A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to run an application. The company creates one snapshot of each EBS volume every day to meet compliance requirements. The company wants to implement an architecture that prevents the accidental deletion of EBS volume snapshots. The solution must not change the administrative rights of the storage administrator user.
Which solution will meet these requirements with the LEAST administrative effort?
A. Create an IAM role that has permission to delete snapshots. Attach the role to a new EC2 instance. Use the AWS CLI from the new EC2 instance to delete snapshots.
B. Create an IAM policy that denies snapshot deletion. Attach the policy to the storage administrator user.
C. Add tags to the snapshots. Create retention rules in Recycle Bin for EBS snapshots that have the tags.
D. Lock the EBS snapshots to prevent deletion.
Show Answer
Correct Answer: D
Explanation: Amazon EBS Snapshot Lock is a native feature that prevents snapshots from being deleted or modified for a specified retention period, even by administrators. It directly addresses accidental deletion, requires minimal setup, and does not require changing the storage administrator’s IAM permissions. Recycle Bin (option C) only enables recovery after deletion, not prevention, and IAM-based options change permissions or add operational complexity.
Question 346
A company runs a web application on Amazon EC2 instances in an Auto Scaling group. The application uses a database that runs on an Amazon RDS for PostgreSQL DB instance. The application performs slowly when traffic increases. The database experiences a heavy read load during periods of high traffic.
Which actions should a solutions architect take to resolve these performance issues? (Choose two.)
A. Turn on auto scaling for the DB instance.
B. Create a read replica for the DB instance. Configure the application to send read traffic to the read replica.
C. Convert the DB instance to a Multi-AZ DB instance deployment. Configure the application to send read traffic to the standby DB instance.
D. Create an Amazon ElastiCache cluster. Configure the application to cache query results in the ElastiCache cluster.
E. Configure the Auto Scaling group subnets to ensure that the EC2 instances are provisioned in the same Availability Zone as the DB instance.
Show Answer
Correct Answer: B, D
Explanation: The performance issue is caused by heavy read load on the RDS PostgreSQL instance during traffic spikes. Creating a read replica allows read queries to be offloaded from the primary DB, directly addressing read scalability. Adding Amazon ElastiCache enables caching of frequently accessed data, significantly reducing repeated database reads. Auto scaling the DB instance is not supported in that manner, Multi-AZ is for availability not read scaling, and placing EC2 instances in the same AZ does not reduce database read load.
Question 347
A company runs an SMB file server in its data center. The file server stores large files that the company frequently accesses for up to 7 days after the file creation date. After 7 days, the company needs to be able to access the files with a maximum retrieval time of 24 hours.
Which solution will meet these requirements?
A. Use AWS DataSync to copy data that is older than 7 days from the SMB file server to AWS.
B. Create an Amazon S3 File Gateway to increase the company's storage space. Create an S3 Lifecycle policy to transition the data to S3 Glacier Deep Archive after 7 days.
C. Create an Amazon FSx File Gateway to increase the company's storage space. Create an Amazon S3 Lifecycle policy to transition the data after 7 days.
D. Configure access to Amazon S3 for each user. Create an S3 Lifecycle policy to transition the data to S3 Glacier Flexible Retrieval after 7 days.
Show Answer
Correct Answer: B
Explanation: The company needs SMB access for frequently used files and then low-cost storage with retrieval within 24 hours after 7 days. Amazon S3 File Gateway supports SMB access and stores data in Amazon S3. An S3 Lifecycle policy can transition objects after 7 days to S3 Glacier Deep Archive, which supports retrieval within 12 hours, meeting the 24-hour requirement. Other options either do not address ongoing SMB access, do not correctly store data in S3 with lifecycle policies, or do not define a valid migration mechanism.
Question 348
A marketing company receives a large amount of new clickstream data in Amazon S3 from a marketing campaign. The company needs to analyze the clickstream data in Amazon S3 quickly. Then the company needs to determine whether to process the data further in the data pipeline.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create external tables in a Spark catalog. Configure jobs in AWS Glue to query the data.
B. Configure an AWS Glue crawler to crawl the data. Configure Amazon Athena to query the data.
C. Create external tables in a Hive metastore. Configure Spark jobs in Amazon EMR to query the data.
D. Configure an AWS Glue crawler to crawl the data. Configure Amazon Kinesis Data Analytics to use SQL to query the data.
Show Answer
Correct Answer: B
Explanation: The requirement is to quickly analyze clickstream data stored in Amazon S3 with the least operational overhead. Using an AWS Glue crawler to infer schema and Amazon Athena to query the data is fully serverless and requires no cluster or job management. Athena can query data directly in S3 using SQL, making it ideal for fast, ad hoc analysis to decide whether further processing is needed. The other options involve managing Spark/EMR jobs or using Kinesis Data Analytics, which is designed for streaming data rather than data already at rest in S3.
Question 349
A company runs its applications on Amazon EC2 instances. The company performs periodic financial assessments of its AWS costs. The company recently identified unusual spending.
The company needs a solution to prevent unusual spending. The solution must monitor costs and notify responsible stakeholders in the event of unusual spending.
Which solution will meet these requirements?
A. Use an AWS Budgets template to create a zero spend budget.
B. Create an AWS Cost Anomaly Detection monitor in the AWS Billing and Cost Management console.
C. Create AWS Pricing Calculator estimates for the current running workload pricing details.
D. Use Amazon CloudWatch to monitor costs and to identify unusual spending.
Show Answer
Correct Answer: B
Explanation: AWS Cost Anomaly Detection is purpose-built to identify unusual spending patterns using machine learning and to send alerts to stakeholders when anomalies occur. This directly meets the requirement to monitor costs and notify responsible parties about unusual spending. Other options do not proactively detect anomalies or provide automated alerts for unexpected cost changes.
Question 350
A company performs tests on an application that uses an Amazon DynamoDB table. The tests run for 4 hours once a week. The company knows how many read and write operations the application performs to the table each second during the tests. The company does not currently use DynamoDB for any other use case. A solutions architect needs to optimize the costs for the table.
Which solution will meet these requirements?
A. Choose on-demand mode. Update the read and write capacity units appropriately.
B. Choose provisioned mode. Update the read and write capacity units appropriately.
C. Purchase DynamoDB reserved capacity for a 1-year term.
D. Purchase DynamoDB reserved capacity for a 3-year term.
Show Answer
Correct Answer: B
Explanation: The workload is predictable because the company knows the exact read and write operations per second during the tests. DynamoDB provisioned mode is more cost‑effective than on‑demand for predictable workloads, and capacity can be increased during the 4‑hour test window and reduced afterward. On‑demand mode does not allow setting capacity units, and reserved capacity would be wasteful given the table is used only a few hours per week.
Question 351
A startup company is hosting a website for its customers on an Amazon EC2 instance. The website consists of a stateless Python application and a MySQL database. The website serves only a small amount of traffic. The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture. The company cannot modify the application code.
Which combination of actions should a solutions architect take to achieve high availability for the website? (Choose two.)
A. Provision an internet gateway in each Availability Zone in use.
B. Migrate the database to an Amazon RDS for MySQL Multi-AZ DB instance.
C. Migrate the database to Amazon DynamoDB, and enable DynamoDB auto scaling.
D. Use AWS DataSync to synchronize the database data across multiple EC2 instances.
E. Create an Application Load Balancer to distribute traffic to an Auto Scaling group of EC2 instances that are distributed across two Availability Zones.
Show Answer
Correct Answer: B, E
Explanation: High availability requires eliminating single points of failure for both the application and the database without changing application code. Using an Application Load Balancer with an Auto Scaling group across multiple Availability Zones provides fault tolerance for the stateless Python application. Migrating the MySQL database to Amazon RDS for MySQL with Multi-AZ enables synchronous standby replication and automatic failover, ensuring database availability. Other options either require code changes, do not provide true high availability, or are irrelevant.
Question 352
A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure. The company's security team must be able to track and audit all incremental changes to the infrastructure.
Which solution will meet these requirements?
A. Use AWS Organizations to set up the infrastructure. Use AWS Config to track changes.
B. Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes.
C. Use AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.
D. Use AWS CloudFormation to set up the infrastructure. Use AWS Service Catalog to track changes.
Show Answer
Correct Answer: B
Explanation: The requirement for automation to provision and secure infrastructure is best met by infrastructure as code, which AWS CloudFormation provides. The need to track and audit all incremental configuration changes is fulfilled by AWS Config, which records resource configuration changes and supports compliance auditing. AWS Organizations and Service Catalog do not natively track incremental configuration changes across resources.
Question 353
A company is relocating its data center and wants to securely transfer 50 TB of data to AWS within 2 weeks. The existing data center has a Site-to-Site VPN connection to AWS that is 90% utilized.
Which AWS service should a solutions architect use to meet these requirements?
A. AWS DataSync with a VPC endpoint
B. AWS Direct Connect
C. AWS Snowball Edge Storage Optimized
D. AWS Storage Gateway
Show Answer
Correct Answer: C
Explanation: The company must transfer a large volume of data (50 TB) within a short time frame (2 weeks), and the existing Site-to-Site VPN is already 90% utilized, leaving insufficient network bandwidth for an online transfer. AWS Snowball Edge Storage Optimized is designed for large-scale, offline data transfers when network bandwidth is constrained. It allows data to be physically shipped to AWS, ensuring the transfer can be completed securely and within the required timeline. Direct Connect typically takes weeks or months to provision, DataSync would still rely on the constrained network, and Storage Gateway depends on network connectivity, making them less suitable.
Question 354
A company runs a web application on Amazon EC2 instances in an Auto Scaling group that has a target group. The company designed the application to work with session affinity (sticky sessions) for a better user experience.
The application must be available publicly over the internet as an endpoint. A WAF must be applied to the endpoint for additional security. Session affinity (sticky sessions) must be configured on the endpoint.
Which combination of steps will meet these requirements? (Choose two.)
A. Create a public Network Load Balancer. Specify the application target group.
B. Create a Gateway Load Balancer. Specify the application target group.
C. Create a public Application Load Balancer. Specify the application target group.
D. Create a second target group. Add Elastic IP addresses to the EC2 instances.
E. Create a web ACL in AWS WAF. Associate the web ACL with the endpoint
Show Answer
Correct Answer: C, E
Explanation: The endpoint must support application-level sticky sessions and integrate with AWS WAF. A public Application Load Balancer supports cookie-based session affinity and can front an Auto Scaling group target group. AWS WAF web ACLs can be associated directly with an ALB for protection. Network or Gateway Load Balancers do not meet both requirements together, and the other options do not address WAF or stickiness correctly.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.