A company has 15 employees. The company stores employee start dates in an Amazon DynamoDB table. The company wants to send an email message to each employee on the day of the employee's work anniversary.
Which solution will meet these requirements with the MOST operational efficiency?
A. Create a script that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Use a cron job to run this script every day on an Amazon EC2 instance.
B. Create a script that scans the DynamoDB table and uses Amazon Simple Queue Service (Amazon SQS) to send email messages to employees when necessary. Use a cron job to run this script every day on an Amazon EC2 instance.
C. Create an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Schedule this Lambda function to run every day.
D. Create an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Queue Service (Amazon SQS) to send email messages to employees when necessary. Schedule this Lambda function to run every day.
Show Answer
Correct Answer: C
Explanation: The most operationally efficient solution uses fully managed, serverless services. An AWS Lambda function can be scheduled daily (for example, with Amazon EventBridge) without managing servers or cron jobs. Lambda can scan the DynamoDB table and Amazon SNS is the appropriate service to send email notifications. Options using EC2 require ongoing instance management, and SQS is unnecessary because the requirement is to send emails, not queue messages.
Question 144
A development team uses multiple AWS accounts for its development, staging, and production environments. Team members have been launching large Amazon EC2 instances that are underutilized. A solutions architect must prevent large instances from being launched in all accounts.
How can the solutions architect meet this requirement with the LEAST operational overhead?
A. Update the IAM policies to deny the launch of large EC2 instances. Apply the policies to all users.
B. Define a resource in AWS Resource Access Manager that prevents the launch of large EC2 instances.
C. Create an IAM role in each account that denies the launch of large EC2 instances. Grant the developers IAM group access to the role.
D. Create an organization in AWS Organizations in the management account with the default policy. Create a service control policy (SCP) that denies the launch of large EC2 instances, and apply it to the AWS accounts.
Show Answer
Correct Answer: D
Explanation: Using AWS Organizations with a Service Control Policy (SCP) centrally enforces restrictions across all member accounts with minimal operational overhead. An SCP that denies launching large EC2 instance types applies regardless of individual IAM permissions, eliminating the need to manage separate IAM policies or roles in each account. Other options require per-account or per-user maintenance or are not designed to restrict resource launches.
Question 145
A company uses Amazon RDS with default backup settings for its database tier. The company needs to make a daily backup of the database to meet regulatory requirements. The company must retain the backups for 30 days.
Which solution will meet these requirements with the LEAST operational overhead?
A. Write an AWS Lambda function to create an RDS snapshot every day.
B. Modify the RDS database to have a retention period of 30 days for automated backups.
C. Use AWS Systems Manager Maintenance Windows to modify the RDS backup retention period.
D. Create a manual snapshot every day by using the AWS CLI. Modify the RDS backup retention period.
Show Answer
Correct Answer: B
Explanation: Amazon RDS automated backups already perform a daily backup and allow configuring a retention period between 1 and 35 days. Setting the automated backup retention period to 30 days meets the daily backup and retention requirements with minimal operational overhead, without custom scripts, Lambda functions, or manual snapshots.
Question 146
A company creates operations data and stores the data in an Amazon S3 bucket. For the company's annual audit, an external consultant needs to access an annual report that is stored in the S3 bucket. The external consultant needs to access the report for 7 days.
The company must implement a solution to allow the external consultant access to only the report.
Which solution will meet these requirements with the MOST operational efficiency?
A. Create a new S3 bucket that is configured to host a public static website. Migrate the operations data to the new S3 bucket. Share the S3 website URL with the external consultant.
B. Enable public access to the S3 bucket for 7 days. Remove access to the S3 bucket when the external consultant completes the audit.
C. Create a new IAM user that has access to the report in the S3 bucket. Provide the access keys to the external consultant. Revoke the access keys after 7 days.
D. Generate a presigned URL that has the required access to the location of the report on the S3 bucket. Share the presigned URL with the external consultant.
Show Answer
Correct Answer: D
Explanation: A presigned URL grants time-limited access to a specific S3 object without making the bucket public or creating IAM users. It can be set to expire after 7 days, provides access only to the required report, and requires minimal setup and cleanup, making it the most operationally efficient solution.
Question 147
A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS CloudFormation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials.
Which solution meets these requirements with the LEAST operational effort?
A. Create a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.
B. Create a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store. Configure the EC2 instances to retrieve the database credentials from Parameter Store.
C. Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.
D. Configure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the IAM user with the EC2 instances to allow applications on the instances to access the database.
Show Answer
Correct Answer: C
Explanation: IAM database authentication for Amazon Aurora allows EC2 applications to authenticate using temporary IAM credentials instead of static database passwords. By enabling IAM DB authentication on the cluster, creating a database user mapped to IAM authentication, and attaching an IAM role to the EC2 instances, the company avoids managing and rotating database credentials. This approach is more secure and requires the least ongoing operational effort compared with storing or passing usernames and passwords.
Question 148
A company is building a web application that serves a content management system. The content management system runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances run in an Auto Scaling group across multiple Availability Zones. Users are constantly adding and updating files, blogs, and other website assets in the content management system.
A solutions architect must implement a solution in which all the EC2 instances share up-to-date website content with the least possible lag time.
Which solution meets these requirements?
A. Update the EC2 user data in the Auto Scaling group lifecycle policy to copy the website assets from the EC2 instance that was launched most recently. Configure the ALB to make changes to the website assets only in the newest EC2 instance.
B. Copy the website assets to an Amazon Elastic File System (Amazon EFS) file system. Configure each EC2 instance to mount the EFS file system locally. Configure the website hosting application to reference the website assets that are stored in the EFS file system.
C. Copy the website assets to an Amazon S3 bucket. Ensure that each EC2 instance downloads the website assets from the S3 bucket to the attached Amazon Elastic Block Store (Amazon EBS) volume. Run the S3 sync command once each hour to keep files up to date.
D. Restore an Amazon Elastic Block Store (Amazon EBS) snapshot with the website assets. Attach the EBS snapshot as a secondary EBS volume when a new EC2 instance is launched. Configure the website hosting application to reference the website assets that are stored in the secondary EBS volume.
Show Answer
Correct Answer: B
Explanation: Amazon EFS provides a shared, fully managed network file system that can be mounted simultaneously by multiple EC2 instances across Availability Zones. This allows all instances in the Auto Scaling group to read and write the same website content with near-real-time consistency and minimal lag. The other options either introduce synchronization delays, operational complexity, or rely on instance-local storage that cannot be safely shared.
Question 149
A large company wants to provide its globally located developers separate, limited size, managed PostgreSQL databases for development purposes. The databases will be low volume. The developers need the databases only when they are actively working.
Which solution will meet these requirements MOST cost-effectively?
A. Give the developers the ability to launch separate Amazon Aurora instances. Set up a process to shut down Aurora instances at the end of the workday and to start Aurora instances at the beginning of the next workday.
B. Develop an AWS Service Catalog product that enforces size restrictions for launching Amazon Aurora instances. Give the developers access to launch the product when they need a development database.
C. Create an Amazon Aurora Serverless cluster. Develop an AWS Service Catalog product to launch databases in the cluster with the default capacity settings. Grant the developers access to the product.
D. Monitor AWS Trusted Advisor checks for idle Amazon RDS databases. Create a process to terminate identified idle RDS databases.
Show Answer
Correct Answer: C
Explanation: Aurora Serverless (PostgreSQL-compatible) is the most cost-effective option for low-volume, intermittent development databases because it automatically starts, stops, and scales capacity based on usage, allowing costs to drop to near zero when developers are not working. Using AWS Service Catalog enforces standardized, limited-size provisioning while keeping operations managed. Provisioned Aurora or RDS instances (A, B) incur ongoing instance costs even when idle, and manual termination of idle databases (D) adds operational overhead and risk without guaranteeing availability.
Question 150
A company’s application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancing (ELB) load balancer. Based on the application's history, the company anticipates a spike in traffic during a holiday each year. A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users.
Which solution will meet these requirements?
A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%.
B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand.
C. Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period.
D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are autoscaling:EC2_INSTANCE_LAUNCH events.
Show Answer
Correct Answer: B
Explanation: The requirement is to proactively increase capacity based on a known, recurring traffic spike. Scheduled scaling actions allow the Auto Scaling group to add capacity ahead of the holiday peak, preventing performance degradation. CloudWatch alarms (A) are reactive, SNS notifications (D) do not scale capacity, and manually changing min/max capacity (C) is less precise and not an automated scaling strategy by itself.
Question 151
A company runs its application on Oracle Database Enterprise Edition. The company needs to migrate the application and the database to AWS. The company can use the Bring Your Own License (BYOL) model while migrating to AWS. The application uses third-party database features that require privileged access.
A solutions architect must design a solution for the database migration.
Which solution will meet these requirements MOST cost-effectively?
A. Migrate the database to Amazon RDS for Oracle by using native tools. Replace the third-party features with AWS Lambda.
B. Migrate the database to Amazon RDS Custom for Oracle by using native tools. Customize the new database settings to support the third-party features.
C. Migrate the database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS). Customize the new database settings to support the third-party features.
D. Migrate the database to Amazon RDS for PostgreSQL by using AWS Database Migration Service (AWS DMS). Rewrite the application code to remove the dependency on third-party features.
Show Answer
Correct Answer: B
Explanation: The company requires Oracle Database Enterprise Edition with Bring Your Own License (BYOL) and needs privileged (OS/DBA-level) access to support third-party database features. Amazon RDS for Oracle does not allow such privileged access, and migrating to DynamoDB or PostgreSQL would require major rewrites and loss of Oracle-specific features, making them less cost-effective. Amazon RDS Custom for Oracle is specifically designed for BYOL scenarios that require deep customization and privileged access while still providing managed infrastructure, making it the most suitable and cost-effective solution.
Question 152
A company uses Amazon RDS for PostgreSQL databases for its data tier. The company must implement password rotation for the databases.
Which solution meets this requirement with the LEAST operational overhead?
A. Store the password in AWS Secrets Manager. Enable automatic rotation on the secret.
B. Store the password in AWS Systems Manager Parameter Store. Enable automatic rotation on the parameter.
C. Store the password in AWS Systems Manager Parameter Store. Write an AWS Lambda function that rotates the password.
D. Store the password in AWS Key Management Service (AWS KMS). Enable automatic rotation on the AWS KMS key.
Show Answer
Correct Answer: A
Explanation: AWS Secrets Manager provides native integration with Amazon RDS for PostgreSQL and supports built-in automatic secret rotation using managed Lambda functions. This satisfies password rotation with minimal operational overhead. Parameter Store does not have native rotation, and KMS key rotation does not rotate database passwords.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.