A finance company uses an on-premises search application to collect streaming data from various producers. The application provides real-time updates to search and visualization features.
The company is planning to migrate to AWS and wants to use an AWS native solution.
Which solution will meet these requirements?
A. Use Amazon EC2 instances to ingest and process the data streams to Amazon S3 buckets tor storage. Use Amazon Athena to search the data. Use Amazon Managed Grafana to create visualizations.
B. Use Amazon EMR to ingest and process the data streams to Amazon Redshift for storage. Use Amazon Redshift Spectrum to search the data. Use Amazon QuickSight to create visualizations.
C. Use Amazon Elastic Kubernetes Service (Amazon EKS) to ingest and process the data streams to Amazon DynamoDB for storage. Use Amazon CloudWatch to create graphical dashboards to search and visualize the data.
D. Use Amazon Kinesis Data Streams to ingest and process the data streams to Amazon OpenSearch Service. Use OpenSearch Service to search the data. Use Amazon QuickSight to create visualizations.
Show Answer
Correct Answer: D
Explanation: The requirements emphasize real-time streaming ingestion, search, and visualization using AWS-native services. Amazon Kinesis Data Streams is purpose-built for ingesting streaming data. Amazon OpenSearch Service provides near real-time indexing and search capabilities, making it a direct replacement for on-premises search applications. Amazon QuickSight can visualize data from OpenSearch. The other options rely on services that are not designed for low-latency search over streaming data (Athena/S3, Redshift/EMR) or misuse CloudWatch as a search/visualization platform for application data (EKS/DynamoDB/CloudWatch).
Question 112
A solutions architect is designing an application that helps users fill out and submit registration forms. The solutions architect plans to use a two-tier architecture that includes a web application server tier and a worker tier.
The application needs to process submitted forms quickly. The application needs to process each form exactly once. The solution must ensure that no data is lost.
Which solution will meet these requirements?
A. Use an Amazon Simple Queue Service (Amazon SQS) FIFO queue between the web application server tier and the worker tier to store and forward form data.
B. Use an Amazon API Gateway HTTP API between the web application server tier and the worker tier to store and forward form data.
C. Use an Amazon Simple Queue Service (Amazon SQS) standard queue between the web application server tier and the worker tier to store and forward form data.
D. Use an AWS Step Functions workflow. Create a synchronous workflow between the web application server tier and the worker tier that stores and forwards form data.
Show Answer
Correct Answer: A
Explanation: Amazon SQS FIFO queues provide ordered delivery, message deduplication, and are designed for exactly-once processing semantics when used correctly. They durably store messages between the web tier and worker tier, helping ensure no data is lost. API Gateway is not a message buffer, SQS standard queues provide at-least-once delivery (duplicates are possible), and synchronous Step Functions are not the appropriate durable queueing mechanism for this producer-consumer pattern.
Question 113
A company wants to improve the availability and performance of its hybrid application. The application consists of a stateful TCP-based workload hosted on Amazon EC2 instances in different AWS Regions and a stateless UDP-based workload hosted on premises.
Which combination of actions should a solutions architect take to improve availability and performance? (Choose two.)
A. Create an accelerator using AWS Global Accelerator. Add the load balancers as endpoints.
B. Create an Amazon CloudFront distribution with an origin that uses Amazon Route 53 latency-based routing to route requests to the load balancers.
C. Configure two Application Load Balancers in each Region. The first will route to the EC2 endpoints, and the second will route to the on-premises endpoints.
D. Configure a Network Load Balancer in each Region to address the EC2 endpoints. Configure a Network Load Balancer in each Region that routes to the on-premises endpoints.
E. Configure a Network Load Balancer in each Region to address the EC2 endpoints. Configure an Application Load Balancer in each Region that routes to the on-premises endpoints.
Show Answer
Correct Answer: A, D
Explanation: AWS Global Accelerator improves availability and performance for both TCP and UDP applications by routing users to the optimal healthy regional endpoint over the AWS global network. For the stateful TCP workload on EC2, Network Load Balancers are the appropriate load balancers. For the stateless UDP on-premises workload, Network Load Balancers support UDP and can target on-premises resources (for example via hybrid connectivity), whereas Application Load Balancers do not support UDP. CloudFront is for HTTP/HTTPS content and is not suitable for generic TCP/UDP workloads.
Question 114
A company is migrating an application from an on-premises environment to AWS. The application will store sensitive data in Amazon S3. The company must encrypt the data before storing the data in Amazon S3.
Which solution will meet these requirements?
A. Encrypt the data by using client-side encryption with customer managed keys.
B. Encrypt the data by using server-side encryption with AWS KMS keys (SSE-KMS).
C. Encrypt the data by using server-side encryption with customer-provided keys (SSE-C).
D. Encrypt the data by using client-side encryption with Amazon S3 managed keys.
Show Answer
Correct Answer: A
Explanation: The requirement is to encrypt the data before storing it in Amazon S3. That implies the data must be encrypted prior to reaching S3, which is client-side encryption. Using customer managed keys satisfies this requirement. Server-side encryption options (SSE-KMS and SSE-C) encrypt data after it is received by S3. 'Client-side encryption with Amazon S3 managed keys' is not a standard AWS encryption option; client-side encryption uses keys you manage or keys from AWS KMS, not S3-managed keys.
Question 115
A company is migrating its databases to Amazon RDS for PostgreSQL. The company is migrating its applications to Amazon EC2 instances. The company wants to optimize costs for long-running workloads.
Which solution will meet this requirement MOST cost-effectively?
A. Use On-Demand Instances for the Amazon RDS for PostgreSQL workloads. Purchase a 1 year Compute Savings Plan with the No Upfront option for the EC2 instances.
B. Purchase Reserved Instances for a 1 year term with the No Upfront option for the Amazon RDS for PostgreSQL workloads. Purchase a 1 year EC2 Instance Savings Plan with the No Upfront option for the EC2 instances.
C. Purchase Reserved Instances for a 1 year term with the Partial Upfront option for the Amazon RDS for PostgreSQL workloads. Purchase a 1 year EC2 Instance Savings Plan with the Partial Upfront option for the EC2 instances.
D. Purchase Reserved Instances for a 3 year term with the All Upfront option for the Amazon RDS for PostgreSQL workloads. Purchase a 3 year EC2 Instance Savings Plan with the All Upfront option for the EC2 instances.
Show Answer
Correct Answer: D
Explanation: For long-running, predictable workloads, the greatest cost savings come from long-term commitments with the highest upfront payment. Amazon RDS Reserved Instances for 3 years with All Upfront provide the maximum RDS discount, and a 3-year EC2 Instance Savings Plan with All Upfront provides the maximum savings for EC2 compute usage while retaining instance family, size, and Region flexibility. This combination is the most cost-effective among the options.
Question 116
A company that runs its application on AWS uses an Amazon Aurora DB cluster as its database. During peak usage hours when multiple users access and read the data, the monitoring system shows degradation of database performance for the write queries. The company wants to increase the scalability of the application to meet peak usage demands.
Which solution will meet these requirements MOST cost-effectively?
A. Create a second Aurora DB cluster. Configure a copy job to replicate the users’ data to the new database. Update the application to use the second database to read the data.
B. Create an Amazon DynamoDB Accelerator (DAX) cluster in front of the existing Aurora DB cluster. Update the application to use the DAX cluster for read-only queries. Write data directly to the Aurora DB cluster.
C. Create an Aurora read replica in the existing Aurora DB cluster. Update the application to use the replica endpoint for read-only queries and to use the cluster endpoint for write queries.
D. Create an Amazon Redshift cluster. Copy the users' data to the Redshift cluster. Update the application to connect to the Redshift cluster and to perform read-only queries on the Redshift cluster.
Show Answer
Correct Answer: C
Explanation: Amazon Aurora supports read scaling by adding Aurora Replicas (read replicas). Offloading read traffic to the reader endpoint reduces contention on the primary writer instance, improving write performance during read-heavy peak periods. DAX only accelerates DynamoDB, not Aurora. A second Aurora cluster with custom replication is more complex and costly, and Redshift is for analytics rather than OLTP read scaling.
Question 117
A company has primary and secondary data centers that are 500 miles (804.7 km) apart and interconnected with high-speed fiber-optic cable. The company needs a highly available and secure network connection between its data centers and a VPC on AWS for a mission-critical workload. A solutions architect must choose a connection solution that provides maximum resiliency.
Which solution meets these requirements?
A. Two AWS Direct Connect connections from the primary data center terminating at two Direct Connect locations on two separate devices
B. A single AWS Direct Connect connection from each of the primary and secondary data centers terminating at one Direct Connect location on the same device
C. Two AWS Direct Connect connections from each of the primary and secondary data centers terminating at two Direct Connect locations on two separate devices
D. A single AWS Direct Connect connection from each of the primary and secondary data centers terminating at one Direct Connect location on two separate devices
Show Answer
Correct Answer: C
Explanation: For maximum resiliency, each data center should have redundant Direct Connect links, those links should terminate at two different Direct Connect locations, and they should use separate devices to eliminate single points of failure. This provides redundancy across data centers, circuits, facilities, and hardware.
Question 118
A company plans to rehost an application to Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) as the attached storage.
A solutions architect must design a solution to ensure that all newly created Amazon EBS volumes are encrypted by default. The solution must also prevent the creation of unencrypted EBS volumes.
Which solution will meet these requirements?
A. Configure the EC2 account attributes to always encrypt new EBS volumes.
B. Use AWS Config. Configure the encrypted-volumes identifier. Apply the default AWS Key Management Service (AWS KMS) key.
C. Configure AWS Systems Manager to create encrypted copies of the EBS volumes. Reconfigure the EC2 instances to use the encrypted volumes.
D. Create a customer managed key in AWS Key Management Service (AWS KMS). Configure AWS Migration Hub to use the key when the company migrates workloads.
Show Answer
Correct Answer: A
Explanation: Enabling Amazon EBS encryption by default at the EC2 account/Region level ensures that all newly created EBS volumes are automatically encrypted. With EBS encryption by default enabled, requests to create unencrypted volumes are transparently encrypted instead, effectively preventing the creation of unencrypted new volumes. AWS Config only detects and reports (or remediates after creation) and does not prevent creation. Systems Manager and Migration Hub do not satisfy the requirement.
Question 119
A company is migrating five on-premises applications to VPCs in the AWS Cloud. Each application is currently deployed in isolated virtual networks on premises and should be deployed similarly in the AWS Cloud. The applications need to reach a shared services VPC. All the applications must be able to communicate with each other.
If the migration is successful, the company will repeat the migration process for more than 100 applications.
Which solution will meet these requirements with the LEAST administrative overhead?
A. Deploy software VPN tunnels between the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets to the shared services VPC.
B. Deploy VPC peering connections between the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets to the shared services VPC through the peering connection.
C. Deploy an AWS Direct Connect connection between the application VPCs and the shared services VPAdd routes from the application VPCs in their subnets to the shared services VPC and the applications VPCs. Add routes from the shared services VPC subnets to the applications VPCs.
D. Deploy a transit gateway with associations between the transit gateway and the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets and the application VPCs to the shared services VPC through the transit gateway.
Show Answer
Correct Answer: D
Explanation: AWS Transit Gateway provides a scalable hub-and-spoke architecture that allows all application VPCs and the shared services VPC to communicate through a central gateway. It significantly reduces administrative overhead compared to managing many VPC peering connections or VPN tunnels, and it scales well to hundreds of VPC attachments. Direct Connect is for on-premises connectivity, not interconnecting AWS VPCs.
Question 120
A company wants to use Amazon Elastic Container Service (Amazon ECS) to run its on-premises application in a hybrid environment. The application currently runs on containers on premises.
The company needs a single container solution that can scale in an on-premises, hybrid, or cloud environment. The company must run new application containers in the AWS Cloud and must use a load balancer for HTTP traffic.
Which combination of actions will meet these requirements? (Choose two.)
A. Set up an ECS cluster that uses the AWS Fargate launch type for the cloud application containers. Use an Amazon ECS Anywhere external launch type for the on-premises application containers.
B. Set up an Application Load Balancer for cloud ECS services.
C. Set up a Network Load Balancer for cloud ECS services.
D. Set up an ECS cluster that uses the AWS Fargate launch type. Use Fargate for the cloud application containers and the on-premises application containers.
E. Set up an ECS cluster that uses the Amazon EC2 launch type for the cloud application containers. Use Amazon ECS Anywhere with an AWS Fargate launch type for the on-premises application containers.
Show Answer
Correct Answer: A, B
Explanation: Amazon ECS Anywhere is the ECS capability for running ECS-managed containers on on-premises servers as external instances, while AWS Fargate is used for serverless ECS tasks in AWS. For HTTP/HTTPS traffic, an Application Load Balancer is the appropriate load balancer. Network Load Balancer is primarily for Layer 4 traffic, Fargate cannot run on premises, and the EC2/Fargate combination in option E is incorrect because ECS Anywhere does not use Fargate on premises.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.