EMT Practice Test

1. Question Content...

---

Question1: A company is using an Amazon S3 bucket located in us-west-2 to serve videos to their customers. Their
customers are located all around the world and the videos are requested a lot during peak hours.
Customers in Europe complain about experiencing slow downloaded speeds, and during peak hours,
customers in all locations report experiencing HTTP 500 errors.
What can a Solutions Architect do to address these issues?

Question2: A Solution Architect is designing a two-tier application for maximum security, with a web tier running on
EC2 instances and the data stored in an RDS DB instance. The web tier should accept user access only
through HTTPS connections (port 443) from the Internet, and the data must be encrypted in transit to and
from the database.
What combination of steps will MOST securely meet the stated requirements? (Choose two.)

Question3: What conditions could cause a Multi-AZ Amazon RDS failover to occur? (Choose two.)

Question4: A Solutions Architect is designing a photo application on AWS. Every time a user uploads a photo to
Amazon S3, the Architect must insert a new item to a DynamoDB table.
Which AWS-managed service is the BEST fit to insert the item?

Question5: A company is rolling out a new web service, but is unsure how many customers the service will attract.
However, the company is unwilling to accept any downtime.
What could a Solutions Architect recommend to the company in order to keep track of customers' current
session data?

Question6: A company wants to expand its web services from us-east-1 into ap-southeast-1. The company stores a
large amount of static content on its website, and recently received complaints about slow loading speeds
and the website timing out.
What should be done to meet the expansion goal while also addressing the latency and timeout issues?

Question7: A company has gigabytes of web log files stored in an Amazon S3 bucket. A Solutions Architect wants to
copy those files into Amazon Redshift for analysis. The company's security policy mandates that data is
encrypted at rest both in the Amazon Redshift cluster and the Amazon S3 bucket.
Which process will fulfill the security requirements?

Question8: A customer has a production application that frequently overwrites and deletes data, the application
requires the most up-to-date version of the data every time it is requested.
Which storage should a Solutions Architect recommend to bet accommodate this use case?

Question9: A company hosts a popular web application. The web application connects to a database running in a
private VPC subnet. The web servers must be accessible only to customers on an SSL connection. The
RDS MySQL database server must be accessible only from the web servers.
How should the Architect design a solution to meet the requirements without impacting running
applications?

Question10: A company's policy requires that all data stored in Amazon S3 is encrypted. The company wants to use
the option with the least overhead and does not want to manage any encryption keys.
Which of the following options will meet the company's requirements?

Question11: A company is deploying a reporting application on Amazon EC2. The application is expected to generate
1,000 documents every hour and each document will be 800 MB. The company is concerned about strong
data consistency and file locking, as various applications hosted on other EC2 instances will process the
report documents in parallel when they become available.
What storage solution will meet these requirements with the LEAST amount of administrative overhead?

Question12: A Solutions Architect is designing a VPC. Instances in a private subnet must be able to establish IPv6
traffic to the Internet. The design must scale automatically and not incur any additional cost.
This can be accomplished with:

Question13: A Solutions Architect is building an application on AWS that will require 20,000 IOPS on a particular
volume to support a media event. Once the event ends, the IOPS need is no longer required. The
marketing team asks the Architect to build the platform to optimize storage without incurring downtime.
How should the Architect design the platform to meet these requirements?

Question14: A Solutions Architect must design an Amazon DynamoDB table to store data about customer activities.
The data is used to analyze recent customer behavior, so data that is less than a week old is heavily
accessed and older data is accessed infrequently. Data that is more than one month old never needs to be
referenced by the application, but needs to be archived for year-end analytics.
What is the MOST cost-efficient way to meet these requirements? (Choose two.)

Question15: A company wants to improve the performance of their web application after receiving customer complaints.
An analysis concluded that the same complex database queries were causing increased latency.
What should a Solutions Architect recommend to improve the application's performance?

Question16: A Solutions Architect has designed a VPC that meets all necessary security requirements for their
organization. Any applications deployed in the organization must use this VPC design.
How can project teams deploy, manage, and delete VPCs that meet this design with the LEAST
administrative effort?

Question17: A popular e-commerce application runs on AWS. The application encounters performance issues. The
database is unable to handle the amount of queries and load during peak times. The database is running
on the RDS Aurora engine on the largest instance size available.
What should an administrator do to improve performance?

Question18: As part of securing an API layer built on Amazon API gateway, a Solutions Architect has to authorize users
who are currently authenticated by an existing identity provider. The users must be denied access for a
period of one hour after three unsuccessful attempts.
How can the Solutions Architect meet these requirements?

Question19: A large media site has multiple applications in Amazon ECS. A Solutions Architect needs to use content
metadata and route traffic to specific services.
What is the MOST efficient method to perform this task?

Question20: A customer is running a critical payroll system in a production environment in one data center and a
disaster recovery (DR) environment in another. The application includes load-balanced web servers and
failover for the MySQL database. The customer's DR process is manual and error-phone. For this reason,
management has asked IT to migrate the application to AWS and make it highly available so that IT no
longer has to manually fail over the environment.
How should a Solutions Architect migrate the system to AWS?

Question21: A web application running on Amazon EC2 instances writes data synchronously to an Amazon DynamoDB
table configured for 60 write capacity units. During normal operation the application writes 50 KB/s to the
tale, but can scale up to 500 KB/ s during peak hours. The application is currently throttling errors from the
DynamoDB table during peak hours.
What is the MOST cost-efficient change to support the increased traffic with minimal changes to the
application?

Question22: An online company wants to conduct real-time sentiment analysis about its products from its social media
channels using SQL.
Which of the following solutions has the LOWEST cost and operational burden?

Question23: A company has asked the Solutions Architect to modify its AWS-hosted internal application to allow for
load balancing. The customer requests always come from the company domain (example.net). The
company requires that incoming HTTP and HTTPS traffic is routed based on the path element of the URL
in the request.
Which implementation can satisfy all requirements?

Question24: A Solutions Architect needs to design a solution that will allow Website Developers to deploy static web
content without managing server infrastructure. All web content must be accessed over HTTPS with a
custom domain name. The solution should be scalable as the company continues to grow.
Which of the following will provide the MOST cost-effective solution?

Question25: A Solution Architect is creating a serverless web application that must access mapping data in hundreds of
data files, each containing approximately 30 KB of data. The storage required is expected to grow to
hundreds of terabytes.
Which storage solution is most cost-effective, yet still meets the requirements for this use case?

Question26: A company has asked a Solutions Architect to ensure that data is protected during data transfer to and
from Amazon S3.
Use of which service will protect the data in transit?

Question27: Employees from several companies use an application once a year during a specific 30-day period. The
periods are different for each company. Traffic to the application spikes during these 30-day periods.
How can the application be designed to handle these traffic spikes?

Question28: A Solutions Architect is designing a service that must have four Amazon EC2 instances running between 8
AM and 6 PM daily. The service requires one EC2 instance outside of those hours.
What is the MOST cost-effective way to provide enough compute?

Question29: A university is running an internal web application on AWS that students can access from the university
network to check their exam results. The web application runs on Amazon EC2 instances and pulls results
from an Amazon DynamoDB table. Auto Scaling is currently configured to add a new web server when
CPU is greater than 80% for 5 minutes. DynamoDB is configured to increase both read and write capacity
units by five when utilization is greater than 80%. Exam results are released at 9:00 a.m. each Monday,
and 80% of students, attempt to access their unique result within the first 30 minutes. Despite Auto Scaling
being enabled, students are complaining of slow response times and errors when they view the site. There
are no performance complaints after 9:30 a.m. on Monday.
Which recommendation should a Solutions Architect make to improve performance in a cost-effective
manner?

Question30: A Solutions Architect is designing a three-tier web application that will allow customers to upload pictures
from a mobile application. The application will then generate a thumbnail of the picture and return a
message to the user confirming that the image was successfully uploaded. Generation of the thumbnail
may take up to 5 seconds. To provide a sub second response time to the customers uploading the images,
the Solutions Architect wants to separate the web tier from the application tier.
Which service would allow the presentation tier to asynchronously dispatch the request to the application
tier?

Question31: A Solution Architect is designing a web application that runs on Amazon EC2 instances behind a load
balancer. All data in transit must be encrypted.
Which solutions will meet the encryption requirement? (Select TWO.)

Question32: A Solutions Architect must design a solution that encrypts data in Amazon S3. Corporate policy mandates
encryption keys be generated and managed on premises.
Which solution should the Architect use to meet the security requirements?

Question33: A mobile application serves scientific articles from individual files in an Amazon S3 bucket. Articles older
than 30 days are rarely read. Articles older than 60 days no longer need to be available through the
application, but the application owner would like to keep them for historical purposes.
Which cost-effective solution BEST meets these requirements?

Question34: A company is migrating its data center to AWS. As part of this migration, there is a three-tier web
application that has strict data-at-rest encryption requirements. The customer deploys this application on
Amazon EC2 using Amazon EBS, and now must provide encryption at-rest.
How can this requirement be met without changing the application?

Question35: A Solutions Architect must select the most cost-efficient architecture for a service that responds to web
requests. These web requests are small and query a DynamoDB table. The request rate ranges from zero
to several hundred each second, without any predictable patterns.
What is the MOST cost-efficient architecture for this service?

Question36: An interactive, dynamic website runs on Amazon EC2 instances in a single subnet behind an ELB Classic
Load Balancer.
Which design changes will make the site more highly available?

Question37: A Solutions Architect must design a storage solution for incoming billing reports in CSV format. The data
does not need to be scanned frequently and is discarded after 30 days.
Which service will be MOST cost-effective in meeting these requirements?

Question38: A website experiences unpredictable traffic. During peak traffic times, the database is unable to keep up
with the write request.
Which AWS service will help decouple the web application from the database?

Question39: A company has an application that stores sensitive data. The company is required by government
regulations to store multiple copies of its data.
What would be the MOST resilient and cost-effective option to meet this requirement?

Question40: A Solutions Architect is designing a new social media application. The application must provide a secure
method for uploading profile photos. Each user should be able to upload a profile photo into a shared
storage location for one week after their profile is created.
Which approach will meet all of these requirements?

Question41: A data analytics startup company asks a Solutions Architect to recommend an AWS data store options for
indexed data. The data processing engine will generate and input more than 64 TB of processed data
every day, with item sizes reaching up to 300 KB. The startup is flexible with data storage and is more
interested in a database that requires minimal effort to scale with a growing dataset size.
Which AWS data store service should the Architect recommend?

Question42: A Solutions Architect is building a new feature using a Lambda to create metadata when a user uploads a
picture to Amazon S3. All metadata must be indexed.
Which AWS service should the Architect use to store this metadata?

Question43: A company needs to quickly ensure that all files created in an Amazon S3 bucket in us-east-1 are also
available in another bucket in ap-southeast-2.
Which option represents the SIMPLIEST way to implement this design?

Question44: An application stack includes an Elastic Load Balancer in a public subnet, a fleet of Amazon EC2
instances in an Auto Scaling group, and an Amazon RDS MySQL cluster. Users connect to the application
from the Internet. The application servers and database must be secure.
How should a Solutions Architect perform this task?

Question45: A company has an application that uses Amazon CloudFront for content that is hosted on an Amazon S3
bucket. After an unexpected refresh, the users are still seeing old content.
Which step should the Solutions Architect take to ensure that new content is displayed?

Question46: Two Auto Scaling applications, Application A and Application B, currently run within a shared set of
subnets. A Solutions Architect wants to make sure that Application A can make requests to Application B,
but Application B should be denied from making requests to Application A.
Which is the SIMPLEST solution to achieve this policy?

Question47: A company's development team plans to create an Amazon S3 bucket that contains millions of images.
The team wants to maximize the read performance of Amazon S3.
Which naming scheme should the company use?

Question48: To meet compliance standards, a company must have encrypted archival data storage. Data will be
accessed infrequently, with lead times well in advance of when archived data must be recovered. The
company requires that the storage be secure, durable, and provided at the lowest price per 1TB of data
stored.
What type of storage should be used?

Question49: A Solutions Architect is designing a system that will store Personally Identifiable Information (PII) in an
Amazon S3 bucket. Due to compliance and regulatory requirements, both the master keys and
unencrypted data should never be sent to AWS.
What Amazon S3 encryption technique should the Architect choose?

Question50: A customer is migrating to AWS and requires applications to access Network File System shares without
code changes. Data is critical and accessed frequently.
Which storage solution should a Solutions Architect recommend to maximize availability and durability?

Question51: A company has two different types of reporting needs on their 200-GB data warehouse:
Data scientists run a small number of concurrent ad hoc SQL queries that can take several minutes

each to run.
Display screens throughout the company run many fast SQL queries to populate dashboards.

Which design would meet these requirements with the LEAST cost?

Question52: Which service should an organization use if it requires an easily managed and scalable platform to host its
web application running on Nginx?

Question53: A company plans to use AWS for all new batch processing workloads. The company's developers use
Docker containers for the new batch processing. The system design must accommodate critical and non-
critical batch processing workloads 24/7.
How should a Solutions Architect design this architecture in a cost-efficient manner?

Question54: As part of a migration strategy, a Solutions Architect needs to analyze workloads that can be optimized for
performance and cost. The Solutions Architect has identified a stateless application that serves static
content as a potential candidate to move to the cloud. The Solutions Architect has the flexibility to choose
an identity solution between Facebook, Twitter, and Amazon.
Which AWS solution offers flexibility and ease of use, and the LEAST operational overhead for this
migration?

Question55: A company wants to durably store data in 8 KB chunks. The company will access the data once every few
months. However, when the company does access the data, it must be done with as little latency as
possible.
Which AWS service should a Solutions Architect recommend if cost is NOT a factor?

Question56: A Solutions Architect is asked to improve the fault tolerance of an existing Python application. The web
application places 1-MB images is an S3 bucket. The application then uses a single t2.large instance to
transform the image to include a watermark with the company's brand before writing the image back to the
S3 bucket.
What should the Solutions Architect recommend to increase the fault tolerance of the solution?

Question57: A Solutions Architect needs to allow developers to have SSH connectivity to web servers. The
requirements are as follows:
Limit access to users origination from the corporate network.

Web servers cannot have SSH access directly from the Internet.

Web servers reside in a private subnet.

Which combination of steps must the Architect complete to meet these requirements? (Choose two.)

Question58: A Solutions Architect needs to use AWS to implement pilot light disaster recovery for a three-tier web
application hosted in an on-premises datacenter.
Which solution allows rapid provision of working, fully-scaled production environment?

Question59: A Solution Architect is designing an application that uses Amazon EBS volumes. The volumes must be
backed up to a different region.
How should the Architect meet this requirement?

Question60: A client has set up an Auto Scaling group associated with a load balancer. The client has noticed that
instances launched by the Auto Scaling group are reported unhealthy as the result of an Elastic Load
Balancing (ELB) health check, but these unhealthy instances are not being terminated.
What can a Solutions Architect do to ensure that the instances marked unhealthy will be terminated and
replaced?

Question61: An application publishes Amazon SNS messages in response to several events. An AWS Lambda function
subscribes to these messages. Occasionally the function will fail while processing a message, so the
original event message must be preserved for root cause analysis.
What architecture will meet these requirements without changing the workflow?

Question62: A client notices that their engineers often make mistakes when creating Amazon SQS queues for their
backend system.
Which action should a Solutions Architect recommend to improve this process?

Question63: A company's website receives 50,000 requests each second, and the company wants to use multiple
applications to analyze the navigation patterns of the users on their website so that the experience can be
personalized.
What can a Solutions Architect use to collect page clicks for the website and process them sequentially for
each user?

Question64: A web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The
instances run in an EC2 Auto Scaling group across multiple Availability Zones. Every night, the Auto
Scaling group doubles in size. Traffic analysis shows that users in a particular region are requesting the
same static content stored locally on the EC2 instances.
How can a Solutions Architect reduces the need to scale and improve application performance for the
users?

Question65: An e-commerce application is hosted in AWS. The last time a new product was launched, the application
experienced a performance issue due to an enormous spike in traffic. Management decided that capacity
must be doubled the week after the product is launched.
Which is the MOST efficient way for management to ensure that capacity requirements are met?

Question66: A company is creating a web application that allows customers to view photos in their web browsers. The
website is hosted in us-east-1 on Amazon EC2 instances behind an Application Load Balancer. Users will
be located in many places around the world.
Which solution should provide all users with the fastest photo viewing experience?

Question67: A company is using AWS Key Management Service (AWS KMS) to secure their Amazon RDS databases.
An auditor has recommended that the company log all use of their AWS KMS keys.
What is the SIMPLEST solution?

Question68: A company is designing a failover strategy in Amazon Route 53 for its resources between two AWS
Regions. The company must have the ability to route a user's traffic to the region with least latency, and if
both regions are healthy, Route 53 should route traffic to resources in both regions.
Which strategy should the Solutions Architect recommend?

Question69: A Solutions Architect needs to configure scaling policies based on Amazon CloudWatch metrics for an
Auto Scaling group. The application running on the instances is memory intensive.
How can the Architect meet this requirement?

Question70: A Solutions Architect is designing an application in AWS. The Architect must not expose the application or
database tier over the Internet for security reasons. The application must be low-cost and have a scalable
front end. The databases and application tier must have only one-way Internet access to download
software and patch updates.
Which solution helps to meet these requirements?

Question71: An application is running on Amazon EC2 instances behind an Application Load Balancer. The instances
run in an Auto Scaling group across multiple Availability Zones. Four instances are required to handle a
predictable traffic load. The Solutions Architect wants to ensure that the operation is fault-tolerant up to the
loss of one Availability Zone.
Which is the MOST cost-efficient way to meet these requirements?

Question72: A news organization plans to migrate their 20 TB video archive to AWS. The files are rarely accessed, but
when they are, a request is made in advance and a 3 to 5-hour retrieval time frame is acceptable.
However, when there is a breaking news story, the editors require access to archived footage within
minutes.
Which storage solution meets the needs of this organization while providing the LOWEST cost of storage?

Question73: A Solutions Architect is designing a customer order processing application that will likely have high usage
spikes.
What should the Architect do to ensure that customer orders are not lost before being written to an
Amazon RDS database? (Choose two.)

Question74: A Solutions Architect has been asked to deliver video content stored on Amazon S3 to specific users from
Amazon CloudFront while restricting access by unauthorized users.
How can the Architect implement a solution to meet these requirements?

Question75: A Solutions Architect has a three-tier web application that serves customers worldwide. Analysis reveals
that product images take more time to load than expected.
Which action will improve the image load time?

Question76: An AWS workload in a VPC is running a legacy database on an Amazon EC2 instance. Data is stored on a
200GB Amazon EBS (gp2) volume. At peak load times, logs show excessive wait time.
What solution should be implemented to improve database performance using persistent storage?

Question77: A company uses AWS Elastic Beanstalk to deploy a web application running on c4.large instances. Users
are reporting high latency and failed requests. Further investigation reveals that the EC2 instances are
running at or near 100% CPU utilization.
What should a Solutions Architect do to address the performance issues?

Question78: A Solutions Architect is helping a customer migrate an application to AWS. The application is composed of
a fleet of Linux servers that currently use a shared file system to read and write data. One of the goals of
moving this application to AWS is to increase the reliability of the storage tier.
What solution would increase reliability while minimizing the operational overhead of managing this
infrastructure?

Question79: An application running in a private subnet accesses an Amazon DynamoDB table. There is a security
requirement that the data never leave the AWS network.
How should this requirement be met?

Question80: A Solutions Architect is designing an application on AWS that uses persistent block storage. Data must be
encrypted at rest.
Which solution meets the requirement?

Question81: An application runs on Amazon EC2 instances in an Auto Scaling group. When instances are terminated,
the Systems Operations team cannot determine the route cause, because the logs reside on the
terminated instances and are lost.
How can the root cause be determined?

Question82: A company has an application that generates invoices and makes the invoices available online. Invoices
are stored as PDFs in an Amazon S3 bucket. Customers typically only view each invoice during the month
it is issued. However, past invoices need to be immediately available. There are concerns over rising
storage costs as the company gains more customers.
What is the MOST cost-effective method to store the data?

Question83: A company is moving to AWS. Management has identified a set of approved AWS services that meet all
deployment requirements. The company would like to restrict access to all other unapproved services to
which employees would have access.
Which solution meets these requirements with the LEAST amount of operational overhead?

Question84: A business team requires a structured storage solution to store all of a company's historical sales data.
Currently there are 4 TB of data, which will grow to hundreds of terabytes within a few years. The team
must be able to regularly run queries against the data using current business intelligence tools. Fast
performance is required despite the dataset growth.
Which solution should the company use?

Question85: A Solutions Architect is working on a PCI-compliant architecture that needs to call an external service
provider's API. The external provider requires IP whitelisting to verify the calling party.
How should the Solutions Architect provide the external party with the IP addresses for whitelisting?

Question86: A company has instances in private subnets that require outbound access to the internet.
This requires:

Question87: A company is creating a web application that will run on an Amazon EC2 instance. The application on the
instance needs access to an Amazon DynamoDB table for storage.
What should be done to meet these requirements?

Question88: A Solutions Architect is designing an application that requires having six Amazon EC2 instances running at
all times. The application will be deployed in the sa-east-1 region, which has three Availability Zones: sa-
east-1a, sa-east-1b, and sa-east-1c.
Which action will provide 100 percent fault tolerance and the LOWEST cost in the event that one
Availability Zone in the region becomes unavailable?

Question89: A company requires that the source, destination, and protocol of all IP packets be recorded when
traversing a private subnet.
What is the MOST secure and reliable method of accomplishing this goal.

Question90: A company has a legal requirement to store point-in-time copies of its Amazon RDS PostGreSQL
database instance in facilities that are at least 200 miles apart.
Use of which of the following provides the easiest way to comply with this requirement?

Question91: A Solutions Architect is considering possible options for improving the security of the data on an Amazon
EBS volume attached to an Amazon EC2 instance.
Which solution will improve the security of the data?

Question92: A Solutions Architect is designing a web application that will be hosted on Amazon EC2 instances in a
public subnet. The web application uses a MySQL database in a private subnet. The database should be
accessible to database administrators.
Which of the following options should the Architect recommend? (Choose two.)

Question93: A Solutions Architect is architecting a workload that requires a performant object-based storage system
that must be shared with multiple Amazon EC2 instances.
Which AWS service meets this requirement?

Question94: A company is developing several critical long-running applications hosted on Docker.
How should a Solutions Architect design a solution to meet the scalability and orchestration requirements
on AWS?

Question95: A Solutions Architect has been given the following requirements for a company's VPC:
The solution is a two-tiered application with a web tier and a database tier.

All web traffic to the environment must be directed from the Internet to an Application Load Balancer.

The web servers and the databases should not obtain public IP addresses or be directly accessible

from the public Internet.
Because of security requirements, databases may not share a route table or subnet with any other

service.
The environment must be highly available within the same VPC for all services.

What is the minimum number of subnets that the Solutions Architect will need based on these
requirements and best practices?

Question96: An application stores data in an Amazon RDS MySQL DB instance. The database traffic primarily consists
of read queries, which are overwhelming the current database. A Solutions Architect wants to scale the
database.
What combination of steps will achieve the goal? (Choose two.)

Question97: A Solutions Architect is trying to bring a data warehouse workload to an Amazon EC2 instance. The data
will reside in Amazon EBS volumes and full table scans will be executed frequently.
What type of Amazon EBS volume would be most suitable in this scenario?

Question98: A company uses Amazon S3 for storing a variety of files. A Solutions Architect needs to design a feature
that will allow users to instantly restore any deleted files within 30 days of deletion.
Which is the MOST cost-efficient solution?

Question99: A company processed 10 TB of raw data to generate quarterly reports. Although it is unlikely to be used
again, the raw data needs to be preserved for compliance and auditing purposes.
What is the MOST cost-effective way to store the data in AWS?

Question100: A company is launching a marketing campaign on their website tomorrow and expects a significant
increase in traffic. The website is designed as a multi-tiered web architecture, and the increase in traffic
could potentially overwhelm the current design.
What should a Solutions Architect do to minimize the effects from a potential failure in one or more of the
tiers?

Question101: A Solutions Architect is designing a new application that will be hosted on EC2 instances. This application
has the following traffic requirements:
Accept HTTP(80)/HTTPS(443) traffic from the Internet.

Accept FTP(21) traffic from the finance team servers at 10.10.2.0/24.

Which of the following AWS CloudFormation snippets correctly declares inbound security group rules that
meet the requirements and prevent unauthorized access to additional services on the instance?
A:

B:

C;

D:

Question102: A Solutions Architect is designing a web application for document sharing. The users will upload
documents that are then made available to other users. There will be tens of thousands of these
documents.
What is the MOST cost-effective storage solution?

Question103: A Solutions Architect is designing a log-processing solution that requires storage that supports up to 500
MB/s throughput. The data is sequentially accessed by an Amazon EC2 instance.
Which Amazon storage type satisfies these requirements?

Question104: A company is using Amazon S3 as its local repository for weekly analysis reports. One of the company-
wide requirements is to secure data at rest using encryption. The company chose Amazon S3 server-side
encryption. The company wants to know how the object is decrypted when a GET request is issued.
Which of the following answers this question?

Question105: A prediction process requires access to a trained model that is stored in an Amazon S3 bucket. The
process takes a few seconds to process an image and make a prediction. The process takes a few
seconds to process an image and make a prediction. The process is not overly resource-intensive, does
not require any specialized hardware, and takes less than 512 MB of memory to run.
What would be the MOST effective compute solution for this use case?

Question106: An application that runs on an Amazon EC2 instance must make secure calls to Amazon S3 buckets.
Which steps can a Solutions Architect take to ensure that the calls are made without exposing credentials?

Question107: A solutions Architect is designing a new workload where an AWS Lambda function will access an Amazon
DynamoDB table.
What is the MOST secure means of granting the Lambda function access to the DynamoDB table?

Question108: An application is running on an Amazon EC2 instance in a private subnet. The application needs to read
and write data onto Amazon Kinesis Data Streams, and corporate policy requires that this traffic should not
go to the internet.
How can these requirements be met?

Question109: A Solutions Architect is designing an architecture for a mobile gaming application. The application is
expected to be very popular. The Architect needs to prevent the Amazon RDS MySQL database from
becoming a bottleneck due to frequently accessed queries.
Which service or feature should the Architect add to prevent a bottleneck?

Question110: An application is scanning an Amazon DynamoDB table that was created with default settings. The
application occasionally reads stale data when it queries the table.
How can this issue be corrected?

Question111: A Solutions Architect designed a system based on Amazon Kinesis Data Streams. After the workflow was
put into production, the company noticed it performed slowly and identified Kinesis Data Streams as the
problem. One of the streams has a total of 10 Mb/s throughput.
What should the Solutions Architect recommend to improve performance?

Question112: A Solutions Architect needs to design a centralized logging solution for a group of web applications
running on Amazon EC2 instances. The solution requires minimal development effort due to budget
constraints.
Which of the following should the Architect recommend?