A company uses an Amazon RDS for MySQL instance. To prepare for end-of-year processing, the company added a read replica to accommodate extra read-only queries from the company's reporting tool. The read replica CPU usage was 60% and the primary instance CPU usage was 60%.
After end-of-year activities are complete, the read replica has a constant 25% CPU usage. The primary instance still has a constant 60% CPU usage. The company wants to rightsize the database and still provide enough performance for future growth.
Which solution will meet these requirements?
A. Delete the read replica Do not make changes to the primary instance
B. Resize the read replica to a smaller instance size Do not make changes to the primary instance
C. Resize the read replica to a larger instance size Resize the primary instance to a smaller instance size
D. Delete the read replica Resize the primary instance to a larger instance
Show Answer
Correct Answer: B
Explanation: The primary DB instance is consistently at about 60% CPU, which is a healthy utilization with room for future growth and does not indicate a need to scale up or down. The read replica is still serving read traffic but is now underutilized at 25% CPU after the seasonal peak. Rightsizing by downsizing the read replica reduces cost while preserving the read-scaling architecture for future reporting demand. Deleting the replica removes read offloading and future scalability, while increasing the primary instance is unnecessary based on the observed utilization.
Question 60
A company is running a media store across multiple Amazon EC2 instances distributed across multiple Availability Zones in a single VPC. The company wants a high-performing solution to share data between all the EC2 instances, and prefers to keep the data within the VPC only.
What should a solutions architect recommend?
A. Create an Amazon S3 bucket and call the service APIs from each instance's application
B. Create an Amazon S3 bucket and configure all instances to access it as a mounted volume
C. Configure an Amazon Elastic Block Store (Amazon EBS) volume and mount it across all instances
D. Configure an Amazon Elastic File System (Amazon EFS) file system and mount it across all instances
Show Answer
Correct Answer: D
Explanation: Amazon EFS provides a managed shared POSIX file system that can be mounted concurrently by multiple EC2 instances across multiple Availability Zones within a VPC. It is designed for shared, high-performance file storage. S3 is object storage rather than a shared file system, mounting S3 is not the intended access pattern, and EBS volumes cannot be shared across multiple EC2 instances in different Availability Zones for this use case.
Question 61
A company needs to grant a team of developers access to the company's AWS resources. The company must maintain a high level of security for the resources.
The company requires an access control solution that will prevent unauthorized access to the sensitive data.
Which solution will meet these requirements?
A. Share the IAM user credentials for each development team member with the rest of the team to simplify access management and to streamline development workflows.
B. Define IAM roles that have fine-grained permissions based on the principle of least privilege. Assign an IAM role to each developer.
C. Create IAM access keys to grant programmatic access to AWS resources. Allow only developers to interact with AWS resources through API calls by using the access keys.
D. Create an AWS Cognito user pool. Grant developers access to AWS resources by using the user pool.
Show Answer
Correct Answer: B
Explanation: Using IAM roles with fine-grained permissions that follow the principle of least privilege is the AWS security best practice. Roles provide temporary credentials and avoid sharing long-term credentials. Sharing IAM user credentials is insecure, static access keys increase risk and management overhead, and Amazon Cognito is intended for application end-user authentication rather than granting internal developers administrative access to AWS resources.
Question 62
A company is implementing a new application on AWS. The company will run the application on multiple Amazon EC2 instances across multiple Availability Zones within multiple AWS Regions. The application will be available through the internet. Users will access the application from around the world.
The company wants to ensure that each user who accesses the application is sent to the EC2 instances that are closest to the user’s location.
Which solution will meet these requirements?
A. Implement an Amazon Route 53 geolocation routing policy. Use an internet-facing Application Load Balancer to distribute the traffic across all Availability Zones within the same Region.
B. Implement an Amazon Route 53 geoproximity routing policy. Use an internet-facing Network Load Balancer to distribute the traffic across all Availability Zones within the same Region.
C. Implement an Amazon Route 53 multivalue answer routing policy. Use an internet-facing Application Load Balancer to distribute the traffic across all Availability Zones within the same Region.
D. Implement an Amazon Route 53 weighted routing policy. Use an internet-facing Network Load Balancer to distribute the traffic across all Availability Zones within the same Region.
Show Answer
Correct Answer: B
Explanation: Geoproximity routing is designed to route users to the geographically closest AWS resource based on the locations of users and resources (optionally with bias), which matches the requirement to send each user to the closest Regional deployment. Geolocation routing instead matches users to predefined geographic locations and is commonly used for regional content or compliance, not closest-resource selection. The load balancer choice is secondary here; an internet-facing NLB can distribute traffic across Availability Zones within a Region.
Question 63
A company is migrating its on-premises Oracle database to an Amazon RDS for Oracle database. The company needs to retain data for 90 days to meet regulatory requirements. The company must also be able to restore the database to a specific point in time for up to 14 days.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create Amazon RDS automated backups. Set the retention period to 90 days.
B. Create an Amazon RDS manual snapshot every day. Delete manual snapshots that are older than 90 days.
C. Use the Amazon Aurora Clone feature for Oracle to create a point-in-time restore. Delete clones that are older than 90 days.
D. Create a backup plan that has a retention period of 90 days by using AWS Backup for Amazon RDS.
Show Answer
Correct Answer: D
Explanation: Amazon RDS automated backups support a maximum retention period of 35 days, so they cannot satisfy a 90-day retention requirement. Manual daily snapshots would meet retention only with ongoing operational effort. Aurora Clone is not applicable to Amazon RDS for Oracle. AWS Backup can manage Amazon RDS backups with a 90-day retention policy while preserving point-in-time recovery capability for the required 14-day window (via continuous backups where supported), providing the least operational overhead.
Question 64
A consumer survey company has gathered data for several years from a specific geographic region. The company stores this data in an Amazon S3 bucket in an AWS Region.
The company has started to share this data with a marketing firm in a new geographic region. The company has granted the firm's AWS account access to the S3 bucket. The company wants to minimize the data transfer costs when the marketing firm requests data from the S3 bucket.
Which solution will meet these requirements?
A. Configure the Requester Pays feature on the company’s S3 bucket.
B. Configure S3 Cross-Region Replication (CRR) from the company’s S3 bucket to one of the marketing firm’s S3 buckets.
C. Configure AWS Resource Access Manager to share the S3 bucket with the marketing firm AWS account.
D. Configure the company’s S3 bucket to use S3 Intelligent-Tiering Sync the S3 bucket to one of the marketing firm’s S3 buckets.
Show Answer
Correct Answer: A
Explanation: Requester Pays shifts the cost of data requests and data transfer out from the bucket owner to the requester. The requirement is to minimize the consumer survey company's data transfer costs when the marketing firm accesses the bucket. Cross-Region Replication would add replication, storage, and transfer costs for the bucket owner and does not minimize the owner's transfer costs. AWS RAM does not change S3 data transfer billing, and S3 Intelligent-Tiering affects storage costs, not data transfer costs.
Question 65
A company has a web application that has thousands of users. The application uses 8-10 user-uploaded images to generate AI images. Users can download the generated AI images once every 6 hours. The company also has a premium user option that gives users the ability to download the generated AI images anytime.
The company uses the user-uploaded images to run AI model training twice a year. The company needs a storage solution to store the images.
Which storage solution meets these requirements MOST cost-effectively?
A. Move uploaded images to Amazon S3 Glacier Deep Archive. Move premium user-generated AI images to S3 Standard. Move non-premium user-generated AI images to S3 Standard-Infrequent Access (S3 Standard-IA).
B. Move uploaded images to Amazon S3 Glacier Deep Archive Move all generated AI images to S3 Glacier Flexible Retrieval.
C. Move uploaded images to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Move premium user-generated AI images to S3 Standard. Move non-premium user-generated AI images to S3 Standard-Infrequent Access (S3 Standard-IA).
D. Move uploaded images to Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Move all generated AI images to S3 Glacier Flexible Retrieval.
Show Answer
Correct Answer: A
Explanation: S3 Glacier Deep Archive is the lowest-cost option for data accessed only about twice a year, making it appropriate for the uploaded training images if retrieval can be planned ahead. Premium users require immediate access, so their generated images should remain in S3 Standard. Non-premium generated images are accessed less frequently and can use S3 Standard-IA for lower storage cost while still providing immediate retrieval. Glacier Flexible Retrieval is unsuitable for premium users because retrieval is not immediate, and One Zone-IA reduces resilience for original uploaded images that are valuable for future model training.
Question 66
An ecommerce company is preparing to deploy a web application on AWS to ensure continuous service for customers. The architecture includes a web application that the company hosts on Amazon EC2 instances, a relational database in Amazon RDS, and static assets that the company stores in Amazon S3.
The company wants to design a robust and resilient architecture for the application.
Which solution will meet these requirements?
A. Deploy Amazon EC2 instances in a single Availability Zone. Deploy an RDS DB instance in the same Availability Zone. Use Amazon S3 with versioning enabled to store static assets.
B. Deploy Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones. Deploy a Multi-AZ RDS DB instance. Use Amazon CloudFront to distribute static assets.
C. Deploy Amazon EC2 instances in a single Availability Zone. Deploy an RDS DB instance in a second Availability Zone for cross-AZ redundancy. Serve static assets directly from the EC2 instances.
D. Use AWS Lambda functions to serve the web application. Use Amazon Aurora Serverless v2 for the database. Store static assets in Amazon Elastic File System (Amazon EFS) One Zone-Infrequent Access (One Zone-IA).
Show Answer
Correct Answer: B
Explanation: A resilient architecture uses EC2 instances in an Auto Scaling group spanning multiple Availability Zones to tolerate AZ failures, a Multi-AZ Amazon RDS deployment for automatic failover, and CloudFront to efficiently and highly available serve static assets (typically backed by Amazon S3). The other options rely on single-AZ components or inappropriate storage/services, reducing availability.
Question 67
A company uses AWS to host its public ecommerce website. The website uses an AWS Global Accelerator accelerator for traffic from the internet. The Global Accelerator accelerator forwards the traffic to an Application Load Balancer (ALB) that is the entry point for an Auto Scaling group.
The company recently identified a DDoS attack on the website. The company needs a solution to mitigate future attacks.
Which solution will meet these requirements with the LEAST implementation effort?
A. Configure an AWS WAF web ACL for the Global Accelerator accelerator to block traffic by using rate-based rules
B. Configure an AWS Lambda function to read the ALB metrics to block attacks by updating a VPC network ACL
C. Configure an AWS WAF web ACL on the ALB to block traffic by using rate-based rules
D. Configure an Amazon CloudFront distribution in front of the Global Accelerator accelerator
Show Answer
Correct Answer: C
Explanation: AWS WAF cannot be attached directly to an AWS Global Accelerator. AWS WAF is supported on Application Load Balancers, where a rate-based rule can mitigate Layer 7 HTTP/HTTPS DDoS request floods with minimal implementation effort. Updating network ACLs via Lambda is complex and ineffective for this use case, and placing CloudFront in front of Global Accelerator is not an appropriate architecture.
Question 68
A company has multiple Amazon RDS DB instances that run in a development AWS account. All the instances have tags to identify them as development resources. The company needs the development DB instances to run on a schedule only during business hours.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an Amazon CloudWatch alarm to identify RDS instances that need to be stopped. Create an AWS Lambda function to start and stop the RDS instances.
B. Create an AWS Trusted Advisor report to identify RDS instances to be started and stopped. Create an AWS Lambda function to start and stop the RDS instances.
C. Create AWS Systems Manager State Manager associations to start and stop the RDS instances.
D. Create an Amazon EventBridge rule that invokes AWS Lambda functions to start and stop the RDS instances.
Show Answer
Correct Answer: C
Explanation: AWS Systems Manager State Manager can schedule Automation runbooks such as AWS-StartRdsInstance and AWS-StopRdsInstance and target resources by tags, providing a managed solution with less operational overhead than creating and maintaining Lambda functions with EventBridge. CloudWatch alarms and Trusted Advisor are not scheduling mechanisms.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.