A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not travel across the internet.
Which combination of steps should the solutions architect take to meet this requirement? (Choose two.)
A. Create a route table entry for the endpoint.
B. Create a gateway endpoint for DynamoD
C. Create an interface endpoint for Amazon EC2.
D. Create an elastic network interface for the endpoint in each of the subnets of the VPC.
E. Create a security group entry in the endpoint's security group to provide access.
Show Answer
Correct Answer: A, B
Explanation: To keep DynamoDB API traffic off the public internet from EC2 instances in a VPC, a gateway VPC endpoint for DynamoDB must be created. Gateway endpoints require updates to the VPC route tables so that traffic destined for DynamoDB is routed to the endpoint. Gateway endpoints do not use ENIs or security groups, and interface endpoints are not used for DynamoDB.
Question 446
A company has 5 PB of archived data on physical tapes. The company needs to preserve the data on the tapes for another 10 years for compliance purposes. The company wants to migrate to AWS in the next 6 months. The data center that stores the tapes has a 1 Gbps uplink internet connectivity.
Which solution will meet these requirements MOST cost-effectively?
A. Read the data from the tapes on premises. Stage the data in a local NFS storage. Use AWS DataSync to migrate the data to Amazon S3 Glacier Flexible Retrieval.
B. Use an on-premises backup application to read the data from the tapes and to write directly to Amazon S3 Glacier Deep Archive.
C. Order multiple AWS Snowball devices that have Tape Gateway. Copy the physical tapes to virtual tapes in Snowball. Ship the Snowball devices to AWS. Create a lifecycle policy to move the tapes to Amazon S3 Glacier Deep Archive.
D. Configure an on-premises Tape Gateway. Create virtual tapes in the AWS Cloud. Use backup software to copy the physical tape to the virtual tape.
Show Answer
Correct Answer: C
Explanation: Migrating 5 PB over a 1 Gbps link would take well over a year, exceeding the 6‑month migration window and increasing costs for options that rely on network transfer (A, B, D). Using AWS Snowball with Tape Gateway enables offline, petabyte-scale transfer from physical tapes without consuming internet bandwidth. After ingestion, lifecycle policies can move data to Amazon S3 Glacier Deep Archive for the lowest long-term archival cost, meeting the 10‑year compliance requirement most cost‑effectively.
Question 447
A solutions architect needs to review a company's Amazon S3 buckets to discover personally identifiable information (PII). The company stores the PII data in the us-east-1 Region and us-west-2 Region.
Which solution will meet these requirements with the LEAST operational overhead?
A. Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3.
B. Configure AWS Security Hub for all Regions. Create an AWS Config rule to analyze the data that is in Amazon S3.
C. Configure Amazon Inspector to analyze the data that is in Amazon S3.
D. Configure Amazon GuardDuty to analyze the data that is in Amazon S3.
Show Answer
Correct Answer: A
Explanation: Amazon Macie is purpose-built to discover and classify sensitive data such as PII in Amazon S3. It operates regionally, so it can be enabled only in us-east-1 and us-west-2, minimizing operational overhead. Macie automatically analyzes S3 data without requiring custom rules or extensive setup. Security Hub aggregates security findings, Inspector focuses on vulnerability management, and GuardDuty detects threats—none are designed for PII discovery in S3.
Question 448
A company has two VPCs that are located in the us-west-2 Region within the same AWS account. The company needs to allow network traffic between these VPCs. Approximately 500 GB of data transfer will occur between the VPCs each month.
What is the MOST cost-effective solution to connect these VPCs?
A. Implement AWS Transit Gateway to connect the VPCs. Update the route tables of each VPC to use the transit gateway for inter-VPC communication.
B. Implement an AWS Site-to-Site VPN tunnel between the VPCs. Update the route tables of each VPC to use the VPN tunnel for inter-VPC communication.
C. Set up a VPC peering connection between the VPCs. Update the route tables of each VPC to use the VPC peering connection for inter-VPC communication.
D. Set up a 1 GB AWS Direct Connect connection between the VPCs. Update the route tables of each VPC to use the Direct Connect connection for inter-VPC communication.
Show Answer
Correct Answer: C
Explanation: VPC peering is the most cost-effective option for connecting two VPCs in the same Region and AWS account. It has no hourly charges and only standard in-Region data transfer costs, which are minimal for 500 GB per month. Transit Gateway and Site-to-Site VPN add hourly and data processing charges, and Direct Connect has high fixed costs and is unnecessary for this use case.
Question 449
A company deployed a serverless application that uses Amazon DynamoDB as a database layer. The application has experienced a large increase in users. The company wants to improve database response time from milliseconds to microseconds and to cache requests to the database.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use DynamoDB Accelerator (DAX).
B. Migrate the database to Amazon Redshift.
C. Migrate the database to Amazon RDS.
D. Use Amazon ElastiCache for Redis.
Show Answer
Correct Answer: A
Explanation: The requirement is to improve DynamoDB response time from milliseconds to microseconds and cache requests with the least operational overhead. Amazon DynamoDB Accelerator (DAX) is a fully managed, in-memory cache purpose-built for DynamoDB that provides microsecond latency and transparent caching with minimal operational effort. Migrating to Redshift or RDS is inappropriate for this use case, and ElastiCache for Redis would introduce more operational overhead and application changes compared to DAX.
Question 450
A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needs to ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates.
Which solution will meet these requirements with the MOST operational efficiency?
A. Use a CloudFront security policy to create a certificate.
B. Use a CloudFront origin access control (OAC) to create a certificate.
C. Use AWS Certificate Manager (ACM) to create a certificate. Use DNS validation for the domain.
D. Use AWS Certificate Manager (ACM) to create a certificate. Use email validation for the domain.
Show Answer
Correct Answer: C
Explanation: AWS Certificate Manager (ACM) is designed to create, manage, and automatically renew TLS certificates used with CloudFront. Using DNS validation enables fully automated domain validation and renewal with no manual intervention, providing the highest operational efficiency. CloudFront security policies and origin access controls do not issue certificates, and email validation requires manual approval, reducing automation.
Question 451
A company runs an application on AWS. The application receives inconsistent amounts of usage. The application uses AWS Direct Connect to connect to an on-premises MySQL-compatible database. The on-premises database consistently uses a minimum of 2 GiB of memory.
The company wants to migrate the on-premises database to a managed AWS service. The company wants to use auto scaling capabilities to manage unexpected workload increases.
Which solution will meet these requirements with the LEAST administrative overhead?
A. Provision an Amazon DynamoDB database with default read and write capacity settings.
B. Provision an Amazon Aurora database with a minimum capacity of 1 Aurora capacity unit (ACU).
C. Provision an Amazon Aurora Serverless v2 database with a minimum capacity of 1 Aurora capacity unit (ACU).
D. Provision an Amazon RDS for MySQL database with 2 GiB of memory.
Show Answer
Correct Answer: C
Explanation: The database must be MySQL-compatible, handle unpredictable workloads, and scale automatically with minimal administrative effort. Amazon Aurora Serverless v2 is MySQL-compatible and provides fine-grained, automatic scaling of compute capacity using Aurora Capacity Units (ACUs) without manual instance management. This directly addresses unexpected workload increases and minimizes operational overhead. DynamoDB is not MySQL-compatible, standard RDS for MySQL does not support automatic compute scaling, and provisioned Aurora requires manual capacity management.
Question 452
A solutions architect is designing a workload that will store hourly energy consumption by business tenants in a building. The sensors will feed a database through HTTP requests that will add up usage for each tenant. The solutions architect must use managed services when possible. The workload will receive more features in the future as the solutions architect adds independent components.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in an Amazon DynamoDB table.
B. Use an Elastic Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon S3 bucket to store the processed data.
C. Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in a Microsoft SQL Server Express database on an Amazon EC2 instance.
D. Use an Elastic Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon Elastic File System (Amazon EFS) shared file system to store the processed data.
Show Answer
Correct Answer: A
Explanation: The requirement emphasizes managed services, HTTP ingestion, future extensibility with independent components, and the least operational overhead. Amazon API Gateway and AWS Lambda provide a fully serverless, managed ingestion and processing layer with no server management. Amazon DynamoDB is a fully managed, automatically scaling database well-suited for aggregating tenant-based hourly usage. Options B, C, and D all rely on EC2 instances, which introduce server management, patching, scaling, and higher operational overhead. Option C further increases overhead with database administration and licensing. Therefore, option A best meets the requirements.
Question 453
A solutions architect is designing the storage architecture for a new web application used for storing and viewing engineering drawings. All application components will be deployed on the AWS infrastructure.
The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load. The application must be able to store petabytes of data.
Which combination of storage and caching should the solutions architect use?
A. Amazon S3 with Amazon CloudFront
B. Amazon S3 Glacier with Amazon ElastiCache
C. Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront
D. AWS Storage Gateway with Amazon ElastiCache
Show Answer
Correct Answer: A
Explanation: The application must store and serve petabytes of engineering drawings with low latency. Amazon S3 provides virtually unlimited, highly durable, and cost‑effective object storage suitable for petabyte‑scale data. Amazon CloudFront integrates natively with S3 to cache objects at edge locations, significantly reducing load times for users. Other options either involve archival storage with high latency (Glacier), storage types that do not scale cost‑effectively to petabytes (EBS), or services intended for hybrid/on‑premises scenarios (Storage Gateway).
Question 454
A company has an on-premises MySQL database that handles transactional data. The company is migrating the database to the AWS Cloud. The migrated database must maintain compatibility with the company's applications that use the database. The migrated database also must scale automatically during periods of increased demand.
Which migration solution will meet these requirements?
A. Use native MySQL tools to migrate the database to Amazon RDS for MySQL. Configure elastic storage scaling.
B. Migrate the database to Amazon Redshift by using the mysqldump utility. Turn on Auto Scaling for the Amazon Redshift cluster.
C. Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon Aurora. Turn on Aurora Auto Scaling.
D. Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon DynamoDB. Configure an Auto Scaling policy.
Show Answer
Correct Answer: C
Explanation: The database is transactional and MySQL-based, so the target must be relational and MySQL-compatible. Amazon Aurora (MySQL-compatible) preserves application compatibility and provides built-in, automatic scaling of capacity to handle increased demand. AWS DMS is designed to migrate on-premises MySQL databases to Aurora with minimal downtime. Redshift is for analytics, DynamoDB is NoSQL and incompatible, and standard RDS for MySQL does not provide the same level of automatic compute scaling as Aurora.
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.