QUESTION 41
An ecommerce company is redesigning a product catalog system to handle millions of products and provide fast access to product information. The system needs to store structured product data such as product name, price, description, and category. The system also needs to store unstructured data such as high- resolution product videos and user manuals. The architecture must be highly available and must be able to handle sudden spikes in traffic during large-scale sales events. Which solution will meet these requirements?
A. Use an Amazon RDS Multi-AZ deployment to store product information. Store product videos and user manuals in Amazon S3.
B. Use Amazon DynamoDB to store product information. Store product videos and user manuals in Amazon S3.
C. Store all product information, including product videos and user manuals, in Amazon DynamoDB.
D. Deploy an Amazon DocumentDB (with MongoDB compatibility) cluster to store all product information, product videos, and user manuals.
Correct Answer: B
QUESTION 42
A company deploys an application on Amazon EC2 Spot Instances. The company observes frequent unavailability issues that affect the application’s output. The application instances all use the same instance type in a single Availability Zone. The application architecture does not require the use of any specific instance family. The company needs a solution to improve the availability of the application. Which combination of steps will meet this requirement MOST cost-effectively? (Select THREE.)
A. Create an EC2 Auto Scaling group that includes a mix of Spot Instances and a base number of On-Demand Instances.
B. Create EC2 Capacity Reservations.
C. Use the lowest price allocation strategy for Spot Instances.
D. Specify similarly sized instance types and Availability Zones for the Spot Instances.
E. Use a different instance type for the web application.
F. Use the price capacity optimized strategy for Spot Instances.
Correct Answer: ADF
QUESTION 43
A company wants to use AWS DataSync to copy millions of files from multiple on-premises file systems to Amazon FSx for Windows File Server. The data transfer will start on a weekend to use all network bandwidth without affecting users. The company wants to maximize data transfer speed during the weekend. The company also wants to complete the transfer as soon as possible. The company must minimize the effect on users if the transfer does not finish by Monday morning. Which solution will meet these requirements?
A. Deploy a single DataSync agent. Configure task queuing. On Monday morning, set a bandwidth limit on any running tasks.
B. Deploy multiple DataSync agents. Run multiple tasks simultaneously. On Monday morning, set a bandwidth limit on any running tasks.
C. Deploy a single DataSync agent. Run multiple tasks simultaneously. On Monday morning, switch to task queuing.
D. Deploy multiple DataSync agents. Configure task queuing. On Monday morning, reschedule the tasks to run the next weekend.
Correct Answer: A
QUESTION 44
A company runs an application on premises. The company needs a solution to protect the application from ransomware attacks. The company wants to set up a disaster recovery (DR) site on AWS. If a ransomware attack occurs, the company wants to have the ability to activate the DR site. The solution must meet a recovery point objective (RPO) of several seconds and a recovery time objective (RTO) of several minutes. Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS Backup to back up the on-premises application to AWS. Enable Vault Lock. Configure an AWS Lambda function to restore the application data from AWS Backup and to run the application on AWS when a ransomware attack occurs.
B. Use AWS DataSync and AWS Storage Gateway to replicate the on-premises application to AWS. Use AWS CloudFormation to automatically provision infrastructure for the application. Activate the Aws environment when a ransomware attack occurs.
C. Use Terraform to set up infrastructure on AWS. Use AWS DataSync to migrate data to AWS on a schedule. Activate the AWS environment when a ransomware attack occurs.
D. Use AWS Elastic Disaster Recovery to set up a DR environment on AWS. Configure a automatic failover from the on-premises environment to AWS.
Correct Answer: D
QUESTION 45
A social media company develops a feature that allows users to upload photos. The company hosts the application on Amazon EC2 instances in a VPC. The application stores user photos in an Amazon S3 bucket in the same AWS Region as the EC2 instances. The EC2 instances process photos and send them to the S3 bucket. The company notices that data transfer costs are higher than expected. The company wants to optimize data transfer costs. Which solution will meet this requirement?
A. Deploy an Amazon S3 gateway endpoint in the VPC to transfer photos to the S3 bucket.
B. Enable S3 Transfer Acceleration on the S3 bucket. Use a public S3 endpoint to transfer photos from EC2 instances to the S3 bucket.
C. Set up an Amazon CloudFront distribution. Set the S3 bucket as the origin.
D. Use a NAT gateway to transfer photos from the EC2 instances in the private subnets to the S3 bucket.
Correct Answer: A
QUESTION 46
A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to serve a static website. The solution must use AWS WAF to inspect all website traffic. Which solution will meet these requirements?
A. Configure an S3 bucket policy to accept only requests that come from the AWS WAF Amazon Resource Name (ARN).
B. Configure CloudFront to forward all incoming requests to AWS WAF before CloudFront requests content from the S3 origin.
C. Configure a security group that allows only CloudFront IP addresses to access Amazon S3. Associate AWS WAF to the CloudFront distribution.
D. Configure CloudFront and Amazon S3 to use an origin access control (OAC) to secure the origin S3 bucket. Associate AWS WAF to the CloudFront distribution.
Correct Answer: D
QUESTION 47
A company’s application is experiencing a sudden increase in demand. The company needs to provision Amazon EC2 instances by using a large Amazon Machine Image (AMI). The EC2 instances must run in an Auto Scaling group. The company needs a solution that provides minimum initialization latency to meet the demand. Which solution will meet these requirements?
A. Use the Amazon EC2 register-image command to create a new AMI from a snapshot. Use AWS Step Functions to replace the AMI in the Auto Scaling group.
B. Set up Amazon Elastic Block Store (Amazon EBS) fast snapshot restore (FSR) for a snapshot. Use the snapshot to provision a new AMI. Replace the AMI in the Auto Scaling group with the new AMI.
C. Use Amazon Data Lifecycle Manager to create a copy of the AMI and define lifecycle rules. Create an AWS Lambda function that modifies the AMI copy in the Auto Scaling group.
D. Use an Amazon EventBridge rule to invoke AWS Backup lifecycle policies to provision instances from the AMI. Configure Auto Scaling group capacity limits as an event source in EventBridge.
Correct Answer: B
QUESTION 48
A company is building a global event ticket purchasing application that needs to handle millions of users simultaneously. Demand is highest for a short period after tickets initially become available. The application must handle a very high volume of users browsing a small number of events at the same time and purchasing tickets. The application must be highly available and responsive. Which solution will meet these requirements?
A. Store event and ticket information in an Amazon DynamoDB table. Use an Amazon CloudFront distribution to cache ticket information. Use Amazon Simple Queue Service (Amazon SQS) to implement a user queue management service.
B. Store event and ticket information in an Amazon RDS for MySQL database. Use Amazon MQ to implement a user queue management service.
C. Store event and ticket information in an Amazon DynamoDB table. Use Amazon ElastiCache to cache event and ticket information. Use Amazon Simple Queue Service (Amazon SQS) to implement a user queue management service.
D. Store event and ticket information in an Amazon S3 bucket. Use an Amazon CloudFront distribution to cache ticket information.
Correct Answer: C
QUESTION 49
A company hosts an application that allows authorized users to upload and download documents. The application uses Amazon EC2 instances and an Amazon Elastic File System (Amazon EFS) file system. The company plans to deploy the application into a second AWS Region. The company will launch a new EFS file system and a new set of EC2 instances in the second Region. A solutions architect must develop a highly available and fault-tolerant solution to establish two-way synchronization across the Regions. Which solution will meet these requirements?
A. Create an Amazon EFS VPC endpoint for the original EFS file system in the second Region. Mount both the original and the new EFS file system to the new set of EC2 instances in the second Region. Configure an rsync cron job to run every 5 minutes.
B. Set up EFS replication between the two EFS file systems. Set the new file system as the source. Set the original file system in the first Region as the destination. Turn off overwrite protection for the destination file system.
C. Set up one AWS DataSync agent in each Region. Configure Amazon EFS VPC endpoints, EFS transfer locations, and EFS transfer tasks with opposite directions on the two DataSync agents.
D. Mount the EFS file system in the second Region to the new set of EC2 instances in the second Region. Use AWS Transfer Family to establish SFTP access to the EFS file system in the original Region. Configure an sync cron job to run every 5 minutes.
Correct Answer: C
QUESTION 50
A travel booking company wants to move its booking application from an on-premises environment to the AWS Cloud. The application receives heavy traffic from Thursday afternoon to Friday afternoon every week. The application also receives high traffic around public holidays. The application architecture is stateful and consists of frontend, compute, and database layers. The company wants to retain the architecture when the application migrates to AWS. The company plans to use Amazon EC2 instances to supply compute and database capacity. The company wants to improve the availability by deploying resources to multiple Availability Zones. Which solution will meet these requirements MOST cost-effectively?
A. Use EC2 On-Demand Capacity Reservations to handle the baseline load for the application and the database. Use On-Demand Instances when application traffic is higher.
B. Use EC2 Reserved Instances to handle the baseline load for the application and the database. Use Spot Instances when application traffic is higher.
C. Use EC2 On-Demand Capacity Reservations to handle the baseline load for the application and the database. Use Spot Instances when application traffic is higher.
D. Use EC2 Reserved Instances to handle the baseline load for the application and the database. Use On-Demand Instances when application traffic is higher.
Correct Answer: D
QUESTION 51
A company is building a stock trading application in the AWS Cloud. The company requires a highly available solution that provides low-latency access to block storage across multiple Availability Zones. Which solution will meet these requirements with the LEAST implementation effort?
A. Use an Amazon S3 bucket and an S3 File Gateway as shared storage for the application.
B. Create an Amazon EC2 instance in each Availability Zone. Attach a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume to each EC2 instance. Create a Bash script to sync data between volumes.
C. Use an Amazon FSx for NetApp ONTAP Multi-AZ file system to access data by using the iSCSI protocol.
D. Create an Amazon EC2 instance in each Availability Zone. Attach a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume to each EC2 instance. Create a Python script to sync data between volumes.
Correct Answer: C
QUESTION 52
A global manufacturing company wants to implement disaster recovery for the company’s existing on-premises production servers. The company needs a solution to replicate the existing servers without the need to reinstall the operating system or applications. The solution must achieve the lowest possible recovery time objective (RTO). Which solution will meet these requirements?
A. Create scheduled Amazon Machine Image (AMI) backups. Use Amazon EC2 Image Builder to implement a manual failover process. Configure AWS CloudFormation templates to automate the disaster recovery process.
B. Configure AWS Elastic Disaster Recovery to perform continuous data replication for the existing instances and to automate the disaster recovery process.
C. Configure an AWS Storage Gateway Tape Gateway to create virtual tape backups of on-premises virtual machines (VMs). Store the VM backups in Amazon S3. Manually recover the VMs during disaster scenarios.
D. Use AWS Application Migration Service to replicate the data from on-premises servers to AWS. Perform a manual cutover of the instances during disaster scenarios.
Correct Answer: B
QUESTION 53
An ecommerce company wants to improve the security posture of an application across multiple AWS accounts. The company uses an organization in AWS Organizations to manage the accounts. The application runs in Amazon EC2 Auto Scaling groups across multiple Availability Zones behind an Application Load Balancer (ALB) in the us-east-1 Region. The company needs a solution to protect the application against cross-site scripting, SQL injection, and DDoS attacks. The company wants to centrally manage all security administration for the accounts in the organization from one account. Which combination of actions will meet these requirements? (Select THREE.)
A. Configure an Amazon CloudFront distribution to direct traffic to the ALB.
B. Configure AWS Firewall Manager to manage security configurations.
C. Configure AWS WAF ACL rules, and associate the rules with the ALB.
D. Configure AWS Security Hub to manage security configurations.
E. Configure AWS Shield Advanced to protect the ALB.
F. Configure AWS Config to track and enforce compliance with the company’s security policies.
Correct Answer: BCE
QUESTION 54
A company hosts an application on an Amazon EC2 instance. The application needs to access a MySQL database that the company hosts on a second EC2 instance. The EC2 instances are in separate VPCs within the same AWS account. The traffic between the application and MySQL database needs to be secure and private. What combination of steps will meet these requirements? (Select TWO.)
A. Configure a VPC peering connection and routing between the VPCs.
B. Configure the application to use Amazon RDS Proxy to access the MySQL database.
C. Configure the MySQL instance to use an SSL certificate.
D. Ensure the public IP address of the application EC2 instance is allowed in the ACL of the VPC that contains the MySQL instance.
E. Ensure the security group ID of the application EC2 instance is allowed in the ACL of the VPC that contains the MySQL instance.
Correct Answer: AC
QUESTION 55
A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application experiences periodic spikes in malicious traffic attempts from attackers. The application receives mostly SQL injection and cross-site scripting (XSS) attacks from external sources. The company requires a solution to protect the application from the attacks. The solution must have minimal effect on application performance. Which solution will meet these requirements?
A. Deploy AWS WAF on the ALB. Configure rules to block malicious traffic activity. Enable AWS Shield Advanced.
B. Use cous Cloud rail data events to monitor the ALB traffic. Create alerts for suspicious incoming requests. Update the applications security group to drop
C. Install an intrusion detection system (IDS) on each EC2 instance to analyze and block malicious traffic at the host level. Update the ALB to pass all traffic directly to the instances for analysis.
D. Configure a network ACL to drop traffic from known malicious IP ranges. Enable Amazon GuardDuty.
Correct Answer: C
QUESTION 56
A company is developing an AI-powered application that uses an Amazon API Gateway REST API and a large language model (LLM). The API uses rate limiting and a custom authorizer. Users report that the application is often unresponsive. The company discovered that the LLM processing can take a long time to finish, which causes the API calls to time out and fail. The company wants to resolve the problem with the fewest changes to the existing architecture. Which solution will meet these requirements?
A. Replace the REST API with an Amazon Simple Queue Service (Amazon SQS) queue.
B. Increase the API Gateway integration timeout quota.
C. Replace the REST API with an Application Load Balancer.
D. Split the LLM response into smaller chunks that finish sooner.
Correct Answer: A
QUESTION 57
A company runs an order management application on AWS. The application generates many JSON log files every minute that are each under 40 KB in size. The application stores the log files in an Amazon S3 bucket. The company’s analytics team queries the logs to generate reports. The analytics team reports long query times. A solutions architect needs to optimize the performance of the logging solution to improve query times. Which solution will meet this requirement?
A. Configure AWS Step Functions to combine existing files into larger files. Use AWS Glue to query the files.
B. Migrate the data from Amazon S3 to an Amazon Elastic File System (Amazon EFS) file system. Use Elastic throughput mode.
C. Use AWS Glue compaction optimization to combine multiple small files into larger files. Use Amazon Athena to query the files.
D. Create an Amazon EventBridge scheduled rule to invoke an AWS Lambda function to read and merge the files into larger files. Use Amazon Athena to query the files.
Correct Answer: C
QUESTION 58
A company is designing an application on AWS that provides real-time dashboards. The dashboard data comes from on-premises databases that use a variety of schemas and formats. The company needs a solution to transfer and transform the data to AWS with minimal latency. Which solution will meet these requirements?
A. Integrate the dashboard with Amazon Managed Streaming for Apache Kafka (Amazon MSK) to transfer and transform the data from the on-premises databases to the dashboards.
B. Use Amazon Data Firehose to transfer the data to an Amazon S3 Bucket. Configure the dashboard application to import new data from the S3 bucket periodically.
C. Use AWS Database Migration Service (AWS DMS) Schema Conversion to consolidate the on-premises databases into a single AWS database. Use an AWS Lambda function that is scheduled by Amazon EventBridge to transfer data from the consolidated database to the dashboard application.
D. Use AWS DataSync to transfer data from the source databases to the dashboard application continuously. Configure the dashboard application to import data from DataSync.
Correct Answer: A
QUESTION 59
A company is reviewing configurations in AWS Identity and Access Management (IAM) and AWS Backup. The company wants to retain recovery points for 180 days. The company wants to ensure that AWS Backup does not create expired recovery points. The company also wants to optimize costs by ensuring that the company does not keep expired recovery points longer than necessary. Which solution will meet these requirements?
A. Modify the IAM role that AWS Backup uses to manage the recovery point lifecycle to increase controls on expired recover points. Configure the recovery point lifecycle to automatically remove recovery points that are older than 180 days.
B. Modify the IAM role that AWS Backup uses to manage the recovery point lifecycle. Grant the IAM role permission to delete recovery points that are older than 180 days.
C. Update the backup plan configuration to remove previous expired recovery points and future recovery points after 180 days.
D. Update the backup plan configuration to remove future recovery points after 180 days. Manually delete any existing expired recovery points.
Correct Answer: C
QUESTION 60
A company runs a containerized application on a Kubernetes cluster in an on-premises data center. The company is using a MongoDB database for data storage. The company wants to migrate some of these environments to AWS, but no code changes or deployment method changes are possible at this time. The company needs a solution that minimizes operational overhead. Which solution meets these requirements?
A. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes for compute and MongoDB on EC2 for data storage.
B. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute and Amazon DynamoDB for data storage
C. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes for compute and Amazon DynamoDB for data storage.
D. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute and Amazon DocumentDB (with MongoDB compatibility) for data storage.
Correct Answer: D