A company stores its data on premises. The amount of data is growing beyond the company's available capacity.
The company wants to migrate its data from the on-premises location to an Amazon S3 bucket. The company needs a solution that will automatically validate the integrity of the data after the transfer.
Which solution will meet these requirements?
A. Order an AWS Snowball Edge device. Configure the Snowball Edge device to perform the online data transfer to an S3 bucket
B. Deploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket.
C. Create an Amazon S3 File Gateway on premises Configure the S3 File Gateway to perform the online data transfer to an S3 bucket
D. Configure an accelerator in Amazon S3 Transfer Acceleration on premises. Configure the accelerator to perform the online data transfer to an S3 bucket.
Show Answer
Correct Answer: B
Explanation: AWS DataSync is designed for online data transfers from on-premises storage to Amazon S3 and automatically performs data integrity verification using checksums during/after transfer based on verification settings. Snowball Edge is primarily for large-scale offline transfers, S3 File Gateway provides file access backed by S3 rather than migration validation, and S3 Transfer Acceleration speeds uploads but does not provide automatic post-transfer integrity validation.
Question 390
A company is hosting a website behind multiple Application Load Balancers. The company has different distribution rights for its content around the world. A solutions architect needs to ensure that users are served the correct content without violating distribution rights.
Which configuration should the solutions architect choose to meet these requirements?
A. Configure Amazon CloudFront with AWS WAF.
B. Configure Application Load Balancers with AWS WAF
C. Configure Amazon Route 53 with a geolocation policy
D. Configure Amazon Route 53 with a geoproximity routing policy
Show Answer
Correct Answer: C
Explanation: Route 53 geolocation routing is specifically designed to route users based on their geographic location and AWS documentation explicitly cites restricting content distribution to locations where you have distribution rights as a use case. Geoproximity routes based on resource locations rather than user distribution rights. AWS WAF can geo-block, but the question asks about serving the correct content behind multiple Application Load Balancers rather than blocking access entirely.
Question 391
A company wants to provide users with access to AWS resources. The company has 1,500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network. However, the company does not want users to have to maintain another identity to access the resources. A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources.
What should the solutions architect do to meet these requirements?
A. Create an IAM user for each user in the company. Attach the appropriate policies to each user.
B. Use Amazon Cognito with an Active Directory user pool. Create roles with the appropriate policies attached.
C. Define cross-account roles with the appropriate policies attached. Map the roles to the Active Directory groups.
D. Configure Security Assertion Markup Language (SAML) 2 0-based federation. Create roles with the appropriate policies attached Map the roles to the Active Directory groups.
Show Answer
Correct Answer: D
Explanation: Use SAML 2.0 federation with the existing on-premises Active Directory (typically via AD FS or another SAML identity provider) so users can sign in with their existing corporate identities. Map Active Directory groups to IAM roles that have the required permissions. This provides single sign-on to AWS resources without creating separate IAM users. Amazon Cognito is primarily intended for authenticating users of web/mobile applications rather than workforce access to AWS resources. Cross-account roles are not the appropriate mechanism for federating an on-premises directory into AWS.
Question 392
A company stores a large volume of image files in an Amazon S3 bucket. The images need to be readily available for the first 180 days. The images are infrequently accessed for the next 180 days. After 360 days, the images need to be archived but must be available instantly upon request. After 5 years, only auditors can access the images. The auditors must be able to retrieve the images within 12 hours. The images cannot be lost during this process.
A developer will use S3 Standard storage for the first 180 days. The developer needs to configure an S3 Lifecycle rule.
Which solution will meet these requirements MOST cost-effectively?
A. Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
B. Transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
C. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
D. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
Show Answer
Correct Answer: C
Explanation: S3 One Zone-IA is not appropriate because it stores data in a single Availability Zone and does not meet the requirement that the images cannot be lost. After 360 days the objects must be archived yet remain instantly available, which matches S3 Glacier Instant Retrieval, not Glacier Flexible Retrieval. After 5 years, S3 Glacier Deep Archive satisfies the auditor retrieval requirement because data can be restored within 12 hours using standard retrieval. Therefore the lifecycle is S3 Standard -> S3 Standard-IA -> S3 Glacier Instant Retrieval -> S3 Glacier Deep Archive.
Question 393
A company wants to run a gaming application on Amazon EC2 instances that are part of an Auto Scaling group in the AWS Cloud. The application will transmit data by using UDP packets. The company wants to ensure that the application can scale out and in as traffic increases and decreases.
What should a solutions architect do to meet these requirements?
A. Attach a Network Load Balancer to the Auto Scaling group.
B. Attach an Application Load Balancer to the Auto Scaling group.
C. Deploy an Amazon Route 53 record set with a weighted policy to route traffic appropriately.
D. Deploy a NAT instance that is configured with port forwarding to the EC2 instances in the Auto Scaling group.
Show Answer
Correct Answer: A
Explanation: A Network Load Balancer supports UDP and can distribute traffic to EC2 instances in an Auto Scaling group while allowing the group to scale in and out. Application Load Balancers do not support UDP, Route 53 weighted routing is not a load balancer and does not provide per-request distribution to scaling instances, and a NAT instance is intended for network address translation rather than load balancing application traffic.
Question 394
A gaming company is building an application with Voice over IP capabilities. The application will serve traffic to users across the world. The application needs to be highly available with an automated failover across AWS Regions. The company wants to minimize the latency of users without relying on IP address caching on user devices.
What should a solutions architect do to meet these requirements?
A. Use AWS Global Accelerator with health checks.
B. Use Amazon Route 53 with a geolocation routing policy.
C. Create an Amazon CloudFront distribution that includes multiple origins.
D. Create an Application Load Balancer that uses path-based routing.
Show Answer
Correct Answer: A
Explanation: AWS Global Accelerator is designed for global applications requiring low latency, TCP/UDP support (including VoIP), static anycast IP addresses, health checks, and automatic cross-Region failover without depending on DNS/IP caching. Route 53 routing relies on DNS behavior and client caching, CloudFront is primarily for HTTP(S) content delivery, and an ALB with path-based routing does not address global VoIP routing or cross-Region failover.
Question 395
A company is creating a new application that will store a large amount of data. The data will be analyzed hourly and will be modified by several Amazon EC2 Linux instances that are deployed across multiple Availability Zones. The needed amount of storage space will continue to grow for the next 6 months.
Which storage solution should a solutions architect recommend to meet these requirements?
A. Store the data in Amazon S3 Glacier. Update the S3 Glacier vault policy to allow access to the application instances.
B. Store the data in an Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on the application instances.
C. Store the data in an Amazon Elastic File System (Amazon EFS) file system. Mount the file system on the application instances.
D. Store the data in an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume shared between the application instances.
Show Answer
Correct Answer: C
Explanation: Amazon EFS provides a shared, elastic, managed file system that can be mounted concurrently by multiple Linux EC2 instances across multiple Availability Zones. It automatically scales as storage needs grow, making it suitable for continuously expanding datasets that are read and modified by multiple instances. S3 Glacier is archival storage with unsuitable retrieval characteristics for hourly analysis. EBS volumes are block storage and generally cannot be shared across multiple EC2 instances in multiple AZs for this use case; Multi-Attach is limited and does not support cross-AZ shared file storage.
Question 396
A social media company wants to store its database of user profiles, relationships, and interactions in the AWS Cloud. The company needs an application to monitor any changes in the database. The application needs to analyze the relationships between the data entities and to provide recommendations to users.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon Neptune to store the information. Use Amazon Kinesis Data Streams to process changes in the database.
B. Use Amazon Neptune to store the information. Use Neptune Streams to process changes in the database.
C. Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Amazon Kinesis Data Streams to process changes in the database.
D. Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Neptune Streams to process changes in the database.
Show Answer
Correct Answer: B
Explanation: Amazon Neptune is the appropriate database for highly connected social graph data such as user profiles, relationships, and interactions. It is optimized for graph queries and recommendation use cases. To monitor changes with the least operational overhead, Neptune Streams provides a managed change log of graph updates. Kinesis Data Streams would require additional infrastructure for change propagation, and Amazon QLDB is a ledger database for immutable transaction histories rather than graph relationship analysis.
Question 397
A company is creating a new web application for its subscribers. The application will consist of a static single page and a persistent database layer. The application will have millions of users for 4 hours in the morning, but the application will have only a few thousand users during the rest of the day. The company's data architects have requested the ability to rapidly evolve their schema.
Which solutions will meet these requirements and provide the MOST scalability? (Choose two.)
A. Deploy Amazon DynamoDB as the database solution. Provision on-demand capacity.
B. Deploy Amazon Aurora as the database solution. Choose the serverless DB engine mode.
C. Deploy Amazon DynamoDB as the database solution. Ensure that DynamoDB auto scaling is enabled.
D. Deploy the static content into an Amazon S3 bucket. Provision an Amazon CloudFront distribution with the S3 bucket as the origin.
E. Deploy the web servers for static content across a fleet of Amazon EC2 instances in Auto Scaling groups. Configure the instances to periodically refresh the content from an Amazon Elastic File System (Amazon EFS) volume.
Show Answer
Correct Answer: A, D
Explanation: DynamoDB is the best fit because it is schemaless/flexible and supports rapid schema evolution. For the highest scalability with large swings from thousands to millions of users, on-demand capacity handles sudden demand without capacity planning. For a static single-page application, hosting in Amazon S3 behind Amazon CloudFront provides virtually unlimited scalability and efficient global content delivery. Aurora Serverless remains a relational database and is less aligned with rapid schema evolution, while EC2/EFS is unnecessary for static content.
Question 398
An online photo-sharing company stores its photos in an Amazon S3 bucket that exists in the us-west-1 Region. The company needs to store a copy of all new photos in the us-east-1 Region.
Which solution will meet this requirement with the LEAST operational effort?
A. Create a second S3 bucket in us-east-1. Use S3 Cross-Region Replication to copy photos from the existing S3 bucket to the second S3 bucket.
B. Create a cross-origin resource sharing (CORS) configuration of the existing S3 bucket. Specify us-east-1 in the CORS rule's AllowedOrigin element.
C. Create a second S3 bucket in us-east-1 across multiple Availability Zones. Create an S3 Lifecycle rule to save photos into the second S3 bucket.
D. Create a second S3 bucket in us-east-1. Configure S3 event notifications on object creation and update events to invoke an AWS Lambda function to copy photos from the existing S3 bucket to the second S3 bucket.
Show Answer
Correct Answer: A
Explanation: Amazon S3 Cross-Region Replication (CRR) is the native managed feature for automatically replicating new and updated objects from a bucket in one AWS Region to a bucket in another Region with minimal operational effort. CORS only controls browser access, Lifecycle rules do not copy objects across buckets, and using Lambda requires custom operational management.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.