A company wants to migrate its three-tier application from on premises to AWS. The web tier and the application tier are running on third-party virtual machines (VMs). The database tier is running on MySQL.
The company needs to migrate the application by making the fewest possible changes to the architecture. The company also needs a database solution that can restore data to a specific point in time.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate the web tier and the application tier to Amazon EC2 instances in private subnets. Migrate the database tier to Amazon RDS for MySQL in private subnets.
B. Migrate the web tier to Amazon EC2 instances in public subnets. Migrate the application tier to EC2 instances in private subnets. Migrate the database tier to Amazon Aurora MySQL in private subnets.
C. Migrate the web tier to Amazon EC2 instances in public subnets. Migrate the application tier to EC2 instances in private subnets. Migrate the database tier to Amazon RDS for MySQL in private subnets.
D. Migrate the web tier and the application tier to Amazon EC2 instances in public subnets. Migrate the database tier to Amazon Aurora MySQL in public subnets.
Show Answer
Correct Answer: C
Explanation: The goal is to migrate with the fewest architectural changes and the least operational overhead while supporting point-in-time recovery. Rehosting the web tier in public subnets and the application tier in private subnets on EC2 mirrors a standard three-tier setup with minimal change from on-premises VMs. Migrating the existing MySQL database to Amazon RDS for MySQL preserves the same database engine, avoiding compatibility testing and refactoring. Amazon RDS for MySQL natively supports automated backups and point-in-time recovery with minimal management effort. Using Aurora would introduce an unnecessary engine change, increasing migration effort without being required by the problem.
Question 264
A company has 150 TB of archived image data stored on-premises that needs to be moved to the AWS Cloud within the next month. The company’s current network connection allows up to 100 Mbps uploads for this purpose during the night only.
What is the MOST cost-effective mechanism to move this data and meet the migration deadline?
A. Use AWS Snowmobile to ship the data to AWS.
B. Order multiple AWS Snowball devices to ship the data to AWS.
C. Enable Amazon S3 Transfer Acceleration and securely upload the data.
D. Create an Amazon S3 VPC endpoint and establish a VPN to upload the data.
Show Answer
Correct Answer: B
Explanation: Transferring 150 TB over a 100 Mbps connection (only available at night) would take far longer than one month, even with optimizations like S3 Transfer Acceleration or VPN. AWS Snowmobile is designed for extremely large-scale migrations (multiple petabytes) and has a much higher base cost, making it unsuitable and not cost-effective for 150 TB. AWS Snowball devices are specifically intended for offline data transfer in the tens to hundreds of terabytes range, are far more cost-effective than Snowmobile, and can easily meet the one-month deadline by shipping multiple devices in parallel.
Question 265
A company stores multiple Amazon Machine Images (AMIs) in an AWS account to launch its Amazon EC2 instances. The AMIs contain critical data and configurations that are necessary for the company’s operations. The company wants to implement a solution that will recover accidentally deleted AMIs quickly and efficiently.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create Amazon Elastic Block Store (Amazon EBS) snapshots of the AMIs. Store the snapshots in a separate AWS account.
B. Copy all AMIs to another AWS account periodically.
C. Create a retention rule in Recycle Bin.
D. Upload the AMIs to an Amazon S3 bucket that has Cross-Region Replication.
Show Answer
Correct Answer: C
Explanation: Amazon EC2 Recycle Bin supports retention rules for EBS-backed AMIs and EBS snapshots, allowing recovery of accidentally deleted AMIs within a defined retention period. This requires minimal setup, no copying or additional storage management, and provides fast restore with the least operational overhead compared to maintaining copies, snapshots, or S3 uploads.
Question 266
A solutions architect needs to design the architecture for an application that a vendor provides as a Docker container image. The container needs 50 GB of storage available for temporary files. The infrastructure must be serverless.
Which solution meets these requirements with the LEAST operational overhead?
A. Create an AWS Lambda function that uses the Docker container image with an Amazon S3 mounted volume that has more than 50 GB of space.
B. Create an AWS Lambda function that uses the Docker container image with an Amazon Elastic Block Store (Amazon EBS) volume that has more than 50 GB of space.
C. Create an Amazon Elastic Container Service (Amazon ECS) cluster that uses the AWS Fargate launch type. Create a task definition for the container image with an Amazon Elastic File System (Amazon EFS) volume. Create a service with that task definition.
D. Create an Amazon Elastic Container Service (Amazon ECS) cluster that uses the Amazon EC2 launch type with an Amazon Elastic Block Store (Amazon EBS) volume that has more than 50 GB of space. Create a task definition for the container image. Create a service with that task definition.
Show Answer
Correct Answer: C
Explanation: The solution must be serverless and provide ~50 GB of temporary storage for a container. AWS Lambda cannot mount EBS or S3 volumes, and its ephemeral storage is limited (up to 10 GB), so options A and B are invalid. ECS with the EC2 launch type requires managing instances, so it is not serverless. ECS with AWS Fargate is serverless and supports mounting Amazon EFS volumes that can easily provide more than 50 GB of storage with minimal operational overhead. Therefore, option C is correct.
Question 267
A media company stores movies in Amazon S3. Each movie is stored in a single video file that ranges from 1 GB to 10 GB in size.
The company must be able to provide the streaming content of a movie within 5 minutes of a user purchase. There is higher demand for movies that are less than 20 years old than for movies that are more than 20 years old. The company wants to minimize hosting service costs based on demand.
Which solution will meet these requirements?
A. Store all media content in Amazon S3. Use S3 Lifecycle policies to move media data into the Infrequent Access tier when the demand for a movie decreases.
B. Store newer movie video files in S3 Standard. Store older movie video files in S3 Standard-infrequent Access (S3 Standard-IA). When a user orders an older movie, retrieve the video file by using standard retrieval.
C. Store newer movie video files in S3 Intelligent-Tiering. Store older movie video files in S3 Glacier Flexible Retrieval. When a user orders an older movie, retrieve the video file by using expedited retrieval.
D. Store newer movie video files in S3 Standard. Store older movie video files in S3 Glacier Flexible Retrieval. When a user orders an older movie, retrieve the video file by using bulk retrieval.
Show Answer
Correct Answer: B
Explanation: Movies must be streamable within 5 minutes, and files are large (1–10 GB). S3 Standard-IA provides the same low-latency, immediate access as S3 Standard, making it suitable for streaming while reducing storage cost for less frequently accessed (older) movies. Glacier Flexible Retrieval cannot reliably meet the 5‑minute requirement for large objects, and bulk or standard retrievals take hours. Lifecycle-only movement (A) does not align storage class choice directly with demand patterns at access time.
Question 268
A company wants to deploy its containerized application workloads to a VPC across three Availability Zones. The company needs a solution that is highly available across Availability Zones. The solution must require minimal changes to the application.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon Elastic Container Service (Amazon ECS). Configure Amazon ECS Service Auto Scaling to use target tracking scaling. Set the minimum capacity to 3. Set the task placement strategy type to spread with an Availability Zone attribute.
B. Use Amazon Elastic Kubernetes Service (Amazon EKS) self-managed nodes. Configure Application Auto Scaling to use target tracking scaling. Set the minimum capacity to 3.
C. Use Amazon EC2 Reserved Instances. Launch three EC2 instances in a spread placement group. Configure an Auto Scaling group to use target tracking scaling. Set the minimum capacity to 3.
D. Use an AWS Lambda function. Configure the Lambda function to connect to a VPC. Configure Application Auto Scaling to use Lambda as a scalable target. Set the minimum capacity to 3.
Show Answer
Correct Answer: A
Explanation: Amazon ECS provides a fully managed container orchestration service with the least operational overhead. Using an ECS service with a minimum of three tasks and a spread placement strategy across Availability Zones ensures high availability with minimal application changes. ECS avoids the operational complexity of managing Kubernetes nodes (EKS self-managed), raw EC2 instances, or refactoring to Lambda, which is not suitable for long-running containerized workloads.
Question 269
A company stores text files in Amazon S3. The text files include customer chat messages, date and time information, and customer personally identifiable information (PII).
The company needs a solution to provide samples of the conversations to an external service provider for quality control. The external service provider needs to randomly pick sample conversations up to the most recent conversation. The company must not share the customer PII with the external service provider. The solution must scale when the number of customer conversations increases.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point.
B. Create a batch process on an Amazon EC2 instance that regularly reads all new files, redacts the PII from the files, and writes the redacted files to a different S3 bucket. Instruct the external service provider to access the bucket that does not contain the PII. Create a web application on an Amazon EC2 instance that presents a list of the files, redacts the PII from the files, and allows the external service provider to download new versions of the files that have the PII redacted.
D. Create an Amazon DynamoDB table. Create an AWS Lambda function that reads only the data in the files that does not contain PII. Configure the Lambda function to store the non-PII data in the DynamoDB table when a new file is written to Amazon S3. Grant the external service provider access to the DynamoDB table.
Show Answer
Correct Answer: A
Explanation: Amazon S3 Object Lambda allows data to be transformed as it is retrieved, without creating and managing additional copies of the data. By using an Object Lambda Access Point with a Lambda function that redacts PII at request time, the company can securely provide non-PII conversation samples to the external provider. This approach scales automatically with S3 and Lambda, ensures the external party never accesses raw PII, supports access to the most recent objects, and avoids the operational overhead of batch jobs, EC2 management, or data duplication.
Question 270
A company’s data platform uses an Amazon Aurora MySQL database. The database has multiple read replicas and multiple DB instances across different Availability Zones. Users have recently reported errors from the database that indicate that there are too many connections. The company wants to reduce the failover time by 20% when a read replica is promoted to primary writer.
Which solution will meet this requirement?
A. Switch from Aurora to Amazon RDS with Multi-AZ cluster deployment.
B. Use Amazon RDS Proxy in front of the Aurora database.
C. Switch to Amazon DynamoDB with DynamoDB Accelerator (DAX) for read connections.
D. Switch to Amazon Redshift with relocation capability.
Show Answer
Correct Answer: B
Explanation: Amazon RDS Proxy pools and manages database connections for Aurora, reducing excessive open connections that cause errors. During a failover or promotion of a read replica to writer, RDS Proxy preserves application connections and quickly redirects them to the new primary, significantly reducing failover time (often by more than 20%) without requiring application changes.
Question 272
A company has a nightly batch processing routine that analyzes report files that an on-premises file system receives daily through SFTP. The company wants to move the solution to the AWS Cloud. The solution must be highly available and resilient. The solution also must minimize operational effort.
Which solution meets these requirements?
A. Deploy AWS Transfer for SFTP and an Amazon Elastic File System (Amazon EFS) file system for storage. Use an Amazon EC2 instance in an Auto Scaling group with a scheduled scaling policy to run the batch operation.
B. Deploy an Amazon EC2 instance that runs Linux and an SFTP service. Use an Amazon Elastic Block Store (Amazon EBS) volume for storage. Use an Auto Scaling group with the minimum number of instances and desired number of instances set to 1.
C. Deploy an Amazon EC2 instance that runs Linux and an SFTP service. Use an Amazon Elastic File System (Amazon EFS) file system for storage. Use an Auto Scaling group with the minimum number of instances and desired number of instances set to 1.
D. Deploy AWS Transfer for SFTP and an Amazon S3 bucket for storage. Modify the application to pull the batch files from Amazon S3 to an Amazon EC2 instance for processing. Use an EC2 instance in an Auto Scaling group with a scheduled scaling policy to run the batch operation.
Show Answer
Correct Answer: A
Explanation: The requirements emphasize high availability, resilience, and minimal operational effort for an SFTP-ingested, file-system–based batch workflow. AWS Transfer for SFTP is a fully managed, highly available service that removes the need to operate SFTP servers. Amazon EFS provides a highly available, resilient shared file system that matches the existing file-based processing model and can be mounted by EC2 instances in an Auto Scaling group without application changes. Using scheduled scaling for the batch EC2 instances minimizes cost and operations. Options B and C rely on self-managed SFTP on EC2 with a single-instance ASG, which is not highly available. Option D adds Amazon S3 and requires modifying the application to pull files, increasing operational effort.
Question 273
A company sets up an organization in AWS Organizations that contains 10 AWS accounts. A solutions architect must design a solution to provide access to the accounts for several thousand employees. The company has an existing identity provider (IdP). The company wants to use the existing IdP for authentication to AWS.
Which solution will meet these requirements?
A. Create IAM users for the employees in the required AWS accounts. Connect IAM users to the existing IdP. Configure federated authentication for the IAM users.
B. Set up AWS account root users with user email addresses and passwords that are synchronized from the existing IdP.
C. Configure AWS IAM Identity Center (AWS Single Sign-On). Connect IAM Identity Center to the existing IdP. Provision users and groups from the existing IdP.
D. Use AWS Resource Access Manager (AWS RAM) to share access to the AWS accounts with the users in the existing IdP.
Show Answer
Correct Answer: C
Explanation: AWS IAM Identity Center (formerly AWS SSO) is designed to provide centralized access to multiple AWS accounts in AWS Organizations for large numbers of users. It integrates directly with an existing external identity provider for authentication and supports user and group provisioning. This avoids creating IAM users in each account and scales to thousands of employees, meeting the requirement to use the existing IdP.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.