A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not travel across the internet.
Which combination of steps should the solutions architect take to meet this requirement? (Choose two.)
A. Create a route table entry for the endpoint.
B. Create a gateway endpoint for DynamoD
C. Create an interface endpoint for Amazon EC2.
D. Create an elastic network interface for the endpoint in each of the subnets of the VPC.
E. Create a security group entry in the endpoint's security group to provide access.
Show Answer
Correct Answer: A, B
Explanation: Amazon DynamoDB uses a gateway VPC endpoint (not an interface endpoint) for private access from resources in a VPC. After creating the gateway endpoint, you associate it with the appropriate route tables so traffic destined for DynamoDB is routed through the endpoint instead of the internet. Gateway endpoints do not create ENIs and do not have security groups, so options D and E do not apply.
Question 446
A company has 5 PB of archived data on physical tapes. The company needs to preserve the data on the tapes for another 10 years for compliance purposes. The company wants to migrate to AWS in the next 6 months. The data center that stores the tapes has a 1 Gbps uplink internet connectivity.
Which solution will meet these requirements MOST cost-effectively?
A. Read the data from the tapes on premises. Stage the data in a local NFS storage. Use AWS DataSync to migrate the data to Amazon S3 Glacier Flexible Retrieval.
B. Use an on-premises backup application to read the data from the tapes and to write directly to Amazon S3 Glacier Deep Archive.
C. Order multiple AWS Snowball devices that have Tape Gateway. Copy the physical tapes to virtual tapes in Snowball. Ship the Snowball devices to AWS. Create a lifecycle policy to move the tapes to Amazon S3 Glacier Deep Archive.
D. Configure an on-premises Tape Gateway. Create virtual tapes in the AWS Cloud. Use backup software to copy the physical tape to the virtual tape.
Show Answer
Correct Answer: C
Explanation: The 1 Gbps internet link cannot transfer 5 PB within the 6-month migration window. Using AWS Snowball with Tape Gateway is designed for petabyte-scale migration from physical tapes by copying to virtual tapes offline and shipping the devices to AWS. After ingestion, lifecycle policies can transition data to Amazon S3 Glacier Deep Archive for the lowest long-term archival storage cost. Internet-based options (A, B, and D) are impractical due to bandwidth constraints.
Question 447
A solutions architect needs to review a company's Amazon S3 buckets to discover personally identifiable information (PII). The company stores the PII data in the us-east-1 Region and us-west-2 Region.
Which solution will meet these requirements with the LEAST operational overhead?
A. Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3.
B. Configure AWS Security Hub for all Regions. Create an AWS Config rule to analyze the data that is in Amazon S3.
C. Configure Amazon Inspector to analyze the data that is in Amazon S3.
D. Configure Amazon GuardDuty to analyze the data that is in Amazon S3.
Show Answer
Correct Answer: A
Explanation: Amazon Macie is the AWS service specifically designed to discover, classify, and protect sensitive data such as personally identifiable information (PII) in Amazon S3. Because Macie is a Regional service, it should be enabled in each Region that contains the S3 buckets (us-east-1 and us-west-2) and configured to analyze those buckets. Security Hub aggregates security findings but does not perform PII discovery. Amazon Inspector assesses vulnerabilities and software exposure, not S3 data classification. Amazon GuardDuty detects threats and malicious activity, not PII in S3.
Question 448
A company has two VPCs that are located in the us-west-2 Region within the same AWS account. The company needs to allow network traffic between these VPCs. Approximately 500 GB of data transfer will occur between the VPCs each month.
What is the MOST cost-effective solution to connect these VPCs?
A. Implement AWS Transit Gateway to connect the VPCs. Update the route tables of each VPC to use the transit gateway for inter-VPC communication.
B. Implement an AWS Site-to-Site VPN tunnel between the VPCs. Update the route tables of each VPC to use the VPN tunnel for inter-VPC communication.
C. Set up a VPC peering connection between the VPCs. Update the route tables of each VPC to use the VPC peering connection for inter-VPC communication.
D. Set up a 1 GB AWS Direct Connect connection between the VPCs. Update the route tables of each VPC to use the Direct Connect connection for inter-VPC communication.
Show Answer
Correct Answer: C
Explanation: For two VPCs in the same AWS account and the same Region, a VPC peering connection is the simplest and most cost-effective option. It provides private connectivity directly between the VPCs without the hourly attachment and data processing charges of Transit Gateway, the tunnel overhead and charges of Site-to-Site VPN, or the significant cost and inappropriate use case of Direct Connect. After creating the peering connection, update each VPC's route tables to route traffic through the peering connection.
Question 449
A company deployed a serverless application that uses Amazon DynamoDB as a database layer. The application has experienced a large increase in users. The company wants to improve database response time from milliseconds to microseconds and to cache requests to the database.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use DynamoDB Accelerator (DAX).
B. Migrate the database to Amazon Redshift.
C. Migrate the database to Amazon RDS.
D. Use Amazon ElastiCache for Redis.
Show Answer
Correct Answer: A
Explanation: DynamoDB Accelerator (DAX) is a fully managed, in-memory cache designed specifically for DynamoDB. It improves read response times from milliseconds to microseconds while caching database requests with minimal operational overhead. Redshift is for analytics, RDS is a relational database and not a cache for DynamoDB, and ElastiCache for Redis requires more application integration and operational management than DAX.
Question 450
A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needs to ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates.
Which solution will meet these requirements with the MOST operational efficiency?
A. Use a CloudFront security policy to create a certificate.
B. Use a CloudFront origin access control (OAC) to create a certificate.
C. Use AWS Certificate Manager (ACM) to create a certificate. Use DNS validation for the domain.
D. Use AWS Certificate Manager (ACM) to create a certificate. Use email validation for the domain.
Show Answer
Correct Answer: C
Explanation: AWS Certificate Manager (ACM) is the AWS service that issues and manages TLS certificates for use with CloudFront. DNS validation enables fully automated domain validation and automatic certificate renewal, making it the most operationally efficient option. CloudFront security policies and Origin Access Control do not create TLS certificates, and email validation requires manual action for validation/renewal.
Question 451
A company runs an application on AWS. The application receives inconsistent amounts of usage. The application uses AWS Direct Connect to connect to an on-premises MySQL-compatible database. The on-premises database consistently uses a minimum of 2 GiB of memory.
The company wants to migrate the on-premises database to a managed AWS service. The company wants to use auto scaling capabilities to manage unexpected workload increases.
Which solution will meet these requirements with the LEAST administrative overhead?
A. Provision an Amazon DynamoDB database with default read and write capacity settings.
B. Provision an Amazon Aurora database with a minimum capacity of 1 Aurora capacity unit (ACU).
C. Provision an Amazon Aurora Serverless v2 database with a minimum capacity of 1 Aurora capacity unit (ACU).
D. Provision an Amazon RDS for MySQL database with 2 GiB of memory.
Show Answer
Correct Answer: C
Explanation: Amazon Aurora Serverless v2 is MySQL-compatible, is a fully managed service, and automatically scales compute capacity (ACUs) up and down to handle unpredictable workloads with minimal administrative effort. One ACU provides approximately 2 GiB of memory, matching the stated baseline. DynamoDB is not MySQL-compatible, provisioned Aurora does not provide serverless auto scaling, and RDS for MySQL requires instance sizing and manual scaling.
Question 452
A solutions architect is designing a workload that will store hourly energy consumption by business tenants in a building. The sensors will feed a database through HTTP requests that will add up usage for each tenant. The solutions architect must use managed services when possible. The workload will receive more features in the future as the solutions architect adds independent components.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in an Amazon DynamoDB table.
B. Use an Elastic Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon S3 bucket to store the processed data.
C. Use Amazon API Gateway with AWS Lambda functions to receive the data from the sensors, process the data, and store the data in a Microsoft SQL Server Express database on an Amazon EC2 instance.
D. Use an Elastic Load Balancer that is supported by an Auto Scaling group of Amazon EC2 instances to receive and process the data from the sensors. Use an Amazon Elastic File System (Amazon EFS) shared file system to store the processed data.
Show Answer
Correct Answer: A
Explanation: Option A uses fully managed, serverless services: Amazon API Gateway for HTTP ingestion, AWS Lambda for processing, and Amazon DynamoDB for storage. This minimizes operational overhead by eliminating server management while providing automatic scaling and a modular event-driven architecture that is easy to extend with additional independent components. The other options rely on EC2 instances (and in one case SQL Server administration), which increases operational burden.
Question 453
A solutions architect is designing the storage architecture for a new web application used for storing and viewing engineering drawings. All application components will be deployed on the AWS infrastructure.
The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load. The application must be able to store petabytes of data.
Which combination of storage and caching should the solutions architect use?
A. Amazon S3 with Amazon CloudFront
B. Amazon S3 Glacier with Amazon ElastiCache
C. Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront
D. AWS Storage Gateway with Amazon ElastiCache
Show Answer
Correct Answer: A
Explanation: Amazon S3 is the appropriate storage service for petabyte-scale object storage such as engineering drawings. Amazon CloudFront caches S3 content at edge locations to reduce latency and improve load times for users. S3 Glacier is intended for archival storage with high retrieval latency, EBS is block storage rather than petabyte-scale object storage for this use case, and Storage Gateway is designed for hybrid on-premises integration, which is not required here.
Question 454
A company has an on-premises MySQL database that handles transactional data. The company is migrating the database to the AWS Cloud. The migrated database must maintain compatibility with the company's applications that use the database. The migrated database also must scale automatically during periods of increased demand.
Which migration solution will meet these requirements?
A. Use native MySQL tools to migrate the database to Amazon RDS for MySQL. Configure elastic storage scaling.
B. Migrate the database to Amazon Redshift by using the mysqldump utility. Turn on Auto Scaling for the Amazon Redshift cluster.
C. Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon Aurora. Turn on Aurora Auto Scaling.
D. Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon DynamoDB. Configure an Auto Scaling policy.
Show Answer
Correct Answer: C
Explanation: Amazon Aurora is MySQL-compatible, preserving application compatibility for transactional workloads. AWS Database Migration Service (AWS DMS) is a standard service for migrating an on-premises MySQL database to Aurora with minimal downtime. Aurora Auto Scaling (for read replicas) supports automatic scaling to handle increased demand. RDS MySQL storage auto scaling only scales storage, not database compute. Redshift is a data warehouse, and DynamoDB is a NoSQL database that is not MySQL-compatible.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.