HomeQuizzes & SurveysAWS (SAA-C02) Practice Test 2 AWS (SAA-C02) Practice Test 2 Leave a Comment / By user / October 25, 2021 Welcome to your AWS (SAA-C02) Practice Test 2 Exam Instructions The exam comprises of the following types of questions: - Multiple Choice Single Response - Multiple Choice Multiple Response There is no negative marking. Name Email Mobile Number 1. A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning. How should the scaling be changed to address the staff complaints and keep costs to a minimum? A. Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period C. Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period D. Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens None 2. A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures. What should the solutions architect recommend? A. Leverage Amazon CloudFront with the ALB endpoint as the origin B. Deploy an appropriate managed rule for AWS WAF and associate it with the ALB C. Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked D. Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances None 3. A company currently operates a web application backed by an Amazon RDS MySQL database. It has automated backups that are run daily and are not encrypted. A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed. The company will make at least one encrypted backup before destroying the old backups What should be done to enable encryption for future backups? A. Enable default encryption for the Amazon S3 bucket where backups are stored B. Modify the backup section of the database configuration to toggle the Enable encryption check box. C. Create a snapshot of the database. Copy it to an encrypted snapshot. Restore the database from the encrypted snapshot. D. Enable an encrypted read replica on RDS for MySQL. Promote the encrypted read replica to primary. Remove the original database instance. None 4. A company has thousands of files stored in an Amazon S3 bucket that has a well-defined access pattern. The files are accessed by an application multiple times a day for the first 30 days. Files are rarely accessed within the next 90 days. After that, the files are never accessed again. During the first 120 days, accessing these files should never take more than a few seconds. Which lifecycle policy should be used for the S3 objects to minimize costs based on the access pattern? A. Use Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage for the first 30 days. Then move the files to the GLACIER storage class for the next 90 days. Allow the data to expire after that B. Use Amazon S3 Standard storage for the first 30 days. Then move the files to Amazon S3 Standard- Infrequent Access (S3 Standard-IA) for the next 90 days. Allow the data to expire after that C. Use Amazon S3 Standard storage for first 30 days. Then move the files to the GLACIER storage class for the next 90 days. Allow the data to expire after that D. Use Amazon S3 Standard-Infrequent Access (S3 Standard-IA) for the first 30 days. After that, move the data to the GLACIER storage class, where is will be deleted automatically. None 5. A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis. An application on an Amazon EC2 instance needs permission to efficiently process the CSV data stored in the S3 bucket. Which action will MOST securely grant the EC2 instance access to the S3 bucket? A. Attach a resource-based policy to the S3 bucket B. Create an IAM user for the application with specific permissions to the S3 bucket C. Associate an IAM role with least privilege permissions to the EC2 instance profile D. Store AWS credentials directly on the EC2 instance for applications on the instance to use for API calls None 6. A user is launching an EC2 instance in the US East region. Which of the below mentioned options is recommended by AWS with respect to the selection of the availability zone? A. Always select the AZ while launching an instance B. Always select the US-East-1-a zone for HA C. Do not select the AZ; instead let AWS select the AZ D. The user can never select the availability zone while launching an instance None 7. Your supervisor has asked you to build a simple file synchronization service for your department. He doesn't want to spend too much money and he wants to be notified of any changes to files by email. What do you think would be the best Amazon service to use for the email solution? A. Amazon SES B. Amazon CloudSearch C. Amazon SWF D. Amazon AppStream None 8. You need to import several hundred megabytes of data from a local Oracle database to an Amazon RDS DB instance. What does AWS recommend you use to accomplish this? A. Oracle export/import utilities B. Oracle SQL Developer C. Oracle Data Pump D. DBMS_FILE_TRANSFER None 9. A solutions architect is optimizing a website for an upcoming musical event Videos of the performances will be streamed in real time and then will be available on demand. The event is expected to attract a global online audience. Which service will improve the performance of both the real-time and on-demand streaming? A. Amazon CloudFront B. AWS Global Accelerator C. Amazon Route 53 D. Amazon S3 Transfer Acceleration None 10. A company's application is running on Amazon EC2 instances m a single Region in the event of a disaster a solutions architect needs to ensure that the resources can also be deployed to a second Region. Which combination of actions should the solutions architect take to accomplish this-? (Select TWO) A. Detach a volume on an EC2 instance and copy it to Amazon S3 B. Launch a new EC2 instance from an Amazon Machine image (AMI) in a new Region C. Launch a new EC2 instance in a new Region and copy a volume from Amazon S3 to the new instance D. Copy an Amazon Machine Image (AMI) of an EC2 instance and specify a different Region for the destination E. Copy an Amazon Elastic Block Store (Amazon EBS) volume from Amazon S3 and launch an EC2 instance in the destination Region using that EBS volume 11. Much of your company's data does not need to be accessed often, and can take several hours for retrieval time, so it's stored on Amazon Glacier. However someone within your organization has expressed concerns that his data is more sensitive than the other data, and is wondering whether the high level of encryption that he knows is on S3 is also used on the much cheaper Glacier service. Which of the following statements would be most applicable in regards to this concern? A. There is no encryption on Amazon Glacier, that's why it is cheaper. B. Amazon Glacier automatically encrypts the data using AES-128 a lesser encryption method than Amazon S3 but you can change it to AES-256 if you are willing to pay more C. Amazon Glacier automatically encrypts the data using AES-256, the same as Amazon S3 D. Amazon Glacier automatically encrypts the data using AES-128 a lesser encryption method than Amazon S3. None 12. A company built a food ordering application that captures user data and stores it for future analysis. The application's static front end is deployed on an Amazon EC2 instance. The front-end application sends the requests to the backend application running on separate EC2 instance. The backend application then stores the data in Amazon RDS What should a solutions architect do to decouple the architecture and make it scalable' A. Use Amazon S3 to serve the front-end application which sends requests to Amazon EC2 to execute the backend application. The backend application will process and store the data in Amazon RDS B. Use Amazon S3 to serve the front-end application and write requests to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon EC2 instances to the HTTP/HTTPS endpoint of the topic and process and store the data in Amazon RDS C. Use an EC2 instance to serve the front end and write requests to an Amazon SQS queue. Place the backend instance in an Auto Scaling group and scale based on the queue depth to process and store the data in Amazon RDS D. Use Amazon S3 to serve the static front-end application and send requests to Amazon API Gateway which writes the requests to an Amazon SQS queue. Place the backend instances in an Auto Scaling group and scale based on the queue depth to process and store the data in Amazon RDS None 13. A company's website is using an Amazon RDS MySQL Multi-AZ DB instance for its transactional data storage. There are other internal systems that query this DB instance to fetch data for internal batch processing. The RDS DB instance slows down significantly the internal systems fetch data. This impacts the website's read and write performance, and the users experience slow response times. Which solution will improve the website's performance? A. Use an RDS PostgreSQL DB instance instead of a MySQL database. B. Use Amazon ElastiCache to cache the query responses for the website. C. Add an additional Availability Zone to the current RDS MySQL Multi.AZ DB instance D. Add a read replica to the RDS DB instance and configure the internal systems to query the read replica. None 14. A company has global users accessing an application deployed in different AWS Regions, exposing public static IP addresses. The users are experiencing poor performance when accessing the application over the internet. What should a solutions architect recommend to reduce internet latency? A. Set up AWS Global Accelerator and add endpoints B. Set up AWS Direct Connect locations in multiple Regions C. Set up an Amazon CloudFront distribution to access an application. D. Set up an Amazon Route 53 geoproximity routing policy to route traffic None 15. A solutions architect is moving the static content from a public website hosted on Amazon EC2 instances to an Amazon S3 bucket. An Amazon CloudFront distribution will be used to deliver the static assets. The security group used by the EC2 instances restricts access to a limited set of IP ranges. Access to the static content should be similarly restricted. Which combination of steps will meet these requirements? (Select TWO.) A. Create an origin access identity (OAI) and associate it with the distribution. Change the permissions in the bucket policy so that only the OAI can read the objects B. Create an AWS WAF web ACL that includes the same IP restrictions that exist in the EC2 security group. Associate this new web ACL with the CloudFront distribution C. Create a new security group that includes the same IP restrictions that exist in the current EC2 security group. Associate this new security group with the CloudFront distribution. D. Create a new security group that includes the same IP restrictions that exist in the current EC2 security group. Associate this new security group with the S3 bucket hosting the static content E. Create a new IAM role and associate the role with the distribution. Change the permissions either on the S3 bucket or on the files within the S3 bucket so that only the newly created IAM role has read and download permissions. 16. A company has 150 TB of archived image data stored on-premises that needs to be mowed to the AWS Cloud within the next month. The company's current network connection allows up to 100 Mbps uploads for this purpose during the night only. What is the MOST cost-effective mechanism to move this data and meet the migration deadline? A. Use AWS Snowmobile to ship the data to AWS. B. Order multiple AWS Snowball devices to ship the data to AWS. C. Enable Amazon S3 Transfer Acceleration and securely upload the data. D. Create an Amazon S3 VPC endpoint and establish a VPN to upload the data. None 17. A company needs to implement a relational database with a multi-Region disaster recovery Recovery Point Objective (RPO) of 1 second and an Recovery Time Objective (RTO) of 1 minute. Which AWS solution can achieve this? A. Amazon Aurora Global Database B. Amazon DynamoDB global tables. C. Amazon RDS for MySQL with Multi-AZ enabled D. Amazon RDS for MySQL with a cross-Region snapshot copy. None 18. A company has a custom application running on an Amazon EC2 instance that: - Reads a large amount of data from Amazon S3 - Performs a multi stage analysis - Writes the results to Amazon DynamoDB The application writes a significant number of large temporary files during the multi stage analysis The process performance depends on the temporary storage performance. What would be the fastest storage option for holding the temporary files? A. Multiple Amazon S3 buckets with Transfer Acceleration for storage B. Multiple Amazon EBS drives with Provisioned IOPS and EBS optimization C. Multiple Amazon EFS volumes using the Network I lie System version 4.1 (NFSv4.1) protocol. D. Multiple instance store volumes with software RAID 0. None 19. A company is using a VPC peering strategy to connect its VPCs in a single Region to allow for cross- communication. A recent increase in account creations and VPCs has made it difficult to maintain the VPC peering strategy, and the company expects to grow to hundreds of VPCs. There are also new requests to create site-to-site VPNs with some of the VPCs. A solutions architect has been tasked with creating a centrally networking setup for multiple accounts, VPNS, and VPNs. Which networking solution meets these requirements? A. Configure shared VPCs and VPNs and share to each other B. Configure a hub-and-spoke and route all traffic through VPC peering C. Configure an AWS Direct Connect between all VPCs and VPNs D. Configure a transit gateway with AWS Transit Gateway and connected all VPCs and VPNs None 20. A company recently expanded globally and wants to make its application accessible to users in those geographic locations. The application is deploying on Amazon EC2 instances behind an Application Load balancer in an Auto Scaling group. The company needs the ability shift traffic from resources in one region to another. What should a solutions architect recommend? A. Configure an Amazon Route 53 latency routing policy B. Configure an Amazon Route 53 geolocation routing policy C. Configure an Amazon Route 53 geoproximity routing policy D. Configure an Amazon Route 53 multivalue answer routing policy None 21. A company is designing a web application using AWS that processes insurance quotes Users will request quotes from the application. Quotes must be separated by quote type must be responded to within 24 hours, and must not be lost. The solution should be simple to set up and maintain. Which solution meets these requirements? A. Create multiple Amazon Kinesis data streams based on the quote type. Configure the web application to send messages to the proper data stream. Configure each backend group of application servers to pool messages from its own data stream using the Kinesis Client Library (KCL) B. Create multiple Amazon Simple Notification Service (Amazon SNS) topics and register Amazon SQS queues to their own SNS topic based on the quote type. Configure the web application to publish messages to the SNS topic queue. Configure each backend application server to work its own SQS queue C. Create a single Amazon Simple Notification Service (Amazon SNS) topic and subscribe the Amazon SQS queues to the SNS topic. Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type. Configure each backend application server to work its own SQS queue D. Create multiple Amazon Kinesis Data Firehose delivery streams based on the quote type to deliver data streams to an Amazon Elasticsearch Service (Amazon ES) cluster. Configure the web application to send messages to the proper delivery stream. Configure each backend group of application servers to search for the messages from Amazon ES and process them accordingly None 22. A company Is reviewing Its AWS Cloud deployment to ensure its data is not accessed by anyone without appropriate authorization. A solutions architect is tasked with identifying all open Amazon S3 buckets and recording any S3 bucket configuration changes. What should the solutions architect do to accomplish this? A. Enable AWS Config service with the appropriate rules B. Enable AWS Trusted Advisor with the appropriate checks C. Write a script using an AWS SDK to generate a bucket report D. Enable Amazon S3 server access logging and configure Amazon CloudWatch Events. None 23. A company has enabled AWS CloudTrail logs to deliver log files to an Amazon S3 bucket for each of its developer accounts. The company has created a central AWS account for streamlining management and audit reviews. An internal auditor needs to access the CloudTrail logs, yet access needs to be restricted for all developer account users. The solution must be secure and optimized. How should a solutions architect meet these requirements? A. Configure an AWS Lambda function in each developer account to copy the log files to the central account. Create an IAM role in the central account for the auditor. Attach an IAM policy providing read- only permissions to the bucket. B. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket C. Configure CloudTrail from each developer account to deliver the log files to an S3 bucket in the central account. Create an IAM role in the central account for the auditor. Attach an IAM policy providing read- only permissions to the bucket D. Configure an AWS Lambda function in the central account to copy the log files from the S3 bucket in each developer account. Create an IAM user in the central account for the auditor. Attach an IAM policy providing full permissions to the bucket. None 24. A company is moving its legacy workload to the AWS Cloud. The workload files will be shared, appended, and frequently accessed through Amazon EC2 instances when they are first created. The files will be accessed occasionally as they age What should a solutions architect recommend? A. Store the data using Amazon EC2 instances with attached Amazon Elastic Block Store (Amazon EBS) data volume B. Store the data using AWS Storage Gateway volume gateway and export rarely accessed data to Amazon S3 storage C. Store the data using Amazon Elastic File System (Amazon EFS) with lifecycle management enabled for rarely accessed data D. Store the data using Amazon S3 with an S3 lifecycle policy enabled to move data to S3 StandardInfrequent Access (S3 Standard-IA) None 25. An engineering team is developing and deploying AWS Lambda functions. The team needs to create roles and manage policies in AWS IAM to configure the permissions of the Lambda functions. How should the permissions for the team be configured so they also adhere to the concept of least privilege? A. Create an IAM role with a managed policy attached. Allow the engineering team and the Lambda functions to assume this role B. Create an IAM group for the engineering team with an lAMFullAccess policy attached. Add all the users from the team to this IAM group C. Create an execution role for the Lambda functions.Attach a managed policy that has permission boundaries specific to these Lambda functions D. Create an IAM role with a managed policy attached that has permission boundaries specific to the Lambda functions. Allow the engineering team to assume this role. None 26. A company is hosting its static website in an Amazon S3 bucket, which is the origin for Amazon CloudFront. The company has users in the United States, Canada, and Europe and wants to reduce. What should a solutions architect recommend? A. Adjust the CloudFront caching time to live (TTL) from the default to a longer timeframe B. Implement CloudFront events with Lambda@edge to run the website's data processing C. Modify the CloudFront price class to include only the locations of the countries that are served D. Implement a CloudFront Secure Socket Layer (SSL) certificate to push security closer to the locations of the countries that are served None 27. A company has a 10 Gbps AWS Direct Connect connection from its on-premises servers to AWS. Th workloads using the connection are critical. The company requires a disastr recovery strategy with maximum resiliency that maintains the current connection bandwidth at a minimum. What should a solutions architect recommend? A. Set up a new Direct Connect connection in anothr AWS Region B. Set up a new AWS managed VPN connection in another AWS Region. C. Set up two new Direct Connect connections one in the currnt AWS Region and one in another Region D. Set up two new AWS managed VPN connctions one in the current AWS Region and one in another Region. None 28. A company is using Site-Site VPN connection for secure connectivity to its AWS cloud resource from on premises. Due to an increase in traffic across the VPN connections to the Amazon EC2 instances,users are experiencing slower VPN connectivity. Which solution will improve the VPN throughput? A. Implement multiple customer gateways for the same network to scale the throughput B. Use a Transit Gateway with equal cost multipath routing and add additional VPN tunnels C. Configure a virtual gateway with equal cost multipath routing and multiple cahnnels D. Increase the number of tunnels in the VPN configuration to scale the throughput beyond the default limit None 29. A solutions architect is planning the deployment of a new static website. The solution must minimize costs and provide at least 99% availability. Which solution meets these requirements? A. Deploy the application to an Amazon S3 bucket in one AWS Region that has versioning disabled. B. Deploy the application to Amazon EC2 instances that run in two AWS Regions and two Availability Zones. C. Deploy the application to an Amazon S3 bucket that has versioning and cross-Region replication enabled D. Deploy the application to an Amazon EC2 instance that runs in one AWS Region and one Availability Zone None 30. A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance Management says the application must be made more secure with the least amount of programming effort. What should a solutions architect do to meet these requirements A. Use AWS Key Management Service (AWS KMS) customer master keys (CMKs) to create keys. Configure the application to load the database credentials from AWS KMS. Enable automatic key rotation. B. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager. C. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager D. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Systems Manager Parameter. Store Configure the application to load the database credentials from Parameter Store. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Parameter Store. None 31. A company has a website deployed on AWS. The database backend is hosted on Amazon RDS for MySQL with a primary instance and five read replicas to support scaling needs. The read replicas should lag no more than 1 second behind the primary instance to support the user experience. As traffic on the website continues to increase, the replicas are falling further behind during periods of peak load, resulting in complaints from users when searches yield inconsistent results. A solutions architect needs to reduce the replication lag as much as possible, with minimal changes to the application code or operational requirements. Which solution meets these requirements? A. Migrate the database to Amazon Aurora MySQL. Replace the MySQL read replicas with Aurora Replicas and enable Aurora Auto Scaling B. Deploy an Amazon ElastiCache for Redis cluster in front of the database. Modify the website to check the cache before querying the database read endpoints. C. Migrate the database from Amazon RDS to MySQL running on Amazon EC2 compute instances. Choose very large compute optimized instances for all replica nodes D. Migrate the database to Amazon DynamoDB. Initially provision a large number of read capacity units (RCUs) to support the required throughput with on-demand capacity. None 32. A solutions architect is designing a publicly accessible web application that is on an Amazon CloudFront distribution with an Amazon S3 website endpoint as the origin. When the solution is deployed, the website returns an Error 403: Access Denied message. Which steps should the solutions architect take to correct the issue? (Select TWO.) A. Remove the S3 block public access option from the S3 bucket. B. Remove the requester pays option from the S3 bucket. C. Remove the origin access identity (OAI) from the CloudFront distribution D. Change the storage class from S3 Standard to S3 One Zone-Infrequent Access (S3 One ZoneIA). E. Disable S3 object versioning 33. A company is experiencing growth as demand for its product has increased. The company's existing purchasing application is slow when traffic spikes. The application is a monolithic three tier application that uses synchronous transactions and sometimes sees bottlenecks in the application tier. A solutions architect needs to design a solution that can meet required application response times while accounting for traffic volume spikes. Which solution will meet these requirements? A. Vertically scale the application instance using a larger Amazon EC2 instance size B. Scale the application's persistence layer horizontally by introducing Oracle RAC on AWS C. Scale the web and application tiers horizontally using Auto Scaling groups and an Application Load Balance D. Decouple the application and data tiers using Amazon Simple Queue Service (Amazon SQS) with asynchronous AWS Lambda calls. None 34. A web application runs on Amazon EC2 instances behind an Application Load Balancer. The application allows users to create custom reports of historical weather data. Generating a report can take up to 5 minutes. These long-running requests use many of the available incoming connections, making the system unresponsive to other users. How can a solutions architect make the system more responsive? A. Use Amazon SOS with AWS Lambda to generate reports. B. Increase the Idle timeout on the Application Load Balancer to 5 minutes. C. Update the client-side application code to increase its request timeout to 5 minutes D. Publish the reports to Amazon S3 and use Amazon CloudFront for downloading lo the user None 35. A company Is launching an ecommerce website on AWS. This website is built with a three-tier architecture that includes a MySQL database. In a Multi-AZ deployment of Amazon Aurora MySQL. The website application must be highly available and will initially be launched in an AWS Region with three Availability Zones. The application produces a metric that describes the load the application experiences. Which solution meets these requirements? A. Configure an Application Load Balancer (ALB( with Amazon EC2 Auto Scaling behind the ALB with scheduled scaling B. Configure an Application Load Balancer (ALB) and Amazon EC2 Auto Scaling behind the ALB with a simple scaling polic C. Configure a Network Load Balancer (NLB) and launch a Spot Fleet with Amazon EC2 Auto Scaling behind the NL8 D. Configure an Application Load Balancer (ALB) and Amazon EC2 Auto Scaling behind the ALB with a target tracking scaling policy. None 36. A solutions architect must design a database solution for a high-traffic ecommerce web application. The database stores customer profiles and shopping cart information. The database must support a peak load of several million requests each second and deliver responses in milliseconds. The operational overhead for managing and scaling the database must be minimized. Which database solution should the solutions architect recommend? A. Amazon Aurora B. Amazon DynamoDB C. Amazon RDS D. Amazon Redshift None 37. The financial application at a company stores monthly reports in an Amazon S3 bucket. The vice president of finance has mandated that all access to these reports be logged and that any modifications to the log files be detected. Which actions can a solutions architect take to meet these requirements? A. Use S3 server access logging on the bucket that houses the reports with the read and write data events and log file validation options enabled B. Use S3 server access logging on the bucket that houses the reports with the read and write management events and log file validation options enabled C. Use AWS CloudTrail to create a new trail. Configure the trail to log read and write data events on the S3 bucket that houses the reports. Log these events to a new bucket, and enable log file validation D. Use AWS CloudTrail to create a new trail. Configure the trail to log read and write management events on the S3 bucket that houses the reports. Log these events to a new bucket, and enable log file validation. None 38. A company has developed a microservices application. It uses a client-facing API with Amazon API Gateway and multiple internal services hosted on Amazon EC2 instances to process user requests. The API is designed to support unpredictable surges in traffic, but internal services may become overwhelmed and unresponsive for a period of time during surges. A solutions architect needs to design a more reliable solution that reduces errors when internal services become unresponsive or unavailable. Which solution meets these requirements? A. Use AWS Auto Scaling to scale up internal services when there is a surge in traffic B. Use different Availability Zones to host internal services. Send a notification to a system administrator when an internal service becomes unresponsive C. Use an Elastic Load Balancer to distribute the traffic between internal services. Configure Amazon CloudWatch metrics to monitor traffic to internal services D. Use Amazon Simple Queue Service (Amazon SQS) to store user requests as they arrive. Change the internal services to retrieve the requests from the queue for processing. None 39. A company wants to move a multi-tiered application from on premises to the AWS Cloud to improve the application's performance. The application consists of application tiers that communicate with each other by way of RESTful services. Transactions are dropped when one tier becomes overloaded. A solutions architect must design a solution that resolves these issues and modernizes the application. Which solution meets these requirements and is the MOST operationally efficient? A. Use Amazon API Gateway and direct transactions to the AWS Lambda functions as the application layer. Use Amazon Simple Queue Service (Amazon SQS) as the communication layer between application services. B. Use Amazon CloudWatch metrics to analyze the application performance history to determine the server's peak utilization during the performance failures. Increase the size of the application server's Amazon EC2 instances to meet the peak requirements. C. Use Amazon Simple Notification Service (Amazon SNS) to handle the messaging between application servers running on Amazon EC2 in an Auto Scaling group. Use Amazon CloudWatch to monitor the SNS queue length and scale up and down as required D. Use Amazon Simple Queue Service (Amazon SQS) to handle the messaging between application servers running on Amazon EC2 in an Auto Scaling group. Use Amazon CloudWatch to monitor the SQS queue length and scale up when communication failures are detected None 40. A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries. Which policy should be used to meet this requirement? A. Simple routing policy B. Latency routing policy C. Multivalue routing policy D. Geolocation routing policy None 41. A company's order fulfillment service uses a MySQL database. The database needs to support a large number of concurrent queries and transactions Developers are spending time patching and tuning the database. This is causing delays in releasing new product features. The company wants to use cloud-based services to help address this new challenge. The solution must allow the developers to migrate the database with little or no code changes and must optimize performance. Which service should a solutions architect use to meet these requirements? A. Amazon Aurora B. Amazon DynamoDB C. Amazon ElastiCache D. MySQL on Amazon EC2 None 42. A solutions architect plans to convert a company's monolithic web application into a multi-tier application. The company wants to avoid managing its own infrastructure. The minimum requirements for the web application are high availability scalability and regional low latency during peak hours. The solution should also store and retrieve data with millisecond latency using the application's API. Which solution meets these requirements? A. Use AWS Fargate to host the web application with backend Amazon RDS Multi-AZ DB instances B. Use Amazon API Gateway with an edge-optimized API endpoint, AWS Lambda for compute and Amazon DynamoDB as the data store C. Use an Amazon Route 53 routing policy with geolocation that points to an Amazon S3 bucket with static website hosting and Amazon DynamoDB as the data store D. Use an Amazon CloudFront distribution that points to an Elastic Load Balancer with an Amazon EC2 Auto Scaling group, along with Amazon RDS Multi-AZ DB instances None 43. After reviewing the cost optimization checks in AWS Trusted Advisor, a team finds that it has 10,000 Amazon Elastic Block Store (Amazon EBS) snapshots in its account that are more than 30 days old. When the team determines that it needs to implement better governance for the lifecycle of its resources. Which actions should the team take to automate the lifecycle management of the EBS snapshots with the LEAST effort? (Select TWO ) A. Create and schedule a backup plan with AWS Backup B. Copy the EBS snapshots to Amazon S3 and then create lifecycle configurations in the S3 bucket C. Use Amazon Data Lifecycle Manager (Amazon DLM) D. Use a scheduled event in Amazon EventBridge (Amazon CloudWatch Events) and invoke AWS Step Functions to manage the snapshots E. Schedule and run backups in AWS Systems Manager 44. A solutions architect needs to host a high performance computing (HPC) workload in the AWS Cloud. The workload will run on hundreds of Amazon EC2 instances and will require parallel access to a shared file system to enable distributed processing of large datasets. Datasets will be accessed across multiple instances simultaneously. The workload requires access latency within 1 ms. After processing has completed, engineer will need access to the dataset for manual postprocessing. Which solution will meet these requirements? A. Use Amazon Elastic File System (Amazon EFS) as a shared file system Access the dataset from Amazon EFS B. Mount an Amazon S3 bucket to serve as the shared file system Perform postprocessing directly from the S3 bucket C. Use Amazon FSx for Lustre as a shared file system. Link the file system to an Amazon S3 bucket for postprocessing. D. Configure AWS Resource Access Manager to share an Amazon S3 bucket so that it can be mounted to all instances for processing and postprocessing None 45. A company is running a batch application on Amazon EC2 instances. The application consists of a backend with multiple Amazon RDS databases. The application is causing a high number of reads on the databases. A solutions architect must reduce the number of database reads while ensuring high availability. What should the solutions architect do to meet this requirement? A. Add Amazon RDS read replicas. B. Use Amazon ElastiCache for Redis C. Use Amazon Route 53 DNS caching D. Use Amazon ElastiCache for Memcached None 46. A company uses Amazon S3 for storing a variety of files. A solutions architect needs to design a feature that will allow users to instantly restore any deleted files within 30 days of deletion. Which is the MOST cost-efficient solution? A. Create lifecycle policies that move the objects to Amazon S3 Glacier and delete them after 30 days B. Enable Cross-Region Replication Empty the replica bucket every 30 days using an AWS Lambda function C. Enable versioning and create a lifecycle policy to remove expired versions after 30 days. D. Enable versioning and MFA Delete Using a Lambda function remove MFA Delete from objects more than 30 days old None 47. A company recently launched Linux-based application instances on Amazon EC2 in a private subnet and launched a Linux-based bastion host on an Amazon EC2 instance in a public subnet of an VPC. A solution architect needs to connect from the on-premises network, through the company's internet connection, to the bastion host, and to the application servers. The solution architect must make sure that the security groups of all the EC2 instances will allow that access. Which combination of steps should the solutions architect take to meet these requirements? (select TWO) A. Replace the current security group of the bastion host with one that only allows inbound access from the application instances B. Replace the current security group of the bastion host with one that only allows inbound access from the internal IP range for the company. C. Replace the current security group of the bastion host with one that only allows inbound access from the external IP range for the company D. Replace the current security group of the application instances with one that allows inbound SSH access from only the private IP address of the bastion host. 48. A company experienced a breach from an attacker on its on-premises network. The attacker launched port scanning, waged on outbound Dos attack, and performed crypto currency mining. The company is moving to AWS to build a more resilient architecture that monitors and remediate this type the attack on the account level. How should the company use AWS services to meet these requirements? A. Enable Amazon GuardDuty to generate findings. Trigger AWS Lambda for automated remediation of identified threats. B. Enable AWS Config and configure policies to monitor against breaches. Trigger AWS Lambda for automated remediation of noncompliant resources C. Enable Amazon Macie to identify and classify security threats. Configure events in Amazon EventBridge (Amazon CloudWatch Events) to trigger actions based on the severity of threats. D. Enable Amazon inspector to generate assessment reports. Configure events in Amazon EventBridge (Amazon CloudWatch Events) to trigger actions based on identified threat. None 49. A team has an application that detects new objects being uploaded into an Amazon bucket. The upload a trigger AWS Lambda function to write metadata into an Amazon DynamoDB table and an Amazon RDS for PostgreSQL database. Which action should the team take to ensure high availability? A. Enable Cross-Region Replication to ensure high availability B. Create a Lambda function for each Availability Zone the application is deployed in C. Enable Multi-AZ on the RDS PostgreSQL database. D. Create a DynamoDB stream for the DynamoDB table None 50. A company is using Amazon S3 as its local repository for weekly analysis reports. One of the company-wide requirements is to secure data at rest using encryption. The company chooses Amazon 53 server-side encryption (SSE) how can the object be decrypted when a GET request is issued? A. the user needs a Put request to decrypt the object B. The user needs to decrypt the object using a private Key C. Amazon S3 manages encryption and decryption automatically D. Amazon S3 provides a server-side key for decrypting the object None 51. A development team is creating an event-based application that uses AWS Lambda functions. Events will be generated when files are added to an Amazon S3 bucket. The development team currently has Amazon Simple Notification Service (Amazon SNS) configured as the event target from Amazon S3. What should a solution architect do to process the events from Amazon S3 in a scalable why? A. Create an SNS subscription that processes the event in Amazon Elastic Container Service (Amazon ECS) before the event runs in Lambda. B. Create an SNS subscription that processes the event in Amazon Elastic Kubermetes Service (Amazon EKS) before the event runs in Lambda. Create on SNS subscription that sends the event to AWS Server Migration Service (AWS SQS). Configure the SQS queue to trigger a Lambda function. D. Create an SNS subscription that sends the event to AWS Server Migration Service (AWS SMS). Configure the Lambda function to poll from the SMS event None 52. A company needs guaranteed Amazon EC2 capacity in three specific Availability Zones in a specific AWS Region for an upcoming event that will last 1 week. What should the company do to guarantee the EC2 capacity? A. Purchase Reserved Instances that specify the Region needed B. Create an On-Demand Capacity Reservation that specifies the Region needed C. Purchase Reserved Instances that specify the Region and three Availability Zones needed. D. Create an On-Demand Capacity Reservation that specifies the Region and three Availability Zones needed. None 53. A prediction process requires access to a trained model that is stored in an Amazon S3 bucket. The process takes a few seconds to process an image and make a prediction. The process is not overly resource-intensive does not require any specialized hardware, and takes less than 512 MB of memory to run. What is the MOST effective compute solution for this use case? A. Amazon Elastic Container Service (Amazon ECS) B. Amazon EC2 Spot instances C. AWS Lambda functions D. AWS Elastic Beanstalk None 54. A company has an AWS account used for software engineering. The AWS account has access to the company's on-premises data center through a pair of AWS Direct Connect connections All non-VPC traffic routes to the virtual private gateway. A development team recently created an AWS Lambada function through the console. The development team needs to allow the function to access a database that runs in a private subnet in the company's data center. Which solution will meet these requirements? A. Configure the Lambda function to run in the VPC with the appropriate security group. B. Set up a VPN connection from AWS to the data center. Route the traffic from the Lambda function through the VPN C. Update the route tables in the VPC to allow the Lambda function to access the on-premises data center through direct connect. D. Create an Elastic IP address. Configure the Lambda function to send traffic through the Elastic IP address without an elastic network interface. None 55. A company's website handles millions of requests each day. and the number of requests continues to increase. A solutions architect needs to improve the response time of the web application. The solutions architect determines that the application needs to decrease latency. When retrieving product details from the Amazon DynamoDB table? A. Set up a DynamoOB Accelerator (DAX) cluster. Route all read requests through DAX B. Set up Amazon ElasliCache (or Redis between the DynamoOB table and the web application. Route all read requests through Redis. C. Set up Amazon ElasliCache for Memcached between the DynamoOB table and the web application. Route all read requests through Memcached. D. Set up Amazon DynamoOB Streams on the table, and have AWS Lambda read from the table and populate Amazon ElastiCache. Route all read requests through ElasliCache. None 56. A company's website handles millions of requests each day. and the number of requests continues to increase. A solutions architect needs to improve the response time of the web application. The solutions architect determines that the application needs to decrease latency. When retrieving product details from the Amazon DynamoDB table? A. Set up a DynamoOB Accelerator (DAX) cluster. Route all read requests through DAX. B. Set up Amazon ElasliCache (or Redis between the DynamoOB table and the web application. Route all read requests through Redis C. Set up Amazon ElasliCache for Memcached between the DynamoOB table and the web application. Route all read requests through Memcached. D. Set up Amazon DynamoOB Streams on the table, and have AWS Lambda read from the table and populate Amazon ElastiCache. Route all read requests through ElasliCache. None 57. A company has thousands of edge devices that collectively generate 1 TB of status alerts each day Each alert is approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis. The company wants a highly available solution However the company needs to minimize costs and does not want to manage additional infrastructure. Additionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older than 14 days. What is the MOST operationally efficient solution that meets these requirements? A. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket. Set up an S3 LifecycJe configuration to transition data to Amazon S3 Glacier after 14 days B. Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts. Create a script on the EC2 instances that will store the alerts in an Amazon S3 bucket. Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days C. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon Elasticsearch Service (Amazon ES) cluster. Set up the Amazon ES cluster to take manual snapshots every day and delete data from the cluster that is older than 14 days D. Create an Amazon Simple Queue Service (Amazon SQS) standard queue to ingest the alerts and set the message retention period to 14 days. Configure consumers to poll the SQS queue check the age of the message and analyze the message data as needed if the message is 14 days old, the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue None 58. A company has a Windows-based application that must be migrated to AWS. The application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances that are deployed across Availability Zones. What should a solution architect do to meet this requirement? A. Configure AWS Storage gateway in volume gateway mode. Mount the volume to each Windows instance B. Configure Amazon FSx for Windows File Server. Mount the Amazon FSx file system to each Windows instance. C. Configure a file system by using Amazon Elastic File System (Amazon EFS). Mount the EFS file system to each Windows instance. D. Configure an Amazon Elastic Block Store (Amazon EBS) volume with the required size. Attach each instance to the volume. Mount the file system within the volume to each Windows instance. None 59. A restaurant reservation application needs to access a waiting list. When a customer tries to reserve a table, and none are available, the customer application will put the user on the waiting list, and the application will notify the customer when a table becomes free. The waiting list must preserve the order in which customers were added to the waiting list. Which service should the solutions architect recommend to store this waiting list? A. Amazon Simple Notification Service (Amazon SNS) B. AWS Step Functions invoking AWS Lambda functions C. A FIFO queue in Amazon Simple Queue Service (Amazon SQS) D. A standard queue in Amazon Simple Queue Service (Amazon SQS) None 60. An ecommerce application places orders in an Amazon Simple Queue Service (Amazon SQS) queue. When a message is received, the Amazon EC2 worker instances process the request The EC2 instancesare in an Auto Scaling group 236. How should the architecture be designed to scale the auto scaling group with the LEAST amount of operational overhead? A. Use an Amazon CloudWatch alarm on the EC2 CPU to scale the Auto Scaling group up and down. B. Use an Amazon EC2 Auto Scaling health check for messages processed on the EC2 instances to scale up or down. C. Use an Amazon CloudWatch alarm based on the number of messages in the queue to scale the Auto Scaling group up or down D. Use an Amazon CloudWatch alarm based on the CPU to scale the Auto Scaling group up or down None 61. A company is using various types of amazon EC-2 On-Demand instances. The company suspects that these instances have greater cpu and memory capacity than its workloads require. Which actions should the company take to obtain recommendation to optimize cost? A. Use AWS Trusted Advisor for instance type recommendations. B. Use AWS Compute Optimizer for instance type recommendations. C. Use AWS Budgets for instance type recommendations. D. Use Cost Explorer rightsizing recommendations. E. Use Amazon Inspector to identify underutilized EC2 instances. 62. A user owns a MySQL database that is accessed by various clients who expect, at most, 100 ms latency on requests. Once a record is stored in the database, it is rarely changed. Clients only access one record al a time. Database access has been increasing exponentially due to increased client demand. The resultant load will soon exceed the capacity of the most expensive hardware available for purchase. The user wants to migrate to AWS, and is willing to change database systems. Which service would alleviate the database load issue and offer virtually unlimited scalability for the future? A. Amazon RDS B. Amazon DynamoDB C. Amazon Redshift D. AWS Data Pipeline None 63. A company has an asynchronous web application where Amazon API Gateway triggers AWS Lambda functions to perform write and update operations on an Amazon RDS DB instance. During periods of extreme use API Gateway and Lambda scale in response to the incoming workload but service outages occur due to congestion with Amazon RDS. The company is seeking a cost-effective design to alleviate this congestion. What should a solutions architect recommend'? A. implement RDS storage autoscaling with a larger instance type B. Create read replicas to alleviate me read requests on the database C. Use Amazon Kinesis to poll the incoming requests from API Gateway to the Lambda functions D. Use Amazon Simple Queue Service (Amazon SQS) to buffer the incoming requests before delivering them to the Lambda functions None 64. A company's database is hosted on an Amazon Aurora MySQL DB cluster in the us-east-1 Region. The database is 4 TB in size. The company needs to expand its disaster recovery strategy to the us-west-2 Region. The company must have the ability to fail over to us-west-2 with a recovery time objective (RTO) of 15 minutes. What should a solutions architect recommend to meet these requirements A. Create a Multi-Region Aurora MySQL DB cluster in us-east-1 and use-west-2. Use an Amazon Route 53 health check to monitor us-east-1 and fail over to us-west-2 upon failure. B. Take a snapshot of the DB cluster in us-east-1. Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function upon receipt of resource events. Configure the Lambda function to copy the snapshot to us-west-2 and restore the snapshot in uswest- 2 when failure is detecte C. Create an AWS CloudFormation script to create another Aurora MySQL DB cluster in us-west-2 in case of failure. Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function upon receipt of resource events. Configure the Lambda function to deploy the AWS CloudFormation stack in us-west-2 when failure is detected. D. Recreate the database as an Aurora global database with the primary DB cluster in us-east-1 and a secondary DB cluster in us-west-2. Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function upon receipt of resource events. Configure the Lambda function to promote the DB cluster in us-west-2 when failure is detected. None 65. A company captures ordered clickstream data from multiple websites and uses batch processing to analyze the data. The company receives 100 million event records, all approximately 1 KB in size, each day. The company loads the data into Amazon Redshift each night, and business analysts consume the data. The company wants to move toward near-real-time data processing for timely insights. The solution should process the streaming data while requiring the least possible operational overhead. Which combination of AWS services will meet these requirements MOST cost-effectively? (Choose two.) A. Amazon EC2 B. AWS Batch C. Amazon Simple Queue Service (Amazon SQS) D. Amazon Kinesis Data Firehose E. Amazon Kinesis Data Analytics 1 out of 65 Time's upTime is Up!