A company uses high concurrency AWS Lambda functions to process a constantly increasing number of messages in a message queue during marketing events. The Lambda functions use CPU intensive code to process the messages. The company wants to reduce the compute costs and to maintain service latency for its customers.
Which solution will meet these requirements?
A. Configure reserved concurrency for the Lambda functions. Decrease the memory allocated to the Lambda functions.
B. Configure reserved concurrency for the Lambda functions. Increase the memory according to AWS Compute Optimizer recommendations.
C. Configure provisioned concurrency for the Lambda functions. Decrease the memory allocated to the Lambda functions.
D. Configure provisioned concurrency for the Lambda functions. Increase the memory according to AWS Compute Optimizer recommendations.
Show Answer
Correct Answer: B
Explanation: The workload is CPU intensive, and in AWS Lambda CPU power scales proportionally with memory. Increasing memory (guided by AWS Compute Optimizer) can significantly reduce execution duration and therefore lower overall compute cost. Reserved concurrency ensures the function can scale during marketing events without contention, at no additional cost, while maintaining consistent latency. Provisioned concurrency would add extra charges and is primarily for cold-start sensitive, request/response workloads, which is less relevant for queue-based processing.
Question 204
A company runs its workloads on Amazon Elastic Container Service (Amazon ECS). The container images that the ECS task definition uses need to be scanned for Common Vulnerabilities and Exposures (CVEs). New container images that are created also need to be scanned.
Which solution will meet these requirements with the FEWEST changes to the workloads?
A. Use Amazon Elastic Container Registry (Amazon ECR) as a private image repository to store the container images. Specify scan on push filters for the ECR basic scan.
B. Store the container images in an Amazon S3 bucket. Use Amazon Macie to scan the images. Use an S3 Event Notification to initiate a Macie scan for every event with an s3:ObjectCreated:Put event type.
C. Deploy the workloads to Amazon Elastic Kubernetes Service (Amazon EKS). Use Amazon Elastic Container Registry (Amazon ECR) as a private image repository. Specify scan on push filters for the ECR enhanced scan.
D. Store the container images in an Amazon S3 bucket that has versioning enabled. Configure an S3 Event Notification for s3:ObjectCreated:* events to invoke an AWS Lambda function. Configure the Lambda function to initiate an Amazon Inspector scan.
Show Answer
Correct Answer: A
Explanation: The requirement is to scan existing and newly created container images for CVEs with the fewest workload changes. Amazon ECR natively integrates with Amazon ECS and provides built-in image scanning. Enabling ECR scan on push (basic scanning) automatically scans images for known CVEs when images are pushed, with no need to change ECS workloads or orchestration. Other options either use services not designed for container CVE scanning (Macie), require migrating from ECS to EKS, or introduce unnecessary complexity with custom S3, Lambda, and Inspector workflows.
Question 205
A solutions architect is designing a user authentication solution for a company. The solution must invoke two-factor authentication for users that log in from inconsistent geographical locations, IP addresses, or devices. The solution must also be able to scale up to accommodate millions of users.
Which solution will meet these requirements?
A. Configure Amazon Cognito user pools for user authentication. Enable the risk-based adaptive authentication feature with multifactor authentication (MFA).
B. Configure Amazon Cognito identity pools for user authentication. Enable multi-factor authentication (MFA).
C. Configure AWS Identity and Access Management (IAM) users for user authentication. Attach an IAM policy that allows the AllowManageOwnUserMFA action.
D. Configure AWS IAM Identity Center (AWS Single Sign-On) authentication for user authentication. Configure the permission sets to require multi-factor authentication (MFA).
Show Answer
Correct Answer: A
Explanation: Amazon Cognito user pools are designed for scalable end-user authentication and can handle millions of users. With advanced security and risk-based adaptive authentication enabled, Cognito evaluates sign-in context such as geographic location, IP address, and device, and can automatically require MFA when risk is elevated. The other options either do not support adaptive, context-aware authentication or are not intended for large-scale end-user authentication.
Question 206
A company’s application is receiving data from multiple data sources. The size of the data varies and is expected to increase over time. The current maximum size is 700 KB. The data volume and data size continue to grow as more data sources are added.
The company decides to use Amazon DynamoDB as the primary database for the application. A solutions architect needs to identify a solution that handles the large data sizes.
Which solution will meet these requirements in the MOST operationally efficient way?
A. Create an AWS Lambda function to filter the data that exceeds DynamoDB item size limits. Store the larger data in an Amazon DocumentDB (with MongoDB compatibility) database.
B. Store the large data as objects in an Amazon S3 bucket. In a DynamoDB table, create an item that has an attribute that points to the S3 URL of the data.
C. Split all incoming large data into a collection of items that have the same partition key. Write the data to a DynamoDB table in a single operation by using the BatchWriteItem API operation.
D. Create an AWS Lambda function that uses gzip compression to compress the large objects as they are written to a DynamoDB table.
Show Answer
Correct Answer: B
Explanation: DynamoDB has a strict 400 KB item size limit, while the data is already up to 700 KB and expected to grow. The most operationally efficient and AWS-recommended pattern is to store large objects in Amazon S3 and keep only metadata or an S3 object reference (URL or key) in DynamoDB. This avoids item size limits, scales seamlessly as data grows, minimizes complexity, and does not require additional databases or custom processing logic.
Question 207
A company is migrating a legacy application from an on-premises data center to AWS. The application relies on hundreds of cron jobs that run between 1 and 20 minutes on different recurring schedules throughout the day.
The company wants a solution to schedule and run the cron jobs on AWS with minimal refactoring. The solution must support running the cron jobs in response to an event in the future.
Which solution will meet these requirements?
A. Create a container image for the cron jobs. Use Amazon EventBridge Scheduler to create a recurring schedule. Run the cron job tasks as AWS Lambda functions.
B. Create a container image for the cron jobs. Use AWS Batch on Amazon Elastic Container Service (Amazon ECS) with a scheduling policy to run the cron jobs.
C. Create a container image for the cron jobs. Use Amazon EventBridge Scheduler to create a recurring schedule. Run the cron job tasks on AWS Fargate.
D. Create a container image for the cron jobs. Create a workflow in AWS Step Functions that uses a Wait state to run the cron jobs at a specified time. Use the RunTask action to run the cron job tasks on AWS Fargate.
Show Answer
Correct Answer: C
Explanation: The cron jobs run up to 20 minutes, which exceeds AWS Lambda’s 15‑minute execution limit, eliminating option A. The requirement is minimal refactoring and event-based future scheduling. Amazon EventBridge Scheduler natively supports cron and one-time future schedules and can directly trigger ECS tasks. Running the containerized cron jobs on AWS Fargate avoids managing EC2 capacity and only incurs cost when jobs run. AWS Batch or Step Functions add unnecessary operational complexity for simple scheduled cron execution. Therefore, using EventBridge Scheduler with ECS on Fargate best meets the requirements.
Question 208
A company's application runs on Amazon EC2 instances that are in multiple Availability Zones. The application needs to ingest real-time data from third-party applications.
The company needs a data ingestion solution that places the ingested raw data in an Amazon S3 bucket.
Which solution will meet these requirements?
A. Create Amazon Kinesis data streams for data ingestion. Create Amazon Kinesis Data Firehose delivery streams to consume the Kinesis data streams. Specify the S3 bucket as the destination of the delivery streams.
B. Create database migration tasks in AWS Database Migration Service (AWS DMS). Specify replication instances of the EC2 instances as the source endpoints. Specify the S3 bucket as the target endpoint. Set the migration type to migrate existing data and replicate ongoing changes.
C. Create and configure AWS DataSync agents on the EC2 instances. Configure DataSync tasks to transfer data from the EC2 instances to the S3 bucket.
D. Create an AWS Direct Connect connection to the application for data ingestion. Create Amazon Kinesis Data Firehose delivery streams to consume direct PUT operations from the application. Specify the S3 bucket as the destination of the delivery streams.
Show Answer
Correct Answer: A
Explanation: The requirement is real-time data ingestion from third-party applications and delivery of raw data to Amazon S3. Amazon Kinesis Data Streams is purpose-built for real-time streaming ingestion at scale, and Amazon Kinesis Data Firehose can consume from Kinesis Data Streams and automatically deliver data to S3 with minimal operational overhead. The other options do not fit real-time ingestion use cases: AWS DMS is for database migrations, DataSync is for batch-oriented file transfers, and Direct Connect is a networking service rather than a data ingestion solution.
Question 209
A marketing team wants to build a campaign for an upcoming multi-sport event. The team has news reports from the past five years in PDF format. The team needs a solution to extract insights about the content and the sentiment of the news reports. The solution must use Amazon Textract to process the news reports.
Which solution will meet these requirements with the LEAST operational overhead?
A. Provide the extracted insights to Amazon Athena for analysis. Store the extracted insights and analysis in an Amazon S3 bucket.
B. Store the extracted insights in an Amazon DynamoDB table. Use Amazon SageMaker to build a sentiment model.
C. Provide the extracted insights to Amazon Comprehend for analysis. Save the analysis to an Amazon S3 bucket.
D. Store the extracted insights in an Amazon S3 bucket. Use Amazon QuickSight to visualize and analyze the data.
Show Answer
Correct Answer: C
Explanation: Amazon Textract extracts text from the PDF news reports, and Amazon Comprehend is a fully managed NLP service that can automatically analyze content and sentiment with minimal setup. This combination directly satisfies the requirement to extract insights and sentiment while keeping operational overhead low. The other options require building custom models, managing additional analytics infrastructure, or focus on visualization rather than sentiment analysis.
Question 210
A company has an on-premises application that uses SFTP to collect financial data from multiple vendors. The company is migrating to the AWS Cloud. The company has created an application that uses Amazon S3 APIs to upload files from vendors.
Some vendors run their systems on legacy applications that do not support S3 APIs. The vendors want to continue to use SFTP-based applications to upload data. The company wants to use managed services for the needs of the vendors that use legacy applications.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an AWS Database Migration Service (AWS DMS) instance to replicate data from the storage of the vendors that use legacy applications to Amazon S3. Provide the vendors with the credentials to access the AWS DMS instance.
B. Create an AWS Transfer Family endpoint for vendors that use legacy applications.
C. Configure an Amazon EC2 instance to run an SFTP server. Instruct the vendors that use legacy applications to use the SFTP server to upload data.
D. Configure an Amazon S3 File Gateway for vendors that use legacy applications to upload files to an SMB file share.
Show Answer
Correct Answer: B
Explanation: AWS Transfer Family is a fully managed service that provides SFTP endpoints backed by Amazon S3. It allows legacy SFTP-based vendors to upload files directly to S3 without changing their applications, while minimizing operational overhead compared to running EC2-based SFTP servers or other workarounds.
Question 211
An online gaming company hosts its platform on Amazon EC2 instances behind Network Load Balancers (NLBs) across multiple AWS Regions. The NLBs can route requests to targets over the internet. The company wants to improve the customer playing experience by reducing end-to-end load time for its global customer base.
Which solution will meet these requirements?
A. Create Application Load Balancers (ALBs) in each Region to replace the existing NLBs. Register the existing EC2 instances as targets for the ALBs in each Region.
B. Configure Amazon Route 53 to route equally weighted traffic to the NLBs in each Region.
C. Create additional NLBs and EC2 instances in other Regions where the company has large customer bases.
D. Create a standard accelerator in AWS Global Accelerator. Configure the existing NLBs as target endpoints.
Show Answer
Correct Answer: D
Explanation: AWS Global Accelerator is designed to reduce end-to-end latency for global, latency-sensitive applications like online gaming. It uses Anycast IP addresses to route users to the nearest AWS edge location and then carries traffic over the AWS global network to the closest healthy regional endpoint. Global Accelerator works directly with Network Load Balancers as endpoints, so the existing architecture can be retained while improving global performance. The other options either do not reduce global latency effectively or require unnecessary architectural changes.
Question 212
A company runs a container application on a Kubernetes cluster in the company's data center. The application uses Advanced Message Queuing Protocol (AMQP) to communicate with a message queue. The data center cannot scale fast enough to meet the company’s expanding business needs. The company wants to migrate the workloads to AWS.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate the container application to Amazon Elastic Container Service (Amazon ECS). Use Amazon Simple Queue Service (Amazon SQS) to retrieve the messages.
B. Migrate the container application to Amazon Elastic Kubernetes Service (Amazon EKS). Use Amazon MQ to retrieve the messages.
C. Use highly available Amazon EC2 instances to run the application. Use Amazon MQ to retrieve the messages.
D. Use AWS Lambda functions to run the application. Use Amazon Simple Queue Service (Amazon SQS) to retrieve the messages.
Show Answer
Correct Answer: B
Explanation: The application already runs on Kubernetes and uses AMQP. To minimize operational overhead and refactoring, the workload should move to a managed Kubernetes service (Amazon EKS) rather than replatforming to ECS or Lambda. Amazon MQ natively supports AMQP and is designed for lift-and-shift migrations of existing message brokers. Options using Amazon SQS would require changing the messaging protocol because SQS does not support AMQP, increasing development and operational effort. EC2-based or Lambda-based options also increase management or impose runtime limitations. Therefore, EKS with Amazon MQ best meets the requirements with the least operational overhead.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.