Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

AWS 3

Total questions: 63

Worksheet time: 5hrs 15mins

Name
Class
Date
1.

A company wants to host a web application on AWS that will communicate to a database within a VPC. The application should be highly available. What should a solutions architect recommend?

a)

A. Create two Amazon EC2 instances to host the web servers behind a load balancer, and then deploy the database on a large instance.

b)

B. Deploy a load balancer in multiple Availability Zones with an Auto Scaling group for the web servers, and then deploy Amazon RDS in multiple Availability Zones.

c)

C. Deploy a load balancer in the public subnet with an Auto Scaling group for the web servers, and then deploy the database on an Amazon EC2 instance in the private subnet.

d)

D. Deploy two web servers with an Auto Scaling group, configure a domain that points to the two web servers, and then deploy a database architecture in multiple Availability Zones.

2.

. A company's packaged application dynamically creates and returns single-use text files in response to user requests. The company is using Amazon CloudFront for distribution, but wants to future reduce data transfer costs. The company cannot modify the application's source code. What should a solution architect do to reduce costs?

a)

A. Use Lambda@Edge to compress the files as they are sent to users.

b)

B. Enable Amazon S3 Transfer Acceleration to reduce the response times.

c)

C. Enable caching on the CloudFront distribution to store generated files at the edge.

d)

D. Use Amazon S3 multipart uploads to move the files to Amazon S3 before returning them to users.

3.

. A database is on an Amazon RDS MySQL 5.6 Multi-AZ DB instance that experience highly dynamic reads. Application developers notice a significant slowdown when testing read performance from a secondary AWS Region. The developers want a solution that provides less than 1 second of read replication latency. What should the solutions architect recommend?

a)

A. Install MySQL on Amazon EC2 in the secondary Region.

b)

B. Migrate the database to Amazon Aurora with cross-Region replicas.

c)

C. Create another RDS for MySQL read replica in the secondary.

d)

D. Implement Amazon ElastiCache to improve database query performance.

4.

A company is planning to deploy an Amazon RDS DB instance running Amazon Aurora. The company has a backup retention policy requirement of 90 days. Which solution should a solutions architect recommend?

a)

A. Set the backup retention period to 90 days when creating the RDS DB instance.

b)

B. Configure RDS to copy automated snapshots to a user-managed Amazon S3 bucket with a lifecycle policy set to delete after 90 days.

c)

C. Create an AWS Backup plan to perform a daily snapshot of the RDS database with the retention set to 90 days. Create an AWS Backup job to schedule the execution of the backup plan daily.

d)

D. Use a daily scheduled event with Amazon CloudWatch Events to execute a custom AWS Lambda function that makes a copy of the RDS automated snapshot. Purge snapshots older than 90 days.

5.

A company currently has 250 TB of backup files stored in Amazon S3 in a vendor's proprietary format. Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3. The company wants to minimize the data transfer charges associated with this conversation. What should a solution architect do to accomplish this?

a)

A. Install the conversion software as an Amazon S3 batch operation so the data is transformed without leaving Amazon S3.

b)

B. Install the conversion software onto an on-premises virtual machine. Perform the transformation and re-upload the files to Amazon S3 from the virtual machine.

c)

C. Use AWS Snowball Edge device to expert the data and install the conversion software onto the devices. Perform the data transformation and re-upload the files to Amazon S3 from the Snowball Edge devices.

d)

D. Launch an Amazon EC2 instance in the same Region as Amazon S3 and install the conversion software onto the instance. Perform the transformation and re- upload the files to Amazon S3 from the EC2 instance

6.

A company is migrating a NoSQL database cluster to Amazon EC2. The database automatically replicates data to maintain at least three copies of the data. I/O throughput of the servers is the highest priority. Which instance type should a solutions architect recommend for the migration?

a)

A. Storage optimized instances with instance store

b)

B. Burstable general purpose instances with an Amazon Elastic Block Store (Amazon EBS) volume

c)

C. Memory optimized instances with Amazon Elastic Block Store (Amazon EBS) optimization enabled

d)

D. Compute optimized instances with Amazon Elastic Block Store (Amazon EBS) optimization enabled

7.

A company has a large Microsoft SharePoint deployment running on-premises that requires Microsoft Windows shared file storage. The company wants to migrate this workload to the AWS Cloud and is considering various storage options. The storage solution must be highly available and integrated with Active Directory for access control. Which solution will satisfy these requirements?

a)

A. Configure Amazon EFS storage and set the Active Directory domain for authentication.

b)

B. Create an SMB file share on an AWS Storage Gateway file gateway in two Availability Zones.

c)

C. Create an Amazon S3 bucket and configure Microsoft Windows Server to mount it as a volume.

d)

D. Create an Amazon FSx for Windows File Server file system on AWS and set the Active Directory domain for authentication.

8.

A company has a web application with sporadic usage patterns. There is heavy usage at the beginning of each month, moderate usage at the start of each week, and unpredictable usage during the week. The application consists of a web server and a MySQL database server running inside the data center. The company would like to move the application to the AWS Cloud, and needs to select a cost-effective database platform that will not require database modifications. Which solution will meet these requirements?

a)

A. Amazon DynamoDB

b)

B. Amazon RDS for MySQL

c)

C. MySQL-compatible Amazon Aurora Serverless

d)

D. MySQL deployed on Amazon EC2 in an Auto Scaling group

9.

. A solutions architect is designing the storage architecture for a new web application used for storing and viewing engineering drawings. All application components will be deployed on the AWS infrastructure. The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load. The application must be able to store petabytes of data. Which combination of storage and caching should the solutions architect use?

a)

A. Amazon S3 with Amazon CloudFront

b)

B. Amazon S3 Glacier with Amazon ElastiCache

c)

C. Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront

d)

D. AWS Storage Gateway with Amazon ElastiCache

10.

A solutions architect is creating an application that will handle batch processing of large amounts of data. The input data will be held in Amazon S3 and the output data will be stored in a different S3 bucket. For processing, the application will transfer the data over the network between multiple Amazon EC2 instances. What should the solutions architect do to reduce the overall data transfer costs?

a)

A. Place all the EC2 instances in an Auto Scaling group.

b)

B. Place all the EC2 instances in the same AWS Region.

c)

C. Place all the EC2 instances in the same Availability Zone.

d)

D. Place all the EC2 instances in private subnets in multiple Availability Zones.

11.

. A company hosts its core network services, including directory services and DNS, in its on promises data center. The data center is connected to the AWS Cloud using AWS Direct Connect (DX). Additional AWS accounts are planned that will require quick, cost-effective, and consistent access to these network services. What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?

a)

A. Create a DX connection in each new account. Route the network traffic to the on-premises servers.

b)

B. Configure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on-premises servers.

c)

C. Create a VPN connection between each new account and the DX VPC. Route the network traffic to the on-premises servers.

d)

D. Configure AWS Transit Gateway between the accounts. Assigns DX to the transit gateway and route network traffic to the on-premises servers.

12.

A company operates an ecommerce website on Amazon EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group. The site is experiencing performance issues related to a high request rate from illegitimate external systems with changing IP addresses. The security team is worried about potential DDoS attacks against the website. The company must block the illegitimate incoming requests in a way that has a minimal impact on legitimate users. What should a solutions architect recommend?

a)

A. Deploy Amazon Inspector and associate it with the ALB.

b)

B. Deploy AWS WAF, associate it with the ALB, and configure a rate-limiting rule.

c)

C. Deploy rules to the network ACLs associated with the ALB to block the incoming traffic.

d)

D. Deploy Amazon GuardDuty and enable rate-limiting protection when configuring GuardDuty.

13.

A-company receives structured and semi-structured data from various sources once every day. A solutions architect needs to design a solution that leverages big data processing frameworks. The data should be accessible using SQL queries and business intelligence tools. What should the solutions architect recommend to build the MOST high-performing solution?

a)

A. Use AWS Glue to process data and Amazon S3 to store data.

b)

B. Use Amazon EMR to process data and Amazon Redshift to store data.

c)

C. Use Amazon EC2 to process data and Amazon Elastic Block Store (Amazon EBS) to store data.

d)

D. Use Amazon Kinesis Data Analytics to process data and Amazon Elastic File System (Amazon EFS) to store data.

14.

A company is hosting an election reporting website on AWS for users around the world. The website uses Amazon EC2 instances for the web and application tiers in an Auto Scaling group with Application Load Balancers. The database tier uses an Amazon RDS for MySQL database. The website is updated with election results once an hour and has historically observed hundreds of users accessing the reports. The company is expecting a significant increase in demand because of upcoming elections in different countries. A solutions architect must improve the website's ability to handle additional demand while minimizing the need for additional EC2 instances. Which solution will meet these requirements?

a)

A. Launch an Amazon ElastiCache cluster to cache common database queries.

b)

B. Launch an Amazon CloudFront web distribution to cache commonly requested website content.

c)

C. Enable disk-based caching on the EC2 instances to cache commonly requested website content.

d)

D. Deploy a reverse proxy into the design using an EC2 instance with caching enabled for commonly requested website content.

15.

A company is running a three-tier web application to process credit card payments. The front-end user interface consists of static webpages. The application tier can have long-running processes. The database tier uses MySQL. The application is currently running on a single, general purpose large Amazon EC2 instance. A solutions architect needs to decouple the services to make the web application highly available. Which solution would provide the HIGHEST availability?

a)

A. Move static assets to Amazon CloudFront. Leave the application in EC2 in an Auto Scaling group. Move the database to Amazon RDS to deploy Multi-AZ.

b)

B. Move static assets and the application into a medium EC2 instance. Leave the database on the large instance. Place both instances in an Auto Scaling group.

c)

C. Move static assets to Amazon S3, Move the application to AWS Lambda with the concurrency limit set. Move the database to Amazon DynamoDB with on- demand enabled.

d)

D. Move static assets to Amazon S3. Move the application to Amazon Elastic Container Service (Amazon ECS) containers with Auto Scaling enabled, Move the database to Amazon RDS to deploy Multi-AZ

16.

A company delivers files in Amazon S3 to certain users who do not have AWS credentials. These users must be given access for a limited lime. What should a solutions architect do to securely meet these requirements?

a)

A. Enable public access on an Amazon S3 bucket.

b)

B. Generate a presigned URL to share with the users.

c)

C. Encrypt files using AWS KMS and provide keys to the users.

d)

D. Create and assign IAM roles that will grant GetObject permissions to the users.

17.

A company wants to run a hybrid workload for data processing. The data needs to be accessed by on-premises applications for local data processing using an NFS protocol, and must also be accessible from the AWS Cloud for further analytics and batch processing. Which solution will meet these requirements?

a)

A. Use an AWS Storage Gateway file gateway to provide file storage to AWS, then perform analytics on this data in the AWS Cloud.

b)

B. Use an AWS storage Gateway tape gateway to copy the backup of the local data to AWS, then perform analytics on this data in the AWS cloud.

c)

C. Use an AWS Storage Gateway volume gateway in a stored volume configuration to regularly take snapshots of the local data, then copy the data to AWS.

d)

D. Use an AWS Storage Gateway volume gateway in a cached volume configuration to back up all the local storage in the AWS cloud, then perform analytics on this data in the cloud.

18.

A company plans to store sensitive user data on Amazon S3. Internal security compliance requirement mandate encryption of data before sending it to Amazon S3. What should a solution architect recommend to satisfy these requirements?

a)

A. Server-side encryption with customer-provided encryption keys

b)

B. Client-side encryption with Amazon S3 managed encryption keys

c)

C. Server-side encryption with keys stored in AWS key Management Service (AWS KMS)

d)

D. Client-side encryption with a master key stored in AWS Key Management Service (AWS KMS)

19.

A solutions architect is moving the static content from a public website hosted on Amazon EC2 instances to an Amazon S3 bucket. An Amazon CloudFront distribution will be used to deliver the static assets. The security group used by the EC2 instances restricts access to a limited set of IP ranges. Access to the static content should be similarly restricted.Which combination of steps will meet these requirements? (Choose two.)

a)

A. Create an origin access identity (OAI) and associate it with the distribution. Change the permissions in the bucket policy so that only the OAI can read the objects.

b)

B. Create an AWS WAF web ACL that includes the same IP restrictions that exist in the EC2 security group. Associate this new web ACL with the CloudFront distribution.

c)

C. Create a new security group that includes the same IP restrictions that exist in the current EC2 security group. Associate this new security group with the CloudFront distribution.

d)

D. Create a new security group that includes the same IP restrictions that exist in the current EC2 security group. Associate this new security group with the S3 bucket hosting the static content.

e)

E. Create a new IAM role and associate the role with the distribution. Change the permissions either on the S3 bucket or on the files within the S3 bucket so that only the newly created IAM role has read and download permissions.

20.

A company is investigating potential solutions that would collect, process, and store users' service usage data. The business objective is to create an analytics capability that will enable the company to gather operational insights quickly using standard SQL queries. The solution should be highly available and ensure Atomicity, Consistency, Isolation, and Durability (ACID) compliance in the data tier. Which solution should a solutions architect recommend?

a)

A. Use Amazon DynamoDB transactions

b)

B. Create an Amazon Neptune database in a Multi AZ design

c)

C. Use a fully managed Amazon RDS for MySQL database in a Multi-AZ design

d)

D. Deploy PostgreSQL on an Amazon EC2 instance that uses Amazon EBS Throughput Optimized HDD storage.

21.

A company recently launched its website to serve content to its global user base. The company wants to store and accelerate the delivery of static content to its users by leveraging Amazon CloudFront with an Amazon EC2 instance attached as its origin. How should a solutions architect optimize high availability for the application?

a)

A. Use Lambda@Edge for CloudFront.

b)

B. Use Amazon S3 Transfer Acceleration for CloudFront.

c)

C. Configure another EC2 instance in a different Availability Zone as part of the origin group.

d)

D. Configure another EC2 instance as part of the origin server cluster in the same Availability Zone.

22.

An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B. Both are in separate. AWS accounts. The network administrator needs to design a solution to enable secure access to EC2 instance in VPC-B from VPC-A. The connectivity should not have a single point of failure or bandwidth concerns. Which solution will meet these requirements?

a)

A. Set up a VPC peering connection between VPC-A and VPC-B.

b)

B. Set up VPC gateway endpoints for the EC2 instance running in VPC-B.

c)

C. Attach a virtual private gateway to VPC-B and enable routing from VPC-A.

d)

D. Create a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-B.

23.

A company currently stores symmetric encryption keys in a hardware security module (HSM). A solution architect must design a solution to migrate key management to AWS. The solution should allow for key rotation and support the use of customer provided keys. Where should the key material be stored to meet these requirements?

a)

A. Amazon S3

b)

B. AWS Secrets Manager

c)

C. AWS Systems Manager Parameter store

d)

D. AWS Key Management Service (AWS KMS)

24.

A recent analysis of a company's IT expenses highlights the need to reduce backup costs. The company's chief information officer wants to simplify the on- premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. The company must preserve the existing investment in the on- premises backup applications and workflows. What should a solutions architect recommend?

a)

A. Set up AWS Storage Gateway to connect with the backup applications using the NFS interface.

b)

B. Set up an Amazon EFS file system that connects with the backup applications using the NFS interface.

c)

C. Set up an Amazon EFS file system that connects with the backup applications using the iSCSI interface.

d)

D. Set up AWS Storage Gateway to connect with the backup applications using the iSCSI-virtual tape library (VTL) interface.

25.

A company hosts an application on an Amazon EC2 instance that requires a maximum of 200 GB storage space. The application is used infrequently, with peaks during mornings and evenings. Disk I/O varies, but peaks at 3,000 IOPS. The chief financial officer of the company is concerned about costs and has asked a solutions architect to recommend the most cost-effective storage option that does not sacrifice performance. Which solution should the solutions architect recommend?

a)

A. Amazon EBS Cold HDD (sc1)

b)

B. Amazon EBS General Purpose SSD (gp2)

c)

C. Amazon EBS Provisioned IOPS SSD (io1)

d)

D. Amazon EBS Throughput Optimized HDD (st1)

26.

A company's application hosted on Amazon EC2 instances needs to access an Amazon S3 bucket. Due to data sensitivity, traffic cannot traverse the internet How should a solutions architect configure access?

a)

A. Create a private hosted zone using Amazon Route 53.

b)

B. Configure a VPC gateway endpoint for Amazon S3 in the VPC.

c)

C. Configure AWS PrivateLink between the EC2 instance and the S3 bucket.

d)

D. Set up a site-to-site VPN connection between the VPC and the S3 bucket.

27.

A company has two applications it wants to migrate to AWS. Both applications process a large set of files by accessing the same files at the same time. Both applications need to read the files with low latency. Which architecture should a solutions architect recommend for this situation?

a)

A. Configure two AWS Lambda functions to run the applications. Create an Amazon EC2 instance with an instance store volume to store the data.

b)

B. Configure two AWS Lambda functions to run the applications. Create an Amazon EC2 instance with an Amazon Elastic Block Store (Amazon EBS) volume to store the data.

c)

C. Configure one memory optimized Amazon EC2 instance to run both applications simultaneously. Create an Amazon Elastic Block Store (Amazon EBS) volume with Provisioned IOPS to store the data.

d)

D. Configure two Amazon EC2 instances to run both applications. Configure Amazon Elastic File System (Amazon EFS) with General Purpose performance mode and Bursting Throughput mode to store the data.

28.

An ecommerce company has noticed performance degradation of its Amazon RDS based web application. The performance degradation is attributed to an increase in the number of read-only SQL queries triggered by business analysts. A solution architect needs to solve the problem with minimal changes to the existing web application. What should the solution architect recommend?

a)

A. Export the data to Amazon DynamoDB and have the business analysts run their queries.

b)

B. Load the data into Amazon ElastiCache and have the business analysts run their queries.

c)

C. Create a read replica of the primary database and have the business analysts run their queries.

d)

D. Copy the data into an Amazon Redshift cluster and have the business analysts run their queries.

29.

A company is running a highly sensitive application on Amazon EC2 backed by an Amazon RDS database. Compliance regulations mandate that all personally identifiable information (PII) be encrypted at rest. Which solution should a solutions architect recommend to meet this requirement with the LEAST amount of changes to the infrastructure?

a)

A. Deploy AWS Certificate Manager to generate certificates. Use the certificates to encrypt the database volume.

b)

B. Deploy AWS CloudHSM, generate encryption keys, and use the customer master key (CMK) to encrypt database volumes.

c)

C. Configure SSL encryption using AWS Key Management Service customer master keys (AWS KMS CMKs) to encrypt database volumes.

d)

D. Configure Amazon Elastic Block Store (Amazon EBS) encryption and Amazon RDS encryption with AWS Key Management Service (AWS KMS) keys to encrypt instance and database volumes.

30.

A company running an on-premises application is migrating the application to AWS to increase its elasticity and availability. The current architecture uses a Microsoft SQL Server database with heavy read activity. The company wants to explore alternate database options and migrate database engines, if needed. Every 4 hours, the development team does a full copy of the production database to populate a test database. During this period, users experience latency. What should a solution architect recommend as replacement database?

a)

A. Use Amazon Aurora with Multi-AZ Aurora Replicas and restore from mysqldump for the test database.

b)

B. Use Amazon Aurora with Multi-AZ Aurora Replicas and restore snapshots from Amazon RDS for the test database.

c)

C. Use Amazon RDS for MySQL with a Multi-AZ deployment and read replicas, and use the standby instance for the test database.

d)

D. Use Amazon RDS for SQL Server with a Multi-AZ deployment and read replicas, and restore snapshots from RDS for the test database.

31.

. A company has enabled AWS CloudTrail logs to deliver log files to an Amazon S3 bucket for each of its developer accounts. The company has created a central AWS account for streamlining management and audit reviews. An internal auditor needs to access the CloudTrail logs, yet access needs to be restricted for all developer account users. The solution must be secure and optimized. How should a solutions architect meet these requirements?

a)

A. Configure an AWS Lambda function in each developer account to copy the log files to the central account. Create an IAM role in the central account for

b)

B. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket.

c)

C. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account. Create an IAM role in the central account for the auditor. Attach an IAM policy providing read-only permissions to the bucket.

d)

D. Configure an AWS Lambda function in the central account to copy the log files from the S3 bucket in each developer account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket.

32.

. A company has several business systems that require access to data stored in a file share. the business systems will access the file share using the Server Message Block (SMB) protocol. The file share solution should be accessible from both of the company's legacy on-premises environment and with AWS. Which services mod the business requirements? (Choose two.)

a)

A. Amazon EBS

b)

B. Amazon EFS

c)

C. Amazon FSx for Windows

d)

D. Amazon S3

e)

E. AWS Storage Gateway file gateway

33.

A company is using Amazon EC2 to run its big data analytics workloads. These variable workloads run each night, and it is critical they finish by the start of business the following day. A solutions architect has been tasked with designing the MOST cost-effective solution. Which solution will accomplish this?

a)

A. Spot Fleet

b)

B. Spot Instances

c)

C. Reserved Instances

d)

D. On-Demand Instances

34.

. A company has a Microsoft Windows-based application that must be migrated to AWS. This application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances. What should a solution architect do to accomplish this?

a)

A. Configure a volume using Amazon EFS. Mount the EPS volume to each Windows Instance.

b)

B. Configure AWS Storage Gateway in Volume Gateway mode. Mount the volume to each Windows Instance.

c)

C. Configure Amazon FSx for Windows File Server. Mount the Amazon FSx volume to each Windows Instance.

d)

D. Configure an Amazon EBS volume with the required size. Attach each EC2 instance to the volume. Mount the file system within the volume to each Windows instance.

35.

A company has created an isolated backup of its environment in another Region. The application is running in warm standby mode and is fronted by an Application Load Balancer (ALB). The current failover process is manual and requires updating a DNS alias record to point to the secondary ALB in another Region. What should a solution architect do to automate the failover process?

a)

A. Enable an ALB health check

b)

B. Enable an Amazon Route 53 health check.

c)

C. Crate an CNAME record on Amazon Route 53 pointing to the ALB endpoint.

d)

D. Create conditional forwarding rules on Amazon Route 53 pointing to an internal BIND DNS server.

36.

. A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to be read with as little latency as possible. A solutions architect needs to design an optimal solution that requires minimal application changes. Which method should the solutions architect select?

a)

A. Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAX endpoint.

b)

B. Add DynamoDB read replicas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.

c)

C. Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.

d)

D. Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB.

37.

A company is creating an architecture for a mobile app that requires minimal latency for its users. The company's architecture consists of Amazon EC2 instances behind an Application Load Balancer running in an Auto Scaling group. The EC2 instances connect to Amazon RDS. Application beta testing showed there was a slowdown when reading the data. However the metrics indicate that the EC2 instances do not cross any CPU utilization thresholds. How can this issue be addressed?

a)

A. Reduce the threshold for CPU utilization in the Auto Scaling group.

b)

B. Replace the Application Load Balancer with a Network Load Balancer.

c)

C. Add read replicas for the RDS instances and direct read traffic to the replica.

d)

D. Add Multi-AZ support to the RDS instances and direct read traffic to the new EC2 instance.

38.

A company has implemented one of its microservices on AWS Lambda that accesses an Amazon DynamoDB table named Books. A solutions architect is designing an IAM policy to be attached to the Lambda function's IAM role, giving it access to put, update, and delete items in the Books table. The IAM policy must prevent function from performing any other actions on the Books table or any other.Which IAM policy would fulfill these needs and provide the LEAST privileged access?

a)
b)
c)
d)
39.

. A company hosts its website on Amazon S3. The website serves petabytes of outbound traffic monthly, which accounts for most of the company's AWS costs. What should a solutions architect do to reduce costs?

a)

A. Configure Amazon CloudFront with the existing website as the origin.

b)

B. Move the website to Amazon EC2 with Amazon EBS volumes for storage.

c)

C. Use AWS Global Accelerator and specify the existing website as the endpoint.

d)

D. Rearchitect the website to run on a combination of Amazon API Gateway and AWS Lambda.

40.

A company runs a website on Amazon EC2 instances behind an ELB Application Load Balancer. Amazon Route 53 is used for the DNS. The company wants to set up a backup website with a message including a phone number and email address that users can reach if the primary website is down. How should the company deploy this solution?

a)

A. Use Amazon S3 website hosting for the backup website and Route 53 failover routing policy.

b)

B. Use Amazon S3 website hosting for the backup website and Route 53 latency routing policy.

c)

C. Deploy the application in another AWS Region and use ELB health checks for failover routing.

d)

D. Deploy the application in another AWS Region and use server-side redirection on the primary website.

41.

. A media company is evaluating the possibility of moving its systems to the AWS Cloud. The company needs at least 10 TB of storage with the maximum possible I/O performance for video processing. 300 TB of very durable storage for storing media content, and 900 TB of storage to meet requirements for archival media that is not in use anymore. Which set of services should a solutions architect recommend to meet these requirements?

a)

A. Amazon EBS for maximum performance, Amazon S3 for durable data storage, and Amazon S3 Glacier for archival storage.

b)

B. Amazon EBS for maximum performance. Amazon EFS for durable data storage, and Amazon S3 Glacier for archival storage

c)

C. Amazon EC2 instance store for maximum performance, Amazon EFS for durable data storage, and Amazon S3 for archival storage

d)

D. Amazon EC2 instance store for maximum performance, Amazon S3 for durable data storage, and Amazon S3 Glacier for archival storage

42.

A company uses Amazon S3 as its object storage solution. The company has thousands of S3 buckets it uses to store data. Some of the S3 bucket have data that is accessed less frequently than others. A solutions architect found that lifecycle policies are not consistently implemented or are implemented partially? resulting in data being stored in high-cost storage. Which solution will lower costs without compromising the availability of objects?

a)

A. Use S3 ACLs.

b)

B. Use Amazon Elastic Block Store (EBS) automated snapshots.

c)

C. Use S3 Intelligent-Tiering storage.

d)

D. Use S3 One Zone-infrequent Access (S3 One Zone-IA).

43.

An application is running on Amazon EC2 instances. Sensitive information required for the application is stored in an Amazon S3 bucket. The bucket needs to be protected from internet access while only allowing services within the VPC access to the bucket. Which combination of actions should solutions archived take to accomplish this? (Choose two.)

a)

A. Create a VPC endpoint for Amazon S3.

b)

B. Enable server access logging on the bucket.

c)

C. Apply a bucket policy to restrict access to the S3 endpoint.

d)

D. Add an S3 ACL to the bucket that has sensitive information.

e)

E. Restrict users using the IAM policy to use the specific bucket.

44.

A web application runs on Amazon EC2 instances behind an Application Load Balancer. The application allows users to create custom reports of historical weather data. Generating a report can take up to 5 minutes. These long-running requests use many of the available incoming connections, making the system unresponsive to other users. How can a solutions architect make the system more responsive?

a)

A. Use Amazon SQS with AWS Lambda to generate reports.

b)

B. Increase the idle timeout on the Application Load Balancer to 5 minutes.

c)

C. Update the client-side application code to increase its request timeout to 5 minutes.

d)

D. Publish the reports to Amazon S3 and use Amazon CloudFront for downloading to the user.

45.

A solutions architect must create a highly available bastion host architecture. The solution needs to be resilient within a single AWS Region and should require only minimal effort to maintain. What should the solutions architect do to meet these requirements?

a)

A. Create a Network Load Balancer backed by an Auto Scaling group with a UDP listener.

b)

B. Create a Network Load Balancer backed by a Spot Fleet with instances in a group with instances in a partition placement group.

c)

C. Create a Network Load Balancer backed by the existing serves in different Availability Zones as the target.

d)

D. Create a Network Load Balancer backed by an Auto Scaling with instances in multiple Availability zones as the target

46.

A three-tier web application processes orders from customers. The web tier consists of Amazon EC2 instances behind an Application Load Balancer, a middle tier of three EC2 instances decoupled from the web tier using Amazon SQS. and an Amazon DynamoDB backend. At peak times, customers who submit orders using the site have to wait much longer than normal to receive confirmations due to lengthy processing times. A solutions architect needs to reduce these processing times. Which action will be MOST effective in accomplishing this?

a)

A. Replace the SQS queue with Amazon Kinesis Data Firehose.

b)

B. Use Amazon ElastiCache for Redis in front of the DynamoDB backend tier.

c)

C. Add an Amazon CloudFront distribution to cache the responses for the web tier.

d)

D. Use Amazon EC2 Auto Scaling to scale out the middle tier instances based on the SOS queue depth.

47.

A company relies on an application that needs at least 4 Amazon EC2 instances during regular traffic and must scale up to 12 EC2 instances during peak loads. The application is critical to the business and must be highly available. Which solution will meet these requirements?

a)

A. Deploy the EC2 instances in an Auto Scaling group Set the minimum to 4 and the maximum to M, with 2 in Availability Zone A and 2 in Availability Zone B.

b)

B. Deploy the EC2 instances in an Auto Scaling group Set the minimum to 4 and the maximum to 12, with all 4 in Availability Zone A.

c)

C. Deploy the EC2 instances in an Auto Scaling group Set the minimum to 8 and the maximum to 12, with 4 in Availability Zone A and 4 in Availability Zone B.

d)

D. Deploy the EC2 instances in an Auto Scaling group Set the minimum to 8 and the maximum to 12 with all 8 in Availability Zone A.

48.

. A solutions architect must design a solution for a persistent database that is being migrated from on-premises to AWS. The database requires 64,000 IOPS according to the database administrator. If possible, the database administrator wants to use a single Amazon Elastic Block Store (Amazon EBS) volume to host the database instance. Which solution effectively meets the database administrator's criteria?

a)

A. Use an instance from the I3 I/O optimized family and leverage local ephemeral storage to achieve the IOPS requirement.

b)

B. Create an Nitro-based Amazon EC2 instance with an Amazon EBS Provisioned IOPS SSD (io1) volume attached. Configure the volume to have 64,000 IOPS.

c)

C. Create and map an Amazon Elastic File System (Amazon EFS) volume to the database instance and use the volume to achieve the required IOPS for the database.

d)

D. Provision two volumes and assign 32,000 IOPS to each. Create a logical volume at the operating system level that aggregates both volumes to achieve the IOPS requirements.

49.

A solutions architect is designing an architecture for a new application that requires low network latency and high network throughput between Amazon EC2 instances. Which component should be included in the architectural design?

a)

A. An Auto Scaling group with Spot Instance types.

b)

B. A placement group using a cluster placement strategy.

c)

C. A placement group using a partition placement strategy.

d)

D. An Auto Scaling group with On-Demand instance types.

50.

A company has global users accessing an application deployed in different AWS Regions, exposing public static IP addresses. The users are experiencing poor performance when accessing the application over the internet. What should a solutions architect recommend to reduce internet latency?

a)

A. Set up AWS Global Accelerator and add endpoints.

b)

B. Set up AWS Direct Connect locations in multiple Regions.

c)

C. Set up an Amazon CloudFront distribution to access an application.

d)

D. Set up an Amazon Route 53 geoproximity routing policy to route traffic.

51.

. A company wants to migrate a workload to AWS. The chief information security officer requires that all data be encrypted at rest when stored in the cloud. The company wants complete control of encryption key lifecycle management. The company must be able to immediately remove the key material and audit key usage independently of AWS CloudTrail. The chosen services should integrate with other storage services that will be used on AWS. Which services satisfies these security requirements?

a)

A. AWS CloudHSM with the CloudHSM client

b)

B. AWS Key Management Service (AWS KMS) with AWS CloudHSM

c)

C. AWS Key Management Service (AWS KMS) with an external key material origin

d)

D. AWS Key Management Service (AWS KMS) with AWS managed customer master keys (CMKs)

52.

A company recently deployed a two-tier application in two Availability Zones in the us-east-1 Region. The databases are deployed in a private subnet while the web servers are deployed in a public subnet. An internet gateway is attached to the VPC. The application and database run on Amazon EC2 instances. The database servers are unable to access patches on the internet. A solutions architect needs to design a solution that maintains database security with the least operational overhead. Which solution meets these requirements?

a)

A. Deploy a NAT gateway inside the public subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route.

b)

B. Deploy a NAT gateway inside the private subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route.

c)

C. Deploy two NAT instances inside the public subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.

d)

D. Deploy two NAT instances inside the private subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.

53.

A company has an application with a REST-based Interface that allows data to be received in near-real time from a third-party vendor Once received, the application processes and stores the data for further analysis. The application Is running on Amazon EC2 instances. The third-party vendor has received many 503 Service Unavailable Errors when sending data to the application. When the data volume spikes, the compute capacity reaches its maximum limit and the application is unable to process all requests. Which design should a solutions architect recommend to provide a more scalable solution?

a)

A. Use Amazon Kinesis Data Streams to ingest the data. Process the data using AWS Lambda functions.

b)

B. Use Amazon API Gateway on top of the existing application. Create a usage plan with a quota limit for the third-party vendor.

c)

C. Use Amazon Simple Notification Service (Amazon SNS) to ingest the data. Put the EC2 instances in an Auto Scaling group behind an Application Load Balancer.

d)

D. Repackage the application as a container. Deploy the application using Amazon Elastic Container Service (Amazon ECS) using the EC2 launch type with an Auto Scaling group.

54.

A solutions architect needs to design a low-latency solution for a static single-page application accessed by users utilizing a custom domain name. The solution must be serverless, encrypted in transit, and cost-effective. Which combination of AWS services and features should the solutions architect use? (Choose two.)

a)

A. Amazon S3

b)

B. Amazon EC2

c)

C. AWS Fargate

d)

D. Amazon CloudFront

e)

E. Elastic Load Balancer

55.

A company is migrating to the AWS Cloud. A file server is the first workload to migrate. Users must be able to access the file share using the Server Message Block (SMB) protocol. Which AWS managed service meets these requirements?

a)

A. Amazon EBS

b)

B. Amazon EC2

c)

C. Amazon FSx

d)

D. Amazon S3

56.

A solutions architect is designing a customer-facing application. The application is expected to have a variable amount of reads and writes depending on the time of year and clearly defined access patterns throughout the year. Management requires that database auditing and scaling be managed in the AWS Cloud. The Recovery Point Objective (RPO) must be less than 5 hours. Which solutions can accomplish this? (Choose two.)

a)

A. Use Amazon DynamoDB with auto scaling. Use on-demand backups and AWS CloudTrail.

b)

B. Use Amazon DynamoDB with auto scaling. Use on-demand backups and Amazon DynamoDB Streams.

c)

C. Use Amazon Redshift Configure concurrency scaling. Enable audit logging. Perform database snapshots every 4 hours.

d)

D. Use Amazon RDS with Provisioned IOPS. Enable the database auditing parameter. Perform database snapshots every 5 hours.

e)

E. Use Amazon RDS with auto scaling. Enable the database auditing parameter. Configure the backup retention period to at least 1 day.

57.

A company has migrated an on-premises Oracle database to an Amazon RDS for Oracle Multi-AZ DB instance in the us-east-l Region. A solutions architect is designing a disaster recovery strategy to have the database provisioned in the us-west-2 Region in case the database becomes unavailable in the us-east-1 Region. The design must ensure the database is provisioned in the us-west-2 Region in a maximum of 2 hours, with a data loss window of no more than 3 hours. How can these requirements be met?

a)

A. Edit the DB instance and create a read replica in us-west-2. Promote the read replica to master in us-west-2 in case the disaster recovery environment needs to be activated.

b)

B. Select the multi-Region option to provision a standby instance in us-west-2. The standby instance will be automatically promoted to master in us-west-2 in case the disaster recovery environment needs to be created.

c)

C. Take automated snapshots of the database instance and copy them to us-west-2 every 3 hours. Restore the latest snapshot to provision another database instance in us-west-2 in case the disaster recovery environment needs to be activated.

d)

D. Create a multimaster read/write instances across multiple AWS Regions Select VPCs in us-east-1 and us-west-2 to make that deployment. Keep the master read/write instance in us-west-2 available to avoid having to activate a disaster recovery environment.

58.

A monolithic application was recently migrated to AWS and is now running on a single Amazon EC2 instance. Due to application limitations, it is not possible to use automatic scaling to scale out the application. The chief technology officer (CTO) wants an automated solution to restore the EC2 instance in the unlikely event the underlying hardware fails. What would allow for automatic recovery of the EC2 instance as quickly as possible?

a)

A. Configure an Amazon CloudWatch alarm that triggers the recovery of the EC2 instance if it becomes impaired.

b)

B. Configure an Amazon CloudWatch alarm to trigger an SNS message that alerts the CTO when the EC2 instance is impaired.

c)

C. Configure AWS CloudTrail to monitor the health of the EC2 instance, and if it becomes impaired, triggered instance recovery.

d)

D. Configure an Amazon EventBridge event to trigger an AWS Lambda function once an hour that checks the health of the EC2 instance and triggers instance recovery if the EC2 instance is unhealthy.

59.

A solutions architect is working on optimizing a legacy document management application running on Microsoft Windows Server in an on-premises data center. The application stores a large number of files on a network file share. The chief information officer wants to reduce the on-premises data center footprint and minimize storage costs by moving on-premises storage to AWS. What should the solutions architect do to meet these requirements?

a)

A. Set up an AWS Storage Gateway file gateway.

b)

B. Set up Amazon Elastic File System (Amazon EFS)

c)

C. Set up AWS Storage Gateway as a volume gateway

d)

D. Set up an Amazon Elastic Block Store (Amazon EBS) volume.

60.

A solution architect is designing a hybrid application using the AWS cloud. The network between the on-premises data center and AWS will use an AWS Direct Connect (DX) connection. The application connectivity between AWS and the on-premises data center must be highly resilient. Which DX configuration should be implemented to meet these requirements?

a)

A. Configure a DX connection with a VPN on top of it.

b)

B. Configure DX connections at multiple DX locations.

c)

C. Configure a DX connection using the most reliable DX partner.

d)

D. Configure multiple virtual interfaces on top of a DX connection.

61.

. A company runs an application on Amazon EC2 Instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region. Which solution should be implemented to ensure that there are no disruptions to Internet connectivity?

a)

A. Deploy a NAT Instance in a private subnet of each Availability Zone.

b)

B. Deploy a NAT gateway in a public subnet of each Availability Zone.

c)

C. Deploy a transit gateway in a private subnet of each Availability Zone.

d)

D. Deploy an internet gateway in a public subnet of each Availability Zone.

62.

Application developers have noticed that a production application is very slow when business reporting users run large production reports against the Amazon RDS instance backing the application. The CPU and memory utilization metrics for the RDS instance do not exceed 60% while the reporting queries are running. The business reporting users must be able to generate reports without affecting the applications performance. Which action will accomplish this?

a)

A. Increase the size of the RDS instance

b)

B. Create a read replica and connect the application to it.

c)

C. Enable multiple Availability Zones on the RDS instance

d)

D. Create a read replication and connect the business reports to it.

63.

A company is running a two-tier ecommerce website using services. The current architect uses a publish-facing Elastic Load Balancer that sends traffic to Amazon EC2 instances in a private subnet. The static content is hosted on EC2 instances, and the dynamic content is retrieved from a MYSQL database. The application is running in the United States. The company recently started selling to users in Europe and Australia. A solution architect needs to design solution so their international users have an improved browsing experience. Which solution is MOST cost-effective?

a)

A. Host the entire website on Amazon S3.

b)

B. Use Amazon CloudFront and Amazon S3 to host static images.

c)

C. Increase the number of public load balancers and EC2 instances.

d)

D. Deploy the two-tier website in AWS Regions in Europe and Australia.