QUESTION 121
A company is migrating internal business applications to Amazon EC2 and Amazon RDS in a VPC. The migration requires connecting the cloud-based applications to the on-premises internal network. The company wants to set up an AWS Site-to-Site VPN connection. The company has created two separate customer gateways. The gateways are configured for static routing and have been assigned distinct public IP addresses. Which solution will meet these requirements?

A. Create one virtual private gateway. Associate the virtual private gateway with the VPC. Enable route propagation for the virtual private gateway in all VPC route tables. Create two Site-to-Site VPN connections with two tunnels for each connection. Configure the Site-to-Site VPN connections to use the virtual private gateway and to use separate customer gateways.
B. Create one customer gateway. Associate the customer gateway with the VPC. Enable route propagation for the customer gateway in all VPC route tables. Create two Site-to-Site VPN connections with two tunnels for each connection. Configure the Site-to-Site VPN connections to use the customer gateway.
C. Create two virtual private gateways. Associate the virtual private gateways with the VPC. Enable route propagation for both customer gateways in all VPC route tables. Create two Site-to-Site VPN connections with two tunnels for each connection. Configure the Site-to-Site VPN connections to use separate virtual private gateways and separate customer gateways.
D. Create two virtual private gateways. Associate the virtual private gateways with the VPC. Enable route propagation for both customer gateways in all VPC route tables. Create four Site-to-Site VPN connections with one tunnel for each connection. Configure the Site-to-Site VPN connections into groups of two. Configure each group to connect to separate customer gateways and separate virtual private gateways.

Correct Answer: A

QUESTION 122
A company needs to optimize the infrastructure for an application that uploads data to Amazon S3. The uploads average 64 KB in size. When the data is uploaded,Amazon S3 sends an event to Amazon EventBridge. EventBridge then invokes an Amazon ECS application task. The ECS task processes the data and stores the results in an Amazon DynamoDB table. Processing takes an average of 15 minutes. The company must keep the S3 data for 5 years and must keep the DynamoDB data for 15 days. The application is gaining more users and is handling millions of S3 uploads every hour. Which set of changes will provide the MOST cost-effective solution for the application?

A. Replace the ECS task with an AWS Lambda function for processing. Create S3 Lifecycle rules to move the S3 objects to S3 Intelligent-Tiering after 1 day and to expire the objects after 5 years. Configure DynamoDB Standard-Infrequent Access for the DynamoDB table.
B. Replace the S3 bucket with Amazon Managed Streaming for Apache Kafka (Amazon MSK) to receive the data. Configure tiered storage for data that is older than 1 day. Configure EventBridge to read messages from Amazon MSK in batches of 1,000 messages. Replace the ECS task with an AWS Lambda function for processing. Configure a TTL of 15 days on the DynamoDB table.
C. Create an Amazon Data Firehose stream to receive the data. Configure buffering to deliver messages every minute to Amazon S3 in gzip format. Purchase a Compute Savings Plan based on usage recommendations. Create S3 Lifecycle rules to move the S3 objects to S3 Glacier Deep Archive after 1 day and to expire the objects after 5 years. Configure a TTL of 15 days on the DynamoDB table.
D. Purchase a Compute Savings Plan based on usage recommendations. Create S3 Lifecycle rules to move the S3 objects to S3 Glacier Deep Archive after 1 day and to expire the objects after 5 years. Configure DynamoDB Standard-Infrequent Access for the DynamoDB table.

Correct Answer: A

QUESTION 123
A company has multiple applications that run on Amazon EC2 instances in private subnets in a VPC. The company has deployed multiple NAT gateways in multiple Availability Zones for internet access. The company wants to block certain websites from being accessed through the NAT gateways. The company also wants to identify the internet destinations that the EC2 instances access. The company has already created VPC flow logs for the NAT gateways’ elastic network interfaces. Which solution will meet these requirements?

A. Use Amazon CloudWatch Logs Insights to query the logs and determine the internet destinations that the EC2 instances communicate with. Use AWS Network Firewall to block the websites.
B. Use Amazon CloudWatch Logs Insights to query the logs and determine the internet destinations that the EC2 instances communicate with. Use AWS WAF to block the websites.
C. Use the BytesInFromSource and BytesInFromDestination Amazon CloudWatch metrics to determine the internet destinations that the EC2 instances communicate with. Use AWS Network Firewall to block the websites.
D. Use the BytesInFromSource and BytesInFromDestination Amazon CloudWatch metrics to determine the internet destinations that the EC2 instances communicate with. Use AWS WAF to block the websites.

Correct Answer: A

QUESTION 124
A company is migrating an application to the AWS Cloud. The application currently runs in an on-premises data center and writes thousands of images into a mounted NFS file system each night. The company has established an AWS Direct Connect connection to AWS. After the company migrates the application, the application will run on an Amazon EC2 instance with a mounted Amazon EFS file system. Before the migration, the company must synchronize the images to the EFS file system each night. Which solution will replicate the images with the LEAST operational overhead?

A. Configure a daily process to run the aws s3 sync command from the on-premises file system to Amazon S3. Configure an AWS Lambda function to process event notifications from Amazon S3 and copy the images from Amazon S3 to the EFS file system.
B. Deploy an AWS DataSync agent to an on-premises server. Send images over the Direct Connect connection to an AWS PrivateLink interface VPC endpoint for Amazon EFS. Configure a DataSync scheduled task to send the images to the EFS file system.
C. Deploy an Amazon S3 File Gateway with an NFS mount point. Mount the S3 File Gateway file system on the on-premises server. Configure a daily process to copy the images to the mount point.
D. Deploy an AWS Transfer Family for SFTP server. Integrate the SFTP server with the EFS file system. Create and schedule an AWS Step Functions state machine to transfer images to the SFTP server over the Direct Connect connection.

Correct Answer: B

QUESTION 125
A company’s web application uses an Amazon API Gateway API, AWS Lambda functions, and Amazon DynamoDB global tables to handle backend requests. The web application is deployed in two AWS Regions in an active-passive model. The company uses Amazon Route 53 for DNS. The web application requires a manual DNS update to fail over to the secondary Region. An analytics Lambda function runs in the same AWS account. The function has caused Lambda concurrency to reach 90% of the current quota on an average day. A recent surge in traffic for the analytics workload resulted in throttled Lambda requests and a poor user experience for the web application users. A solutions architect must increase the reliability of the web application. The solution must use an Amazon CloudWatch alarm to send an Amazon SNS notification when the Lambda concurrency reaches a specific utilization threshold. Which solution will meet these requirements with the LEAST operational overhead?

A. Set reserved concurrency on the web application Lambda functions. Implement Route 53 health checks and failover records to route traffic to the secondary Region. Configure the CloudWatch alarm to use the AWS Trusted Advisor ServiceLimitUsage metric and to send the SNS notification.
B. Set reserved concurrency on the web application Lambda functions. Implement Route 53 health checks and latency records to route traffic to the secondary Region. Configure the CloudWatch alarm to use the AWS Trusted Advisor ServiceLimitUsage metric and to send an SNS notification.
C. Set provisioned concurrency on the web application Lambda functions. Implement Route 53 health checks and failover records to route traffic to the secondary Region. Configure the CloudWatch alarm to use the Lambda ConcurrentExecutions metric and to send an SNS notification.
D. Set provisioned concurrency on the web application Lambda functions. Implement Route 53 health checks and geolocation records to route traffic to the secondary Region. Configure the CloudWatch alarm to use the Lambda ProvisionedConcurrencyInvocations metric and to send an SNS notification.

Correct Answer: A

QUESTION 126
A company has AWS accounts in an organization in AWS Organizations. The company needs to gain visibility of issues related to security compliance in the accounts. AWS Config is enabled for all accounts and AWS Regions. Results are aggregated into an AWS Config delegated administrator account. The company must report compliance with security frameworks for all current and new accounts within 48 hours. Which solution will meet these requirements?

A. Use AWS Config in the delegated administrator account to deploy conformance packs across all accounts. Specify all Regions for deployment.
B. Use the delegated administrator account to create and deploy an AWS CloudFormation stack set that deploys conformance packs across all accounts and Regions.
C. Create an Amazon EventBridge rule that detects the creation of new accounts. Configure the rule to invoke an AWS Lambda function to deploy conformance packs across all Regions.
D. Turn on AWS Config recording for all accounts. Use AWS Systems Manager to deploy conformance packs across all accounts and Regions.

Correct Answer: B

QUESTION 127
A company is implementing an application on AWS for its customers. Amazon CloudFront will serve a frontend web application with an Amazon S3 origin containing static content. A second S3 bucket with S3 Versioning enabled will store videos and pictures that users upload. AWS App Runner will host a backend application. An Amazon Aurora MySQL Multi-AZ cluster with one read replica will run on the smallest instance type. The company wants to optimize the cost of the application. User-uploaded content can be archived or deleted 30 days after being uploaded. The customers are located only in Europe. Which combination of steps will decrease the cost of the application? (Select TWO.)

A. Create an S3 Lifecycle policy for the video and picture S3 bucket to expire current versions of objects older than 30 days.
B. Create an S3 Lifecycle policy for the video and picture S3 bucket to transition objects to S3 Glacier Deep Archive after 30 days.
C. Configure the App Runner capacity provider to use Spot Instances.
D. Configure an auto scaling policy for the Aurora replicas.
E. Choose the least expensive pricing class for Amazon CloudFront that includes the customers’ AWS Region.

Correct Answer: BE

QUESTION 128
A company’s DNS setup includes an on-premises network that is connected to a VPC by an AWS Site-to-Site VPN connection. The on-premises network hosts the domain onprem.mydc.com. The company needs to use Amazon Route 53 to host the domain myvpc.example.com in the VPC. Additionally, the company needs Amazon EC2 instances in the VPC to resolve DNS queries to the on-premises domain. Which combination of steps will meet these requirements? (Select THREE.)

A. Create a Route 53 private hosted zone for myvpc.example.com. Associate the private hosted zone with the VPC.
B. Create a Route 53 public hosted zone for myvpc.example.com. Associate the public hosted zone with the VPC.
C. Create a Route 53 Resolver inbound endpoint.
D. Create a Route 53 Resolver outbound endpoint.
E. Create a forwarding rule in Route 53 Resolver for the on-premises domain. In the forwarding rule, specify the on-premises DNS server IP addresses. Associate the forwarding rule with the VPC and the newly created endpoint.
F. Create a system rule in Route 53 Resolver for the on-premises domain. In the system rule, specify the on-premises DNS server IP addresses. Associate the system rule with the VPC and the newly created endpoint.

Correct Answer: ACE

QUESTION 129
A company is planning to migrate 1,000 on-premises servers to AWS. The servers run on several VMware clusters in the company’s data center. As part of the migration plan, the company needs to gather server metrics such as CPU details, RAM usage, operating system information, and running processes. The company then needs to query and analyze the data. Which solution will meet these requirements?

A. Create a script to automatically gather the server information from the on-premises hosts. Use the AWS CLI to run the put-resource-attributes command to store the detailed server data in AWS Migration Hub. Query the data directly in the Migration Hub console.
B. Deploy and configure the AWS Application Discovery Service Agentless Connector virtual appliance on the on-premises hosts. Configure data exploration in AWS Migration Hub. Use AWS Glue to perform an ETL job against the data. Query the data by using Amazon OpenSearch Service.
C. Deploy the AWS Application Discovery Agent to each on-premises server. Configure data exploration in AWS Migration Hub. Use Amazon Athena to run predefined queries against the data in Amazon S3.
D. Export only the VM performance information from the on-premises hosts. Directly import the required data into AWS Migration Hub. Update any missing information in Migration Hub. Query the data by using Amazon QuickSight.

Correct Answer: C

QUESTION 130
A company has on-premises workloads. The company needs a hybrid networking solution that provides on-premises access to petabytes of cloud storage. The company needs a hybrid cloud storage service that provides secure data transfer from on premises to an Amazon S3 bucket. The service must use a private connection. The company has deployed a VPC and an AWS Direct Connect connection. Which solution will meet these requirements?

A. Create a public VIF. Create an interface endpoint for Amazon S3. Deploy an Amazon S3 File Gateway VM on premises. Create a file share that uses Amazon S3 as the storage backend. Use AWS PrivateLink to access the S3 bucket from the on-premises network.
B. Create a private VIF. Create an Amazon EFS file system. Create a mount target to the S3 bucket. Download and install the Amazon EFS client on the on-premises machines.
C. Create a transit VIF. Create an Amazon File Cache file system. Create a data repository association to link the file system to the S3 bucket. Download and install the Amazon File Cache Container Storage Interface (CSI) driver on the on-premises machines.
D. Create a private VIF Create an Amazon ElastiCache file system. Create a data repository association to link the file system to the S3 bucket. Use AWS Transfer Family for SFTP to access the S3 bucket.

Correct Answer: A

QUESTION 131
A company is using AWS CloudFormation to deploy applications. The company stages all application binaries and templates in Amazon S3 buckets that have versioning enabled. Developers have access to an Amazon EC2 instance that hosts the integrated development environment (IDE). The developers download the application binaries to the EC2 instance, make changes, and upload the binaries to an S3 bucket after running unit tests locally. The company wants to improve the existing deployment mechanism and implement CI/CD by using AWS CodePipeline.
The company has the following requirements:
1. Automate unit testing and security scanning.
2. Alert the developers when unit tests fail.
3. Turn application features on and off, and customize deployment dynamically as part of CI/CD.

Which solution will meet these requirements?

A. Use AWS CodeBuild to run unit tests and security scans. Use an Amazon EventBridge rule to send Amazon SNS alerts to the developers when unit tests fail. Write AWS CDK constructs for different solution features. Use a manifest file to turn features on and off in the AWS CDK application.
B. Use AWS CodeDeploy to run unit tests and security scans. Use an Amazon CloudWatch alarm in the pipeline to send Amazon SNS alerts to the developers when unit tests fail. Use Docker images for different solution features. Use the AWs CLI to turn features on and off.
C. Use Jenkins to run unit tests and security scans. Use an Amazon EventBridge rule in the pipeline to send Amazon SES alerts to the developers when unit tests fail. Use AWS CloudFormation nested stacks for different solution features. Use parameters to turn features on and off.
D. Use AWS Lambda to run unit tests and security scans. Use Lambda in a subsequent stage in the pipeline to send Amazon SNS alerts to the developers when unit tests fail. Create AWS Amplify plugins for different solution features. Use user prompts to turn features on and off.

Correct Answer: A

QUESTION 132
A company launches a mobile app that gives users the ability to submit pictures of their book collections and receive automated book recommendations. The app enhances each uploaded image, extracts text from book covers, and produces recommendations by using machine learning (ML). The app uses an Amazon API Gateway REST API to upload images to a backend fleet of four Amazon EC2 instances. The app takes approximately 25 minutes to process each image. Each step in the image processing workflow takes 10 minutes or less. The user population for the app is growing rapidly. The app receives higher usage during evenings and on weekends. The company must optimize costs for the app as the user population grows. Which solution will meet this requirement?

A. Containerize the app and host it on Amazon ECS with the EC2 launch type. Create separate ECS services for pre-processing, text-extraction, and inference. Right-size EC2 instance types for each ECS service. Update the REST API to invoke the ECS services.
B. Containerize the app and host it on Amazon ECS with the Fargate launch type. Configure an ECS service with ECS tasks to meet the current EC2 instance performance requirements. Update the REST API to invoke the ECS service.
C. Update the app to upload images directly to an Amazon S3 bucket. Use a single AWS Lambda function to implement the processing logic. Create an Amazon SQS queue. Use the queue to invoke the Lambda function. Create an Amazon EventBridge rule to deliver an S3 event to the SQS queue when an image is uploaded to the S3 bucket.
D. Update the app to upload images directly to an Amazon S3 bucket. Send notifications to Amazon EventBridge for all events from the bucket. Use a separate AWS Lambda function to implement each step in the image processing workflow. Create an AWS Step Functions state machine to orchestrate the Lambda functions. Create an EventBridge rule to invoke the state machine when an image is uploaded to the S3 bucket.

Correct Answer: D

QUESTION 133
An ecommerce company is running an application on AWS. The application has an Amazon API Gateway API that invokes an AWS Lambda function. The application stores data in an Amazon RDS for PostgreSQL DB instance. During the company’s most recent sales event, a sudden increase in API calls negatively affected the application’s performance. A solutions architect reviewed the Amazon CloudWatch metrics and noticed a significant increase in Lambda invocations and database connections. The CPU utilization was also high on the DB instance. Which solution will optimize the application’s performance?

A. Increase the timeout value of the Lambda function. Modify the Lambda function to close database connections after the Lambda function retrieves data.
B. Change the DB instance to a GPU-based DB instance. Configure a higher max_connections value in the RDS parameter group.
C. Create a database proxy by using Amazon RDS Proxy. Modify the Lambda function to use the RDS Proxy endpoint instead of connecting directly to the database.
D. Increase the memory of the Lambda function. Modify the Lambda function to check for an existing database connection to use before the Lambda function creates a new database connection.

Correct Answer: C

QUESTION 134
A company uses Microsoft Active Directory for user management and Microsoft Entra ID as an identity provider (IdP). The company uses an organization in AWS Organizations to manage multiple AWS accounts. The company establishes an AWS IAM Identity Center instance that is integrated with the IdP and creates the required user groups. Multiple company departments and applications use Amazon S3. The company uses S3 bucket policies to manage permissions. As a result of the granular permissions the company creates, the policies grow so large that they reach the quota for S3 bucket policy length. The company needs to simplify the process of managing granular S3 bucket permissions for company identities. Which solution will meet this requirement with the LEAST operational overhead?

A. Create an S3 Access Grant. Associate the S3 Access Grant with the IAM Identity Center instance. Create S3 Access Grants for the user groups based on business requirements by specifying the appropriate S3 bucket. Use the Amazon S3 API to grant the user groups temporary credentials to access the required S3 buckets.
B. Create an S3 access point for each of the S3 buckets. Create an AWS Lambda function to query data from Amazon S3 based on user permissions. Create an Object Lambda Access Point for the S3 access points. Associate the Lambda function with the Object Lambda Access Point.
C. Create an S3 access point for each of the S3 buckets. Block public access in the S3 access point settings. Create an access policy based on user requirements. Attach the access policy to the S3 access point. Use the S3 access point to access the S3 bucket.
D. Group users into appropriate OUs in Organizations. Create SCPs to grant access to specific S3 buckets based on business requirements. Attach the SCPs to the appropriate OUs. Use permission sets in IAM Identity Center to grant access the S3 buckets.

Correct Answer: A

QUESTION 135
A company runs an event ticketing application on AWS. The company deployed the application on an Amazon EKS cluster with the Amazon EC2 launch type. The application uses an Amazon RDS for MySQL DB instance. The application experiences infrequent surges in demand. The surges in demand correspond to event dates. The application stores job states in the RDS for MySQL DB instance and can withstand interruptions. The company is developing new features for the application and wants to migrate the application and the EKS cluster to use the AWS Fargate launch type. Which solution will meet these requirements MOST cost-effectively?

A. Purchase EC2 Standard Reserved Instances to handle the baseline load of the EKS cluster. Use On-Demand Instances to scale the cluster to handle surges. Purchase Reserved Instances for a 1-year term with the All Upfront option for the database to meet predicted peak demand for the year.
B. Purchase Compute Savings Plans for the predicted medium load of the EKS cluster. Use On-Demand Capacity Reservations to scale the cluster based on event dates that correspond to peak loads. Purchase Reserved Instances for a 1-year term with the No Upfront option for the database to meet the predicted baseline demand.
C. Purchase EC2 Instance Savings Plans for the predicted base load of the EKS cluster. Use Spot Instances to scale the cluster to handle surges in demand. Purchase Reserved Instances for a 1-year term with the All Upfront option for the database to meet the predicted baseline demand.
D. Purchase Compute Savings Plans for the predicted base load of the EKS cluster. Use Spot Instances to scale the cluster to handle surges in demand. Purchase Reserved Instances for a 1-year term with the All Upfront option for the database to meet the predicted baseline demand.

Correct Answer: C

QUESTION 136
A company uses an organization in AWS Organizations with all features enabled to manage resources for multiple business units. Each business unit has its own AWS account. The administrator for each AWS account needs to use Amazon Athena to view detailed cost and utilization data for the administrator’s account. Each business unit must have access to only its own cost and usage data. The company has already configured IAM policies that govern the ability to set up AWS Cost and Usage Reports. A central Cost and Usage Report (CUR) that contains all data for the organization is already available in an Amazon S3 bucket. Which solution will meet these requirements?

A. Use AWS Resource Access Manager (AWS RAM) in the organization’s management account to share the CUR data with each member account.
B. In the organization’s management account, configure an S3 event notification for the S3 bucket that contains the central CUR to invoke an AWS Lambda function when a new central CUR is generated. Configure the Lambda function to copy the CUR to an S3 bucket in each member account.
C. Access AWS Cost Explorer in each member account. Create a new report that contains relevant cost information for each account. Save the report in Cost Explorer.
D. Create a new S3 bucket to store CUR data in each member account. Set up a CUR to deliver the data to the new S3 bucket.

Correct Answer: B

QUESTION 137
A company hosts a game player-matching service on a public-facing, physical, on-premises instance that all users are able to access over the internet. All traffic to the instance uses UDP. The company wants to migrate the service to AWS and provide a high level of security. A solutions architect needs to design a solution for the player-matching service using AWS. Which combination of steps should the solutions architect take to meet these requirements? (Select THREE.)

A. Use a Network Load Balancer (NLB) in front of the player-matching instance. Use a friendly DNS entry in Amazon Route 53 pointing to the NLB’s Elastic IP address.
B. Use an Application Load Balancer (ALB) in front of the player-matching instance. Use a friendly DNS entry in Amazon Route 53 pointing to the ALB’s internet-facing fully qualified domain name (FQDN).
C. Define an AWS WAF rule to explicitly drop non-UDP traffic, and associate the rule with the load balancer.
D. Configure a network ACL rule to block all non-UDP traffic. Associate the network ACL with the subnets that hold the load balancer instances.
E. Use Amazon CloudFront with an Application Load Balancer as an origin.
F. Enable AWS Shield Advanced on all public-facing resources.

Correct Answer: ADF

QUESTION 138
A company hosts a game player-matching service on a public-facing, physical, on-premises instance that all users are able to access over the internet. All traffic to the instance uses UDP. The company wants to migrate the service to AWS and provide a high level of security. A solutions architect needs to design a solution for the player-matching service using AWS. Which combination of steps should the solutions architect take to meet these requirements? (Select THREE.)

A. Use a Network Load Balancer (NLB) in front of the player-matching instance. Use a friendly DNS entry in Amazon Route 53 pointing to the NLB’s Elastic IP address.
B. Use an Application Load Balancer (ALB) in front of the player-matching instance. Use a friendly DNS entry in Amazon Route 53 pointing to the ALB’s internet-facing fully qualified domain name (FQDN).
C. Define an AWS WAF rule to explicitly drop non-UDP traffic, and associate the rule with the load balancer.
D. Configure a network ACL rule to block all non-UDP traffic. Associate the network ACL with the subnets that hold the load balancer instances.
E. Use Amazon CloudFront with an Application Load Balancer as an origin.
F. Enable AWS Shield Advanced on all public-facing resources.

Correct Answer: ADF

QUESTION 139
A life sciences company wants to migrate a genomics data processing platform to AWS. The company generate 200 GB of data each day. The company stores the daily data on a local storage area network (SAN). The company runs processing jobs on the data that take hours to finish. The company requires a scalable solution to run Docker containers and data analysis workflows. Which solution will meet these requirements?

A. Use AWS Snowball Edge devices to transfer the data to AWS on a regular schedule. When AWS receives the Snowball Edge device and loads the data into Amazon S3, use S3 Event Notifications to invoke an AWS Lambda function to process the data.
B. Use Amazon Managed Workflows for Apache Airflow (Amazon MWAA) to transfer the data to Amazon S3. Use S3 Event Notifications to invoke an Amazon EC2 Auto Scaling group to launch custom-AMI EC2 instances that run Docker containers to process the data.
C. Use AWS DataSync to transfer the data to Amazon S3. Store Docker images in Amazon ECR. Configure S3 Event Notifications to invoke an AWS Lambda function that starts an AWS Step Functions workflow. Configure the Step Functions workflow to orchestrate and submit jobs to AWS Batch on AWS Fargate to process the data.
D. Use an Amazon S3 File Gateway to transfer the data to Amazon S3. Use S3 Event Notifications to initiate an AWS Batch job on Amazon EC2 instances that run Docker containers to process the data.

Correct Answer: C

QUESTION 140
An ecommerce website running on AWS uses an Amazon RDS for MySQL DB instance with General Purpose SSD storage. The developers chose an appropriate instance type based on demand, and configured 100 GB of storage with a sufficient amount of free space. The website was running smoothly for a few weeks until a marketing campaign launched. On the second day of the campaign, users reported long wait times and time outs. Amazon CloudWatch metrics indicated that both reads and writes to the DB instance were experiencing long response times. The CloudWatch metrics show 40% to 50%CPU and memory utilization, and sufficient free storage space is still available. The application server logs show no evidence of database connectivity issues. What could be the root cause of the issue with the marketing campaign?

A. It exhausted the I/O credit balance due to provisioning low disk storage during the setup phase.
B. It caused the data in the tables to change frequently, requiring indexes to be rebuilt to optimize queries.
C. It exhausted the maximum number of allowed connections to the database instance.
D. It exhausted the network bandwidth available to the RDS for MySQL DB instance.

Correct Answer: A