A company is building a new application that uses serverless architecture. The architecture will consist of an Amazon API Gateway REST API and AWS Lambda functions to manage incoming requests.
The company wants to add a service that can send messages received from the API Gateway REST API to multiple target Lambda functions for processing. The service must offer message filtering that gives the target Lambda functions the ability to receive only the messages the functions need.
Which solution will meet these requirements with the LEAST operational overhead?
A. Send the requests from the API Gateway REST API to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic. Configure the target Lambda functions to poll the different SQS queues.
B. Send the requests from the API Gateway REST API to Amazon EventBridge. Configure EventBridge to invoke the target Lambda functions.
C. Send the requests from the API Gateway REST API to Amazon Managed Streaming for Apache Kafka (Amazon MSK). Configure Amazon MSK to publish the messages to the target Lambda functions.
D. Send the requests from the API Gateway REST API to multiple Amazon Simple Queue Service (Amazon SQS) queues. Configure the target Lambda functions to poll the different SQS queues.
Show Answer
Correct Answer: B
Explanation: Amazon EventBridge is purpose-built for event routing with content-based filtering and direct Lambda targets. API Gateway can send events to EventBridge, which then filters and invokes only the required Lambda functions. This avoids managing SNS topics, SQS queues, and Lambda polling, resulting in the least operational overhead while still supporting fan-out and message filtering. SNS+SQS works but involves more components to operate.
Question 285
A company has a new mobile app. Anywhere in the world, users can see local news on topics they choose. Users also can post photos and videos from inside the app.
Users access content often in the first minutes after the content is posted. New content quickly replaces older content, and then the older content disappears. The local nature of the news means that users consume 90% of the content within the AWS Region where it is uploaded.
Which solution will optimize the user experience by providing the LOWEST latency for content uploads?
A. Upload and store content in Amazon S3. Use Amazon CloudFront for the uploads.
B. Upload and store content in Amazon S3. Use S3 Transfer Acceleration for the uploads.
C. Upload content to Amazon EC2 instances in the Region that is closest to the user. Copy the data to Amazon S3.
D. Upload and store content in Amazon S3 in the Region that is closest to the user. Use multiple distributions of Amazon CloudFront.
Show Answer
Correct Answer: B
Explanation: The requirement is the **lowest latency for content uploads** from users anywhere in the world. Amazon S3 Transfer Acceleration is specifically designed to optimize upload latency by routing uploads to the nearest AWS edge location and then transferring the data over the AWS global network to the target S3 bucket. CloudFront is primarily optimized for content delivery (downloads), and using multiple distributions does not optimize uploads to S3 better than Transfer Acceleration. Therefore, using S3 with Transfer Acceleration provides the lowest upload latency.
Question 286
A company has an application that delivers on-demand training videos to students around the world. The application also allows authorized content developers to upload videos. The data is stored in an Amazon S3 bucket in the us-east-2 Region.
The company has created an S3 bucket in the eu-west-2 Region and an S3 bucket in the ap-southeast-1 Region. The company wants to replicate the data to the new S3 buckets. The company needs to minimize latency for developers who upload videos and students who stream videos near eu-west-2 and ap-southeast-1.
Which combination of steps will meet these requirements with the FEWEST changes to the application? (Choose two.)
A. Configure one-way replication from the us-east-2 S3 bucket to the eu-west-2 S3 bucket. Configure one-way replication from the us-east-2 S3 bucket to the ap-southeast-1 S3 bucket.
B. Configure one-way replication from the us-east-2 S3 bucket to the eu-west-2 S3 bucket. Configure one-way replication from the eu-west-2 S3 bucket to the ap-southeast-1 S3 bucket.
C. Configure two-way (bidirectional) replication among the S3 buckets that are in all three Regions.
D. Create an S3 Multi-Region Access Point. Modify the application to use the Amazon Resource Name (ARN) of the Multi-Region Access Point for video streaming. Do not modify the application for video uploads.
E. Create an S3 Multi-Region Access Point. Modify the application to use the Amazon Resource Name (ARN) of the Multi-Region Access Point for video streaming and uploads.
Show Answer
Correct Answer: C, E
Explanation: To minimize latency for both uploads and streaming near eu-west-2 and ap-southeast-1 with fewest application changes, developers must be able to upload to the nearest Region and students must stream from the nearest copy. Bidirectional (two-way) replication keeps all three buckets synchronized regardless of where uploads occur. An S3 Multi-Region Access Point provides a single global endpoint that automatically routes both uploads and downloads to the closest Region, requiring only an endpoint change in the application. One-way replication alone would not minimize upload latency for developers outside us-east-2.
Question 287
A company has multiple AWS accounts with applications deployed in the us-west-2 Region. Application logs are stored within Amazon S3 buckets in each account. The company wants to build a centralized log analysis solution that uses a single S3 bucket. Logs must not leave us-west-2, and the company wants to incur minimal operational overhead.
Which solution meets these requirements and is MOST cost-effective?
A. Create an S3 Lifecycle policy that copies the objects from one of the application S3 buckets to the centralized S3 bucket.
B. Use S3 Same-Region Replication to replicate logs from the S3 buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.
C. Write a script that uses the PutObject API operation every day to copy the entire contents of the buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.
D. Write AWS Lambda functions in these accounts that are triggered every time logs are delivered to the S3 buckets (s3:ObjectCreated:* event). Copy the logs to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.
Show Answer
Correct Answer: B
Explanation: S3 Same-Region Replication natively and automatically replicates objects between buckets within the same AWS Region, supports cross-account log aggregation, and keeps data in us-west-2. It requires minimal operational overhead compared to custom scripts or Lambda functions and is more appropriate than lifecycle rules for continuous log copying. This makes it the most cost-effective and operationally simple solution.
Question 288
A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard. A solutions architect needs to design a solution that can handle large traffic spikes, process the mobile game updates in order of receipt, and store the processed updates in a highly available database. The company also wants to minimize the management overhead required to maintain the solution.
What should the solutions architect do to meet these requirements?
A. Push score updates to Amazon Kinesis Data Streams. Process the updates in Kinesis Data Streams with AWS Lambda. Store the processed updates in Amazon DynamoDB.
B. Push score updates to Amazon Kinesis Data Streams. Process the updates with a fleet of Amazon EC2 instances set up for Auto Scaling. Store the processed updates in Amazon Redshift.
C. Push score updates to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe an AWS Lambda function to the SNS topic to process the updates. Store the processed updates in a SQL database running on Amazon EC2.
D. Push score updates to an Amazon Simple Queue Service (Amazon SQS) queue. Use a fleet of Amazon EC2 instances with Auto Scaling to process the updates in the SQS queue. Store the processed updates in an Amazon RDS Multi-AZ DB instance.
Show Answer
Correct Answer: A
Explanation: The solution must handle traffic spikes, preserve order of updates, use a highly available database, and minimize operational overhead. Amazon Kinesis Data Streams can ingest and order streaming score updates at scale. AWS Lambda provides serverless, auto-scaling processing with minimal management. Amazon DynamoDB is a fully managed, highly available database well suited for high-throughput game leaderboards. The other options introduce more management overhead (EC2, RDS, Redshift) or do not guarantee ordered processing (SNS).
Question 289
A company has an AWS Direct Connect connection from its corporate data center to its VPC in the us-east-1 Region. The company recently acquired a corporation that has several VPCs and a Direct Connect connection between its on-premises data center and the eu-west-2 Region. The CIDR blocks for the VPCs of the company and the corporation do not overlap. The company requires connectivity between two Regions and the data centers. The company needs a solution that is scalable while reducing operational overhead.
What should a solutions architect do to meet these requirements?
A. Set up inter-Region VPC peering between the VPC in us-east-1 and the VPCs in eu-west-2.
B. Create private virtual interfaces from the Direct Connect connection in us-east-1 to the VPCs in eu-west-2.
C. Establish VPN appliances in a fully meshed VPN network hosted by Amazon EC2. Use AWS VPN CloudHub to send and receive data between the data centers and each VP
D. Connect the existing Direct Connect connection to a Direct Connect gateway. Route traffic from the virtual private gateways of the VPCs in each Region to the Direct Connect gateway.
Show Answer
Correct Answer: D
Explanation: A Direct Connect gateway allows a single Direct Connect connection to be associated with multiple virtual private gateways across different AWS Regions. This provides scalable, private connectivity between the on-premises data centers and VPCs in us-east-1 and eu-west-2 with minimal operational overhead. Other options either do not provide private, scalable inter-Region connectivity or introduce unnecessary complexity.
Question 290
An ecommerce company runs applications in AWS accounts that are part of an organization in AWS Organizations. The applications run on Amazon Aurora PostgreSQL databases across all the accounts. The company needs to prevent malicious activity and must identify abnormal failed and incomplete login attempts to the databases.
Which solution will meet these requirements in the MOST operationally efficient way?
A. Attach service control policies (SCPs) to the root of the organization to identity the failed login attempts.
B. Enable the Amazon RDS Protection feature in Amazon GuardDuty for the member accounts of the organization.
C. Publish the Aurora general logs to a log group in Amazon CloudWatch Logs. Export the log data to a central Amazon S3 bucket.
D. Publish all the Aurora PostgreSQL database events in AWS CloudTrail to a central Amazon S3 bucket.
Show Answer
Correct Answer: B
Explanation: Amazon GuardDuty’s RDS Protection natively monitors Amazon Aurora PostgreSQL login activity across AWS Organizations member accounts and uses anomaly detection to identify malicious, failed, or incomplete login attempts. It requires minimal setup, scales automatically across accounts, and avoids custom log collection or analysis, making it the most operationally efficient solution.
Question 291
A company has deployed its application on Amazon EC2 instances with an Amazon RDS database. The company used the principle of least privilege to configure the database access credentials. The company's security team wants to protect the application and the database from SQL injection and other web-based attacks.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use security groups and network ACLs to secure the database and application servers.
B. Use AWS WAF to protect the application. Use RDS parameter groups to configure the security settings.
C. Use AWS Network Firewall to protect the application and the database.
D. Use different database accounts in the application code for different functions. Avoid granting excessive privileges to the database users.
Show Answer
Correct Answer: B
Explanation: The requirement is to protect against SQL injection and other web-based attacks with the least operational overhead. AWS WAF is a managed service specifically designed to protect web applications from common exploits such as SQL injection and XSS, requiring minimal ongoing management. RDS parameter groups can enforce secure database configurations without custom code or infrastructure changes. Security groups/NACLs and Network Firewall operate at the network layer and do not inspect application-layer SQL injection attacks, while using multiple DB accounts increases application complexity and does not directly protect against web attacks.
Question 292
A company has an application that uses an Amazon DynamoDB table for storage. A solutions architect discovers that many requests to the table are not returning the latest data. The company's users have not reported any other issues with database performance. Latency is in an acceptable range.
Which design change should the solutions architect recommend?
A. Add read replicas to the table.
B. Use a global secondary index (GSI).
C. Request strongly consistent reads for the table.
D. Request eventually consistent reads for the table.
Show Answer
Correct Answer: C
Explanation: Amazon DynamoDB uses eventually consistent reads by default, which can return stale data shortly after writes. The issue described is that requests are not returning the latest data, while latency and overall performance are acceptable. Switching to strongly consistent reads ensures that read operations always return the most up-to-date data. Other options do not address data staleness: read replicas are asynchronous, GSIs do not affect consistency of base table reads, and eventually consistent reads would worsen the problem.
Question 293
A package delivery company has an application that uses Amazon EC2 instances and an Amazon Aurora MySQL DB cluster. As the application becomes more popular, EC2 instance usage increases only slightly. DB cluster usage increases at a much faster rate.
The company adds a read replica, which reduces the DB cluster usage for a short period of time. However, the load continues to increase. The operations that cause the increase in DB cluster usage are all repeated read statements that are related to delivery details. The company needs to alleviate the effect of repeated reads on the DB cluster.
Which solution will meet these requirements MOST cost-effectively?
A. Implement an Amazon ElastiCache for Redis cluster between the application and the DB cluster.
B. Add an additional read replica to the DB cluster.
C. Configure Aurora Auto Scaling for the Aurora read replicas.
D. Modify the DB cluster to have multiple writer instances.
Show Answer
Correct Answer: A
Explanation: The increased load is caused by repeated read queries for the same delivery details. The most cost-effective way to reduce repeated reads on an Aurora cluster is to cache those results. Placing Amazon ElastiCache for Redis between the application and the database offloads frequent reads from Aurora, reducing DB usage significantly. Adding more read replicas or enabling Aurora Auto Scaling still incurs database instance costs and does not eliminate redundant reads, while multiple writers are unnecessary for a read-heavy workload.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.