A company is developing a latency-sensitive application. Part of the application includes several AWS Lambda functions that need to initialize as quickly as possible. The Lambda functions are written in Java and contain initialization code outside the handlers to load libraries, initialize classes, and generate unique IDs.
Which solution will meet the startup performance requirement MOST cost-effectively?
A. Move all the initialization code to the handlers for each Lambda function. Activate Lambda SnapStart for each Lambda function. Configure SnapStart to reference the $LATEST version of each Lambda function.
B. Publish a version of each Lambda function. Create an alias for each Lambda function. Configure each alias to point to its corresponding version. Set up a provisioned concurrency configuration for each Lambda function to point to the corresponding alias.
C. Publish a version of each Lambda function. Set up a provisioned concurrency configuration for each Lambda function to point to the corresponding version. Activate Lambda SnapStar for the published versions of the Lambda functions.
D. Update the Lambda functions to add a pre-snapshot hook. Move the code that generates unique IDs into the handlers. Publish a version of each Lambda function. Activate Lambda SnapStart for the published versions of the Lambda functions.
Show Answer
Correct Answer: D
Explanation: AWS Lambda SnapStart is the most cost-effective way to reduce Java cold starts because it pre-initializes and snapshots the execution environment at no additional charge, unlike provisioned concurrency which incurs ongoing cost. SnapStart requires a published version and cannot be used with provisioned concurrency. Any code that must be unique per invocation (such as unique ID generation) cannot run before the snapshot and must be moved into the handler, while other heavy initialization remains outside the handler or in a pre-snapshot hook. Option D follows all SnapStart requirements and constraints and avoids unnecessary cost.
Question 41
A company is running a serverless ecommerce application on AWS. The application uses Amazon API Gateway to invoke AWS Lambda Java functions. The Lambda functions connect to an Amazon RDS for MySQL database to store data.
During a recent sale event, a sudden increase in web traffic resulted in poor API performance and database connection failures. The company needs to implement a solution to minimize the latency for the Lambda functions and to support bursts in traffic.
Which solution will meet these requirements with the LEAST amount of change to the application?
A. Update the code of the Lambda functions so that the Lambda functions open the database connection outside of the function handler. Increase the provisioned concurrency for the Lambda functions.
B. Create an RDS Proxy endpoint for the database. Store database secrets in AWS Secrets Manager. Set up the required IAM permissions. Update the Lambda functions to connect to the RDS Proxy endpoint. Increase the provisioned concurrency for the Lambda functions.
C. Create a custom parameter group. Increase the value of the max_connections parameter. Associate the custom parameter group with the RDS DB instance and schedule a reboot. Increase the reserved concurrency for the Lambda functions.
D. Create an RDS Proxy endpoint for the database. Store database secrets in AWS Secrets Manager. Set up the required IAM permissions. Update the Lambda functions to connect to the RDS Proxy endpoint. Increase the reserved concurrency for the Lambda functions.
Show Answer
Correct Answer: B
Explanation: The main issues are Lambda cold starts during traffic bursts and database connection exhaustion on Amazon RDS. RDS Proxy is specifically designed to pool and manage database connections for Lambda, preventing connection storms and reducing latency with minimal application changes (only the endpoint update). Provisioned concurrency keeps Lambda execution environments warm, minimizing cold-start latency during sudden spikes. Reserved concurrency does not reduce cold starts, and simply increasing max_connections or reusing connections in code does not adequately handle burst scaling. Therefore, using RDS Proxy with provisioned concurrency is the best solution with the least effective change.
Question 42
A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods. The company’s internal applications use the API for core functionality and business logic. The company’s customers use the API to access data from their accounts. Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.
The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.
What should a solutions architect do to meet these requirements?
A. Use AWS WAF to protect both APIs. Configure Amazon Inspector to analyze the legacy API. Configure Amazon GuardDuty to monitor for malicious attempts to access the APIs.
B. Use AWS WAF to protect the API Gateway API. Configure Amazon Inspector to analyze both APIs. Configure Amazon GuardDuty to block malicious attempts to access the APIs.
C. Use AWS WAF to protect the API Gateway API. Configure Amazon Inspector to analyze the legacy API. Configure Amazon GuardDuty to monitor for malicious attempts to access the APIs.
D. Use AWS WAF to protect the API Gateway AP! Configure Amazon Inspector to protect the legacy API. Configure Amazon GuardDuty to block malicious attempts to access the APIs.
Show Answer
Correct Answer: C
Explanation: AWS WAF can natively protect Amazon API Gateway to mitigate common exploits and DoS-style attacks. The legacy API runs on a standalone EC2 instance, which cannot be directly protected by WAF without an ALB or CloudFront, but it can be assessed for vulnerabilities using Amazon Inspector. Amazon GuardDuty provides threat detection and monitoring across AWS accounts and workloads but does not block traffic, making monitoring (not blocking) the correct usage. Therefore, option C correctly applies each service according to its capabilities.
Question 43
A company plans to migrate many VMs from an on-premises environment to AWS. The company requires an initial assessment of the on-premises environment before the migration, a visualization of the dependencies between applications that run on the VMs, and a report that provides an assessment of the on-premises environment.
To get this information, the company has initiated a Migration Evaluator assessment request. The company has the ability to install collector software in its on-premises environment without any constraints
Which solution will provide the company with the required information with the LEAST operational overhead?
A. Install the AWS Application Discovery Agent on each on-premises VM. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Download the Quick insights assessment report from Migration Hub.
B. Install the Migration Evaluator Collector on each on-premises VM. After the data collection period ends, use Migration Evaluator to view the application dependencies. Download and export the discovered server list from Migration Evaluator. Upload the list to Amazon QuickSight When the QuickSight report is generated, download the Quick Insights assessment report.
C. Setup the AWS Application Discovery Service Agentless Collector in the on-premises environment. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Export the discovered server list from Application Discovery Service. Upload the list to Migration Evaluator. When the Migration Evaluator report is generated, download the Quick Insights assessment.
D. Set up the Migration Evaluator Collector in the on-premises environment. Install the AWS Application Discovery Agent on each VM. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Download the Quick Insights assessment report from Migration Evaluator.
Show Answer
Correct Answer: A
Explanation: The requirements are an initial assessment, application dependency visualization, and an assessment report with the least operational overhead. Installing the AWS Application Discovery Agent on each VM provides detailed dependency mapping (including network connections) and feeds directly into AWS Migration Hub for visualization. Migration Hub also provides the Quick Insights assessment report without requiring data exports, uploads, or multiple collectors. Other options add extra collectors or manual data movement, increasing operational overhead.
Question 44
A company recently completed a successful proof of concept of Amazon WorkSpaces. A solutions architect needs to make the solution highly available across two AWS Regions. Amazon WorkSpaces is deployed in a failover Region, and a hosted zone is deployed in Amazon Route 53.
What should the solutions architect do to configure high availability for the solution?
A. Create a connection alias in the primary Region and in the failover Region. Associate the connection aliases with a directory in each Region. Create a Route 53 failover routing policy. Set Evaluate Target Health to Yes.
B. Create a connection alias in the primary Region and in the failover Region. Associate the connection aliases with a directory in the primary Region. Create a Route 53 multivalue answer routing policy.
C. Create a connection alias in the primary Region. Associate the connection alias with a directory in the primary Region. Create a Route 53 weighted routing policy.
D. Create a connection alias in the primary Region Associate the connection alias with a directory in the failover Region. Create a Route 53 failover routing policy. Set Evaluate Target Health to Yes.
Show Answer
Correct Answer: A
Explanation: To achieve high availability for Amazon WorkSpaces across two AWS Regions, you must use cross-Region redirection. This requires creating separate connection aliases in both the primary and failover Regions and associating each alias with a directory in its respective Region. Amazon Route 53 should then be configured with a failover routing policy and health checks (Evaluate Target Health = Yes) so traffic is automatically redirected to the failover Region if the primary Region becomes unavailable. Other routing policies (weighted or multivalue) do not provide true automatic failover, and associating aliases incorrectly would break the cross-Region design.
Question 45
A utility company wants to collect usage data every 5 minutes from its smart meters to facilitate time-of-use metering. When a meter sends data to AWS, the data is sent to Amazon API Gateway, processed by an AWS Lambda function. and stored in an Amazon DynamoDB table. During the pilot phase, the Lambda functions took from 3 to 5 seconds to complete.
As more smart meters are deployed, the engineers notice the Lambda functions are taking from 1 to 2 minutes to complete. The functions are also increasing in duration as new types of metrics are collected from the devices. There are many ProvisionedThroughputExceededException errors while performing PUT operations on DynamoDB, and there are also many TooManyRequestsException errors from Lambda.
Which combination of changes will resolve these issues? (Choose two.)
A. Increase the write capacity units to the DynamoDB table.
B. Increase the memory available to the Lambda functions.
C. Increase the payload size from the smart meters to send more data.
D. Stream the data into an Amazon Kinesis data stream from API Gateway and process the data in batches.
E. Collect data in an Amazon SQS FIFO queue, which triggers a Lambda function to process each message
Show Answer
Correct Answer: A, D
Explanation: The errors indicate throughput and concurrency bottlenecks rather than a simple code-efficiency issue. ProvisionedThroughputExceededException means the DynamoDB table cannot handle the current write rate, so increasing write capacity units directly addresses this. TooManyRequestsException and increasing Lambda duration indicate excessive concurrent invocations caused by high-frequency meter data. Streaming data into Amazon Kinesis allows buffering and batch processing, reducing Lambda invocation rates and smoothing write traffic to DynamoDB. Together, these changes improve scalability and resolve both DynamoDB and Lambda throttling issues.
Question 46
A company needs to use an AWS Transfer Family SFTP-enabled server with an Amazon S3 bucket to receive updates from a third-party data supplier. The data is encrypted with Pretty Good Privacy (PGP) encryption. The company needs a solution that will automatically decrypt the data after the company receives the data.
A solutions architect will use a Transfer Family managed workflow. The company has created an IAM service role by using an IAM policy that allows access to AWS Secrets Manager and the S3 bucket. The role’s trust relationship allows the transfer amazonaws.com service to assume the role.
What should the solutions architect do next to complete the solution for automatic decryption?
A. Store the PGP public key in Secrets Manager. Add a nominal step in the Transfer Family managed workflow to decrypt files. Configure PGP encryption parameters in the nominal step. Associate the workflow with the Transfer Family server.
B. Store the PGP private key in Secrets Manager. Add an exception-handling step in the Transfer Family managed workflow to decrypt files. Configure PGP encryption parameters in the exception handler. Associate the workflow with the SFTP user.
C. Store the PGP private key in Secrets Manager. Add a nominal step in the Transfer Family managed workflow to decrypt files. Configure PGP decryption parameters in the nominal step. Associate the workflow with the Transfer Family server.
D. Store the PGP public key in Secrets Manager. Add an exception-handling step in the Transfer Family managed workflow to decrypt files. Configure PGP decryption parameters in the exception handler. Associate the workflow with the SFTP user.
Show Answer
Correct Answer: C
Explanation: To automatically decrypt PGP-encrypted files, the workflow must use the PGP private key, which is required for decryption. AWS Transfer Family managed workflows support decryption as a nominal (normal) workflow step, not as an exception handler. The private key should be securely stored in AWS Secrets Manager and referenced by the workflow. Finally, the workflow must be associated with the Transfer Family server so that files are decrypted automatically upon upload.
Question 47
A company is running several applications in the AWS Cloud. The applications are specific to separate business units in the company. The company is running the components of the applications in several AWS accounts that are in an organization in AWS Organizations.
Every cloud resource in the company’s organization has a tag that is named BusinessUnit. Every tag already has the appropriate value of the business unit name.
The company needs to allocate its cloud costs to different business units. The company also needs to visualize the cloud costs for each business unit.
Which solution will meet these requirements?
A. In the organization's management account, create a cost allocation tag that is named BusinessUnit. Also in the management account, create an Amazon S3 bucket and an AWS Cost and Usage Report (AWS CUR). Configure the S3 bucket as the destination for the AWS CUR. From the management account, query the AWS CUR data by using Amazon Athena. Use Amazon QuickSight for visualization.
B. In each member account, create a cost allocation tag that is named BusinessUnit. In the organization’s management account, create an Amazon S3 bucket and an AWS Cost and Usage Report (AWS CUR). Configure the S3 bucket as the destination for the AWS CUR. Create an Amazon CloudWatch dashboard for visualization.
C. In the organization's management account, create a cost allocation tag that is named BusinessUnit. In each member account, create an Amazon S3 bucket and an AWS Cost and Usage Report (AWS CUR). Configure each S3 bucket as the destination for its respective AWS CUR. In the management account, create an Amazon CloudWatch dashboard for visualization.
D. In each member account, create a cost allocation tag that is named BusinessUnit. Also in each member account, create an Amazon S3 bucket and an AWS Cost and Usage Report (AWS CUR). Configure each S3 bucket as the destination for its respective AWS CUR. From the management account, query the AWS CUR data by using Amazon Athena. Use Amazon QuickSight for visualization.
Show Answer
Correct Answer: A
Explanation: Cost allocation across an AWS Organization requires activating the cost allocation tag in the management account so the tag appears in consolidated billing and the Cost and Usage Report (CUR). A single, organization-level CUR delivered to an S3 bucket in the management account provides complete cost data for all member accounts. Amazon Athena is the standard service to query CUR data, and Amazon QuickSight is designed for cost visualization. CloudWatch dashboards are not suitable for CUR-based cost analysis, and creating CURs or buckets per member account is unnecessary.
Question 48
A company is migrating infrastructure for its massive multiplayer game to AWS. The game’s application features a leaderboard where players can see rankings in real time. The leaderboard requires microsecond reads and single-digit-millisecond write latencies. The datasets are single-digit terabytes in size and must be available to accept writes in less than a minute if a primary node failure occurs.
The company needs a solution in which data can persist for further analytical processing through a data pipeline.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an Amazon ElastiCache tor Redis cluster with cluster mode enabled, Configure the application to interact with the primary node.
B. Create an Amazon ROS database with a read replica. Configure the application to point writes to the writer endpoint. Configure the application to point reads to the reader endpoint.
C. Create an Amazon MemoryDB for Redis cluster in Muit-AZ mode Configure the application to interact with the primary node.
D. Create multiple Redis nodes on Amazon EC2 instances that are spread across multiple Availability Zones. Configure backups to Amazon S3.
Show Answer
Correct Answer: C
Explanation: The leaderboard requires microsecond read latency, single-digit millisecond writes, automatic failover in under a minute, durability for later analytics, and minimal operational overhead. Amazon MemoryDB for Redis is purpose-built for this: it is a fully managed, Redis-compatible, in-memory database that delivers microsecond reads, fast writes, Multi-AZ durability with automatic failover, and persistent storage via transaction logs that can feed analytics pipelines. ElastiCache for Redis lacks the same level of durability, RDS cannot meet the latency requirements, and self-managed Redis on EC2 has significantly higher operational overhead.
Question 49
A company's web application has reliability issues. The application serves customers globally. The application runs on a single Amazon EC2 instance and performs read-intensive operations on an Amazon RDS for MySQL database.
During high load, the application becomes unresponsive and requires a manual restart of the EC2 instance. A solutions architect must improve the application's reliability.
Which solution will meet this requirement with the LEAST development effort?
A. Create an Amazon CloudFront distribution. Specify the EC2 instance as the distribution’s origin. Configure a Multi-AZ deployment for the RDS for MySQL database. Use the standby DB instance for the read-intensive operations.
B. Run the application on EC2 instances that are in an Auto Scaling group. Place the EC2 instances behind an Elastic Load Balancing (ELB) load balancer. Replace the database service with Amazon Aurora. Use Aurora Replicas for the read-intensive operations.
C. Deploy AWS Global Accelerator. Configure a Multi-AZ deployment for the RDS for MySQL database. Use the standby DB instance for the read-intensive operations.
D. Migrate the application to AWS Lambda functions. Create read replicas for the RDS for MySQL database. Use the read replicas for the read-intensive operations.
Show Answer
Correct Answer: B
Explanation: The main reliability problem is the single EC2 instance becoming unresponsive under load. Placing the application in an Auto Scaling group behind a load balancer provides automatic health checks, replacement of failed instances, and horizontal scaling with minimal application changes. Using Aurora with read replicas directly addresses the read‑intensive workload and improves database availability and scalability. Other options leave the application on a single EC2 instance or require significantly more redevelopment (Lambda), so they do not meet the requirement with the least development effort.
$19
Get all 516 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.