An online gaming company hosts its platform on Amazon EC2 instances behind Network Load Balancers (NLBs) across multiple AWS Regions. The NLBs can route requests to targets over the internet. The company wants to improve the customer playing experience by reducing end-to-end load time for its global customer base.
Which solution will meet these requirements?
A. Create Application Load Balancers (ALBs) in each Region to replace the existing NLBs. Register the existing EC2 instances as targets for the ALBs in each Region.
B. Configure Amazon Route 53 to route equally weighted traffic to the NLBs in each Region.
C. Create additional NLBs and EC2 instances in other Regions where the company has large customer bases.
D. Create a standard accelerator in AWS Global Accelerator. Configure the existing NLBs as target endpoints.
Show Answer
Correct Answer: D
Explanation: AWS Global Accelerator is designed to improve global application performance by routing users to the nearest AWS edge location using Anycast and then carrying traffic over the AWS global network to the optimal regional endpoint. It supports Network Load Balancers as endpoints and reduces latency and jitter for globally distributed, latency-sensitive applications such as online gaming. Replacing NLBs with ALBs, using weighted Route 53 routing, or simply adding more Regions does not provide the same network path optimization.
Question 212
A company runs a container application on a Kubernetes cluster in the company's data center. The application uses Advanced Message Queuing Protocol (AMQP) to communicate with a message queue. The data center cannot scale fast enough to meet the company’s expanding business needs. The company wants to migrate the workloads to AWS.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate the container application to Amazon Elastic Container Service (Amazon ECS). Use Amazon Simple Queue Service (Amazon SQS) to retrieve the messages.
B. Migrate the container application to Amazon Elastic Kubernetes Service (Amazon EKS). Use Amazon MQ to retrieve the messages.
C. Use highly available Amazon EC2 instances to run the application. Use Amazon MQ to retrieve the messages.
D. Use AWS Lambda functions to run the application. Use Amazon Simple Queue Service (Amazon SQS) to retrieve the messages.
Show Answer
Correct Answer: B
Explanation: The application currently relies on AMQP. Amazon SQS does not support AMQP, so options that replace the message broker with SQS would require changing the application's messaging protocol. Amazon MQ is a managed message broker that supports AMQP and is designed for lift-and-shift migrations of existing messaging applications. Because the workloads already run on Kubernetes, migrating to Amazon EKS preserves the orchestration model while using managed Kubernetes and a managed AMQP-compatible broker, resulting in the least operational overhead among the available choices.
Question 213
A company hosts a data lake on Amazon S3. The data lake ingests data in Apache Parquet format from various data sources. The company uses multiple transformation steps to prepare the ingested data. The steps include filtering of anomalies, normalizing of data to standard date and time values, and generation of aggregates for analyses.
The company must store the transformed data in S3 buckets that data analysts access. The company needs a prebuilt solution for data transformation that does not require code. The solution must provide data lineage and data profiling. The company needs to share the data transformation steps with employees throughout the company.
Which solution will meet these requirements?
A. Configure an AWS Glue Studio visual canvas to transform the data. Share the transformation steps with employees by using AWS Glue jobs.
B. Configure Amazon EMR Serverless to transform the data. Share the transformation steps with employees by using EMR Serverless jobs.
C. Configure AWS Glue DataBrew to transform the data. Share the transformation steps with employees by using DataBrew recipes.
D. Create Amazon Athena tables for the data. Write Athena SQL queries to transform the data. Share the Athena SQL queries with employees.
Show Answer
Correct Answer: C
Explanation: AWS Glue DataBrew is the AWS no-code data preparation service. It provides a visual interface for transforming data, built-in data profiling, data lineage, and reusable recipes that can be shared across teams. EMR Serverless and Athena require coding/SQL, and Glue Studio is visual but does not specifically provide the no-code data preparation, profiling, and recipe-sharing capabilities that best match the requirements.
Question 214
A company collects and processes data from a vendor. The vendor stores its data in an Amazon RDS for MySQL database in the vendor's own AWS account. The company’s VPC does not have an internet gateway, an AWS Direct Connect connection, or an AWS Site-to-Site VPN connection. The company needs to access the data that is in the vendor database.
Which solution will meet this requirement?
A. Instruct the vendor to sign up for the AWS Hosted Connection Direct Connect Program. Use VPC peering to connect the company's VPC and the vendor's VPC.
B. Configure a client VPN connection between the company's VPC and the vendor's VPC. Use VPC peering to connect the company's VPC and the vendor's VPC.
C. Instruct the vendor to create a Network Load Balancer (NLB). Place the NLB in front of the Amazon RDS for MySQL database. Use AWS PrivateLink to integrate the company's VPC and the vendor's VP
D. Use AWS Transit Gateway to integrate the company's VPC and the vendor's VPC. Use VPC peering to connect the company’s VPC and the vendor's VPC.
Show Answer
Correct Answer: C
Explanation: AWS PrivateLink is designed to provide private connectivity between VPCs across AWS accounts without requiring an internet gateway, Direct Connect, or VPN. The service provider exposes an endpoint service behind a Network Load Balancer (NLB), and the consumer connects through an interface VPC endpoint. This is the appropriate pattern for private cross-account access to a vendor-hosted service such as an RDS-backed application. The other options are incorrect because they rely on unnecessary or invalid combinations (such as VPC peering with Direct Connect, Client VPN, or Transit Gateway) and do not match the stated constraints.
Question 215
A social media company has workloads that collect and process data. The workloads store the data in on-premises NFS storage. The data store cannot scale fast enough to meet the company’s expanding business needs. The company wants to migrate the current data store to AWS.
Which solution will meet these requirements MOST cost-effectively?
A. Set up an AWS Storage Gateway Volume Gateway. Use an Amazon S3 Lifecycle policy to transition the data to the appropriate storage class.
B. Set up an AWS Storage Gateway Amazon S3 File Gateway. Use an Amazon S3 Lifecycle policy to transition the data to the appropriate storage class.
C. Use the Amazon Elastic File System (Amazon EFS) Standard-Infrequent Access (Standard-IA) storage class. Activate the infrequent access lifecycle policy.
D. Use the Amazon Elastic File System (Amazon EFS) One Zone-Infrequent Access (One Zone-IA) storage class. Activate the infrequent access lifecycle policy.
Show Answer
Correct Answer: B
Explanation: Amazon S3 File Gateway is designed to present an NFS (or SMB) file interface while storing data as objects in Amazon S3, allowing existing NFS-based workloads to migrate with minimal application changes. Amazon S3 provides virtually unlimited scalability, and S3 Lifecycle policies can automatically transition objects to lower-cost storage classes for additional cost savings. Volume Gateway is for block storage, not NFS file storage, and EFS options are scalable file systems but are generally less cost-effective than S3 for this migration scenario.
Question 216
A company runs containers in a Kubernetes environment in the company's local data center. The company wants to use Amazon Elastic Kubernetes Service (Amazon EKS) and other AWS managed services. Data must remain locally in the company's data center and cannot be stored in any remote site or cloud to maintain compliance.
Which solution will meet these requirements?
A. Deploy AWS Local Zones in the company's data center.
B. Use an AWS Snowmobile in the company's data center.
C. Install an AWS Outposts rack in the company's data center.
D. Install an AWS Snowball Edge Storage Optimized node in the data center.
Show Answer
Correct Answer: C
Explanation: AWS Outposts extends AWS infrastructure and managed services into a customer's on-premises data center. It supports Amazon EKS on Outposts while keeping data and workloads local to meet data residency and compliance requirements. Local Zones are AWS-managed locations, not customer data centers. Snowmobile is for bulk data transfer, and Snowball Edge is an edge device rather than a full AWS-managed infrastructure platform for this use case.
Question 217
A company has an Amazon S3 data lake. The company needs a solution that transforms the data from the data lake and loads the data into a data warehouse every day. The data warehouse must have massively parallel processing (MPP) capabilities.
Data analysts then need to create and train machine learning (ML) models by using SQL commands on the data. The solution must use serverless AWS services wherever possible.
Which solution will meet these requirements?
A. Run a daily Amazon EMR job to transform the data and load the data into Amazon Redshift. Use Amazon Redshift ML to create and train the ML models.
B. Run a daily Amazon EMR job to transform the data and load the data into Amazon Aurora Serverless. Use Amazon Aurora ML to create and train the ML models.
C. Run a daily AWS Glue job to transform the data and load the data into Amazon Redshift Serverless. Use Amazon Redshift ML to create and train the ML models.
D. Run a daily AWS Glue job to transform the data and load the data into Amazon Athena tables. Use Amazon Athena ML to create and train the ML models.
Show Answer
Correct Answer: C
Explanation: The requirements are a serverless-first solution, a data warehouse with massively parallel processing (MPP), daily ETL from Amazon S3, and SQL-based ML model creation and training. AWS Glue is a serverless ETL service that can perform the daily transformation and load. Amazon Redshift Serverless provides an MPP data warehouse without infrastructure management. Amazon Redshift ML enables creating, training, and deploying ML models using SQL. EMR in option A is not presented as the serverless deployment mode, Aurora is not an MPP data warehouse, and Athena does not provide Athena ML for SQL-based model training.
Question 218
A company wants to run its payment application on AWS. The application receives payment notifications from mobile devices. Payment notifications require a basic validation before they are sent for further processing.
The backend processing application is long running and requires compute and memory to be adjusted. The company does not want to manage the infrastructure.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an Amazon Simple Queue Service (Amazon SQS) queue. Integrate the queue with an Amazon EventBridge rule to receive payment notifications from mobile devices. Configure the rule to validate payment notifications and send the notifications to the backend application. Deploy the backend application on Amazon Elastic Kubernetes Service (Amazon EKS) Anywhere. Create a standalone cluster.
B. Create an Amazon API Gateway API. Integrate the API with an AWS Step Functions state machine to receive payment notifications from mobile devices. Invoke the state machine to validate payment notifications and send the notifications to the backend application. Deploy the backend application on Amazon Elastic Kubernetes Service (Amazon EKS). Configure an EKS cluster with self-managed nodes.
C. Create an Amazon Simple Queue Service (Amazon SQS) queue. Integrate the queue with an Amazon EventBridge rule to receive payment notifications from mobile devices. Configure the rule to validate payment notifications and send the notifications to the backend application. Deploy the backend application on Amazon EC2 Spot Instances. Configure a Spot Fleet with a default allocation strategy.
D. Create an Amazon API Gateway API. Integrate the API with AWS Lambda to receive payment notifications from mobile devices. Invoke a Lambda function to validate payment notifications and send the notifications to the backend application. Deploy the backend application on Amazon Elastic Container Service (Amazon ECS). Configure Amazon ECS with an AWS Fargate launch type.
Show Answer
Correct Answer: D
Explanation: The requirement is to minimize operational overhead and avoid managing infrastructure. API Gateway is the appropriate entry point for mobile devices. AWS Lambda is well suited for the basic validation step. The long-running backend workload is not a good fit for Lambda, so running it on Amazon ECS with the AWS Fargate launch type provides serverless container execution with adjustable CPU and memory and no server management. The other options rely on EKS (including EKS Anywhere or self-managed nodes) or EC2 Spot Instances, all of which require significantly more infrastructure management.
Question 219
A financial company needs to handle highly sensitive data. The company will store the data in an Amazon S3 bucket. The company needs to ensure that the data is encrypted in transit and at rest. The company must manage the encryption keys outside the AWS Cloud.
Which solution will meet these requirements?
A. Encrypt the data in the S3 bucket with server-side encryption (SSE) that uses an AWS Key Management Service (AWS KMS) customer managed key.
B. Encrypt the data in the S3 bucket with server-side encryption (SSE) that uses an AWS Key Management Service (AWS KMS) AWS managed key.
C. Encrypt the data in the S3 bucket with the default server-side encryption (SSE).
D. Encrypt the data at the company's data center before storing the data in the S3 bucket.
Show Answer
Correct Answer: D
Explanation: The requirement to manage encryption keys outside AWS rules out all server-side encryption options that rely on AWS-managed or AWS KMS keys. Client-side encryption, where data is encrypted before upload using keys managed by the company, satisfies encryption at rest in S3 while keeping key management outside AWS. Data should also be transmitted over HTTPS/TLS to ensure encryption in transit. Option D best matches these requirements.
Question 220
A company needs to create an AWS Lambda function that will run in a VPC in the company's primary AWS account. The Lambda function needs to access files that the company stores in an Amazon Elastic File System (Amazon EFS) file system. The EFS file system is located in a secondary AWS account. As the company adds files to the file system, the solution must scale to meet the demand.
Which solution will meet these requirements MOST cost-effectively?
A. Create a new EFS file system in the primary account. Use AWS DataSync to copy the contents of the original EFS file system to the new EFS file system.
B. Create a VPC peering connection between the VPCs that are in the primary account and the secondary account.
C. Create a second Lambda function in the secondary account that has a mount that is configured for the file system. Use the primary account's Lambda function to invoke the secondary account's Lambda function.
D. Move the contents of the file system to a Lambda layer. Configure the Lambda layer's permissions to allow the company's secondary account to use the Lambda layer.
Show Answer
Correct Answer: B
Explanation: AWS Lambda supports mounting an Amazon EFS file system across AWS accounts when the networking is configured appropriately. Establishing VPC peering (with the necessary routing, security groups, NFS access, and EFS resource policy) allows the Lambda function in the primary account to mount and use the existing EFS in the secondary account without duplicating storage. This avoids the ongoing storage and DataSync costs of creating a second EFS, scales naturally with EFS, and is simpler and more cost-effective than proxying through another Lambda. Lambda layers are intended for code and dependencies, not file storage.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.