A company has registered its domain name with Amazon Route 53. The company uses Amazon API Gateway in the ca-central-1 Region as a public interface for its backend microservice APIs. Third-party services consume the APIs securely. The company wants to design its API Gateway URL with the company's domain name and corresponding certificate so that the third-party services can use HTTPS.
Which solution will meet these requirements?
A. Create stage variables in API Gateway with Name="Endpoint-URL" and Value="Company Domain Name" to overwrite the default URL. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM).
B. Create Route 53 DNS records with the company's domain name. Point the alias record to the Regional API Gateway stage endpoint. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the us-east-1 Region.
C. Create a Regional API Gateway endpoint. Associate the API Gateway endpoint with the company's domain name. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the same Region. Attach the certificate to the API Gateway endpoint. Configure Route 53 to route traffic to the API Gateway endpoint.
D. Create a Regional API Gateway endpoint. Associate the API Gateway endpoint with the company's domain name. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the us-east-1 Region. Attach the certificate to the API Gateway APIs. Create Route 53 DNS records with the company's domain name. Point an A record to the company's domain name.
Show Answer
Correct Answer: C
Explanation: For an API Gateway Regional custom domain, create a Regional endpoint, configure a custom domain name, use an ACM certificate in the same AWS Region as the API (ca-central-1), associate the certificate with the custom domain, and create a Route 53 alias record to the Regional API Gateway domain. Certificates in us-east-1 are required for edge-optimized custom domains backed by CloudFront, not Regional custom domains.
Question 11
A company runs multiple workloads on virtual machines (VMs) in an on-premises data center. The company is expanding rapidly. The on-premises data center is not able to scale fast enough to meet business needs. The company wants to migrate the workloads to AWS.
The migration is time sensitive. The company wants to use a lift-and-shift strategy for non-critical workloads.
Which combination of steps will meet these requirements? (Choose three.)
A. Use the AWS Schema Conversion Tool (AWS SCT) to collect data about the VMs.
B. Use AWS Application Migration Service. Install the AWS Replication Agent on the VMs.
C. Complete the initial replication of the VMs. Launch test instances to perform acceptance tests on the VMs.
D. Stop all operations on the VMs. Launch a cutover instance.
E. Use AWS App2Container (A2C) to collect data about the VMs.
F. Use AWS Database Migration Service (AWS DMS) to migrate the VMs.
Show Answer
Correct Answer: B, C, D
Explanation: For a time-sensitive lift-and-shift migration of on-premises VMs, AWS Application Migration Service (MGN) is the appropriate service. Install the AWS Replication Agent on the source VMs, complete initial replication, launch test instances for validation, and then perform the cutover by stopping the source workloads and launching cutover instances. AWS SCT and AWS DMS are for database migration, and App2Container is for containerization rather than VM lift-and-shift.
Question 12
A company runs an environment where data is stored in an Amazon S3 bucket. The objects are accessed frequently throughout the day. The company has strict da ta encryption requirements for data that is stored in the S3 bucket. The company currently uses AWS Key Management Service (AWS KMS) for encryption.
The company wants to optimize costs associated with encrypting S3 objects without making additional calls to AWS KMS.
Which solution will meet these requirements?
A. Use server-side encryption with Amazon S3 managed keys (SSE-S3).
B. Use an S3 Bucket Key for server-side encryption with AWS KMS keys (SSE-KMS) on the new objects.
C. Use client-side encryption with AWS KMS customer managed keys.
D. Use server-side encryption with customer-provided keys (SSE-C) stored in AWS KMS.
Show Answer
Correct Answer: B
Explanation: S3 Bucket Keys are specifically designed to reduce AWS KMS request costs for SSE-KMS by caching a bucket-level key in Amazon S3. This preserves the use of AWS KMS for encryption while significantly reducing the number of calls to AWS KMS for object encryption and decryption. SSE-S3 would eliminate KMS usage entirely, which does not align with the stated use of AWS KMS and strict KMS-based encryption requirements. Client-side encryption and SSE-C do not meet the goal of reducing KMS calls in this manner.
Question 12
A company wants to migrate its on-premises application to AWS. The application produces output files that vary in size from tens of gigabytes to hundreds of terabytes. The application data must be stored in a standard file system structure. The company wants a solution that scales automatically. is highly available, and requires minimum operational overhead.
Which solution will meet these requirements?
A. Migrate the application to run as containers on Amazon Elastic Container Service (Amazon ECS). Use Amazon S3 for storage.
B. Migrate the application to run as containers on Amazon Elastic Kubernetes Service (Amazon EKS). Use Amazon Elastic Block Store (Amazon EBS) for storage.
C. Migrate the application to Amazon EC2 instances in a Multi-AZ Auto Scaling group. Use Amazon Elastic File System (Amazon EFS) for storage.
D. Migrate the application to Amazon EC2 instances in a Multi-AZ Auto Scaling group. Use Amazon Elastic Block Store (Amazon EBS) for storage.
Show Answer
Correct Answer: C
Explanation: Amazon EFS provides a managed, highly available, automatically scaling POSIX file system, matching the requirement for a standard file system with minimal operational overhead. EBS is block storage and does not automatically scale or provide Multi-AZ file sharing. S3 is object storage rather than a standard file system. Running the application on EC2 instances in a Multi-AZ Auto Scaling group with EFS best satisfies the stated requirements.
Question 13
A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance. The analytics application is highly resilient and is designed to run in stateless mode.
The company notices that the application is showing signs of performance degradation during busy times and is presenting 5xx errors. The company needs to make the application scale seamlessly.
Which solution will meet these requirements MOST cost-effectively?
A. Create an Amazon Machine Image (AMI) of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use an Application Load Balancer to distribute the load across the two EC2 instances.
B. Create an Amazon Machine Image (AMI) of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use Amazon Route 53 weighted routing to distribute the load across the two EC2 instances.
C. Create an AWS Lambda function to stop the EC2 instance and change the instance type. Create an Amazon CloudWatch alarm to invoke the Lambda function when CPU utilization is more than 75%.
D. Create an Amazon Machine Image (AMI) of the web application. Apply the AMI to a launch template. Create an Auto Scaling group that includes the launch template. Configure the launch template to use a Spot Fleet. Attach an Application Load Balancer to the Auto Scaling group.
Show Answer
Correct Answer: D
Explanation: The application is stateless and needs to scale seamlessly under load. An Auto Scaling group behind an Application Load Balancer provides automatic horizontal scaling and health-based traffic distribution. Using a launch template with Spot capacity is the most cost-effective option among those presented. Option A adds only a fixed second instance and does not scale automatically. Option B uses Route 53 weighted routing, which is not a replacement for load balancing or automatic scaling. Option C performs vertical scaling by stopping and resizing the instance, causing downtime and not providing seamless scaling.
Question 14
A company uses AWS Systems Manager for routine management and patching of Amazon EC2 instances. The EC2 instances are in an IP address type target group behind an Application Load Balancer (ALB).
New security protocols require the company to remove EC2 instances from service during a patch. When the company attempts to follow the security protocol during the next patch, the company receives errors during the patching window.
Which combination of solutions will resolve the errors? (Choose two.)
A. Change the target type of the target group from IP address type to instance type.
B. Continue to use the existing Systems Manager document without changes because it is already optimized to handle instances that are in an IP address type target group behind an AL
C. Implement the AWSEC2-PatchLoadBalanacerInstance Systems Manager Automation document to manage the patching process.
D. Use Systems Manager Maintenance Windows to automatically remove the instances from service to patch the instances.
E. Configure Systems Manager State Manager to remove the instances from service and manage the patching schedule. Use ALB health checks to re-route traffic.
Show Answer
Correct Answer: A, C
Explanation: The AWSEC2-PatchLoadBalancerInstance Automation runbook deregisters and re-registers instances with a load balancer during patching. However, it operates on EC2 instance targets; the scenario specifies an ALB target group of type IP, which causes the errors. Changing the target group to instance type allows the runbook to manage registration correctly. Maintenance Windows schedule patching but do not by themselves resolve the incompatibility with IP target groups.
Question 15
A company tracks customer satisfaction by using surveys that the company hosts on its website. The surveys sometimes reach thousands of customers every hour. Survey results are currently sent in email messages to the company so company employees can manually review results and assess customer sentiment.
The company wants to automate the customer survey process. Survey results must be available for the previous 12 months.
Which solution will meet these requirements in the MOST scalable way?
A. Send the survey results data to an Amazon API Gateway endpoint that is connected to an Amazon Simple Queue Service (Amazon SQS) queue. Create an AWS Lambda function to poll the SQS queue, call Amazon Comprehend for sentiment analysis, and save the results to an Amazon DynamoDB table. Set the TTL for all records to 365 days in the future.
B. Send the survey results data to an API that is running on an Amazon EC2 instance. Configure the API to store the survey results as a new record in an Amazon DynamoDB table, call Amazon Comprehend for sentiment analysis, and save the results in a second DynamoDB table. Set the TTL for all records to 365 days in the future.
C. Write the survey results data to an Amazon S3 bucket. Use S3 Event Notifications to invoke an AWS Lambda function to read the data and call Amazon Rekognition for sentiment analysis. Store the sentiment analysis results in a second S3 bucket. Use S3 lifecycle policies on each bucket to expire objects after 365 days.
D. Send the survey results data to an Amazon API Gateway endpoint that is connected to an Amazon Simple Queue Service (Amazon SQS) queue. Configure the SQS queue to invoke an AWS Lambda function that calls Amazon Lex for sentiment analysis and saves the results to an Amazon DynamoDB table. Set the TTL for all records to 365 days in the future.
Show Answer
Correct Answer: A
Explanation: A is the most scalable serverless design. API Gateway accepts survey submissions, SQS buffers bursts of thousands of requests per hour, Lambda processes messages asynchronously, Amazon Comprehend is the correct AWS service for sentiment analysis, and DynamoDB stores results with TTL set to approximately 365 days to retain data for the required 12 months. B relies on EC2, adding operational overhead and reducing scalability. C incorrectly uses Rekognition, which is for image/video analysis rather than text sentiment. D incorrectly uses Amazon Lex, which is for conversational interfaces, not sentiment analysis.
Question 16
A company hosts its enterprise resource planning (ERP) system in the us-east-1 Region. The system runs on Amazon EC2 instances. Customers use a public API that is hosted on the EC2 instances to exchange information with the ERP system. International customers report slow API response times from their data centers.
Which solution will improve response times for the international customers MOST cost-effectively?
A. Create an AWS Direct Connect connection that has a public virtual interface (VIF) to provide connectivity from each customer's data center to us-east-1. Route customer API requests by using a Direct Connect gateway to the ERP system API.
B. Set up an Amazon CloudFront distribution in front of the API. Configure the CachingOptimized managed cache policy to provide improved cache efficiency.
C. Set up AWS Global Accelerator. Configure listeners for the necessary ports. Configure endpoint groups for the appropriate Regions to distribute traffic. Create an endpoint in the group for the API.
D. Use AWS Site-to-Site VPN to establish dedicated VPN tunnels between Regions and customer networks. Route traffic to the API over the VPN connections.
Show Answer
Correct Answer: C
Explanation: AWS Global Accelerator is the best fit for improving latency to a public, dynamic API used by international customers. It routes traffic onto the AWS global network from the nearest edge location without relying on caching, making it effective for dynamic ERP API requests (including reads and writes). CloudFront with the CachingOptimized policy is intended for cacheable content and is not appropriate as specified for a dynamic API. Direct Connect and Site-to-Site VPN require per-customer network connectivity and are neither practical nor cost-effective for a public API.
Question 17
A company runs its media rendering application on premises. The company wants to reduce storage costs and has moved all data to Amazon S3. The on-premises rendering application needs low-latency access to storage.
The company needs to design a storage solution for the application. The storage solution must maintain the desired application performance.
Which storage solution will meet these requirements in the MOST cost-effective way?
A. Use Mountpoint for Amazon S3 to access the data in Amazon S3 for the on-premises application.
B. Configure an Amazon S3 File Gateway to provide storage for the on-premises application.
C. Copy the data from Amazon S3 to Amazon FSx for Windows File Server. Configure an Amazon FSx File Gateway to provide storage for the on-premises application.
D. Configure an on-premises file server. Use the Amazon S3 API to connect to S3 storage. Configure the application to access the storage from the on-premises file server.
Show Answer
Correct Answer: B
Explanation: Amazon S3 File Gateway is designed for on-premises applications that need file-based, low-latency access to data stored in Amazon S3. It presents S3 as NFS/SMB shares while maintaining a local cache of frequently accessed data, reducing latency and preserving application performance. Mountpoint for Amazon S3 is intended primarily for applications with direct access to S3 and is not the appropriate on-premises caching solution. Using FSx adds unnecessary storage cost and complexity, and building a custom file server with S3 API lacks the optimized caching and integration provided by Storage Gateway.
Question 18
An online gaming company is transitioning user data storage to Amazon DynamoDB to support the company's growing user base. The current architecture includes DynamoDB tables that contain user profiles, achievements, and in-game transactions.
The company needs to design a robust, continuously available, and resilient DynamoDB architecture to maintain a seamless gaming experience for users.
Which solution will meet these requirements MOST cost-effectively?
A. Create DynamoDB tables in a single AWS Region. Use on-demand capacity mode. Use global tables to replicate data across multiple Regions.
B. Use DynamoDB Accelerator (DAX) to cache frequently accessed data. Deploy tables in a single AWS Region and enable auto scaling. Configure Cross-Region Replication manually to additional Regions.
C. Create DynamoDB tables in multiple AWS Regions. Use on-demand capacity mode. Use DynamoDB Streams for Cross-Region Replication between Regions.
D. Use DynamoDB global tables for automatic multi-Region replication. Deploy tables in multiple AWS Regions. Use provisioned capacity mode. Enable auto scaling.
Show Answer
Correct Answer: D
Explanation: DynamoDB global tables provide managed, active-active multi-Region replication for high availability and resilience with minimal operational overhead. Provisioned capacity with auto scaling is generally the most cost-effective choice for sustained workloads because it adjusts capacity while avoiding the higher per-request pricing of on-demand when utilization is significant. Option A uses global tables but on-demand is typically less cost-efficient for steady or growing production traffic. Option B is incorrect because DAX is a cache, not a multi-Region resilience solution, and manual replication increases complexity. Option C relies on DynamoDB Streams for custom cross-Region replication, which is more operationally complex than global tables and does not provide the same managed multi-active capability.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.