QUESTION 161
A company is running a serverless ecommerce application on AWS. The application has an Amazon API Gateway REST API that is integrated with an AWS Lambda function. The Lambda function processes incoming requests and stores data in an Amazon RDS for MySQL database. During a recent sales event, the Lambda function failed to connect with the database after exceeding the supported number of connections. The connection failure resulted in high latency. The company wants to mitigate the cause of the database connection errors and latency issues that contributed to Lambda function connection failure. Which solution will meet these requirements?

A. Update the Lambda function so that the Lambda function opens database connections outside of the function handler. Increase the provisioned concurrency for the Lambda function.
B. Create an RDS Proxy endpoint for the database. Store database credentials in AWS Secrets Manager. Configure necessary IAM permissions for the Lambda function. Update the Lambda function to connect to the RDS Proxy endpoint. Increase the provisioned concurrency for the Lambda function.
C. Create a custom parameter group. Increase the value of the max_connections parameter. Associate the custom parameter group with the RDS database and schedule a reboot. Increase the reserved concurrency for the Lambda function.
D. Create an RDS Proxy endpoint for the database. Store database credentials as secret strings in AWS Systems Manager Parameter Store. Set up the required IAM permissions. Update the Lambda function to connect to the RDS Proxy endpoint. Increase the reserved concurrency for the Lambda function.

Correct Answer: B

QUESTION 162
A company wants to migrate multiple on-premises applications to AWS. The applications have different criticality and performance needs. The company wants to evaluate its application portfolio to identify migration readiness, estimate costs, and anticipate any issues. Which solution will meet these requirements?

A. Use AWS Application Discovery Service to automatically collect detailed usage and configuration data for all the on-premises application servers. Use Amazon Athena and Amazon QuickSight to track each application’s migration process by visualizing application dependencies data.
B. Use the AWS Application Discovery Agent to collect usage metrics and configurations for all the on-premises application servers. Use Amazon QuickSight to visualize application dependencies. Use Migration Evaluator to project migration costs. Track each application’s migration process in AWS Application Migration Service.
C. Use Migration Evaluator to project migration costs. Use AWS Application Discovery Service for application discovery and to collect data on performance requirements, network connectivity, and dependencies for an AWS Migration Hub portfolio assessment.
D. Use AWS Migration Hub to assess the applications and project migration costs. Collect data and performance requirements for the applications. Collect data about on- premises application server configurations and dependencies. Use AWS Application Migration Service and AWS Database Migration Service to track each application’s migration process.

Correct Answer: C

QUESTION 163
A company is migrating its entire IT portfolio to AWS. The company requires a centralized payment management solution for several business units. The solution must provide visibility into each business unit’s spending. A security team requires a centralized solution to control IAM usage in all the company’s AWS accounts. The security team requires that production workloads run in separate accounts. Each business unit in the company has a separate AWS account. Which combination of actions will meet these requirements with the LEAST effort? (Select TWO.)

A. Use a collection of parameterized AWS CloudFormation templates to define common IAM permissions that are deployed into each AWS account. Require all new and existing accounts to deploy the appropriate stacks to enforce the least privilege model.
B. Use AWS Organizations to create a new organization from a payer account. Define an OU hierarchy. Invite the existing accounts to join the organization. Use Organizations to create new accounts.
C. Consolidate all of the company’s business units into a single AWS account. Use tags to track billing. Use the IAM access advisor tool to enforce the least privilege model.
D. Ensure that each business unit continues to use its own AWS account. Tag each AWS account appropriately. Enable AWS Cost Explorer to administer chargebacks.
E. Enable all features of AWS Organizations. Establish appropriate SCPs that filter IAM permissions for sub-accounts. Attach the SCPs to the organization root OU.

Correct Answer: BD

QUESTION 164
A company uses an on-premises Active Directory service to authenticate users. The company wants to use the same authentication service to sign in to the company’s AWS accounts. The company uses an organization in AWS Organizations to manage its AWS accounts. The company has already used AWS Site-to-Site VPN to establish connectivity between the on-premises environment and the company’s AWS accounts. The company must establish conditional access to the accounts based on user groups and roles. User identities must be managed in a single location. Which solution will meet these requirements?

A. Configure AWS IAM Identity Center to use an Identity Center directory as its source. Use the System for Cross-domain Identity Management (SCIM) v2.0 protocol to enable automatic provisioning for Identity Center identities. Use IAM Identity Center permission sets to grant access to the AWS accounts.
B. Configure AWS IAM Identity Center to connect to the Active Directory service by using SAML 2.0. Use the System for Cross-domain Identity Management (SCIM) v2.0 protocol to enable automatic provisioning for Identity Center identities. Use Attribute-based access controls (ABACs) to grant access to the AWS accounts.
C. In one of the company’s AWS accounts, configure IAM to use a SAML 2.0 identity provider. Provision IAM users that are mapped to the federated users. Grant access to each IAM user that corresponds to appropriate groups in the Active Directory service. Grant access to the required AWS accounts by using cross- account IAM users.
D. In one of the company’s AWS accounts, configure IAM to use an OpenID Connect (OIDC) identity provider. Provision IAM roles that grant access to the AWS account for the federated users that correspond to appropriate groups in the Active Directory service. Grant access to the required AWS accounts by using cross-account IAM roles.

Correct Answer: B

QUESTION 165
A team collects and routes behavioral data for an entire company. The company runs a Multi-AZ VPC environment with public subnets, private subnets, and an internet gateway. Each public subnet also contains a NAT gateway. Most of the company’s applications read from and write to Amazon Kinesis Data Streams. Most of the workloads run in private subnets. A solutions architect must review the infrastructure. The solutions architect needs to reduce costs and maintain the function of the applications. The solutions architect uses Cost Explorer and notices that the cost in the EC2-Other category is consistently high. A further review shows that NatGateway-Bytes charges are increasing the cost in the EC2-Other category. What should the solutions architect do to meet these requirements?

A. Enable VPC Flow Logs. Use Amazon Athena to analyze the logs for traffic that can be removed. Ensure that security groups are blocking traffic that is responsible for high costs.
B. Add an interface VPC endpoint for Kinesis Data Streams to the VPC. Ensure that applications have the correct IAM permissions to use the interface VPC endpoint.
C. Enable VPC Flow Logs and Amazon Detective. Review Detective findings for traffic that is not related to Kinesis Data Streams. Configure security groups to block that traffic.
D. Add an interface VPC endpoint for Kinesis Data Streams to the VPC. Ensure that the VPC endpoint policy allows traffic from the applications.

Correct Answer: B

QUESTION 166
A company is running a serverless ecommerce application on AWS. The application has an Amazon API Gateway REST API that is integrated with an AWS Lambda function. The Lambda function processes incoming requests and stores data in an Amazon RDS for MySQL database. During a recent sales event, the Lambda function failed to connect with the database after exceeding the supported number of connections. The connection failure resulted in high latency. The company wants to mitigate the cause of the database connection errors and latency issues that contributed to Lambda function connection failure. Which solution will meet these requirements?

A. Update the Lambda function so that the Lambda function opens database connections outside of the function handler. Increase the provisioned concurrency for the Lambda function.
B. Create an RDS Proxy endpoint for the database. Store database credentials in AWS Secrets Manager. Configure necessary IAM permissions for the Lambda function. Update the Lambda function to connect to the RDS Proxy endpoint. Increase the provisioned concurrency for the Lambda function.
C. Create a custom parameter group. Increase the value of the max_connections parameter. Associate the custom parameter group with the RDS database and schedule a reboot. Increase the reserved concurrency for the Lambda function.
D. Create an RDS Proxy endpoint for the database. Store database credentials as secret strings in AWS Systems Manager Parameter Store. Set up the required IAM permissions. Update the Lambda function to connect to the RDS Proxy endpoint. Increase the reserved concurrency for the Lambda function.

Correct Answer: B

QUESTION 167
A company is running an application on Amazon EC2 instances in the AWS Cloud. The application uses a MongoDB database with a replica set as its data tier. The MongoDB database is installed on systems in the company’s on-premises data center. The MongoDB database is accessible through an AWS Direct Connect connection to the data center environment. A solutions architect must migrate the on-premises MongoDB database to Amazon DocumentDB. Which solution will meet these requirements?

A. Create a fleet of EC2 instances. Install MongoDB Community Edition on the EC2 instances. Create a database. Configure continuous synchronous replication with the database that is running in the on-premises data center.
B. Create an AWS DMS replication instance. Create a source endpoint for the on-premises MongoDB database by using change data capture (CDC). Create a target endpoint for the Amazon DocumentDB database. Create and run a DMS migration task.
C. Create an AWS Application Migration Service replication template. Select the on-premises MongoDB database as the source. Install the AWS Replication Agent on the MongoDB database. Set the Amazon DocumentDB database service as the target endpoint. Initiate a cutover to the new database after the data is synchronized.
D. Create a source endpoint for the on-premises MongoDB database by using AWS Glue crawlers. Configure continuous asynchronous replication between the MongoDB database and the Amazon DocumentDB database.

Correct Answer: B

QUESTION 168
A company has a transit gateway that connects multiple VPCs in the same AWS Region. The company needs a centralized way to inspect network traffic and allow internet access for the workload VPCs. Which solution meets these requirements?

A. Create a Gateway Load Balancer (GWLB), GWLB endpoints, and a network virtual appliance in an existing workload VPC. Update the route table in the remaining workload VPCs to send traffic to the transit gateway. Configure the transit gateway route tables to forward traffic to the GWLB endpoints. Enable appliance mode on the GWLB.
B. Create a Gateway Load Balancer (GWLB) in an existing workload VPC. Create GWLB endpoints and network virtual appliances in a different workload VPC. Update the route tables in all workload VPCs to send traffic to the transit gateway. Configure the transit gateway route tables to forward traffic to the GWLB endpoints. Enable appliance mode on the GWLB endpoints.
C. Create an inspection VPC and an internet access VPC. Create a Gateway Load Balancer (GWLB) and GWLB endpoints in the inspection VPC. Create a network virtual appliance in the internet VPC. Enable flow logs in the workload VPCs to route traffic to the transit gateway. Enable appliance mode on the network virtual appliance.
D. Create an inspection VPC that contains a Gateway Load Balancer (GWLB), GWLB endpoints, and a network virtual appliance. Update the route tables in all workload VPCs to send traffic to the transit gateway. Configure the transit gateway route tables to forward traffic to the GWLB endpoints. Enable appliance mode on the transit gateway.

Correct Answer: D

QUESTION 169
A video processing company uses an AWS Lambda function to handle image processing tasks. An Amazon EventBridge rule that matches the event pattern when a new image is uploaded to an Amazon S3 bucket invokes the Lambda function. The processing task initially operated without errors. The Lambda function now encounters frequent timeout errors. The Lambda function is configured with the maximum timeout value. A solutions architect must refactor the application’s architecture to mitigate invocation failures. Which combination of steps will meet these requirements with the LEAST operational overhead? (Select TWO.)

A. Build a Docker container image with the application code for deployment. Store the container image in Amazon ECR.
B. Build a Docker container image with the application code for deployment. Store the container image in an S3 bucket with S3 Versioning enabled.
C. Create a new Amazon ECS deployment with the Amazon EC2 launch type. Configure the ECS task definition to use the new Docker container image. Configure the Lambda function to invoke an ECS task by using the ECS task definition when a new file arrives in Amazon S3.
D. Create a new Amazon ECS deployment with the Fargate launch type. Configure the ECS task definition to use the new Docker container image. Configure EventBridge to invoke an ECS task by using the ECS task definition.
E. Create a new AWS Step Functions state machine. Configure the state machine to use the new Docker container image. Configure the Lambda function to invoke the state machine when a new file arrives in Amazon S3.

Correct Answer: AD

QUESTION 170
A company has a static web application that gives users the ability to upload short videos. The website experiences variable traffic with peaks during certain months. The application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application stores the videos on Amazon EBS volumes. The company uses custom recognition software to categorize the videos. The company wants to rearchitect the application to use AWS managed services where possible. The company also wants stop using the third-party software for video categorization. Which solution meets these requirements?

A. Deploy the application on Amazon ECS with the EC2 launch type. Configure the application to upload and store videos in Amazon EFS and post messages to an Amazon SQS queue. Configure an AWS Step Functions state machine to process SQS queue messages and invoke the Amazon Personalize API to categorize the videos.
B. Host the application on an AWS Batch environment that uploads and stores videos in Amazon EFS. Configure the application to post messages to an Amazon SQS queue. Configure an AWS Lambda function to process SQS queue messages and invoke the Amazon SageMaker Ground Truth API to categorize the videos.
C. Host the static website on an Amazon S3 bucket. Store uploaded videos in a separate S3 bucket. Configure S3 Event Notifications to publish events to an Amazon SQS queue when new objects upload. Configure an AWS Lambda function that processes SQS queue messages and calls the Amazon SageMaker Ground Truth API to categorize the videos.
D. Deploy the application in an AWS Elastic Beanstalk environment that uses EC2 instances in an Auto Scaling group. Configure the application to upload and store videos in an EBS volume and post messages to an SQS queue. Configure an AWS Lambda function to process SQS queue messages and invoke the Amazon Personalize API to categorize the videos.

Correct Answer: C

QUESTION 171
A company is building an application to collect large video files from customers who are located around the world. The application needs to store the video files in a highly durable storage solution across multiple Availability Zones until a separate system processes and removes the video files. The company wants to deploy the application to the us-east-2 Region. The company must provide low latency for customers in all geographic locations. The application will consist of a single-page application (SPA), storage for video files, and a database tier to store metadata for each video file. The company expects that traffic to the application will be unpredictable and will experience spikes throughout each day. Which solution will meet these requirements with the LEAST operational overhead?

A. Deploy the SPA to AWS Elastic Beanstalk in us-east-2. Configure Auto Scaling. Use an Amazon Aurora global database to store the video file metadata. Store the video files in Amazon EBS volumes.
B. Deploy the SPA to an Amazon S3 bucket in us-east-2. Use an Amazon CloudFront distribution and enable S3 Transfer Acceleration. Use Amazon DynamoDB to store the video file metadata. Store the video files in an S3 bucket.
C. Deploy the SPA to an Amazon EC2 Auto Scaling group behind an Application Load Balancer (ALB) in us-east-2. Associate an Amazon CloudFront distribution with a custom origin that points to the ALB. Use Amazon DynamoDB to store the video file metadata. Store the video files in Amazon EBS volumes.
D. Deploy the SPA to an Amazon EC2 Auto Scaling group behind an Application Load Balancer (ALB) in us-east-2. Use Amazon ElastiCache to store the video file metadata. Store the video files in an Amazon S3 bucket.

Correct Answer: B

QUESTION 172
A company is deploying a third-party web application to an AWS account. The company wants to deploy the application across multiple Amazon EC2 instances. The company must have the ability to scale horizontally when necessary. The application uses browser cookies for session state management. The application requires session affinity. Which solution will meet these requirements?

A. Assign each EC2 instance a public IP address. Configure an Amazon Route 53 multi-value A record for the application. Enable health checks for the A record. Configure a Route 53 resolver rule that ensures a specific cookie value will consistently return the same EC2 instance. Access the application by using the Route 53 A record.
B. Place the EC2 instances in an Auto Scaling group. Configure an Amazon CloudFront distribution and set the Auto Scaling group as the origin. Create a CloudFront function to handle viewer requests. Include cookie processing logic to ensure that users are directed to the correct EC2 instance. Access the application by using the CloudFront distribution URL.
C. Place the EC2 instances in an Auto Scaling group. Configure a public Application Load Balancer (ALB), and configure the ALB to direct traffic for the application to the Auto Scaling group to enable sticky sessions on the target group for the application cookies. Access the application by using the ALB domain name.
D. Configure a Gateway Load Balancer (GWLB). Register the EC2 instances as a target group by using their instance IDs. Enable flow stickiness on the target group. Access the application by using the GWLB domain name.

Correct Answer: C

QUESTION 173
A company runs a workload in the AWS Cloud. The company stores data for the application in an older version of Amazon DocumentDB. Several backend services read and write data to the database continuously throughout all hours of the day. All services connect to the database by using the Amazon DocumentDB cluster endpoint, which is registered as a DNS record in Amazon Route 53. The company needs to upgrade the database to latest version of Amazon DocumentDB without losing any data. The company must be able to test and verify the upgrade before the company allows backend services to use the upgraded version. The company has already enabled change streams and set a retention period of 24 hours. Which solution will meet these requirements?

A. Create a new Amazon DocumentDB cluster that runs latest version. Use the Amazon DocumentDB Index Tool to export existing indexes and import them to the new cluster. Create a new AWS DMS instance and a source and target endpoint. Create a DMS task to migrate the data by using the Migrate and replicate migration type. Test and verify the new cluster. Update the Route 53 record to point to the new cluster.
B. Create a new Amazon DocumentDB cluster that runs the latest version. Install MongoDB command line interface (CLI) database tools on an Amazon EC2 instance. Use the MongoDB CLI to create a binary export, and import the data to the new Amazon DocumentDB cluster. Test and verify the new cluster. Update the Route 53 record to point to the new cluster.
C. Create a snapshot of the existing Amazon DocumentD cluster. Perform an in-place major version upgrade. Modify the existing cluster to the latest version and the latest cluster parameter group. Apply modifications immediately. Test and verify the upgrade.
D. Create a new Amazon DocumentDB cluster that runs the latest version. Deploy the AWS DataSync agent to an Amazon EC2 instance and activate the agent. Create a new AWS DataSync task in enhanced mode. Start the transfer task to copy data to the new cluster. Test and verify the new cluster. Update the Route 53 record to point to the new cluster.

Correct Answer: A

QUESTION 174
A company’s inventory application stores data in an Amazon Aurora PostgreSQL DB cluster in a single AWS Region. The company wants to improve resiliency by extending the database infrastructure to a secondary Region. The company wants an RTO of 15 minutes and an RPO of 5 minutes. The solution must not run Aurora DB instances in the secondary Region when the application is operational in the primary Region. Which solution meets these requirements?

A. Configure AWS DMS to copy the Aurora DB cluster in the primary Region to the secondary Region. Use AWS DMS to synchronize the primary DB cluster with the secondary DB cluster.
B. Create a new Aurora PostgreSQL DB cluster in the secondary Region. Use AWS Backup to synchronize the primary DB cluster with the secondary DB cluster.
C. Create a headless Aurora DB cluster in the second Region that is part of the same global DB cluster as the primary Region’s DB cluster.
D. Create an AWS Backup job to back up the DB cluster and copy the DB cluster to the secondary Region every 5 minutes.

Correct Answer: C

QUESTION 175
A company migrated its antivirus solution for 10,000 Amazon EC2 instances to a new software as a service (SaaS) solution. Fewer than 5% of instances reported in the new SaaS agent. The company suspects that either the new agent failed to load or the new agent’s configuration was altered. The company needs to implement a solution to ensure that all instances consistently run the most recent agent version with a predefined configuration. Which solution will meet these requirements with the LEAST administrative overhead?

A. Create an AWS Lambda function that is invoked on a schedule. Store a machine list in Amazon S3. Configure the Lambda function to log in to every machine, download and install the most recent version of the agent, and configure the agent.
B. Implement an AWS Config rule with auto remediation that uses AWS Lambda for noncompliant events. Develop a Lambda function to access machines and download and install the most recent agent version. Schedule the Lambda function to invoke daily.
C. Create an AWS Systems Manager document that defines the agent installation and configuration process. Configure AWS Systems Manager State Manager to associate the document with EC2 instances. Apply the desired state on a daily schedule.
D. Log in to EC2 instances by using AWS Systems Manager Session Manager. Update the EC2 user data script to download and install the most recent agent and configure the agent. Reboot all EC2 instances to ensure that the script applies successfully.

Correct Answer: C

QUESTION 176
A company runs an online multiplayer gaming platform across multiple game servers in an on-premises data center. The gaming platform uses an on-premises PostgreSQL database. The data center is at capacity. The game is growing in popularity, and users are experiencing higher latency during busy periods. The company must migrate the gaming platform to AWS to improve performance. The company must perform the migration with minimal downtime. Which solution will meet these requirements?

A. Use a compute-optimized AWS Snowball Edge device to migrate the platform’s application servers and database servers to AWS. Run the platform on the Snowball Edge device while it is in transit to AWS. Recreate the platform on AWS by using AMIs from the Snowball Edge device. Cut over to the migrated platform.
B. Use AWS Backup to migrate the platform’s database servers to AWS. Recreate the platform on AWS after all the servers are fully migrated. Cut over to the migrated platform.
C. Use AWS Application Migration Service to migrate the platform’s application servers to AWS. Use AWS DMS to migrate the platform’s database servers to AWS. Enable ongoing replication. Recreate the platform on AWS. Cut over to the migrated platform.
D. Use an Amazon S3 File Gateway to migrate the platform’s application servers to AWS. Use AWS DMS to migrate the platform’s database servers to AWS. Enable ongoing replication. Recreate the platform on AWS. Cut over to the migrated platform.

Correct Answer: C

QUESTION 177
A company uses a single organization in AWS Organizations with all features enabled to manage 300 AWS accounts. A solutions architect must ensure that all private Amazon ECR repositories that are deployed in the member accounts are accessible only to principals that belong to the same organization. The company must enforce access controls across the entire organization and for all current and future ECR repositories. Which solution will meet these requirements?

A. Attach an SCP to the organization root that denies all ecr:* actions unless the aws: PrincipalType property has a value of Service.
B. Attach a resource control policy (RCP) to the organization root that allows access to ECR only when the aws:PrincipalOrgID condition matches the company’s organization ID.
C. Modify IAM policies across all accounts to include a deny statement for ecr:* unless the caller’s aws:PrincipalAccount property matches the organization’s ID.
D. Share all ECR repositories through AWS Resource Access Manager (AWS RAM). Control principal access based on account-level allowlists.

Correct Answer: B

QUESTION 178
A company needs to store sensitive and crucial business data in an Amazon S3 bucket. Because of the criticality of the data, the data must be available in a second AWS Region within 15 minutes. If any object is not available within 15 minutes, an operations team must receive a notification. The company has already enabled S3 Versioning on the S3 bucket, and the company creates a second S3 bucket in the second Region. Which combination of solutions will meet these requirements? (Select TWO.)

A. Create a new S3 replication rule. Configure the rule to replicate all objects to the second S3 bucket.
B. Create an AWS DataSync task. Set the appropriate source and destination S3 buckets for the task.
C. Enable S3 Replication Time Control (S3 RTC), and configure the replication metrics and events. Create an Amazon SNS topic and set it as target for the OperationMissed Threshold S3 event notification. Use the SNS topic to notify the operations team.
D. Enable S3 Transfer Acceleration on both S3 buckets. Create an Amazon CloudWatch alarm for the S3 5xxErrors metric. Create an Amazon SNS topic and set it as the target for the alarm. Use the SNS topic to notify the operations team.
E. Enable AWS DataSync enhanced transfer mode. Create an Amazon CloudWatch alarm for the DataSync FilesFailed metric. Create an Amazon SNS topic and set it as the target for the alarm. Use the SNS topic to notify the operations team.

Correct Answer: AC

QUESTION 179
A company is running a compute workload by using Amazon EC2 Spot Instances in an Auto Scaling group. The launch template uses two placement groups and one instance type. Recently, a monitoring system reported Auto Scaling instance launch failures that correlated with longer wait times for system users. The company needs to improve the overall reliability of the workload. Which solution will meet these requirements?

A. Create a launch configuration that uses attribute-based instance type selection. Configure the Auto Scaling group to use the new launch configuration.
B. Create a launch configuration that uses a larger instance type. Configure the Auto Scaling group to use the launch configuration and the launch template.
C. Create a new launch template version that increases the number of placement groups to 3. Configure the Auto Scaling group to use the new launch template version.
D. Create a new launch template version that uses attribute-based instance type selection. Configure the Auto Scaling group to use the new launch template version.

Correct Answer: D

QUESTION 180
A company is migrating a document processing workload to AWS. Client applications upload documents to an Amazon S3 bucket for processing. A document processing engine runs on an Amazon EC2 Linux instance and requires Portable Operating System Interface (POSIX)-compliant file system access to read, generate, and modify files during processing. The processed documents must be automatically available in the S3 bucket for client applications to download. The company cannot directly modify the document processing engine to use the S3 API. The company needs a solution that provides the EC2 instance with file system access. The solution must maintain automatic synchronization with the S3 bucket for both input and output files. Which solution will meet these requirements?

A. Configure AWS DataSync to connect to the EC2 instance without an agent. Configure a DataSync task in enhanced mode to synchronize the processed documents to and from Amazon S3.
B. Configure an Amazon FSx for Lustre file system with import and export policies that are linked to the S3 bucket. Install the Lustre client on the EC2 instance and mount the file system.
C. Create an Amazon EFS file system. Set the data repository associations to the S3 bucket. Install the EFS client and mount the file system. Create an automatic import and export policy for new and changed objects.
D. Set up an Amazon S3 File Gateway. Initiate a RefreshCache API call to update the S3 File Gateway when changes occur in Amazon S3.

Correct Answer: B