A company runs multiple workloads on virtual machines (VMs) in an on-premises data center. The company is expanding rapidly. The on-premises data center is not able to scale fast enough to meet business needs. The company wants to migrate the workloads to AWS.
The migration is time sensitive. The company wants to use a lift-and-shift strategy for non-critical workloads.
Which combination of steps will meet these requirements? (Choose three.)
A. Use the AWS Schema Conversion Tool (AWS SCT) to collect data about the VMs.
B. Use AWS Application Migration Service. Install the AWS Replication Agent on the VMs.
C. Complete the initial replication of the VMs. Launch test instances to perform acceptance tests on the VMs.
D. Stop all operations on the VMs. Launch a cutover instance.
E. Use AWS App2Container (A2C) to collect data about the VMs.
F. Use AWS Database Migration Service (AWS DMS) to migrate the VMs.
Show Answer
Correct Answer: B, C, D
Explanation: A lift-and-shift migration of on-premises VMs to AWS is best handled by AWS Application Migration Service, which replicates entire VMs with minimal changes. After installing the replication agent, the correct process is to complete initial replication and launch test instances to validate functionality, then perform a cutover by stopping source VMs and launching cutover instances in AWS. The other options relate to database schema conversion, database-only migration, or containerization, which do not meet the VM lift-and-shift requirement.
Question 12
A company runs an environment where data is stored in an Amazon S3 bucket. The objects are accessed frequently throughout the day. The company has strict da ta encryption requirements for data that is stored in the S3 bucket. The company currently uses AWS Key Management Service (AWS KMS) for encryption.
The company wants to optimize costs associated with encrypting S3 objects without making additional calls to AWS KMS.
Which solution will meet these requirements?
A. Use server-side encryption with Amazon S3 managed keys (SSE-S3).
B. Use an S3 Bucket Key for server-side encryption with AWS KMS keys (SSE-KMS) on the new objects.
C. Use client-side encryption with AWS KMS customer managed keys.
D. Use server-side encryption with customer-provided keys (SSE-C) stored in AWS KMS.
Show Answer
Correct Answer: B
Explanation: The company already uses AWS KMS and wants to reduce encryption costs without making additional KMS calls. S3 Bucket Keys with SSE-KMS generate and cache a bucket-level data key, significantly reducing the number of direct AWS KMS requests for frequently accessed objects while still meeting strict KMS-based encryption requirements. Other options either change the encryption model (SSE-S3, client-side, SSE-C) or do not meet the stated constraints.
Question 13
A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance. The analytics application is highly resilient and is designed to run in stateless mode.
The company notices that the application is showing signs of performance degradation during busy times and is presenting 5xx errors. The company needs to make the application scale seamlessly.
Which solution will meet these requirements MOST cost-effectively?
A. Create an Amazon Machine Image (AMI) of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use an Application Load Balancer to distribute the load across the two EC2 instances.
B. Create an Amazon Machine Image (AMI) of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use Amazon Route 53 weighted routing to distribute the load across the two EC2 instances.
C. Create an AWS Lambda function to stop the EC2 instance and change the instance type. Create an Amazon CloudWatch alarm to invoke the Lambda function when CPU utilization is more than 75%.
D. Create an Amazon Machine Image (AMI) of the web application. Apply the AMI to a launch template. Create an Auto Scaling group that includes the launch template. Configure the launch template to use a Spot Fleet. Attach an Application Load Balancer to the Auto Scaling group.
Show Answer
Correct Answer: D
Explanation: The application is stateless and needs seamless, automatic scaling during peak demand at the lowest cost. An Auto Scaling group with an Application Load Balancer provides horizontal scaling and health-based traffic distribution. Using Spot capacity is the most cost‑effective option, and the stateless, resilient design tolerates instance interruptions. Other options either do not scale automatically (A, B) or cause downtime and do not provide true scaling (C).
Question 14
A company uses AWS Systems Manager for routine management and patching of Amazon EC2 instances. The EC2 instances are in an IP address type target group behind an Application Load Balancer (ALB).
New security protocols require the company to remove EC2 instances from service during a patch. When the company attempts to follow the security protocol during the next patch, the company receives errors during the patching window.
Which combination of solutions will resolve the errors? (Choose two.)
A. Change the target type of the target group from IP address type to instance type.
B. Continue to use the existing Systems Manager document without changes because it is already optimized to handle instances that are in an IP address type target group behind an AL
C. Implement the AWSEC2-PatchLoadBalanacerInstance Systems Manager Automation document to manage the patching process.
D. Use Systems Manager Maintenance Windows to automatically remove the instances from service to patch the instances.
E. Configure Systems Manager State Manager to remove the instances from service and manage the patching schedule. Use ALB health checks to re-route traffic.
Show Answer
Correct Answer: C, D
Explanation: The patching errors occur because instances continue to serve traffic while Systems Manager applies patches. The AWSEC2-PatchLoadBalancerInstance Automation document safely deregisters instances from the ALB target group before patching and re-registers them afterward, preventing traffic during the patch. Using Systems Manager Maintenance Windows schedules this process and coordinates removal from service during the patching window. Changing target group type or using State Manager alone is unnecessary and does not properly handle load balancer deregistration.
Question 15
A company tracks customer satisfaction by using surveys that the company hosts on its website. The surveys sometimes reach thousands of customers every hour. Survey results are currently sent in email messages to the company so company employees can manually review results and assess customer sentiment.
The company wants to automate the customer survey process. Survey results must be available for the previous 12 months.
Which solution will meet these requirements in the MOST scalable way?
A. Send the survey results data to an Amazon API Gateway endpoint that is connected to an Amazon Simple Queue Service (Amazon SQS) queue. Create an AWS Lambda function to poll the SQS queue, call Amazon Comprehend for sentiment analysis, and save the results to an Amazon DynamoDB table. Set the TTL for all records to 365 days in the future.
B. Send the survey results data to an API that is running on an Amazon EC2 instance. Configure the API to store the survey results as a new record in an Amazon DynamoDB table, call Amazon Comprehend for sentiment analysis, and save the results in a second DynamoDB table. Set the TTL for all records to 365 days in the future.
C. Write the survey results data to an Amazon S3 bucket. Use S3 Event Notifications to invoke an AWS Lambda function to read the data and call Amazon Rekognition for sentiment analysis. Store the sentiment analysis results in a second S3 bucket. Use S3 lifecycle policies on each bucket to expire objects after 365 days.
D. Send the survey results data to an Amazon API Gateway endpoint that is connected to an Amazon Simple Queue Service (Amazon SQS) queue. Configure the SQS queue to invoke an AWS Lambda function that calls Amazon Lex for sentiment analysis and saves the results to an Amazon DynamoDB table. Set the TTL for all records to 365 days in the future.
Show Answer
Correct Answer: A
Explanation: Option A uses a fully serverless, event-driven architecture that scales automatically to handle thousands of survey submissions per hour. API Gateway and SQS decouple ingestion from processing, Lambda scales transparently, and Amazon Comprehend is the correct managed service for sentiment analysis. DynamoDB provides highly scalable storage, and TTL cleanly enforces the 12‑month retention requirement. Other options are less scalable (EC2), use the wrong service for sentiment analysis (Rekognition or Lex), or lack proper decoupling.
Question 16
A company hosts its enterprise resource planning (ERP) system in the us-east-1 Region. The system runs on Amazon EC2 instances. Customers use a public API that is hosted on the EC2 instances to exchange information with the ERP system. International customers report slow API response times from their data centers.
Which solution will improve response times for the international customers MOST cost-effectively?
A. Create an AWS Direct Connect connection that has a public virtual interface (VIF) to provide connectivity from each customer's data center to us-east-1. Route customer API requests by using a Direct Connect gateway to the ERP system API.
B. Set up an Amazon CloudFront distribution in front of the API. Configure the CachingOptimized managed cache policy to provide improved cache efficiency.
C. Set up AWS Global Accelerator. Configure listeners for the necessary ports. Configure endpoint groups for the appropriate Regions to distribute traffic. Create an endpoint in the group for the API.
D. Use AWS Site-to-Site VPN to establish dedicated VPN tunnels between Regions and customer networks. Route traffic to the API over the VPN connections.
Show Answer
Correct Answer: C
Explanation: The API is public, used by many international customers, and runs in a single Region (us-east-1). AWS Global Accelerator improves latency by routing traffic onto the AWS global network at the nearest edge location and carrying it over optimized paths to the Regional endpoint, without relying on caching. This is well suited for dynamic, non-cacheable API traffic and requires no per-customer setup. CloudFront can help with dynamic content, but its biggest benefit is caching, which is likely limited for ERP APIs that perform updates. Direct Connect and Site-to-Site VPN are not scalable or cost-effective for a public API used by many customers.
Question 17
A company runs its media rendering application on premises. The company wants to reduce storage costs and has moved all data to Amazon S3. The on-premises rendering application needs low-latency access to storage.
The company needs to design a storage solution for the application. The storage solution must maintain the desired application performance.
Which storage solution will meet these requirements in the MOST cost-effective way?
A. Use Mountpoint for Amazon S3 to access the data in Amazon S3 for the on-premises application.
B. Configure an Amazon S3 File Gateway to provide storage for the on-premises application.
C. Copy the data from Amazon S3 to Amazon FSx for Windows File Server. Configure an Amazon FSx File Gateway to provide storage for the on-premises application.
D. Configure an on-premises file server. Use the Amazon S3 API to connect to S3 storage. Configure the application to access the storage from the on-premises file server.
Show Answer
Correct Answer: B
Explanation: The on-premises application requires low-latency access while keeping data in Amazon S3 to reduce storage costs. Amazon S3 File Gateway provides a file-based (NFS/SMB) interface with a local cache on premises, delivering low-latency access to frequently used data while storing the authoritative copy in low-cost S3. Other options either do not provide on-premises low-latency access (Mountpoint), add unnecessary cost and complexity (FSx), or lack effective caching and increase latency (direct S3 API access).
Question 18
An online gaming company is transitioning user data storage to Amazon DynamoDB to support the company's growing user base. The current architecture includes DynamoDB tables that contain user profiles, achievements, and in-game transactions.
The company needs to design a robust, continuously available, and resilient DynamoDB architecture to maintain a seamless gaming experience for users.
Which solution will meet these requirements MOST cost-effectively?
A. Create DynamoDB tables in a single AWS Region. Use on-demand capacity mode. Use global tables to replicate data across multiple Regions.
B. Use DynamoDB Accelerator (DAX) to cache frequently accessed data. Deploy tables in a single AWS Region and enable auto scaling. Configure Cross-Region Replication manually to additional Regions.
C. Create DynamoDB tables in multiple AWS Regions. Use on-demand capacity mode. Use DynamoDB Streams for Cross-Region Replication between Regions.
D. Use DynamoDB global tables for automatic multi-Region replication. Deploy tables in multiple AWS Regions. Use provisioned capacity mode. Enable auto scaling.
Show Answer
Correct Answer: D
Explanation: The requirements are robustness, continuous availability, resilience, and most cost-effective operation at scale. DynamoDB global tables provide built-in, fully managed, multi-Region active-active replication with automatic conflict resolution, which directly satisfies high availability and resilience without custom replication logic. Using provisioned capacity with auto scaling is typically more cost-effective than on-demand for a growing but manageable workload because capacity scales with demand while avoiding the higher per-request cost of on-demand mode. Options C and B require custom replication or add complexity and risk, and option A is contradictory and relies on on-demand capacity, which is generally more expensive at scale. Therefore, D best meets all requirements most cost-effectively.
Question 19
A company operates a food delivery service. Because of recent growth, the company's order processing system is experiencing scaling problems during peak traffic hours. The current architecture includes Amazon EC2 instances in an Auto Scaling group that collect orders from an application. A second group of EC2 instances in an Auto Scaling group fulfills the orders.
The order collection process occurs quickly, but the order fulfillment process can take longer. Data must not be lost because of a scaling event.
A solutions architect must ensure that the order collection process and the order fulfillment process can both scale adequately during peak traffic hours.
Which solution will meet these requirements?
A. Use Amazon CloudWatch to monitor the CPUUtilization metric for each instance in both Auto Scaling groups. Configure each Auto Scaling group's minimum capacity to meet its peak workload value.
B. Use Amazon CloudWatch to monitor the CPUUtilization metric for each instance in both Auto Scaling groups. Configure a CloudWatch alarm to invoke an Amazon Simple Notification Service (Amazon SNS) topic to create additional Auto Scaling groups on demand.
C. Provision two Amazon Simple Queue Service (Amazon SQS) queues. Use one SQS queue for order collection. Use the second SQS queue for order fulfillment. Configure the EC2 instances to poll their respective queues. Scale the Auto Scaling groups based on notifications that the queues send.
D. Provision two Amazon Simple Queue Service (Amazon SQS) queues. Use one SQS queue for order collection. Use the second SQS queue for order fulfillment. Configure the EC2 instances to poll their respective queues. Scale the Auto Scaling groups based on the number of messages in each queue.
Show Answer
Correct Answer: D
Explanation: Decoupling order collection from order fulfillment with Amazon SQS ensures orders are not lost during scaling events and allows each stage to scale independently. Using queue depth (number of messages) as the scaling metric is the recommended pattern, because it directly reflects backlog and processing demand, unlike CPU-based scaling. Separate queues for collection and fulfillment handle differing processing times and peak traffic effectively.
Question 20
A company runs its legacy web application on AWS. The web application server runs on an Amazon EC2 instance in the public subnet of a VPC. The web application server collects images from customers and stores the image files in a locally attached Amazon Elastic Block Store (Amazon EBS) volume. The image files are uploaded every night to an Amazon S3 bucket for backup.
A solutions architect discovers that the image files are being uploaded to Amazon S3 through the public endpoint. The solutions architect needs to ensure that traffic to Amazon S3 does not use the public endpoint.
Which solution will meet these requirements?
A. Create a gateway VPC endpoint for the S3 bucket that has the necessary permissions for the VPC. Configure the subnet route table to use the gateway VPC endpoint.
B. Move the S3 bucket inside the VPC. Configure the subnet route table to access the S3 bucket through private IP addresses.
C. Create an Amazon S3 access point for the Amazon EC2 instance inside the VPConfigure the web application to upload by using the Amazon S3 access point.
D. Configure an AWS Direct Connect connection between the VPC that has the Amazon EC2 instance and Amazon S3 to provide a dedicated network path.
Show Answer
Correct Answer: A
Explanation: To prevent traffic from using the public S3 endpoint, the EC2 instance must access S3 over the AWS private network. A gateway VPC endpoint for Amazon S3 provides private connectivity between the VPC and S3 without using an internet gateway, NAT gateway, or public IPs. Updating the subnet route table to use the gateway endpoint ensures S3 traffic stays private. S3 cannot be placed inside a VPC (B), S3 access points manage access but do not by themselves make traffic private without a VPC endpoint (C), and Direct Connect is intended for on‑premises connectivity and is unnecessary and overly complex here (D).
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.