A manufacturing company runs its report generation application on AWS. The application generates each report in about 20 minutes. The application is built as a monolith that runs on a single Amazon EC2 instance. The application requires frequent updates to its tightly coupled modules. The application becomes complex to maintain as the company adds new features.
Each time the company patches a software module, the application experiences downtime. Report generation must restart from the beginning after any interruptions. The company wants to redesign the application so that the application can be flexible, scalable, and gradually improved. The company wants to minimize application downtime.
Which solution will meet these requirements?
A. Run the application on AWS Lambda as a single function with maximum provisioned concurrency.
B. Run the application on Amazon EC2 Spot Instances as microservices with a Spot Fleet default allocation strategy.
C. Run the application on Amazon Elastic Container Service (Amazon ECS) as microservices with service auto scaling.
D. Run the application on AWS Elastic Beanstalk as a single application environment with an all-at-once deployment strategy.
Show Answer
Correct Answer: C
Explanation: Running the application as microservices on Amazon ECS with service auto scaling decouples tightly coupled modules, allowing independent updates and deployments with minimal downtime. ECS supports rolling deployments and scaling, improving maintainability and availability. Lambda is not suitable as a single monolithic function for 20-minute jobs and modularity. EC2 Spot Instances risk interruptions and are not appropriate for minimizing downtime of long-running report generation. Elastic Beanstalk with an all-at-once deployment strategy still deploys a monolith and causes downtime.
Question 304
A company is migrating a large amount of data from on-premises storage to AWS. Windows, Mac, and Linux based Amazon EC2 instances in the same AWS Region will access the data by using SMB and NFS storage protocols. The company will access a portion of the data routinely. The company will access the remaining data infrequently.
The company needs to design a solution to host the data.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an Amazon Elastic File System (Amazon EFS) volume that uses EFS Intelligent-Tiering. Use AWS DataSync to migrate the data to the EFS volume.
B. Create an Amazon FSx for ONTAP instance. Create an FSx for ONTAP file system with a root volume that uses the auto tiering policy. Migrate the data to the FSx for ONTAP volume.
C. Create an Amazon S3 bucket that uses S3 Intelligent-Tiering. Migrate the data to the S3 bucket by using an AWS Storage Gateway Amazon S3 File Gateway.
D. Create an Amazon FSx for OpenZFS file system. Migrate the data to the new volume.
Show Answer
Correct Answer: B
Explanation: Amazon FSx for NetApp ONTAP natively supports both SMB and NFS, allowing Windows, macOS, and Linux EC2 instances in the same AWS Region to access the same data. Its automatic tiering policy moves cold data to lower-cost capacity storage while keeping frequently accessed data on SSDs, satisfying the mixed access pattern with minimal operational overhead. Amazon EFS does not provide SMB access, FSx for OpenZFS does not provide SMB, and S3 File Gateway is intended primarily for on-premises file access to S3 rather than as the shared file service for EC2 instances in AWS.
Question 305
A company’s applications use Apache Hadoop and Apache Spark to process data on premises. The existing infrastructure is not scalable and is complex to manage.
A solutions architect must design a scalable solution that reduces operational complexity. The solution must keep the data processing on premises.
Which solution will meet these requirements?
A. Use AWS Site-to-Site VPN to access the on-premises Hadoop Distributed File System (HDFS) data and application. Use an Amazon EMR cluster to process the data.
B. Use AWS DataSync to connect to the on-premises Hadoop Distributed File System (HDFS) cluster. Create an Amazon EMR cluster to process the data.
C. Migrate the Apache Hadoop application and the Apache Spark application to Amazon EMR clusters on AWS Outposts. Use the EMR clusters to process the data.
D. Use an AWS Snowball device to migrate the data to an Amazon S3 bucket. Create an Amazon EMR cluster to process the data.
Show Answer
Correct Answer: C
Explanation: The requirement is to keep data processing on premises while reducing operational complexity and improving scalability. Amazon EMR on AWS Outposts allows Hadoop and Spark workloads to run on managed EMR infrastructure that is physically located in the customer's on-premises environment. Options A, B, and D all rely on running EMR in the AWS Region, which does not keep the data processing on premises.
Question 306
A company wants to migrate an on-premises legacy application to AWS. The application ingests customer order files from an on-premises enterprise resource planning (ERP) system. The application then uploads the files to an SFTP server. The application uses a scheduled job that checks for order files every hour.
The company already has an AWS account that has connectivity to the on-premises network. The new application on AWS must support integration with the existing ERP system. The new application must be secure and resilient and must use the SFTP protocol to process orders from the ERP system immediately.
Which solution will meet these requirements?
A. Create an AWS Transfer Family SFTP internet-facing server in two Availability Zones. Use Amazon S3 storage. Create an AWS Lambda function to process order files. Use S3 Event Notifications to send s3:ObjectCreated:* events to the Lambda function.
B. Create an AWS Transfer Family SFTP internet-facing server in one Availability Zone. Use Amazon Elastic File System (Amazon EFS) storage. Create an AWS Lambda function to process order files. Use a Transfer Family managed workflow to invoke the Lambda function.
C. Create an AWS Transfer Family SFTP internal server in two Availability Zones. Use Amazon Elastic File System (Amazon EFS) storage. Create an AWS Step Functions state machine to process order files. Use Amazon EventBridge Scheduler to invoke the state machine to periodically check Amazon EFS for order files.
D. Create an AWS Transfer Family SFTP internal server in two Availability Zones. Use Amazon S3 storage. Create an AWS Lambda function to process order files. Use a Transfer Family managed workflow to invoke the Lambda function.
Show Answer
Correct Answer: D
Explanation: The company already has private connectivity between its on-premises environment and AWS, so an internal AWS Transfer Family SFTP endpoint is appropriate and more secure than an internet-facing endpoint. The requirement is to process files immediately after transfer, making a Transfer Family managed workflow that directly invokes a Lambda function a better fit than scheduled polling or relying on S3 event notifications. Using S3 as the backend provides durable, resilient storage, while deploying the Transfer Family server across two Availability Zones meets the resilience requirement.
Question 307
A company runs a real-time data ingestion solution on AWS. The solution consists of the most recent version of Amazon Managed Streaming for Apache Kafka (Amazon MSK). The solution is deployed in a VPC in private subnets across three Availability Zones.
A solutions architect needs to redesign the data ingestion solution to be publicly available over the internet. The data in transit must also be encrypted.
Which solution will meet these requirements with the MOST operational efficiency?
A. Configure public subnets in the existing VPC. Deploy an MSK cluster in the public subnets. Update the MSK cluster security settings to enable mutual TLS authentication.
B. Create a new VPC that has public subnets. Deploy an MSK cluster in the public subnets. Update the MSK cluster security settings to enable mutual TLS authentication.
C. Deploy an Application Load Balancer (ALB) that uses private subnets. Configure an ALB security group inbound rule to allow inbound traffic from the VPC CIDR block for HTTPS protocol.
D. Deploy a Network Load Balancer (NLB) that uses private subnets. Configure an NLB listener for HTTPS communication over the internet.
Show Answer
Correct Answer: A
Explanation: Amazon MSK supports public access by placing brokers in public subnets and enabling an authenticated/encrypted access method such as mutual TLS. Creating a new VPC is unnecessary and adds operational overhead. ALB/NLB are not the recommended mechanism to expose MSK publicly, and the options shown keep the load balancers in private subnets, which would not provide internet access to the brokers.
Question 308
A company uses Amazon EC2, AWS Fargate, and AWS Lambda to run multiple workloads in the company's AWS account. The company wants to fully make use of its Compute Savings Plans. The company wants to receive notification when coverage of the Compute Savings Plans drops.
Which solution will meet these requirements with the MOST operational efficiency?
A. Create a daily budget for the Savings Plans by using AWS Budgets. Configure the budget with a coverage threshold to send notifications to the appropriate email message recipients.
B. Create a Lambda function that runs a coverage report against the Savings Plans. Use Amazon Simple Email Service (Amazon SES) to email the report to the appropriate email message recipients.
C. Create an AWS Budgets report for the Savings Plans budget. Set the frequency to daily.
D. Create a Savings Plans alert subscription. Enable all notification options. Enter an email address to receive notifications.
Show Answer
Correct Answer: A
Explanation: AWS Budgets supports Savings Plans coverage and utilization budgets, including notifications when coverage drops below a defined threshold. This directly meets the requirement with minimal operational overhead. The Lambda/SES option is custom and less efficient, a budget report alone does not provide threshold-based alerts, and Savings Plans alert subscriptions are for expiration and queued purchases, not coverage drops.
Question 309
A company runs a highly available web application on Amazon EC2 instances behind an Application Load Balancer. The company uses Amazon CloudWatch metrics.
As the traffic to the web application increases, some EC2 instances become overloaded with many outstanding requests. The CloudWatch metrics show that the number of requests processed and the time to receive the responses from some EC2 instances are both higher compared to other EC2 instances. The company does not want new requests to be forwarded to the EC2 instances that are already overloaded.
Which solution will meet these requirements?
A. Use the round robin routing algorithm based on the RequestCountPerTarget and ActiveConnectionCount CloudWatch metrics.
B. Use the least outstanding requests algorithm based on the RequestCountPerTarget and ActiveConnectionCount CloudWatch metrics.
C. Use the round robin routing algorithm based on the RequestCount and TargetResponseTime CloudWatch metrics.
D. Use the least outstanding requests algorithm based on the RequestCount and TargetResponseTime CloudWatch metrics.
Show Answer
Correct Answer: B
Explanation: The requirement is to stop sending new requests to overloaded EC2 targets. Application Load Balancer's least outstanding requests routing algorithm is designed for this by routing new requests to the target with the fewest in-progress requests. Among the metric pairings, RequestCountPerTarget is target-specific, whereas RequestCount is load balancer-wide. ActiveConnectionCount is also more relevant than overall RequestCount for identifying load distribution characteristics. Therefore, the best match is least outstanding requests with RequestCountPerTarget and ActiveConnectionCount.
Question 310
A company is running a photo hosting service in the us-east-1 Region. The service enables users across multiple countries to upload and view photos. Some photos are heavily viewed for months, and others are viewed for less than a week. The application allows uploads of up to 20 MB for each photo. The service uses the photo metadata to determine which photos to display to each user.
Which solution provides the appropriate user access MOST cost-effectively?
A. Store the photos in Amazon DynamoDB. Turn on DynamoDB Accelerator (DAX) to cache frequently viewed items.
B. Store the photos in the Amazon S3 Intelligent-Tiering storage class. Store the photo metadata and its S3 location in DynamoD
C. Store the photos in the Amazon S3 Standard storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Use the object tags to keep track of metadata.
D. Store the photos in the Amazon S3 Glacier storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Glacier Deep Archive storage class. Store the photo metadata and its S3 location in Amazon OpenSearch Service.
Show Answer
Correct Answer: B
Explanation: Amazon S3 is the appropriate storage for photo objects up to 20 MB. Because access patterns are unpredictable (some photos remain popular for months while others are rarely accessed after a week), S3 Intelligent-Tiering automatically optimizes storage costs without requiring lifecycle rules based on age. Storing photo metadata and the S3 object location in DynamoDB provides low-latency lookups for the application. DynamoDB is not suitable for storing large photo objects, lifecycle-by-age to Standard-IA can move frequently accessed older objects too early, and Glacier classes are inappropriate for interactive photo viewing.
Question 311
A company is designing a web application on AWS. The application will use a VPN connection between the company’s existing data centers and the company's VPCs.
The company uses Amazon Route 53 as its DNS service. The application must use private DNS records to communicate with the on-premises services from a VPC.
Which solution will meet these requirements in the MOST secure manner?
A. Create a Route 53 Resolver outbound endpoint. Create a resolver rule. Associate the resolver rule with the VPC.
B. Create a Route 53 Resolver inbound endpoint. Create a resolver rule. Associate the resolver rule with the VPC.
C. Create a Route 53 private hosted zone. Associate the private hosted zone with the VP
D. Create a Route 53 public hosted zone. Create a record for each service to allow service communication
Show Answer
Correct Answer: A
Explanation: To allow resources in a VPC to resolve private DNS names for on-premises services over a VPN, configure a Route 53 Resolver outbound endpoint and a forwarding (resolver) rule for the relevant domain, then associate the rule with the VPC. Outbound endpoints forward DNS queries from the VPC to the on-premises DNS servers. Inbound endpoints are for queries originating on premises toward AWS. Private hosted zones host AWS-managed private records and do not by themselves resolve names served by on-premises DNS.
Question 312
An ecommerce company runs its application on AWS. The application uses an Amazon Aurora PostgreSQL cluster in Multi-AZ mode for the underlying database. During a recent promotional campaign, the application experienced heavy read load and write load. Users experienced timeout issues when they attempted to access the application.
A solutions architect needs to make the application architecture more scalable and highly available.
Which solution will meet these requirements with the LEAST downtime?
A. Create an Amazon EventBridge rule that has the Aurora cluster as a source. Create an AWS Lambda function to log the state change events of the Aurora cluster. Add the Lambda function as a target for the EventBridge rule. Add additional reader nodes to fail over to.
B. Modify the Aurora cluster and activate the zero-downtime restart (ZDR) feature. Use Database Activity Streams on the cluster to track the cluster status.
C. Add additional reader instances to the Aurora cluster. Create an Amazon RDS Proxy target group for the Aurora cluster.
D. Create an Amazon ElastiCache for Redis cache. Replicate data from the Aurora cluster to Redis by using AWS Database Migration Service (AWS DMS) with a write-around approach.
Show Answer
Correct Answer: C
Explanation: Adding Aurora reader instances scales read traffic, and Amazon RDS Proxy reduces connection management overhead and mitigates connection exhaustion that can cause application timeouts during traffic spikes. The other options do not directly improve scalability for the observed workload: EventBridge/Lambda logging does not increase capacity, zero-downtime restart is unrelated to sustained read/write scaling, and using DMS to populate Redis is not an appropriate caching architecture for this scenario and would not address database write load or connection pressure.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.