You work for an insurance company who, for compliance reasons, has to store their customer data for 10 years before deleting it. The data needs to be stored as cheaply as possible, and retrieval times of up to 24 hours are acceptable. What S3 service should you recommend to minimize costs?

Your architecture consists of an Application Load Balancer front, an Auto Scaling Group of EC2 instances, backed by an RDS database. Your security team has notified you of cross-site scripting attacks and also SQL injection attacks on the application. You have been asked to take steps to quickly mitigate these attacks. What steps should you take?

You work at a small startup with a very strict budget. Recently, they experienced a surge of demand on their web frontend servers, which triggered an auto scaling event. The auto scaling wasn't configured correctly, and it did not scale down after the surge, resulting in a very large bill at the end of the month. You need to find a way to alert the founders when your AWS bill reaches a certain threshold, and you need to do this as cost-effectively and efficiently as possible. What is the best way to achieve this?

You work for a company that is migrating its data from an on-premises solution to AWS S3. They need to move about 40 terabytes of data to the cloud, but they only have a 10 Mbps connection at their office. What is the fastest and most cost-effective way possible to migrate this data to AWS?

Your company has recently converted to a hybrid cloud environment and will slowly be migrating to a fully AWS cloud environment. The AWS side is in need of some steps to prepare for disaster recovery. A disaster recovery plan needs to be drawn up and disaster recovery drills need to be performed for compliance reasons. The company wants to establish Recovery Time and Recovery Point Objectives. The RTO and RPO can be pretty relaxed. The main point is to have a plan in place, with as much cost savings as possible. Which AWS disaster recovery pattern will best meet these requirements?

A company has an Auto Scaling group of EC2 instances hosting their retail sales application. Any significant downtime for this application can result in large losses of profit. Therefore, the architecture also includes an Application Load Balancer and an RDS database in a Multi-AZ deployment. The company has a very aggressive Recovery Time Objective (RTO) in case of disaster. How long will a failover of an RDS database typically complete?

You are decoupling your infrastructure and decide to implement an SQS queue as part of the overall architecture to make your web application more resilient. You need to create an SQS queue that allows your messages to be processed exactly once and in order. Which SQS queue should you choose?

A financial institution is preparing for an upcoming audit. You have been placed in charge of preparation for this audit. One of the requests made by the auditors is to see documentation on all activity made on your account. Which AWS service will you use to meet this audit request?

You work for a media company that uses a NetApp file server internally. The server is starting to run out of space, and your boss asks you to explore the idea of storing your media files on AWS. The files are a mixture of photos and videos. They need to be instantly accessible, and you need to keep costs to a minimum. Which AWS service should you recommend?

You work for an insurance company that is designing a new application. The application will need a relational database on the backend that automatically starts up, shuts down, and scales capacity up or down based on your application's needs. You need this database to be as cost-effective as possible. Which database should you choose?

You work for an insurance company that uses Redshift to store a large customer database and then generates custom reports based on this database. The reports need to be instantly accessible. However, they can be generated at any time, so you do not have to worry about redundancy or availability. What S3 storage class should you use to save these reports, keeping the costs to the minimum, yet maintaining instant accessibility?

You work for a national weather agency that has weather stations all over the world. The weather stations take temperature readings every 15 seconds from thousands of locations globally. The agency is moving to AWS, and they need a good time-series database service in which to store this information while keeping costs to a minimum. Which AWS service do you recommend they use?

An online media company has created an application which provides analytical data to its clients. The application is hosted on EC2 instances in an Auto Scaling Group. You have been brought on as a consultant and add an Application Load Balancer to front the Auto Scaling Group and distribute the load between the instances. The VPC which houses this architecture is running IPv4 and IPv6. The last thing you need to do to complete the configuration is point the domain name to the Application Load Balancer. Using Route 53, which record type at the zone apex will you use to point the DNS name of the Application Load Balancer?

(Choose2)

You work for an experimental automotive company that is trying to create self-driving car technology using a combination of AWS and 5G connectivity. You need to deploy an application within the vehicles themselves that will need ultra-low latency using 5G to AWS resources. Which AWS service would best suit this need?

Jessica is a Database Administrator who has been given the task to migrate all the team Oracle databases running on on-premises virtual machines to the AWS cloud. During the migration efforts, it was requested that she find an automated way to convert to using an Amazon Aurora PostgreSQL database instead of Oracle as well as replicating any ongoing transactions during the migration itself.

Which AWS service configurations would Jessica use in this scenario?

Your organization has begun to migrate all of their on-premises infrastructure and applications to AWS. Currently, in addition to the hundreds of Java and .NET applications, there are also many MySQL databases running on virtual machines with VMware vCenter. Your manager has tasked you with identifying the most efficient way of migrating the databases from on-premises to AWS, while another team is handling the application migrations.

Which service can you leverage to perform the actual migration of the databases to AWS with little to no impact?

You work for an online betting company that recently had a major security breach. The CSO needs you to urgently review the root cause of this breach, using artificial intelligence and machine learning. What AWS service can you use that will fulfill this requirement?

You are a cloud architect who has moved into a new role at a mobile gaming platform. They are releasing a new game and require a backend infrastructure to support the game. They want this to be architected serverlessly so as to reduce costs as much as possible. What is the most cost-effective serverless architecture listed below?

A fintech company has a hybrid cloud that consists of an on-premises solution and some assets within AWS. They want all of their developers to access resources in both environments using their on-premises Active Directory (AD) credentials. In this scenario, which of the following can be used to fulfill this requirement?

A consultant is hired by a small company to configure an AWS environment. The consultant begins working with the VPC and launching EC2 instances within the VPC. The initial instances will be placed in a public subnet. The consultant begins to create security groups. What is true of security groups?

A software company has created an application to capture service requests from users and also enhancement requests. The application is deployed on an Auto Scaling group of EC2 instances fronted by an Application Load Balancer. The Auto Scaling group has scaled to maximum capacity, but there are still requests being lost. The cost of these instances should remain the same. What step can the company take to ensure requests aren’t lost?

You work for a consulting company that has taken on a new client who is keen to move to AWS. The client has a good understanding of AWS, and they want a highly bespoke custom VPC. They need their network traffic to be filtered before it reaches their internet gateway. What AWS service allows you to do this?

You have a website running on an EC2 instance. The website is a static HTML site and does not require a database connection. The website goes viral and this takes the EC2 instance down. You need to ensure this does not happen again. What architecture below would give you the best resiliency?

You work for a major film studio who is releasing a new motion picture. Last year, a rogue nation-state implemented a large DDoS attack on the website hosting the preview of the movie, taking the site down for 48 hours. You need to prevent something like this from happening again. What AWS service should you use to prevent this from happening again?

You start work as a solutions architect at a small startup consisting of 10 people. They are new to AWS and have a fairly large estate of AWS assets and services that you need to become familiar with quickly. You also want to impress your new boss. What service should you use to get a broad overview of things like cost optimization, performance, security, fault tolerance, and service limits?

You work for a security consultancy company and have taken on board a new client. The client has multiple production AWS accounts. Unfortunately, the client appears to have a rogue system administrator who keeps making unauthorized changes to the production environment. You need to review a log of the API calls made so you can identify who is making the changes. What AWS service should you use?

You have an online store that has recently been featured in a major national news channel, and since then, traffic has been going through the roof. The store consists of a fleet of EC2 instances behind an Auto Scaling group and application load balancer, which then connect to a single RDS instance. The store is struggling with the demand, and you believe this could be a database performance issue. Which options below would help to scale your relational database?

(Choose3)

Your company has decided to begin migration efforts from on-premises data centers to the AWS cloud. Currently, the data centers host several virtual machines, including vSphere VMs and Hyper-V VMs. You have been asked to find the easiest and most efficient method of migrating all the VMs to AWS as Amazon EC2 AMIs, while also minimizing the potential downtime.

Which AWS service is the best fit for this?

You are designing an architecture for a financial company that provides a day trading application to customers. After viewing the traffic patterns for the existing application, you notice that traffic is fairly steady throughout the day, with the exception of large spikes at the opening of the market in the morning and at closing around 3 pm. Your architecture will include an Auto Scaling Group of EC2 instances. How can you configure the Auto Scaling Group to ensure that system performance meets the increased demands at opening and closing of the market?

You have been assigned to create an architecture which uses load balancers to direct traffic to an Auto Scaling Group of EC2 instances across multiple Availability Zones. You were considering using an Application Load Balancer, but some of the requirements you have been given seem to point to a Classic Load Balancer. Which requirement would be better served by an Application Load Balancer?

A consultant is hired by a small company to configure an AWS environment. The consultant begins working with the VPC and launching EC2 instances within the VPC. The initial instances will be placed in a public subnet. The consultant begins to create security groups. What is true of security groups?

You have joined a small startup, and they are trying to figure out what cloud platform you will use to host your application with. Your boss asks you to identify the best way to anticipate what the AWS costs will be. What should you recommend?

You are about to configure two EC2 instances in your VPC. The instances will be in different subnets, but in the same Availability Zone. The first instance will house the main company website and will need to be able to communicate with the database that will be housed on the second instance. What steps can you take to make sure the instances will be able to communicate properly?

(Choose2)

You are a solutions architect working for a pharmaceutical company that specializes in creating vaccines. They have multiple production AWS accounts with hundreds of VPCs and thousands of Web Application Firewalls. Recently, there was a security breach in one of their VPCs, and this was due to a firewall rule not being configured correctly. They have asked you if there is a service they can use to centrally manage their firewalls. What AWS service would you recommend?

You are decoupling your infrastructure and decide to implement an SQS queue as part of the overall architecture to make your web application more resilient. You need to create an SQS queue that allows your messages to be processed exactly once and in order. Which SQS queue should you choose?

You work for an insurance company that is recently undergoing an annual audit. The auditors are requesting a lot of compliance-related information such as AWS security and compliance reports or select online agreements. What AWS service can you use to quickly produce the information they require?

You work for a large automotive company that wants to extend its AWS footprint from the cloud onto the factory floor. They will require a large amount of compute and storage space and have plenty of free space to put 42U racks. Which AWS service would help to achieve this?

You work at a small local dairy as their IT consultant. They have been using IoT to monitor the health and wellbeing of their cows, and they have a large dataset of 50 TB that they need to move to AWS as quickly as possible for analysis. They have a cable internet connection that is capable of 5 Mbps upload speed. What would be the quickest and most efficient way to migrate this data to AWS?

You work for a medium-sized retail outlet that uses a payment processing system with a backend on AWS. Recently, you had an outage and you need to provision some AWS services locally on-site at each retail branch. This will consist of a small application that will process the transaction on-site and then transmit the processed transaction to the AWS backend when there is internet connectivity. If there is no connectivity, it will wait until there is and then transmit the transaction. You need to design a solution that will bring AWS on-site to the retail locations. The solution needs to account for the small physical space available in some of the stores. Which AWS service would achieve this?

It's your first day at a boutique software engineering firm, and they've asked you to examine their AWS environment and give an evaluation. You want to impress them and use a service that will recommend automatically how to optimize your AWS infrastructure, improve security and performance, reduce costs, and monitor service quotas. What AWS service should you use?

You work for a startup that is about to deploy a production environment on AWS. The founders have asked you to identify an easy-to-use interface that will let them visualize, understand, and manage their AWS costs and usage over time. What service best meets this need?

You work for a political party that is about to run a popular governor for re-election. The marketing arm is ingesting a large amount of content from social media accounts, and they need to run sentiment analysis on this data to figure out who they should target their advertisements at. Which AWS service would be best suited for this?

You work for a company that provides services for the intelligence community. You have strict legislative requirements to control all your encryption keys, including the generation, storage, and disposal of these keys. These keys must also be stored on dedicated hardware. What AWS service should you use?

You work for an advertising company that delivers high-resolution images and movies to customers across the globe. You are migrating the application to AWS, and you need to be able to deliver large media files to your end users as quickly as possible in the most cost-effective method possible. What is the best way to achieve this?

You are building an automated bot to reply to customer messages on your website. The website will receive thousand of messages a day, and it is very important that none of the messages are lost, no duplicates are produced, and they are processed in EMR in the same order as their arrival. What is the best way to achieve this?

You work for an insurance company that has recently fallen victim to a ransomware attack. They have decided to move their internal systems to AWS and want a service that would continuously monitor their AWS accounts and workloads for malicious activity. What AWS service should you recommend?

Your company has gone through an audit with a focus on data storage. You are currently storing historical data in Amazon S3 Glacier Flexible Retrieval (formerly, S3 Glacier). One of the results of the audit is that a portion of the infrequently accessed historical data must be rapidly retrieved upon request. Where can you cost effectively store this data to meet this requirement?

You work for a large bank that stores customer financial information in an S3 bucket in US-east-1. Recently, there was an outage that took the entire region offline and you had many customer complaints. You need to prevent this from happening in the future. What should you consider?

A company has an Auto Scaling group of EC2 instances hosting their retail sales application. Any significant downtime for this application can result in large losses of profit. Therefore, the architecture also includes an Application Load Balancer and an RDS database in a Multi-AZ deployment. What will happen to preserve high availability if the primary database fails?

Your company is currently building out a second AWS region. Following best practices, they've been using CloudFormation to make the migration easier. They've run into a problem with the template though. Whenever the template is created in the new region, it's still referencing the AMI in the old region. What is the best solution to automatically select the correct AMI when the template is deployed in the new region?

You have an online booking system for vacations that uses EC2 instances on the frontend to poll an SQS queue. You noticed that some bookings have been processed twice, meaning that the customer has paid for their vacation twice. This is causing issues with customer service, and you need to fix it urgently. What can you do to stop this from happening again in the future?

(Choose2)

You have begun creating a hybrid cloud environment. Now you need to create a bastion host and a new custom VPC. The corporate data center personnel require internal access to the bastion host via SSH, and the bastion host also requires access to the public internet to be enabled. How can you configure the bastion host and set up access?

You work for an automotive company that consists of a large EC2 instance and an RDS instance on the backend with Multi-AZ turned on. Unfortunately, your EC2 instance gets a virus and needs to be terminated. You were not conducting regular backups, so it will take a lot of work to bring this back online. Your boss has instructed you not to let this happen again. What architecture below would be the MOST resilient?

Your boss recently asked you to investigate how to move your containerized application into AWS. During this migration, you'll need to be able to easily move containers back and forth between on-premises and AWS. It has also been requested that you use an open-source container orchestration service. Which AWS tool would you pick to meet these requirements?

You work for a sports betting company. Recently, they suffered a massive DDoS attack on AWS, which cost the company hundreds of thousands of dollars in unexpected costs. The agency has asked you to implement a solution so that, if a DDoS attack happens again in the future, they will have some kind of cost protection against an attack. What should you recommend?

You have a large fleet of EC2 instances. After a recent security breach, your boss asks you to find a service that will install an agent on your EC2 instances, perform assessments against hardened EC2 templates, and report results and violations. Which service should you use?

You have a large amount of data stored in S3 that you need to access from on-premises servers using the NFS or SMB protocol. Additionally, you will want to authenticate access to these files through on-premises Microsoft Active Directory. What AWS service would you use?

A development team is experimenting with AWS Lambda. They want to use a completely serverless application with a few other serverless resources included, but due to resource constraints, they cannot design it from the ground up. Because of this, they want to leverage an application stack that someone has potentially already created.

What would be the most cost-effective way to accomplish this?

You work for a real estate company that hosts some production services on AWS. Unfortunately, a junior system administrator leaves a CSV file containing Personally Identifiable Information (PII) about the businesses customers on a public S3 bucket. You need to prevent this from happening in the future. What AWS service uses machine learning (ML) and pattern matching to discover and protect PII?

A web application for a travel company is hosted in EC2. The EC2 instances consume messages from an SQS queue and is then connected to SNS to automatically send an email to the operations team once someone has booked a vacation. Last night the operations team received 7 orders, but after 3 hours, they received 28 notifications. What could be causing the issue?

Your organization is working on a blue/green deployment strategy for the most recent frontend application. They need to design a solution that allows them to control how much traffic is sent to the new version of the application and how much goes to the old one. If there's a problem with the deployment, it needs to be able to switch back to the previous version at a moment's notice. What service would you use to make sure these goals are met?

You have decided to decouple your infrastructure and use a combination of EC2 instances behind an Auto Scaling group and SQS. You notice that a lot of your messages are being processed twice, and as you dig deeper, you also notice that many messages do not get processed at all. What SQS system could you set up to help debug this issue?

You have an EC2 instance in an Auto Scaling group that is currently a t2.micro. It was a test/dev server, but now you need to promote it to production by increasing the size to t2.2xlarge. How can you achieve this in the most efficient way possible?

You work for a UK company that facilitates loans to consumers. There is heavy regulation, and you need to ensure your AWS environment is continuously audited to be GDPR-compliant. What AWS service should you use?