Hermes Wiki
CertExams/SAA-C03/Questions/Questions9

Question 525

A solutions architect is finalizing the architecture for a distributed database that will run across multiple Amazon EC2 instances. Data will be replicated across all instances so the loss of an instance will not cause loss of data. The database requires block storage with low latency and throughput that supports up to several million transactions per second per server.

Which storage solution should the solutions architect use?

  • ✅ A. Amazon EC2 instance store
  • ❌ B. Amazon S3
  • ❌ C. Amazon EBS
  • ❌ D. Amazon EFS

Question 526

A website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The website’s DNS records are hosted in Amazon Route 53 with the domain name pointing to the ALB. A solution is required for displaying a static error page if the website becomes unavailable.

Which configuration should a solutions architect use to meet these requirements with the LEAST operational overhead?

  • ❌ A. Create a Route 53 active-passive failover configuration. Create a static website using an Amazon S3 bucket that hosts a static error page. Configure the static website as the passive record for failover
  • ✅ B. Create a Route 53 alias record for an Amazon CloudFront distribution and specify the ALB as the origin. Create custom error pages for the distribution
  • ❌ C. Create a Route 53 weighted routing policy. Create a static website using an Amazon S3 bucket that hosts a static error page. Configure the record for the S3 static website with a weighting of zero. When an issue occurs increase the weighting
  • ❌ D. Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance hosting a static error page as endpoints. Route 53 will only send requests to the instance if the health checks fail for the ALB

Question 527

A global retail company needs to provide its remote IT operations team with secure access to AWS resources across multiple AWS accounts. The company uses an on-premises Microsoft Active Directory for centralized user authentication and authorization. The AWS accounts are managed through AWS Organizations and support various internal teams and projects.

The company wants to integrate its existing Active Directory with AWS to centralize identity management, reduce operational overhead, and ensure secure, role-based access to resources across all accounts.

Which solution will meet these requirements with the LEAST operational overhead?

  • ✅ A. Use AWS Identity Center (AWS IAM Identity Center) integrated with AD Connector to link the on-premises Active Directory. Configure permission sets in IAM Identity Center to assign account-level and resource-level permissions based on Active Directory groups.
  • ❌ B. Deploy AWS Managed Microsoft Active Directory using AWS Directory Service. Establish a one-way trust relationship with the on-premises Active Directory. Use IAM roles mapped to Active Directory groups to provide resource access in each AWS account.
  • ❌ C. Create individual IAM users for each team member. Assign permissions manually to each IAM user in every AWS account. Use AWS Config to enforce compliance with access policies across accounts.
  • ❌ D. Deploy an OpenID Connect (OIDC)-compatible identity provider and integrate it with the on-premises Active Directory. Use the identity provider to generate tokens for users and configure IAM roles to allow access to AWS resources.

Question 528

Objects uploaded to Amazon S3 are initially accessed frequently for a period of 30 days. Then, objects are infrequently accessed for up to 90 days. After that, the objects are no longer needed.

How should lifecycle management be configured?

  • ❌ A. Transition to STANDARD_IA after 30 days. After 90 days transition to ONEZONE_IA
  • ❌ B. Transition to REDUCED_REDUNDANCY after 30 days. After 90 days expire the objects
  • ❌ C. Transition to STANDARD_IA after 30 days. After 90 days transition to GLACIER
  • ✅ D. Transition to ONEZONE_IA after 30 days. After 90 days expire the objects

Question 529

A stock trading startup company has a custom web application to sell trading data to its users online. The company uses Amazon DynamoDB to store its data and wants to build a new service that sends an alert to the managers of four internal teams every time a new trading event is recorded. The company does not want this new service to affect the performance of the current application.

What should a solutions architect do to meet these requirements with the LEAST amount of operational overhead?

  • ❌ A. Use the current application to publish a message to four Amazon Simple Notification Service (Amazon SNS) topics. Each team should subscribe to one topic.
  • ❌ B. Write new event data to the table using DynamoDB transactions. The transactions should be configured to notify internal teams.
  • ❌ C. Create a custom attribute for each record to flag new items. A cron job can be written to scan the table every minute for new items and notify an Amazon Simple Queue Service (Amazon SQS) queue.
  • ✅ D. On the table, enable Amazon DynamoDB Streams. Subscriptions can be made to a single Amazon Simple Notification Service (Amazon SNS) topic using triggers.

Question 530

A social media analytics company runs a data processing application on a single Amazon EC2 On-Demand Instance. The application is stateless and processes user behavior data in near real-time. Recently, the application has started showing performance degradation during peak times, including 5xx errors due to high traffic volumes. The company wants to implement a solution to make the application scale automatically to handle traffic spikes in a cost-effective way.

Which solution will meet these requirements MOST cost-effectively?

  • ✅ A. Create an Auto Scaling group using an Amazon Machine Image (AMI) of the application. Use a launch template that configures the Auto Scaling group to scale out and in based on CPU utilization. Attach an Application Load Balancer to the Auto Scaling group to distribute traffic.
  • ❌ B. Increase the size of the existing EC2 instance to a larger instance type using Amazon EC2 Auto Scaling scheduled actions to handle peak hours. Use Amazon Route 53 to distribute traffic between the upgraded instance and a secondary instance in another Region.
  • ❌ C. Use AWS Lambda and Amazon SQS to redesign the application into a serverless architecture. Deploy Lambda functions to process incoming requests and store results in Amazon DynamoDB.
  • ❌ D. Create an Amazon Machine Image (AMI) of the application. Use the AMI to deploy two EC2 On-Demand Instances. Attach an Application Load Balancer to distribute traffic between the two instances.

Question 531

A company runs an eCommerce application that uses an Amazon Aurora database. The database performs well except for short periods when monthly sales reports are run. A Solutions Architect has reviewed metrics in Amazon CloudWatch and found that the Read Ops and CPUUtilization metrics are spiking during the periods when the sales reports are run.

What is the MOST cost-effective solution to solve this performance issue?

  • ❌ A. Modify the Aurora database to use an instance class with more CPU.
  • ❌ B. Create an Amazon Redshift data warehouse and run the reporting there.
  • ❌ C. Enable storage Auto Scaling for the Amazon Aurora database.
  • ✅ D. Create an Aurora Replica and use the replica endpoint for reporting.

Question 532

A company is architecting a shared storage solution for an AWS-hosted gaming application. The company needs the ability to use Lustre clients to access data. The solution must be fully managed.

Which solution meets these requirements?

  • ✅ A. Create an Amazon FSx for Lustre file system. Connect the file system to the origin server. Ensure that the file system is connected to the application server.
  • ❌ B. Create an Amazon Elastic File System (Amazon EFS) file system and configure it to support Lustre. Attach the file system to the origin server. Connect the application server to the file system.
  • ❌ C. Assign the AWS DataSync task to share the data as a mountable file system. Sync the file system with the application server.
  • ❌ D. Create a file gateway with AWS Storage Gateway. Create a client-side file share using the required protocol. Share the file with the application server.

Question 533

A company is planning a migration for a high performance computing (HPC) application and associated data from an on-premises data center to the AWS Cloud. The company uses tiered storage on premises with hot high-performance parallel storage to support the application during periodic runs of the application, and more economical cold storage to hold the data when the application is not actively running.

Which combination of solutions should a solutions architect recommend to support the storage needs of the application? (Select TWO)

  • ❌ A. Amazon FSx for Windows for high-performance parallel storage
  • ❌ B. Amazon S3 for high-performance parallel storage
  • ✅ C. Amazon S3 for cold data storage
  • ✅ D. Amazon FSx for Lustre for high-performance parallel storage
  • ❌ E. Amazon EFS for cold data storage

Question 534

A solutions architect is designing a two-tier web application. The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets. The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet. Security is a high priority for the company.

How should security groups be configured in this situation? (Select TWO)

  • ✅ A. Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier
  • ❌ B. Configure the security group for the web tier to allow outbound traffic on port 443 from 0.0.0.0/0
  • ❌ C. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier
  • ❌ D. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier
  • ✅ E. Configure the security group for the web tier to allow inbound traffic on port 443 from 0.0.0.0/0 and to allow outbound traffic on port 1433 to the RDS

Question 535

A company hosts a serverless application on AWS. The application consists of Amazon API Gateway, AWS Lambda, and Amazon RDS for PostgreSQL. During times of peak traffic and when traffic spikes are experienced, the company notices an increase in application errors caused by database connection timeouts. The company is looking for a solution that will reduce the number of application failures with the least amount of code changes.

What should a solutions architect do to meet these requirements?

  • ❌ A. Change the class of the instance of your database to allow more connections.
  • ❌ B. Change the database to an Amazon DynamoDB database with on-demand scaling.
  • ✅ C. Enable an RDS Proxy instance on your RDS Database.
  • ❌ D. Reduce the concurrency rate for your Lambda Function.

Question 536

A company runs an application on Amazon EC2 instances which requires access to sensitive data in an Amazon S3 bucket. All traffic between the EC2 instances and the S3 bucket must not traverse the internet and must use private IP addresses. Additionally, the bucket must only allow access from services in the VPC.

Which combination of actions should a Solutions Architect take to meet these requirements? (Select TWO)

  • ✅ A. Create a VPC endpoint for Amazon S3.
  • ✅ B. Apply a bucket policy to restrict access to the S3 endpoint.
  • ❌ C. Create a peering connection to the S3 bucket VPC.
  • ❌ D. Apply an IAM policy to a VPC peering connection.
  • ❌ E. Enable default encryption on the bucket.

Question 537

A university operates its critical IT services, including authentication and DNS, from an on-premises data center. The data center is connected to AWS using AWS Direct Connect (DX). The university is onboarding additional AWS accounts for different departments, all of which need secure and consistent access to the on-premises services.

The university wants a scalable and cost-effective solution that minimizes operational overhead.

What should a solutions architect implement to meet these requirements?

  • ❌ A. Establish a VPC peering connection between the Direct Connect VPC and each new AWS account. Configure security groups to allow traffic to flow between the VPCs and the on-premises services.
  • ❌ B. Deploy an AWS Site-to-Site VPN connection from the on-premises data center to each new AWS account. Configure route tables to forward traffic to the VPN.
  • ✅ C. Configure AWS Transit Gateway to connect the Direct Connect gateway to the VPCs in the new accounts. Route network traffic from the new accounts to the on-premises data center through the transit gateway.
  • ❌ D. Create a Direct Connect connection in each new AWS account and configure route tables in each VPC to send traffic to the on-premises data center.

Question 538

An organization plans to deploy a higher performance computing (HPC) workload on AWS using Linux. The HPC workload will use many Amazon EC2 instances and will generate a large quantity of small output files that must be stored in persistent storage for future use.

A Solutions Architect must design a solution that will enable the EC2 instances to access data using native file system interfaces and to store output files in cost-effective long-term storage.

Which combination of AWS services meets these requirements?

  • ❌ A. AWS DataSync with Amazon S3 Intelligent tiering.
  • ❌ B. Amazon FSx for Windows File Server with Amazon S3.
  • ✅ C. Amazon FSx for Lustre with Amazon S3.
  • ❌ D. Amazon EBS volumes with Amazon S3 Glacier.

Question 539

A company operates a three-tier architecture for their online order processing system. The architecture includes EC2 instances in the web tier behind an Application Load Balancer, EC2 instances in the processing tier, and Amazon DynamoDB for storage. To decouple the web and processing tiers, the company uses Amazon Simple Queue Service (Amazon SQS).

During peak demand, some customers experience delays or failures in order processing. At these times, the EC2 instances in the processing tier reach 100% CPU utilization, and the SQS queue length increases significantly. These peak periods are unpredictable.

What should the company do to improve the application's performance?

  • ❌ A. Implement an Amazon CloudFront distribution to cache static content in the web tier. Use HTTP request count as a scaling metric for the processing tier.
  • ❌ B. Deploy Amazon ElastiCache for Redis to reduce the read and write load on DynamoDB. Use a scheduled scaling policy for the processing tier instances
  • ❌ C. Use predictive scaling in Amazon EC2 Auto Scaling to add instances to the processing tier ahead of peak times. Use CPU utilization as the key metric to scale.
  • ✅ D. Configure an Amazon EC2 Auto Scaling target tracking policy for the processing tier instances. Use the SQS ApproximateNumberOfMessages metric to dynamically scale the tier based on queue length.

Question 540

A social media platform uses Amazon DynamoDB to store user profiles, friend connections, and post interactions. The platform is rapidly expanding to new countries and needs to ensure a seamless user experience with high availability and low latency for its global user base.

The platform must handle unpredictable workloads and regional outages while maintaining a cost-effective architecture.

Which solution will meet these requirements MOST cost-effectively?

  • ❌ A. Deploy DynamoDB tables in a single AWS Region using provisioned capacity mode. Use DynamoDB Streams to replicate data asynchronously to a secondary Region for failover.
  • ❌ B. Use DynamoDB Accelerator (DAX) to reduce read latency for frequently accessed items. Deploy DynamoDB tables in a single Region and use manual Cross-Region Replication to replicate data to other Regions for fault tolerance.
  • ❌ C. Use Amazon S3 to store user data and replicate the data across multiple Regions using S3 Cross-Region Replication. Use AWS Lambda to perform real-time data updates for the application.
  • ✅ D. Use DynamoDB global tables to replicate data automatically across multiple Regions. Deploy the tables in on-demand capacity mode to handle workload variability.

Question 541

A website runs on a Microsoft Windows server in an on-premises data center. The web server is being migrated to Amazon EC2 Windows instances in multiple Availability Zones on AWS. The web server currently uses data stored in an on-premises network-attached storage (NAS) device.

Which replacement to the NAS file share is MOST resilient and durable?

  • ❌ A. Migrate the file share to Amazon Elastic File System (Amazon EFS)
  • ✅ B. Migrate the file share to Amazon FSx for Windows File Server
  • ❌ C. Migrate the file share to Amazon EBS
  • ❌ D. Migrate the file share to AWS Storage Gateway

Question 542

A web application is deployed in multiple regions behind an ELB Application Load Balancer. You need deterministic routing to the closest region and automatic failover. Traffic should traverse the AWS global network for consistent performance.

How can this be achieved?

  • ❌ A. Use a CloudFront distribution with multiple custom origins in each region and configure for high availability
  • ✅ B. Configure AWS Global Accelerator and configure the ALBs as targets
  • ❌ C. Create a Route 53 Alias record for each ALB and configure a latency-based routing policy
  • ❌ D. Place an EC2 Proxy in front of the ALB and configure automatic failover

Question 543

A company is planning to upload a large quantity of sensitive data to Amazon S3. The company’s security department require that the data is encrypted before it is uploaded.

Which option meets these requirements?

  • ❌ A. Use server-side encryption with customer-provided encryption keys.
  • ❌ B. Use client-side encryption with Amazon S3 managed encryption keys.
  • ✅ C. Use client-side encryption with a master key stored in AWS KMS.
  • ❌ D. Use server-side encryption with keys stored in KMS.

Question 544

A company runs a number of core enterprise applications in an on-premises data center. The data center is connected to an Amazon VPC using AWS Direct Connect. The company will be creating additional AWS accounts and these accounts will also need to be quickly, and cost-effectively connected to the on-premises data center in order to access the core applications.

What deployment changes should a Solutions Architect implement to meet these requirements with the LEAST operational overhead?

  • ❌ A. Create a Direct Connect connection in each new account. Route the network traffic to the on-premises servers.
  • ✅ B. Configure AWS Transit Gateway between the accounts. Assign Direct Connect to the transit gateway and route network traffic to the on-premises servers.
  • ❌ C. Create a VPN connection between each new account and the Direct Connect VPC. Route the network traffic to the on-premises servers.
  • ❌ D. Configure VPC endpoints in the Direct Connect VPC for all required services. Route the network traffic to the on-premises servers.

Question 545

A highly sensitive application runs on Amazon EC2 instances using EBS volumes. The application stores data temporarily on Amazon EBS volumes during processing before saving results to an Amazon RDS database. The company’s security team mandate that the sensitive data must be encrypted at rest.

Which solution should a Solutions Srchitect recommend to meet this requirement?

  • ❌ A. Configure SSL/TLS encryption using AWS KMS customer master keys (CMKs) to encrypt database volumes.
  • ❌ B. Use AWS Certificate Manager to generate certificates that can be used to encrypt the connections between the EC2 instances and RDS.
  • ✅ C. Configure encryption for the Amazon EBS volumes and Amazon RDS database with AWS KMS keys.
  • ❌ D. Use Amazon Data Lifecycle Manager to encrypt all data as it is stored to the EBS volumes and RDS database.

Question 546

A group of business analysts perform read-only SQL queries on an Amazon RDS database. The queries have become quite numerous and the database has experienced some performance degradation. The queries must be run against the latest data. A Solutions Architect must solve the performance problems with minimal changes to the existing web application.

What should the Solutions Architect recommend?

  • ✅ A. Create a read replica of the primary database and instruct the business analysts to direct queries to the replica.
  • ❌ B. Load the data into Amazon ElastiCache and instruct the business analysts to run their queries against the ElastiCache endpoint.
  • ❌ C. Export the data to Amazon S3 and instruct the business analysts to run their queries using Amazon Athena.
  • ❌ D. Load the data into an Amazon Redshift cluster and instruct the business analysts to run their queries against the cluster.

Question 547

A company operates a self-managed Microsoft SQL Server database hosted on Amazon EC2 instances with Amazon Elastic Block Store (Amazon EBS) volumes. The company uses daily EBS snapshots for backup. Recently, an issue arose when a snapshot cleanup script unintentionally deleted all the snapshots. The solutions architect must design a solution to prevent accidental deletions while avoiding indefinite retention of EBS snapshots.

Which solution will meet these requirements with the LEAST development effort?

  • ❌ A. Implement a cross-region copy for EBS snapshots daily and set a retention policy for the snapshots in the target region.
  • ✅ B. Apply an EBS snapshot retention rule in Recycle Bin to retain snapshots for 7 days before permanent deletion.
  • ❌ C. Change the IAM policy to deny deletion of EBS snapshots to all users.
  • ❌ D. Use Amazon Data Lifecycle Manager to create EBS snapshots with automated retention rules.

Question 548

A company runs an internal application for logging customer support information. The application runs on Amazon EC2 instances in an Auto Scaling group. The ASG scales up to 10 instances during business hours and scales down to 2 instances overnight. Staff have complained of poor performance at the beginning of the business day.

How should a Solutions Architect configure the Auto Scaling group to resolve the performance issues whilst minimizing costs?

  • ✅ A. Implement a scheduled action that sets the desired capacity to 10 before business hours begin.
  • ❌ B. Implement a scheduled action that sets the minimum and maximum capacity to 10 before business hours begin.
  • ❌ C. Implement a step scaling action with a lower CPU threshold and decrease the cooldown period.
  • ❌ D. Implement a target tracking action with a lower CPU threshold, and decrease the cooldown period.

Question 549

A web application is being deployed on an Amazon ECS cluster using the Fargate launch type. The application is expected to receive a large volume of traffic initially. The company wishes to ensure that performance is good for the launch and that costs reduce as demand decreases

What should a solutions architect recommend?

  • ❌ A. Use an AWS Lambda function to scale Amazon ECS based on metric breaches that trigger an Amazon CloudWatch alarm.
  • ❌ B. Use Amazon EC2 Auto Scaling with simple scaling policies to scale when an Amazon CloudWatch alarm is breached.
  • ✅ C. Use Amazon ECS Service Auto Scaling with target tracking policies to scale when an Amazon CloudWatch alarm is breached.
  • ❌ D. Use Amazon EC2 Auto Scaling to scale out on a schedule and back in once the load decreases.

Question 550

A multi-tier application runs with eight front-end web servers in an Amazon EC2 Auto Scaling group in a single Availability Zone behind an Application Load Balancer. A solutions architect needs to modify the infrastructure to be highly available without modifying the application.

Which architecture should the solutions architect choose that provides high availability?

  • ✅ A. Modify the Auto Scaling group to use four instances across each of two Availability Zones
  • ❌ B. Create an Auto Scaling group that uses four instances across each of two Regions
  • ❌ C. Create an Auto Scaling group that uses four instances across each of two subnets
  • ❌ D. Create an Auto Scaling template that can be used to quickly create more instances in another Region

Question 551

A data analytics company is testing a Python-based application that processes customer data on an Amazon EC2 Linux instance. A single 1 TB Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp3) volume is currently attached to the EC2 instance for data storage.

The company plans to deploy the application across multiple EC2 instances in an Auto Scaling group. All instances must access the same data that is currently stored on the EBS volume. The company needs a highly available and cost-effective solution that minimizes changes to the application code.

Which solution will meet these requirements?

  • ✅ A. Use Amazon Elastic File System (Amazon EFS) and configure it in General Purpose performance mode. Mount the EFS file system on all EC2 instances.
  • ❌ B. Configure an Amazon FSx for Lustre file system. Integrate the file system with Amazon S3 and mount it on each EC2 instance for shared access.
  • ❌ C. Provision Amazon S3 and use the S3 REST API to allow all EC2 instances to upload and download data from the S3 bucket.
  • ❌ D. Create an EC2 instance to act as an NFS server. Attach the EBS volume to this instance and share the volume with other EC2 instances in the Auto Scaling group.

Question 552

A company has a file share on a Microsoft Windows Server in an on-premises data center. The server uses a local network attached storage (NAS) device to store several terabytes of files. The management team require a reduction in the data center footprint and to minimize storage costs by moving on-premises storage to AWS.

What should a Solutions Architect do to meet these requirements?

  • ❌ A. Configure an AWS Storage Gateway as a volume gateway.
  • ✅ B. Configure an AWS Storage Gateway file gateway.
  • ❌ C. Create an Amazon EFS volume and use an IPSec VPN.
  • ❌ D. Create an Amazon S3 bucket and an S3 gateway endpoint.

Question 553

A company runs workloads in the AWS Cloud and wants to consolidate and analyze security-related information to enhance workload protection. The company needs a solution that simplifies the collection and centralization of security data across multiple AWS accounts and Regions with minimal development effort.

Which solution will meet these requirements with the LEAST development effort?

  • ✅ A. Configure Amazon Security Lake to automatically collect, normalize, and store security data in Amazon S3 for analysis.
  • ❌ B. Deploy an Amazon RDS cluster and use AWS Database Migration Service (AWS DMS) to load security data from multiple sources.
  • ❌ C. Use AWS Glue crawlers to extract and catalog security data into an AWS Lake Formation-managed data lake.
  • ❌ D. Create a custom Lambda function to fetch security data in JSON format and store it in Amazon S3 for further analysis.

Question 554

An application upgrade caused some issues with stability. The application owner enabled logging and has generated a 5 GB log file in an Amazon S3 bucket. The log file must be securely shared with the application vendor to troubleshoot the issues.

What is the MOST secure way to share the log file?

  • ❌ A. Create an IAM user for the vendor to provide access to the S3 bucket and the application. Enforce multi-factor authentication.
  • ❌ B. Create access keys using an administrative account and share the access key ID and secret access key with the vendor.
  • ✅ C. Generate a presigned URL and ask the vendor to download the log file before the URL expires.
  • ❌ D. Enable default encryption for the bucket and public access. Provide the S3 URL of the file to the vendor.

Question 555

A company requires a solution for replicating data to AWS for disaster recovery. Currently, the company uses scripts to copy data from various sources to a Microsoft Windows file server in the on-premises data center. The company also requires that a small amount of recent files are accessible to administrators with low latency.

What should a Solutions Architect recommend to meet these requirements?

  • ✅ A. Update the script to copy data to an AWS Storage Gateway for File Gateway virtual appliance instead of the on-premises file server.
  • ❌ B. Update the script to copy data to an Amazon S3 Glacier archive instead of the on-premises file server.
  • ❌ C. Update the script to copy data to an Amazon EBS volume instead of the on-premises file server.
  • ❌ D. Update the script to copy data to an Amazon EFS volume instead of the on-premises file server.

Question 556

A company is using AWS DataSync to migrate millions of files from an on-premises system to AWS. The files are 10 KB in size on average. The company wants to use Amazon S3 for file storage. For the first year after the migration, the files will be accessed once or twice and must be immediately available. After 1 year, the files must be archived for at least 7 years.

Which solution will meet these requirements MOST cost-effectively?

  • ❌ A. Use an archive tool to group the files into large objects. Use DataSync to copy the objects to S3 Standard-Infrequent Access (S3 Standard-IA). Use a lifecycle configuration to transition the files to S3 Glacier Instant Retrieval after 1 year with a retention period of 7 years.
  • ❌ B. Configure the destination storage class for the files as S3 Glacier Instant Retrieval. Use a lifecycle policy to transition the files to S3 Glacier Flexible Retrieval after 1 year with a retention period of 7 years.
  • ✅ C. Configure a DataSync task to transfer the files to S3 Standard-Infrequent Access (S3 Standard-IA). Use a lifecycle configuration to transition the files to S3 Deep Archive after 1 year with a retention period of 7 years.
  • ❌ D. Use an archive tool to group the files into large objects. Use DataSync to migrate the objects. Store the objects in S3 Glacier Instant Retrieval for the first year. Use a lifecycle configuration to transition the files to S3 Glacier Deep Archive after 1 year with a retention period of 7 years.

Question 557

A gaming company uses a web application to display scores. An Application Load Balancer is used to distribute load across Amazon EC2 instances which run the application. The application stores data in an Amazon RDS for MySQL database. Users are experiencing long delays and interruptions due to poor database read performance. It is important for the company to improve the user experience while minimizing changes to the application's architecture.

What should a solutions architect do to meet these requirements?

  • ❌ A. Use an Amazon DynamoDB table instead of RDS.
  • ❌ B. Connect the database and the application layer using RDS Proxy.
  • ✅ C. Use Amazon ElastiCache to cache the database layer.
  • ❌ D. Use AWS Lambda instead of Amazon EC2 for the compute layer.

Question 558

A fitness company collects user feedback from mobile app surveys about its workout plans and features. Users submit thousands of survey responses daily, and the company wants to automate feedback analysis to track user sentiment and improve its offerings. The analyzed feedback data must be stored for at least 12 months to identify trends over time.

The company requires a highly scalable solution that minimizes operational complexity.

Which solution will meet these requirements in the MOST scalable way?

  • ✅ A. Collect survey responses via an Amazon API Gateway endpoint integrated with Amazon Kinesis Data Firehose. Configure Firehose to stream the data to an Amazon S3 bucket. Use S3 Event Notifications to invoke an AWS Lambda function that calls Amazon Comprehend for sentiment analysis and writes results to an Amazon DynamoDB table with TTL configured to delete records after 12 months.
  • ❌ B. Deploy an on-premises server that receives survey responses via a REST API. Process the data locally, use a custom machine learning model for sentiment analysis, and upload results to Amazon S3. Use Amazon S3 lifecycle policies to delete the data after 12 months.
  • ❌ C. Send survey responses to an Amazon EventBridge rule, which routes the data to an AWS Step Functions workflow. Use Step Functions to trigger AWS Lambda for data processing and sentiment analysis with Amazon Comprehend. Store the results in an Amazon DynamoDB table and use DynamoDB's TTL feature to expire data after 12 months.
  • ❌ D. Write survey responses directly to an Amazon Redshift database. Configure Amazon Redshift ML to perform sentiment analysis on the feedback data in real time. Use Amazon S3 to archive the processed results and configure lifecycle policies to delete S3 objects after 12 months.

Question 559

A retail company uses an Amazon Aurora MySQL DB cluster for its order management system. The cluster includes eight Aurora Replicas. The company wants to ensure that reporting queries from its analytics team are automatically distributed across three specific Aurora Replicas that have higher compute and memory capacity than the rest of the cluster.

Which solution will meet these requirements?

  • ✅ A. Create and use a custom endpoint that targets the three high-capacity replicas.
  • ❌ B. Create a cluster clone for the reporting workload and use the writer endpoint of the cloned cluster.
  • ❌ C. Direct reporting queries to the instance endpoints of the three high-capacity replicas.
  • ❌ D. Use the reader endpoint to automatically distribute reporting queries across all replicas in the cluster.

Question 560

A company uses a Microsoft Windows file share for storing documents and media files. Users access the share using Microsoft Windows clients and are authenticated using the company’s Active Directory. The chief information officer wants to move the data to AWS as they are approaching capacity limits. The existing user authentication and access management system should be used.

How can a Solutions Architect meet these requirements?

  • ❌ A. Move the documents and media files to an Amazon Simple Storage Service bucket and apply bucket ACLs.
  • ❌ B. Move the documents and media files to an Amazon Elastic File System and use POSIX permissions.
  • ✅ C. Move the documents and media files to an Amazon FSx for Windows File Server file system.
  • ❌ D. Move the documents and media files to an Amazon FSx for Lustre file system.

Question 561

A small Python application is used by a company to process JSON documents and output the results to a SQL database which currently lives on-premises. The application is run thousands of times every day, and the company wants to move the application to the AWS Cloud. To maximize scalability and minimize operational overhead, the company needs a highly available solution.

Which solution will meet these requirements?

  • ❌ A. The JSON documents should be queued as messages in the Amazon Simple Queue Service (Amazon SQS). Using the Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type, deploy the Python code as a container. The container can be used to process SQS messages. Using Amazon RDS, store the results.
  • ✅ B. Put the JSON documents in an Amazon S3 bucket. As documents arrive in the S3 bucket, create an AWS Lambda function that runs Python code to process them. Use Amazon Aurora DB clusters to store the results.
  • ❌ C. Create an Amazon Elastic Block Store (Amazon EBS) volume for the JSON documents. Attach the volume to multiple Amazon EC2 instances using the EBS Multi-Attach feature. Process the documents with Python code on the EC2 instances and then extract the results to an Amazon RDS DB instance.
  • ❌ D. Build an S3 bucket to place the JSON documents in. Run the Python code on multiple Amazon EC2 instances to process the documents. Store the results in a database using the Amazon Aurora Database engine.

Question 562

An application on Amazon Elastic Container Service (ECS) performs data processing in two parts. The second part takes much longer to complete. How can an Architect decouple the data processing from the backend application component?

  • ✅ A. Process each part using a separate ECS task. Create an Amazon SQS queue
  • ❌ B. Process each part using a separate ECS task. Create an Amazon SNS topic and send a notification when the processing completes
  • ❌ C. Create an Amazon DynamoDB table and save the output of the first part to the table
  • ❌ D. Process both parts using the same ECS task. Create an Amazon Kinesis Firehose stream

Question 563

A medical research institution generates large volumes of patient imaging data daily. These images are initially stored on on-premises block storage systems connected to medical devices. Due to limited local storage capacity, the institution needs to offload data to the cloud. The data must remain accessible to on-premises analysis applications with low latency for frequently accessed images. The institution requires a storage solution that integrates with its existing setup and minimizes operational management.

Which solution will meet these requirements with the MOST operational efficiency?

  • ❌ A. Use AWS Snowball Edge to transfer imaging data to Amazon S3. Set up periodic data migrations to AWS to manage storage demands. Retrieve data on demand from S3 using Amazon S3 Transfer Acceleration.
  • ❌ B. Use AWS Storage Gateway Tape Gateway to store virtual tapes in Amazon S3 Glacier Instant Retrieval. Retrieve data from the tape gateway as needed for analysis.
  • ✅ C. Use AWS Storage Gateway Volume Gateway in cached mode. Configure cached volumes as iSCSI targets to store the primary dataset in AWS and cache frequently accessed imaging data locally.
  • ❌ D. Use Amazon S3 File Gateway to offload patient images to Amazon S3. Mount the file gateway to the on-premises analysis servers using NFS or SMB for direct access to the images.

Question 564

A gaming company operates a leaderboard application for a popular multiplayer game. The application uses an Amazon Aurora PostgreSQL DB cluster for storage. The game servers, hosted on Amazon EC2 instances, frequently update the leaderboard with player scores.

The company has a strict security policy that requires database credentials to be encrypted and rotated every 30 days. The company wants to minimize operational overhead while ensuring the application can seamlessly retrieve and use updated credentials.

What should a solutions architect do to meet this requirement?

  • ❌ A. Use AWS Systems Manager Parameter Store to store the database credentials as SecureString parameters encrypted with AWS KMS. Implement a custom AWS Lambda function to rotate the credentials every 30 days and update the parameters.
  • ❌ B. Configure Amazon Cognito to generate temporary database credentials. Use Cognito's built-in mechanisms to rotate the credentials every 30 days. Update the game server application to request temporary credentials from Cognito.
  • ✅ C. Use AWS Secrets Manager to store the database credentials. Configure Secrets Manager to rotate the credentials automatically every 30 days. Update the game server application to retrieve credentials from Secrets Manager.
  • ❌ D. Store the database credentials in an Amazon DynamoDB table encrypted with AWS KMS. Configure an AWS Lambda function to rotate the credentials in Aurora every 30 days and update the DynamoDB table with the new credentials.

Question 565

A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies.

How should a solutions architect address this issue?

  • ❌ A. Create an Amazon SNS topic to send an alert every time a developer creates a new policy
  • ✅ B. Set an IAM permissions boundary on the developer IAM role that explicitly denies attaching the administrator policy
  • ❌ C. Prevent the developers from attaching any policies and assign all IAM duties to the security operations team
  • ❌ D. Use service control policies to disable IAM activity across all accounts in the organizational unit

Question 566

A fitness application company is launching a platform to track user activity, workout logs, and personalized settings. The database must support structured data, allow for transactions between related data, and dynamically scale to handle unpredictable traffic spikes during peak hours. The solution must also support automated backups and minimize operational management.

Which solution will meet these requirements MOST cost-effectively?

  • ❌ A. Deploy an Amazon RDS MySQL instance in a multi-AZ configuration. Use provisioned IOPS storage and configure automated backups to Amazon S3 Glacier Flexible Retrieval for long-term retention.
  • ❌ B. Deploy an open-source database on Amazon EC2 Spot Instances in an Auto Scaling group. Configure daily backups to Amazon S3 Intelligent-Tiering for cost optimization.
  • ✅ C. Use Amazon Aurora Serverless v2 to store the data. Enable serverless auto-scaling and configure automated backups to Amazon S3 with a 7-day retention period.
  • ❌ D. Use Amazon DynamoDB with on-demand capacity mode to handle fluctuating traffic. Enable DynamoDB Point-in-Time Recovery (PITR) for automated backups.

Question 567

A research organization wants to move its data analytics application to a serverless solution. The organization stores scientific data in an Amazon S3 bucket and needs the solution to support SQL queries on both existing and new data. The data must be encrypted at rest and replicated to a different AWS Region to ensure durability and compliance.

Which solution will meet these requirements with the LEAST operational overhead?

  • ✅ A. Create a new S3 bucket that uses server-side encryption with AWS KMS multi-Region keys (SSE-KMS). Configure Cross-Region Replication (CRR). Load the data into the new S3 bucket. Use Amazon Athena to query the data.
  • ❌ B. Configure Cross-Region Replication (CRR) on the existing S3 bucket. Use server-side encryption with Amazon S3 managed keys (SSE-S3). Use Amazon Athena to query the data.
  • ❌ C. Create a new S3 bucket that uses server-side encryption with Amazon S3 managed keys (SSE-S3). Configure Cross-Region Replication (CRR). Load the data into the new S3 bucket. Use Amazon Redshift Spectrum to query the data.
  • ❌ D. Configure S3 Cross-Region Replication (CRR) on the existing S3 bucket. Use server-side encryption with AWS KMS multi-Region keys (SSE-KMS). Use AWS Glue for ETL and Amazon Redshift to query the data.

Question 568

To accelerate experimentation and agility, a company allows developers to apply existing IAM policies to existing IAM roles. Nevertheless, the security operations team is concerned that the developers could attach the existing administrator policy, circumventing any other security policies.

How should a solutions architect address this issue?

  • ❌ A. Disable IAM activity across all organizational accounts using service control policies.
  • ❌ B. Send an alert every time a developer creates a new policy using an Amazon SNS topic.
  • ❌ C. Assign all IAM duties to the security operations team and prevent developers from attaching policies.
  • ✅ D. Set a permissions boundary on the developer IAM role that denies attaching administrator access.

Question 569

An application stores transactional data in an Amazon S3 bucket. The data is analyzed for the first week and then must remain immediately available and highly available for occasional analysis.

What is the MOST cost-effective storage solution that meets the requirements?

  • ❌ A. Configure a lifecycle policy to transition the objects to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.
  • ❌ B. Configure a lifecycle policy to transition the objects to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) after 7 days.
  • ❌ C. Configure a lifecycle policy to transition the objects to Amazon S3 Standard-Infrequent Access (S3 Standard-IA) after 7 days.
  • ✅ D. Configure a lifecycle policy to transition the objects to Amazon S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

Question 570

A pharmaceutical company is migrating its legacy inventory management system to AWS. The system runs on Microsoft Windows Server and uses shared block storage for data consistency and failover. The company requires a highly available solution that supports active-passive clustering across multiple Availability Zones. The storage solution must minimize operational overhead while ensuring low-latency access to data.

Which solution will meet these requirements with the LEAST implementation effort?

  • ❌ A. Deploy the inventory application on Amazon EC2 instances in two Availability Zones with an active-passive configuration. Use Amazon Elastic File System (Amazon EFS) in Standard mode to store and share application data across the two instances.
  • ❌ B. Deploy the inventory application on Amazon EC2 instances in two Availability Zones with an active-passive setup. Use Amazon S3 with the S3 File Gateway to provide shared storage for the application data.
  • ✅ C. Deploy Amazon FSx for Windows File Server in Multi-AZ mode. Configure a Windows Server failover cluster across two Amazon EC2 instances in different Availability Zones, using FSx for Windows File Server as the shared storage.
  • ❌ D. Use AWS Storage Gateway with cached volumes to provide block storage. Deploy the application on a Windows Server cluster spanning two Availability Zones, using Storage Gateway to store and access shared data.

Question 571

A web application that allows users to upload and share documents is running on a single Amazon EC2 instance with an Amazon EBS volume. To increase availability the architecture has been updated to use an Auto Scaling group of several instances across Availability Zones behind an Application Load Balancer. After the change users can only see a subset of the documents.

What is the BEST method for a solutions architect to modify the solution so users can see all documents?

  • ❌ A. Configure the Application Load Balancer to send the request to all servers. Return each document from the correct server
  • ❌ B. Run a script to synchronize the data between Amazon EBS volumes
  • ✅ C. Copy the data from all EBS volumes to Amazon EFS. Modify the application to save new documents to Amazon EFS
  • ❌ D. Use Sticky Sessions with the ALB to ensure users are directed to the same EC2 instance in a session

Question 572

A company wants to migrate a legacy web application from an on-premises data center to AWS. The web application consists of a web tier, an application tier, and a MySQL database. The company does not want to manage instances or clusters.

Which combination of services should a solutions architect include in the overall architecture? (Select TWO)

  • ✅ A. AWS Fargate
  • ❌ B. Amazon EC2 Spot Instances
  • ✅ C. Amazon RDS for MySQL
  • ❌ D. Amazon Kinesis Data Streams
  • ❌ E. Amazon DynamoDB

Question 573

A company runs an application in an Amazon VPC that requires access to an Amazon Elastic Container Service (Amazon ECS) cluster that hosts an application in another VPC. The company’s security team requires that all traffic must not traverse the internet.

Which solution meets this requirement?

  • ✅ A. Create a Network Load Balancer in one VPC and an AWS PrivateLink endpoint for Amazon ECS in another VPC.
  • ❌ B. Configure a gateway endpoint for Amazon ECS. Update the route table to include an entry pointing to the ECS cluster.
  • ❌ C. Create a Network Load Balancer and AWS PrivateLink endpoint for Amazon ECS in the VPC that hosts the ECS cluster.
  • ❌ D. Configure an Amazon Route 53 private hosted zone for each VPC. Use private records to resolve internal IP addresses in each VPC.

Question 574

A healthcare company is building a patient records management application that uses a relational database to store user data and configuration details. The company expects steady growth in the number of patients. The database workload is expected to be variable and read-heavy, with occasional write operations. The company wants to cost-optimize the database solution while ensuring the necessary performance for its workload.

Which solution will meet these requirements MOST cost-effectively?

  • ❌ A. Deploy the database on Amazon RDS. Use magnetic storage with Multi-AZ deployments to ensure durability and handle the read-heavy workload.
  • ❌ B. Deploy the database on Amazon RDS. Use General Purpose SSD (gp3) storage with a read replica to ensure consistent performance for read and write operations.
  • ❌ C. Deploy the database on Amazon DynamoDB. Use on-demand capacity mode to automatically adjust throughput and accommodate workload changes.
  • ✅ D. Deploy the database on Amazon Aurora Serverless v2 to automatically scale the database capacity based on actual usage and handle fluctuations in workload.

Question 575

A company operates a globally accessed video-sharing platform where users can upload, view, and download videos from their mobile devices. The platform's static website is hosted in an Amazon S3 bucket.

Due to the platform’s rapid growth, users are experiencing increased latency during video uploads and downloads. The company needs to improve the performance of the platform while minimizing the complexity of the implementation.

Which solution will meet these requirements with the LEAST implementation effort?

  • ❌ A. Configure an Amazon CloudFront distribution with the S3 bucket as the origin to accelerate downloads. Use CloudFront for uploads as well. Create additional S3 buckets in multiple Regions and set up replication rules to sync user content between buckets. Redirect users to the closest bucket for downloads.
  • ❌ B. Set up AWS Global Accelerator for the S3 bucket to optimize network routing. Configure the platform to use the Global Accelerator endpoint instead of the S3 bucket.
  • ❌ C. Deploy Amazon EC2 instances in multiple AWS Regions and migrate the platform to these instances. Use an Application Load Balancer to distribute traffic across the instances and configure AWS Global Accelerator for improved global performance.
  • ✅ D. Configure an Amazon CloudFront distribution for the S3 bucket to accelerate download performance. Enable S3 Transfer Acceleration to enhance upload performance.

Question 576

An Amazon EC2 instance runs in a VPC network, and the network must be secured by a solutions architect. The EC2 instances contain highly sensitive data and have been launched in private subnets. Company policy restricts EC2 instances that run in the VPC from accessing the internet. The instances need to access the software repositories using a third-party URL to download and install software product updates. All other internet traffic must be blocked, with no exceptions.

Which solution meets these requirements?

  • ✅ A. Configure the route table for the private subnet so that it routes the outbound traffic to an AWS Network Firewall firewall then configure domain list rule groups.
  • ❌ B. Create an AWS WAF web ACL. Filter traffic requests based on source and destination IP address ranges with custom rules.
  • ❌ C. Place an Application Load Balancer in front of your EC2 instances. Direct all outbound traffic to the ALB. For outbound access to the internet, use a URL-based rule listener in the ALB's target group.
  • ❌ D. Establish strict inbound rules for your security groups. Specify the URLs of the authorized software repositories on the internet in your outbound rule.

Question 577

A media company operates an on-premises analytics platform to collect streaming data from video playback devices. The platform provides near real-time insights into user engagement and content performance. The company wants to migrate the platform to AWS and use an AWS-native solution for data ingestion, storage, search, and visualization.

Which solution will meet these requirements?

  • ❌ A. Use Amazon MSK (Managed Streaming for Apache Kafka) to ingest the data streams. Store the data in Amazon Redshift for analysis. Use Redshift Spectrum for advanced querying and Amazon QuickSight to create visual dashboards.
  • ✅ B. Use Amazon Kinesis Data Streams to ingest the data streams and process the data with AWS Lambda. Store the data in Amazon OpenSearch Service for search and analysis. Use Amazon Managed Grafana to create visual dashboards.
  • ❌ C. Use Amazon EMR to process the data streams and store the data in Amazon DynamoDB. Use DynamoDB queries for searching and Amazon CloudWatch to create graphical dashboards.
  • ❌ D. Use Amazon EC2 instances to ingest and process the data streams into Amazon S3 buckets for storage. Use AWS Glue to catalog the data and Amazon Athena to perform searches. Use Amazon QuickSight to create visualizations.

Question 578

A retail company is migrating its supply chain application to Amazon Elastic Kubernetes Service (Amazon EKS). The company requires pods in the EKS cluster to use custom subnets in its existing VPC. Additionally, the pods must securely communicate with other resources within the VPC, while adhering to compliance requirements.

Which solution will meet these requirements?

  • ❌ A. Configure an AWS Site-to-Site VPN between the custom subnets and the EKS cluster to enable secure communication for the pods.
  • ✅ B. Use the Amazon VPC CNI plugin for Kubernetes. Configure the custom subnets in the VPC and associate the subnets with the EKS cluster to allow pods to use them.
  • ❌ C. Set up AWS Transit Gateway to manage the routing between custom subnets and the EKS pods for secure communication within the VPC.
  • ❌ D. Define Kubernetes network policies that enforce pod placement on specific nodes residing in the custom subnets within the VPC.

Question 579

A solutions architect is required to move 750 TB of data from a branch office's network-attached file system to Amazon S3 Glacier. The branch office’s internet connection is poor, and the solution must not saturate the connection. Normal business traffic loads must not be affected by the migration.

What is the MOST cost-effective solution?

  • ❌ A. Order 10 AWS Snowball appliances and point these appliances to an S3 Glacier vault and put in place a bucket policy which will only allow access via a VPC endpoint.
  • ❌ B. Copy the files directly from the network-attached file system to Amazon S3. Build a lifecycle policy to move the S3 objects across storage classes into Amazon S3 Glacier.
  • ❌ C. Create a site-to-site VPN connection directly to an Amazon S3 bucket, Enforce the connection with an VPC Endpoint.
  • ✅ D. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.

Question 580

A retail company runs its order processing system on AWS. The system uses an Amazon RDS for MySQL Multi-AZ database cluster as its backend. The company must retain database backups for 30 days to meet compliance requirements. The company uses both automated RDS backups and manual backups for specific points in time. The company wants to enforce the 30-day retention policy for all backups while ensuring that both automated and manual backups created within the last 30 days are preserved. The solution must be cost-effective and require minimal operational effort.

Which solution will meet these requirements MOST cost-effectively?

  • ❌ A. Use AWS Backup to enforce a 30-day retention policy for automated backups. Configure an AWS Lambda function to identify and delete manual backups older than 30 days.
  • ✅ B. Configure the RDS backup retention policy to 30 days for automated backups. Use a script to identify and delete manual backups that are older than 30 days.
  • ❌ C. Disable RDS automated backups. Use AWS Backup to create and retain daily backups for 30 days. Use AWS Backup lifecycle policies to delete backups older than 30 days.
  • ❌ D. Retain the current configuration with both automated and manual backups. Use Amazon CloudWatch Events with AWS Lambda to automatically delete both automated and manual backups that are older than 30 days.

Question 581

A High Performance Computing (HPC) application will be migrated to AWS. The application requires low network latency and high throughput between nodes and will be deployed in a single AZ.

How should the application be deployed for best inter-node performance?

  • ❌ A. In a spread placement group
  • ❌ B. Behind a Network Load Balancer (NLB)
  • ✅ C. In a cluster placement group
  • ❌ D. In a partition placement group

Question 582

An application running on Amazon ECS processes data and then writes objects to an Amazon S3 bucket. The application requires permissions to make the S3 API calls.

How can a Solutions Architect ensure the application has the required permissions?

  • ❌ A. Create a set of Access Keys with read/write permissions to the bucket and update the task credential ID.
  • ❌ B. Update the S3 policy in IAM to allow read/write access from Amazon ECS, and then relaunch the container.
  • ❌ C. Attach an IAM policy with read/write permissions to the bucket to an IAM group and add the container instances to the group.
  • ✅ D. Create an IAM role that has read/write permissions to the bucket and update the task definition to specify the role as the taskRoleArn.

Question 583

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing. The company wants to minimize the website hosting costs.

Which solution will meet these requirements?

  • ✅ A. Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.
  • ❌ B. Move the website to AWS Amplify. Configure an ALB to resolve to the Amplify website.
  • ❌ C. Move the website to AWS Amplify. Configure EC2 instances to cache the website.
  • ❌ D. Move the website to an Amazon S3 bucket. Configure an Amazon ElastiCache cluster for the S3 bucket.

Question 584

An application has been migrated to Amazon EC2 Linux instances. The EC2 instances run several 1-hour tasks on a schedule. There is no common programming language among these tasks, as they were written by different teams. Currently, these tasks run on a single instance, which raises concerns about performance and scalability. To resolve these concerns, a solutions architect must implement a solution.

Which solution will meet these requirements with the LEAST Operational overhead?

  • ❌ A. Copy the tasks into AWS Lambda functions. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events).
  • ❌ B. Convert the EC2 instance to a container. Use AWS App Runner to create the container on demand to run the tasks as jobs.
  • ✅ C. Create an Amazon Machine Image (AMI) of the EC2 instance that runs the tasks. Create an Auto Scaling group with the AMI to run multiple copies of the instance.
  • ❌ D. Use AWS Batch to run the tasks as jobs. Schedule the jobs by using Amazon EventBridge (Amazon CloudWatch Events).

Question 585

A transportation company uses GPS devices installed on its fleet of delivery trucks to monitor their location in real time. Each GPS device sends location updates every 5 minutes if the truck has traveled more than 100 meters. The data is transmitted to a web application running on three Amazon EC2 instances deployed across multiple Availability Zones in a single AWS Region.

Recently, during a peak delivery period, the web application was overwhelmed by the increased volume of GPS data, leading to data loss with no way to replay the events. The company wants to ensure that no location data is lost and that the application can scale efficiently to handle traffic spikes, all with minimal operational overhead.

What should the solutions architect do to meet these requirements?

  • ❌ A. Use an Amazon S3 bucket to store the GPS location updates. Modify the application to periodically scan the bucket for new files and process the data.
  • ❌ B. Store the GPS location updates in an Amazon DynamoDB table. Modify the application to query the table for unprocessed data and process it. Use DynamoDB TTL to remove old records after processing.
  • ❌ C. Use Amazon Kinesis Data Streams to ingest the GPS data. Configure an AWS Lambda function to process the data in real time and store results in an Amazon DynamoDB table.
  • ✅ D. Use an Amazon Simple Queue Service (Amazon SQS) queue to store the incoming GPS data. Modify the application to poll the queue for new messages and process the data.

Question 586

A solutions architect has been tasked with designing a highly resilient hybrid cloud architecture connecting an on-premises data center and AWS. The network should include AWS Direct Connect (DX).

Which DX configuration offers the HIGHEST resiliency?

  • ❌ A. Configure multiple public VIFs on top of a DX connection.
  • ❌ B. Configure a DX connection with an encrypted VPN on top of it.
  • ✅ C. Configure DX connections at multiple DX locations.
  • ❌ D. Configure multiple private VIFs on top of a DX connection.

Question 587

A company runs its critical storage application in the AWS Cloud. The application uses Amazon S3 in two AWS Regions. The company wants the application to send remote user data to the nearest S3 bucket with no public network congestion. The company also wants the application to fail over with the least amount of management of Amazon S3.

Which solution will meet these requirements?

  • ❌ A. Send user data to the regional S3 endpoints closest to the user. Configure an S3 cross-account replication rule to keep the S3 buckets synchronized.
  • ❌ B. Implement an active-active design between the two Regions. Configure the application to use the regional S3 endpoints closest to the user.
  • ✅ C. Set up Amazon S3 to use Multi-Region Access Points in an active-active configuration with a single global endpoint. Configure S3 Cross-Region Replication.
  • ❌ D. Use an active-passive configuration with S3 Multi-Region Access Points. Create a global endpoint for each of the Regions.

Question 588

A company hosts a monolithic web application on an Amazon EC2 instance. Application users have recently reported poor performance at specific times. Analysis of Amazon CloudWatch metrics shows that CPU utilization is 100% during the periods of poor performance. The company wants to resolve this performance issue and improve application availability.

Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO)

  • ❌ A. Use AWS Compute Optimizer to obtain a recommendation for an instance type to scale horizontally.
  • ❌ B. Create an Auto Scaling group and an Application Load Balancer to scale vertically.
  • ✅ C. Create an Auto Scaling group and an Application Load Balancer to scale horizontally.
  • ✅ D. Use AWS Compute Optimizer to obtain a recommendation for an instance type to scale vertically.
  • ❌ E. Create an Amazon Machine Image (AMI) from the web server. Reference the AMI in a new launch template.

Question 589

A company operates an e-commerce application hosted on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). Customer transactions and order information are stored in an Amazon Aurora PostgreSQL DB cluster. The company wants to implement a disaster recovery (DR) plan to prepare for Region-wide outages. The DR solution must provide a recovery time objective (RTO) of 30 minutes. The DR infrastructure does not need to be operational unless the primary Region becomes unavailable.

Which solution will meet these requirements?

  • ❌ A. Deploy the DR infrastructure in a second AWS Region. Include an Aurora DB cluster configured with Cross-Region Replication and an ALB with the same configuration. Set up an Amazon CloudWatch alarm to increase the Auto Scaling group desired capacity upon failure.
  • ❌ B. Use AWS Backup to schedule regular backups of the Aurora DB cluster and EC2 instances. In the second AWS Region, create infrastructure using AWS CloudFormation templates upon failure. Configure Amazon Route 53 with a failover policy to redirect traffic.
  • ✅ C. Deploy the DR infrastructure in a second AWS Region, including an ALB and an Auto Scaling group with desired and maximum capacities set to zero. Convert the Aurora PostgreSQL DB cluster into an Aurora global database. Use Amazon Route 53 to configure active-passive failover.
  • ❌ D. Deploy an ALB and Auto Scaling group in a second AWS Region. Set the Auto Scaling group desired capacity to a minimum value. Use Amazon RDS Cross-Region Read Replicas to replicate the Aurora DB cluster. Configure Amazon Route 53 for active-active failover.
Hermes Wiki