A company wants to migrate two DNS servers to AWS. The servers host a total of approximately 200 zones and receive 1 million requests each day on average. The company wants to maximize availability while minimizing the operational overhead that is related to the management of the two servers.
What should a solutions architect recommend to meet these requirements?
A. Create 200 new hosted zones in the Amazon Route 53 console Import zone files.
B. Launch a single large Amazon EC2 instance Import zone tiles. Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
C. Migrate the servers to AWS by using AWS Server Migration Service (AWS SMS). Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
D. Launch an Amazon EC2 instance in an Auto Scaling group across two Availability Zones. Import zone files. Set the desired capacity to 1 and the maximum capacity to 3 for the Auto Scaling group. Configure scaling alarms to scale based on CPU utilization.
Show Answer
Correct Answer: A
Explanation: Amazon Route 53 is a fully managed, highly available authoritative DNS service. Migrating the approximately 200 DNS zones into Route 53 hosted zones eliminates the need to manage DNS servers, maximizing availability while minimizing operational overhead. The EC2-based options still require server management, and AWS SMS migrates servers rather than replacing them with a managed DNS service.
Question 386
A company manages an application that stores data on an Amazon RDS for PostgreSQL Multi-AZ DB instance. Increases in traffic are causing performance problems. The company determines that database queries are the primary reason for the slow performance.
What should a solutions architect do to improve the application's performance?
A. Serve read traffic from the Multi-AZ standby replica.
B. Configure the DB instance to use Transfer Acceleration.
C. Create a read replica from the source DB instance. Serve read traffic from the read replica.
D. Use Amazon Kinesis Data Firehose between the application and Amazon RDS to increase the concurrency of database requests.
Show Answer
Correct Answer: C
Explanation: For Amazon RDS PostgreSQL Multi-AZ deployments, the standby instance is reserved for failover and cannot serve read traffic. To offload read-heavy query workloads and improve performance, create a read replica and direct read queries to it. Transfer Acceleration applies to Amazon S3, not RDS, and Kinesis Data Firehose is not used to increase RDS query performance.
Question 387
A company runs a production database on Amazon RDS for MySQL. The company wants to upgrade the database version for security compliance reasons. Because the database contains critical data, the company wants a quick solution to upgrade and test functionality without losing any data.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an RDS manual snapshot. Upgrade to the new version of Amazon RDS for MySQL.
B. Use native backup and restore. Restore the data to the upgraded new version of Amazon RDS for MySQL.
C. Use AWS Database Migration Service (AWS DMS) to replicate the data to the upgraded new version of Amazon RDS for MySQL.
D. Use Amazon RDS Blue/Green Deployments to deploy and test production changes.
Show Answer
Correct Answer: D
Explanation: Amazon RDS Blue/Green Deployments is designed specifically for low-risk database upgrades. It creates a synchronized staging (green) environment from production (blue), allows engine version upgrades and thorough testing without affecting production, and enables a managed switchover with typically minimal downtime. This provides the least operational overhead compared with manual snapshots, native backup/restore, or configuring AWS DMS replication.
Question 388
A global company runs its applications in multiple AWS accounts in AWS Organizations. The company's applications use multipart uploads to upload data to multiple Amazon S3 buckets across AWS Regions. The company wants to report on incomplete multipart uploads for cost compliance purposes.
Which solution will meet these requirements with the LEAST operational overhead?
A. Configure AWS Config with a rule to report the incomplete multipart upload object count.
B. Create a service control policy (SCP) to report the incomplete multipart upload object count.
C. Configure S3 Storage Lens to report the incomplete multipart upload object count.
D. Create an S3 Multi-Region Access Point to report the incomplete multipart upload object count.
Show Answer
Correct Answer: C
Explanation: Amazon S3 Storage Lens provides organization-wide visibility across AWS Organizations and Regions, including built-in metrics for incomplete multipart upload object count and storage bytes. It requires minimal operational overhead compared to custom rules or policies. AWS Config does not provide this metric, SCPs cannot generate such reports, and Multi-Region Access Points are for access routing, not analytics.
Question 389
A company stores its data on premises. The amount of data is growing beyond the company's available capacity.
The company wants to migrate its data from the on-premises location to an Amazon S3 bucket. The company needs a solution that will automatically validate the integrity of the data after the transfer.
Which solution will meet these requirements?
A. Order an AWS Snowball Edge device. Configure the Snowball Edge device to perform the online data transfer to an S3 bucket
B. Deploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket.
C. Create an Amazon S3 File Gateway on premises Configure the S3 File Gateway to perform the online data transfer to an S3 bucket
D. Configure an accelerator in Amazon S3 Transfer Acceleration on premises. Configure the accelerator to perform the online data transfer to an S3 bucket.
Show Answer
Correct Answer: B
Explanation: AWS DataSync is designed for online data transfers from on-premises storage to Amazon S3 and automatically performs data integrity verification using checksums during/after transfer based on verification settings. Snowball Edge is primarily for large-scale offline transfers, S3 File Gateway provides file access backed by S3 rather than migration validation, and S3 Transfer Acceleration speeds uploads but does not provide automatic post-transfer integrity validation.
Question 390
A company is hosting a website behind multiple Application Load Balancers. The company has different distribution rights for its content around the world. A solutions architect needs to ensure that users are served the correct content without violating distribution rights.
Which configuration should the solutions architect choose to meet these requirements?
A. Configure Amazon CloudFront with AWS WAF.
B. Configure Application Load Balancers with AWS WAF
C. Configure Amazon Route 53 with a geolocation policy
D. Configure Amazon Route 53 with a geoproximity routing policy
Show Answer
Correct Answer: C
Explanation: Route 53 geolocation routing is specifically designed to route users based on their geographic location and AWS documentation explicitly cites restricting content distribution to locations where you have distribution rights as a use case. Geoproximity routes based on resource locations rather than user distribution rights. AWS WAF can geo-block, but the question asks about serving the correct content behind multiple Application Load Balancers rather than blocking access entirely.
Question 391
A company wants to provide users with access to AWS resources. The company has 1,500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network. However, the company does not want users to have to maintain another identity to access the resources. A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources.
What should the solutions architect do to meet these requirements?
A. Create an IAM user for each user in the company. Attach the appropriate policies to each user.
B. Use Amazon Cognito with an Active Directory user pool. Create roles with the appropriate policies attached.
C. Define cross-account roles with the appropriate policies attached. Map the roles to the Active Directory groups.
D. Configure Security Assertion Markup Language (SAML) 2 0-based federation. Create roles with the appropriate policies attached Map the roles to the Active Directory groups.
Show Answer
Correct Answer: D
Explanation: Use SAML 2.0 federation with the existing on-premises Active Directory (typically via AD FS or another SAML identity provider) so users can sign in with their existing corporate identities. Map Active Directory groups to IAM roles that have the required permissions. This provides single sign-on to AWS resources without creating separate IAM users. Amazon Cognito is primarily intended for authenticating users of web/mobile applications rather than workforce access to AWS resources. Cross-account roles are not the appropriate mechanism for federating an on-premises directory into AWS.
Question 392
A company stores a large volume of image files in an Amazon S3 bucket. The images need to be readily available for the first 180 days. The images are infrequently accessed for the next 180 days. After 360 days, the images need to be archived but must be available instantly upon request. After 5 years, only auditors can access the images. The auditors must be able to retrieve the images within 12 hours. The images cannot be lost during this process.
A developer will use S3 Standard storage for the first 180 days. The developer needs to configure an S3 Lifecycle rule.
Which solution will meet these requirements MOST cost-effectively?
A. Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
B. Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
C. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
D. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
Show Answer
Correct Answer: C
Explanation: S3 One Zone-IA is not appropriate because it stores data in a single Availability Zone and does not meet the requirement that the images cannot be lost. After 360 days the objects must be archived yet remain instantly available, which matches S3 Glacier Instant Retrieval, not Glacier Flexible Retrieval. After 5 years, S3 Glacier Deep Archive satisfies the auditor retrieval requirement because data can be restored within 12 hours using standard retrieval. Therefore the lifecycle is S3 Standard -> S3 Standard-IA -> S3 Glacier Instant Retrieval -> S3 Glacier Deep Archive.
Question 393
A company wants to run a gaming application on Amazon EC2 instances that are part of an Auto Scaling group in the AWS Cloud. The application will transmit data by using UDP packets. The company wants to ensure that the application can scale out and in as traffic increases and decreases.
What should a solutions architect do to meet these requirements?
A. Attach a Network Load Balancer to the Auto Scaling group.
B. Attach an Application Load Balancer to the Auto Scaling group.
C. Deploy an Amazon Route 53 record set with a weighted policy to route traffic appropriately.
D. Deploy a NAT instance that is configured with port forwarding to the EC2 instances in the Auto Scaling group.
Show Answer
Correct Answer: A
Explanation: A Network Load Balancer supports UDP and can distribute traffic to EC2 instances in an Auto Scaling group while allowing the group to scale in and out. Application Load Balancers do not support UDP, Route 53 weighted routing is not a load balancer and does not provide per-request distribution to scaling instances, and a NAT instance is intended for network address translation rather than load balancing application traffic.
Question 394
A gaming company is building an application with Voice over IP capabilities. The application will serve traffic to users across the world. The application needs to be highly available with an automated failover across AWS Regions. The company wants to minimize the latency of users without relying on IP address caching on user devices.
What should a solutions architect do to meet these requirements?
A. Use AWS Global Accelerator with health checks.
B. Use Amazon Route 53 with a geolocation routing policy.
C. Create an Amazon CloudFront distribution that includes multiple origins.
D. Create an Application Load Balancer that uses path-based routing.
Show Answer
Correct Answer: A
Explanation: AWS Global Accelerator is designed for global applications requiring low latency, TCP/UDP support (including VoIP), static anycast IP addresses, health checks, and automatic cross-Region failover without depending on DNS/IP caching. Route 53 routing relies on DNS behavior and client caching, CloudFront is primarily for HTTP(S) content delivery, and an ALB with path-based routing does not address global VoIP routing or cross-Region failover.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.