wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

ACT4_CONSOLIDATED_AWS_DATABASES_2025

Total questions: 56

Worksheet time: 3hrs 48mins

Name
Class
Date
1.
(G1) A developer has deployed a serverless application using AWS Lambda that reads and writes data to an Amazon RDS for MySQL database. During a marketing campaign, traffic spikes, causing the Lambda function to scale out to thousands of concurrent executions. The database immediately becomes unresponsive, showing "Too Many Connections" errors. Which architectural change resolves this issue without increasing the RDS instance size?
a)
Increase the memory limit of the Lambda functions
b)
Implement Amazon RDS Proxy between the Lambda functions and the RDS instance.
c)
Enable Multi-AZ on the RDS instance to double the connection capacity
d)
Use DynamoDB Streams to buffer the writes before they reach RDS
2.
(G1) A mobile gaming company needs to implement a real-time leaderboard for millions of players. The leaderboard must support high-speed updates and retrieval of player rankings (sorted by score). The data is currently in DynamoDB, but sorting millions of items in real-time is consuming too much throughput. Which solution provides the lowest latency for this specific use case?
a)
Create a DynamoDB Global Secondary Index (GSI) using the score as the partition key
b)
Deploy Amazon ElastiCache for Redis and use Sorted Sets.
c)
Use Amazon Aurora Serverless v2 and standard SQL ORDER BY queries
d)
Migrate the data to Amazon S3 and use Amazon Athena for ranking queries
3.
(G1) A multi-tenant application uses a single DynamoDB table to store data for multiple users. The Partition Key is UserID. To adhere to the Principle of Least Privilege, the developer needs to ensure that authenticated mobile users can only access their own records and not those of other users. How should the developer configure the IAM policy?
a)
Create a separate DynamoDB table for every user and grant full access
b)
Use IAM policy conditions with the dynamodb:LeadingKeys variable matching the user's ID.
c)
Use AWS WAF to filter incoming requests based on the UserID header
d)
Implement row-level security within the application logic only
4.
(G1) A media news application hosted on EC2 in us-east-1 uses Amazon Aurora MySQL. The application is expanding to Europe (eu-west-1) and Asia (ap-southeast-1). Users in these regions are experiencing high latency when reading articles. The application requires local read latency in all regions and disaster recovery capability. Which architecture meets these requirements most effectively?
a)
Convert the database to an Amazon Aurora Global Database and add secondary regions in Europe and Asia.
b)
Create Read Replicas of the EC2 instances in the new regions
c)
Use RDS for MySQL with Cross-Region Read Replicas and application-side routing
d)
Export daily snapshots to S3 and use Cross-Region Replication (CRR) to move data to other regions
5.
(G1) An e-commerce platform uses a production RDS for PostgreSQL instance. Every morning, the finance team runs complex analytical queries that cause the CPU of the production database to spike to 100%, slowing down customer transactions. What is the most operationally efficient solution to prevent this performance impact?
a)
Enable Multi-AZ deployment to distribute the read traffic
b)
Create a Read Replica and configure the reporting application to connect to the replica's endpoint.
c)
Move the database to Amazon Redshift for both transaction processing and reporting
d)
Increase the instance size (Scale Up) of the primary database to handle the load
6.
(G1) A company stores 2 Exabytes of historical log data in Amazon S3. They use Amazon Redshift for their data warehousing. Occasionally, analysts need to join the historical data in S3 with the current daily data in the Redshift cluster. Loading all S3 data into Redshift is too expensive and time-consuming. Which feature allows querying the data in S3 directly from Redshift?
a)
Use Amazon Redshift Spectrum.
b)
Use the RDS COPY command to move data to Redshift
c)
Use AWS Glue to transform S3 data into DynamoDB
d)
Use Amazon EMR to process the data before loading it into Redshift
7.
(G1) An application running on EC2 writes logs to an RDS for SQL Server instance. The database storage is filling up faster than anticipated, and the operations team is tired of manually increasing the volume size every week. The team needs a solution that scales storage automatically with zero downtime. What should the Architect enable?
a)
Create a Lambda function to monitor disk space and call ModifyDBInstance
b)
Enable RDS Storage Auto Scaling in the instance configuration.
c)
Use an S3 Gateway Endpoint to store the SQL logs directly in S3
d)
Migrate to DynamoDB which has unlimited storage
8.
(G1) A DevOps engineer is reviewing a CloudFormation template that deploys an RDS MySQL instance and an EC2 application. Currently, the database password is hardcoded in the template as plain text. This violates security compliance. What is the most secure and automated way to handle the database credentials?
a)
Pass the password as a CloudFormation Parameter with NoEcho set to True
b)
Store the password in a text file in a private S3 bucket and download it during EC2 UserData
c)
Create a secret in AWS Secrets Manager, and reference the secret dynamically in the CloudFormation template and EC2 application.
d)
Encrypt the password using KMS and store the ciphertext in the code
9.
(G1) A team manages a critical Amazon Aurora PostgreSQL production database. They need to apply a major schema change involving dropping columns. They require a staging environment that is an exact copy of production to test the change, and then an immediate switchover mechanism if the test passes, with zero data loss. Which feature is best suited for this workflow?
a)
Restore a snapshot to a new instance, test, and then change the application endpoint
b)
Use Amazon RDS Blue/Green Deployments.
c)
Use AWS Database Migration Service (DMS) to replicate data to a test instance
d)
Enable "Backtrack" on the Aurora cluster to rewind if the update fails
10.
(G1) To meet banking compliance, every time a manual snapshot of an RDS instance is created, it must be immediately copied to a separate, isolated "Audit" AWS Account. The process must be fully automated and serverless. What is the correct architectural pattern?
a)
Use an EC2 instance with a cron job to check for new snapshots and run the AWS CLI copy command
b)
Create an Amazon EventBridge rule that triggers on the "CreateDBSnapshot" event, invoking a Lambda function that shares and copies the snapshot to the Audit account.
c)
Use AWS Config to monitor snapshot creation and trigger an SNS notification to the admin
d)
Configure RDS to automatically replicate snapshots to S3 in the other account
11.
(G9) Your application writes user activity logs into a DynamoDB table using userId as the partition key. A small number of users generate extremely high write traffic. CloudWatch shows throttling and hot partitions. Question What is the MOST effective way to resolve the throttling issue?
a)
Increase the table's provisioned WCU to handle the additional load
b)
Implement a write-sharding strategy by adding a random suffix to the partition key (e.g., userId#1, userId#2).
c)
Enable DynamoDB Accelerator (DAX) to cache write requests and reduce throttling
d)
Use DynamoDB Global Tables to distribute writes across multiple Regions
12.
(G9) Your application running on EC2 must connect to an Amazon RDS MySQL database. Security requires no long-term credentials stored in code or configuration files. Question What is the MOST secure authentication method?
a)
Store database credentials in SSM Parameter Store as SecureString and retrieve them at runtime
b)
Store credentials in AWS Secrets Manager with automatic rotation
c)
Enable IAM database authentication and generate temporary auth tokens for connections.
d)
Encrypt the credentials and store them in the application source code
13.
(G9) Your application repeatedly runs identical SQL SELECT queries, causing high CPU utilization on the RDS instance. Question What is the MOST effective method to reduce load?
a)
Cache frequent read queries using Amazon ElastiCache Redis.
b)
Scale the RDS instance to a larger instance class
c)
Add multiple RDS read replicas to distribute the load
d)
Switch to Provisioned IOPS (PIOPS) storage
14.
(G9) A company requires automatic failover for its production MySQL database hosted on Amazon RDS. Question Which solution meets the HA requirement?
a)
Create a read replica in another AZ and manually switch to it during an outage
b)
Enable Multi-AZ deployment for the RDS instance.
c)
Take frequent snapshots and restore the database if a failure occurs
d)
Replace RDS with Aurora Serverless for automatic recovery
15.
(G9) A startup is building a high-traffic API requiring millisecond latency, massive automatic scaling, and simple key-value access patterns. Question Which database is the MOST appropriate?
a)
A. Amazon DynamoDB.
b)
B. Amazon RDS for MySQL
c)
C. Amazon RDS for PostgreSQL with read replicas
d)
D. Amazon Redshift
16.
(G9) Your data team needs to run complex analytical SQL queries (joins, aggregations) on terabytes of clickstream data. Question Which AWS service is best suited for this workload?
a)
A. Amazon RDS MySQL
b)
B. Amazon DynamoDB
c)
C. Amazon Redshift.
d)
D. Amazon ElastiCache
17.
(G9) Your CI/CD pipeline deploys application versions that include schema changes to an RDS PostgreSQL database. You must enforce automated, version-controlled migrations. Question Which solution BEST follows DevOps principles?
a)
A. Use CodeBuild (or CodePipeline) to run a migration tool like Flyway/Liquibase during the deployment.
b)
B. Apply schema changes manually using the RDS console
c)
C. Have the application apply SQL migrations on first startup
d)
D. Take an RDS snapshot before releasing and manually restore if needed.
18.
(G9) A global API receives unpredictable spikes. DynamoDB Auto Scaling reacts too slowly, causing throttling. Question What is the BEST way to handle sudden, unpredictable spikes?
a)
A. Double provisioned WCU and adjust Auto Scaling to scale faster
b)
B. Enable DynamoDB Accelerator (DAX)
c)
C. Switch the DynamoDB table to On-Demand capacity mode.
d)
D. Implement exponential backoff and retries in the client
19.
(G9) You need proactive detection and automated remediation when Redis failovers occur. Question Which solution BEST satisfies operational excellence?
a)
A. SSH into the Redis nodes and manually correct the issue after each failover
b)
B. Use CloudWatch alarms for failover metrics, SNS notifications, and Lambda for automated remediation actions.
c)
C. Enable Enhanced Monitoring and manually review logs daily
d)
D. Create an AWS Config rule to notify when the node type changes
20.
(G7) A gaming company needs to cache frequently accessed user profile data to reduce database load on their RDS PostgreSQL instance. User profiles are updated infrequently (once per day), but read thousands of times per second. The cache should handle TTL automatically and support data structures like sorted sets for leaderboards. Which TWO AWS services would BEST meet these requirements?
a)
ElastiCache for Redis.
b)
DynamoDB Accelerator (DAX)
c)
ElastiCache for Memcached
d)
RDS Read Replicas.
21.
(G7) A media company stores video metadata in RDS and raw video files in S3. Their analytics team needs to run complex queries joining metadata with S3 log data for business intelligence reports. The current approach of exporting RDS data to S3 and using Athena is taking 6+ hours daily. Which solution provides the FASTEST query performance for this analytics workload?
a)
Continue with current Athena approach but use Glue ETL
b)
Migrate metadata to DynamoDB and use DynamoDB Streams
c)
Set up Amazon Redshift with RDS snapshots and S3 integration.
d)
Create RDS Read Replica dedicated for analytics queries
22.
(G7) A healthcare application stores patient records in RDS with daily automated backups configured. A compliance audit requires that backups must be retained for 7 years and be immutable to prevent tampering. The current backup retention period is set to 35 days. What combination of steps meets these compliance requirements? (Choose TWO)
a)
Export RDS snapshots to S3 with S3 Object Lock enabled.
b)
Increase RDS automated backup retention to 2,555 days
c)
Enable RDS Backup Vault with AWS Backup compliance mode.
d)
Use AWS CloudHSM to encrypt the backups
23.
(G7) A startup is migrating from a self-managed MySQL database on EC2 to RDS. Their application uses several stored procedures and custom MySQL configuration parameters. During testing, they discovered that some configuration parameters cannot be modified in RDS. What is the PRIMARY reason for this limitation?
a)
RDS restricts parameters that could affect instance stability or security.
b)
RDS doesn't support any custom MySQL configurations
c)
Only Aurora supports custom parameters
d)
Parameter changes require root access which RDS doesn't provide
24.
(G7) A social media company runs Aurora MySQL for their main application database. They need to generate nightly analytics reports that run for 2-3 hours and cause performance degradation on the production cluster. Read replicas are already being used for user-facing queries. Which Aurora-specific feature would BEST isolate the analytics workload?
a)
Create an Aurora Custom Endpoint for analytics queries.
b)
Enable Aurora Auto Scaling for read replicas
c)
Use Aurora Serverless v2 for variable workloads
d)
Set up Aurora Global Database
25.
(G7) A fintech application needs to perform database operations (inserts, updates) across three different tables atomically - either all succeed or all fail. The current RDS MySQL configuration is causing occasional data inconsistencies during high load. Which database configuration must be verified to ensure ACID compliance?
a)
Verify that InnoDB storage engine is used for all tables.
b)
Enable RDS Multi-AZ deployment
c)
Increase the RDS instance memory allocation
d)
Configure RDS Enhanced Monitoring
26.
(G7) A company is building a serverless application using Lambda that needs to query user data stored in DynamoDB. The query pattern requires filtering by multiple attributes (email, registration_date, subscription_tier) and the dataset has 50 million records. Scan operations are timing out and consuming excessive read capacity. What is the MOST efficient solution?
a)
Create Global Secondary Indexes (GSI) for each query pattern.
b)
Increase DynamoDB provisioned read capacity significantly
c)
Switch to RDS PostgreSQL with proper indexes
d)
Use DynamoDB Streams to maintain a search-optimized cache
27.
(G7) An online learning platform stores course content and metadata in RDS, with video files in S3. They want to implement full-text search across course titles, descriptions, and transcripts (stored in RDS) with sub-second response times for 1 million+ courses. Which architecture provides the BEST performance for this search requirement?
a)
Enable RDS full-text search capabilities with MyISAM engine
b)
Export data to Amazon OpenSearch Service and sync via DMS.
c)
Use RDS Read Replica with optimized indexes for search queries
d)
Migrate everything to DynamoDB and use DynamoDB Streams
28.
(G2) A global insurance company runs its core transactional database in Amazon RDS for PostgreSQL. Compliance requires high availability with automatic failover, and disaster recovery must guarantee data loss < 60 seconds. Cost should be optimized and read replicas are not required.
a)
A) RDS Single-AZ with frequent snapshots
b)
B) RDS Multi-AZ synchronous standby.
c)
C) RDS Read Replicas in another Region
d)
D) Store backups on S3 and restore manually
29.
(G2) An analytics platform queries large datasets from RDS MySQL generating heavy read traffic. Latency has increased and CPU usage is high on the main DB. The business requires faster reads without modifying the application logic. Question: Which architecture should be implemented?
a)
A) Scale RDS vertically to the largest instance
b)
B) Add RDS Read Replicas and redirect read queries using endpoints.
c)
C) Export data to S3 and use Athena
d)
D) Enable Multi-AZ for additional read throughput
30.
(G2) A startup wants a low-cost disaster recovery strategy for RDS MariaDB. They can tolerate a longer RTO (hours) but require daily backups stored across Regions. Question: Which strategy is most cost-efficient?
a)
A) Deploy Multi-AZ + Read Replicas
b)
B) Enable automated snapshots + manual cross-Region snapshot copy.
c)
C) Use DynamoDB + Glacier
d)
D) Export DB to EC2 EBS every day
31.
(G2) A gaming backend stores user session metadata in RDS. Traffic spikes cause DB contention. Sessions are short-lived and do not need durable storage. Question: Which modification improves scalability and cost?
a)
A) Increase RDS instance class
b)
B) Migrate session storage to ElastiCache Redis.
c)
C) Create read replicas for session reads
d)
D) Store sessions in S3 with TTL policies
32.
(G2) A pharmaceutical company synchronizes on-prem Oracle DB with RDS Oracle every hour. They need minimal overhead and bidirectional sync. Question: Which service supports this requirement?
a)
A) Snowball Edge
b)
B) AWS Database Migration Service (DMS).
c)
C) Athena Federated Query
d)
D) Glue ETL jobs hourly
33.
(G2) A social network stores millions of old user records on RDS PostgreSQL, queried only for audits a few times a year. They want lower cost without losing SQL query capability. Question: Which solution provides optimal cost savings?
a)
A) Migration to DynamoDB
b)
B) Export data to S3 Glacier
c)
C) Export to S3 and query using Athena with federated access.
d)
D) Enable storage autoscaling in RDS
34.
(G2) An airline company requires active disaster recovery across continents with < 30 seconds replication lag for its Aurora MySQL cluster. Question: Which feature supports this requirement?
a)
A) Multi-AZ deployment
b)
B) Regional read replicas
c)
C) Aurora Global Database.
d)
D) Manual snapshot replication
35.
(G2) A healthcare organization uses RDS SQL Server and must ensure encryption keys never leave their on-prem HSM, while wanting AWS to perform encryption/decryption automatically. Question: Which solution meets this requirement?
a)
A) SSE-S3 with customer keys
b)
B) KMS with AWS-managed keys
c)
C) RDS encryption using KMS Custom Key Store with CloudHSM.
d)
D) Client-side encryption only
36.
(G4) You manage a production Amazon RDS for PostgreSQL instance. Security recommends always running on the latest minor version, but the operations team wants zero manual intervention and is worried about unexpected downtime during business hours. What is the best way to ensure the instance is kept up-to-date with minor versions while respecting these concerns?
a)
Enable “Auto minor version upgrade” and “Multi-AZ”, and set a maintenance window during off-peak hours.
b)
Enable “Auto minor version upgrade” only; RDS will update without downtime
c)
Manually apply minor version updates when AWS sends you notification emails
d)
Create a read replica, upgrade it, then promote it to master during business hours
37.
(G4) A mobile game stores user profiles in an Amazon DynamoDB table with UserID as the partition key. You notice high read/write throttling for some popular users while other partitions are underutilized. You must distribute traffic more evenly without changing how clients look up a profile (they still query by UserID). What should you do?
a)
Change the partition key to a randomly generated UUID
b)
Introduce a composite key like UserID#ShardNumber as the new partition key and handle sharding in the application.
c)
Enable DynamoDB Auto Scaling, which automatically changes your key design
d)
Add a global secondary index on a random attribute to spread the load
38.
(G4) You build a serverless backend on API Gateway + Lambda + DynamoDB. A single API call needs to: 1. Deduct credits from a Users table. 2. Insert a record in a Purchases table. Both actions must either succeed or fail together. You want to minimize complexity and keep it fully managed. Which approach is most appropriate?
a)
Use DynamoDB transactions with TransactWriteItems.
b)
Run two separate PutItem calls and roll back manually if the second one fails
c)
Store both Users and Purchases data in the same item and update it with UpdateItem
d)
Use conditional writes only on the Users table; ignore consistency on Purchases
39.
(G4) Your web application runs on EC2 and uses Amazon RDS MySQL. Reads have increased significantly, and the database experiences high CPU utilization, but writes are still moderate. You need a solution that scales reads, requires minimal changes, and preserves strong write consistency on the primary. What is the best solution?
a)
Enable Multi-AZ on RDS and direct read traffic to the standby
b)
Create Read Replicas and direct heavy read queries to them
c)
Switch to a larger instance type for RDS only
d)
Export the database to Amazon Redshift and run all reads from there
40.
(G4) A global SaaS product uses DynamoDB in us-east-1. Users in Europe experience high latency. You must improve read/write latency globally and keep data active-active (users in both regions can read and write with automatic replication). Which solution fits best?
a)
Enable DynamoDB global tables and add eu-west-1 as a replica Region.
b)
Use DynamoDB Streams and Lambda to copy data from us-east-1 to eu-west-1 manually
c)
Set up cross-Region read replicas using RDS instead of DynamoDB
d)
Use CloudFront to cache DynamoDB responses
41.
(G4) Your application uses RDS PostgreSQL as the source of truth and ElastiCache for Redis for caching product details. Currently, the app: • Reads from the cache first; if missing, reads from RDS and then doesn’t store the result in cache. • Writes to RDS only, and never invalidates the cache. Users often see stale or missing data. What caching strategy should you implement to fix this?
a)
Implement a write-through cache: update Redis and RDS simultaneously on writes; use TTLs to limit staleness
b)
Query RDS directly and stop using the cache
c)
Increase the TTL of cache entries so they stay longer
d)
Use CloudFront instead of ElastiCache
42.
(G4) You are designing a new backend for an e-commerce site. Requirements: • Shopping cart data must be highly available, low-latency, and schema-flexible. • The cart contents can be represented as a JSON document per user. • Strong relational constraints and complex joins are not required. • You want serverless behavior with no capacity planning if possible.
a)
Amazon RDS MySQL with Multi-AZ
b)
Amazon Redshift with AUTO WLM
c)
Amazon DynamoDB with on-demand capacity mode.
d)
Amazon ElastiCache for Redis as the only data store
43.
(G3) 1. A company has a critical production RDS MySQL database that is currently unencrypted. Due to compliance requirements, they must encrypt the database with minimal downtime. What is the correct procedure to achieve this?
a)
Enable the encryption option in the RDS console and reboot the instance to apply changes
b)
Use AWS DMS to migrate data to a new RDS instance that has encryption enabled at creation time
c)
Take a snapshot of the instance, copy the snapshot enabling encryption on the copy, and restore a new instance from the encrypted snapshot.
d)
Create an encrypted Read Replica of the main instance and then promote it to master
44.
(G3) 3. A team uses an RDS PostgreSQL database and needs to import terabytes of data from S3 using the 'aws_s3' extension. Despite running the command correctly, they receive a permission error. What configuration is essential for this to work?
a)
The S3 bucket must be public
b)
An IAM Role must be associated with the RDS instance with permissions to access the specific S3 bucket.
c)
The RDS instance must be in a public subnet to reach S3
d)
They must use IAM user credentials (Access Key/Secret Key) inside the SQL command
45.
(G3) 5. You have an RDS MySQL Multi-AZ deployment. A failure occurs in the primary availability zone, and automatic failover is triggered. What happens to existing application connections and how is service restored?
a)
Connections remain alive, and AWS migrates the session to the new instance without interruption
b)
Connections are dropped. The application must retry the connection using the same DNS endpoint, which will update to point to the standby instance's IP.
c)
AWS provides a new DNS endpoint that must be manually updated in the application configuration
d)
Failover requires manual intervention to promote the secondary instance
46.
(G3) 6. You are migrating a legacy Oracle database to Amazon Aurora PostgreSQL using AWS DMS. However, stored procedures and complex views have not been migrated. What tool should you have used for this specific step?
a)
Enable the 'Full Load' option in the DMS task
b)
AWS Schema Conversion Tool (SCT).
c)
Use the native 'pg_dump' tool
d)
AWS Glue with a transformation script
47.
(G3) 7. One of your RDS MySQL Read Replicas has significant Replica Lag. CloudWatch shows the replica's CPU and IOPS are maxed out, but the master is idle. What is the most likely cause?
a)
Network link failure between availability zones
b)
The master instance is processing too many writes
c)
Complex read queries running on the replica are blocking the SQL replication thread.
d)
The Multi-AZ configuration is interfering with the replica
48.
(G3) 8. A financial company uses RDS SQL Server Enterprise Edition. They require both automatic High Availability (HA) and the ability to offload reads to a secondary replica. Which architecture meets both requirements?
a)
RDS SQL Server with Database Mirroring
b)
RDS SQL Server Multi-AZ with Always On Availability Groups.
c)
RDS SQL Server with Log Shipping
d)
Install SQL Server on EC2 with Failover Cluster Instances (FCI)
49.
(G3) 9. You are using Amazon Aurora Serverless v1, but notice connection errors during sudden spikes due to slow scaling. You need a solution that scales compute capacity instantly and granularly without dropping connections. What should you use?
a)
Amazon Aurora Provisioned with Auto Scaling
b)
Amazon Aurora Serverless v2.
c)
DynamoDB with On-Demand mode
d)
RDS Proxy
50.
(G3) 10. You have enabled 'Enhanced Monitoring' on your RDS instance. What is the main difference between these metrics and standard CloudWatch metrics?
a)
Enhanced Monitoring offers real-time metrics with up to 1-second granularity at the Operating System (OS) level.
b)
Enhanced Monitoring is only for the database engine (SQL queries), while CloudWatch is for infrastructure
c)
CloudWatch does not allow configuring alarms, while Enhanced Monitoring does
d)
Enhanced Monitoring is free, while CloudWatch metrics always cost money
51.
(G8) 2 - Una aplicación de comercio electrónico utiliza una base de datos Amazon RDS for PostgreSQL en una configuración Multi-AZ. La aplicación está experimentando una latencia alta debido a un gran volumen de consultas SELECT generadas por el sistema de reportes. Se requiere una solución que descargue este tráfico de la instancia principal y asegure que los datos de reportes estén disponibles incluso si la instancia principal falla, aunque se tolera una ligera inconsistencia de datos (segundos).
a)
1. Aumentar el tamaño de la instancia RDS a un tipo de instancia con mayor capacidad de memoria (escalado vertical)
b)
2. Crear una Réplica de Lectura (Read Replica) en la misma región y configurar la aplicación de reportes para usar el endpoint de la réplica.
c)
3. Configurar una segunda instancia Multi-AZ en espera (Standby) y dirigir el tráfico de lectura hacia ella
d)
4. Utilizar Amazon ElastiCache delante de la base de datos para cachear todas las consultas de escritura
52.
(G8) 3 - Una empresa despliega una aplicación web en tres capas dentro de una VPC: un servidor web en una subred pública, un servidor de aplicaciones en una subred privada y una base de datos RDS MySQL en una subred privada. Los Grupos de Seguridad (Security Groups) deben configurarse siguiendo el principio de menor privilegio. ¿Qué configuración de reglas de entrada (Inbound) es la correcta para el Grupo de Seguridad de la Base de Datos?
a)
1. Permitir tráfico TCP en el puerto 3306 desde 0.0.0.0/0
b)
2. Permitir tráfico TCP en el puerto 443 desde el Grupo de Seguridad del Servidor Web
c)
3. Permitir tráfico TCP en el puerto 3306 proveniente del Grupo de Seguridad del Servidor de Aplicaciones.
d)
4. Permitir tráfico TCP en el puerto 3306 desde la dirección IP elástica del Servidor Web
53.
(G8) 4 - Una plataforma de juegos online utiliza Amazon DynamoDB para almacenar las puntuaciones de los jugadores en tiempo real. Durante los torneos, la tabla recibe millones de solicitudes de lectura por segundo, y los usuarios exigen tiempos de respuesta en microsegundos. A pesar de aumentar la capacidad aprovisionada, la latencia sigue siendo de milisegundos. ¿Qué solución ofrece el rendimiento requerido de manera más eficiente?
a)
1. Configurar DynamoDB Auto Scaling para aumentar la capacidad de lectura automáticamente
b)
2. Implementar Amazon DynamoDB Accelerator (DAX) frente a la tabla de puntuaciones.
c)
3. Migrar la base de datos a Amazon RDS con discos Provisioned IOPS
d)
4. Crear Índices Secundarios Globales (GSI) para distribuir la carga de lectura
54.
(G8) 5 - Un arquitecto de soluciones está diseñando una nueva aplicación crítica utilizando Amazon Aurora. El requisito es tener tolerancia a fallos automática. Si la instancia principal (Writer) falla, el sistema debe recuperarse automáticamente en menos de un minuto sin intervención manual en la cadena de conexión de la aplicación. ¿Cómo se debe configurar la conexión de la aplicación?
a)
1. Configurar la aplicación para conectarse a todos los endpoints de las instancias y realizar balanceo de carga en el cliente
b)
2. Utilizar el "Reader Endpoint" de Aurora para todas las operaciones de escritura y lectura
c)
3. Conectar la aplicación al "Cluster Endpoint" de Aurora.
d)
4. Crear una alarma de CloudWatch que active una función Lambda para cambiar el DNS de la aplicación al endpoint de una réplica
55.
(G8) 6 - Una compañía financiera utiliza una base de datos RDS SQL Server en la región us-east-1. Por normativas legales, deben tener una copia de los datos disponible en la región eu-west-1 para recuperación ante desastres (DR) con un RTO (Recovery Time Objective) bajo. ¿Cuál es la estrategia más efectiva?
a)
1. Configurar una tarea programada que copie los snapshots automáticos a un bucket S3 en la región eu-west-1 diariamente
b)
2. Crear una Réplica de Lectura entre regiones (Cross-Region Read Replica) en eu-west-1 y promocionarla manualmente en caso de desastre.
c)
3. Utilizar RDS Multi-AZ configurando la instancia secundaria directamente en la región eu-west-1
d)
4. Habilitar la replicación de almacenamiento a nivel de disco utilizando AWS Storage Gateway
56.
(G8) 10 - Un desarrollador junior ha borrado accidentalmente una tabla crítica en la base de datos de producción RDS a las 10:00 AM. La política de copias de seguridad automáticas está configurada con un periodo de retención de 7 días. ¿Cuál es la forma más rápida y precisa de recuperar los datos hasta justo antes del borrado (ej. 09:55 AM)?
a)
1. Restaurar el último snapshot automático diario creado la noche anterior
b)
2. Utilizar la función "Point-in-Time Recovery" para restaurar la base de datos a una nueva instancia con estado a las 09:55 AM.
c)
3. Usar los logs de transacciones de la base de datos para deshacer el comando DROP TABLE en la instancia actual
d)
4. Solicitar a AWS Support que restaure la tabla desde sus copias de seguridad internas