You have an internal data warehouse running custom database software on an on-premises server at your work. You need to migrate this application to AWS. Unfortunately, your application is not compatible with Redshift, so you need to run this on a custom EC2 instance with the appropriate EBS volumes. You need to use an EBS volume that can handle large, sequential I/O operations for this infrequently accessed data. What is the most cost-effective EBS volume to meet this requirement?

You are migrating a media server to the AWS cloud that contains only images and video files. The server needs to be publicly accessible globally and you must keep costs to a minimum. What is the most cost-effective solution?

Which architecture below fulfills the requirement of being serverless while maintaining the most cost-effective solution?

A small startup company has begun using AWS for all of its IT infrastructure. The company has two AWS Solutions Architects, and they are very proficient with AWS deployments. They want to choose a deployment service that best meets the given requirements. Those requirements include version control of their infrastructure documentation and granular control of all of the services to be deployed. Which AWS service would best meet these requirements?

You are building an application on EC2 that will require access to S3 and DynamoDB. You need to provide access to these services in the most secure way possible to your developers. What should you use to achieve this?

You work for a security company with a custom VPC and S3 buckets. You plan on allowing access to your trusted S3 buckets using a gateway endpoint. Which of the following would assist with this?

Which of the following services is NOT included in AWS Free Tier?

You have recently terminated an employee from the company due to gross misconduct. Unfortunately, you discover they have been using a backdoor account to access your internal web application. They have been doing this from their home, which has a static IP address. You need to block access from this IP address immediately and then fix the backdoor. What is the fastest approach to achieve this?

You work for an online photography startup that allows users to sell their photos to customers around the world. The files are being stored in an on-premises server that is fast running out of space. You need a durable place to store your pictures while being able to simultaneously deliver content globally and in an efficient manner. What AWS services can help you achieve this?

You host a serverless website on AWS using API Gateway, Lambda, and DynamoDB. It's highly resilient. However, recently, database updates seem to be getting lost between the client and the end DynamoDB table. You need to trace what is happening. What AWS service should you use to troubleshoot this issue?

You have taken over management of several instances in the company AWS environment. You want to quickly retrieve data about the instances such as instance ID, public keys, and public IP address. A URL command can be used to do this. What can you append to the URL http://169.254.169.254/latest/ to retrieve this data?

You work for a doctor's surgery in New York City that has thousands of patients. The patients data is stored on-premises, but the backups need to be stored on S3 in the most secure way possible. Which of the following is the most secure way of achieving this?

Which of the following statements regarding AWS Free Tier are true?

(Choose3)

Your marketing team within your organization has decided they want to begin a large-scale marketing campaign for customers. They have requested your help in designing a solution to help them best achieve their goals. Some requirements include the ability to group customers based on specific criteria for targeted messaging, ease of use, and the ability to utilize machine learning to better understand future engagements based on the current campaign activities. Which AWS service best fits this scenario?

You work for an insurance company that specializes in insuring pensioners. As part of their IT overhaul, they are looking to move to the AWS Cloud and want to automate a lot of their business processes to drive efficiencies. Because a lot of their customers are elderly, most insurance application forms are filled out by hand. These can be scanned as images; however, you then need to find a way to convert these images into text for further processing. Which AWS service would you recommend to achieve this?

You work for a media company that processes large volumes of images. The processing is done by some high performance compute instances in EC2 in a custom VPC that you architected. The files are processed and then stored in S3; however, you notice this is taking longer than you anticipated. You investigate and discover that the EC2 instances are uploading the files via the public internet to S3. You need to design a solution that bypasses the public internet. What solution should you implement?

You have a new intern starting at a security company who works on the developer team. She has access to the developer account but needs temporary write access to S3 in your production account. What is the most secure way to provide the intern with access?

You are developing an application for a customer that will be hosted on AWS. They will access the application via their corporate headquarters using the internet. The network connection relies on a list of whitelisted IP addresses, so you will need a static IP address to access this application; however, the application requires many EC2 instances. What are the best ways to achieve this and still maintain a high level of performance?

(Choose2)

You work for a government agency that needs to host a sensitive internal application on AWS. They have very strict encryption requirements, so they must control all keys and have root access to the HSM that generates the keys. What AWS service should they use?

You run a cryptocurrency application that allows you to trade cryptocurrency with hard currency. This application runs concurrently with another application where the prices of the currency are time indexed, and these indexes are saved to Amazon Redshift for later data analysis. Both applications consume this data from the same Amazon Kinesis Data Stream. You notice, however, that for both applications, there are lots of examples where a shard iterator expires unexpectedly. When you try and troubleshoot this, you notice that the DynamoDB table used by Kinesis does not have enough write capacity to store the incoming data. What should you do?

You have started as the chief security officer at a major internet security company. They are migrating to AWS and you are tasked with creating the required IAM users, IAM roles, IAM groups, and IAM policies for the entire company. What is the best practice when creating IAM policies?

Your web application is designed to encourage people to vote for your chosen celebrity at a major national talent contest. Unfortunately, some hackers have managed to deploy a SQL injection against your application, and they have managed to drop your MySQL database. You have a backup, so you haven't lost any data, but you need to prevent this from happening again. How should you complete this?

You currently host a website on-premises that uses RabbitMQ, but you are now migrating to AWS. You need something that is resilient, can act as an alternative asynchronous service, and also supports the MQTT messaging protocol. What service should you use?

Your development team leverages Amazon ECS Fargate to run their containerized application in AWS. At this time, they are leveraging an internal image registry on Amazon EC2 instances for hosting image repositories due to requiring image scanning for software vulnerabilities. You have suggested they explore other options to avoid the operational overhead and unnecessary costs associated with the solution. What solution best fits the needs for the scenario?

You are launching a simple static website that uses HTML, CSS, and some JavaScript that promotes a very popular Hollywood blockbuster. You are expecting a crazy amount of traffic around the premiere of the movie, with traffic dying down to low levels six months after launch. You need to choose a solution that will scale automatically to a global audience yet minimize costs. What should you choose?

A small social media company has begun to develop an application. They want to run entirely within the AWS cloud. The initial architecture is fairly straightforward and seems like it should only include a handful of compute instances and a MySQL relational database.

Their initial concern is that they do not know the usage patterns for the application itself, especially with the application's calls to the database. They would like to implement a development database for initial testing that is flexible and cost-effective as it does not need to be available at all times throughout the day.

Which AWS service should they use?

Your company develops a specialized web application that has recently been converted to a mobile application on both iOS and Android devices. Currently, the QA team is testing on their personal devices. You want to offload the device testing from the team’s personal devices and instead leverage AWS for automated testing. Which AWS service can provide real, physical tablets and phones for automated testing of mobile applications?

You work for a VC company that uses EC2 on the frontend and an Aurora DB cluster using single-master replication on the backend. The VC company wants to understand what happens if the primary database in Aurora fails. Which of the following best describes how Aurora handles this failure?

You are a solutions architect working for a popular online store. The store exists on a single EC2 instance with an RDS instance on the backend. The RDS instance experiences an outage and your website goes down. Your boss asks you how you can make the site more resilient. What should you recommend?

You work for a real estate company that has a bunch of different batch processes they need to automate, such as patch management and data synchronization. You need to automate this and integrate it with AWS services and you need to do this serverless if possible. What AWS service should you use?

You lead a small development team for an LLC. The team is beginning to plan development of a full stack web application leveraging Next.js with SSR on the frontend, and they are wanting to leverage the AWS cloud for it. Unfortunately, nobody on the team is well-versed in AWS services and best practices, so they want to avoid complex infrastructure designs. Which AWS service could the development team use to simplify development and deployment of their full stack application?

You work for a security company that hosts a secure file storage service on S3. All files uploaded to the S3 buckets must have AES-256 encryption using Server Side Encryption (SSE-S3). Which of the following request headers must be used?

You are working with a renowned government organization responsible for one of the best gardens in the nation. The organization is demonstrating a new type of greenhouse: a smart greenhouse. The greenhouse has hundreds of sensors to monitor things like humidity, temperature, sunlight conditions, etc. They need to collate all this information in the cloud so the application makes smart decisions, such as when to water individual plants, open a window in the greenhouse to lower the temperature, etc. What AWS service would be best to collate these hundreds of sensors?

You work for an online store that has a large number of EC2 instances. The company had a list of public keys and public IP addresses of the individual EC2 instances stored in an S3 bucket. However, this was accidentally deleted by an intern. You need to rebuild this list using an automated script. You create a script running a curl command to get the data on each EC2 instance and to write this to an S3 bucket. Which of the following should you query?

You have a large fleet of EC2 instances on AWS. Recently, one of your EC2 instances is compromised using a well known vulnerability in Apache. You need an automated vulnerability management service that continually scans your EC2 fleet for software vulnerabilities and unintended network exposure. What AWS service should you recommend?

You have been assigned to migrate an application and the servers it runs on to the company AWS cloud environment. You have created a checklist of steps necessary to perform this migration. A subsection in the checklist is security considerations. One of the things that you need to consider is the shared responsibility model. Which option does the customer handle under the shared responsibility model?

You have a website hosted internally on an on-premises solution. You suffer from a major DDoS attack that takes the website offline for several days. Your boss wants you to immediately migrate the website to AWS and to implement the best DDoS solution possible. What AWS service should you recommend?

You have a dynamic e-commerce website hosted on an EC2 instance that (as traffic increases) becomes slower and slower. What scenario below would help increase the speed of the website?

You have a website that uses MongoDB, a NoSQL database, on its backend. It requires high, sequential read and write access to very large data sets on local storage. You need to migrate this database to AWS and host it on EC2 with Amazon EBS. What EC2 instance type would be best suited to handle I/O-intensive database workloads and sequential writes?

You recently had a security breach in your AWS environment, and hackers provisioned EC2 instances to mine cryptocurrency. You need to record all API calls made within your AWS environment moving forward and store these records securely. Which services should you use?

(Choose2)

Your company is migrating their data to AWS, and included in this is a CSV file of your customers. The file is quite large, around 3 GB. Due to the primary database going offline during the migration, your manager has asked you to query this CSV file to find information about a specific customer. What AWS service should you use to achieve this?

You work for a company that uses EC2 with instance store for storage. If you terminate the EC2 instance, what happens to the data on the root device volume?

You work for a market sentiment company that monitors social media platforms, such as Twitter and Facebook, for the general public's sentiment based on particular keywords. You need to store this data in a document store where the database schema can be extremely flexible and change on the basis of individual records. Which AWS database service best suits this requirement?

Your company has recently been getting charged overuse fees for software licenses for your Oracle products. Currently, there is a hybrid environment in place where there are Amazon EC2 instances running databases, as well as on-premises virtual machines running Oracle databases. It has been determined that the Oracle software needs to continue to be used, and there will not be a shift to any other database products. You are assigned to find a way to better manage license usage to avoid overuse charges in the future.

Which AWS service can help you accomplish this?

Which of the following is the cheapest AWS support service?

You have a high-performing website that captures a large amount of financial information, runs some AI/ML analysis on this data, and then stores the analyzed data in DynamoDB. You have a Lambda function that then needs to query this new update and make sure the data is valid. How can you make the Lambda function trigger automatically every time DynamoDB is updated?

You need to host a static website on S3. Your boss asks you to register a domain name for the website with Route 53. What is a prerequisite to ensure that you can achieve this?

You work for a digital design agency that hosts the majority of their digital assets on-premises using a local data center and a third-party CDN provider. Due to inflation, the costs of hosting are going up, and they are considering moving to the AWS cloud. They need a reliable place to store videos and pictures and be able to deliver this content globally using a CDN. What solution below is the most cost-effective?

You have an S3 bucket that contains some vital files for your company. You need to be alerted if these files are deleted or have write operations performed on them. What AWS services are event notification destinations for S3 buckets?

(Choose3)

You have created a meme generation website where users upload their own images and create the captions they want. Then, the web application processes this and stores the processed image in S3. What AWS services could achieve this while keeping the cost as low as possible?

You have a social media website that uses a DynamoDB table on the backend. Your monitoring detects that the DynamoDB table begins to throttle requests during high peak loads, which causes the slow performance of the website. How can you remedy this?

You have an internally facing dynamic application that thousands of users access every morning when they come in to work. The EC2 instance takes two minutes to boot up before it can respond to users' requests. The users typically arrive around 9 a.m. each morning. What would be the ideal architecture to deal with this scenario?

Your company has an internal web application that uses RDS in the backend with Multi-AZ deployment for redundancy. You have been asked to improve security and make sure the database credentials and API keys are encrypted and rotated on a regular basis. The internal web application should also use the latest version of the encrypted credentials when connecting to the RDS database. What is the easiest way to achieve this?

You work for an advertising agency that has an on-premises file server with large images. You are running low on storage and need to extend your storage to the AWS Cloud. What would be the best approach?

Your company needs to move 75 TB of data to AWS. Their internet connection peaks at 10 Mbps. What is the fastest and most cost-effective solution to migrate this data to AWS?

You work for a major gaming company based out of Norway. The company needs to distribute gaming traffic across multiple servers using UDP and store this information in a NoSQL database. What solution should you use?

You have a fleet of EC2 instances that all use EBS storage. Due to new regulatory requirements, you are required to back these EBS volumes up daily, automatically, in the most cost-effective way possible. What solution below allows you to do this?

You work in the security team for a major insurance company that has hundreds of production AWS accounts. Recently, there was a major security breach across multiple AWS production accounts. The breaches were detected using GuardDuty, Inspector, Macie, and Amazon Firewall Manager; however, because people rarely log in to these individual AWS accounts, the breaches weren’t noticed for a long a time. You need to implement a solution that will allow you to view all your security alerts in a single place. Which AWS service should you use?

You have started at a new company that has recently had a major security breach in their AWS account. Somehow, someone was able to gain access to the entire account, and they were able to create EC2 instances to mine Bitcoin and share pirated material using S3. Your boss instructs you to find an automated threat detection service that can protect your entire AWS account. What AWS service should you recommend?

You work for a fintech company that stores its backups on a tape solution in-house at the company's headquarters. They need to move the solution to the cloud and have a mandatory retention period of seven years due to regulations. They will only access the backups once a year for auditing purposes, and they can be flexible on how long the access will take. What is the most cost-effective solution?

A software company has created an application to capture service requests from users and also enhancement requests. The application is deployed on an Auto Scaling Group of EC2 instances fronted by an Application Load Balancer. The Auto Scaling Group has scaled to maximum capacity, but there are still requests being lost. The company has decided to use SQS with the Auto Scaling Group to ensure all messages are saved and processed. What is an appropriate metric for auto scaling with SQS?

You have been evaluating the NACLs in your company. Most of the NACLs are configured the same:

100 All Traffic Allow

200 All Traffic Deny

* All Traffic Deny

What function does the * All Traffic Deny rule perform?

You have a large online store that specializes in 4th of July products. 4th of July is fast approaching and your website goes down. You host the website on premise. After investigation, you discover that this is a DDoS attack. Your manager wants to know, if you move your website to AWS, which service can be used to help prevent DDOS attacks?

You work for a used car sales business that is moving their application to AWS. You have been asked to design the architecture so that it is serverless and high performing. The application will be refactored to suit your architecture choice. Which of the following architectures would give good serverless performance?