QUESTION 21
An advertising company stores terabytes of data in an Amazon S3 data lake. The company wants to build its own foundation model (FM) and has deployed a training cluster on AWS. The company loads file-based data from Amazon S3 to the training cluster to train the FM. The company wants to reduce data loading time to optimize the overall deployment cycle. The company needs a storage solution that is natively integrated with Amazon S3. The solution must be scalable and provide high throughput. Which storage solution will meet these requirements?

A. Mount an Amazon Elastic File System (Amazon EFS) file system to the training cluster. Use AWS DataSync to migrate data from Amazon S3 to the EFS file system to train the FM.
B. Use an Amazon FSx for Lustre file system and Amazon S3 with Data Repository Association (DRA). Preload the data from Amazon S3 to the Lustre file system to train the FM.
C. Attach Amazon Block Store (Amazon EBS) volumes to the training cluster. Load the data from Amazon S3 to the EBS volumes to train the FM.
D. Use AWS DataSync to migrate the data from Amazon S3 to the training cluster as files. Train the FM on the local file-based data.

Correct Answer: B

QUESTION 22
A company has 700 TB of backup data stored in network attached storage (NAS) in its data center. This backup data needs to be accessible for infrequent regulatory requests and must be retained 7 years. The company has decided to migrate this backup data from its data center to AWS. The migration must be complete within 1 month. The company has 500 Mbps of dedicated bandwidth on its public internet connection available for data transfer. What should a solutions architect do to migrate and store the data at the LOWEST cost?

A. Order AWS Snowball devices to transfer the data. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
B. Deploy a VPN connection between the data center and Amazon VPC. Use the AWS CLI to copy the data from on premises to Amazon S3 Glacier Flexible Retrieval.
C. Provision a 500 Mbps AWS Direct Connect connection and transfer the data to Amazon S3. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
D. Use AWS DataSync to transfer the data and deploy a DataSync agent on premises. Use the DataSync task to copy files from the on-premises NAS storage to Amazon S3 Glacier Deep Archive.

Correct Answer: A

QUESTION 23
A company runs a customer verification application on AWS. The application uploads customer documents to an Amazon S3 bucket. To comply with regulations, the company must retain the uploaded documents for 10 years. During the retention period, the company must prevent any user, including the AWS account root user, from overwriting or deleting the protected documents. Which solution will meet these requirements?

A. Enable versioning on the S3 bucket. Configure a 10-year retention policy for the S3 bucket. Use Governance retention mode.
B. Enable versioning on the S3 bucket and use server-side encryption with Amazon S3 managed keys (SSE-S3). Configure an S3 Lifecycle rule to immediately transition uploaded objects to S3 Standard-Infrequent Access (S3 Standard-IA).
C. Enable versioning on the S3 bucket. Configure a 10-year retention policy for the S3 bucket. Use Compliance retention mode.
D. Enable versioning on the S3 bucket. Set an S3 Lifecycle rule to immediately transition uploaded objects to S3 Glacier Deep Archive.

Correct Answer: C

QUESTION 24
A company runs a web application on Amazon EC2 instances in a private subnet within a VPC. An internet-facing Application Load Balancer (ALB) directs web traffic to the EC2 instances. The company wants to implement new security measures to allow traffic only to the EC2 instances from the ALB. The company wants to prevent access from any other source inside or outside the private subnet of the EC2 instances. Which solution will meet these requirements?

A. Configure a route in each subnet’s route table to direct traffic from the internet to the private IP addresses of the EC2 instances.
B. Configure the security group for the EC2 instances to allow traffic only from the security group for the ALB.
C. Move the EC2 instances into a public subnet. Give the EC2 instances a set of Elastic IP addresses.
D. Configure the security group for the ALB to allow any TCP traffic on any port.

Correct Answer: B

QUESTION 25
A company wants to migrate terabytes of frequently used JSON documents to AWS. The solution must allow fast JSON document queries that combine data from multiple sources, perform calculations on datasets, and search for text patterns within the data. The company expects the structure of the JSON documents to change in the future. Which solution will meet these requirements?

A. Convert the documents to a relational data structure. Store the documents in an Amazon RDS DB cluster. Perform SQL queries on the DB cluster.
B. Store the documents in an Amazon S3 bucket. Use Amazon Athena to perform SQL queries on the S3 bucket contents.
C. Store the documents in Amazon DocumentDB (with MongoDB compatibility). Run queries on the stored documents.
D. Store the JSON data in Amazon DynamoDB. Run queries on the stored data.

Correct Answer: B

QUESTION 26
A company deploys an application that consists of an Amazon EC2 instance and an Amazon RDS instance in a Single-AZ configuration. The company deploys both instances without public IP addresses. The company wants to minimize the overall data transfer costs for communication between the EC2 instance and the RDS instance. Which solution will meet this requirement?

A. Deploy the EC2 instance in the same Availability Zone as the RDS instance.
B. Deploy the EC2 instance and the RDS instance in separate Availability Zones within the same AWS Region.
C. Configure UDP connectivity between the EC2 instance and the RDS instance.
D. Configure IPv6 connectivity between the EC2 instance and the RDS instance.

Correct Answer: A

QUESTION 27
A company does not have enough on-premises storage capacity for its file-based storage. The company has many applications that use both SMB and NFS protocols. A solutions architect needs a solution that extends the current storage capacity. The solution must not require major changes to the applications. Which solution will meet these requirements?

A. Mount a scalable Amazon Elastic File System (Amazon EFS) file system to all application servers by using NFS.
B. Deploy an Amazon S3 File Gateway on premises to expose a local file share through SMB and NFS. Store the data in Amazon S3.
C. Attach Amazon Elastic Block Store (Amazon EBS) volumes to on-premises servers by using iSCSI.
D. Migrate the application data to Amazon S3. Update the applications to interact with object storage by using the AWS SDK or Amazon S3 compatible tools.

Correct Answer: B

QUESTION 28
A company hosts an application in an Amazon EC2 Auto Scaling group. The company has observed that during periods of high demand, new instances take too long to join the Auto Scaling group and serve the increased demand. The company determines that the root cause of the issue is the long boot time of the instances in the Auto Scaling group. The company needs to reduce the time required to launch new instances to respond to demand. Which solution will meet this requirement?

A. Increase the maximum capacity of the Auto Scaling group by 50%.
B. Create a warm pool for the Auto Scaling group. Use the default specification for the warm pool size.
C. Increase the health check grace period for the Auto Scaling group by 50%.
D. Create a scheduled scaling action. Set the desired capacity equal to the maximum capacity of the Auto Scaling group.

Correct Answer: B

QUESTION 29
A company runs an application on AWS that gives users the ability to manage smart home systems. The application architecture consists of an Amazon API Gateway REST API, AWS Lambda functions, and Amazon DynamoDB tables. The company has deployed the application in the us-east-1 Region. The company initially designed the application to serve users in the United States (US). Currently, millions of users access the application worldwide. A solutions architect observes that application latency for non-US users is high. Which solution will reduce application latency for all users?

A. Increase the Amazon DynamoDB table capacity to handle the additional load.
B. Set up Lambda provisioned concurrency to handle the additional load.
C. Create an Amazon CloudFront distribution. Add the REST API as an origin.
D. Use Amazon DynamoDB global tables. Deploy the REST API and Lambda functions to additional AWS Regions.

Correct Answer: D

QUESTION 30
A company stores customer feedback data in text format in Amazon S3. The feedback comes from various channels, such email, online forms, and phone calls. The company wants a solution to analyze the feedback data and categorize the data as positive or negative. The company will use the data to train a customer support team. The company needs the data to be available for fast querying and integration with the company’s business intelligence tools. A solutions architect must design the solution by using AWS managed services. Which solution will meet these requirements?

A. Use Amazon Lex to analyze and categorize the feedback. Store the results in Amazon SageMaker AI.
B. Use Amazon Comprehend to analyze and categorize the feedback. Store the results in Amazon Redshift.
C. Use Amazon Rekognition to analyze and categorize the feedback. Store the results in an S3 bucket. Use Amazon Athena to query the results.
D. Use a custom classifier that runs on an Amazon EC2 instance to analyze and categorize the feedback. Use Amazon Managed Grafana to query the results.

Correct Answer: B

QUESTION 31
A company uses an Amazon CloudFront distribution to serve content for a web application. The company uses an Amazon S3 bucket as the origin for the distribution. The web application and cached content should be accessible only for the company’s paid customers. However, the company discovers that other users are able to bypass the CloudFront distribution and access the content directly from the S3 bucket. The company needs a solution to prevent unintended access to the web application and S3 content. Which solution will meet this requirement with the LEAST development effort?

A. Configure an origin access control (OAC) in CloudFront. Associate the OAC with the source bucket. Update the source S3 bucket policy.
B. Configure the CloudFront distribution to enforce HTTPS only in the origin settings for the S3 origin.
C. Update the S3 bucket policy to allow access only from the published ip-ranges.json document that AWS provides.
D. Deploy an AWS Lambda@Edge function to inspect requests made to the CloudFront distribution. Deny all requests that do not have a session token.

Correct Answer: A

QUESTION 32
A company plans to deploy a web application on an existing Amazon Elastic Kubernetes Service (Amazon EKS) cluster that hosts critical workloads. The cluster uses a private Network Load Balancer (NLB) to handle application access. The company must protect the application against web-based attacks and DDoS threats. The application must have secure global internet access. Which solution will meet these requirements?

A. Deploy a Gateway Load Balancer (GWLB) in front of the NLB. Deploy AWS Network Firewall and implement rules. Enable Amazon GuardDuty.
B. Configure AWS Global Accelerator to use the NLB as a listener. Enable AWS Shield Advanced. Implement network ACLs to restrict access to known good IP ranges.
C. Deploy Amazon CloudFront with a VPC origin that points to the NLB. Implement AWS WAFv2 managed rules and AWS Shield Advanced.
D. Expose the NLB through AWS PrivateLink. Deploy AWS Network Firewall and implement rules. Enable Amazon GuardDuty.

Correct Answer: C

QUESTION 33
A company wants to run a batch processing application that can handle interruptions. The application can run on 500 Amazon EC2 instances during peak processing times. The application can use various instance types, but the instances must meet minimum memory requirements. The application must remain highly available. Which solution will meet these requirements MOST cost-effectively?

A. Launch an EC2 Fleet of Spot Instances that includes multiple instance types across multiple Availability Zones. Set the target capacity to 500 instances. Use a capacity optimized allocation strategy. Set the spending limit based on the On-Demand pricing.
B. Launch 250 EC2 On-Demand Instances and 250 Reserved Instances across multiple Availability Zones. Use Auto Scaling groups to manage capacity. Implement a target tracking scaling policy based on CPU utilization.
C. Launch an EC2 Fleet of Spot Instances that includes one instance type in a single Availability Zone. Launch 500 instances by using the lowest price allocation strategy. Configure the fleet to automatically replace interrupted instances to maintain capacity.
D. Launch 500 EC2 On-Demand Instances. Purchase a 1-year Savings Plan. Implement Auto Scaling groups across multiple Availability Zones. Use scheduled scaling actions to adjust capacity during known peak times.

Correct Answer: A

QUESTION 34
A company wants to optimize Amazon S3 storage costs for the company’s video content. The company needs to archive the video content 6 months after the company creates the content. The company must delete the content after 24 months. Which solution will meet these requirements with the LEAST operational effort?

A. Use S3 Intelligent-Tiering to transition the content to S3 Glacier Flexible Retrieval after 6 months. Configure an Object Lock retention period of 24 months.
B. Create an Amazon Elastic File System (Amazon EFS) lifecycle configuration to transition the content to S3 Glacier Flexible Retrieval after 6 months. Configure a lifecycle rule to expire the objects after 24 months.
C. Use AWS DataSync to transition the content to S3 Glacier Deep Archive after 6 months and to expire the objects after 24 months.
D. Create an S3 Lifecycle configuration to transition the content to S3 Glacier Flexible Retrieval after 6 months and to expire objects after 24 months.

Correct Answer: D

QUESTION 35
A manufacturing company is building an inventory reconciliation workload that must run every night. The workload processes large CSV files in parallel. The workload takes up to 20 minutes to process each file. The company wants to minimize infrastructure management for the workload. The workload must automatically scale to handle unpredictable job spikes. Which solution will meet these requirements?

A. Configure AWS Lambda functions with Amazon S3 triggers to handle the workload. Use Amazon DynamoDB to track states.
B. Configure AWS Batch to handle the workload. Use AWS Fargate Spot capacity providers.
C. Launch Amazon EC2 Reserved Instances in a compute optimized instance family.
D. Deploy Amazon Elastic Kubernetes Service (Amazon EKS) with a Cluster Autoscaler and On-Demand Instances.

Correct Answer: B

QUESTION 36
An employee accesses the AWS Management Console through an IAM user. The employee takes a new job role within the company. The new job role requires only programmatic access to AWS. The company must disable the employee’s direct access to the Console. Which solution will meet this requirement with the LEAST operational overhead?

A. Remove the password for the IAM user. Keep active access keys.
B. Expire the active access keys. Remove the password for the IAM user.
C. Remove the existing policies that are attached to the IAM user.
D. Delete the existing IAM user. Create a new IAM user for the new job role and set a new password.

Correct Answer: A

QUESTION 37
A company needs to establish a private connection to AWS to migrate 50 GB of data from the company’s on-premises environment to an Amazon S3 bucket. The company has already created a VPC. The company expects the migration to last less than one month. The company requires a cost-effective connectivity solution to perform the data transfer.
Which combination of solutions will meet these requirements? (Select TWO.)

A. Set up an AWS Direct Connect connection with a private virtual interface (VIF). Configure appropriate routing.
B. Configure an AWS Site-to-Site VPN connection from the VPC to the on-premises environment. Configure appropriate routing.
C. Create an S3 interface endpoint in the VPC.
D. Create an S3 gateway endpoint in the VPC.
E. Set up an AWS Client VPN connection between the on-premises environment and the VPC. Configure appropriate routing.

Correct Answer: BE

QUESTION 38
A company needs to run complex analytics jobs on a schedule several times each month. The company plans to run the analytics jobs for the next 3 years. When the company runs an analytics job, the job must not be interrupted for 24 hours. Which solution will meet these requirements MOST cost-effectively?

A. Purchase Amazon EC2 Reserved Instances for a 3-year term to run the analytics jobs. Use Amazon Elastic File System (Amazon EFS) storage for the EC2 instances.
B. Distribute the analytics jobs across multiple AWS Lambda functions. Use Amazon Elastic File System (Amazon EFS) storage to give the functions the ability to share data with one another.
C. Use Amazon EMR Serverless to run the analytics jobs. Configure EMR Serverless with high pre-initialized capacity.
D. Use an Amazon EMR cluster to run the analytics jobs by using Amazon EC2 On-Demand Instances. Configure an auto-termination policy.

Correct Answer: D

QUESTION 39
A company deploys an application on Amazon EC2 Spot Instances. The company observes frequent unavailability issues that affect the application’s output. The application instances all use the same instance type in a single Availability Zone. The application architecture does not require the use of any specific instance family. The company needs a solution to improve the availability of the application. Which combination of steps will meet this requirement MOST cost-effectively? (Select THREE.)

A. Create an EC2 Auto Scaling group that includes a mix of Spot Instances and a base number of On-Demand Instances.
B. Create EC2 Capacity Reservations.
C. Use the lowest price allocation strategy for Spot Instances.
D. Specify similarly sized instance types and Availability Zones for the Spot Instances.
E. Use a different instance type for the web application.
F. Use the price capacity optimized strategy for Spot Instances.

Correct Answer: ADF

QUESTION 40
A company runs an ecommerce application in an Amazon EC2 Auto Scaling group. The application experiences unpredictable traffic spikes, and customers report slow response times. A solutions architect observes that CPU utilization frequently exceeds 95% during traffic spikes. The high CPU utilization causes performance issues for users. The solutions architect needs to address the performance issues during traffic spikes. Which solution will meet this requirement in the MOST cost-effective way?

A. Configure scheduled scaling policies.
B. Configure target tracking scaling policies.
C. Configure simple scaling policies.
D. Configure step scaling policies.

Correct Answer: B