A company's image-hosting website gives users around the world the ability to up load, view, and download images from their mobile devices. The company currently hosts the static website in an Amazon S3 bucket.
Because of the website's growing popularity, the website's performance has decreased. Users have reported latency issues when they upload and download images.
The company must improve the performance of the website.
Which solution will meet these requirements with the LEAST implementation effort?
A. Configure an Amazon CloudFront distribution for the S3 bucket to improve the download performance. Enable S3 Transfer Acceleration to improve the upload performance.
B. Configure Amazon EC2 instances of the right sizes in multiple AWS Regions. Migrate the application to the EC2 instances. Use an Application Load Balancer to distribute the website traffic equally among the EC2 instances. Configure AWS Global Accelerator to address global demand with low latency.
C. Configure an Amazon CloudFront distribution that uses the S3 bucket as an origin to improve the download performance. Configure the application to use CloudFront to upload images to improve the upload performance. Create S3 buckets in multiple AWS Regions. Configure replication rules for the buckets to replicate users' data based on the users' location. Redirect downloads to the S3 bucket that is closest to each user's location.
D. Configure AWS Global Accelerator for the S3 bucket to improve network performance. Create an endpoint for the application to use Global Accelerator instead of the S3 bucket.
Show Answer
Correct Answer: A
Explanation: Amazon CloudFront in front of the S3 bucket caches and serves downloads from edge locations, reducing global download latency. Amazon S3 Transfer Acceleration accelerates uploads by routing data through the nearest AWS edge location to the destination S3 bucket. This directly addresses both download and upload performance with minimal architectural changes. The other options require substantially more infrastructure or use services that do not support S3 as described.
Question 6
A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3. The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard. The solution must not affect the speed of EC2 instance launches.
How should the company move the data to Amazon S3 to meet these requirements?
A. Use an Amazon CloudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.
B. Launch an Amazon EMR cluster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.
C. Create an Amazon EventBridge rule to invoke an AWS Lambda function on a schedule. Configure the Lambda function to send the EC2 Auto Scaling status data directly to Amazon S3.
D. Use a bootstrap script during the launch of an EC2 instance to install Amazon Kinesis Agent. Configure Kinesis Agent to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.
Show Answer
Correct Answer: A
Explanation: CloudWatch metric streams provide near-real-time streaming of CloudWatch metrics to Amazon Kinesis Data Firehose, which can deliver the data to Amazon S3 in a fully serverless manner. This does not add work to EC2 instance launches. EMR is unnecessary and not serverless for this use case. A scheduled Lambda polls rather than reacts to events, so it is not ideal for near-real-time event reporting. Installing Kinesis Agent via bootstrap adds overhead to instance launches and violates the requirement to avoid affecting launch speed.
Question 7
A digital image processing company wants to migrate its on-premises monolithic application to the AWS Cloud. The company processes thousands of images and generates large files as part of the processing workflow.
The company needs a solution to manage the growing number of image processing jobs. The solution must also reduce the manual tasks in the image processing workflow. The company does not want to manage the underlying infrastructure of the solution.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 Spot Instances to process the images. Configure Amazon Simple Queue Service (Amazon SQS) to orchestrate the workflow. Store the processed files in Amazon Elastic File System (Amazon EFS).
B. Use AWS Batch jobs to process the images. Use AWS Step Functions to orchestrate the workflow. Store the processed files in an Amazon S3 bucket.
C. Use AWS Lambda functions and Amazon EC2 Spot Instances to process the images. Store the processed files in Amazon FSx.
D. Deploy a group of Amazon EC2 instances to process the images. Use AWS Step Functions to orchestrate the workflow. Store the processed files in an Amazon Elastic Block Store (Amazon EBS) volume.
Show Answer
Correct Answer: B
Explanation: AWS Batch is a fully managed service designed for batch processing workloads such as large-scale image processing. It automatically provisions and scales compute resources, minimizing infrastructure management. AWS Step Functions provides serverless workflow orchestration, reducing manual workflow tasks. Amazon S3 is the appropriate durable, scalable storage service for large generated files. The other options require direct management of EC2 instances or container infrastructure, resulting in higher operational overhead.
Question 7
A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time.
The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy.
Which solution meets these requirements?
A. Amazon Elastic File System (Amazon EFS)
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon S3 Glacier Deep Archive
D. AWS Backup
Show Answer
Correct Answer: A
Explanation: Amazon Elastic File System (EFS) is a managed, scalable network file system that can be mounted concurrently by multiple Amazon EC2 instances. It automatically scales as files grow and provides built-in redundancy and high availability. Amazon EBS is block storage intended for individual instance attachment (with limited exceptions not appropriate here), S3 Glacier Deep Archive is for archival storage rather than active shared file access, and AWS Backup is a backup service rather than primary shared storage.
Question 8
A company's production environment consists of Amazon EC2 On-Demand Instances that run constantly between Monday and Saturday. The instances must run for only 12 hours on Sunday and cannot tolerate interruptions. The company wants to cost-optimize the production environment.
Which solution will meet these requirements MOST cost-effectively?
A. Purchase Scheduled Reserved Instances for the EC2 instances that run for only 12 hours on Sunday. Purchase Standard Reserved Instances for the EC2 instances that run constantly between Monday and Saturday.
B. Purchase Convertible Reserved Instances for the EC2 instances that run for only 12 hours on Sunday. Purchase Standard Reserved Instances for the EC2 instances that run constantly between Monday and Saturday.
C. Use Spot Instances for the EC2 instances that run for only 12 hours on Sunday. Purchase Standard Reserved Instances for the EC2 instances that run constantly between Monday and Saturday.
D. Use Spot Instances for the EC2 instances that run for only 12 hours on Sunday. Purchase Convertible Reserved Instances for the EC2 instances that run constantly between Monday and Saturday.
Show Answer
Correct Answer: A
Explanation: Spot Instances are not suitable because the workload cannot tolerate interruptions. For the continuously running workload from Monday through Saturday, Standard Reserved Instances provide the highest discount for steady-state usage. For the predictable recurring 12-hour Sunday workload, Scheduled Reserved Instances (a legacy RI offering commonly referenced in older AWS exam questions) are designed for recurring schedules and are more cost-effective than Convertible Reserved Instances, which trade savings for flexibility.
Question 8
A company uses 50 TB of data for reporting. The company wants to move this data from on premises to AWS. A custom application in the company’s data center runs a weekly data transformation job. The company plans to pause the application until the data transfer is complete and needs to begin the transfer process as soon as possible.
The data center does not have any available network bandwidth for additional workloads. A solutions architect must transfer the data and must configure the transformation job to continue to run in the AWS Cloud.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS DataSync to move the data. Create a custom transformation job by using AWS Glue.
B. Order an AWS Snowcone device to move the data. Deploy the transformation application to the device.
C. Order an AWS Snowball Edge Storage Optimized device. Copy the data to the device. Create a custom transformation job by using AWS Glue.
D. Order an AWS Snowball Edge Storage Optimized device that includes Amazon EC2 compute. Copy the data to the device. Create a new EC2 instance on AWS to run the transformation application.
Show Answer
Correct Answer: D
Explanation: The company has no spare network bandwidth, so an offline Snow Family device is required rather than DataSync. Snowcone is too small for 50 TB. Because the transformation is already implemented as a custom application, the requirement is to continue running that application in AWS, not to rewrite it in AWS Glue. Using a Snowball Edge Storage Optimized device with EC2 compute for transfer and then running the existing application on an Amazon EC2 instance in AWS satisfies the requirements with minimal ongoing operational change.
Sources:
https://docs.aws.amazon.com/pdfs/whitepapers/latest/overview-aws-cloud-data-migration-services/overview-aws-cloud-data-migration-services.pdf
https://aws.amazon.com/blogs/storage/migrating-and-managing-large-datasets-on-amazon-s3
Question 9
A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis.
Which solution will meet these requirements with the LEAST operational overhead?
A. Store the database credentials in the instance metadata. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and instance metadata at the same time.
B. Store the database credentials in a configuration file in an encrypted Amazon S3 bucket. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and the credentials in the configuration file at the same time. Use S3 Versioning to ensure the ability to fall back to previous values.
C. Store the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation for the secret. Attach the required permission to the EC2 role to grant access to the secret.
D. Store the database credentials as encrypted parameters in AWS Systems Manager Parameter Store. Turn on automatic rotation for the encrypted parameters. Attach the required permission to the EC2 role to grant access to the encrypted parameters.
Show Answer
Correct Answer: C
Explanation: AWS Secrets Manager is purpose-built for storing and managing secrets such as database credentials. It provides built-in automatic rotation for supported databases (including Amazon RDS) and integrates with IAM so the EC2 instance role can securely retrieve the secret without hardcoding credentials. The other options require custom rotation logic or use services that do not provide native automatic secret rotation.
Question 9
A company has a three-tier web application that processes orders from customers. The web tier consists of Amazon EC2 instances behind an Application Load Balancer. The processing tier consists of EC2 instances. The company decoupled the web tier and processing tier by using Amazon Simple Queue Service (Amazon SQS). The storage layer uses Amazon DynamoDB.
At peak times, some users report order processing delays and halls. The company has noticed that during these delays, the EC2 instances are running at 100% CPU usage, and the SQS queue fills up. The peak times are variable and unpredictable.
The company needs to improve the performance of the application.
Which solution will meet these requirements?
A. Use scheduled scaling for Amazon EC2 Auto Scaling to scale out the processing tier instances for the duration of peak usage times. Use the CPU Utilization metric to determine when to scale.
B. Use Amazon ElastiCache for Redis in front of the DynamoDB backend tier. Use target utilization as a metric to determine when to scale.
C. Add an Amazon CloudFront distribution to cache the responses for the web tier. Use HTTP latency as a metric to determine when to scale.
D. Use an Amazon EC2 Auto Scaling target tracking policy to scale out the processing tier instances. Use the ApproximateNumberOfMessages attribute to determine when to scale.
Show Answer
Correct Answer: D
Explanation: The bottleneck is the processing tier: the processing EC2 instances reach 100% CPU utilization while the Amazon SQS queue backlog grows. Because traffic peaks are variable and unpredictable, scheduled scaling is inappropriate. Scaling based on queue depth (such as ApproximateNumberOfMessages) allows the processing tier to add capacity when backlog increases and remove capacity when it drains. ElastiCache or CloudFront do not address the processing-tier bottleneck described.
Question 10
A company hosts an application in a private subnet. The company has already integrated the application with Amazon Cognito. The company uses an Amazon Cognito user pool to authenticate users.
The company needs to modify the application so the application can securely store user documents in an Amazon S3 bucket.
Which combination of steps will securely integrate Amazon S3 with the application? (Choose two.)
A. Create an Amazon Cognito identity pool to generate secure Amazon S3 access tokens for users when they successfully log in.
B. Use the existing Amazon Cognito user pool to generate Amazon S3 access tokens for users when they successfully log in.
C. Create an Amazon S3 VPC endpoint in the same VPC where the company hosts the application.
D. Create a NAT gateway in the VPC where the company hosts the application. Assign a policy to the S3 bucket to deny any request that is not initiated from Amazon Cognito.
E. Attach a policy to the S3 bucket that allows access only from the users' IP addresses.
Show Answer
Correct Answer: A, C
Explanation: Amazon Cognito user pools authenticate users, but identity pools provide temporary AWS credentials that authorized users can use to access AWS services such as Amazon S3. Because the application runs in a private subnet, creating an Amazon S3 VPC endpoint allows private connectivity to S3 without requiring internet access or a NAT gateway. The other options misuse user pools, rely on unnecessary NAT, or use insecure/unreliable IP-based access control.
Question 10
A company has a data ingestion workflow that consists of the following:
• An Amazon Simple Notification Service (Amazon SNS) topic for notifications about new data deliveries
• An AWS Lambda function to process the data and record metadata
The company observes that the ingestion workflow fails occasionally because of network connectivity issues. When such a failure occurs, the Lambda function does not ingest the corresponding data unless the company manually reruns the job.
Which combination of actions should a solutions architect take to ensure that the Lambda function ingests all data in the future? (Choose two.)
A. Deploy the Lambda function in multiple Availability Zones.
B. Create an Amazon Simple Queue Service (Amazon SQS) queue, and subscribe it to the SNS topic.
C. Increase the CPU and memory that are allocated to the Lambda function.
D. Increase provisioned throughput for the Lambda function.
E. Modify the Lambda function to read from an Amazon Simple Queue Service (Amazon SQS) queue.
Show Answer
Correct Answer: B, E
Explanation: Introduce Amazon SQS between Amazon SNS and AWS Lambda to decouple message delivery from processing. Subscribing an SQS queue to the SNS topic ensures notifications are durably stored. Configure Lambda to read from the SQS queue so failed processing is retried automatically and messages remain in the queue until successfully processed. The other options do not address reliable message retention and retry after transient network failures.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.