A development team is collaborating with another company to create an integrated product. The other company needs to access an Amazon Simple Queue Service (Amazon SQS) queue that is contained in the development team's account. The other company wants to poll the queue without giving up its own account permissions to do so.
How should a solutions architect provide access to the SQS queue?
A. Create an instance profile that provides the other company access to the SQS queue.
B. Create an IAM policy that provides the other company access to the SQS queue.
C. Create an SQS access policy that provides the other company access to the SQS queue.
D. Create an Amazon Simple Notification Service (Amazon SNS) access policy that provides the other company access to the SQS queue.
Show Answer
Correct Answer: C
Explanation: Amazon SQS supports resource-based access policies (queue access policies) that allow you to grant cross-account permissions directly on the queue. This lets the other company's IAM principals access the queue while continuing to use their own account credentials and permissions. Instance profiles are for EC2, IAM policies alone do not grant cross-account access to another account's resources without a corresponding resource policy or role assumption, and SNS policies apply to SNS topics, not SQS queues.
Question 263
A company wants to migrate its three-tier application from on premises to AWS. The web tier and the application tier are running on third-party virtual machines (VMs). The database tier is running on MySQL.
The company needs to migrate the application by making the fewest possible changes to the architecture. The company also needs a database solution that can restore data to a specific point in time.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate the web tier and the application tier to Amazon EC2 instances in private subnets. Migrate the database tier to Amazon RDS for MySQL in private subnets.
B. Migrate the web tier to Amazon EC2 instances in public subnets. Migrate the application tier to EC2 instances in private subnets. Migrate the database tier to Amazon Aurora MySQL in private subnets.
C. Migrate the web tier to Amazon EC2 instances in public subnets. Migrate the application tier to EC2 instances in private subnets. Migrate the database tier to Amazon RDS for MySQL in private subnets.
D. Migrate the web tier and the application tier to Amazon EC2 instances in public subnets. Migrate the database tier to Amazon Aurora MySQL in public subnets.
Show Answer
Correct Answer: C
Explanation: Using EC2 for the existing VM-based web and application tiers requires minimal architectural change. The web tier should be in public subnets, the application tier in private subnets, and Amazon RDS for MySQL preserves the existing MySQL engine while providing managed backups and point-in-time recovery with less migration change than moving to Aurora. RDS for MySQL supports point-in-time restore when automated backups are enabled.
Sources:
https://codingnconcepts.com/aws/aws-certified-solutions-architect-associate-exam-questions
Question 264
A company has 150 TB of archived image data stored on-premises that needs to be moved to the AWS Cloud within the next month. The company’s current network connection allows up to 100 Mbps uploads for this purpose during the night only.
What is the MOST cost-effective mechanism to move this data and meet the migration deadline?
A. Use AWS Snowmobile to ship the data to AWS.
B. Order multiple AWS Snowball devices to ship the data to AWS.
C. Enable Amazon S3 Transfer Acceleration and securely upload the data.
D. Create an Amazon S3 VPC endpoint and establish a VPN to upload the data.
Show Answer
Correct Answer: B
Explanation: The correct answer is B. Transferring 150 TB over a 100 Mbps connection available only at night would not meet the one-month deadline. At 100 Mbps continuously, 150 TB would take well over four months, and night-only uploads would take even longer. AWS Snowball is designed for data transfers from terabytes up to multiple petabytes and is the most cost-effective offline transfer service for this data size. Snowmobile is intended for migrations on the order of 10 PB or more, making it excessive and more expensive. S3 Transfer Acceleration improves internet uploads but is still constrained by the available bandwidth. An S3 VPC endpoint with a VPN does not increase internet bandwidth and is not applicable for on-premises data transfer speed.
Question 265
A company stores multiple Amazon Machine Images (AMIs) in an AWS account to launch its Amazon EC2 instances. The AMIs contain critical data and configurations that are necessary for the company’s operations. The company wants to implement a solution that will recover accidentally deleted AMIs quickly and efficiently.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create Amazon Elastic Block Store (Amazon EBS) snapshots of the AMIs. Store the snapshots in a separate AWS account.
B. Copy all AMIs to another AWS account periodically.
C. Create a retention rule in Recycle Bin.
D. Upload the AMIs to an Amazon S3 bucket that has Cross-Region Replication.
Show Answer
Correct Answer: C
Explanation: Amazon EC2 Recycle Bin supports retention and restoration of accidentally deleted EBS-backed AMIs. By creating a retention rule, deleted AMIs are retained for the configured period and can be restored quickly with minimal operational effort. The other options require ongoing copying or manual backup management and have higher operational overhead.
Question 266
A solutions architect needs to design the architecture for an application that a vendor provides as a Docker container image. The container needs 50 GB of storage available for temporary files. The infrastructure must be serverless.
Which solution meets these requirements with the LEAST operational overhead?
A. Create an AWS Lambda function that uses the Docker container image with an Amazon S3 mounted volume that has more than 50 GB of space.
B. Create an AWS Lambda function that uses the Docker container image with an Amazon Elastic Block Store (Amazon EBS) volume that has more than 50 GB of space.
C. Create an Amazon Elastic Container Service (Amazon ECS) cluster that uses the AWS Fargate launch type. Create a task definition for the container image with an Amazon Elastic File System (Amazon EFS) volume. Create a service with that task definition.
D. Create an Amazon Elastic Container Service (Amazon ECS) cluster that uses the Amazon EC2 launch type with an Amazon Elastic Block Store (Amazon EBS) volume that has more than 50 GB of space. Create a task definition for the container image. Create a service with that task definition.
Show Answer
Correct Answer: C
Explanation: AWS Fargate is the serverless compute option for running Docker containers. Lambda does not support mounting EBS volumes, there is no supported S3-mounted volume for Lambda, and Lambda ephemeral storage is limited (up to 10 GB), which does not meet the 50 GB temporary storage requirement. ECS on EC2 requires managing instances, so it is not serverless. Using ECS with the Fargate launch type and an EFS volume satisfies the serverless requirement and provides the needed storage with the least operational overhead.
Question 267
A media company stores movies in Amazon S3. Each movie is stored in a single video file that ranges from 1 GB to 10 GB in size.
The company must be able to provide the streaming content of a movie within 5 minutes of a user purchase. There is higher demand for movies that are less than 20 years old than for movies that are more than 20 years old. The company wants to minimize hosting service costs based on demand.
Which solution will meet these requirements?
A. Store all media content in Amazon S3. Use S3 Lifecycle policies to move media data into the Infrequent Access tier when the demand for a movie decreases.
B. Store newer movie video files in S3 Standard. Store older movie video files in S3 Standard-infrequent Access (S3 Standard-IA). When a user orders an older movie, retrieve the video file by using standard retrieval.
C. Store newer movie video files in S3 Intelligent-Tiering. Store older movie video files in S3 Glacier Flexible Retrieval. When a user orders an older movie, retrieve the video file by using expedited retrieval.
D. Store newer movie video files in S3 Standard. Store older movie video files in S3 Glacier Flexible Retrieval. When a user orders an older movie, retrieve the video file by using bulk retrieval.
Show Answer
Correct Answer: B
Explanation: S3 Standard-IA is designed for infrequently accessed data that still requires millisecond access when needed, making it suitable for older movies that must be streamable within 5 minutes. Glacier Flexible Retrieval requires a restore operation, and expedited retrieval is intended for small objects and is not appropriate for 1–10 GB video files with a firm availability requirement. Bulk retrieval is far too slow, and lifecycle-by-demand in option A does not directly satisfy the stated age-based access pattern.
Question 268
A company wants to deploy its containerized application workloads to a VPC across three Availability Zones. The company needs a solution that is highly available across Availability Zones. The solution must require minimal changes to the application.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon Elastic Container Service (Amazon ECS). Configure Amazon ECS Service Auto Scaling to use target tracking scaling. Set the minimum capacity to 3. Set the task placement strategy type to spread with an Availability Zone attribute.
B. Use Amazon Elastic Kubernetes Service (Amazon EKS) self-managed nodes. Configure Application Auto Scaling to use target tracking scaling. Set the minimum capacity to 3.
C. Use Amazon EC2 Reserved Instances. Launch three EC2 instances in a spread placement group. Configure an Auto Scaling group to use target tracking scaling. Set the minimum capacity to 3.
D. Use an AWS Lambda function. Configure the Lambda function to connect to a VPC. Configure Application Auto Scaling to use Lambda as a scalable target. Set the minimum capacity to 3.
Show Answer
Correct Answer: A
Explanation: Amazon ECS is the managed container orchestration service with the least operational overhead for running containerized workloads across multiple Availability Zones. Configuring an ECS service with Service Auto Scaling, a minimum of 3 tasks, and a spread placement strategy by Availability Zone distributes tasks across the three AZs for high availability while requiring minimal application changes. EKS with self-managed nodes has significantly higher operational overhead, EC2 instances require managing the infrastructure, and Lambda is not an appropriate fit for existing containerized application workloads in this context.
Question 269
A company stores text files in Amazon S3. The text files include customer chat messages, date and time information, and customer personally identifiable information (PII).
The company needs a solution to provide samples of the conversations to an external service provider for quality control. The external service provider needs to randomly pick sample conversations up to the most recent conversation. The company must not share the customer PII with the external service provider. The solution must scale when the number of customer conversations increases.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an Object Lambda Access Point. Create an AWS Lambda function that redacts the PII when the function reads the file. Instruct the external service provider to access the Object Lambda Access Point.
B. Create a batch process on an Amazon EC2 instance that regularly reads all new files, redacts the PII from the files, and writes the redacted files to a different S3 bucket. Instruct the external service provider to access the bucket that does not contain the PII. Create a web application on an Amazon EC2 instance that presents a list of the files, redacts the PII from the files, and allows the external service provider to download new versions of the files that have the PII redacted.
D. Create an Amazon DynamoDB table. Create an AWS Lambda function that reads only the data in the files that does not contain PII. Configure the Lambda function to store the non-PII data in the DynamoDB table when a new file is written to Amazon S3. Grant the external service provider access to the DynamoDB table.
Show Answer
Correct Answer: A
Explanation: Amazon S3 Object Lambda can transform objects as they are retrieved, allowing a Lambda function to redact PII dynamically without storing duplicate sanitized copies. This provides the external provider access only to redacted content, scales automatically with S3/Lambda, and has the least operational overhead compared with managing EC2 batch jobs or maintaining a separate data store.
Question 270
A company’s data platform uses an Amazon Aurora MySQL database. The database has multiple read replicas and multiple DB instances across different Availability Zones. Users have recently reported errors from the database that indicate that there are too many connections. The company wants to reduce the failover time by 20% when a read replica is promoted to primary writer.
Which solution will meet this requirement?
A. Switch from Aurora to Amazon RDS with Multi-AZ cluster deployment.
B. Use Amazon RDS Proxy in front of the Aurora database.
C. Switch to Amazon DynamoDB with DynamoDB Accelerator (DAX) for read connections.
D. Switch to Amazon Redshift with relocation capability.
Show Answer
Correct Answer: B
Explanation: Amazon RDS Proxy pools and reuses database connections, reducing connection exhaustion ('too many connections'). It also shortens failover impact because the proxy maintains application connections and reconnects to the new writer more quickly during Aurora failover, helping reduce failover time. The other options require changing database technologies and do not directly address the connection limit and Aurora failover behavior.
Question 272
A company has a nightly batch processing routine that analyzes report files that an on-premises file system receives daily through SFTP. The company wants to move the solution to the AWS Cloud. The solution must be highly available and resilient. The solution also must minimize operational effort.
Which solution meets these requirements?
A. Deploy AWS Transfer for SFTP and an Amazon Elastic File System (Amazon EFS) file system for storage. Use an Amazon EC2 instance in an Auto Scaling group with a scheduled scaling policy to run the batch operation.
B. Deploy an Amazon EC2 instance that runs Linux and an SFTP service. Use an Amazon Elastic Block Store (Amazon EBS) volume for storage. Use an Auto Scaling group with the minimum number of instances and desired number of instances set to 1.
C. Deploy an Amazon EC2 instance that runs Linux and an SFTP service. Use an Amazon Elastic File System (Amazon EFS) file system for storage. Use an Auto Scaling group with the minimum number of instances and desired number of instances set to 1.
D. Deploy AWS Transfer for SFTP and an Amazon S3 bucket for storage. Modify the application to pull the batch files from Amazon S3 to an Amazon EC2 instance for processing. Use an EC2 instance in an Auto Scaling group with a scheduled scaling policy to run the batch operation.
Show Answer
Correct Answer: A
Explanation: AWS Transfer Family provides a managed, highly available SFTP endpoint, and Amazon EFS provides a shared, highly available file system that EC2 instances in an Auto Scaling group can mount directly. This preserves the file-system-based workflow with minimal application changes and operational effort. Options B and C require self-managing an SFTP server on EC2. Option D is highly available but requires modifying the application to use Amazon S3, which increases implementation effort and is less aligned with the requirement to minimize operational effort.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.