AWS Real Exam Questions
AWS Real Exam Questions
Exam List
Blog
Logout
Profile
Question 1 ( Topic 1 )
A solutions architect is designing a solution where users will be directed to a backup static error
page if the primary website is unavailable. The primary website’s
DNS records are hosted in Amazon Route 53 where their domain is pointing to an Application
Load Balancer (ALB).
Which configuration should the solutions architect use to meet the company’s needs while
minimizing changes and infrastructure overhead?
A. Point a Route 53 alias record to an Amazon CloudFront distribution with the ALB as
one of its origins. Then, create custom error pages for the distribution.
B. Set up a Route 53 active-passive failover configuration. Direct traffic to a static error
page hosted within an Amazon S3 bucket when Route 53 health checks determine that
the ALB endpoint is unhealthy.
C. Update the Route 53 record to use a latency-based routing policy. Add the backup
static error page hosted within an Amazon S3 bucket to the record so the traffic is sent to
the most responsive endpoints.
D. Set up a Route 53 active-active configuration with the ALB and an Amazon EC2
instance hosting a static error page as endpoints. Route 53 will only send requests to the
instance if the heal checks fail for the ALB.
Answer : B
Question 2 ( Topic 1 )
A. Launch the EC2 instances in a cluster placement group in one Availability Zone.
B. Launch the EC2 instances in a spread placement group in one Availability Zone.
C. Launch the EC2 instances in an Auto Scaling group in two Regions and peer the
VPCs.
D. Launch the EC2 instances in an Auto Scaling group spanning multiple Availability
Zones.
Answer : A
Question 3 ( Topic 1 )
A company wants to host a scalable web application on AWS. The application will be accessed
by users from different geographic regions of the world.
Application users will be able to download and upload unique data up to gigabytes in size. The
development team wants a cost-effective solution to minimize upload and download latency and
maximize performance.
What should a solutions architect do to accomplish this?
Answer : C
Reference:
https://aws.amazon.com/ec2/autoscaling/
Question 4 ( Topic 1 )
A company is migrating from an on-premises infrastructure to the AWS Cloud. One of the
company’s applications stores files on a Windows file server farm that uses Distributed File
System Replication (DFSR) to keep data in sync. A solutions architect needs to replace the file
server farm.
Which service should the solutions architect use?
A. Amazon EFS
B. Amazon FSx
C. Amazon S3
D. AWS Storage Gateway
Answer : B
Reference:
https://docs.aws.amazon.com/fsx/latest/WindowsGuide/migrate-files-to-fsx-datasync.html
Question 5 ( Topic 1 )
A company has a legacy application that process data in two parts. The second part of the
process takes longer than the first, so the company has decided to rewrite the application as two
microservices running on Amazon ECS that can scale independently.
How should a solutions architect integrate the microservices?
Answer : C
Question 6 ( Topic 1 )
A company captures clickstream data from multiple websites and analyzes it using batch
processing. The data is loaded nightly into Amazon Redshift and is consumed by business
analysts. The company wants to move towards near-real-time data processing for timely insights.
The solution should process the streaming data with minimal effort and operational overhead.
Which combination of AWS services are MOST cost-effective for this solution? (Choose two.)
A. Amazon EC2
B. AWS Lambda
C. Amazon Kinesis Data Streams
D. Amazon Kinesis Data Firehose
E. Amazon Kinesis Data Analytics
Answer : AD
Reference:
https://d0.awsstatic.com/whitepapers/whitepaper-streaming-data-solutions-on-aws-with-amazon-
kinesis.pdf
(9)
Question 7 ( Topic 1 )
Answer : C
Question 8 ( Topic 1 )
A company runs a multi-tier web application that hosts news content. The application runs on
Amazon EC2 instances behind an Application Load Balancer. The instances run in an EC2 Auto
Scaling group across multiple Availability Zones and use an Amazon Aurora database. A
solutions architect needs to make the application more resilient to periodic increases in request
rates.
Which architecture should the solutions architect implement? (Choose two.)
Question 9 ( Topic 1 )
An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database.
When evaluating performance metrics, a solutions architect discovered that the database reads
are causing high I/O and adding latency to the write requests against the database.
What should the solutions architect do to separate the read requests from the write requests?
Answer : C
Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReadRepl.html
Question 10 ( Topic 1 )
A recently acquired company is required to build its own infrastructure on AWS and migrate
multiple applications to the cloud within a month. Each application has approximately 50 TB of
data to be transferred. After the migration is complete, this company and its parent company will
both require secure network connectivity with consistent throughput from their data centers to
the applications. A solution architect must ensure one-time data migration and ongoing network
connectivity.
Which solution will meet these requirements?
A. AWS Direct Connect for both the initial transfer and ongoing connectivity.
B. AWS Site-to-Site VPN for both the initial transfer and ongoing connectivity.
C. AWS Snowball for the initial transfer and AWS Direct Connect for ongoing
connectivity.
D. AWS Snowball for the initial transfer and AWS Site-to-Site VPN for ongoing
connectivity.
Answer : D
Reference:
https://docs.aws.amazon.com/dms/latest/userguide/CHAP_LargeDBs.html
Question 11 ( Topic 1 )
A company serves content to its subscribers across the world using an application running on
AWS. The application has several Amazon C2 instances in a private subnet behind an
Application Load Balancer (ALB). Due to a recent change in copyright restrictions, the chief
information officer (CIO) wants to block access for certain countries.
Which action will meet these requirements?
A. Modify the ALB security group to deny incoming traffic from blocked countries.
B. Modify the security group for EC2 instances to deny incoming traffic from blocked
countries.
C. Use Amazon CloudFront to serve the application and deny access to blocked
countries.
D. Use ALB listener rules to return access denied responses to incoming traffic from
blocked countries.
Answer : B
Question 12 ( Topic 1 )
A product team is creating a new application that will store a large amount of data. The data will
be analyzed hourly and modified by multiple Amazon EC2 Linux instances. The application
team believes the amount of space needed will continue to grow for the next 6 months.
Which set of actions should a solutions architect take to support these needs?
A. Store the data in an Amazon EBS volume. Mount the EBS volume on the application
instances.
B. Store the data in an Amazon EFS file system. Mount the file system on the application
instances.
C. Store the data in Amazon S3 Glacier. Update the vault policy to allow access to the
application instances.
D. Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Update
the bucket policy to allow access to the application instances.
Answer : A
Question 13 ( Topic 1 )
Answer : B
Question 14 ( Topic 1 )
A solutions architect is deploying a distributed database on multiple Amazon EC2 instances. The
database stores all data on multiple instances so it can withstand the loss of an instance. The
database requires block storage with latency and throughput to support several million
transactions per second per server.
Which storage solution should the solutions architect use?
A. Amazon EBS
B. Amazon EC2 instance store
C. Amazon EFS
D. Amazon S3
Answer : A
Reference:
https://aws.amazon.com/ebs/
Question 15 ( Topic 1 )
Organizers for a global event want to put daily reports online as static HTML pages. The pages
are expected to generate millions of views from users around the world. The files are stored in an
Amazon S3 bucket. A solutions architect has been asked to design an efficient and effective
solution.
Which action should the solutions architect take to accomplish this?
Reference:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/
DownloadDistS3AndCustomOrigins.html
Question 16 ( Topic 1 )
A solutions architect is designing a new service behind Amazon API Gateway. The request
patterns for the service will be unpredictable and can change suddenly from 0 requests to over
500 per second. The total size of the data that needs to be persisted in a database is currently less
than 1 GB with unpredictable future growth. Data can be queried using simple key-value
requests.
Which combination of AWS services would meet these requirements? (Choose two.)
A. AWS Fargate
B. AWS Lambda
C. Amazon DynamoDB
D. Amazon EC2 Auto Scaling
E. MySQL-compatible Amazon Aurora
Answer : CD
Reference:
https://aws.amazon.com/ec2/faqs/
(unpredictable)
Question 17 ( Topic 1 )
A start-up company has a web application based in the us-east-1 Region with multiple Amazon
EC2 instances running behind an Application Load Balancer across multiple Availability Zones.
As the company’s user base grows in the us-west-1 Region, it needs a solution with low
latency and high availability.
What should a solutions architect do to accomplish this?
Question 18 ( Topic 1 )
A solutions architect is designing a solution to access a catalog of images and provide users with
the ability to submit requests to customize images. Image customization parameters will be in
any request sent to an AWS API Gateway API. The customized image will be generated on
demand, and users will receive a link they can click to view or download their customized image.
The solution must be highly available for viewing and customizing images.
What is the MOST cost-effective solution to meet these requirements?
A. Use Amazon EC2 instances to manipulate the original image into the requested
customization Store the original and manipulated images in Amazon S3. Configure an
Elastic Load Balancer in front of the EC2 instances.
B. Use AWS Lambda to manipulate the original image to the requested customization.
Store the original and manipulated images in Amazon S3. Configure an Amazon
CloudFront distribution with the S3 bucket as the origin.
C. Use AWS Lambda to manipulate the original image to the requested customization.
Store the original images in Amazon S3 and the manipulated images in Amazon
DynamoDB. Configure an Elastic Load Balancer in front of the Amazon EC2 instances.
D. Use Amazon EC2 instances to manipulate the original image into the requested
customization. Store the original images in Amazon S3 and the manipulated images in
Amazon DynamoDB. Configure an Amazon CloudFront distribution with the S3 bucket
as the origin.
Answer : B
Question 19 ( Topic 1 )
A company is planning to migrate a business-critical dataset to Amazon S3. The current solution
design uses a single S3 bucket in the us-east-1 Region with versioning enabled to store the
dataset. The company's disaster recovery policy states that all data multiple AWS Regions.
How should a solutions architect design the S3 solution?
Reference:
https://medium.com/@KerrySheldon/s3-exercise-2-4-adding-objects-to-an-s3-bucket-with-cross-
region-replication-a78b332b7697
Question 20 ( Topic 1 )
A company has application running on Amazon EC2 instances in a VPC. One of the applications
needs to call an Amazon S3 API to store and read objects. The company’s security policies
restrict any internet-bound traffic from the applications.
Which action will fulfill these requirements and maintain security?
Answer : C
Reference:
https://aws.amazon.com/blogs/aws/new-vpc-endpoint-for-amazon-s3/
Question 21 ( Topic 1 )
A company’s web application uses an Amazon RDS PostgreSQL DB instance to store its
application data. During the financial closing period at the start of every month. Accountants run
large queries that impact the database's performance due to high usage. The company wants to
minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST
amount of effort?
Answer : B
Question 22 ( Topic 1 )
A company wants to migrate a high performance computing (HPC) application and data from
on-premises to the AWS Cloud. The company uses tiered storage on premises with hot high-
performance parallel storage to support the application during periodic runs of the application,
and more economical cold storage to hold the data when the application is not actively running.
Which combination of solutions should a solutions architect recommend to support the storage
needs of the application? (Choose two.)
Answer : AD
Question 23 ( Topic 1 )
Answer : DE
Question 24 ( Topic 1 )
A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2
instances in a VPC do not traverse the internet.
What should the solutions architect do to accomplish this? (Choose two.)
Answer : AD
Question 25 ( Topic 1 )
A. Create an Amazon S3 bucket with server-side encryption enabled. Move all the data to
Amazon S3. Delete the RDS instance.
B. Enable RDS Multi-AZ mode with encryption at rest enabled. Perform a failover to the
standby instance.
C. Take a Snapshot of the RDS instance. Create an encrypted copy of the snapshot.
Restore the RDS instance from the encrypted snapshot.
D. Create an RDS read replica with encryption at rest enabled. Promote the read replica
to master and switch the over to the new master. Delete the old RDS instance.
Answer : B
Question 26 ( Topic 1 )
A. Use Amazon Kinesis Data Streams for real-time events with a partition for each
equipment asset. Use Amazon Kinesis Data Firehose to save data to Amazon S3.
B. Use Amazon Kinesis Data Streams for real-time events with a shard for each
equipment asset. Use Amazon Kinesis Data Firehose to save data to Amazon EBS.
C. Use an Amazon SQS FIFO queue for real-time events with one queue for each
equipment asset. Trigger an AWS Lambda function for the SQS queue to save data to
Amazon EFS.
D. Use an Amazon SQS standard queue for real-time events with one queue for each
equipment asset. Trigger an AWS Lambda function from the SQS queue to save data to
Amazon S3.
Answer : A
Question 27 ( Topic 1 )
A company’s website runs on Amazon EC2 instances behind an Application Load Balancer
(ALB). The website has a mix of dynamic and static content. Users around the globe are
reporting that the website is slow.
Which set of actions will improve website performance for users worldwide?
A. Create an Amazon CloudFront distribution and configure the ALB as an origin. Then
update the Amazon Route 53 record to point to the CloudFront distribution.
B. Create a latency-based Amazon Route 53 record for the ALB. Then launch new EC2
instances with larger instance sizes and register the instances with the ALB.
C. Launch new EC2 instances hosting the same web application in different Regions
closer to the users. Then register instances with the same ALB using cross- Region VPC
peering.
D. Host the website in an Amazon S3 bucket in the Regions closest to the users and
delete the ALB and EC2 instances. Then update an Amazon Route 53 record to point to
the S3 buckets.
Answer : A
Reference:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-cloudfront-
distribution.html
Question 28 ( Topic 1 )
A company has been storing analytics data in an Amazon RDS instance for the past few years.
The company asked a solutions architect to find a solution that allows users to access this data
using an API. The expectation is that the application will experience periods of inactivity but
could receive bursts of traffic within seconds.
Which solution should the solutions architect suggest?
Answer : D
Question 29 ( Topic 1 )
A company must generate sales reports at the beginning of every month. The reporting process
launches 20 Amazon EC2 instances on the first of the month. The process runs for 7 days and
cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?
A. Reserved Instances
B. Spot Block Instances
C. On-Demand Instances
D. Scheduled Reserved Instances
Answer : C
Question 30 ( Topic 1 )
A gaming company has multiple Amazon EC2 instances in a single Availability Zone for its
multiplayer game that communicates with users on Layer 4. The chief technology officer (CTO)
wants to make the architecture highly available and cost-effective.
Which should a solutions architect do to meet these requirements? (Choose two.)?
Answer : DE
Question 31 ( Topic 1 )
A company currently operates a web application backed by an Amazon RDS MySQL database.
It has automated backups that are run daily and are not encrypted. A security audit requires
future backups to be encrypted and the unencrypted backups to be destroyed. The company will
make at least one encrypted backup before destroying the old backups.
What should be done to enable encryption for future backups?
A. Enable default encryption for the Amazon S3 bucket where backups are stored.
B. Modify the backup section of the database configuration to toggle the Enable
encryption check box.
C. Create a snapshot of the database. Copy it to an encrypted snapshot. Restore the
database from the encrypted snapshot.
D. Enable an encrypted read replica on RDS for MySQL. Promote the encrypted read
replica to primary. Remove the original database instance.
Answer : C
Question 32 ( Topic 1 )
A company is hosting a website behind multiple Application Load Balancers. The company has
different distribution rights for its content around the world. A solutions architect needs to ensure
that users are served the correct content without violating distribution rights.
Which configuration should the solutions architect choose to meet these requirements?
Answer : C
Reference:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html
(geolocation routing)
Question 33 ( Topic 1 )
A solution architect has created a new AWS account and must secure AWS account root user
access.
Which combination of actions will accomplish this? (Choose two.)
Answer : BD
Question 34 ( Topic 1 )
A. S3 Glacier
B. S3 Intelligent-Tiering
C. S3 Standard-Infrequent Access (S3 Standard-IA)
D. S3 One Zone-Infrequent Access (S3 One Zone-IA)
Answer : D
Explanation:
S3 One Zone-IA is for data that is accessed less frequently, but requires rapid access when
needed. Unlike other S3 Storage Classes which store data in a minimum of three Availability
Zones (AZs), S3 One Zone-IA stores data in a single AZ and costs 20% less than S3 Standard-
IA. S3 One Zone-IA is ideal for customers who want a lower-cost option for infrequently
accessed data but do not require the availability and resilience of S3 Standard or S3 Standard-IA.
It’s a good choice for storing secondary backup copies of on-premises data or easily re-
creatable data. You can also use it as cost-effective storage for data that is replicated from
another AWS Region using S3 Cross-Region Replication.
Question 35 ( Topic 1 )
A company’s website is used to sell products to the public. The site runs on Amazon EC2
instances in an Auto Scaling group behind an Application Load Balancer
(ALB). There is also an Amazon CloudFront distribution, and AWS WAF is being used to
protect against SQL injection attacks. The ALB is the origin for the
CloudFront distribution. A recent review of security logs revealed an external malicious IP that
needs to be blocked from accessing the website.
What should a solutions architect do to protect the application?
A. Modify the network ACL on the CloudFront distribution to add a deny rule for the
malicious IP address.
B. Modify the configuration of AWS WAF to add an IP match condition to block the
malicious IP address.
C. Modify the network ACL for the EC2 instances in the target groups behind the ALB
to deny the malicious IP address.
D. Modify the security groups for the EC2 instances in the target groups behind the ALB
to deny the malicious IP address.
Answer : B
Reference:
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-
balancers/
Question 36 ( Topic 1 )
A solutions architect is designing an application for a two-step order process. The first step is
synchronous and must return to the user with little latency. The second step takes longer, so it
will be implemented in a separate component. Orders must be processed exactly once and in the
order in which they are received.
How should the solutions architect integrate these components?
Answer : A
Reference:
https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-
queues.html
Question 37 ( Topic 1 )
A web application is deployed in the AWS Cloud. It consists of a two-tier architecture that
includes a web layer and a database layer. The web server is vulnerable to cross-site scripting
(XSS) attacks.
What should a solutions architect do to remediate the vulnerability?
A. Create a Classic Load Balancer. Put the web layer behind the load balancer and enable
AWS WAF.
B. Create a Network Load Balancer. Put the web layer behind the load balancer and
enable AWS WAF.
C. Create an Application Load Balancer. Put the web layer behind the load balancer and
enable AWS WAF.
D. Create an Application Load Balancer. Put the web layer behind the load balancer and
use AWS Shield Standard.
Answer : A
Question 38 ( Topic 1 )
A company’s website is using an Amazon RDS MySQL Multi-AZ DB instance for its
transactional data storage. There are other internal systems that query this DB instance to fetch
data for internal batch processing. The RDS DB instance slows down significantly the internal
systems fetch data. This impacts the website’s read and write performance, and the users
experience slow response times.
Which solution will improve the website's performance?
Answer : D
Question 39 ( Topic 1 )
An application runs on Amazon EC2 instances across multiple Availability Zones. The instances
run in an Amazon EC2 Auto Scaling group behind an Application
Load Balancer. The application performs best when the CPU utilization of the EC2 instances is
at or near 40%.
What should a solutions architect do to maintain the desired performance across all instances in
the group?
A. Use a simple scaling policy to dynamically scale the Auto Scaling group.
B. Use a target tracking policy to dynamically scale the Auto Scaling group.
C. Use an AWS Lambda function to update the desired Auto Scaling group capacity.
D. Use scheduled scaling actions to scale up and scale down the Auto Scaling group.
Answer : D
Reference:
https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-
scheduled-scaling.html
Question 40 ( Topic 1 )
A company runs an internal browser-based application. The application runs on Amazon EC2
instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto
Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20
instances during work hours, but scales down to
2 instances overnight. Staff are complaining that the application is very slow when the day
begins, although it runs well by mid-morning.
How should the scaling be changed to address the staff complaints and keep costs to a minimum?
A. Implement a scheduled action that sets the desired capacity to 20 shortly before the
office opens.
B. Implement a step scaling action triggered at a lower CPU threshold, and decrease the
cooldown period.
C. Implement a target tracking action triggered at a lower CPU threshold, and decrease
the cooldown period.
D. Implement a scheduled action that sets the minimum and maximum capacity to 20
shortly before the office opens.
Answer : C
Reference:
https://docs.aws.amazon.com/autoscaling/ec2/userguide/asg-purchase-options.html
Question 41 ( Topic 1 )
A financial services company has a web application that serves users in the United States and
Europe. The application consists of a database tier and a web server tier. The database tier
consists of a MySQL database hosted in us-east-1. Amazon Route 53 geoproximity routing is
used to direct traffic to instances in the closest Region. A performance review of the system
reveals that European users are not receiving the same level of query performance as those in the
United
States.
Which changes should be made to the database tier to improve performance?
A. Migrate the database to Amazon RDS for MySQL. Configure Multi-AZ in one of the
European Regions.
B. Migrate the database to Amazon DynamoDB. Use DynamoDB global tables to enable
replication to additional Regions.
C. Deploy MySQL instances in each Region. Deploy an Application Load Balancer in
front of MySQL to reduce the load on the primary instance.
D. Migrate the database to an Amazon Aurora global database in MySQL compatibility
mode. Configure read replicas in one of the European Regions.
Answer : C
Question 42 ( Topic 1 )
A company hosts a static website on-premises and wants to migrate the website to AWS. The
website should load as quickly as possible for users around the world. The company also wants
the most cost-effective solution.
What should a solutions architect do to accomplish this?
A. Copy the website content to an Amazon S3 bucket. Configure the bucket to serve
static webpage content. Replicate the S3 bucket to multiple AWS Regions.
B. Copy the website content to an Amazon S3 bucket. Configure the bucket to serve
static webpage content. Configure Amazon CloudFront with the S3 bucket as the origin.
C. Copy the website content to an Amazon EBS-backed Amazon EC2 instance running
Apache HTTP Server. Configure Amazon Route 53 geolocation routing policies to select
the closest origin.
D. Copy the website content to multiple Amazon EBS-backed Amazon EC2 instances
running Apache HTTP Server in multiple AWS Regions. Configure Amazon CloudFront
geolocation routing policies to select the closest origin.
Answer : A
Question 43 ( Topic 1 )
A solutions architect is designing storage for a high performance computing (HPC) environment
based on Amazon Linux. The workload stores and processes a large amount of engineering
drawings that require shared storage and heavy computing.
Which storage option would be the optimal solution?
Answer : B
Reference:
https://d1.awsstatic.com/whitepapers/AWS%20Partner%20Network_HPC%20Storage
%20Options_2019_FINAL.pdf
(p.8)
Question 44 ( Topic 1 )
Answer : C
Question 45 ( Topic 1 )
A company hosts a static website within an Amazon S3 bucket. A solutions architect needs to
ensure that data can be recovered in case of accidental deletion.
Which action will accomplish this?
Answer : A
Reference:
https://books.google.com.sg/books?
id=wv45DQAAQBAJ&pg=PA39&lpg=PA39&dq=hosts+a+static+website+within+an+Amazon
+S3+bucket.+A
+solutions+architect+needs+to+ensure+that+data+can+be+recovered+in+case+of+accidental
+deletion&source=bl&ots=0NolP5igY5&sig=ACfU3U3opL9Jha6jM2EI8x7EcjK4rigQHQ&hl=
en&sa=X&ved=2ahUKEwiS9e3yy7vpAhVx73MBHZNoDnQQ6AEwAH
oECBQQAQ#v=onepage&q=hosts%20a%20static%20website%20within%20an%20Amazon
%20S3%20bucket.%20A%20solutions%20architect%20needs%20to
%20ensure%20that%20data%20can%20be%20recovered%20in%20case%20of%20accidental
%20deletion&f=false
Question 46 ( Topic 1 )
Answer : B
Reference:
https://aws.amazon.com/blogs/database/best-storage-practices-for-running-production-
workloads-on-hosted-databases-with-amazon-rds-or-amazon- ec2/
Question 47 ( Topic 1 )
A company runs an application in a branch office within a small data closet with no virtualized
compute resources. The application data is stored on an NFS volume. Compliance standards
require a daily offsite backup of the NFS volume.
Which solution meet these requirements?
A. Install an AWS Storage Gateway file gateway on premises to replicate the data to
Amazon S3.
B. Install an AWS Storage Gateway file gateway hardware appliance on premises to
replicate the data to Amazon S3.
C. Install an AWS Storage Gateway volume gateway with stored volumes on premises to
replicate the data to Amazon S3.
D. Install an AWS Storage Gateway volume gateway with cached volumes on premises
to replicate the data to Amazon S3.
Answer : C
Question 48 ( Topic 1 )
A company’s web application is using multiple Linux Amazon EC2 instances and storing
data on Amazon EBS volumes. The company is looking for a solution to increase the resiliency
of the application in case of a failure and to provide storage that complies with atomicity,
consistency, isolation, and durability (ACID).
What should a solutions architect do to meet these requirements?
A. Launch the application on EC2 instances in each Availability Zone. Attach EBS
volumes to each EC2 instance.
B. Create an Application Load Balancer with Auto Scaling groups across multiple
Availability Zones. Mount an instance store on each EC2 instance.
C. Create an Application Load Balancer with Auto Scaling groups across multiple
Availability Zones. Store data on Amazon EFS and mount a target on each instance.
D. Create an Application Load Balancer with Auto Scaling groups across multiple
Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One
Zone-IA).
Answer : A
Question 49 ( Topic 1 )
A security team to limit access to specific services or actions in all of the team’s AWS
accounts. All accounts belong to a large organization in AWS Organizations.
The solution must be scalable and there must be a single point where permission can be
maintained.
What should a solutions architect do to accomplish this?
Answer : B
Question 50 ( Topic 1 )
A data science team requires storage for nightly log processing. The size and number of logs is
unknown and will persist for 24 hours only.
What is the MOST cost-effective solution?
A. Amazon S3 Glacier
B. Amazon S3 Standard
C. Amazon S3 Intelligent-Tiering
D. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
Answer : A
Reference:
https://aws.amazon.com/s3/storage-classes/#Unknown_or_changing_access
Question 51 ( Topic 1 )
A company is hosting a web application on AWS using a single Amazon EC2 instance that
stores user-uploaded documents in an Amazon EBS volume. For better scalability and
availability, the company duplicated the architecture and created a second EC2 instance and EBS
volume in another Availability Zone, placing both behind an Application Load Balancer. After
completing this change, users reported that, each time they refreshed the website, they could see
one subset of their documents or the other, but never all of the documents at the same time.
What should a solutions architect propose to ensure users see all of their documents at once?
A. Copy the data so both EBS volumes contain all the documents.
B. Configure the Application Load Balancer to direct a user to the server with the
documents.
C. Copy the data from both EBS volumes to Amazon EFS. Modify the application to
save new documents to Amazon EFS.
D. Configure the Application Load Balancer to send the request to both servers. Return
each document from the correct server.
Answer : B
Question 52 ( Topic 1 )
A company is planning to use Amazon S3 to store images uploaded by its users. The images
must be encrypted at rest in Amazon S3. The company does not want to spend time managing
and rotating the keys, but it does want to control who can access those keys.
What should a solutions architect use to accomplish this?
Answer : D
Reference:
https://aws.amazon.com/kms/faqs/
Question 53 ( Topic 1 )
A company is running an ecommerce application on Amazon EC2. The application consists of a
stateless web tier that requires a minimum of 10 instances, and a peak of 250 instances to support
the application’s usage. The application requires 50 instances 80% of the time.
Which solution should be used to minimize costs?
Answer : C
Question 54 ( Topic 1 )
A company has deployed an API in a VPC behind an internet-facing Application Load Balancer
(ALB). An application that consumes the API as a client is deployed in a second account in
private subnets behind a NAT gateway. When requests to the client application increase, the
NAT gateway costs are higher than expected. A solutions architect has configured the ALB to be
internal.
Which combination of architectural changes will reduce the NAT gateway costs? (Choose two.)
A. Configure a VPC peering connection between the two VPCs. Access the API using the
private address.
B. Configure an AWS Direct Connect connection between the two VPCs. Access the API
using the private address.
C. Configure a ClassicLink connection for the API into the client VPC. Access the API
using the ClassicLink address.
D. Configure a PrivateLink connection for the API into the client VPC. Access the API
using the PrivateLink address.
E. Configure an AWS Resource Access Manager connection between the two accounts.
Access the API using the private address.
Answer : CE
Question 55 ( Topic 1 )
A solutions architect is tasked with transferring 750 TB of data from a network-attached file
system located at a branch office Amazon S3 Glacier. The solution must avoid saturating the
branch office’s low-bandwidth internet connection.
What is the MOST cost-effective solution?
A. Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files
directly. Create a bucket VPC endpoint.
B. Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination.
Create a bucket policy to enforce VPC endpoint.
C. Mount the network-attached file system to Amazon S3 and copy the files directly.
Create a lifecycle policy to S3 objects to Amazon S3 Glacier.
D. Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the
destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
Answer : A
Question 56 ( Topic 1 )
A company has a two-tier application architecture that runs in public and private subnets.
Amazon EC2 instances running the web application are in the public subnet and a database runs
on the private subnet. The web application instances and the database are running in a single
Availability Zone (AZ).
Which combination of steps should a solutions architect take to provide high availability for this
architecture? (Choose two.)
A. Create new public and private subnets in the same AZ for high availability.
B. Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning
multiple AZs.
C. Add the existing web application instances to an Auto Scaling group behind an
Application Load Balancer.
D. Create new public and private subnets in a new AZ. Create a database using Amazon
EC2 in one AZ.
E. Create new public and private subnets in the same VPC, each in a new AZ. Migrate
the database to an Amazon RDS multi-AZ deployment.
Answer : AE
Question 57 ( Topic 1 )
Answer : BD
Reference:
https://aws.amazon.com/s3/features/
Question 58 ( Topic 1 )
A. Enable public read on the S3 object and provide the link to the vendor.
B. Upload the file to Amazon WorkDocs and share the public link with the vendor.
C. Generate a presigned URL and have the vendor download the log file before it
expires.
D. Create an IAM user for the vendor to provide access to the S3 bucket and the
application. Enforce multi-factor authentication.
Answer : C
Question 59 ( Topic 1 )
A. Configure the security group for the web tier to allow inbound traffic on port 443 from
0.0.0.0/0. B. Configure the security group for the web tier to allow outbound traffic on
port 443 from 0.0.0.0/0.
B. Configure the security group for the database tier to allow inbound traffic on port 1433
from the security group for the web tier.
C. Configure the security group for the database tier to allow outbound traffic on ports
443 and 1433 to the security group for the web tier.
D. Configure the security group for the database tier to allow inbound traffic on ports 443
and 1433 from the security group for the web tier.
Answer : AC
Question 60 ( Topic 1 )
A company allows its developers to attach existing IAM policies to existing IAM roles to enable
faster experimentation and agility. However, the security operations team is concerned that the
developers could attach the existing administrator policy, when would allow the developers to
circumvent any other security policies.
How should a solutions architect address this issue?
A. Create an Amazon SNS topic to send an alert every time a developer creates a new
policy.
B. Use service control policies to disable IAM activity across all account in the
organizational unit.
C. Prevent the developers from attaching any policies and assign all IAM duties to the
security operations team.
D. Set an IAM permissions boundary on the developer IAM role that explicitly denies
attaching the administrator policy.
Answer : D
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
Question 61 ( Topic 1 )
A company has a multi-tier application that runs six front-end web servers in an Amazon EC2
Auto Scaling group in a single Availability Zone behind an
Application Load Balancer (ALB). A solutions architect needs to modify the infrastructure to be
highly available without modifying the application.
Which architecture should the solutions architect choose that provides high availability?
A. Create an Auto Scaling group that uses three instances across each of two Regions.
B. Modify the Auto Scaling group to use three instances across each of two Availability
Zones.
C. Create an Auto Scaling template that can be used to quickly create more instances in
another Region.
D. Change the ALB in front of the Amazon EC2 instances in a round-robin configuration
to balance traffic to the web tier.
Answer : A
Question 62 ( Topic 1 )
A company runs an application on a group of Amazon Linux EC2 instances. The application
writes log files using standard API calls. For compliance reasons, all log files must be retained
indefinitely and will be analyzed by a reporting tool that must access all files concurrently.
Which storage service should a solutions architect use to provide the MOST cost-effective
solution?
A. Amazon EBS
B. Amazon EFS
C. Amazon EC2 instance store
D. Amazon S3
Answer : D
Question 63 ( Topic 1 )
A media streaming company collects real-time data and stores it in a disk-optimized database
system. The company is not getting the expected throughput and wants an in-memory database
storage solution that performs faster and provides high availability using data replication.
Which database should a solutions architect recommend?
Answer : C
Reference:
https://aws.amazon.com/elasticache/redis/faqs/
Question 64 ( Topic 1 )
A company hosts its product information webpages on AWS. The existing solution uses multiple
Amazon C2 instances behind an Application Load Balancer in an
Auto Scaling group. The website also uses a custom DNS name and communicates with HTTPS
only using a dedicated SSL certificate. The company is planning a new product launch and wants
to be sure that users from around the world have the best possible experience on the new website.
What should a solutions architect do to meet these requirements?
Answer : A
Question 65 ( Topic 1 )
A solutions architect is designing the cloud architecture for a new application being deployed on
AWS. The process should run in parallel while adding and removing application nodes as needed
based on the number of jobs to be processed. The processor application is stateless. The solutions
architect must ensure that the application is loosely coupled and the job items are durably stored.
Which design should the solutions architect use?
A. Create an Amazon SNS topic to send the jobs that need to be processed. Create an
Amazon Machine Image (AMI) that consists of the processor application. Create a launch
configuration that uses the AMI. Create an Auto Scaling group using the launch
configuration. Set the scaling policy for the Auto Scaling group to add and remove nodes
based on CPU usage.
B. Create an Amazon SQS queue to hold the jobs that need to be processed. Create an
Amazon Machine Image (AMI) that consists of the processor application. Create a launch
configuration that uses the AMI. Create an Auto Scaling group using the launch
configuration. Set the scaling policy for the Auto Scaling group to add and remove nodes
based on network usage.
C. Create an Amazon SQS queue to hold the jobs that need to be processed. Create an
Amazon Machine Image (AMI) that consists of the processor application. Create a launch
template that uses the AMI. Create an Auto Scaling group using the launch template. Set
the scaling policy for the Auto Scaling group to add and remove nodes based on the
number of items in the SQS queue.
D. Create an Amazon SNS topic to send the jobs that need to be processed. Create an
Amazon Machine Image (AMI) that consists of the processor application. Create a launch
template that uses the AMI. Create an Auto Scaling group using the launch template. Set
the scaling policy for the Auto Scaling group to add and remove nodes based on the
number of messages published to the SNS topic.
Answer : C
Page: 1 / 1
Total 65 questions
Connect with us
Facebook
Twitter
Youtube
[email protected]