag new items. Write a cron job that scans the table every minute for items that are new and notifies an Amazon Simple Queue Service (Amazon SOS) queue to which the teams can subscribe.

Question 6

A company is developing a real-time multiplayer game that uses UDP for communications between the client and servers In an Auto Scaling group Spikes in demand are anticipated during the day, so the game server platform must adapt accordingly Developers want to store gamer scores and other non-relational data in a database solution that will scale without intervention Which solution should a solutions architect recommend?

Accepted Answer

Use a Network Load Balancer for traffic distribution and Amazon DynamoDB on-demand for data storage

Answer

Use Amazon Route 53 for traffic distribution and Amazon Aurora Serverless for data storage

Answer

Use a Network Load Balancer for traffic distribution and Amazon Aurora Global Database for data storage

Answer

Use an Application Load Balancer for traffic distribution and Amazon DynamoDB global tables for data storage

Question 7

A company needs to create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to host a digital media streaming application. The EKS cluster will use a managed node group that is backed by Amazon Elastic Block Store (Amazon EBS) volumes for storage. The company must encrypt all data at rest by using a customer managed key that is stored in AWS Key Management Service (AWS KMS) Which combination of actions will meet this requirement with the LEAST operational overhead?(Select TWO.)

Accepted Answer

Use a Kubernetes plugin that uses the customer managed key to perform data encryption.

Accepted Answer

Create the EKS cluster Create an IAM role that has cuwlicy that grants permission to the customer managed key. Associate the role with the EKS cluster.

Answer

After creation of the EKS cluster, locate the EBS volumes. Enable encryption by using the customer managed key.

Answer

Enable EBS encryption by default in the AWS Region where the EKS cluster will be created. Select the customer managed key as the default key.

Answer

Store the customer managed key as a Kubernetes secret in the EKS cluster. Use the customer managed key to encrypt the EBS volumes.

Question 8

A company has a web application with sporadic usage patterns There is heavy usage at the beginning of each month moderate usage at the start of each week and unpredictable usage during the week The application consists of a web server and a MySQL database server running inside the data center The company would like to move the application to the AWS Cloud and needs to select a costeffective database platform that will not require database modifications Which solution will meet these requirements?

Accepted Answer

MySQL-compatible Amazon Aurora Serverless

Answer

Amazon DynamoDB

Answer

Amazon RDS for MySQL

Answer

MySQL deployed on Amazon EC2 in an Auto Scaling group

Question 9

A company uses a payment processing system that requires messages for a particular payment ID to be received in the same order that they were sent Otherwise, the payments might be processed incorrectly. Which actions should a solutions architect take to meet this requirement? (Select TWO.)

Accepted Answer

Write the messages to an Amazon Kinesis data stream with the payment ID as the partition key.

Accepted Answer

Write the messages to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the message group to use the payment ID.

Answer

Write the messages to an Amazon DynamoDB table with the payment ID as the partition key

Answer

Write the messages to an Amazon ElastiCache for Memcached cluster with the payment ID as the key

Answer

Write the messages to an Amazon Simple Queue Service (Amazon SQS) queue Set the message attribute to use the payment ID

Question 10

An IAM user made several configuration changes to AWS resources m their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The solutions architect wants to confirm which IAM user was responsible for making changes.Which service should the solutions architect use to find the desired information?

Accepted Answer

AWS CloudTrail

Answer

Amazon GuardDuty

Answer

Amazon Inspector

Answer

AWS Config

Question 11

A company has a three-tier environment on AWS that ingests sensor data from its users' devices The traffic flows through a Network Load Balancer (NIB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier that makes database calls What should a solutions architect do to improve the security of data in transit to the web tier?

Accepted Answer

Configure a TLS listener and add the server certificate on the NLB

Answer

Configure AWS Shield Advanced and enable AWS WAF on the NLB

Answer

Change the load balancer to an Application Load Balancer and attach AWS WAF to it

Answer

Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances using AWS Key Management Service (AWS KMS)

Question 12

A company runs a public three-Tier web application in a VPC The application runs on Amazon EC2 instances across multiple Availability Zones. The EC2 instances that run in private subnets need to communicate with a license server over the internet The company needs a managed solution that minimizes operational maintenance Which solution meets these requirements''

Accepted Answer

Provision a NAT gateway in a public subnet Modify each private subnet's route table with a default route that points to the NAT gateway

Answer

Provision a NAT instance in a public subnet Modify each private subnets route table with a default route that points to the NAT instance

Answer

Provision a NAT instance in a private subnet Modify each private subnet's route table with a default route that points to the NAT instance

Answer

Provision a NAT gateway in a private subnet Modify each private subnet's route table with a default route that points to the NAT gateway .

Question 13

A company needs to transfer 600 TB of data from its on-premises network-attached storage (NAS) system to the AWS Cloud. The data transfer must be complete within 2 weeks. The data is sensitive and must be encrypted in transit. The company's internet connection can support an upload speed of 100 Mbps.Which solution meets these requirements MOST cost-effectively?

Accepted Answer

Use the AWS Snow Family console to order several AWS Snowball Edge Storage Optimized devices Use the devices to transfer the data to Amazon S3.

Answer

Use Amazon S3 multi-part upload functionality to transfer the fees over HTTPS

Answer

Create a VPN connection between the on-premises NAS system and the nearest AWS Region Transfer the data over the VPN connection

Answer

Set up a 10 Gbps AWS Direct Connect connection between the company location and (he nearest AWS Region Transfer the data over a VPN connection into the Region to store the data in Amazon S3

Question 14

A company needs a backup strategy for its three-tier stateless web application The web application runs on Amazon EC2 instances in an Auto Scaling group with a dynamic scaling policy that is configured to respond to scaling events The database tier runs on Amazon RDS for PostgreSQL The web application does not require temporary local storage on the EC2 instances The company's recovery point objective (RPO) is 2 hours The backup strategy must maximize scalability and optimize resource utilization for this environment Which solution will meet these requirements?

Accepted Answer

Take snapshots of Amazon Elastic Block Store (Amazon EBS) volumes of the EC2 instances every 2 hours Enable automated backups in Amazon RDS and use point-in-time recovery to meet the RPO

Answer

Take snapshots of Amazon Elastic Block Store (Amazon EBS) volumes of the EC2 instances and database every 2 hours to meet the RPO

Answer

Configure a snapshot lifecycle policy to take Amazon Elastic Block Store (Amazon EBS) snapshots Enable automated backups in Amazon RDS to meet the RPO

Answer

Retain the latest Amazon Machine Images (AMIs) of the web and application tiers Enable automated backups in Amazon RDS and use point-in-time recovery to meet the RPO

Question 15

A company needs to ingested and handle large amounts of streaming data that its application generates. The application runs on Amazon EC2 instances and sends data to Amazon Kinesis Data Streams. which is contained wild default settings. Every other day the application consumes the data and writes the data to an Amazon S3 bucket for business intelligence (BI) processing the company observes that Amazon S3 is not receiving all the data that trio application sends to Kinesis Data Streams.What should a solutions architect do to resolve this issue?

Accepted Answer

Update the Kinesis Data Streams default settings by modifying the data retention period.

Answer

Update the application to use the Kinesis Producer Library (KPL) lo send the data to Kinesis Data Streams.

Answer

Update the number of Kinesis shards lo handle the throughput of me data that is sent to Kinesis Data Streams.

Answer

Turn on S3 Versioning within the S3 bucket to preserve every version of every object that is ingested in the S3 bucket.

Question 16

A company has migrated an application to Amazon EC2 Linux instances. One of these EC2 instances runs several 1-hour tasks on a schedule. These tasks were written by different teams and have no common programming language. The company is concerned about performance and scalability while these tasks run on a single instance. A solutions architect needs to implement a solution to resolve these concerns. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use AWS Batch to run the tasks as jobs. Schedule the jobs by using Amazon EventBridge (Amazon CloudWatch Events).

Answer

Convert the EC2 instance to a container. Use AWS App Runner to create the container on demand to run the tasks as jobs.

Answer

Copy the tasks into AWS Lambda functions. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events).

Answer

Create an Amazon Machine Image (AMI) of the EC2 instance that runs the tasks. Create an Auto Scaling group with the AMI to run multiple copies of the instance.

Question 17

A company wants to migrate an Oracle database to AWS. The database consists of a single table that contains millions of geographic information systems (GIS) images that are high resolution and are identified by a geographic code. When a natural disaster occurs tens of thousands of images get updated every few minutes. Each geographic code has a single image or row that is associated with it. The company wants a solution that is highly available and scalable during such events Which solution meets these requirements MOST cost-effectively?

Accepted Answer

Store the images in Amazon S3 buckets Use Amazon DynamoDB with the geographic code as the key and the image S3 URL as the value

Answer

Store the images and geographic codes in a database table Use Oracle running on an Amazon RDS Multi-AZ DB instance

Answer

Store the images and geographic codes in an Amazon DynamoDB table Configure DynamoDB Accelerator (DAX) during times of high load

Answer

Store the images in Amazon S3 buckets Store geographic codes and image S3 URLs in a database table Use Oracle running on an Amazon RDS Multi-AZ DB instance.

Question 18

A research laboratory needs to process approximately 8 TB of data The laboratory requires submillisecond latencies and a minimum throughput of 6 GBps for the storage subsystem Hundreds of Amazon EC2 instances that run Amazon Linux will distribute and process the data Which solution will meet the performance requirements?

Accepted Answer

Create an Amazon S3 bucket to stofe the raw data Create an Amazon FSx for Lustre file system that uses persistent SSD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances

Answer

Create an Amazon FSx for NetApp ONTAP file system Set each volume's tiering policy to ALL Import the raw data into the file system Mount the file system on the EC2 instances

Answer

Create an Amazon S3 bucket to store the raw data Create an Amazon FSx for Lustre file system that uses persistent HDD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances

Answer

Create an Amazon FSx for NetApp ONTAP file system Set each volume's tienng policy to NONE.Import the raw data into the file system Mount the file system on the EC2 instances

Question 19

A company has implemented a self-managed DNS service on AWS. The solution consists of the following:• Amazon EC2 instances in different AWS Regions• Endpomts of a standard accelerator m AWS Global AcceleratorThe company wants to protect the solution against DDoS attacks What should a solutions architect do to meet this requirement?

Accepted Answer

Subscribe to AWS Shield Advanced Add the accelerator as a resource to protect

Answer

Subscribe to AWS Shield Advanced Add the EC2 instances as resources to protect

Answer

Create an AWS WAF web ACL that includes a rate-based rule Associate the web ACL with the accelerator

Answer

Create an AWS WAF web ACL that includes a rate-based rule Associate the web ACL with the EC2 instances

Question 20

A company needs to export its database once a day to Amazon S3 for other teams to access. The exported object size vanes between 2 GB and 5 GB. The S3 access pattern for the data is variable and changes rapidly. The data must be immediately available and must remain accesstole for up to 3 months. The company needs the most cost-effective solution that will not increase retrieval time Which S3 storage class should the company use to meet these requirements?

Accepted Answer

S3 Standard-Infrequent Access (S3 Standard-IA)

Answer

S3 Intelltgent-Tienng

Answer

S3 Glacier Instant Retrieval

Answer

S3 Standard

Question 21

A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code.Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.) ' Store the static files on Amazon S3. Use Amazon

Accepted Answer

CloudFront to cache objects at the edge.

Accepted Answer

Store the server-side code on Amazon FSx for Windows File Server. Mount the FSx for Windows File Server volume on each EC2 instance to share the files.

Answer

Store the static files on Amazon S3. Use Amazon ElastiCache to cache objects at the edge.

Answer

Store the server-side code on Amazon Elastic File System (Amazon EFS). Mount the EFS volume on each EC2 instance to share the files.

Answer

Store the server-side code on a General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on each EC2 instance to share the files.

Question 22

A company has an application thai runs on several Amazon EC2 instances Each EC2 instance has multiple Amazon Elastic Block Store (Amazon EBS) data volumes attached to it The application's EC2 instance configuration and data need to be backed up nightly The application also needs to be recoverable in a different AWS Region Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Create a backup plan by using AWS Backup to perform nightly backups. Copy the backups to another Region Add the application's EC2 instances as resources

Answer

Write an AWS Lambda function that schedules nightly snapshots of the application's EBS volumes and copies the snapshots to a different Region

Answer

Create a backup plan by using AWS Backup to perform nightly backups Copy the backups to another Region Add the application's EBS volumes as resources

Answer

Write an AWS Lambda function that schedules nightly snapshots of the application's EBS volumes and copies the snapshots to a different Availability Zone

Question 23

A company that primarily runs its application servers on premises has decided to migrate to AWS.The company wants to minimize its need to scale its Internet SmallComputer Systems Interface (iSCSI) storage on premises. The company wants only its recently accessed data to remain stored locally. Which AWS solution should the company use to meet these requirements?

Accepted Answer

AWS Storage Gateway Volume Gateway cachea volumes

Answer

Amazon S3 File Gateway

Answer

AWS Storage Gateway Tape Gateway

Answer

AWS Storage Gateway Volume Gateway stored volumes

Question 24

A company has a three-tier application on AWS that ingests sensor data from its users' devices The traffic flows through a Network Load Balancer (NLB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier The application tier makes calls to a database What should a solutions architect do to improve the security of the data in transit?

Accepted Answer

Configure a TLS listener Deploy the server certrficate on the NLB

Answer

Configure AWS Shield Advanced Enable AWS WAF on the NLB

Answer

Change the load balancer to an Application Load Balancer (ALB) Enable AWS WAF on the ALB

Answer

Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances by using AWS Key Management Service (AWS KMS)

Question 25

A company is migrating an old application to AWS The application runs a batch job every hour and is CPU intensive The batch job takes 15 minutes on average with an on-premises server The server has 64 virtual CPU (vCPU) and 512 GiB of memory Which solution will run the batch job within 15 minutes with the LEAST operational overhead?

Accepted Answer

Use AWS Batch on Amazon EC2

Answer

Use AWS Lambda with functional scaling

Answer

Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate

Answer

Use Amazon Lightsail with AWS Auto Scaling

Question 26

A company hosts rts sialic website by using Amazon S3 The company wants to add a contact form to its webpage The contact form will have dynamic server-sKle components for users to input their name, email address, phone number and user message The company anticipates that there will be fewer than 100 site visits each month Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Create a Q micro Amazon EC2 instance Deploy a LAMP (Linux Apache MySQL. PHP/Perl/Python) stack to host the webpage Use client-side scripting to buiW the contact form Integrate the form with Amazon WorkMail

Answer

Host a dynamic contact form page in Amazon Elastic Container Service (Amazon ECS) Set up Amazon Simple Email Service (Amazon SES) to connect to any third-party email provider.

Answer

Create an Amazon API Gateway endpoinl with an AWS Lambda backend that makes a call to Amazon Simple Email Service (Amazon SES)

Answer

Convert the static webpage to dynamic by deploying Amazon Ughtsail Use client-side scnpting to build the contact form Integrate the form with Amazon WorkMail

Question 27

A company hosts a frontend application that uses an Amazon API Gateway API backend that is integrated with AWS Lambda When the API receives requests, the Lambda function loads many libranes Then the Lambda function connects to an Amazon RDS database processes the data and returns the data to the frontend application. The company wants to ensure that response latency is as low as possible for all its users with the fewest number of changes to the company's operations Which solution will meet these requirements'?

Accepted Answer

Configure provisioned concurrency for the Lambda function that handles the requests

Answer

Establish a connection between the frontend application and the database to make queries faster by bypassing the API

Answer

Cache the results of the queries in Amazon S3 for faster retneval of similar datasets.

Answer

Increase the size of the database to increase the number of connections Lambda can establish at one time

Question 28

A company plans to use Amazon ElastiCache for its multi-tier web application A solutions architect creates a Cache VPC for the ElastiCache cluster and an App VPC for the application's Amazon EC2 instances Both VPCs are in the us- east-1 Region The solutions architect must implement a solution to provide tne application's EC2 instances with access to the ElastiCache cluster Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Create a peering connection between the VPCs Add a route table entry for the peering connection in both VPCs Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application's security group

Answer

Create a Transit VPC Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VPC Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application's security group

Answer

Create a peering connection between the VPCs Add a route table entry for the peering connection in both VPCs Configure an inbound rule for the peering connection's security group to allow inbound connection from the application's secunty group

Answer

Create a Transit VPC Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VPC Configure an inbound rule for the Transit VPCs security group to allow inbound connection from the application's security group

Question 29

A company has an application that places hundreds of .csv files into an Amazon S3 bucket every hour. The files are 1 GB in size. Each time a file is uploaded, the company needs to convert the file to Apache Parquet format and place the output file into an S3 bucket. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an AWS Glue extract, transform, and load (ETL) job to convert the .csv files to Parquet format and place the output files into an S3 bucket. Create an AWS Lambda function for each S3 PUT event to invoke the ETL job.

Answer

Create an AWS Lambda function to download the .csv files, convert the files to Parquet format, and place the output files in an S3 bucket. Invoke the Lambda function for each S3 PUT event.

Answer

Create an Apache Spark job to read the .csv files, convert the files to Parquet format, and place the output files in an S3 bucket. Create an AWS Lambda function for each S3 PUT event to invoke the Spark job.

Answer

Create an AWS Glue table and an AWS Glue crawler for the S3 bucket where the application places the .csv files. Schedule an AWS Lambda function to periodically use Amazon Athena to query the AWS Glue table, convert the query results into Parquet format, and place the output files into an S3 bucket.

Question 30

A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the internet traffic is not reaching the EC2 instances.How should the solutions architect reconfigure the architecture to resolve this issue?

Accepted Answer

Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

Answer

Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.

Answer

Move the EC2 instances to public subnets. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.

Answer

Update the route tables for the EC2 instances’ subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.

Question 31

A company is developing a new mobile app. The company must implement proper traffic filtering to protect its Application Load Balancer (ALB) against common application-level attacks, such as crosssite scripting or SQL injection. The company has minimal infrastructure and operational staff. The company needs to reduce its share of the responsibility in managing, updating, and securing servers for its AWS environment. What should a solutions architect recommend to meet these requirements?

Accepted Answer

Configure AWS WAF rules and associate them with the ALB.

Answer

Deploy the application using Amazon S3 with public hosting enabled.

Answer

Deploy AWS Shield Advanced and add the ALB as a protected resource.

Answer

Create a new ALB that directs traffic to an Amazon EC2 instance running a third-party firewall, which then passes the traffic to the current ALB.

Question 32

A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time. The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy. Which solution meets these requirements?

Accepted Answer

Amazon Elastic File System (Amazon EFS)

Answer

Amazon Elastic Block Store (Amazon EBS)

Answer

Amazon S3 Glacier Deep Archive

Answer

AWS Backup

Question 33

An Amazon EC2 instance is located in a private subnet in a new VPC. This subnet does not have outbound internet access, but the EC2 instance needs the ability to download monthly security updates from an outside vendor. What should a solutions architect do to meet these requirements?

Accepted Answer

Create a NAT gateway, and place it in a public subnet. Configure the private subnet route table to use the NAT gateway as the default route.

Answer

Create an internet gateway, and attach it to the VPC. Configure the private subnet route table to use the internet gateway as the default route.

Answer

Create a NAT instance, and place it in the same subnet where the EC2 instance is located.Configure the private subnet route table to use the NAT instance as the default route.

Answer

Create an internet gateway, and attach it to the VPC. Create a NAT instance, and place it in the same subnet where the EC2 instance is located. Configure the private subnet route table to use the internet gateway as the default route.

Question 34

A company has a web server running on an Amazon EC2 instance in a public subnet with an Elastic IP address. The default security group is assigned to the EC2 instance. The default network ACL has been modified to block all traffic. A solutions architect needs to make the web server accessible from everywhere on port 443. Which combination of steps will accomplish this task? (Choose two.)

Accepted Answer

Create a security group with a rule to allow TCP port 443 from source 0.0.0.0/0.

Accepted Answer

Update the network ACL to allow TCP port 443 from source 0.0.0.0/0.

Answer

Create a security group with a rule to allow TCP port 443 to destination 0.0.0.0/0.

Answer

Update the network ACL to allow inbound/outbound TCP port 443 from source 0.0.0.0/0 and to destination 0.0.0.0/0.

Answer

Update the network ACL to allow inbound TCP port 443 from source 0.0.0.0/0 and outbound TCP port 32768-65535 to destination 0.0.0.0/0.

Question 35

An online learning company is migrating to the AWS Cloud. The company maintains its student records in a PostgreSQL database. The company needs a solution in which its data is available and online across multiple AWS Regions at all times.Which solution will meet these requirements with the LEAST amount of operational overhead?

Accepted Answer

Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Create a read replica in another Region.

Answer

Migrate the PostgreSQL database to a PostgreSQL cluster on Amazon EC2 instances.

Answer

Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance with the Multi-AZ feature turned on.

Answer

Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Set up DB snapshots to be copied to another Region.

Question 36

A solutions architect observes that a nightly batch processing job is automatically scaled up for 1 hour before the desired Amazon EC2 capacity is reached. The peak capacity is the ‘same every night and the batch jobs always start at 1 AM. The solutions architect needs to find a cost-effective solution that will allow for the desired EC2 capacity to be reached quickly and allow the Auto Scaling group to scale down after the batch jobs are complete. What should the solutions architect do to meet these requirements?

Accepted Answer

Configure scheduled scaling to scale up to the desired compute level.

Answer

Increase the minimum capacity for the Auto Scaling group.

Answer

Increase the maximum capacity for the Auto Scaling group.

Answer

Change the scaling policy to add more EC2 instances during each scaling operation.

Question 37

A company’s security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently. What should a solutions architect do to meet these requirements when configuring the logs?

Accepted Answer

Use Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard- Infrequent Access (S3 Standard-IA) after 90 days.

Answer

Use Amazon CloudWatch as the target. Set the CloudWatch log group with an expiration of 90 days

Answer

Use Amazon Kinesis as the target. Configure the Kinesis stream to always retain the logs for 90 days.

Answer

Use AWS CloudTrail as the target. Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering.

Question 38

A company has an API that receives real-time data from a fleet of monitoring devices. The API stores this data in an Amazon RDS DB instance for later analysis. The amount of data that the monitoring devices send to the API fluctuates. During periods of heavy traffic, the API often returns timeout errors.After an inspection of the logs, the company determines that the database is not capable of processing the volume of write traffic that comes from the API. A solutions architect must minimize the number of connections to the database and must ensure that data is not lost during periods of heavy traffic.Which solution will meet these requirements?

Accepted Answer

Modify the API to write incoming data to an Amazon Simple Queue Service (Amazon SQS) queue.Use an AWS Lambda function that Amazon SQS invokes to write data from the queue to the database.

Answer

Increase the size of the DB instance to an instance type that has more available memory.

Answer

Modify the DB instance to be a Multi-AZ DB instance. Configure the application to write to all active RDS DB instances.

Answer

Modify the API to write incoming data to an Amazon Simple Notification Service (Amazon SNS) topic. Use an AWS Lambda function that Amazon SNS invokes to write data from the topic to the database.

Question 39

A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and introduce unfair advantages to some players. The application is deployed in every AWS Region. It runs on Amazon EC2 instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs). A solutions architect needs to implement a mechanism to monitor the health of the application and redirect traffic to healthy endpoints.Which solution meets these requirements?

Accepted Answer

Configure an accelerator in AWS Global Accelerator. Add a listener for the port that the application listens on, and attach it to a Regional endpoint in each Region. Add the ALB as the endpoint.

Answer

Create an Amazon CloudFront distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.

Answer

Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.

Answer

Configure an Amazon DynamoDB database to serve as the data store for the application. Create a DynamoDB Accelerator (DAX) cluster to act as the in-memory cache for DynamoDB hosting the application data.

Question 40

A company has one million users that use its mobile app. The company must analyze the data usage in near-real time. The company also must encrypt the data in near-real time and must store the data in a centralized location in Apache Parquet format for further processing.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data

Answer

Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data. Invoke an AWS Lambda function to send the data to the Kinesis Data Analytics application.

Answer

Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data. Invoke an AWS Lambda function to send the data to the EMR cluster.

Answer

Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data.

Amazon SAA-C03 Practice Test 9

Amazon SAA-C03 Practice Tests

Amazon SAA-C03 Practice Test 9

Question

Amazon SAA-C03 Practice Tests

Practice Tests