A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing. The company wants to minimize the website hosting costs.
Which solution will meet these requirements?
A. Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.
B. Move the website to an Amazon S3 bucket. Configure an Amazon ElastiCache cluster for the S3 bucket.
C. Move the website to AWS Amplify. Configure an ALB to resolve to the Amplify website.
D. Move the website to AWS Amplify. Configure EC2 instances to cache the website.
Show Answer
Correct Answer: A
Explanation: The website serves only static content and the goal is to minimize hosting costs while handling increasing traffic. Hosting static content directly in Amazon S3 is far cheaper than running EC2 instances behind an ALB. Adding Amazon CloudFront further reduces costs and improves scalability by caching content at edge locations, reducing S3 request costs and offloading traffic. ElastiCache is designed for caching dynamic data and would add unnecessary cost and complexity. AWS Amplify and ALB/EC2-based caching are also more expensive and unnecessary for static websites.
Question 124
A company has an application that customers use to upload images to an Amazon S3 bucket. Each night, the company launches an Amazon EC2 Spot Fleet that processes all the images that the company received that day. The processing for each image takes 2 minutes and requires 512 MB of memory.
A solutions architect needs to change the application to process the images when the images are uploaded.
Which change will meet these requirements MOST cost-effectively?
A. Use S3 Event Notifications to write a message with image details to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an AWS Lambda function to read the messages from the queue and to process the images.
B. Use S3 Event Notifications to write a message with image details to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an EC2 Reserved Instance to read the messages from the queue and to process the images.
C. Use S3 Event Notifications to publish a message with image details to an Amazon Simple Notification Service (Amazon SNS) topic. Configure a container instance in Amazon Elastic Container Service (Amazon ECS) to subscribe to the topic and to process the images.
D. Use S3 Event Notifications to publish a message with image details to an Amazon Simple Notification Service (Amazon SNS) topic. Configure an AWS Elastic Beanstalk application to subscribe to the topic and to process the images.
Show Answer
Correct Answer: A
Explanation: Each image takes 2 minutes and 512 MB of memory, which fits well within AWS Lambda limits (up to 15 minutes and much higher memory). Using S3 Event Notifications with SQS provides reliable, decoupled, and scalable event-driven processing, ensuring no images are missed. Lambda scales automatically with uploads and charges only per execution time, making it more cost-effective than running EC2 instances, ECS containers, or Elastic Beanstalk, which incur ongoing compute costs even when idle.
Question 125
A company manages a data lake in an Amazon S3 bucket that numerous applications access. The S3 bucket contains a unique prefix for each application. The company wants to restrict each application to its specific prefix and to have granular control of the objects under each prefix.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create dedicated S3 access points and access point policies for each application.
B. Create an S3 Batch Operations job to set the ACL permissions for each object in the S3 bucket.
C. Replicate the objects in the S3 bucket to new S3 buckets for each application. Create replication rules by prefix.
D. Replicate the objects in the S3 bucket to new S3 buckets for each application. Create dedicated S3 access points for each application.
Show Answer
Correct Answer: A
Explanation: Amazon S3 access points are designed to manage access to shared buckets at scale. Creating a dedicated access point per application with an access point policy scoped to that application's prefix provides granular, prefix-level control without modifying object ACLs or duplicating data. This approach minimizes operational overhead compared to managing ACLs on every object or replicating data into multiple buckets.
Question 126
A company wants to migrate an application to AWS. The company wants to increase the application's current availability. The company wants to use AWS WAF in the application's architecture.
Which solution will meet these requirements?
A. Create an Auto Scaling group that contains multiple Amazon EC2 instances that host the application across two Availability Zones. Configure an Application Load Balancer (ALB) and set the Auto Scaling group as the target. Connect a WAF to the ALB.
B. Create a cluster placement group that contains multiple Amazon EC2 instances that hosts the application. Configure an Application Load Balancer and set the EC2 instances as the targets. Connect a WAF to the placement group.
C. Create two Amazon EC2 instances that host the application across two Availability Zones. Configure the EC2 instances as the targets of an Application Load Balancer (ALB). Connect a WAF to the ALB.
D. Create an Auto Scaling group that contains multiple Amazon EC2 instances that host the application across two Availability Zones. Configure an Application Load Balancer (ALB) and set the Auto Scaling group as the target. Connect a WAF to the Auto Scaling group.
Show Answer
Correct Answer: A
Explanation: The solution must both increase availability and correctly integrate AWS WAF. High availability is achieved by using an Auto Scaling group with EC2 instances spread across multiple Availability Zones behind an Application Load Balancer. AWS WAF can be associated with an ALB to inspect and filter incoming web traffic. WAF cannot be attached directly to EC2 instances, Auto Scaling groups, or placement groups. Therefore, using WAF with an ALB in front of a Multi-AZ Auto Scaling group is the correct and supported architecture.
Question 127
A company is migrating its workloads to AWS. The company has sensitive and critical data in on-premises relational databases that run on SQL Server instances.
The company wants to use the AWS Cloud to increase security and reduce operational overhead for the databases.
Which solution will meet these requirements?
A. Migrate the databases to Amazon EC2 instances. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
B. Migrate the databases to a Multi-AZ Amazon RDS for SQL Server DB instance. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
C. Migrate the data to an Amazon S3 bucket. Use Amazon Macie to ensure data security.
D. Migrate the databases to an Amazon DynamoDB table. Use Amazon CloudWatch Logs to ensure data security.
Show Answer
Correct Answer: B
Explanation: Amazon RDS for SQL Server is a fully managed relational database service that reduces operational overhead by handling backups, patching, and maintenance. Using a Multi-AZ deployment increases availability and resilience, which improves security and reliability for critical data. Encryption with an AWS KMS AWS managed key provides strong data-at-rest protection without additional management burden. The other options either retain high operational overhead (EC2), do not support relational SQL Server workloads (DynamoDB), or are not appropriate for running relational databases (S3 with Macie).
Question 128
A company runs workloads in the AWS Cloud. The company wants to centrally collect security data to assess security across the entire company and to improve workload protection.
Which solution will meet these requirements with the LEAST development effort?
A. Configure a data lake in AWS Lake Formation. Use AWS Glue crawlers to ingest the security data into the data lake.
B. Configure an AWS Lambda function to collect the security data in .csv format. Upload the data to an Amazon S3 bucket.
C. Configure a data lake in Amazon Security Lake to collect the security data. Upload the data to an Amazon S3 bucket.
D. Configure an AWS Database Migration Service (AWS DMS) replication instance to load the security data into an Amazon RDS cluster.
Show Answer
Correct Answer: C
Explanation: Amazon Security Lake is purpose-built to automatically collect and centralize security data across AWS accounts and services with minimal setup. It requires far less development and integration effort than building a custom data lake with Glue, Lambda, or using DMS, while directly supporting organization-wide security visibility and workload protection.
Question 129
A company is designing its production application's disaster recovery (DR) strategy. The application is backed by a MySQL database on an Amazon Aurora cluster in the us-east-1 Region. The company has chosen the us-west-1 Region as its DR Region.
The company's target recovery point objective (RPO) is 5 minutes and the target recovery time objective (RTO) is 20 minutes. The company wants to minimize configuration changes.
Which solution will meet these requirements with the MOST operational efficiency?
A. Create an Aurora read replica in us-west-1 similar in size to the production application's Aurora MySQL cluster writer instance.
B. Convert the Aurora cluster to an Aurora global database. Configure managed failover.
C. Create a new Aurora cluster in us-west-1 that has Cross-Region Replication.
D. Create a new Aurora cluster in us-west-1. Use AWS Database Migration Service (AWS DMS) to sync both clusters.
Show Answer
Correct Answer: B
Explanation: Aurora Global Database provides built-in cross-Region replication with very low replication lag (typically seconds), meeting a 5-minute RPO easily. Managed cross-Region failover can promote a secondary Region in minutes, well within the 20-minute RTO. It requires minimal application and configuration changes compared to manual replication, DMS, or standalone cross-Region replicas, making it the most operationally efficient solution.
Question 130
A company is migrating a data center from its on-premises location to AWS. The company has several legacy applications that are hosted on individual virtual servers. Changes to the application designs cannot be made.
Each individual virtual server currently runs as its own EC2 instance. A solutions architect needs to ensure that the applications are reliable and fault tolerant after migration to AWS. The applications will run on Amazon EC2 instances.
Which solution will meet these requirements?
A. Create an Auto Scaling group that has a minimum of one and a maximum of one. Create an Amazon Machine Image (AMI) of each application instance. Use the AMI to create EC2 instances in the Auto Scaling group Configure an Application Load Balancer in front of the Auto Scaling group.
B. Use AWS Backup to create an hourly backup of the EC2 instance that hosts each application. Store the backup in Amazon S3 in a separate Availability Zone. Configure a disaster recovery process to restore the EC2 instance for each application from its most recent backup.
C. Create an Amazon Machine Image (AMI) of each application instance. Launch two new EC2 instances from the AMI. Place each EC2 instance in a separate Availability Zone. Configure a Network Load Balancer that has the EC2 instances as targets.
D. Use AWS Mitigation Hub Refactor Spaces to migrate each application off the EC2 instance. Break down functionality from each application into individual components. Host each application on Amazon Elastic Container Service (Amazon ECS) with an AWS Fargate launch type.
Show Answer
Correct Answer: A
Explanation: The applications are legacy and cannot be redesigned, so it cannot be assumed they can run correctly with multiple active instances. An Auto Scaling group with a minimum and maximum of one instance provides fault tolerance by automatically detecting instance failure and launching a replacement from a prebuilt AMI, without changing the application design. Option C requires running two concurrent instances behind a load balancer, which may not be supported by the legacy applications. Backup-based recovery (B) is not fault tolerant, and refactoring to containers (D) violates the constraint against design changes.
Question 131
A company needs to optimize its Amazon S3 storage costs for an application that generates many files that cannot be recreated. Each file is approximately 5 MB and is stored in Amazon S3 Standard storage.
The company must store the files for 4 years before the files can be deleted. The files must be immediately accessible. The files are frequently accessed in the first 30 days of object creation, but they are rarely accessed after the first 30 days.
Which solution will meet these requirements MOST cost-effectively?
A. Create an S3 Lifecycle policy to move the files to S3 Glacier Instant Retrieval 30 days after object creation. Delete the files 4 years after object creation.
B. Create an S3 Lifecycle policy to move the files to S3 One Zone-Infrequent Access (S3 One Zone-IA) 30 days after object creation. Delete the files 4 years after object creation.
C. Create an S3 Lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days after object creation. Delete the files 4 years after object creation.
D. Create an S3 Lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days after object creation. Move the files to S3 Glacier Flexible Retrieval 4 years after object creation.
Show Answer
Correct Answer: A
Explanation: The files must be immediately accessible, retained for 4 years, and are rarely accessed after 30 days. S3 Glacier Instant Retrieval provides millisecond access (meeting the immediate access requirement) at a significantly lower storage cost than S3 Standard-IA or One Zone-IA. A lifecycle transition after 30 days minimizes cost while still allowing instant access. The 90-day minimum storage duration is not a maximum retention limit; it only affects early deletion charges, which are irrelevant because the files are kept for 4 years. Therefore, option A is the most cost-effective solution.
Question 132
A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled.
Which solution will meet these requirements?
A. Set up an AWS CloudTrail event that has a rule to identify all S3 buckets that are not versioning-enabled across Regions.
B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.
C. Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
D. Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.
Show Answer
Correct Answer: B
Explanation: Amazon S3 Storage Lens provides organization-wide, multi-Region visibility into S3 bucket configurations and best practices. It includes metrics and recommendations that identify whether buckets have S3 Versioning enabled, allowing the company to find all buckets that are not versioning-enabled at scale. CloudTrail tracks API activity, IAM Access Analyzer focuses on access policies, and Multi-Region Access Points do not provide configuration compliance reporting.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.