AOS_2024_Tema2_Evaluacion_Individual

A company is building a machine learning pipeline on AWS and is using Amazon S3 to store the training data. They need a search mechanism to quickly find and retrieve specific datasets based on metadata such as tags, creation date, and type of data. What is the most efficient solution?

• Use Amazon Elasticsearch Service (ES) to index and search the metadata for the training data stored in S3.
• Use Amazon Redshift to store the metadata and create indexes for fast querying.
• Use AWS Glue to create a data catalog and use AWS Athena to query the metadata in S3.
• Store the metadata in Amazon DynamoDB and perform queries based on the dataset tags.

A company needs to migrate a legacy application from an on-premises data center to AWS. The application requires shared file storage between multiple servers for data processing. Which solution offers the best scalability and manageability for this shared file storage?

• Use Amazon EFS to provide shared storage for the servers.
• Use Amazon S3 for shared file storage across the instances.
• Set up Amazon FSx for Windows File Server to handle shared file storage.
• Migrate the file storage to Amazon EC2 instance store volumes.

A company is setting up a secure file storage solution using Amazon S3 and wants to ensure that only specific users within their organization can upload or delete files. Additionally, they need to protect sensitive data using encryption. Which combination of actions should the solutions architect implement? (Select TWO)

• 1. Use Amazon S3 Object Lock to prevent unauthorized file deletions.
• 2. Create an IAM policy allowing only specific users to perform S3 PutObject and DeleteObject actions.
• 3. Enable server-side encryption using AWS KMS keys (SSE-KMS).
• 4. Use an AWS S3 Bucket Policy to allow public read access to files.
• 5. Enable versioning on the S3 bucket.

A development team needs to store logs in Amazon S3 and ensure that they are immutable for compliance reasons. The team wants to ensure that the logs cannot be deleted or overwritten for a period of 7 years. How can this be achieved using S3 features? (Select TWO)

• 1. Enable S3 Object Lock with a retention period of 7 years.
• 2. Enable S3 Versioning and configure MFA Delete for the bucket.
• 3. Use a lifecycle policy to archive logs to Glacier after 7 years.
• 4. Set up a bucket policy to deny all delete operations.
• 5. Enable cross-region replication to a backup S3 bucket for redundancy.

A financial company wants to store sensitive transaction records in Amazon S3 but needs to meet strict data access regulations. They want to ensure that all data is encrypted at rest and accessible only to their AWS environment. What actions should they take to meet these requirements? (Select TWO)

• 1. Enable server-side encryption with Amazon S3-managed keys (SSE-S3).
• 2. Configure bucket policies to allow access only from specific VPC endpoints.
• 3. Use client-side encryption and manage keys within the application.
• 4. Enable Amazon S3 Transfer Acceleration for fast data transfer.
• 5. Use server-side encryption with AWS KMS (SSE-KMS) and specify customer-managed keys (CMKs).

Case 4: An organization needs to configure an Amazon S3 bucket to automatically delete data that is no longer needed after a specific period. They also want to save on storage costs for data that is rarely accessed. Which actions will help meet these requirements? (Select TWO)

• 1. Enable object versioning to retain historical copies of objects.
• 2. Create a lifecycle rule to transition objects to S3 Glacier after 90 days.
• 3. Enable multi-factor authentication (MFA) delete to prevent accidental deletions.
• 4. Create a lifecycle rule to transition objects to S3 Standard-IA after 30 days.
• 5. Use S3 Intelligent-Tiering for cost optimization based on access patterns.

A media company needs to store large video files in Amazon S3 and make them available for download globally. They also need to ensure that the videos are optimized for cost based on varying levels of access and automatically managed. Some videos will be accessed frequently right after upload, but others will become less popular over time and rarely accessed. What is the most efficient way to manage the storage of these videos while keeping costs low? (Select TWO)

• 1. Enable S3 Intelligent-Tiering to automatically optimize costs based on access patterns.
• 2. Use Amazon S3 Glacier for all video storage to save costs.
• 3. Use a lifecycle policy to transition videos to S3 Glacier after 30 days of upload.
• 4. Store all videos in Amazon S3 Standard for immediate access.
• 5. Create a lifecycle rule to transition videos to S3 Standard-IA after 30 days and to S3 Glacier after 90 days.

A healthcare organization stores medical records in Amazon S3 and needs to comply with regulatory requirements that require data to be encrypted, stored securely, and only accessible by authorized users. They also need to keep an audit log of all access to the records for a period of 10 years. What are the best ways to configure this setup to ensure compliance with security and auditing requirements?

• 1. Enable server-side encryption with AWS KMS and use customer-managed keys (SSE-KMS).
• 2. Enable S3 Object Lock in compliance mode for 10 years to prevent deletions and modifications.
• 3. Enable S3 bucket access logging to track access to the records.
• 4. Use Amazon S3 Intelligent-Tiering to optimize costs based on access patterns.
• 5. Enable cross-region replication to a backup bucket for long-term audit log storage.

A company needs to store millions of small files for their application. The files must be accessed frequently, and the storage solution should be optimized for low latency and high durability. Which storage solution is best for this use case?

• Store the files in Amazon S3 and use Amazon CloudFront for caching.
• Use Amazon EBS volumes attached to EC2 instances to store the files.
• Store the files in Amazon S3 with Intelligent Tiering enabled.
• Use Amazon DynamoDB to store the files in a key-value format.

A financial services company must store encrypted backups of sensitive customer data in the AWS cloud. The solution must allow the company to manage their encryption keys on-premises and comply with strict regulatory requirements. Which AWS service combination should they use?

• Use Amazon S3 with Server-Side Encryption and Customer-Provided Keys (SSE-C).
• Store the backups in Amazon EBS volumes encrypted using AWS KMS.
• Use Amazon CloudHSM to manage encryption keys and encrypt S3 objects.
• Store the backups in Amazon S3 with Server-Side Encryption and AWS KMS (SSE-KMS).