A company is building a shopping application on AWS. The application offers a catalog that changes once each month and needs to scale with traffic volume. The company wants the lowest possible latency from the application. Data from each user's shopping cart needs to be highly available. User session data must be available even if the user is disconnected and reconnects.
What should a solutions architect do to ensure that the shopping cart data is preserved at all times?
A. Configure an Application Load Balancer to enable the sticky sessions feature (session affinity) for access to the catalog in Amazon Aurora.
B. Configure Amazon ElastiCache for Redis to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session.
C. Configure Amazon OpenSearch Service to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session.
D. Configure an Amazon EC2 instance with Amazon Elastic Block Store (Amazon EBS) storage for the catalog and shopping cart. Configure automated snapshots.
Show Answer
Correct Answer: B
Explanation: Amazon ElastiCache for Redis is the best fit for highly available, low-latency session storage such as shopping cart data. The catalog changes only monthly and can be cached from DynamoDB to minimize latency. Sticky sessions only bind a client to a backend and do not preserve session state across failures or reconnects. OpenSearch is not a session cache, and storing shopping cart data on a single EC2 instance with EBS does not provide the required scalability and high availability.
Question 328
A company has a web application that includes an embedded NoSQL database. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone.
A recent increase in traffic requires the application to be highly available and for the database to be eventually consistent.
Which solution will meet these requirements with the LEAST operational overhead?
A. Replace the ALB with a Network Load Balancer. Maintain the embedded NoSQL database with its replication service on the EC2 instances.
B. Replace the ALB with a Network Load Balancer. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).
C. Modify the Auto Scaling group to use EC2 instances across three Availability Zones. Maintain the embedded NoSQL database with its replication service on the EC2 instances.
D. Modify the Auto Scaling group to use EC2 instances across three Availability Zones. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).
Show Answer
Correct Answer: D
Explanation: The application must be highly available and the database should be eventually consistent with the least operational overhead. The application tier achieves high availability by running the Auto Scaling group across three Availability Zones behind the existing ALB. Replacing the ALB with an NLB provides no benefit for a typical web application using HTTP/HTTPS. Migrating the embedded NoSQL database to Amazon DynamoDB offloads replication, scaling, and multi-AZ availability to a fully managed service that natively provides eventual consistency options, minimizing operational effort compared to managing database replication on EC2 instances.
Question 329
A company is deploying an application in three AWS Regions using an Application Load Balancer. Amazon Route 53 will be used to distribute traffic between these Regions.
Which Route 53 configuration should a solutions architect use to provide the MOST high-performing experience?
A. Create an A record with a latency policy.
B. Create an A record with a geolocation policy.
C. Create a CNAME record with a failover policy.
D. Create a CNAME record with a geoproximity policy.
Show Answer
Correct Answer: A
Explanation: Latency-based routing directs users to the AWS Region that provides the lowest network latency, which is the Route 53 policy designed to maximize application performance across multiple Regions. For Application Load Balancers, Route 53 commonly uses Alias A records that target the ALB DNS name, so an A record is the appropriate choice. Geolocation and geoproximity route based on user location rather than measured latency, and failover is intended for disaster recovery rather than performance.
Question 330
A solutions architect is designing a shared storage solution for a web application that is deployed across multiple Availability Zones. The web application runs on Amazon EC2 instances that are in an Auto Scaling group. The company plans to make frequent changes to the content. The solution must have strong consistency in returning the new content as soon as the changes occur.
Which solutions meet these requirements? (Choose two.)
A. Use AWS Storage Gateway Volume Gateway Internet Small Computer Systems Interface (iSCSI) block storage that is mounted to the individual EC2 instances.
B. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on the individual EC2 instances.
C. Create a shared Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on the individual EC2 instances.
D. Use AWS DataSync to perform continuous synchronization of data between EC2 hosts in the Auto Scaling group.
E. Create an Amazon S3 bucket to store the web content. Set the metadata for the Cache-Control header to no-cache. Use Amazon CloudFront to deliver the content.
Show Answer
Correct Answer: B, E
Explanation: Amazon EFS provides a shared, multi-AZ file system that can be mounted concurrently by all EC2 instances in the Auto Scaling group and offers strong read-after-write consistency, making updated content immediately visible. Amazon S3 also provides strong read-after-write consistency for PUT/DELETE operations, and using CloudFront with Cache-Control: no-cache ensures edge locations revalidate content so users receive updated objects promptly. Storage Gateway Volume Gateway is intended for hybrid environments, EBS volumes cannot be shared across multiple AZs, and DataSync is for data transfer/synchronization rather than real-time shared storage.
Question 331
A company regularly uploads GB-sized files to Amazon S3. After the company uploads the files, the company uses a fleet of Amazon EC2 Spot Instances to transcode the file format. The company needs to scale throughput when the company uploads data from the on-premises data center to Amazon S3 and when the company downloads data from Amazon S3 to the EC2 instances.
Which solutions will meet these requirements? (Choose two.)
A. Use the S3 bucket access point instead of accessing the S3 bucket directly.
B. Upload the files into multiple S3 buckets.
C. Use S3 multipart uploads.
D. Fetch multiple byte-ranges of an object in parallel.
E. Add a random prefix to each object when uploading the files.
Show Answer
Correct Answer: C, D
Explanation: For large (GB-sized) object uploads, S3 multipart upload allows parts to be uploaded in parallel, improving throughput and resiliency. For downloading large objects, retrieving multiple byte ranges in parallel increases aggregate download throughput to EC2 instances. Access Points simplify access management rather than increasing transfer throughput, multiple buckets are unnecessary, and random prefixes were historically used for request distribution but are no longer needed for S3 performance scaling.
Question 332
A company wants to standardize its Amazon Elastic Block Store (Amazon EBS) volume encryption strategy. The company also wants to minimize the cost and configuration effort required to operate the volume encryption check.
Which solution will meet these requirements?
A. Write API calls to describe the EBS volumes and to confirm the EBS volumes are encrypted. Use Amazon EventBridge to schedule an AWS Lambda function to run the API calls.
B. Write API calls to describe the EBS volumes and to confirm the EBS volumes are encrypted. Run the API calls on an AWS Fargate task.
C. Create an AWS Identity and Access Management (IAM) policy that requires the use of tags on EBS volumes. Use AWS Cost Explorer to display resources that are not properly tagged. Encrypt the untagged resources manually.
D. Create an AWS Config rule for Amazon EBS to evaluate if a volume is encrypted and to flag the volume if it is not encrypted.
Show Answer
Correct Answer: D
Explanation: AWS Config provides managed rules to continuously evaluate whether Amazon EBS volumes are encrypted and marks noncompliant resources. This is the lowest operational effort and avoids building and maintaining custom Lambda or Fargate-based checks. It is designed for configuration compliance monitoring.
Question 333
A company manages AWS accounts in AWS Organizations. AWS IAM Identity Center (AWS Single Sign-On) and AWS Control Tower are configured for the accounts. The company wants to manage multiple user permissions across all the accounts.
The permissions will be used by multiple IAM users and must be split between the developer and administrator teams. Each team requires different permissions. The company wants a solution that includes new users that are hired on both teams.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create individual users in IAM Identity Center for each account. Create separate developer and administrator groups in IAM Identity Center. Assign the users to the appropriate groups. Create a custom IAM policy for each group to set fine-grained permissions.
B. Create individual users in IAM Identity Center for each account. Create separate developer and administrator groups in IAM Identity Center. Assign the users to the appropriate groups. Attach AWS managed IAM policies to each user as needed for fine-grained permissions.
C. Create individual users in IAM Identity Center. Create new developer and administrator groups in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each group. Assign the new groups to the appropriate accounts. Assign the new permission sets to the new groups. When new users are hired, add them to the appropriate group.
D. Create individual users in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each user. Assign the users to the appropriate accounts. Grant additional IAM permissions to the users from within specific accounts. When new users are hired, add them to IAM Identity Center and assign them to the accounts.
Show Answer
Correct Answer: C
Explanation: AWS IAM Identity Center is designed to manage access centrally using users, groups, and permission sets. The lowest-overhead approach is to create developer and administrator groups, define permission sets with the required IAM policies, assign those permission sets to the groups for the appropriate AWS accounts, and simply add new hires to the correct group so they automatically inherit access. Options A and B incorrectly suggest creating Identity Center users per account and attaching policies directly to users. Option D manages permissions per user, increasing operational overhead.
Question 335
A company is creating an application. The company stores data from tests of the application in multiple on-premises locations.
The company needs to connect the on-premises locations to VPCs in an AWS Region in the AWS Cloud. The number of accounts and VPCs will increase during the next year. The network architecture must simplify the administration of new connections and must provide the ability to scale.
Which solution will meet these requirements with the LEAST administrative overhead?
A. Create a peering connection between the VPCs. Create a VPN connection between the VPCs and the on-premises locations.
B. Launch an Amazon EC2 instance. On the instance, include VPN software that uses a VPN connection to connect all VPCs and on-premises locations.
C. Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.
D. Create an AWS Direct Connect connection between the on-premises locations and a central VPC. Connect the central VPC to other VPCs by using peering connections.
Show Answer
Correct Answer: C
Explanation: AWS Transit Gateway is designed for scalable hub-and-spoke connectivity between multiple VPCs and on-premises networks. As the number of VPCs and accounts grows, Transit Gateway minimizes administrative overhead by using VPC and VPN attachments instead of managing many VPC peering connections. EC2-based VPN appliances add operational burden, and Direct Connect to a central VPC with peering does not scale as cleanly for expanding environments.
Question 336
A company is developing an application that will run on a production Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The EKS cluster has managed node groups that are provisioned with On-Demand Instances.
The company needs a dedicated EKS cluster for development work. The company will use the development cluster infrequently to test the resiliency of the application. The EKS cluster must manage all the nodes.
Which solution will meet these requirements MOST cost-effectively?
A. Create a managed node group that contains only Spot Instances.
B. Create two managed node groups. Provision one node group with On-Demand Instances. Provision the second node group with Spot Instances.
C. Create an Auto Scaling group that has a launch configuration that uses Spot Instances. Configure the user data to add the nodes to the EKS cluster.
D. Create a managed node group that contains only On-Demand Instances.
Show Answer
Correct Answer: A
Explanation: The question asks for a separate development EKS cluster that is used infrequently and requires that Amazon EKS manage the worker nodes. An EKS managed node group satisfies the management requirement, and using only Spot Instances minimizes cost for interruption-tolerant development and resiliency testing. Option B adds unnecessary On-Demand capacity, increasing cost. Option C uses self-managed nodes. Option D is more expensive than necessary.
Question 337
A company wants to migrate its web applications from on premises to AWS. The company is located close to the eu-central-1 Region. Because of regulations, the company cannot launch some of its applications in eu-central-1. The company wants to achieve single-digit millisecond latency.
Which solution will meet these requirements?
A. Deploy the applications in eu-central-1. Extend the company’s VPC from eu-central-1 to an edge location in Amazon CloudFront.
B. Deploy the applications in AWS Local Zones by extending the company's VPC from eu-central-1 to the chosen Local Zone.
C. Deploy the applications in eu-central-1. Extend the company’s VPC from eu-central-1 to the regional edge caches in Amazon CloudFront.
D. Deploy the applications in AWS Wavelength Zones by extending the company’s VPC from eu-central-1 to the chosen Wavelength Zone.
Show Answer
Correct Answer: B
Explanation: AWS Local Zones extend a Region's VPC to infrastructure located closer to users while allowing workloads to run outside the parent Region. They are designed for applications requiring single-digit millisecond latency. Options A and C still require deploying the applications in eu-central-1, which conflicts with the regulatory constraint. AWS Wavelength Zones are intended for ultra-low-latency 5G mobile applications within telecom provider networks, which is not the stated use case.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.