A company hosts an application on Amazon EC2 instances that run in a single Availability Zone. The application is accessible by using the transport layer of the Open Systems Interconnection (OSI) model. The company needs the application architecture to have high availability.
Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)
A. Configure new EC2 instances in a different Availability Zone. Use Amazon Route 53 to route traffic to all instances.
B. Configure a Network Load Balancer in front of the EC2 instances.
C. Configure a Network Load Balancer for TCP traffic to the instances. Configure an Application Load Balancer for HTTP and HTTPS traffic to the instances.
D. Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group to use multiple Availability Zones. Configure the Auto Scaling group to run application health checks on the instances.
E. Create an Amazon CloudWatch alarm. Configure the alarm to restart EC2 instances that transition to a stopped state.
Show Answer
Correct Answer: B, D
Explanation: The application uses the transport layer (Layer 4), so a Network Load Balancer is the appropriate load balancer for TCP/UDP traffic. To achieve high availability across Availability Zones, place the EC2 instances in an Auto Scaling group spanning multiple Availability Zones. The NLB distributes traffic to healthy instances, while the Auto Scaling group replaces unhealthy instances and maintains capacity across AZs. Route 53 alone does not provide the same instance-level load balancing, and using both an ALB and NLB is unnecessary and less cost-effective for a Layer 4 application.
Question 172
A company has two AWS accounts: Production and Development. The company needs to push code changes in the Development account to the Production account. In the alpha phase, only two senior developers on the development team need access to the Production account. In the beta phase, more developers will need access to perform testing.
Which solution will meet these requirements?
A. Create two policy documents by using the AWS Management Console in each account. Assign the policy to developers who need access.
B. Create an IAM role in the Development account. Grant the IAM role access to the Production account. Allow developers to assume the role.
C. Create an IAM role in the Production account. Define a trust policy that specifies the Development account. Allow developers to assume the role.
D. Create an IAM group in the Production account. Add the group as a principal in a trust policy that specifies the Production account. Add developers to the group.
Show Answer
Correct Answer: C
Explanation: For AWS cross-account access, the recommended pattern is to create an IAM role in the target (Production) account and configure its trust policy to trust the Development account. Developers in the Development account are granted permission to call sts:AssumeRole for that role. Initially, only the two senior developers receive AssumeRole permission; later, additional developers can be granted that permission without changing the Production role. Option B places the role in the wrong account, A does not establish cross-account access, and D is invalid because IAM groups cannot be principals in a role trust policy.
Question 173
A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled.
Which solution will meet these requirements?
B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.
C. Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
D. Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.
Show Answer
Correct Answer: B
Explanation: Amazon S3 Storage Lens provides organization-wide and cross-Region visibility into S3 buckets, including metrics for S3 Versioning. It includes versioning-related metrics that allow you to identify buckets without versioning enabled. IAM Access Analyzer for S3 analyzes access permissions, not versioning configuration, and S3 Multi-Region Access Points provide a global access endpoint rather than configuration reporting. CloudTrail logs API activity and is not the appropriate service for identifying non-versioned buckets.
Question 174
A company runs an application on several Amazon EC2 instances that store persistent data on an Amazon Elastic File System (Amazon EFS) file system. The company needs to replicate the data to another AWS Region by using an AWS managed service solution.
Which solution will meet these requirements MOST cost-effectively?
A. Use the EFS-to-EFS backup solution to replicate the data to an EFS file system in another Region.
B. Run a nightly script to copy data from the EFS file system to an Amazon S3 bucket. Enable S3 Cross-Region Replication on the S3 bucket.
C. Create a VPC in another Region. Establish a cross-Region VPC peer. Run a nightly rsync to copy data from the original Region to the new Region.
D. Use AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region. Assign the EFS file system resource to the backup plan.
Show Answer
Correct Answer: A
Explanation: Amazon EFS native replication is an AWS-managed capability that replicates an EFS file system to another AWS Region and is generally the most cost-effective option for continuous cross-Region replication. AWS Backup creates backup copies rather than continuous replication and typically incurs backup storage costs in addition to restore operations.
Question 175
A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) to run its self-managed database. The company has 350 TB of data spread across all EBS volumes. The company takes daily EBS snapshots and keeps the snapshots for 1 month. The daily change rate is 5% of the EBS volumes.
Because of new regulations, the company needs to keep the monthly snapshots for 7 years. The company needs to change its backup strategy to comply with the new regulations and to ensure that data is available with minimal administrative effort.
Which solution will meet these requirements MOST cost-effectively?
A. Keep the daily snapshot in the EBS snapshot standard tier for 1 month. Copy the monthly snapshot to Amazon S3 Glacier Deep Archive with a 7-year retention period.
B. Continue with the current EBS snapshot policy. Add a new policy to move the monthly snapshot to Amazon EBS Snapshots Archive with a 7-year retention period.
C. Keep the daily snapshot in the EBS snapshot standard tier for 1 month. Keep the monthly snapshot in the standard tier for 7 years. Use incremental snapshots.
D. Keep the daily snapshot in the EBS snapshot standard tier. Use EBS direct APIs to take snapshots of all the EBS volumes every month. Store the snapshots in an Amazon S3 bucket in the Infrequent Access tier for 7 years.
Show Answer
Correct Answer: B
Explanation: Amazon EBS Snapshots Archive is the AWS-native feature for long-term retention of EBS snapshots with lifecycle policies and minimal administrative effort. You cannot directly copy EBS snapshots into S3 Glacier Deep Archive as S3 objects. Keeping monthly snapshots in the EBS Snapshot Archive tier for 7 years satisfies the retention requirement while preserving snapshot semantics and automation.
Question 176
A company runs its applications on Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS). The EC2 instances run the most recent Amazon Linux release. The applications are experiencing availability issues when the company's employees store and retrieve files that are 25 GB or larger. The company needs a solution that does not require the company to transfer files between EC2 instances. The files must be available across many EC2 instances and across multiple Availability Zones.
Which solution will meet these requirements?
A. Migrate all the files to an Amazon S3 bucket. Instruct the employees to access the files from the S3 bucket.
B. Take a snapshot of the existing EBS volume. Mount the snapshot as an EBS volume across the EC2 instances. Instruct the employees to access the files from the EC2 instances.
C. Mount an Amazon Elastic File System (Amazon EFS) file system across all the EC2 instances. Instruct the employees to access the files from the EC2 instances.
D. Create an Amazon Machine Image (AMI) from the EC2 instances. Configure new EC2 instances from the AMI that use an instance store volume. Instruct the employees to access the files from the EC2 instances.
Show Answer
Correct Answer: C
Explanation: Amazon EFS provides a shared, POSIX-compliant network file system that can be mounted simultaneously by many EC2 instances across multiple Availability Zones. It is designed for shared file access without copying files between instances. S3 is object storage rather than a shared file system, EBS volumes cannot be mounted read-write across many instances/AZs, and instance store is ephemeral and not shared.
Question 177
A company is migrating a three-tier application to AWS. The application requires a MySQL database. In the past, the application users reported poor application performance when creating new entries. These performance issues were caused by users generating different real-time reports from the application during working hours.
Which solution will improve the performance of the application when it is moved to AWS?
A. Import the data into an Amazon DynamoDB table with provisioned capacity. Refactor the application to use DynamoDB for reports.
B. Create the database on a compute optimized Amazon EC2 instance. Ensure compute resources exceed the on-premises database.
C. Create an Amazon Aurora MySQL Multi-AZ DB cluster with multiple read replicas. Configure the application to use the reader endpoint for reports.
D. Create an Amazon Aurora MySQL Multi-AZ DB cluster. Configure the application to use the backup instance of the cluster as an endpoint for the reports.
Show Answer
Correct Answer: C
Explanation: The performance issue is caused by read-heavy real-time reporting competing with write operations. Amazon Aurora MySQL supports multiple read replicas and a reader endpoint that automatically load balances read traffic across replicas, offloading reporting queries from the writer instance and improving write performance. DynamoDB would require significant refactoring and is not appropriate for a straightforward MySQL migration. Simply using a larger EC2 instance does not address read/write contention. Aurora does not expose a 'backup instance' for reporting; backups are not query endpoints.
Question 178
A company's near-real-time streaming application is running on AWS. As the data is ingested, a job runs on the data and takes 30 minutes to complete. The workload frequently experiences high latency due to large amounts of incoming data. A solutions architect needs to design a scalable and serverless solution to enhance performance.
Which combination of steps should the solutions architect take? (Choose two.)
A. Use Amazon Kinesis Data Firehose to ingest the data.
B. Use AWS Lambda with AWS Step Functions to process the data.
C. Use AWS Database Migration Service (AWS DMS) to ingest the data.
D. Use Amazon EC2 instances in an Auto Scaling group to process the data.
E. Use AWS Fargate with Amazon Elastic Container Service (Amazon ECS) to process the data.
Show Answer
Correct Answer: A, E
Explanation: Use Amazon Kinesis Data Firehose for scalable serverless ingestion of streaming data. For processing, the job takes 30 minutes, which exceeds the 15-minute maximum execution time of AWS Lambda. AWS Fargate with Amazon ECS provides a serverless compute platform that can run long-lived containerized processing tasks and scale to handle increased throughput. EC2 Auto Scaling is scalable but not serverless, and AWS DMS is for database migration rather than streaming ingestion.
Question 179
A solutions architect is creating an application. The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC. The EC2 instances will frequently access large files that contain confidential information. These files are stored in Amazon S3 buckets for processing. The solutions architect must optimize the network architecture to minimize data transfer costs.
What should the solutions architect do to meet these requirements?
A. Create a gateway endpoint for Amazon S3 in the VPC. In the route tables for the private subnets, add an entry for the gateway endpoint.
B. Create a single NAT gateway in a public subnet. In the route tables for the private subnets, add a default route that points to the NAT gateway.
C. Create an AWS PrivateLink interface endpoint for Amazon S3 in the VPIn the route tables for the private subnets, add an entry for the interface endpoint.
D. Create one NAT gateway for each Availability Zone in public subnets. In each of the route tables for the private subnets, add a default route that points to the NAT gateway in the same Availability Zone.
Show Answer
Correct Answer: A
Explanation: A gateway VPC endpoint for Amazon S3 allows EC2 instances in private subnets to access S3 privately over the AWS network without using NAT gateways or the internet. Gateway endpoints for S3 avoid NAT data processing charges and minimize data transfer costs while keeping traffic private. Interface endpoints (PrivateLink) for S3 incur hourly and data processing charges and are not the cost-optimized choice for this scenario. NAT gateway options route traffic through NAT and add unnecessary cost.
Question 180
A company runs several Amazon RDS for Oracle On-Demand DB instances that have high utilization. The RDS DB instances run in member accounts that are in an organization in AWS Organizations.
The company's finance team has access to the organization's management account and member accounts. The finance team wants to find ways to optimize costs by using AWS Trusted Advisor.
Which combination of steps will meet these requirements? (Choose two.)
A. Use the Trusted Advisor recommendations in the management account.
B. Use the Trusted Advisor recommendations in the member accounts where the RDS DB instances are running.
C. Review the Trusted Advisor checks for Amazon RDS Reserved Instance Optimization.
D. Review the Trusted Advisor checks for Amazon RDS Idle DB Instances.
E. Review the Trusted Advisor checks for compute optimization. Crosscheck the results by using AWS Compute Optimizer.
Show Answer
Correct Answer: A, C
Explanation: For highly utilized Amazon RDS for Oracle On-Demand DB instances, the primary Trusted Advisor cost optimization check is Amazon RDS Reserved Instance Optimization, which recommends Reserved DB Instances when they would reduce On-Demand costs. AWS Trusted Advisor also supports an organizational view from the management account, allowing the finance team to review recommendations across member accounts when configured. Idle DB instance checks are not applicable because the instances are highly utilized, and compute optimization is not the relevant Trusted Advisor check for RDS.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.