A company is deploying a new web-based application and needs a storage solution for the Linux application servers. The company wants to create a single location for updates to application data for all instances. The active dataset will be up to 100 GB in size. A solutions architect has determined that peak operations will occur for 3 hours daily and will require a total of 225 MiBps of read throughput.
The solutions architect must design a Multi-AZ solution that makes a copy of the data available in another AWS Region for disaster recovery (DR). The DR copy has an RPO of less than 1 hour.
Which solution will meet these requirements?
A. Deploy a new Amazon Elastic File System (Amazon EFS) Multi-AZ file system. Configure the file system for 75 MiBps of provisioned throughput. Implement replication to a file system in the DR Region.
B. Deploy a new Amazon FSx for Lustre file system. Configure Bursting Throughput mode for the file system. Use AWS Backup to back up the file system to the DR Region.
C. Deploy a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume with 225 MiBps of throughput. Enable Multi-Attach for the EBS volume. Use AWS Elastic Disaster Recovery to replicate the EBS volume to the DR Region.
D. Deploy an Amazon FSx for OpenZFS file system in both the production Region and the DR Region. Create an AWS DataSync scheduled task to replicate the data from the production file system to the DR file system every 10 minutes.
Show Answer
Correct Answer: A
Explanation: Amazon EFS is a Multi-AZ, shared file system that provides a single, consistent location for application data across multiple Linux instances. With an active dataset of 100 GB, EFS can use burst credits to reach the required 225 MiBps read throughput during the 3-hour daily peak, even with 75 MiBps of provisioned throughput. EFS also natively supports cross-Region replication with an RPO well under 1 hour, satisfying the DR requirement. The other options fail due to unsupported sharing (EBS gp3), insufficient or incorrect throughput/backup behavior (FSx for Lustre with AWS Backup), or DataSync scheduling limitations that cannot guarantee an RPO of less than 1 hour (FSx for OpenZFS).
Question 83
A company used AWS CloudFormation to create all new infrastructure in its AWS member accounts. The resources rarely change and are properly sized for the expected load. The monthly AWS bill is consistent.
Occasionally, a developer creates a new resource for testing and forgets to remove the resource when the test is complete. Most of these tests last a few days before the resources are no longer needed.
The company wants to automate the process of finding unused resources. A solutions architect needs to design a solution that determines whether the cost in the AWS bill is increasing. The solution must help identify resources that cause an increase in cost and must automatically notify the company's operations team.
Which solution will meet these requirements?
A. Turn on billing alerts. Use AWS Cost Explorer to determine the costs for the past month. Create an Amazon CloudWatch alarm for total estimated charges. Specify a cost threshold that is higher than the costs that Cost Explorer determined. Add a notification to alert the operations team if the alarm threshold is breached.
B. Turn on billing alerts. Use AWS Cost Explorer to determine the average monthly costs for the past 3 months. Create an Amazon CloudWatch alarm for total estimated charges. Specify a cost threshold that is higher than the costs that Cost Explorer determined. Add a notification to alert the operations team if the alarm threshold is breached.
C. Use AWS Cost Anomaly Detection to create a cost monitor that has a monitor type of Linked account. Create a subscription to send daily AWS cost summaries to the operations team. Specify a threshold for cost variance.
D. Use AWS Cost Anomaly Detection to create a cost monitor that has a monitor type of AWS services. Create a subscription to send daily AWS cost summaries to the operations team. Specify a threshold for cost variance.
Show Answer
Correct Answer: D
Explanation: AWS Cost Anomaly Detection is designed to automatically detect unusual spending and notify teams. Using a cost monitor with the monitor type set to **AWS services** analyzes spend at the individual service level within an account, which provides the granularity needed to identify which services (and thus the likely resources) are causing cost increases from forgotten test resources. Creating a subscription with a cost-variance threshold ensures the operations team is automatically notified when anomalies occur. Billing alarms (A, B) only alert on total spend and cannot identify the cause, and a linked account monitor (C) only detects anomalies at the total account level, which can miss service-level spikes.
Question 84
A company uses AWS Organizations to manage its development environment. Each development team at the company has its own AWS account. Each account has a single VPC and CIDR blocks that do not overlap.
The company has an Amazon Aurora DB cluster in a shared services account. All the development teams need to work with live data from the DB cluster.
Which solution will provide the required connectivity to the DB cluster with the LEAST operational overhead?
A. Create an AWS Resource Access Manager (AWS RAM) resource share for the DB cluster. Share the DB cluster with all the development accounts.
B. Create a transit gateway in the shared services account. Create an AWS Resource Access Manager (AWS RAM) resource share for the transit gateway. Share the transit gateway with all the development accounts. Instruct the developers to accept the resource share. Configure networking.
C. Create an Application Load Balancer (ALB) that points to the IP address of the DB cluster. Create an AWS PrivateLink endpoint service that uses the ALB. Add permissions to allow each development account to connect to the endpoint service.
D. Create an AWS Site-to-Site VPN connection in the shared services account. Configure networking. Use AWS Marketplace VPN software in each development account to connect to the Site-to-Site VPN connection.
Show Answer
Correct Answer: B
Explanation: The requirement is network connectivity so that multiple AWS accounts can access the same live Amazon Aurora DB cluster. Sharing an Aurora cluster with AWS RAM (Option A) only supports cross-account cloning, not direct access to the live database. AWS PrivateLink (Option C) is incorrect because it requires a Network Load Balancer and is not suitable for direct Aurora access, and it adds complexity. Site-to-Site VPN with marketplace appliances (Option D) has high operational overhead. A shared AWS Transit Gateway provides scalable, centralized VPC-to-VPC connectivity across accounts with minimal ongoing management, making Option B the correct choice.
Question 85
A company has an on-premises data center and is using Kubernetes to develop a new solution on AWS. The company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters for its development and test environments.
The EKS control plane and data plane for production workloads must reside on premises. The company needs an AWS managed solution for Kubernetes management.
Which solution will meet these requirements with the LEAST operational overhead?
A. Install an AWS Outposts server in the on-premises data center. Deploy Amazon EKS by using a local cluster configuration on the Outposts server for the production workloads.
B. Install Amazon EKS Anywhere on the company's hardware in the on-premises data center. Deploy the production workloads on an EKS Anywhere cluster.
C. Install an AWS Outposts server in the on-premises data center. Deploy Amazon EKS by using an extended cluster configuration on the Outposts server for the production workloads.
D. Install an AWS Outposts server in the on-premises data center. Install Amazon EKS Anywhere on the Outposts server. Deploy the production workloads on an EKS Anywhere cluster.
Show Answer
Correct Answer: A
Explanation: The production EKS control plane and data plane must both reside on premises and be AWS managed with the least operational overhead. Amazon EKS on AWS Outposts with a **local cluster** configuration runs both the EKS control plane and worker nodes on the Outposts hardware in the on‑premises data center, while AWS manages the Kubernetes control plane. EKS Anywhere is customer‑managed and therefore higher overhead, and an extended cluster places the control plane in an AWS Region, not on premises.
Question 86
A public retail web application uses an Application Load Balancer (ALB) in front of Amazon EC2 instances running across multiple Availability Zones (AZs) in a Region backed by an Amazon RDS MySQL Multi-AZ deployment. Target group health checks are configured to use HTTP and pointed at the product catalog page. Auto Scaling is configured to maintain the web fleet size based on the ALB health check.
Recently, the application experienced an outage. Auto Scaling continuously replaced the instances during the outage. A subsequent investigation determined that the web server metrics were within the normal range, but the database tier was experiencing high load, resulting in severely elevated query response times.
Which of the following changes together would remediate these issues while improving monitoring capabilities for the availability and functionality of the entire application stack for future growth? (Choose two.)
A. Configure read replicas for Amazon RDS MySQL and use the single reader endpoint in the web application to reduce the load on the backend database tier.
B. Configure the target group health check to point at a simple HTML page instead of a product catalog page and the Amazon Route 53 health check against the product page to evaluate full application functionality. Configure Amazon CloudWatch alarms to notify administrators when the site fails.
C. Configure the target group health check to use a TCP check of the Amazon EC2 web server and the Amazon Route 53 health check against the product page to evaluate full application functionality. Configure Amazon CloudWatch alarms to notify administrators when the site fails.
D. Configure an Amazon CloudWatch alarm for Amazon RDS with an action to recover a high-load, impaired RDS instance in the database tier.
E. Configure an Amazon ElastiCache cluster and place it between the web application and RDS MySQL instances to reduce the load on the backend database tier.
Show Answer
Correct Answer: B, E
Explanation: The outage was caused by database slowness, but the ALB health check was tied to a database-dependent page. As DB latency increased, health checks failed and Auto Scaling unnecessarily replaced healthy instances. Changing the ALB target group health check to a simple HTML page decouples instance health from backend dependencies, while using Route 53 health checks and CloudWatch alarms against the product page restores end-to-end availability and functionality monitoring (B). To remediate the root cause and support future growth, adding Amazon ElastiCache reduces database load and query latency for frequently accessed catalog data, preventing similar failures as traffic grows (E).
Question 87
A flood monitoring agency has deployed more than 10,000 water-level monitoring sensors. Sensors send continuous data updates, and each update is less than 1 MB in size. The agency has a fleet of on-premises application servers. These servers receive updates from the sensors, convert the raw data into a human readable format, and write the results to an on-premises relational database server. Data analysts then use simple SQL queries to monitor the data.
The agency wants to increase overall application availability and reduce the effort that is required to perform maintenance tasks. These maintenance tasks, which include updates and patches to the application servers, cause downtime. While an application server is down, data is lost from sensors because the remaining servers cannot handle the entire workload.
The agency wants a solution that optimizes operational overhead and costs. A solutions architect recommends the use of AWS IoT Core to collect the sensor data.
What else should the solutions architect recommend to meet these requirements?
A. Send the sensor data to Amazon Kinesis Data Firehose. Use an AWS Lambda function to read the Kinesis Data Firehose data, convert it to .csv format, and insert it into an Amazon Aurora MySQL DB instance. Instruct the data analysts to query the data directly from the DB instance.
B. Send the sensor data to Amazon Kinesis Data Firehose. Use an AWS Lambda function to read the Kinesis Data Firehose data, convert it to Apache Parquet format, and save it to an Amazon S3 bucket. Instruct the data analysts to query the data by using Amazon Athena.
C. Send the sensor data to an Amazon Managed Service for Apache Flink (previously known as Amazon Kinesis Data Analytics) application to convert the data to .csv format and store it in an Amazon S3 bucket. Import the data into an Amazon Aurora MySQL DB instance. Instruct the data analysts to query the data directly from the DB instance.
D. Send the sensor data to an Amazon Managed Service for Apache Flink (previously known as Amazon Kinesis Data Analytics) application to convert the data to Apache Parquet format and store it in an Amazon S3 bucket. Instruct the data analysts to query the data by using Amazon Athena.
Show Answer
Correct Answer: B
Explanation: The goal is to maximize availability and minimize operational overhead and cost by replacing on‑premises servers with managed, serverless services. AWS IoT Core handles device ingestion at scale. Amazon Kinesis Data Firehose is fully managed and can buffer, scale, and deliver streaming data without server management. Using a Lambda function for transformation avoids server maintenance and downtime. Storing data in Amazon S3 in Apache Parquet format is cost‑efficient and optimized for analytical queries. Amazon Athena lets analysts run simple SQL queries directly on S3 without managing database servers. This architecture eliminates application server maintenance, scales automatically, avoids data loss during maintenance, and has the lowest operational overhead compared to running Aurora or Apache Flink.
Question 88
A company uses a mobile app on AWS to run online contests. The company selects a winner at random at the end of each contest. The contests run for variable lengths of time. The company does not need to retain any data from a contest after the contest is finished.
The company uses custom code that is hosted on Amazon EC2 instances to process the contest data and select a winner. The EC2 instances run behind an Application Load Balancer and store contest entries on Amazon RDS DB instances. The company must design a new architecture to reduce the cost of running the contests.
Which solution will meet these requirements MOST cost-effectively?
A. Migrate storage of the contest entries to Amazon DynamoDB. Create a DynamoDB Accelerator (DAX) cluster. Rewrite the code to run as Amazon Elastic Container Service (Amazon ECS) containers that use the Fargate launch type. At the end of the contest, delete the DynamoDB table.
B. Migrate the storage of the contest entries to Amazon Redshift. Rewrite the code as AWS Lambda functions. At the end of the contest, delete the Redshift cluster.
C. Add an Amazon ElastiCache for Redis cluster in front of the RDS DB instances to cache the contest entries. Rewrite the code to run as Amazon Elastic Container Service (Amazon ECS) containers that use the Fargate launch type. Set the ElastiCache TTL attribute on each entry to expire each entry at the end of the contest.
D. Migrate the storage of the contest entries to Amazon DynamoDB. Rewrite the code as AWS Lambda functions. Set the DynamoDB TTL attribute on each entry to expire each entry at the end of the contest.
Show Answer
Correct Answer: D
Explanation: The goal is to minimize cost for short‑lived, variable‑duration contests with no need to retain data afterward. Using AWS Lambda removes the need to run and pay for always‑on EC2 or container infrastructure and is well suited for lightweight, event‑driven processing such as accepting entries and selecting a random winner. Amazon DynamoDB provides a fully managed, serverless datastore with on‑demand scaling and lower operational overhead than RDS. DynamoDB TTL can be set per item based on each contest’s actual end time (even if variable), automatically expiring data without manual cleanup. Other options introduce unnecessary always‑running resources (DAX, Redshift, ElastiCache, or ECS/Fargate), which increase cost without providing required benefits. Therefore, option D is the most cost‑effective solution.
Question 89
A solutions architect has deployed a web application that serves users across two AWS Regions under a custom domain. The application uses Amazon Route 53 latency-based routing. The solutions architect has associated weighted record sets with a pair of web servers in separate Availability Zones for each Region.
The solutions architect runs a disaster recovery scenario. When all the web servers in one Region are stopped, Route 53 does not automatically redirect users to the other Region.
Which of the following are possible root causes of this issue? (Choose two.)
A. The weight for the Region where the web servers were stopped is higher than the weight for the other Region.
B. One of the web servers in the secondary Region did not pass its HTTP health check.
C. Latency resource record sets cannot be used in combination with weighted resource record sets.
D. The setting to evaluate target health is not turned on for the latency alias resource record set that is associated with the domain in the Region where the web servers were stopped.
E. An HTTP health check has not been set up for one or more of the weighted resource record sets associated with the stopped web servers.
Show Answer
Correct Answer: D, E
Explanation: Route 53 latency-based routing only shifts traffic away from unhealthy endpoints when health evaluation is properly configured. If the latency alias record does not have "Evaluate Target Health" enabled, Route 53 will continue to return that Region even if its resources are down. Additionally, if HTTP health checks are missing on the weighted record sets for the stopped web servers, Route 53 has no signal that those endpoints are unhealthy, so it will not fail traffic over to the other Region.
Question 90
A software as a service (SaaS) company provides a media software solution to customers. The solution is hosted on 50 VPCs across various AWS Regions and AWS accounts. One of the VPCs is designated as a management VPC. The compute resources in the VPCs work independently.
The company has developed a new feature that requires all 50 VPCs to be able to communicate with each other. The new feature also requires one-way access from each customer's VPC to the company's management VPC. The management VPC hosts a compute resource that validates licenses for the media software solution.
The number of VPCs that the company will use to host the solution will continue to increase as the solution grows.
Which combination of steps will provide the required VPC connectivity with the LEAST operational overhead? (Choose two.)
A. Create a transit gateway. Attach all the company's VPCs and relevant subnets to the transit gateway.
B. Create VPC peering connections between all the company's VPCs.
C. Create a Network Load Balancer (NLB) that points to the compute resource for license validation. Create an AWS PrivateLink endpoint service that is available to each customer's VPAssociate the endpoint service with the NLB.
D. Create a VPN appliance in each customer's VPC. Connect the company's management VPC to each customer's VPC by using AWS Site-to-Site VPN.
E. Create a VPC peering connection between the company's management VPC and each customer's VPC.
Show Answer
Correct Answer: A, C
Explanation: To enable scalable, many-to-many connectivity among all VPCs with minimal operational overhead, AWS Transit Gateway is the correct choice. It is designed for hub-and-spoke networking, supports cross-account attachments via RAM, and supports inter-Region connectivity through transit gateway peering, avoiding the exponential complexity of VPC peering as the number of VPCs grows. For the one-way access from each customer VPC to the management VPC for license validation, AWS PrivateLink is ideal. Exposing the validation service through an NLB-backed endpoint service provides secure, one-way, scalable access without requiring route table changes or full network connectivity. Other options either do not scale (VPC peering), add high operational overhead (VPNs), or do not satisfy the one-way access requirement.
Question 91
A company wants to migrate an Amazon Aurora MySQL DB cluster from an existing AWS account to a new AWS account in the same AWS Region. Both accounts are members of the same organization in AWS Organizations.
The company must minimize database service interruption before the company performs DNS cutover to the new database.
Which migration strategy will meet this requirement? (Choose two.)
A. Take a snapshot of the existing Aurora database. Share the snapshot with the new AWS account. Create an Aurora DB cluster in the new account from the snapshot.
B. Create an Aurora DB cluster in the new AWS account. Use AWS Database Migration Service (AWS DMS) to migrate data between the two Aurora DB clusters.
C. Use AWS Backup to share an Aurora database backup from the existing AWS account to the new AWS account. Create an Aurora DB cluster in the new AWS account from the snapshot.
D. Create an Aurora DB cluster in the new AWS account. Use AWS Application Migration Service to migrate data between the two Aurora DB clusters.
Show Answer
Correct Answer: A, B
Explanation: The requirement is to minimize database service interruption before DNS cutover. Using AWS DMS (B) supports ongoing replication from the source Aurora cluster to the target in the new account, enabling minimal downtime at cutover. Sharing an Aurora snapshot cross-account (A) is a supported migration strategy within the same Region and AWS Organizations and can be used to seed the target cluster prior to cutover. AWS Backup sharing (C) is not necessary for this use case, and Application Migration Service (D) does not support RDS/Aurora database migration.
$19
Get all 516 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.