A company runs a web application on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application stores data in an Amazon Aurora MySQL DB cluster.
The company needs to create a disaster recovery (DR) solution. The acceptable recovery time for the DR solution is up to 30 minutes. The DR solution does not need to support customer usage when the primary infrastructure is healthy.
Which solution will meet these requirements?
A. Deploy the DR infrastructure in a second AWS Region with an ALB and an Auto Scaling group. Set the desired capacity and maximum capacity of the Auto Scaling group to a minimum value. Convert the Aurora MySQL DB cluster to an Aurora global database. Configure Amazon Route 53 for an active-passive failover with ALB endpoints.
B. Deploy the DR infrastructure in a second AWS Region with an ALUpdate the Auto Scaling group to include EC2 instances from the second Region. Use Amazon Route 53 to configure active-active failover. Convert the Aurora MySQL DB cluster to an Aurora global database.
C. Back up the Aurora MySQL DB cluster data by using AWS Backup. Deploy the DR infrastructure in a second AWS Region with an ALB. Update the Auto Scaling group to include EC2 instances from the second Region. Use Amazon Route 53 to configure active-active failover. Create an Aurora MySQL DB cluster in the second Region Restore the data from the backup.
D. Back up the infrastructure configuration by using AWS Backup. Use the backup to create the required infrastructure in a second AWS Region. Set the Auto Scaling group desired capacity to zero. Use Amazon Route 53 to configure active-passive failover. Convert the Aurora MySQL DB cluster to an Aurora global database.
Show Answer
Correct Answer: A
Explanation: The requirement is a DR solution with up to 30 minutes RTO that does not serve traffic during normal operations. This aligns with a warm standby approach. Option A deploys infrastructure in a second Region with minimal running capacity, uses active-passive Route 53 failover, and leverages Aurora Global Database for fast cross-Region replication and promotion. This setup can be promoted quickly within the 30-minute RTO. Options involving backup and restore (C and D) typically have RTOs of hours, and active-active designs (B) are unnecessary and contradict the requirement.
Question 42
A company uses an Amazon DynamoDB table to store data that the company receives from devices. The DynamoDB table supports a customer-facing website to display recent activity on customer devices. The company configured the table with provisioned throughput for writes and reads.
The company wants to calculate performance metrics for customer device data on a daily basis. The solution must have minimal effect on the table's provisioned read and write capacity.
Which solution will meet these requirements?
A. Use an Amazon Athena SQL query with the Amazon Athena DynamoDB connector to calculate performance metrics on a recurring schedule.
B. Use an AWS Glue job with the AWS Glue DynamoDB export connector to calculate performance metrics on a recurring schedule.
C. Use an Amazon Redshift COPY command to calculate performance metrics on a recurring schedule.
D. Use an Amazon EMR job with an Apache Hive external table to calculate performance metrics on a recurring schedule.
Show Answer
Correct Answer: B
Explanation: The requirement is to calculate daily metrics with minimal impact on DynamoDB provisioned read/write capacity. AWS Glue with the DynamoDB export connector works on DynamoDB exports (snapshots) to Amazon S3, which do not consume RCUs or WCUs and have no impact on table performance. Athena’s DynamoDB connector, EMR, or other direct query approaches read from the live table and therefore consume provisioned capacity. Redshift cannot query DynamoDB directly without first exporting data. Hence, using AWS Glue with the DynamoDB export connector best meets the requirement.
Question 43
A solutions architect is designing the cloud architecture for a new stateless application that will be deployed on AWS. The solutions architect created an Amazon Machine Image (AMI) and launch template for the application.
Based on the number of jobs that need to be processed, the processing must run in parallel while adding and removing application Amazon EC2 instances as needed. The application must be loosely coupled. The job items must be durably stored.
Which solution will meet these requirements?
A. Create an Amazon Simple Notification Service (Amazon SNS) topic to send the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on CPU usage.
B. Create an Amazon Simple Queue Service (Amazon SQS) queue to hold the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on network usage.
C. Create an Amazon Simple Queue Service (Amazon SQS) queue to hold the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on the number of items in the SQS queue.
D. Create an Amazon Simple Notification Service (Amazon SNS) topic to send the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on the number of messages published to the SNS topic.
Show Answer
Correct Answer: C
Explanation: Amazon SQS provides durable storage of job items and enables loose coupling and parallel processing by multiple EC2 instances. An Auto Scaling group can scale the stateless workers based on the SQS queue depth, which directly reflects the workload. SNS does not durably store jobs, and scaling on CPU or network usage does not accurately correlate to the number of pending jobs.
Question 44
A company is developing a new application that uses a relational database to store user data and application configurations. The company expects the application to have steady user growth. The company expects the database usage to be variable and read-heavy, with occasional writes.
The company wants to cost-optimize the database solution. The company wants to use an AWS managed database solution that will provide the necessary performance.
Which solution will meet these requirements MOST cost-effectively?
A. Deploy the database on Amazon RDS. Use Provisioned IOPS SSD storage to ensure consistent performance for read and write operations.
B. Deploy the database on Amazon Aurora Serverless to automatically scale the database capacity based on actual usage to accommodate the workload.
C. Deploy the database on Amazon DynamoDB. Use on-demand capacity mode to automatically scale throughput to accommodate the workload.
D. Deploy the database on Amazon RDS. Use magnetic storage and use read replicas to accommodate the workload.
Show Answer
Correct Answer: B
Explanation: The workload is relational, read-heavy, and variable with steady growth, and the goal is cost optimization using a managed AWS service. Amazon Aurora Serverless automatically scales compute capacity up and down based on actual usage, so the company pays only for what it consumes while still getting high read performance and compatibility with relational databases. Provisioned IOPS RDS would overpay for steady performance, DynamoDB is not relational, and RDS with magnetic storage would not provide adequate performance.
Question 45
A company currently runs an on-premises stock trading application by using Microsoft Windows Server. The company wants to migrate the application to the AWS Cloud.
The company needs to design a highly available solution that provides low-latency access to block storage across multiple Availability Zones.
Which solution will meet these requirements with the LEAST implementation effort?
A. Configure a Windows Server cluster that spans two Availability Zones on Amazon EC2 instances. Install the application on both cluster nodes. Use Amazon FSx for Windows File Server as shared storage between the two cluster nodes.
B. Configure a Windows Server cluster that spans two Availability Zones on Amazon EC2 instances. Install the application on both cluster nodes. Use Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp3) volumes as storage attached to the EC2 instances. Set up application-level replication to sync data from one EBS volume in one Availability Zone to another EBS volume in the second Availability Zone.
C. Deploy the application on Amazon EC2 instances in two Availability Zones. Configure one EC2 instance as active and the second EC2 instance in standby mode. Use an Amazon FSx for NetApp ONTAP Multi-AZ file system to access the data by using Internet Small Computer Systems Interface (iSCSI) protocol.
D. Deploy the application on Amazon EC2 instances in two Availability Zones. Configure one EC2 instance as active and the second EC2 instance in standby mode. Use Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS SSD (io2) volumes as storage attached to the EC2 instances. Set up Amazon EBS level replication to sync data from one io2 volume in one Availability Zone to another io2 volume in the second Availability Zone.
Show Answer
Correct Answer: C
Explanation: The requirement is highly available, low-latency block storage accessible across multiple Availability Zones with the least implementation effort. Amazon FSx for NetApp ONTAP natively supports block storage via iSCSI, offers built-in Multi-AZ high availability and synchronous replication, and is fully managed, minimizing operational complexity. Options A uses file storage (not block), B requires custom application-level replication, and D relies on complex EBS cross-AZ replication designs that are not native and increase implementation effort.
Question 46
A financial services company plans to launch a new application on AWS to handle sensitive financial transactions. The company will deploy the application on Amazon EC2 instances. The company will use Amazon RDS for MySQL as the database. The company’s security policies mandate that data must be encrypted at rest and in transit.
Which solution will meet these requirements with the LEAST operational overhead?
A. Configure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure AWS Certificate Manager (ACM) SSL/TLS certificates for encryption in transit.
B. Configure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure IPsec tunnels for encryption in transit.
C. Implement third-party application-level data encryption before storing data in Amazon RDS for MySQL. Configure AWS Certificate Manager (ACM) SSL/TLS certificates for encryption in transit.
D. Configure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure a VPN connection to enable private connectivity to encrypt data in transit.
Show Answer
Correct Answer: A
Explanation: Encryption at rest for Amazon RDS for MySQL can be enabled natively using AWS KMS managed keys with minimal configuration and no custom key management overhead. For encryption in transit, using SSL/TLS with certificates managed by AWS Certificate Manager provides built-in support, automatic renewal, and minimal operational effort. Other options introduce additional complexity such as VPNs, IPsec tunnels, or application-level encryption, which increase operational overhead.
Question 47
A company is designing a web application with an internet-facing Application Load Balancer (ALB).
The company needs the ALB to receive HTTPS web traffic from the public internet. The ALB must send only HTTPS traffic to the web application servers hosted on the Amazon EC2 instances on port 443. The ALB must perform a health check of the web application servers over HTTPS on port 8443.
Which combination of configurations of the security group that is associated with the ALB will meet these requirements? (Choose three.)
A. Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443.
B. Allow all outbound traffic to 0.0.0.0/0 for port 443.
C. Allow HTTPS outbound traffic to the web application instances for port 443.
D. Allow HTTPS inbound traffic from the web application instances for port 443.
E. Allow HTTPS outbound traffic to the web application instances for the health check on port 8443.
F. Allow HTTPS inbound traffic from the web application instances for the health check on port 8443.
Show Answer
Correct Answer: A, C, E
Explanation: The security group is attached to the internet-facing ALB. It must allow inbound HTTPS from the public internet on port 443 (A). The ALB initiates connections to the EC2 instances, so outbound rules must allow HTTPS to the instances on port 443 for application traffic (C) and HTTPS on port 8443 for health checks (E). Inbound rules from the instances (D, F) are not required because responses are automatically allowed, and allowing all outbound traffic (B) is unnecessary and not specific to the requirements.
Question 48
A company currently runs an on-premises application that usesASP.NET on Linux machines. The application is resource-intensive and serves customers directly.
The company wants to modernize the application to .NET. The company wants to run the application on containers and to scale based on Amazon CloudWatch metrics. The company also wants to reduce the time spent on operational maintenance activities.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS App2Container to containerize the application. Use an AWS CloudFormation template to deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.
B. Use AWS App2Container to containerize the application. Use an AWS CloudFormation template to deploy the application to Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances.
C. Use AWS App Runner to containerize the application. Use App Runner to deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.
D. Use AWS App Runner to containerize the application. Use App Runner to deploy the application to Amazon Elastic Kubernetes Service (Amazon EKS) on Amazon EC2 instances.
Show Answer
Correct Answer: A
Explanation: The goal is to modernize to .NET, run in containers, scale with CloudWatch metrics, and minimize operational overhead. AWS App2Container is appropriate to containerize an existing ASP.NET application. Running the containers on Amazon ECS with AWS Fargate removes the need to manage EC2 instances, patching, or capacity planning, while still supporting CloudWatch-based scaling. ECS on EC2 and EKS options introduce instance and cluster management overhead, and App Runner does not deploy applications to ECS or EKS and is not the right fit here. Therefore, option A has the least operational overhead.
Question 49
A company wants to create an Amazon EMR cluster that multiple teams will use. The company wants to ensure that each team’s big data workloads can access only the AWS services that each team needs to interact with. The company does not want the workloads to have access to Instance Metadata Service Version 2 (IMDSv2) on the cluster’s underlying EC2 instances.
Which solution will meet these requirements?
A. Configure interface VPC endpoints for each AWS service that the teams need. Use the required interface VPC endpoints to submit the big data workloads.
B. Create EMR runtime roles. Configure the cluster to use the runtime roles. Use the runtime roles to submit the big data workloads.
C. Create an EC2 IAM instance profile that has the required permissions for each team. Use the instance profile to submit the big data workloads.
D. Create an EMR security configuration that has the EnableApplicationScopedIAMRole option set to false. Use the security configuration to submit the big data workloads.
Show Answer
Correct Answer: B
Explanation: EMR runtime roles allow each submitted job or step to assume a specific IAM role with only the permissions required by that team’s workload. This enforces fine-grained, per-workload access to AWS services on a shared EMR cluster. Jobs that use runtime roles cannot access the EC2 instance profile or the Instance Metadata Service (IMDSv2), which directly meets the requirement to block IMDSv2 access. Other options either grant permissions at the instance level or do not provide per-team isolation.
Question 50
A global ecommerce company uses a monolithic architecture. The company needs a solution to manage the increasing volume of product data. The solution must be scalable and have a modular service architecture. The company needs to maintain its structured database schemas. The company also needs a storage solution to store product data and product images.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use an Amazon EC2 instance in an Auto Scaling group to deploy a containerized application. Use an Application Load Balancer to distribute web traffic. Use an Amazon RDS DB instance to store product data and product images.
B. Use AWS Lambda functions to manage the existing monolithic application. Use Amazon DynamoDB to store product data and product images. Use Amazon Simple Notification Service (Amazon SNS) for event-driven communication between the Lambda functions.
C. Use Amazon Elastic Kubernetes Service (Amazon EKS) with an Amazon EC2 deployment to deploy a containerized application. Use an Amazon Aurora cluster to store the product data. Use AWS Step Functions to manage workflows. Store the product images in Amazon S3 Glacier Deep Archive.
D. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate to deploy a containerized application. Use Amazon RDS with a Multi-AZ deployment to store the product data. Store the product images in an Amazon S3 bucket.
Show Answer
Correct Answer: D
Explanation: The requirements call for scalability, a modular/service-based architecture, retention of structured schemas, storage for both product data and images, and the least operational overhead. Amazon ECS with AWS Fargate removes server and cluster management while supporting containerized, modular services. Amazon RDS preserves structured relational schemas with managed operations (Multi-AZ for availability), and Amazon S3 is the optimal, low-overhead service for storing product images. Other options introduce higher operational complexity (EC2, EKS) or do not meet schema or use-case needs (DynamoDB, Glacier).
$19
Get all 1003 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.