A company stores data in an on-premises Oracle relational database. The company needs to make the data available in Amazon Aurora PostgreSQL for analysis. The company uses an AWS Site-to-Site VPN connection to connect its on-premises network to AWS.
The company must capture the changes that occur to the source database during the migration to Aurora PostgreSQL.
Which solution will meet these requirements?
A. Use the AWS Schema Conversion Tool (AWS SCT) to convert the Oracle schema to Aurora PostgreSQL schema. Use the AWS Database Migration Service (AWS DMS) full-load migration task to migrate the data.
B. Use AWS DataSync to migrate the data to an Amazon S3 bucket. Import the S3 data to Aurora PostgreSQL by using the Aurora PostgreSQL aws_s3 extension.
C. Use the AWS Schema Conversion Tool (AWS SCT) to convert the Oracle schema to Aurora PostgreSQL schema. Use AWS Database Migration Service (AWS DMS) to migrate the existing data and replicate the ongoing changes.
D. Use an AWS Snowball device to migrate the data to an Amazon S3 bucket. Import the S3 data to Aurora PostgreSQL by using the Aurora PostgreSQL aws_s3 extension.
Show Answer
Correct Answer: C
Explanation: Migrating from Oracle to Aurora PostgreSQL requires schema conversion because the database engines differ, making AWS Schema Conversion Tool (AWS SCT) appropriate. To capture ongoing changes during migration, AWS Database Migration Service (AWS DMS) must be configured for full load plus change data capture (CDC), which migrates existing data and continuously replicates source database changes until cutover. A full-load-only task would not capture ongoing changes, and DataSync or Snowball do not provide database CDC.
Question 257
A company’s application is deployed on Amazon EC2 instances and uses AWS Lambda functions for an event-driven architecture. The company uses nonproduction development environments in a different AWS account to test new features before the company deploys the features to production.
The production instances show constant usage because of customers in different time zones. The company uses nonproduction instances only during business hours on weekdays. The company does not use the nonproduction instances on the weekends. The company wants to optimize the costs to run its application on AWS.
Which solution will meet these requirements MOST cost-effectively?
A. Use On-Demand Instances for the production instances. Use Dedicated Hosts for the nonproduction instances on weekends only.
B. Use Reserved Instances for the production instances and the nonproduction instances. Shut down the nonproduction instances when not in use.
C. Use Compute Savings Plans for the production instances. Use On-Demand Instances for the nonproduction instances. Shut down the nonproduction instances when not in use.
D. Use Dedicated Hosts for the production instances. Use EC2 Instance Savings Plans for the nonproduction instances.
Show Answer
Correct Answer: C
Explanation: Production EC2 instances run continuously, making a Compute Savings Plan a strong cost-optimization choice because it provides savings while offering flexibility across instance families, sizes, Regions, and even Lambda usage. The nonproduction environment runs only during weekday business hours, so committing with Reserved Instances is not cost-effective; using On-Demand Instances and shutting them down when idle minimizes costs. Dedicated Hosts are unnecessary because there is no licensing or compliance requirement.
Question 258
A company hosts an application used to upload files to an Amazon S3 bucket. Once uploaded, the files are processed to extract metadata, which takes less than 5 seconds. The volume and frequency of the uploads varies from a few files each hour to hundreds of concurrent uploads. The company has asked a solutions architect to design a cost-effective architecture that will meet these requirements.
What should the solutions architect recommend?
A. Configure AWS CloudTrail trails to log S3 API calls. Use AWS AppSync to process the files.
B. Configure an object-created event notification within the S3 bucket to invoke an AWS Lambda function to process the files.
C. Configure Amazon Kinesis Data Streams to process and send data to Amazon S3. Invoke an AWS Lambda function to process the files.
D. Configure an Amazon Simple Notification Service (Amazon SNS) topic to process the files uploaded to Amazon S3. Invoke an AWS Lambda function to process the files.
Show Answer
Correct Answer: B
Explanation: Amazon S3 Event Notifications can directly invoke an AWS Lambda function when an object is created. Lambda scales automatically from a few events to hundreds of concurrent invocations, is cost-effective for short processing tasks (less than 5 seconds), and avoids unnecessary services. CloudTrail/AppSync are not intended for this workflow, Kinesis Data Streams is for streaming data rather than S3 object uploads, and SNS is optional fan-out but not needed for direct S3-to-Lambda processing.
Question 259
A pharmaceutical company is developing a new drug. The volume of data that the company generates has grown exponentially over the past few months. The company's researchers regularly require a subset of the entire dataset to be immediately available with minimal lag. However, the entire dataset does not need to be accessed on a daily basis. All the data currently resides in on-premises storage arrays, and the company wants to reduce ongoing capital expenses.
Which storage solution should a solutions architect recommend to meet these requirements?
A. Run AWS DataSync as a scheduled cron job to migrate the data to an Amazon S3 bucket on an ongoing basis.
B. Deploy an AWS Storage Gateway file gateway with an Amazon S3 bucket as the target storage. Migrate the data to the Storage Gateway appliance.
C. Deploy an AWS Storage Gateway volume gateway with cached volumes with an Amazon S3 bucket as the target storage. Migrate the data to the Storage Gateway appliance.
D. Configure an AWS Site-to-Site VPN connection from the on-premises environment to AWS. Migrate data to an Amazon Elastic File System (Amazon EFS) file system.
Show Answer
Correct Answer: C
Explanation: Cached volumes in AWS Storage Gateway store the primary dataset in Amazon S3 while keeping frequently accessed data cached locally for low-latency access. This matches the requirement that only a regularly used subset be immediately available while reducing on-premises storage costs. File Gateway is intended for file shares (NFS/SMB), whereas the question refers generally to storage arrays and emphasizes caching a subset of the dataset.
Question 260
A company has a business-critical application that runs on Amazon EC2 instances. The application stores data in an Amazon DynamoDB table. The company must be able to revert the table to any point within the last 24 hours.
Which solution meets these requirements with the LEAST operational overhead?
A. Configure point-in-time recovery for the table.
B. Use AWS Backup for the table.
C. Use an AWS Lambda function to make an on-demand backup of the table every hour.
D. Turn on streams on the table to capture a log of all changes to the table in the last 24 hours. Store a copy of the stream in an Amazon S3 bucket.
Show Answer
Correct Answer: A
Explanation: Point-in-time recovery (PITR) is the native DynamoDB feature designed to restore a table to any second within the retention window (up to 35 days, which includes the last 24 hours). It requires minimal operational overhead because AWS continuously maintains the recovery data automatically. AWS Backup and scheduled on-demand backups do not provide arbitrary point-in-time restoration within the last 24 hours, and DynamoDB Streams capture changes but are not a point-in-time restore mechanism.
Question 261
A company’s developers want a secure way to gain SSH access on the company's Amazon EC2 instances that run the latest version of Amazon Linux. The developers work remotely and in the corporate office.
The company wants to use AWS services as a part of the solution. The EC2 instances are hosted in a VPC private subnet and access the internet through a NAT gateway that is deployed in a public subnet.
What should a solutions architect do to meet these requirements MOST cost-effectively?
A. Create a bastion host in the same subnet as the EC2 instances. Grant the ec2:CreateVpnConnection IAM permission to the developers. Install EC2 Instance Connect so that the developers can connect to the EC2 instances.
B. Create an AWS Site-to-Site VPN connection between the corporate network and the VPC. Instruct the developers to use the Site-to-Site VPN connection to access the EC2 instances when the developers are on the corporate network. Instruct the developers to set up another VPN connection for access when they work remotely.
C. Create a bastion host in the public subnet of the VPConfigure the security groups and SSH keys of the bastion host to only allow connections and SSH authentication from the developers’ corporate and remote networks. Instruct the developers to connect through the bastion host by using SSH to reach the EC2 instances.
D. Attach the AmazonSSMManagedInstanceCore IAM policy to an IAM role that is associated with the EC2 instances. Instruct the developers to use AWS Systems Manager Session Manager to access the EC2 instances.
Show Answer
Correct Answer: D
Explanation: AWS Systems Manager Session Manager provides secure shell access to EC2 instances in private subnets without requiring a bastion host, inbound SSH ports, or VPN connectivity. Amazon Linux supports the SSM Agent, and attaching the AmazonSSMManagedInstanceCore policy to the instance IAM role enables Session Manager. Developers are granted IAM permissions to start sessions, making this both more secure and more cost-effective than maintaining bastion hosts or VPN infrastructure.
Question 262
A development team is collaborating with another company to create an integrated product. The other company needs to access an Amazon Simple Queue Service (Amazon SQS) queue that is contained in the development team's account. The other company wants to poll the queue without giving up its own account permissions to do so.
How should a solutions architect provide access to the SQS queue?
A. Create an instance profile that provides the other company access to the SQS queue.
B. Create an IAM policy that provides the other company access to the SQS queue.
C. Create an SQS access policy that provides the other company access to the SQS queue.
D. Create an Amazon Simple Notification Service (Amazon SNS) access policy that provides the other company access to the SQS queue.
Show Answer
Correct Answer: C
Explanation: Amazon SQS supports resource-based access policies (queue access policies) that allow you to grant cross-account permissions directly on the queue. This lets the other company's IAM principals access the queue while continuing to use their own account credentials and permissions. Instance profiles are for EC2, IAM policies alone do not grant cross-account access to another account's resources without a corresponding resource policy or role assumption, and SNS policies apply to SNS topics, not SQS queues.
Question 263
A company wants to migrate its three-tier application from on premises to AWS. The web tier and the application tier are running on third-party virtual machines (VMs). The database tier is running on MySQL.
The company needs to migrate the application by making the fewest possible changes to the architecture. The company also needs a database solution that can restore data to a specific point in time.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate the web tier and the application tier to Amazon EC2 instances in private subnets. Migrate the database tier to Amazon RDS for MySQL in private subnets.
B. Migrate the web tier to Amazon EC2 instances in public subnets. Migrate the application tier to EC2 instances in private subnets. Migrate the database tier to Amazon Aurora MySQL in private subnets.
C. Migrate the web tier to Amazon EC2 instances in public subnets. Migrate the application tier to EC2 instances in private subnets. Migrate the database tier to Amazon RDS for MySQL in private subnets.
D. Migrate the web tier and the application tier to Amazon EC2 instances in public subnets. Migrate the database tier to Amazon Aurora MySQL in public subnets.
Show Answer
Correct Answer: C
Explanation: Using EC2 for the existing VM-based web and application tiers requires minimal architectural change. The web tier should be in public subnets, the application tier in private subnets, and Amazon RDS for MySQL preserves the existing MySQL engine while providing managed backups and point-in-time recovery with less migration change than moving to Aurora. RDS for MySQL supports point-in-time restore when automated backups are enabled.
Sources:
https://codingnconcepts.com/aws/aws-certified-solutions-architect-associate-exam-questions
Question 264
A company has 150 TB of archived image data stored on-premises that needs to be moved to the AWS Cloud within the next month. The company’s current network connection allows up to 100 Mbps uploads for this purpose during the night only.
What is the MOST cost-effective mechanism to move this data and meet the migration deadline?
A. Use AWS Snowmobile to ship the data to AWS.
B. Order multiple AWS Snowball devices to ship the data to AWS.
C. Enable Amazon S3 Transfer Acceleration and securely upload the data.
D. Create an Amazon S3 VPC endpoint and establish a VPN to upload the data.
Show Answer
Correct Answer: B
Explanation: The correct answer is B. Transferring 150 TB over a 100 Mbps connection available only at night would not meet the one-month deadline. At 100 Mbps continuously, 150 TB would take well over four months, and night-only uploads would take even longer. AWS Snowball is designed for data transfers from terabytes up to multiple petabytes and is the most cost-effective offline transfer service for this data size. Snowmobile is intended for migrations on the order of 10 PB or more, making it excessive and more expensive. S3 Transfer Acceleration improves internet uploads but is still constrained by the available bandwidth. An S3 VPC endpoint with a VPN does not increase internet bandwidth and is not applicable for on-premises data transfer speed.
Question 265
A company stores multiple Amazon Machine Images (AMIs) in an AWS account to launch its Amazon EC2 instances. The AMIs contain critical data and configurations that are necessary for the company’s operations. The company wants to implement a solution that will recover accidentally deleted AMIs quickly and efficiently.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create Amazon Elastic Block Store (Amazon EBS) snapshots of the AMIs. Store the snapshots in a separate AWS account.
B. Copy all AMIs to another AWS account periodically.
C. Create a retention rule in Recycle Bin.
D. Upload the AMIs to an Amazon S3 bucket that has Cross-Region Replication.
Show Answer
Correct Answer: C
Explanation: Amazon EC2 Recycle Bin supports retention and restoration of accidentally deleted EBS-backed AMIs. By creating a retention rule, deleted AMIs are retained for the configured period and can be restored quickly with minimal operational effort. The other options require ongoing copying or manual backup management and have higher operational overhead.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.