A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled.
Which solution will meet these requirements?
B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.
C. Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
D. Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.
Show Answer
Correct Answer: B
Explanation: Amazon S3 Storage Lens provides organization-wide, cross-Region visibility into S3 bucket configurations and metrics, including versioning status. It includes built-in metrics such as the versioning-enabled bucket count, which allows identification of buckets that do not have versioning enabled. The other options do not analyze or report on bucket versioning configurations.
Question 174
A company runs an application on several Amazon EC2 instances that store persistent data on an Amazon Elastic File System (Amazon EFS) file system. The company needs to replicate the data to another AWS Region by using an AWS managed service solution.
Which solution will meet these requirements MOST cost-effectively?
A. Use the EFS-to-EFS backup solution to replicate the data to an EFS file system in another Region.
B. Run a nightly script to copy data from the EFS file system to an Amazon S3 bucket. Enable S3 Cross-Region Replication on the S3 bucket.
C. Create a VPC in another Region. Establish a cross-Region VPC peer. Run a nightly rsync to copy data from the original Region to the new Region.
D. Use AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region. Assign the EFS file system resource to the backup plan.
Show Answer
Correct Answer: D
Explanation: The requirement is to replicate Amazon EFS data to another Region using an AWS managed service and do so most cost‑effectively. AWS Backup is a fully managed, policy-based AWS service that natively supports Amazon EFS and cross‑Region backup copy. It requires no custom scripts, infrastructure, or ongoing operational effort, unlike rsync or S3-based approaches. EFS-to-EFS replication (Option A) is a valid technical solution but is not framed as a backup service and is typically more expensive for simple disaster recovery needs. Therefore, using AWS Backup with cross‑Region copy best satisfies the managed service and cost‑effectiveness requirements.
Question 175
A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) to run its self-managed database. The company has 350 TB of data spread across all EBS volumes. The company takes daily EBS snapshots and keeps the snapshots for 1 month. The daily change rate is 5% of the EBS volumes.
Because of new regulations, the company needs to keep the monthly snapshots for 7 years. The company needs to change its backup strategy to comply with the new regulations and to ensure that data is available with minimal administrative effort.
Which solution will meet these requirements MOST cost-effectively?
A. Keep the daily snapshot in the EBS snapshot standard tier for 1 month. Copy the monthly snapshot to Amazon S3 Glacier Deep Archive with a 7-year retention period.
B. Continue with the current EBS snapshot policy. Add a new policy to move the monthly snapshot to Amazon EBS Snapshots Archive with a 7-year retention period.
C. Keep the daily snapshot in the EBS snapshot standard tier for 1 month. Keep the monthly snapshot in the standard tier for 7 years. Use incremental snapshots.
D. Keep the daily snapshot in the EBS snapshot standard tier. Use EBS direct APIs to take snapshots of all the EBS volumes every month. Store the snapshots in an Amazon S3 bucket in the Infrequent Access tier for 7 years.
Show Answer
Correct Answer: B
Explanation: The requirement is long-term (7-year) retention of monthly backups with minimal administrative effort and high cost efficiency. Amazon EBS Snapshots Archive is purpose-built for this use case: it integrates directly with existing EBS snapshot policies, requires no custom data movement, and significantly reduces storage costs compared to the standard snapshot tier. Options involving Amazon S3 Glacier Deep Archive are not operationally valid or simple because EBS snapshots cannot be directly copied to S3/Glacier and would require complex, manual data handling. Therefore, moving monthly snapshots to EBS Snapshots Archive for 7 years is the most cost-effective and operationally minimal solution.
Question 176
A company runs its applications on Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS). The EC2 instances run the most recent Amazon Linux release. The applications are experiencing availability issues when the company's employees store and retrieve files that are 25 GB or larger. The company needs a solution that does not require the company to transfer files between EC2 instances. The files must be available across many EC2 instances and across multiple Availability Zones.
Which solution will meet these requirements?
A. Migrate all the files to an Amazon S3 bucket. Instruct the employees to access the files from the S3 bucket.
B. Take a snapshot of the existing EBS volume. Mount the snapshot as an EBS volume across the EC2 instances. Instruct the employees to access the files from the EC2 instances.
C. Mount an Amazon Elastic File System (Amazon EFS) file system across all the EC2 instances. Instruct the employees to access the files from the EC2 instances.
D. Create an Amazon Machine Image (AMI) from the EC2 instances. Configure new EC2 instances from the AMI that use an instance store volume. Instruct the employees to access the files from the EC2 instances.
Show Answer
Correct Answer: C
Explanation: The requirement is a shared file system that can be mounted by many EC2 instances simultaneously and remain available across multiple Availability Zones without copying files between instances. Amazon EFS is a fully managed, POSIX-compliant network file system designed for this exact use case. It supports large files, concurrent access from many EC2 instances, and is inherently multi-AZ. Amazon S3 is object storage, not a shared mounted file system; EBS volumes cannot be mounted across multiple instances or AZs; and instance store volumes are not shared or durable.
Question 177
A company is migrating a three-tier application to AWS. The application requires a MySQL database. In the past, the application users reported poor application performance when creating new entries. These performance issues were caused by users generating different real-time reports from the application during working hours.
Which solution will improve the performance of the application when it is moved to AWS?
A. Import the data into an Amazon DynamoDB table with provisioned capacity. Refactor the application to use DynamoDB for reports.
B. Create the database on a compute optimized Amazon EC2 instance. Ensure compute resources exceed the on-premises database.
C. Create an Amazon Aurora MySQL Multi-AZ DB cluster with multiple read replicas. Configure the application to use the reader endpoint for reports.
D. Create an Amazon Aurora MySQL Multi-AZ DB cluster. Configure the application to use the backup instance of the cluster as an endpoint for the reports.
Show Answer
Correct Answer: C
Explanation: The performance issue is caused by heavy read activity from real-time reporting. Amazon Aurora MySQL supports multiple read replicas that can offload read traffic from the writer instance. Using the reader endpoint allows reports to scale across replicas, improving read performance without impacting writes. Options A and B do not directly address read scaling for MySQL, and option D is invalid because backups are not queryable endpoints.
Question 178
A company's near-real-time streaming application is running on AWS. As the data is ingested, a job runs on the data and takes 30 minutes to complete. The workload frequently experiences high latency due to large amounts of incoming data. A solutions architect needs to design a scalable and serverless solution to enhance performance.
Which combination of steps should the solutions architect take? (Choose two.)
A. Use Amazon Kinesis Data Firehose to ingest the data.
B. Use AWS Lambda with AWS Step Functions to process the data.
C. Use AWS Database Migration Service (AWS DMS) to ingest the data.
D. Use Amazon EC2 instances in an Auto Scaling group to process the data.
E. Use AWS Fargate with Amazon Elastic Container Service (Amazon ECS) to process the data.
Show Answer
Correct Answer: A, E
Explanation: The application needs a scalable, serverless approach to handle near-real-time streaming with bursts of data and a processing job that runs about 30 minutes. Amazon Kinesis Data Firehose is a fully managed, serverless service designed for scalable ingestion of streaming data, addressing the ingestion and latency challenges. For processing, AWS Lambda is unsuitable because of its 15-minute maximum execution time, even when orchestrated with Step Functions. AWS Fargate with Amazon ECS provides serverless container-based compute that can run long-running jobs, automatically scale with load, and eliminate server management, making it the best fit.
Question 179
A solutions architect is creating an application. The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC. The EC2 instances will frequently access large files that contain confidential information. These files are stored in Amazon S3 buckets for processing. The solutions architect must optimize the network architecture to minimize data transfer costs.
What should the solutions architect do to meet these requirements?
A. Create a gateway endpoint for Amazon S3 in the VPC. In the route tables for the private subnets, add an entry for the gateway endpoint.
B. Create a single NAT gateway in a public subnet. In the route tables for the private subnets, add a default route that points to the NAT gateway.
C. Create an AWS PrivateLink interface endpoint for Amazon S3 in the VPIn the route tables for the private subnets, add an entry for the interface endpoint.
D. Create one NAT gateway for each Availability Zone in public subnets. In each of the route tables for the private subnets, add a default route that points to the NAT gateway in the same Availability Zone.
Show Answer
Correct Answer: A
Explanation: A gateway VPC endpoint for Amazon S3 allows EC2 instances in private subnets to access S3 over the AWS private network without using NAT gateways or the public internet. This eliminates NAT data processing charges and minimizes data transfer costs while keeping confidential data private. NAT gateways (options B and D) incur additional costs, and S3 does not require an interface endpoint via PrivateLink for this use case.
Question 180
A company runs several Amazon RDS for Oracle On-Demand DB instances that have high utilization. The RDS DB instances run in member accounts that are in an organization in AWS Organizations.
The company's finance team has access to the organization's management account and member accounts. The finance team wants to find ways to optimize costs by using AWS Trusted Advisor.
Which combination of steps will meet these requirements? (Choose two.)
A. Use the Trusted Advisor recommendations in the management account.
B. Use the Trusted Advisor recommendations in the member accounts where the RDS DB instances are running.
C. Review the Trusted Advisor checks for Amazon RDS Reserved Instance Optimization.
D. Review the Trusted Advisor checks for Amazon RDS Idle DB Instances.
E. Review the Trusted Advisor checks for compute optimization. Crosscheck the results by using AWS Compute Optimizer.
Show Answer
Correct Answer: A, C
Explanation: The DB instances are highly utilized and running On-Demand, so the main cost optimization opportunity is evaluating Reserved Instances for RDS, which is covered by the Amazon RDS Reserved Instance Optimization check. Idle DB instance checks are not relevant because utilization is high, and compute optimization/Compute Optimizer focuses primarily on EC2, not RDS for Oracle. Because the finance team has access to the management account, they can use Trusted Advisor’s organizational view from the management account to review recommendations across member accounts, making it unnecessary to log into each member account individually.
Question 181
A company plans to run a high performance computing (HPC) workload on Amazon EC2 Instances. The workload requires low-latency network performance and high network throughput with tightly coupled node-to-node communication.
Which solution will meet these requirements?
A. Configure the EC2 instances to be part of a cluster placement group.
B. Launch the EC2 instances with Dedicated Instance tenancy.
C. Launch the EC2 instances as Spot Instances.
D. Configure an On-Demand Capacity Reservation when the EC2 instances are launched.
Show Answer
Correct Answer: A
Explanation: High performance computing workloads with tightly coupled, node-to-node communication require very low latency and high network throughput. A cluster placement group places EC2 instances physically close together within the same Availability Zone, enabling low-latency, high-bandwidth networking (often with enhanced networking and EFA). The other options affect pricing, tenancy, or capacity availability, but do not optimize network latency or throughput.
Question 182
A company wants to configure its Amazon CloudFront distribution to use SSL/TLS certificates. The company does not want to use the default domain name for the distribution. Instead, the company wants to use a different domain name for the distribution.
Which solution will deploy the certificate without incurring any additional costs?
A. Request an Amazon issued private certificate from AWS Certificate Manager (ACM) in the us-east-1 Region.
B. Request an Amazon issued private certificate from AWS Certificate Manager (ACM) in the us-west-1 Region.
C. Request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region.
D. Request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-west-1 Region.
Show Answer
Correct Answer: C
Explanation: For a CloudFront distribution using a custom domain name, the SSL/TLS certificate must be a public certificate issued by AWS Certificate Manager in the us-east-1 (N. Virginia) Region. ACM public certificates are free, while private certificates incur costs, and CloudFront cannot use ACM certificates from other regions.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.