A company wants to migrate two DNS servers to AWS. The servers host a total of approximately 200 zones and receive 1 million requests each day on average. The company wants to maximize availability while minimizing the operational overhead that is related to the management of the two servers.
What should a solutions architect recommend to meet these requirements?
A. Create 200 new hosted zones in the Amazon Route 53 console Import zone files.
B. Launch a single large Amazon EC2 instance Import zone tiles. Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
C. Migrate the servers to AWS by using AWS Server Migration Service (AWS SMS). Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
D. Launch an Amazon EC2 instance in an Auto Scaling group across two Availability Zones. Import zone files. Set the desired capacity to 1 and the maximum capacity to 3 for the Auto Scaling group. Configure scaling alarms to scale based on CPU utilization.
Show Answer
Correct Answer: A
Explanation: The requirements are to maximize availability and minimize operational overhead for DNS hosting. Amazon Route 53 is a fully managed, highly available, globally distributed DNS service that eliminates the need to manage DNS servers. Importing the existing zone files into Route 53 directly replaces the two DNS servers with a serverless solution designed to handle millions of queries per day. EC2-based options still require server management, patching, scaling, and monitoring, and provide lower availability than Route 53.
Question 386
A company manages an application that stores data on an Amazon RDS for PostgreSQL Multi-AZ DB instance. Increases in traffic are causing performance problems. The company determines that database queries are the primary reason for the slow performance.
What should a solutions architect do to improve the application's performance?
A. Serve read traffic from the Multi-AZ standby replica.
B. Configure the DB instance to use Transfer Acceleration.
C. Create a read replica from the source DB instance. Serve read traffic from the read replica.
D. Use Amazon Kinesis Data Firehose between the application and Amazon RDS to increase the concurrency of database requests.
Show Answer
Correct Answer: C
Explanation: Amazon RDS Multi-AZ provides high availability with a standby instance that cannot serve read traffic. Because the performance issue is caused by increased query load, the correct approach is to scale reads horizontally by creating one or more read replicas and directing read traffic to them. This offloads read queries from the primary DB instance and improves application performance.
Question 387
A company runs a production database on Amazon RDS for MySQL. The company wants to upgrade the database version for security compliance reasons. Because the database contains critical data, the company wants a quick solution to upgrade and test functionality without losing any data.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an RDS manual snapshot. Upgrade to the new version of Amazon RDS for MySQL.
B. Use native backup and restore. Restore the data to the upgraded new version of Amazon RDS for MySQL.
C. Use AWS Database Migration Service (AWS DMS) to replicate the data to the upgraded new version of Amazon RDS for MySQL.
D. Use Amazon RDS Blue/Green Deployments to deploy and test production changes.
Show Answer
Correct Answer: D
Explanation: Amazon RDS Blue/Green Deployments provide a managed, low-overhead way to create a synchronized copy of the production database, upgrade the engine version in the green environment, and test functionality without impacting production. When ready, traffic can be switched with minimal downtime and no data loss. Other options involve higher operational effort (manual snapshots, backup/restore, or DMS) and are not as streamlined for in-place engine upgrades and testing.
Question 388
A global company runs its applications in multiple AWS accounts in AWS Organizations. The company's applications use multipart uploads to upload data to multiple Amazon S3 buckets across AWS Regions. The company wants to report on incomplete multipart uploads for cost compliance purposes.
Which solution will meet these requirements with the LEAST operational overhead?
A. Configure AWS Config with a rule to report the incomplete multipart upload object count.
B. Create a service control policy (SCP) to report the incomplete multipart upload object count.
C. Configure S3 Storage Lens to report the incomplete multipart upload object count.
D. Create an S3 Multi-Region Access Point to report the incomplete multipart upload object count.
Show Answer
Correct Answer: C
Explanation: Amazon S3 Storage Lens provides built-in, organization-wide analytics across AWS accounts and Regions, including specific cost-efficiency metrics for incomplete multipart uploads such as object count and storage bytes. It requires minimal setup and operational overhead compared to custom rules, policies, or access point configurations, making it the most suitable solution.
Question 389
A company stores its data on premises. The amount of data is growing beyond the company's available capacity.
The company wants to migrate its data from the on-premises location to an Amazon S3 bucket. The company needs a solution that will automatically validate the integrity of the data after the transfer.
Which solution will meet these requirements?
A. Order an AWS Snowball Edge device. Configure the Snowball Edge device to perform the online data transfer to an S3 bucket
B. Deploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket.
C. Create an Amazon S3 File Gateway on premises Configure the S3 File Gateway to perform the online data transfer to an S3 bucket
D. Configure an accelerator in Amazon S3 Transfer Acceleration on premises. Configure the accelerator to perform the online data transfer to an S3 bucket.
Show Answer
Correct Answer: B
Explanation: AWS DataSync is designed for migrating large amounts of on‑premises data to Amazon S3 and automatically verifies data integrity during and after transfer by calculating and comparing checksums. This built‑in validation ensures that the data copied to S3 matches the source without requiring manual verification. Other options either do not provide automatic integrity validation or are intended for different use cases.
Question 390
A company is hosting a website behind multiple Application Load Balancers. The company has different distribution rights for its content around the world. A solutions architect needs to ensure that users are served the correct content without violating distribution rights.
Which configuration should the solutions architect choose to meet these requirements?
A. Configure Amazon CloudFront with AWS WAF.
B. Configure Application Load Balancers with AWS WAF
C. Configure Amazon Route 53 with a geolocation policy
D. Configure Amazon Route 53 with a geoproximity routing policy
Show Answer
Correct Answer: C
Explanation: Amazon Route 53 geolocation routing is designed to route users based on their geographic location and can be used to restrict distribution of content to locations where you have distribution rights. By directing users from different countries or regions to specific Application Load Balancers (or denying a default), the company can ensure users are served the appropriate content without violating regional rights. AWS documentation explicitly lists this as a use case for geolocation routing.
Question 391
A company wants to provide users with access to AWS resources. The company has 1,500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network. However, the company does not want users to have to maintain another identity to access the resources. A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources.
What should the solutions architect do to meet these requirements?
A. Create an IAM user for each user in the company. Attach the appropriate policies to each user.
B. Use Amazon Cognito with an Active Directory user pool. Create roles with the appropriate policies attached.
C. Define cross-account roles with the appropriate policies attached. Map the roles to the Active Directory groups.
D. Configure Security Assertion Markup Language (SAML) 2 0-based federation. Create roles with the appropriate policies attached Map the roles to the Active Directory groups.
Show Answer
Correct Answer: D
Explanation: The company already manages identities and groups in on‑premises Active Directory and does not want users to maintain separate AWS identities. The correct approach is to federate AD with AWS using SAML 2.0 (for example, via AD FS). With SAML federation, users authenticate against AD, and AWS IAM roles are mapped to AD groups, granting access to AWS resources without creating IAM users. Amazon Cognito is primarily for application user authentication, not direct access to AWS resources, and creating individual IAM users does not meet the requirement.
Question 392
A company stores a large volume of image files in an Amazon S3 bucket. The images need to be readily available for the first 180 days. The images are infrequently accessed for the next 180 days. After 360 days, the images need to be archived but must be available instantly upon request. After 5 years, only auditors can access the images. The auditors must be able to retrieve the images within 12 hours. The images cannot be lost during this process.
A developer will use S3 Standard storage for the first 180 days. The developer needs to configure an S3 Lifecycle rule.
Which solution will meet these requirements MOST cost-effectively?
A. Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
B. Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
C. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
D. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
Show Answer
Correct Answer: C
Explanation: The data must not be lost, which rules out One Zone-IA due to single-AZ risk. After 360 days the images must be archived yet instantly available, which requires S3 Glacier Instant Retrieval (not Flexible Retrieval). After 5 years, auditors must retrieve within 12 hours, which S3 Glacier Deep Archive supports. Therefore, transitioning to S3 Standard-IA after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years is the most cost-effective option that meets all requirements.
Question 393
A company wants to run a gaming application on Amazon EC2 instances that are part of an Auto Scaling group in the AWS Cloud. The application will transmit data by using UDP packets. The company wants to ensure that the application can scale out and in as traffic increases and decreases.
What should a solutions architect do to meet these requirements?
A. Attach a Network Load Balancer to the Auto Scaling group.
B. Attach an Application Load Balancer to the Auto Scaling group.
C. Deploy an Amazon Route 53 record set with a weighted policy to route traffic appropriately.
D. Deploy a NAT instance that is configured with port forwarding to the EC2 instances in the Auto Scaling group.
Show Answer
Correct Answer: A
Explanation: The application uses UDP, which operates at Layer 4. An AWS Network Load Balancer supports UDP traffic and integrates directly with Auto Scaling groups to distribute traffic as instances scale out and in. Application Load Balancers support only HTTP/HTTPS (Layer 7), Route 53 DNS does not provide load balancing at the connection level, and a NAT instance does not address scalable inbound UDP traffic.
Question 394
A gaming company is building an application with Voice over IP capabilities. The application will serve traffic to users across the world. The application needs to be highly available with an automated failover across AWS Regions. The company wants to minimize the latency of users without relying on IP address caching on user devices.
What should a solutions architect do to meet these requirements?
A. Use AWS Global Accelerator with health checks.
B. Use Amazon Route 53 with a geolocation routing policy.
C. Create an Amazon CloudFront distribution that includes multiple origins.
D. Create an Application Load Balancer that uses path-based routing.
Show Answer
Correct Answer: A
Explanation: AWS Global Accelerator provides static anycast IP addresses that route user traffic over the AWS global network to the nearest healthy regional endpoint, minimizing latency worldwide. It supports both TCP and UDP, making it suitable for VoIP and gaming traffic, and includes health checks for automated cross-Region failover without relying on DNS/IP caching on user devices. Other options either rely on DNS caching, are HTTP-focused, or do not provide global, protocol-appropriate failover.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.