A company has a web application that runs on premises. The application experiences latency issues during peak hours. The latency issues occur twice each month. At the start of a latency issue, the application's CPU utilization immediately increases to 10 times its normal amount.
The company wants to migrate the application to AWS to improve latency. The company also wants to scale the application automatically when application demand increases. The company will use AWS Elastic Beanstalk for application deployment.
Which solution will meet these requirements?
A. Configure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale based on requests.
B. Configure an Elastic Beanstalk environment to use compute optimized instances. Configure the environment to scale based on requests.
C. Configure an Elastic Beanstalk environment to use compute optimized instances. Configure the environment to scale on a schedule.
D. Configure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale on predictive metrics.
Show Answer
Correct Answer: A
Explanation: The application has sudden, short-lived CPU spikes (10x immediately) that occur infrequently. Burstable performance instances in unlimited mode are designed to handle sudden CPU bursts without throttling, which helps reduce latency at spike onset. Elastic Beanstalk supports Auto Scaling based on request count, satisfying the requirement to scale automatically with demand. Compute-optimized instances are better for consistently high CPU usage, not occasional bursts. Scheduled scaling does not react to real demand, and predictive scaling is not supported in Elastic Beanstalk and would not be effective for an immediate spike during a migration.
Question 366
A company is developing a new application on AWS. The application consists of an Amazon Elastic Container Service (Amazon ECS) cluster, an Amazon S3 bucket that contains assets for the application, and an Amazon RDS for MySQL database that contains the dataset for the application. The dataset contains sensitive information. The company wants to ensure that only the ECS cluster can access the data in the RDS for MySQL database and the data in the S3 bucket.
Which solution will meet these requirements?
A. Create a new AWS Key Management Service (AWS KMS) customer managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the KMS key policy includes encrypt and decrypt permissions for the ECS task execution role.
B. Create an AWS Key Management Service (AWS KMS) AWS managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the S3 bucket policy specifies the ECS task execution role as a user.
C. Create an S3 bucket policy that restricts bucket access to the ECS task execution role. Create a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in.
D. Create a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in. Create a VPC endpoint for Amazon S3. Update the S3 bucket policy to allow access from only the S3 VPC endpoint.
Show Answer
Correct Answer: C
Explanation: The requirement is access control, not encryption. Option C restricts S3 access with a bucket policy that allows only the ECS task role, and restricts RDS access at the network level by allowing connections only from the subnets where ECS tasks run. KMS encryption (A/B) does not control who can connect, and VPC endpoints (D) only limit traffic paths, not which resources can use them.
Question 367
A company uses an on-premises network-attached storage (NAS) system to provide file shares to its high performance computing (HPC) workloads. The company wants to migrate its latency-sensitive HPC workloads and its storage to the AWS Cloud. The company must be able to provide NFS and SMB multi-protocol access from the file system.
Which solution will meet these requirements with the LEAST latency? (Choose two.)
A. Deploy compute optimized EC2 instances into a cluster placement group.
B. Deploy compute optimized EC2 instances into a partition placement group.
C. Attach the EC2 instances to an Amazon FSx for Lustre file system.
D. Attach the EC2 instances to an Amazon FSx for OpenZFS file system.
E. Attach the EC2 instances to an Amazon FSx for NetApp ONTAP file system.
Show Answer
Correct Answer: A, E
Explanation: Latency-sensitive HPC workloads benefit from tightly coupled compute; a cluster placement group provides the lowest inter-instance latency and highest bandwidth. The storage must support multi-protocol NFS and SMB access; Amazon FSx for NetApp ONTAP natively supports concurrent NFS and SMB with low latency. Other FSx options do not meet the multi-protocol requirement (Lustre) or are not optimal for this specific NAS multi-protocol HPC use case.
Question 368
A company has a large data workload that runs for 6 hours each day. The company cannot lose any data while the process is running. A solutions architect is designing an Amazon EMR cluster configuration to support this critical data workload.
Which solution will meet these requirements MOST cost-effectively?
A. Configure a long-running cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances.
B. Configure a transient cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances.
C. Configure a transient cluster that runs the primary node on an On-Demand Instance and the core nodes and task nodes on Spot Instances.
D. Configure a long-running cluster that runs the primary node on an On-Demand Instance, the core nodes on Spot Instances, and the task nodes on Spot Instances.
Show Answer
Correct Answer: B
Explanation: The workload runs only 6 hours per day, so a transient EMR cluster is more cost-effective than a long-running cluster. Because the company cannot lose any data while the process is running, the primary (master) and core nodes must use On-Demand Instances to avoid Spot interruptions that could cause HDFS data loss. Task nodes do not store persistent data and can safely use Spot Instances to reduce cost. Therefore, a transient cluster with On-Demand primary and core nodes and Spot task nodes is the most cost-effective solution that meets the requirements.
Question 369
A company wants to migrate its on-premises Microsoft SQL Server Enterprise edition database to AWS. The company's online application uses the database to process transactions. The data analysis team uses the same production database to run reports for analytical processing. The company wants to reduce operational overhead by moving to managed services wherever possible.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate to Amazon RDS for Microsoft SOL Server. Use read replicas for reporting purposes
B. Migrate to Microsoft SQL Server on Amazon EC2. Use Always On read replicas for reporting purposes
C. Migrate to Amazon DynamoDB. Use DynamoDB on-demand replicas for reporting purposes
D. Migrate to Amazon Aurora MySQL. Use Aurora read replicas for reporting purposes
Show Answer
Correct Answer: A
Explanation: The goal is to migrate a Microsoft SQL Server Enterprise database to AWS with the least operational overhead while supporting both transactional (OLTP) and analytical (reporting) workloads. Amazon RDS for Microsoft SQL Server is a fully managed service that handles patching, backups, high availability, and monitoring, significantly reducing operational overhead compared to running SQL Server on EC2. RDS supports read replicas that can be used to offload reporting and analytical queries from the primary instance. The other options either require more management (EC2 with Always On), are not compatible with SQL Server (DynamoDB, Aurora MySQL), or involve complex re-platforming. Therefore, option A best meets the requirements with the least operational overhead.
Question 370
An ecommerce company runs a PostgreSQL database on premises. The database stores data by using high IOPS Amazon Elastic Block Store (Amazon EBS) block storage. The daily peak I/O transactions per second do not exceed 15,000 IOPS. The company wants to migrate the database to Amazon RDS for PostgreSQL and provision disk IOPS performance independent of disk storage capacity.
Which solution will meet these requirements MOST cost-effectively?
A. Configure the General Purpose SSD (gp2) EBS volume storage type and provision 15,000 IOPS.
B. Configure the Provisioned IOPS SSD (io1) EBS volume storage type and provision 15,000 IOPS.
C. Configure the General Purpose SSD (gp3) EBS volume storage type and provision 15,000 IOPS.
D. Configure the EBS magnetic volume type to achieve maximum IOPS.
Show Answer
Correct Answer: C
Explanation: The requirement is to provision disk IOPS independently of storage capacity and support up to 15,000 IOPS at the lowest cost. gp2 ties IOPS to volume size, so it does not meet the independence requirement. io1 supports provisioned IOPS but is significantly more expensive and unnecessary for 15,000 IOPS. gp3 allows independent provisioning of IOPS (up to 16,000) and throughput regardless of volume size and is cheaper than gp2 and io1, making it the most cost-effective choice.
Question 371
A weather forecasting company needs to process hundreds of gigabytes of data with sub-millisecond latency. The company has a high performance computing (HPC) environment in its data center and wants to expand its forecasting capabilities.
A solutions architect must identify a highly available cloud storage solution that can handle large amounts of sustained throughput. Files that are stored in the solution should be accessible to thousands of compute instances that will simultaneously access and process the entire dataset.
What should the solutions architect do to meet these requirements?
A. Use Amazon FSx for Lustre scratch file systems.
B. Use Amazon FSx for Lustre persistent file systems.
C. Use Amazon Elastic File System (Amazon EFS) with Bursting Throughput mode.
D. Use Amazon Elastic File System (Amazon EFS) with Provisioned Throughput mode.
Show Answer
Correct Answer: B
Explanation: The workload requires sub-millisecond latency, very high sustained throughput, and simultaneous access by thousands of compute instances—all typical HPC characteristics. Amazon FSx for Lustre is purpose-built for HPC and supports massive parallel access with extremely high throughput. A persistent FSx for Lustre file system provides high availability and durability, retaining data independently of compute and surviving failures, unlike scratch file systems that are temporary. Amazon EFS, even with Provisioned Throughput, does not meet the same performance and latency requirements for large-scale HPC workloads.
Question 372
A solutions architect needs to host a high performance computing (HPC) workload in the AWS Cloud. The workload will run on hundreds of Amazon EC2 instances and will require parallel access to a shared file system to enable distributed processing of large datasets. Datasets will be accessed across multiple instances simultaneously. The workload requires access latency within 1 ms. After processing has completed, engineers will need access to the dataset for manual postprocessing.
Which solution will meet these requirements?
A. Use Amazon Elastic File System (Amazon EFS) as a shared file system. Access the dataset from Amazon EFS.
B. Mount an Amazon S3 bucket to serve as the shared file system. Perform postprocessing directly from the S3 bucket.
C. Use Amazon FSx for Lustre as a shared file system. Link the file system to an Amazon S3 bucket for postprocessing.
D. Configure AWS Resource Access Manager to share an Amazon S3 bucket so that it can be mounted to all instances for processing and postprocessing.
Show Answer
Correct Answer: C
Explanation: High performance computing workloads that require hundreds of EC2 instances, parallel access to a shared file system, and sub‑millisecond latency are a primary use case for Amazon FSx for Lustre. FSx for Lustre is optimized for HPC with very high throughput and low latency and supports concurrent access from many instances. Linking FSx for Lustre to Amazon S3 allows engineers to easily access the processed datasets in S3 for manual postprocessing after the job completes. EFS and S3-based options do not provide the required performance characteristics for this scenario.
Question 373
A company is required to use cryptographic keys in its on-premises key manager. The key manager is outside of the AWS Cloud because of regulatory and compliance requirements. The company wants to manage encryption and decryption by using cryptographic keys that are retained outside of the AWS Cloud and that support a variety of external key managers from different vendors.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS CloudHSM key store backed by a CloudHSM cluster.
B. Use an AWS Key Management Service (AWS KMS) external key store backed by an external key manager.
C. Use the default AWS Key Management Service (AWS KMS) managed key store.
D. Use a custom key store backed by an AWS CloudHSM cluster.
Show Answer
Correct Answer: B
Explanation: The requirement is to keep cryptographic keys outside the AWS Cloud, use an on‑premises/external key manager, support multiple vendors, and minimize operational overhead. AWS KMS external key store integrates KMS with external key managers that you own and operate outside AWS, while avoiding the need to manage CloudHSM infrastructure. CloudHSM-based options and default KMS keep keys within AWS, so they do not meet the requirement.
Question 374
An international company has a subdomain for each country that the company operates in. The subdomains are formatted as example.com, country1.example.com, and country2.example.com. The company's workloads are behind an Application Load Balancer. The company wants to encrypt the website data that is in transit.
Which combination of steps will meet these requirements? (Choose two.)
A. Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com.
B. Use the AWS Certificate Manager (ACM) console to request a private certificate for the apex top domain example.com and a wildcard certificate for *.example.com.
C. Use the AWS Certificate Manager (ACM) console to request a public and private certificate for the apex top domain example.com.
D. Validate domain ownership by email address. Switch to DNS validation by adding the required DNS records to the DNS provider.
E. Validate domain ownership for the domain by adding the required DNS records to the DNS provider.
Show Answer
Correct Answer: A, E
Explanation: To encrypt data in transit for an internet-facing Application Load Balancer serving example.com and multiple country subdomains, the company must use public TLS certificates. Requesting a public certificate for the apex domain and a wildcard certificate for *.example.com covers example.com and all country subdomains (A). Domain ownership must be validated for ACM to issue the certificate; adding the required DNS validation records at the DNS provider is the standard and provider-agnostic method (E). Private certificates are for internal use only, and email validation or mixed validation steps are unnecessary.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.