QUESTION 1
A research company runs experiments that are powered by a simulation application and a visualization application. The simulation application runs on Linux and outputs intermediate data to an NFS share every 5 minutes. The visualization application is a Windows desktop application that displays the simulation output and requires an SMB file system. The company maintains two synchronized file systems. This strategy is causing data duplication and inefficient resource usage. The company needs to migrate the applications to AWS without making code changes to either application. Which solution will meet these requirements?

A. Migrate both applications to AWS Lambda. Create an Amazon S3 bucket to exchange data between the applications.
B. Migrate both applications to Amazon Elastic Container Service (Amazon ECS). Configure Amazon FSx File Gateway for storage.
C. Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon Simple Queue Service (Amazon SQS) to exchange data between the applications.
D. Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon FSx for NetApp ONTAP for storage.

Correct Answer: D

QUESTION 2
A weather forecasting company collects temperature readings from various sensors on a continuous basis. An existing data ingestion process collects the readings and aggregates the readings into larger Apache Parquet files. Then the process encrypts the files by using client-side encryption with KMS managed keys (CSE-KMS). Finally, the process writes the files to an Amazon S3 bucket with separate prefixes for each calendar day. The company wants to run occasional SQL queries on the data to take sample moving averages for a specific calendar day. Which solution will meet these requirements MOST cost-effectively?

A. Configure Amazon Athena to read the encrypted files. Run SQL queries on the data directly in Amazon S3.
B. Use Amazon S3 Storage Lens to run SQL queries on the data directly in Amazon S3.
C. Configure Amazon Redshift to read the encrypted files. Use Redshift Spectrum and Redshift query editor v2 to run SQL queries on the data directly in Amazon S3.
D. Configure Amazon EMR Serverless to read the encrypted files. Use Apache SparkSQL to run SQL queries on the data directly in Amazon S3.

Correct Answer: D

QUESTION 3
A finance company is developing a high-frequency trading application that requires real-time access to unstructured datasets that are stored in an Amazon S3 bucket. The application needs to process data with single-digit millisecond latency and can tolerate lower durability. The company will expose the data through an AWS AppSync GraphQL API.
Which solution will meet these requirements?

A. Copy the data from Amazon S3 to Amazon DocumentDB (with MongoDB compatibility). Use AWS AppSync resolvers to fetch the data from DocumentDB.
B. Copy the data from Amazon S3 to Amazon Aurora. Use AWS AppSync resolvers to fetch the data from Aurora.
C. Use AWS AppSync resolvers to fetch the data from the existing S3 bucket.
D. Copy the data from the existing bucket to a new S3 Express One Zone bucket. Use AWS AppSync resolvers to fetch the data from the S3 Express One Zone bucket.

Correct Answer: D

QUESTION 4
A media company stores customer-uploaded videos in an Amazon S3 bucket with the Standard storage class. The company wants to create an S3 Lifecycle configuration. The company will set the maximum retention time to 7 days. However, the configuration must delete any video that is more than 1 TB in size after 48 hours. Which solution will meet these requirements?

A. Create a single S3 Lifecycle configuration that has two rules. Configure the first rule to expire objects after 48 hours with a filter of ObjectSizeGreater Than and a value of 1 TB. Configure the second rule to expire objects after 7 days.
B. Create two S3 Lifecycle configurations. Include a rule in the first configuration to expire objects after 48 hours by using a Prefix filter of LargeFiles. Include a rule in the second configuration to expire objects after 7 days.
C. Create a single S3 Lifecycle configuration that has two rules. Configure the first rule to expire objects after 48 hours. Configure the second rule to expire objects after 7 days.
D. Create two S3 Lifecycle configurations. Include a rule in the first configuration to expire objects after 48 hours. Include a rule in the second configuration to expire objects after 7 days by using a filter of ObjectSizeLessThan and a value of 1 TB.

Correct Answer: A

QUESTION 5
A manufacturing company wants to modernize factory operations across multiple locations. Some of the company facilities are in remote locations that have limited or no internet connectivity. The company needs to access storage and compute resources at remote facilities. Which solution will meet these requirements in the MOST cost-effective way?

A. Deploy AWS Outposts at all remote facilities. Synchronize data with AWS when connectivity is available.
B. Use an AWS Snowball Edge device to process data at all remote facilities. Synchronize data with AWS when connectivity is available
C. Deploy an AWS Storage Gateway S3 File Gateway as a virtual machine (VM) at all remote facilities. Synchronize data with AWS when connectivity is available.
D. Deploy an AWS Storage Gateway S3 File Gateway as a virtual machine (VM) at all remote facilities. Establish a secure AWS Site-to-Site VPN connection between the remote facilities and AWS.

Correct Answer: B

QUESTION 6
A company is developing an application to produce internal financial reports. The application is a single page application that uses an Amazon CloudFront distribution with an Amazon S3 bucket as the origin. The application backend uses an Amazon API Gateway REST API, an AWS Lambda authorizer, and an Amazon RDS database. All resources are in a private subnet that has no connection to the internet. The company currently uses AWS WAF IP filtering rules to restrict the application to the company’s internal network. The company must follow zero trust architecture (ZTA) principles for the application. The company wants to remove the AWS WAF IP filtering rules. Which solution will meet these requirements?

A. Move all backend resources to a public subnet. Remove the AWS WAF IP filtering rules.
B. Use Lambda@Edge functions in CloudFront to implement token validation. Move the REST API and Lambda authorizer to a public subnet. Remove the AWS WAF IP filtering rules.
C. Use CloudFront functions to implement token validation. Move the REST API and Lambda authorizer to a public subnet. Remove the Lambda authorizer from the REST API. Remove the AWS WAF IP filtering rules.
D. Implement token validation in AWS WAF. Remove the AWS WAF IP filtering rules.

Correct Answer: B

QUESTION 7
A company has a batch processing application that runs every day. The process typically takes an average 3 hours to complete. The application can handle interruptions and can resume the process after a restart. Currently, the company runs the application on Amazon EC2 On-Demand Instances. The company wants to optimize costs while maintaining the same performance level. Which solution will meet these requirements MOST cost-effectively?

A. Purchase a 1-year EC2 Instance Savings Plan for the appropriate instance family and size to mee the requirements of the application.
B. Use EC2 On-Demand Capacity Reservations based on the appropriate instance family and size to meet the requirements of the application. Run the EC2 instances in an Auto Scaling group.
C. Determine the appropriate instance family and size to meet the requirements of the application. Convert the application to run on AWS Batch with EC2 On-Demand Instances. Purchase a 1-year Compute Savings Plan.
D. Determine the appropriate instance family and size to meet the requirements of the application. Convert the application to run on AWS Batch with EC2 Spot Instances.

Correct Answer: D

QUESTION 8
A weather forecasting company collects temperature readings from various sensors on a continuous basis. An existing data ingestion process collects the readings and aggregates the readings into larger Apache Parquet files. Then the process encrypts the files by using client-side encryption with KMS managed keys (CSE-KMS). Finally, the process writes the files to an Amazon S3 bucket with separate prefixes for each calendar day. The company wants to run occasional SQL queries on the data to take sample moving averages for a specific calendar day. Which solution will meet these requirements MOST cost-effectively?

A. Configure Amazon Athena to read the encrypted files. Run SQL queries on the data directly in Amazon S3.
B. Use Amazon S3 Storage Lens to run SQL queries on the data directly in Amazon S3.
C. Configure Amazon Redshift to read the encrypted files. Use Redshift Spectrum and Redshift query editor v2 to run SQL queries on the data directly in Amazon S3.
D. Configure Amazon EMR Serverless to read the encrypted files. Use Apache SparkSQL to run SQL queries on the data directly in Amazon S3.
Correct Answer: A

QUESTION 9
A company needs a data encryption solution for a machine learning (ML) process. The solution must use an AWS managed service. The ML process currently reads a large number of objects in Amazon S3 that are encrypted by a customer managed AWS KMS key. The current process incurs significant costs because of excessive calls to AWS Key Management Service (AWS KMS) to decrypt S3 objects. The company wants to reduce the costs of API calls to decrypt S3 objects. Which solution will meet these requirements?

A. Switch from a customer managed KMS key to an AWS managed KMS key.
B. Remove the AWS KMS encryption from the S3 bucket. Use a bucket policy to encrypt the data instead.
C. Recreate the KMS key in AWS CloudHSM.
D. Use S3 Bucket Keys to perform server-side encryption with AWS KMS keys (SSE-KMS) to encrypt and decrypt objects from Amazon S3.

Correct Answer: D

QUESTION 10
A company runs an application on premises. The application stores files that the application servers process in a shared storage system. The company uses Linux file system permissions to control access to the files. The company plans to migrate the application servers to Amazon EC2 instances across multiple Availability Zones. The company does not want to change the application code. Which solution will meet these requirements?

A. Migrate the files to an Amazon S3 bucket. Use the S3 Intelligent-Tiering storage class. Mount the S3 bucket to the EC2 instances.
B. Migrate the files to a set of Amazon EC2 instance store volumes. Mount the instance store volumes to the EC2 instances.
C. Migrate the files to a set of Amazon Elastic Block Store (Amazon EBS) volumes. Mount the EBS volumes to the EC2 instances.
D. Migrate the files to an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system to the EC2 instances.

Correct Answer: D

QUESTION 11
An ecommerce company hosts an analytics application on AWS. The company deployed the application to one AWS Region. The application generates 300 MB of data each month. The application stores the data in JSON format. The data must be accessible in milliseconds when needed. The company must retain the data for 30 days. The company requires a disaster recovery solution to back up the data. Which solution will meet these requirements MOST cost-effectively?

A. Deploy an Amazon OpenSearch Service cluster in the primary Region and in a second Region. Enable OpenSearch Service cluster replication. Configure the clusters to expire data after 30 days. Modify the application to use OpenSearch Service to store the data.
B. Deploy an Amazon S3 bucket in the primary Region and in a second Region. Enable versioning on both buckets. Use the Standard storage class. Configure S3 Lifecycle policies to expire objects after 30 days. Configure S3 Cross-Region Replication from the bucket in the primary bucket to the backup bucket.
C. Deploy an Amazon Aurora PostgreSQL global database. Configure cluster replication between the primary Region and a second Region. Use a replicated cluster endpoint during outages in the primary Region.
D. Deploy an Amazon RDS for PostgreSQL cluster in the same Region where the application is deployed. Configure a read replica in a second Region as a backup.

Correct Answer: B

QUESTION 12
A company must use external cryptographic keys to encrypt and decrypt data on AWS. The company must store the keys in an on-premises key manager to comply with regulations. The company needs a solution that supports key managers from multiple vendors. Which solution will meet these requirements with the LEAST operational overhead?

A. Store the external keys in an AWS CloudHSM cluster.
B. Use AWS Key Management Service (AWS KMS) to store the keys in an External Key Store (XKS).
C. Use AWS Outposts to deploy an Amazon S3 bucket in the on-premises location. Enable server-side encryption with customer-provided keys (SSE-C).
D. Use AWS Outposts to deploy an Amazon S3 bucket in the on-premises data center. Enable server-side encryption with AWS KMS keys (SSE-KMS).

Correct Answer: B

QUESTION 13
A weather forecasting company collects temperature readings from various sensors on a continuous basis. An existing data ingestion process collects the readings and aggregates the readings into larger Apache Parquet files. Then the process encrypts the files by using client-side encryption with KMS managed keys (CSE-KMS). Finally, the process writes the files to an Amazon S3 bucket with separate prefixes for each calendar day. The company wants to run occasional SQL queries on the data to take sample moving averages for a specific calendar day. Which solution will meet these requirements MOST cost-effectively?

A. Configure Amazon Athena to read the encrypted files. Run SQL queries on the data directly in Amazon S3.
B. Use Amazon S3 Storage Lens to run SQL queries on the data directly in Amazon S3.
C. Configure Amazon Redshift to read the encrypted files. Use Redshift Spectrum and Redshift query editor v2 to run SQL queries on the data directly in Amazon S3.
D. Configure Amazon EMR Serverless to read the encrypted files. Use Apache SparkSQL to run SQL queries on the data directly in Amazon S3.

Correct Answer: A

QUESTION 14
A company is launching a new web application. Users from around the world will access the application. The application must be highly available. The company requires static IPv4 and IPv6 addresses so enterprise clients can add the application to allowlists. The web application uses server-side rendering with Node.js. The company needs a scalable solution to ensure low latency and high performance. Which solution will meet these requirements?

A. Deploy the web application in an Amazon EC2 Auto Scaling group in two AWS Regions behind Elastic Load Balancing (ELB) load balancers. Use Amazon Route 53 with latency-based routing to direct traffic to the closest Region.
B. Use an Amazon Elastic Container Service (Amazon ECS) cluster on AWS Fargate with an Application Load Balancer (ALB). Create an AWS Global Accelerator standard accelerator. Add the ALB as an endpoint.
C. Use AWS Lambda functions to handle the application components. Create an Amazon API Gateway REST API that uses the Lambda functions as targets.
D. Deploy the application to an Amazon S3 bucket. Create an Amazon CloudFront distribution that has static IP addresses. Configure the S3 bucket as the origin.

Correct Answer: B

QUESTION 15
A company runs an enterprise solution in the AWS Cloud. The company wants to collect, analyze, and publish telemetry data in near real time. The company wants to load and stream the telemetry data to a data lake storage solution. Which solution will meet these requirements?

A. Use Amazon Kinesis Data Streams to collect and analyze the telemetry data in near real time. Publish the data to Amazon Data Firehose. Load and stream the data to Amazon S3. Use AWS Lake Formation as the data lake storage solution.
B. Use Amazon Data Firehose to collect and analyze the telemetry data in near real time. Publish the data to Amazon Kinesis Data Streams. Load and stream the data to Amazon S3. Use Amazon S3 and AWS Glue Data Catalog as the data lake storage solution.
C. Amazon Managed Service for Apache Flink to collect and analyze the telemetry data in near real time. Publish the data to Amazon Kinesis Data Streams. Load and stream the data to Amazon S3. Use Amazon S3 and AWS Glue Data Catalog as the data lake storage solution.
D. Use an AWS Lambda@Edge function to collect and analyze the telemetry data in near real time. Publish the data to AWS Batch. Load and stream the data to Amazon S3. Use AWS Lake Formation as the data lake storage solution.

Correct Answer: C

QUESTION 16
A company runs a web application in the AWS Cloud. The company wants to collect transaction data in near real time. The company also wants to prevent duplicate data in the queue. The data will require additional processing after collection. The company does not want to manage infrastructure. Which solution will meet these requirements?

A. Configure an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Configure an AWS Lambda function with an event source mapping for the FIFO queue to process the data.
B. Configure an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Use an AWS Batch job to remove duplicate data from the queue. Configure an AWS Lambda function to process the data.
C. Lambda function to process the data. Use Amazon Kinesis Data Streams to send the incoming transaction data to an AWS Batch job that removes duplicate data. Launch an Amazon EC2 instance that runs a custom script to process the data.
D. Set up an AWS Step Functions state machine to send incoming transaction data to an AWS Lambda function to remove duplicate data. Launch an Amazon EC2 instance that runs a custom script to process the data.

Correct Answer: A
QUESTION 17
A company runs an application in an experimental environment on AWS. The application uses components in three separate VPCs. Two VPCs are in one AWS Region, and one VPC is in a second Region. The components that run in the two VPCs that share a Region need to communicate with each other and with the component that runs in the third VPC. The company wants to establish connectivity between the VPCs. Which solution will meet these requirements MOST cost-effective way?

A. Create VPC peering connections between the three VPCs. Establish connectivity by updating the VPC route tables.
B. Create one transit gateway in each of the two Regions. Peer the transit gateways. Attach all three VPCs to the transit gateway. Update the route tables.
C. Create AWS PrivateLink connections between the three VPCs. Establish connectivity by creating endpoints and endpoint services.
D. Create AWS Site-to-Site VPN connections between the three VPCs. Establish connectivity by updating the VPC route tables.

Correct Answer: A

QUESTION 18
A solutions architect is designing the architecture for a two-tier web application. The web application consists of an internet-facing Application Load Balancer (ALB) that forwards traffic to an Auto Scaling group of Amazon EC2 instances The EC2 instances must be able to access an Amazon RDS database. The company does not want to rely solely on security groups or network ACLs. Only the minimum resources that are necessary should be routable from the internet. Which network design meets these requirements?

A. Place the ALB, EC2 instances, and RDS database in private subnets.
B. Place the ALB in public subnets. Place the EC2 instances and RDS database in private subnets.
C. Place the ALB and EC2 instances in public subnets. Place the RDS database in private subnets.
D. Place the ALB outside the VPC. Place the EC2 instances and RDS database in private subnets.

Correct Answer: B

QUESTION 19
A company uses Amazon RDS with default backup settings for its database tier. The company needs to make a daily backup of the database to meet regulatory requirements. The company must retain the backups for 30 days. Which solution will meet these requirements with the LEAST operational overhead?

A. Write an AWS Lambda function to create an RDS snapshot every day.
B. Modify the RDS database to have a retention period of 30 days for automated backups.
C. Use AWS Systems Manager Maintenance Windows to modify the RDS backup retention period.
D. Create a manual snapshot every day by using the AWS CLI. Modify the RDS backup retention period.

Correct Answer: B

QUESTION 20
A company is planning to connect a remote office to its AWS infrastructure. The office requires permanent and secure connectivity to AWS. The connection must provide secure access to resources in two VPCs. However, the VPCs must not be able to access each other. Which solution will meet these requirements MOST cost-effectively?

A. Create two transit gateways. Set up one AWS Site-to-Site VPN connection from the remote office to each transit gateway. Connect one VPC to the transit gateway. Configure route table propagation to the appropriate transit gateway based on the destination VPC IP range.
B. Set up one AWS Site-to-Site VPN connection from the remote office to each of the VPCs. Update the VPC route tables with static routes to the remote office resources.
C. Set up one AWS Site-to-Site VPN connection from the remote office to one of the VPCs. Set up VPC peering between the two VPCs. Update the VPC route tables with static routes to the remote office and peered resources.
D. Create a transit gateway. Set up an AWS Direct Connect gateway and one Direct Connect connection between the remote office and the Direct Connect gateway. Associate the transit gateway with the Direct Connect gateway. Configure a separate private virtual interface (VIF) for each VPC. and configure routing.

Correct Answer: B