An organization is currently using a tape backup solution to store its application data on-premises. They plan to use a cloud storage service to preserve the backup data for up to 10 years that may be accessed about once or twice a year. Which of the following is the most cost-effective option to implement this solution?

Use AWS Storage Gateway to backup the data directly to Amazon S3 Glacier Deep Archive.

Order an AWS Snowball Edge appliance to import the backup directly to Amazon S3 Glacier.

Use AWS Storage Gateway to backup the data directly to Amazon S3 Glacier.

Use Amazon S3 to store the backup data and add a lifecycle rule to transition the current version to Amazon S3 Glacier.

Both historical records and frequently accessed data are stored on an on-premises storage system. The amount of current data is growing at an exponential rate. As the storage's capacity is nearing its limit, the company's Solutions Architect has decided to move the historical records to AWS to free up space for the active data. Which of the following architectures deliver the best solution in terms of cost and operational management?

Use AWS DataSync to move the historical records from on-premises to AWS. Choose Amazon S3 Glacier Deep Archive to be the destination for the data.

Use AWS Storage Gateway to move the historical records from on-premises to AWS. Choose Amazon S3 Glacier to be the destination for the data. Modify the S3 lifecycle configuration to move the data from the Standard tier to Amazon S3 Glacier Deep Archive after 30 days.

Use AWS Storage Gateway to move the historical records from on-premises to AWS. Choose Amazon S3 Glacier Deep Archive to be the destination for the data.

Use AWS DataSync to move the historical records from on-premises to AWS. Choose Amazon S3 Standard to be the destination for the data. Modify the S3 lifecycle configuration to move the data from the Standard tier to Amazon S3 Glacier Deep Archive after 30 days.

A company is running a multi-tier web application farm in a virtual private cloud (VPC) that is not connected to their corporate network. They are connecting to the VPC over the Internet to manage the fleet of Amazon EC2 instances running in both the public and private subnets. The Solutions Architect has added a bastion host with Microsoft Remote Desktop Protocol (RDP) access to the application instance security groups, but the company wants to further limit administrative access to all of the instances in the VPC. Which of the following bastion host deployment options will meet this requirement?

Deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow RDP access to bastion only from the corporate IP addresses.

Deploy a Windows Bastion host on the corporate network that has RDP access to all EC2 instances in the VPC.

Deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow SSH access to the bastion from anywhere.

Deploy a Windows Bastion host with an Elastic IP address in the private subnet, and restrict RDP access to the bastion from only the corporate public IP addresses.

A company is building a transcription service in which a fleet of EC2 worker instances processes an uploaded audio file and generates a text file as an output. They must store both of these frequently accessed files in the same durable storage until the text file is retrieved by the uploader. Due to an expected surge in demand, they have to ensure that the storage is scalable and can be retrieved within minutes. Which storage option in AWS can they use in this situation, which is both cost-efficient and scalable?

Multiple Amazon EBS volume with snapshots

A company has a static corporate website hosted in a standard S3 bucket and a new web domain name that was registered using Route 53. You are instructed by your manager to integrate these two services in order to successfully launch their corporate website. What are the prerequisites when routing traffic using Amazon Route 53 to a website that is hosted in an Amazon S3 Bucket? (Select TWO.)

The S3 bucket name must be the same as the domain name

The S3 bucket must be in the same region as the hosted zone

The record set must be of type "MX"

The Cross-Origin Resource Sharing (CORS) option should be enabled in the S3 bucket

A company plans to conduct a network security audit. The web application is hosted on an Auto Scaling group of EC2 Instances with an Application Load Balancer in front to evenly distribute the incoming traffic. A Solutions Architect has been tasked to enhance the security posture of the company's cloud infrastructure and minimize the impact of DDoS attacks on its resources. Which of the following is the most effective solution that should be implemented?

Configure Amazon CloudFront distribution and set Application Load Balancer as the origin. Create a rate-based web ACL rule using AWS WAF and associate it with Amazon CloudFront.

Configure Amazon CloudFront distribution and set a Network Load Balancer as the origin. Use VPC Flow Logs to monitor abnormal traffic patterns. Set up a custom AWS Lambda function that processes the flow logs and invokes Amazon SNS for notification.

Configure Amazon CloudFront distribution and set a Network Load Balancer as the origin. Use Amazon GuardDuty to block suspicious hosts based on its security findings. Set up a custom AWS Lambda function that processes the security logs and invokes Amazon SNS for notification.

Configure Amazon CloudFront distribution and set an Application Load Balancer as the origin. Create a security group rule and deny all the suspicious addresses. Use Amazon SNS for notification.

All objects uploaded to an Amazon S3 bucket must be encrypted for security compliance. The bucket will use server-side encryption with Amazon S3- Managed encryption keys (SSE-S3) to encrypt data using 256- bit Advanced Encryption Standard (AES-256) block cipher. Which of the following request headers must be used?

x-amz-server-side-encryption-customer-key

x-amz-server-side-encryption-customer-algorithm

x-amz-server-side-encryption-customer-key-MD5

One member of your DevOps team consulted you about a connectivity problem in one of your Amazon EC2 instances. The application architecture is initially set up with four EC2 instances, each with an EIP address that all belong to a public non-default subnet. You launched another instance to handle the increasing workload of your application. The EC2 instances also belong to the same security group. Everything works well as expected except for one of the EC2 instances which is not able to send nor receive traffic over the Internet. Which of the following is the MOST likely reason for this issue?

The EC2 instance does not have a public IP address associated with it.

The EC2 instance is running in an Availability Zone that is not connected to an Internet gateway.

The EC2 instance does not have a private IP address associated with it.

The route table is not properly configured to allow traffic to and from the Internet through the Internet gateway.

A start-up company that offers an intuitive financial data analytics service has consulted you about their AWS architecture. They have a fleet of Amazon EC2 worker instances that process financial data and then outputs reports which are used by their clients. You must store the generated report files in a durable storage. The number of files to be stored can grow over time as the start-up company is expanding rapidly overseas and hence, they also need a way to distribute the reports faster to clients located across the globe. Which of the following is a cost-efficient and scalable storage option that you should use for this scenario?

Use Amazon S3 as the data storage and CloudFront as the CDN.

Use Amazon Redshift as the data storage and CloudFront as the CDN.

Use Amazon Glacier as the data storage and ElastiCache as the CDN.

Use multiple EC2 instance stores for data storage and ElastiCache as the CDN.

A company launched a website that accepts high-quality photos and turns them into a downloadable video montage. The website offers a free and a premium account that guarantees faster processing. All requests by both free and premium members go through a single SQS queue and then processed by a group of EC2 instances that generate the videos. The company needs to ensure that the premium users who paid for the service have higher priority than the free members. How should the company re-design its architecture to address this requirement?

Create an SQS queue for free members and another one for premium members. Configure your EC2 instances to consume messages from the premium queue first and if it is empty, poll from the free members' SQS queue.

Use Amazon S3 to store and process the photos and then generate the video montage afterward.

For the requests made by premium members, set a higher priority in the SQS queue so it will be processed first compared to the requests made by free members.

Use Amazon Kinesis to process the photos and generate the video montage in real-time.

A company has developed public APIs hosted in Amazon EC2 instances behind an Elastic Load Balancer. The APIs will be used by various clients from their respective on-premises data centers. A Solutions Architect received a report that the web service clients can only access trusted IP addresses whitelisted on their firewalls. What should you do to accomplish the above requirement?

Associate an Elastic IP address to a Network Load Balancer.

Associate an Elastic IP address to an Application Load Balancer.

Create an Alias Record in Route 53 which maps to the DNS name of the load balancer.

Create a CloudFront distribution whose origin points to the private IP addresses of your web servers.

An accounting application uses an RDS database configured with Multi-AZ deployments to improve availability. What would happen to RDS if the primary database instance fails?

The canonical name record (CNAME) is switched from the primary to standby instance.

A new database instance is created in the standby Availability Zone.

The IP address of the primary DB instance is switched to the standby DB instance.

The primary database instance will reboot.

A solutions architect is designing a cost-efficient, highly available storage solution for company data. One of the requirements is to ensure that the previous state of a file is preserved and retrievable if a modified version of it is uploaded. Also, to meet regulatory compliance, data over 3 years must be retained in an archive and will only be accessible once a year. How should the solutions architect build the solution?

Create an S3 Standard bucket with object-level versioning enabled and configure a lifecycle rule that transfers files to Amazon S3 Glacier Deep Archive after 3 years.

Create an S3 Standard bucket and enable S3 Object Lock in governance mode.

Create an S3 Standard bucket with S3 Object Lock in compliance mode enabled then configure a lifecycle rule that transfers files to Amazon S3 Glacier Deep Archive after 3 years.

Create a One-Zone-IA bucket with object-level versioning enabled and configure a lifecycle rule that transfers files to Amazon S3 Glacier Deep Archive after 3 years.

For data privacy, a healthcare company has been asked to comply with the Health Insurance Portability and Accountability Act (HIPAA). The company stores all its backups on an Amazon S3 bucket. It is required that data stored on the S3 bucket must be encrypted. What is the best option to do this? (Select TWO.)

Before sending the data to Amazon S3 over HTTPS, encrypt the data locally first using your own encryption keys.

Enable Server-Side Encryption on an S3 bucket to make use of AES-256 encryption.

Enable Server-Side Encryption on an S3 bucket to make use of AES-128 encryption.

Store the data in encrypted EBS snapshots.

Store the data on EBS volumes with encryption enabled instead of using Amazon S3.

A company is receiving semi-structured and structured data from different sources every day. The Solutions Architect plans to use big data processing frameworks to analyze vast amounts of data and access it using various business intelligence tools and standard SQL queries. Which of the following provides the MOST high-performing solution that fulfills this requirement?

Create an Amazon EMR cluster and store the processed data in Amazon Redshift.

Use Amazon Kinesis Data Analytics and store the processed data in Amazon DynamoDB.

Use AWS Glue and store the processed data in Amazon S3.

Create an Amazon EC2 instance and store the processed data in Amazon EBS.

A company has a dynamic web app written in MEAN stack that is going to be launched in the next month. There is a probability that the traffic will be quite high in the first couple of weeks. In the event of a load failure, how can you set up DNS failover to a static website?

Use Route 53 with the failover option to a static S3 website bucket or CloudFront

Add more servers in case the application fails.

Duplicate the exact application architecture in another region and configure DNS weightbased routing.

Enable failover to an application hosted in an on-premises data center.

A company is running a custom application in an Auto Scaling group of Amazon EC2 instances. Several instances are failing due to insufficient swap space. The Solutions Architect has been instructed to troubleshoot the issue and effectively monitor the available swap space of each EC2 instance. Which of the following options fulfills this requirement?

Install the CloudWatch agent on each instance and monitor the SwapUtilization metric.

Create a new trail in AWS CloudTrail and configure Amazon CloudWatch Logs to monitor your trail logs.

Create a CloudWatch dashboard and monitor the SwapUsed metric.

Enable detailed monitoring on each instance and monitor the SwapUtilization metric.

A start-up company has an EC2 instance that is hosting a web application. The volume of users is expected to grow in the coming months and hence, you need to add more elasticity and scalability in your AWS architecture to cope with the demand. Which of the following options can satisfy the above requirement for the given scenario? (Select TWO.)

Set up two EC2 instances and use Route 53 to route traffic based on a Weighted Routing Policy.

Set up two EC2 instances and then put them behind an Elastic Load balancer (ELB).

Set up an AWS WAF behind your EC2 Instance.

Set up an S3 Cache in front of the EC2 instance.

Set up two EC2 instances deployed using Launch Templates and integrated with AWS Glue.

A company plans to migrate its suite of containerized applications running on-premises to a container service in AWS. The solution must be cloud-agnostic and use an open-source platform that can automatically manage containerized workloads and services. It should also use the same configuration and tools across various production environments. What should the Solution Architect do to properly migrate and satisfy the given requirement?

Migrate the application to Amazon Elastic Kubernetes Service with EKS worker nodes.

Migrate the application to Amazon Container Registry (ECR) with Amazon EC2 instance worker nodes.

Migrate the application to Amazon Elastic Container Service with ECS tasks that use the Amazon EC2 launch type.

Migrate the application to Amazon Elastic Container Service with ECS tasks that use the AWS Fargate launch type.

A company recently adopted a hybrid architecture that integrates its on-premises data center to AWS cloud. You are assigned to configure the VPC and implement the required IAM users, IAM roles, IAM groups, and IAM policies. In this scenario, what is the best practice when creating IAM policies?

Use the principle of least privilege which means granting only the permissions required to perform a task.

Determine what users need to do and then craft policies for them that let the users perform those tasks including additional administrative operations.

Grant all permissions to any EC2 user.

Use the principle of least privilege which means granting only the least number of people with full root access.

A company hosted a web application on a Linux Amazon EC2 instance in the public subnet that uses a default network ACL. The instance uses a default security group and has an attached Elastic IP address. The network ACL has been configured to block all traffic to the instance. The Solutions Architect must allow incoming traffic on port 443 to access the application from any source. Which combination of steps will accomplish this requirement? (Select TWO.)

A. In the Network ACL, update the rule to allow inbound TCP connection on port 443 from source 0.0.0.0/0 and outbound TCP connection on port 32768 - 65535 to destination 0.0.0.0/0.

In the Security Group, add a new rule to allow TCP connection on port 443 from source 0.0.0.0/0.

In the Security Group, create a new rule to allow TCP connection on port 443 to destination 0.0.0.0/0.

In the Network ACL, update the rule to allow outbound TCP connection on port 32768 - 65535 to destination 0.0.0.0/0.

In the Network ACL, update the rule to allow both inbound and outbound TCP connection on port 443 from source 0.0.0.0/0 and to destination 0.0.0.0/0

A company has an e-commerce application that saves the transaction logs to an S3 bucket. You are instructed by the CTO to configure the application to keep the transaction logs for one month for troubleshooting purposes, and then afterward, purge the logs. What should you do to accomplish this requirement?

Configure the lifecycle configuration rules on the Amazon S3 bucket to purge the transaction logs after a month

Add a new bucket policy on the Amazon S3 bucket.

Create a new IAM policy for the Amazon S3 bucket that automatically deletes the logs after a month

Enable CORS on the Amazon S3 bucket which will enable the automatic monthly deletion of data

A Solutions Architect is working for a large insurance firm. To maintain compliance with HIPAA laws, all data that is backed up or stored on Amazon S3 needs to be encrypted at rest. In this scenario, what is the best method of encryption for the data, assuming S3 is being used for storing financial-related data? (Select TWO.)

Encrypt the data using your own encryption keys then copy the data to Amazon S3 over HTTPS endpoints.

Enable SSE on an S3 bucket to make use of AES-256 encryption.

Store the data in encrypted EBS snapshots.

Store the data on EBS volumes with encryption enabled instead of using Amazon S3.

Use AWS Shield to protect your data at rest.

A Solutions Architect working for a startup is designing a High Performance Computing (HPC) application which is publicly accessible for their customers. The startup founders want to mitigate distributed denialof-service (DDoS) attacks on their application. Which of the following options are not suitable to be implemented in this scenario? (Select TWO.)

Use Dedicated EC2 instances to ensure that each instance has the maximum performance possible.

Add multiple Elastic Fabric Adapters (EFA) to each EC2 instance to increase the network bandwidth.

Use an Application Load Balancer with Auto Scaling groups for your EC2 instances. Prevent direct Internet traffic to your Amazon RDS database by deploying it to a new private subnet.

Use an Amazon CloudFront service for distributing both static and dynamic content.

An application needs to retrieve a subset of data from a large CSV file stored in an Amazon S3 bucket by using simple SQL expressions. The queries are made within Amazon S3 and must only return the needed data. Which of the following actions should be taken?

Perform an S3 Select operation based on the bucket's name.

Perform an S3 Select operation based on the bucket's name and object's metadata.

Perform an S3 Select operation based on the bucket's name.

A Solutions Architect is designing a highly available environment for an application. She plans to host the application on EC2 instances within an Auto Scaling Group. One of the conditions requires data stored on root EBS volumes to be preserved if an instance terminates. What should be done to satisfy the requirement?

Configure ASG to suspend the health check process for each EC2 instance.

Enable the Termination Protection option for all EC2 instances.

Set the value of DeleteOnTermination attribute of the EBS volumes to False.

Use AWS DataSync to replicate root volume data to Amazon S3.

A large telecommunications company needs to run analytics against all combined log files from the Application Load Balancer as part of the regulatory requirements. Which AWS services can be used together to collect logs and then easily perform log analysis?

Amazon S3 for storing ELB log files and Amazon EMR for analyzing the log files

Amazon S3 for storing the ELB log files and an EC2 instance for analyzing the log files using a custom-built application.

Amazon DynamoDB for storing and EC2 for analyzing the logs.

Amazon EC2 with EBS volumes for storing and analyzing the log files.

A company deployed a high-performance computing (HPC) cluster that spans multiple EC2 instances across multiple Availability Zones and processes various wind simulation models. Currently, the Solutions Architect is experiencing a slowdown in their applications and upon further investigation, it was discovered that it was due to latency issues. Which is the MOST suitable solution that the Solutions Architect should implement to provide low-latency network performance necessary for tightly-coupled node-to-node communication of the HPC cluster?

Set up a cluster placement group within a single Availability Zone in the same AWS Region.

Set up AWS Direct Connect connections across multiple Availability Zones for increased bandwidth throughput and more consistent network experience.

Set up a spread placement group across multiple Availability Zones in multiple AWS Regions.

An investment bank is working with an IT team to handle the launch of the new digital wallet system. The applications will run on multiple EBS-backed EC2 instances which will store the logs, transactions, and billing statements of the user in an S3 bucket. Due to tight security and compliance requirements, the IT team is exploring options on how to safely store sensitive data on the EBS volumes and S3. Which of the below options should be carried out when storing sensitive data on AWS? (Select TWO.)

Enable Amazon S3 Server-Side or use Client-Side Encryption

Migrate the EC2 instances from the public to private subnet

An on-premises server is using an SMB network file share to store application data. The application produces around 50 MB of data per day but it only needs to access some of it for daily processes. To save . on storage costs, the company plans to copy all the application data to AWS, however, they want to retain the ability to retrieve data with the same low-latency access as the local file share. The company does not have the capacity to develop the needed tool for this operation. Which AWS service should the company use?

Amazon FSx for Windows File Server

AWS Virtual Private Network (VPN)

A company is setting up a cloud architecture for an international money transfer service to be deployed in AWS which will have thousands of users around the globe. The service should be available 24/7 to avoid . any business disruption and should be resilient enough to handle the outage of an entire AWS region. To meet this requirement, the Solutions Architect has deployed their AWS resources to multiple AWS Regions. He needs to use Route 53 and configure it to set all of the resources to be available all the time as much as possible. When a resource becomes unavailable, Route 53 should detect that it's unhealthy and stop . including it when responding to queries. Which of the following is the most fault-tolerant routing configuration that the Solutions Architect should . use in this scenario?

Configure an Active-Active Failover with Weighted routing policy.

Configure an Active-Active Failover with One Primary and One Secondary Resource.

Configure an Active-Passive Failover with Multiple Primary and Secondary Resources.

Configure an Active-Passive Failover with Weighted Records.

A company has a global online trading platform in which the users from all over the world regularly upload terabytes of transactional data to a centralized S3 bucket. What AWS feature should you use in your present system to improve throughput and ensure consistently fast data transfer to the Amazon S3 bucket, regardless of your user's location?

Amazon S3 Transfer Acceleration

Use CloudFront Origin Access Identity

In Amazon EC2, you can manage your instances from the moment you launch them up to their termination. You can flexibly control your computing costs by changing the EC2 instance state. Which of the following statements is true regarding EC2 billing? (Select TWO.)

You will be billed when your Reserved instance is in terminated state.

You will be billed when your On-Demand instance is preparing to hibernate with a stopping state.

You will be billed when your Spot instance is preparing to stop with a stopping state.

You will not be billed for any instance usage while an instance is not in the running state.

You will be billed when your On-Demand instance is in pending state.

A Solutions Architect for a global news company is configuring a fleet of EC2 instances in a subnet that currently is in a VPC with an Internet gateway attached. All of these EC2 instances can be accessed from the Internet. The architect launches another subnet and deploys an EC2 instance in it, however, the architect is not able to access the EC2 instance from the Internet. What could be the possible reasons for this issue? (Select TWO.)

The route table is not configured properly to send traffic from the EC2 instance to the Internet through the Internet gateway.

The Amazon EC2 instance does not have a public IP address associated with it.

The Amazon EC2 instance is not a member of the same Auto Scaling group.

The Amazon EC2 instance does not have an attached Elastic Fabric Adapter (EFA).

The route table is not configured properly to send traffic from the EC2 instance to the Internet through the customer gateway (CGW).

A company has clients all across the globe that access product files stored in several S3 buckets, which are behind each of their own CloudFront web distributions. They currently want to deliver their content to a specific client, and they need to make sure that only that client can access the data. Currently, all of their clients can access their S3 buckets directly using an S3 URL or through their CloudFront distribution. The Solutions Architect must serve the private content via CloudFront only, to secure the distribution of files. Which combination of actions should the Architect implement to meet the above requirements? (Select TWO.)

Restrict access to files in the origin by creating an origin access identity (OAI) and give it permission to read the files in the bucket.

Require the users to access the private content by using special CloudFront signed URLs or signed cookies.

Use S3 pre-signed URLs to ensure that only their client can access the files. Remove permission to use Amazon S3 URLs to read the files for anyone else.

Use AWS App Mesh to ensure that only their client can access the files.

Use AWS Cloud Map to ensure that only their client can access the files.

A company plans to use a durable storage service to store on-premises database backups to the AWS cloud. To move their backup data, they need to use a service that can store and retrieve objects through standard file storage protocols for quick recovery. Which of the following options will meet this requirement?

Use the AWS Storage Gateway file gateway to store all the backup data in Amazon S3.

Use Amazon EBS volumes to store all the backup data and attach it to an Amazon EC2 instance.

Use AWS Snowball Edge to directly backup the data in Amazon S3 Glacier.

Use the AWS Storage Gateway volume gateway to store the backup data and directly access it using Amazon S3 API actions.

A large insurance company has an AWS account that contains three VPCs (DEV, UAT and PROD) in the same region. UAT is peered to both PROD and DEV using a VPC peering connection. All VPCs have non-overlapping CIDR blocks. The company wants to push minor code releases from Dev to Prod to speed up time to market. Which of the following options helps the company accomplish this?

Create a new VPC peering connection between PROD and DEV with the appropriate routes.

Change the DEV and PROD VPCs to have overlapping CIDR blocks to be able to connect them.

Create a new entry to PROD in the DEV route table using the VPC peering connection as the target.

Do nothing. Since these two VPCs are already connected via UAT, they already have a connection to each other.

Due to the large volume of query requests, the database performance of an online reporting application significantly slowed down. The Solutions Architect is trying to convince her client to use Amazon RDS Read Replica for their application instead of setting up a Multi-AZ Deployments configuration. What are two benefits of using Read Replicas over Multi-AZ that the Architect should point out? (Select TWO.)

Provides asynchronous replication and improves the performance of the primary database by taking read-heavy database workloads from it.

It elastically scales out beyond the capacity constraints of a single DB instance for readheavy database workloads.

It enhances the read performance of your primary database by increasing its IOPS and accelerates its query processing via AWS Global Accelerator.

Allows both read and write operations on the read replica to complement the primary database.

Provides synchronous replication and automatic failover in the case of Availability Zone service failures.

AWS Part 3 (101-150)

Authored by Jean Leslie Laranjo

Other

Professional Development

Used 1+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

50 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company is building an internal application that serves as a repository for images uploaded by a couple of users. Whenever a user uploads an image, it would be sent to Kinesis Data Streams for processing before it is stored in an S3 bucket. If the upload was successful, the application will return a prompt informing the user that the operation was successful. The entire processing typically takes about 5 minutes to finish.
Which of the following options will allow you to asynchronously process the request to the application from upload request to Kinesis, S3, and return a reply in the most cost-effective manner?

Use a combination of SQS to queue the requests and then asynchronously process them using On-Demand EC2 Instances.

Replace the Kinesis Data Streams with an Amazon SQS queue. Create a Lambda function that will asynchronously process the requests.

Use a combination of Lambda and Step Functions to orchestrate service components and asynchronously process the requests.

Use a combination of SNS to buffer the requests and then asynchronously process them using On-Demand EC2 Instances.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A media company hosts large volumes of archive data that are about 250 TB in size on their internal servers. They have decided to move these data to S3 because of its durability and redundancy. The company currently has a 100 Mbps dedicated line connecting their head office to the Internet.
Which of the following is the FASTEST and the MOST cost-effective way to import all these data to Amazon S3?

Order multiple AWS Snowball devices to upload the files to Amazon S3.

Establish an AWS Direct Connect connection then transfer the data over to S3.

Use AWS Snowmobile to transfer the data over to S3.

Upload it directly to S3.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company is working with a government agency to improve traffic planning and maintenance of roadways to prevent accidents. The proposed solution is to manage the traffic infrastructure in real-time, alert traffic engineers and emergency response teams when problems are detected, and automatically change traffic signals to get emergency personnel to accident scenes faster by using sensors and smart devices.
Which AWS service will allow the developers of the agency to connect the smart devices to the cloudbased applications?

AWS Elastic Beanstalk

AWS CloudFormation

Amazon Elastic Container Service

AWS IoT Core

MULTIPLE SELECT QUESTION

45 sec • 1 pt

A commercial bank has a forex trading application. They created an Auto Scaling group of EC2 instances that allow the bank to cope with the current traffic and achieve cost-efficiency. They want the Auto Scaling group to behave in such a way that it will follow a predefined set of parameters before it scales down the number of EC2 instances, which protects the system from unintended slowdown or unavailability.
Which of the following statements are true regarding the cooldown period? (Select TWO.)

Its default value is 300 seconds.

It ensures that the Auto Scaling group does not launch or terminate additional EC2 instances before the previous scaling activity takes effect.

It ensures that the Auto Scaling group launches or terminates additional EC2 instances without any downtime.

Its default value is 600 seconds.

It ensures that before the Auto Scaling group scales out, the EC2 instances have ample time to cooldown.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

An organization needs to control the access for several S3 buckets. They plan to use a gateway endpoint to allow access to trusted buckets.
Which of the following could help you achieve this requirement?

Generate an endpoint policy for trusted S3 buckets.

Generate a bucket policy for trusted VPCs.

Generate an endpoint policy for trusted VPCs.

Generate a bucket policy for trusted S3 buckets.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company has an enterprise web application hosted on Amazon ECS Docker containers that use an Amazon FSx for Lustre filesystem for its high-performance computing workloads. A warm standby environment is running in another AWS region for disaster recovery. A Solutions Architect was assigned to design a system that will automatically route the live traffic to the disaster recovery (DR) environment only in the event that the primary application stack experiences an outage
What should the Architect do to satisfy this requirement?

Set up a CloudWatch Events rule to monitor the primary Route 53 DNS endpoint and create a custom Lambda function. Execute the ChangeResourceRecordSets API call using the function to initiate the failover to the secondary DNS record.

Set up a Weighted routing policy configuration in Route 53 by adding health checks on both the primary stack and the DR environment. Configure the network access control list and the route table to allow Route 53 to send requests to the endpoints specified in the health checks. Enable the Evaluate Target Health option by setting it to Yes.

Set up a failover routing policy configuration in Route 53 by adding a health check on the primary service endpoint. Configure Route 53 to direct the DNS queries to the secondary record when the primary resource is unhealthy. Configure the network access control list and the route table to allow Route 53 to send requests to the endpoints specified in the health checks. Enable the Evaluate Target Health option by setting it to Yes.

Set up a CloudWatch Alarm to monitor the primary Route 53 DNS endpoint and create a custom Lambda function. Execute the ChangeResourceRecordSets API call using the function to initiate the failover to the secondary DNS record.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A Solutions Architect is working for a company that uses Chef Configuration management in their data center. She needs to leverage their existing Chef recipes in AWS.
Which of the following services should she use?

AWS CloudFormation

AWS OpsWorks

Amazon Simple Workflow Service

AWS Elastic Beanstalk

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

10 questions

Probability Practice

Quiz

•

4th Grade

15 questions

Probability on Number LIne

Quiz

•

4th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

6 questions

Appropriate Chromebook Usage

Lesson

•

7th Grade

10 questions

Greek Bases tele and phon

Quiz

•

6th - 8th Grade

Discover more resources for Other

20 questions

Black History Month Trivia Game #1

Quiz

•

Professional Development

20 questions

90s Cartoons

Quiz

•

Professional Development

12 questions

Mardi Gras Trivia

Quiz

•

Professional Development

7 questions

Copy of G5_U5_L14_22-23

Lesson

•

KG - Professional Dev...

12 questions

Unit 5: Puerto Rico W1

Quiz

•

Professional Development

42 questions

LOTE_SPN2 5WEEK2 Day 4 We They Actividad 3

Quiz

•

Professional Development

15 questions

Balance Equations Hangers

Quiz

•

Professional Development

31 questions

Servsafe Food Manager Practice Test 2021- Part 1

Quiz

•

9th Grade - Professio...

AWS Part 3 (101-150)

An organization needs to control the access for several S3 buckets. They plan to use a gateway endpoint to allow access to trusted buckets. Which of the following could help you achieve this requirement?

A Solutions Architect is working for a company that uses Chef Configuration management in their data center. She needs to leverage their existing Chef recipes in AWS. Which of the following services should she use?

Access all questions and much more by creating a free account

Popular Resources on Wayground

Discover more resources for Other

An organization needs to control the access for several S3 buckets. They plan to use a gateway endpoint to allow access to trusted buckets.
Which of the following could help you achieve this requirement?

A Solutions Architect is working for a company that uses Chef Configuration management in their data center. She needs to leverage their existing Chef recipes in AWS.
Which of the following services should she use?