EMT Practice Test

1. Question Content...

---

Question1: A user is designing a new service that receives location updates from 3 600 rental cars every hour.
The cars upload their location to an Amazon S3 bucket.
Each location must be checked for distance from the original rental location.
Which services will process the updates and automatically scale?

Question2: Does Amazon DynamoDB support both increment and decrement atomic operations?

Question3: A company has a custom application running on an Amazon EC2 instance that:
- Reads a large amount of data from Amazon S3
- Performs a multi-stage analysis.
- Writes the results to Amazon DynamoDB.
The application writes a significant number of large, temporary files during the multi-stage analysis.
The process performance depends on the temporary storage performance.
What would be the fastest storage option for holding the temporary files?

Question4: A financial company operates its production AWS environment in the us-east-1 Region and uses Amazon Elastic Block Store (Amazon EBS) snapshots to back up its instances.
To meet a compliance requirement, the company must maintain a secondary copy of all critical data at least 100 miles (160.9 km) away from its primary location.
What is the MOST cost-effective way for the company to meet this requirement?

Question5: What should a solutions architect do to optimize utilization MOST oosl-elfectively?

Question6: A company is developing a new mobile app. The company must implement proper traffic filtering to protect its Application Load Balanacer (ALB) against common application-level attacks, such as cross-site scripting or SQL injection. The company has minimal infrastructure and operational staff. The company needs to reduce its share of the responsibility in managing, updating and securing servers for its AWS environment.
What should a solutions architect recommend to meet these requirements?

Question7: A company is building a RESTful serverless web application on AWS by using Amazon API Gateway and AWS Lambda.
The users of this web application will be geographically disturbed, and the company wants to reduce the latency of API requests to these users.
Which type of endpoint should a solutions architect use to meet these requirements?

Question8: A solution architect is performing a security review of a recently migrated workload. The workload is a web application that consists of amazon EC2 instances in an Auto Scaling group behind an Application Load balancer. The solution architect must improve the security posture and minimize the impact of a DDoS attack on resources.
Which solution is MOST effective?

Question9: A solutions architect must provide a fully managed replacement for an on-premises solution that allows employees and partners to exchange files The solution must be easily accessible to employees connecting from on-premises systems, remote employees, and external partners Which solution meets these requirements?

Question10: In Amazon EC2 Container Service components, what is the name of a logical grouping of container instances on which you can place tasks?

Question11: A company needs comply with a regulatory requirement that states all emails must be stored and archieved externally for 7 years. An administrator has created compressed email files on- premises and wants a managed service to transfer the files to AWS storage.
Which managed service should a solution architect recommend?

Question12: A company hosts its web application on AWS using seven Amazon EC2 instances.
The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries.
Which policy should be used to meet this requirement?

Question13: A company is moving Its on-premises Oracle database to Amazon Aurora PostgreSQL. The database has several applications that write to the same tables.
The applications need to be migrated one by one with a month in between each migration Management has expressed concerns that the database has a high number of reads and writes.
The data must be kept in sync across both databases throughout tie migration.
What should a solutions architect recommend?

Question14: A solutions architect is designing the cloud architecture for a new application being deployed to AWS. The application allows users to interactively download and upload files. Files older than 2 years will be accessed less frequently. The solutions architect needs to ensure that the application can scale to any number of files while maintaining high availability and durability.
Which scalable solutions should the solutions architect recommend? (Choose two.)

Question15: A company Is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data in Amazon RDS MySQL Multi-AZ DB instances.
The EC2 instances are in public subnets, and the RDS DB instances are in private subnets.
The security team has mandated that the DB instances be secured against web-based attacks.
What should a solutions architect recommend?

Question16: An Amazon EC2 administrator created the following policy associated with an IAM group containing several users.

What is the effect of this policy?

Question17: A solutions architect has configured the following IAM policy.

Which action will be allowed by the policy?

Question18: You are migrating an internal server on your DC to an EC2 instance with EBS volume. Your server disk usage is around 500GB so you just copied all your data to a 2TB disk to be used with AWS Import/Export. Where will the data be imported once it arrives at Amazon?

Question19: A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an S3 bucket.
Upon payment, content will be available for download for 14 days before the user is denied access.
Which of the following would be the LEAST complicated implementation?

Question20: A company has several business systems that require access to data stored in a file share. the business systems will access the file share using the Server Message Block (SMB) protocol. The file share solution should be accessible from both of the company's legacy on-premises environment and with AWS. Which services mod the business requirements? (Select TWO.)

Question21: A development team is creating an event-based application that uses AWS Lambda functions.
Events will be generated when files are added to an Amazon S3 bucket.
The development team currently has Amazon Simple Notification Service (Amazon SNS) configured as the event target from Amazon S3.
What should a solution architect do to process the events from Amazon S3 in a scalable why?

Question22: A manufacturing company wants to implement predictive maintenance on its machinery equipment.
The company will install thousands of loT sensors that will send data to AWS in real time.
A solutions architect is tasked with implementing a solution that will receive events in an ordered manner for each machinery asset and ensure that data is saved for further processing at a later time.
Which solution would be MOST efficient?

Question23: A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not traverse the internet.
What should the solutions architect do to accomplish this? (Select TWO )

Question24: A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB).
The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones.
On the first day of every month at midnight the application becomes much slower when the month-end financial calculation batch executes.
This causes the CPU utilization of the EC2 instances to immediately peak to 100% which disrupts the application.
What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?

Question25: A company wants to launch a new application using Amazon Route 53, an Application Load Balancer (ALB), and an Amazon EC2 Auto Scaling group. The company is preparing to perform user experience testing and has a limited budget for this phase of the project. Although the company plans to do a load test in the future, it wants to prevent users from load testing at this time because it wants to limit unnecessary EC2 automatic scaling.
What should a solutions architect do to minimize costs of the user experience testing?

Question26: A product team is creating a new application that will store a large amount of data.
The data will be analyzed hourly and modified by multiple Amazon EC2 Linux instances.
The application team believes the amount of space needed will continue to grow for the next 6 months.
Which set of actions should a solutions architect take to support these needs?

Question27: A solutions architect is designing an architecture that includes web application and database tiers. The web tier must be capable of auto scaling. The solutions architect has decided to separate each tier into its own subnets. The design includes two public subnets and four private subnets. The security team requires that tiers be able to communicate with each other only when there is a business need and that all other network traffic be blocked.
What should the solutions architect do to meet these requirements?

Question28: A company is running a multi-tier ecommerce web application in the AWS Cloud.
The web application is running on Amazon EC2 instances.
The database tier Is on a provisioned Amazon Aurora MySQL DB cluster with a writer and a reader in a Multi-AZ environment.
The new requirement for the database tier is to serve the application to achieve continuous write availability through an Instance failover.
What should a solutions architect do to meet this new requirement?

Question29: A company's website is used to sell products to the public.
The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB).
There is also an Amazon CloudFront distribution and AWS WAF is being used to protect against SQL injection attacks.
The ALB is the origin for the CloudFront distribution.
A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website.
What should a solutions architect do to protect the application?

Question30: A solutions architect is designing the cloud architecture for a company that needs to host hundreds of machine learning models for its users. During startup, the models need to load up to
10 GB of data from Amazon S3 into memory, but they do not need disk access. Most of the models are used sporadically, but the users expect all of them to be highly available and accessible with low latency.
Which solution meets the requirements and is MOST cost-effective?

Question31: A company hosts a training site on a fleet of Amazon EC2 instances.
The company anticipates that its new course, which consists of dozens of training videos on the site, will be extremely popular when it is released in 1 week.
What should a solutions architect do to minimize the anticipated server load?

Question32: A company Is launching an ecommerce website on AWS.
This website is built with a three-tier architecture that includes a MySQL database.
In a Multi-AZ deployment of Amazon Aurora MySQL.
The website application must be highly available and will initially be launched in an AWS Region with three Availability Zones.
The application produces a metric that describes the load the application experiences.
Which solution meets these requirements?

Question33: A company's legacy application is currently relying on a single-instance Amazon RDS MySQL database without encryption.
Due to new compliance requirements, all existing and new data in this database must be encrypted.
How should this be accomplished?

Question34: A new employee has joined a company as a deployment engineer.
The deployment engineer will be using AWS CloudFormation templates to create multiple AWS resources.
A solutions architect wants the deployment engineer to perform job activities. While following the principle of least privilege.
Which combination of actions should the solutions architect take to accomplish this goal? (Select TWO.)

Question35: A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content to meet the migration date, minimal changes can be made.
What should a solutions architect do to meet these requirements?

Question36: An administrator of a large company wants to monitor for and prevent any cryptocurrency-related attacks on the company's AWS accounts.
Which AWS service can the administrator use to protect the company against attacks?

Question37: A company recently launched its website to serve content to its global user base.
The company wants to store and accelerate the delivery of static content to its users by leveraging Amazon CloudFront with an Amazon EC2 instance attached as its origin.
How should a solutions architect optimize high availability for the application?

Question38: An environment has an Auto Scaling group across two Availability Zones to as AZ-a and AZ-b has four instances, and AZ-b has three EC2 instances.
The Auto Scaling group uses a default termination policies. None of the instances are protected from a scale-in event.
How will Auto Scaling processed if there is a scale-in event?

Question39: A company needs to retain application log files for a critical application for 10years. The application team regularly accesses logs from the past month for troubleshooting, but logs older than 1 month are rarely accessed. The application generates more than 10 TB of logs per month.
Which storage option meets these requirements MOST cost-effectively?

Question40: A solutions architect is designing a solution that requires frequent updates to a website that is hosted on Amazon S3 with versioning enabled. For compliance reasons, the older versions of the objects will not be accessed frequently and will need to be deleted after 2 years.
What should the solutions architect recommend to meet these requirements at the LOWEST cost?

Question41: A developer has a script to generate daily reports that users previous. The script consistently complete in under 10 minutes. The developer needs to automate the process in a cost effective manner.
Which combination of services should the developer use? (Select two)

Question42: A mobile gaming company runs apllication servers on Amazon EC2 instances. The servers reciev updates from players every 15 minutes. The mobile game creates a JSON object of the progress made in the game since the last update, and sends the JSON object an Application Load Balacer.
As the mobile game is played, game updates are being lost. The company wants to create a durable way to get the updates in order.
What should a solution architect recommend to decouple the system?

Question43: An application running in a private subnet accesses an Amazon DynamoDB table. There is a security requirement that the data never leave the AWS network.
How should this requirement be met?

Question44: A solutions architect must create a highly available bastion host architecture.
The solution needs to be resilient within a single AWS Region and should require only minimal effort to maintain.
What should the solutions architect do to meet these requirements?

Question45: A company is reviewing a recent migration of a three-tier application to a VPC. The security team discovers that the principle of least privilege is not being applied to Amazon EC2 security group ingress and egress rules between the application tiers.
What should a solutions architect do to correct this issue?

Question46: A media streaming company collects real-time data and stores it in a disk-optimized database system.
The company is not getting the expected throughput and wants an in-memory database storage solution that performs faster and provides high availability using data replication.
Which database should a solutions architect recommend'?

Question47: A company recently deployed a two-tier application in two Availability Zones in the us-east-1 Region.
The databases are deployed in a private subnet while the web servers are deployed in a public subnet.
An internet gateway is attached to the VPC. The application and database run on Amazon EC2 instances.
The database servers are unable to access patches on the internet.
A solutions architect needs to design a solution that maintains database security with the least operational overhead.
Which solution meets these requirements?

Question48: After you recommend Amazon Redshift to a client as an alternative solution to paying data warehouses to analyze his data, your client asks you to explain why you are recommending Redshift. Which of the following would be a reasonable response to his request?

Question49: A user owns a MySQL database that is accessed by various clients who expect, at most, 100 ms latency on requests.
Once a record is stored in the database, it is rarely changed. Clients only access one record al a time.
Database access has been increasing exponentially due to increased client demand.
The resultant load will soon exceed the capacity of the most expensive hardware available for purchase.
The user wants to migrate to AWS, and is willing to change database systems.
Which service would alleviate the database load issue and offer virtually unlimited scalability for the future?

Question50: A user is launching an EC2 instance in the US East region. Which of the below mentioned options is recommended by AWS with respect to the selection of the availability zone?

Question51: A solution architect is designing the infrastructure for an application.
The application must have a managed MySQL database mat is highly available.
The database will be (censed only by resources in the same VPC.
The database also must have auto scaling for storage and compute.
Which solution meets these requirements?

Question52: A company's order fulfillment service uses a MySQL database.
The database needs to support a large number of concurrent queries and transactions Developers are spending time patching and tuning the database.
This is causing delays in releasing new product features.
The company wants to use cloud-based services to help address this new challenge.
The solution must allow the developers to migrate the database with little or no code changes and must optimize performance.
Which service should a solutions architect use to meet these requirements?

Question53: A global company plans to track and store information about local allergens in an Amazon DynamoOB table and query this data from its website.
The company anticipates that website traffic will fluctuate.
The company estimates that the combined read and write capacity units will range from 10
10.000 per second, depending on the severity of the conditions for the given day.
A solutions architect must design a solution that avoids throttling issues and manages capacity efficiently.
What should the solutions architect do to meet these requirements MOST cost-effectively?

Question54: A company purchased Amazon EC2 Partial Upfront Reserved Instances for a 1-year term.
A solutions architect wants to analyze how much the daily effective cost is with all possible discounts.
Which view must the solutions architect choose in the advanced options of Cost Explorer to get the correct values?

Question55: A company has a 10 Gbps AWS Direct Connect connection from its on-premises servers to AWS.
Th workloads using the connection are critical. The company requires a disastr recovery strategy with maximum resiliency that maintains the current connection bandwidth at a minimum.
What should a solutions architect recommend?

Question56: A solutions architect is designing the cloud architecture for a new application being deployed on AWS.
The process should run in parallel while adding and removing application nodes as needed based on the number of jobs to be processed.
The processor application is stateless.
The solutions architect must ensure that the application is loosely coupled and the job items are durably stored.
Which design should the solutions architect use?

Question57: A company hosts its static website content from an Amazon S3 bucket in the us-east-1 Region.
Content is made available through an Amazon CloudFront origin pointing to that bucket. Cross- Region replication is set to create a second copy of the bucket in the ap-southeast-1 Region.
Management wants a solution that provides greater availability for the website.
Which combination of actions should a solutions architect take to increase availability? (Choose two.)

Question58: A web application runs on Amazon EC2 instances behind an Application Load Balancer. The application allows users to create custom reports of historical weather data. Generating a report can take up to 5 minutes. These long-running requests use many of the available incoming connections, making the system unresponsive to other users.
How can a solutions architect make the system more responsive?

Question59: A company with facilities in North America. Europe, and Asia is designing new distributed application to optimize its global supply chain and manufacturing process.
The orders booked on one continent should be visible to all Regions in a second or less. The database should be able to support failover with a short Recovery Time Objective (RTO).
The uptime of the application is important to ensure that manufacturing is not impacted.
What should a solutions architect recommend?

Question60: A company wants to migrate a workload to AWS.
The chief information security officer requires that all data be encrypted at rest when stored in the cloud.
The company wants complete control of encryption key lifecycle management.
The company must be able to immediately remove the key material and audit key usage independently of AWS CloudTrail.
The chosen services should integrate with other storage services that will be used on AWS.
Which services satisfies these security requirements?

Question61: A company is planning to make a series of schema changes to tables on its Amazon Aurora DB cluster.
A solutions architect needs to test the changes in the most cost-effective manner possible.
What should the solutions architect do to meet these requirements?

Question62: A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet.
However, the company's security policy states that any external service cannot initiate a connection to the EC2 instances.
What should a solutions architect recommend to resolve this issue?

Question63: A development team needs to host a website that will be accessed by other teams.
The website contents.consist of HTML. CSS, client side JavaScript, and images.
Which method is the MOST cost-effective for hosting the website?

Question64: Much of your company's data does not need to be accessed often, and can take several hours for retrieval time, so it's stored on Amazon Glacier. However someone within your organization has expressed concerns that his data is more sensitive than the other data, and is wondering whether the high level of encryption that he knows is on S3 is also used on the much cheaper Glacier service. Which of the following statements would be most applicable in regards to this concern?

Question65: A company wants to share forensic accounting data is stored in an Amazon RDS DB instance with an external auditor. The Auditor has its own AWS account and requires its own copy of the database.
How should the company securely share the database with the auditor?

Question66: A solutions architect is designing a publicly accessible web application that is on an Amazon CloudFront distribution with an Amazon S3 website endpoint as the origin.
When the solution is deployed, the website returns an Error 403: Access Denied message.
Which steps should the solutions architect take to correct the issue? (Select TWO.)

Question67: A company has no existing file share services. A new project requires access to file storage that is mountable as a drive for on-premises desktops. The file server must authenticate usrs to an Activ Directory domain before they are able to access the storage.
Which service will allow Active Directory users to mount storage as a drive on their desktops?

Question68: A company with a single AWS account runs its internet-facing containerized web application on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The EKS cluster is placed in a private subnet of a VPC. System administrators access the EKS cluster through a bastion host on a public subnet.
A new corporate security policy requires the company to avoid the use of bastion hosts. The company also must not allow internet connectivity to the EKS cluster.
Which solution meets these requirements MOST cost-effectively?

Question69: A company creates business-critical 3D images every night. The images are batch-processed every Friday and require an uninterrupted 48 hours to complete.
What is the MOST cost-effective Amazon EC2 pricing model for this scenario?

Question70: A company is running a multi-tier web application on AWS.
The application runs its database tier on Amazon Aurora MySQL.
The application and database tiers are in the us-east-1 Region.
A database administrator who regularly monitors the Aurora DB cluster finds that an intermittent increase in read traffic is creating high CPU utilization on the read replica and causing increased read latency of the application.
What should a solutions architect do to improve read scalability?

Question71: An online shopping application accesses an Amazon RDS Multi-AZ DB instance. Database performance is slowing down the application. After upgrading to the next generation instance type, there was no significant performance improvemnt.
Analysis shows approximately 700 IOPS are sustained, common queries run for long durations, and memory utilization is high.
Which application change should a solution architect recommend to resolve these issue?

Question72: A solutions architect must design a database solution for a high-traffic ecommerce web application.
The database stores customer profiles and shopping cart information.
The database must support a peak load of several million requests each second and deliver responses in milliseconds.
The operational overhead for managing and scaling the database must be minimized.
Which database solution should the solutions architect recommend?

Question73: A company runs a photo processing application that needs to frequently upload and download pictures from Amazon S3 buckets that are located in the same AWS Region.
A solutions architect has noticed an increased cost in data transfer fees and needs to implement a solution to reduce these costs.
How can the solutions architect meet this requirement?

Question74: A company has a three-tier environment on AWS that ingests sensor data from its users' devices.
The traffic flows through a Network Load Balancer (NLB), then to Amazon EC2 instances for the web tier, and finally to EC2 instances for the application tier that makes database calls.
What should a solutions architect do to improve the security of data in transit to the web tier?

Question75: A company needs to store data for 6 years. The company will need to have immediate and highly available access to the data at any point in time, but will not require frequent access.
What lifecycle action should be taken to meet these requirements while reducing costs?

Question76: A company Is seeing access requests by some suspicious IP addresses.
The security team discovers the requests are horn different IP addresses under the same CIDR range.
What should a solutions architect recommend to the team?

Question77: A company is designing a message-driven order processing application on AWS.
The application consists of many services and needs to communicate the results of its processing to multiple consuming services.
Each of the consuming services may take up to 5 days to receive the messages.
Which process will meet these requirements?

Question78: A user wants to list the IAM role that is attached to their Amazon EC2 instance. The user has login access to the EC2 instance but does not have IAM permissions.
What should a solutions architect do to retrieve this information?

Question79: A company has multiple AWS accounts with applications deployed in the us-west-2 Region Application togs are stored within Amazon S3 buckets in each account. The company wants to build a centralized log analysts solution that uses a single S3 bucket Logs must not leave us- west-2T and the company wants to incur minimal operational overhead.
Which solution meets these requirements and is MOST cost-effective?

Question80: A company is planning to migrate a business-critical dataset to Amazon S3.
The current solution design uses a single S3 bucket in the us-east-1 Region with versioning enabled to store the dataset.
The company's disaster recovery policy states that all data multiple AWS Regions.
How should a solutions architect design the S3 solution?

Question81: A company is hosting an election reporting website on AWS for users around the world. The website uses Amazon EC2 instances for the web and application tiers in an Auto Scaling group with Application Load Balancers. The database tier uses an Amazon RDS for MySQL database.
The website is updated with election results once an hour and has historically observed hundreds of users accessing the reports.
The company is expecting a significant increase in demand because of upcoming elections in different countries. A solutions architect must improve the website's ability to handle additional demand while minimizing the need for additional EC2 instances.
Which solution will meet these requirements?

Question82: A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer.
The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones.
The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning.
How should the scaling be changed to address the staff complaints and keep costs to a minimum?

Question83: While using the EC2 GET requests as URLs, the _____ is the URL that serves as the entry point for the web service.

Question84: A solutions architect at an ecommerce company wants to back up application log data to Amazon S3.
The solutions architect is unsure how frequently the logs will be accessed or which logs will be accessed the most.
The company wants to keep costs as low as possible by using the appropriate S3 storage class.
Which S3 storage class should be implemented to meet these requirements?

Question85: A company is planning a large event where a promotional offer will be introduced. The company's website is hosted on AWS and backed by an Amazon RDS for PostgreSQL DB instance. The website explains the promotion and includes a sign-up page that collects user information and preferences. Management expects large and unpredictable volumes of traffic periodically, which will create many database writes.
A solutions architect needs to build a solution that does not change the underlying data model and ensures that submissions are not dropped before they are committed to the database.
Which solutions meets these requirements?

Question86: A solutions architect needs to deploy a node js-based web application that is highly available and scales automatically.
The marketing team needs to roll back on application releases quickly and they need to have an operational dashboard.
The Marketing team does not want to manage deployment of operating system patches to the Linux servers.
Which AWS service satisfies these requirements?

Question87: A company is using Amazon DynamoDB with provisioned throughput for the database tier of its ecommerce website. During flash sales, customers experience periods of time when the database cannot handle the high number of transactions taking place. This causes the company to lose transactions During normal periods, the database performs appropriately.
Which solution solves the performance problem the company faces?

Question88: A company hosts its core network services, including directory services and DNS. in its on- premises data center.
The data center is connected to the AWS Cloud using AWS Direct Connect (DX) Additional AWS accounts are planned that will require quick, cost-effective, and consistent access to these network services What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?

Question89: A company is using a third-party vendor to manage its marketplace analytics.
The vendor needs limited programmatic access to resources in the company's account.
All the needed policies have been created to grant appropriate access.
Which additional component will provide the vendor with the MOST secure access to the account?

Question90: A data science team requires storage for nightly log processing.
The size and number of logs is unknown and will persist for 24 hours only.
What is the MOST cost-effective solution?

Question91: A company is launching a new application deployed on an Amazon Elastic Container Service (Amazon ECS) cluster and is using the Fargate launch type for ECS tasks.
The company is monitoring CPU and memory usage because it is expecting high traffic to the application upon its launch.
However, the company wants to reduce costs when utilization decreases.
What should a solutions architect recommend?

Question92: A company has an AWS account used for software engineering.
The AWS account has access to the company's on-premises data center through a pair of AWS Direct Connect connections All non-VPC traffic routes to the virtual private gateway.
A development team recently created an AWS Lambada function through the console.
The development team needs to allow the function to access a database that runs in a private subnet in the company's data center.
Which solution will meet these requirements?

Question93: A company has a 143 TB MySQL database that it wants to migrate to AWS. The plan is to use Amazon Aurora MySQL as the platform going forward. The company has a 100 Mbps AWS Direct Connect connection to Amazon VPC.
Which solution meets the company's needs and takes the LEAST amount of time?

Question94: An ecommerce website is deploying its web application as Amazon Elastic Container Service (Amazon ECS) container instances behind an Application Load Balancer (ALB). During periods of high activity, the website slows down and availability is reduced. A solutions architect uses Amazon CloudWatch alarms to receive notifications whenever there is an availability issue so they can scale out resources. Company management wants a solution that automatically responds to such events.
Which solution meets these requirements?

Question95: A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability.
Which storage solution meets these requirements?

Question96: During a review of business applications, a Solutions Architect identifies a critical application with a relational database that was built by a business user and is running on the user's desktop. To reduce the risk of a business interruption, the Solutions Architect wants to migrate the application to a highly available, multi-tiered solution in AWS.
What should the Solutions Architect do to accomplish this with the LEAST amount of disruption to the business?

Question97: A company designed a stateless two-tier that uses Amazon EC2 in a single Availability Zone and an Amazon RDS multi-AZ DB instance.
New company management wants to ensure the application is highly available.
What should a solutions architect do to meet this requirement?

Question98: A company is developing a new machine learning model solution in AWS. The models are developed as independent microservices that fetch about 1 GB of model data from Amazon S3 at startup and load the data into memory. Users access the models through an asynchronous API.
Users can send a request or a batch of requests and specify where the results should be sent.
The company provides models to hundreds of users. The usage patterns for the models are irregular Some models could be unused for days or weeks.
Other models could receive batches of thousands of requests at a time.
Which solution meets these requirements?

Question99: A company's packaged application dynamically creates and returns single-use text files in response to user requests. The company is using Amazon CloudFront for distribution, but wants to future reduce data transfer costs. The company modify the application's source code.
What should a solution architect do to reduce costs?

Question100: A company has established a new AWS account.
The account is newly provisioned and no changed have been made to the default settings.
The company is concerned about the security of the AWS account root user.
What should be done to secure the root user?

Question101: A company recently deployed a new auditing system to centralize information about operating system versions, patching, and installed software for Amazon EC2 instances.
A solutions architect must ensure all instances provisioned through EC2 Auto Scaling groups successfully send reports to the auditing system as soon as they are launched and terminated.
Which solution achieves these goals MOST efficiently?

Question102: A company uses Amazon S3 to store its confidential audit documents. The S3 bucket uses bucket policies to restrict access to audit team IAM user credentials according to the principle of least privilege. Company managers are worried about accidental deletion of documents in the S3 bucket and want a more secure solution.
What should a solutions architect do to secure the audit documents?

Question103: An application launched on Amazon EC2 instances needs to publish personally identifiable information (PH) about customers using Amazon Simple Notification Service (Amazon SNS).
The application is launched in private subnets within an Amazon VPC.
What is the MOST secure way to allow the application to access service endpoints in the same AWS Region?

Question104: A company has many applications on Amazon EC2 instances running in Auto Scaling groups.
Company policy requires that the data on the attached Amazon Elastic Block Store (Amazon EBS) volumes be retained.
Which action will meet these requirements without impacting performance?

Question105: You have been given a scope to deploy some AWS infrastructure for a large organisation. The requirements are that you will have a lot of EC2 instances but may need to add more when the average utilization of your Amazon EC2 fleet is high and conversely remove them when CPU utilization is low. Which AWS services would be best to use to accomplish this?

Question106: An ecommerce website is deploying its web application as Amazon Elastic Container Service (Amazon ECS) container instance behind an Application Load Balancer (ALB). During periods of high activity, the website slows down and availability is reduced. A solutions architect uses Amazon CloudWatch alarms to receive notifications whenever there is an availability issues so they can scale out resource Company management wants a solution that automatically responds to such events.
Which solution meets these requirements?

Question107: A company is planning to use Amazon S3 lo store images uploaded by its users.
The images must be encrypted at rest in Amazon S3.
The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys.
What should a solutions architect use to accomplish this?

Question108: A solutions architect is developing a multiple-subnet VPC architecture.
The solution will consist of six subnets in two Availability Zones.
The subnets are defined as public, private and dedicated for databases.
Only the Amazon EC2 instances running in the private subnets should be able to access a database.
Which solution meets these requirements?

Question109: Can you specify the security group that you created for a VPC when you launch an instance in EC2-Classic?

Question110: A company sells ringtones created from clips of popular songs. The files containing the ringtones are stored in Amazon S3 Standard and are at least 123 KB m size.
The company has millions of files but downloads are infrequent for ringtones older than 90 days.
The company needs to save money on storage while keeping the most accessed files readily available for its users.
Which action should the company take to meet hese requirements MOST cost-effectively?

Question111: A company captures clickstream data from multiple websites and analyzes it using batch processing.
The data is loaded nightly into Amazon Redshift and is consumed by business analysts.
The company wants to move towards near-real-time data processing for timely insights.
The solution should process the streaming data with minimal effort and operational overhead.
Which combination of AWS services are MOST cost-effective for this solution? (Choose two.)

Question112: A company previously migrated its data warehouse solution to AWS. The company also has an AWS Direct Connect connection Corparate office user query the data warehouse using a visulization tool. Th average size of a query returned by th data warehouse is 50 MB and each webpage sent by the visualization tool is approximately 500 KB. Result sets returned by the data warehouse are not cached.
Which solution provides the LOWEST data transfer egress cost for the company?

Question113: A company is running a two-tier ecommerce website using services.
The current architect uses a publish- facing Elastic Load Balancer that sends traffic to Amazon EC2 instances in a private subnet.
The static content is hosted on EC2 instances, and the dynamic content is retrieved from a MYSQL database.
The application is running in the United States. The company recently started selling to users in Europe and Australia.
A solution architect needs to design solution so their international users have an improved browsing experience.
Which solution is MOST cost-effective?

Question114: A company is running a global application. The application's users submit multiple videos that are then merged into a single video file. The application uses a single Amazon S3 bucket in the us- east-1 Region to receive uploads from users. The same S3 bucket provides the download location of the single video file that is produced. The final video file output has an average size of
250 GB.
The company needs to develop a solution that delivers faster uploads and downloads of the video files that are stored in Amazon S2. The company will offer the solution as a subscription to users who want to pay for the increased speed.
What should a solutions architect do to meet these requirements?

Question115: A company has a multi-tier application deployed on several Amazon EC2 instance in an Auto Scaling group. An Amazon RDS for Oracle instance is the application's data layer that uses Oracle-specific PUISQL functions Traffic to the application has been steadily increasing. This is causing the EC2 instances to become overloaded and the RDS instance to run out of storage.
The Auto Scaling group does not have any scaling metrics and defines the minimum healthy instance count only. The company predicts that traffic will continue to increase at a steady but unpredictable rate before leveling off.
What should a solution architect do to ensure the system can automatically scale for the increased traffic? (Select TWO.)

Question116: A company wants to use Amazon S3 for the secondary copy of its on-premises dataset.
The company would rarely need to access this copy.
The storage solution's cost should be minimal.
Which storage solution meets these requirements?

Question117: A company runs an application on a group of Amazon Linux EC2 instances, The application writes log files using standard API calls For compliance reasons, all log files must be retained indefinitely and will be analyzed by a reporting tool that must access all files concurrently.
Which storage service should a solutions architect use to provide the MOST cost-effective solution?

Question118: A company has an application running as a service in Amazon Elastic Container Service (Amazon EC2) using the Amazon launch type.
The application code makes AWS API calls to publish messages to Amazon Simple Queue Service (Amazon SQS).
What is the MOST secure method of giving the application permission to publish messages to Amazon SQS?

Question119: A solutions architect is moving the static content from a public website hosted on Amazon EC2 instances to an Amazon S3 bucket.
An Amazon CloudFront distribution will be used to deliver the static assets.
The security group used by the EC2 instances restricts access to a limited set of IP ranges.
Access to the static content should be similarly restricted.
Which combination of steps will meet these requirements? (Select TWO.)

Question120: A company runs an application on three very large Amazon EC2 instances.
In a single Availability Zone in the us-east-1 Region Multiple 16 TB Amazon Elastic Block Store (Amazon EBS) volumes are attached to each EC2 instance.
The operations team uses an AWS Lambda script triggered by a schedule-based Amazon EventBridge (Amazon CloudWatch Events) rule to stop the instances on evenings and weekends, and start the instances on weekday mornings.
Before deploying the solution, the company used the public AWS pricing documentation to estimate the overall costs of running this data warehouse solution 5 days a week for 10 hours a day.
When looking at monthly Cost Explorer charges for this new account, the overall charges are higher than the estimate.
What is the MOST likely cost factor that the company overlooked?

Question121: A developer has an application that uses an AWS Lambda function to upload files to Amazon S3 and needs the required permissions to perform the task.
The developer already has an IAM user with valid IAM credentials required for Amazon S3.
What should a solutions architect do to grant the permissions?

Question122: A user is storing a large number of objects on AWS S3. The user wants to implement the search functionality among the objects. How can the user achieve this?

Question123: A solutions architect needs to design a network that will allow multiple Amazon EC2 instances to access a common data source used for mission-critical data that can be accessed by all the EC2 instances simultaneously. The solution must be highly scalable, easy to implement, and support the NFS protocol.
Which solution meets these requirements?

Question124: A company maintains a searchable repository of items on its website. The data is stored in an Amazon RDS for MySQL database table that contains over 10 million rows. The database has 2 TB of General Purpose SSD (gp2) storage. There are millions of updates against this data every day through the company's website. The company has noticed some operations are taking 10 seconds or longer, and has determined that the database storage performance is bottleneck.
Which solution addresses the performance issues?

Question125: A client reports that they want see an audit log of any changes made to AWS resources in their account.
What can the client do to achieve this?

Question126: A solutions architect is designing the storage architecture for a new web application used for stonng and viewing engineering drawings.
All application components will be deployed on the AWS infrastructure.
The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load.
The application must be able to store petabytes of data.
Which combination of storage and caching should the solutions architect use?

Question127: A company has an Amazon EC2 instance running on a private subnet that needs to access a public websites to download patches and updates. The company does not want external websites to see the EC2 instance IP address or initiate connection to it.
How can a solution architect achieve this objective?

Question128: A company's lease of a co-located storage facility will expire in 90 days. The company wants to move to AWS to avoid signing a contract extension. The company's environment consists of 200 virtual machines and a NAS with 40 TB of data. Most of the data is archival, yet instant access is required when data is requested.
Leadership wants to ensure minimal downtime during the migration. Each virtual machine has a number of customized configurations. The company's existing 1 Gbps network connection is mostly idle, especially after business hours.
Which combination of steps should the company take to migrate to AWS while minimizing downtime and operational impact? (Select TWO.)

Question129: A company is running a multi-tier ecommerce web application In the AWS Cloud. The application runs on Amazon EC2 Instances with an Amazon RDS MySQL Mutt>AZ DB instance.
Amazon RDS is configured with the latest generation instance with 2,000 GB of storage in an Amazon EBS General Purpose SSD (gp2) volume.
The database performance impacts the application during periods of high demand.
After analyzing the logs in Amazon CloudWatch Logs, a database administrator finds that the application performance always degrades when the number of read and write IOPS is higher than
6.000
What should a solutions architect do to improve the application performance?

Question130: A solutions architect needs to design a resilient solution for Windows users' home directories.
The solution must provide fault tolerance, file-level backup and recovery, and access control, based upon the company's Active Directory.
Which storage solution meets these requirements?

Question131: A company has an application running on Amazon EC2 On-Demand Instances. The application does not scale, and the Instances run In one AWS Region. The company wants the flexibility to change the operating system from Windows to AWS Linux in the future. The company needs to reduce the cost of the instances without creating additional operational overhead or changes to the application.
What should the company purchase lo meet these requirements MOST cost-effectively?

Question132: A company has an asynchronous web application where Amazon API Gateway triggers AWS Lambda functions to perform write and update operations on an Amazon RDS DB instance.
During periods of extreme use API Gateway and Lambda scale in response to the incoming workload but service outages occur due to congestion with Amazon RDS.
The company is seeking a cost-effective design to alleviate this congestion.
What should a solutions architect recommend'?

Question133: A company has media and application files that need to be shared internally.
Users currently are authenticated using Active Directory and access files from a Microsoft Windows platform.
The chief execute officer wants to keep the same user permissions, but wants the company to improve the process as the company is reaching its storage capacity limit.
What should a solutions architect recommend?

Question134: A media company has an application that tracks user clicks on its websites and performs analytics to provide near-real time recommendations. The application has a fleet of Amazon EC2 instances that receive data from the websites and send the data to an Amazon RDS DB instance.
Another fleet of EC2 instances hosts the portion of the application that is continuously checking changes in the database and executing SQL queries to provide recommendations. Management has requested a redesign to decouple the infrastructure.
The solution must ensure that data analysts are writing SQL to analyze the data only. No data can be lost during the deployment.
What should a solutions architect recommend?

Question135: A product manager of an ecommerce website is launching a new product line next month.
The application hosting the website runs on Amazon EC2 instances in an Auto Scaling group behind a load balancer.
Testing has been performed, and the maximum load at launch has been estimated.
Traffic to the application is expected to decrease gradually within the first few weeks after the launch.
This workload is the only one on this account that is expected to scale during launch.
Which combination of steps is MOST cost-effective to ensure that will be dequate capacity when the application scales at launch? (Select TWO.)

Question136: A company is deploying a multi-instance application within AWS that requires minimal latency between the instances.
What should a solutions architect recommend?

Question137: An engineering team is developing and deploying AWS Lambda functions.
The team needs to create roles and manage policies in AWS IAM to configure the permissions of the Lambda functions.
How should the permissions for the team be configured so they also adhere to the concept of least privilege?

Question138: A company has thousands of files stored in an Amazon S3 bucket that has a well-defined access pattern. The files are accessed by an application multiple times a day for the first 30 days. Files are rarely accessed within the next 90 days. After that, the files are never accessed again. During the first 120 days, accessing these files should never take more than a few seconds.
Which lifecycle policy should be used for the S3 objects to minimize costs based on the access pattern?

Question139: A company's web application is running on Amazon EC2 instances behind an Application Load Balancer.
The company recently changed its policy, which now requires the application to be accessed from one specific country only.
Which configuration will meet this requirement?

Question140: company's human resources (HR) department saves its sensitive documents in an Amazon S3 bucket named confidential_bucket.
An IAM policy grants permission for ail S3 actions to a group of which each HR employee is a member.
A solutions architect needs to make the objects secure and accessible outside the company's AWS account and on-premises IP CIDR range.
The solutions architect adds the following S3 bucket policy:
( "Version": "2008-10-17", "Statement": [
{ "Effect": "Deny", "Principal": { "AWS": --
"Action": "s3:"", "Resource": "arn:aws:s3:::confidential_bucket/*", "Condition": {
"StringNotLike": {
"aws:sourceVpce": "vpce-C12345789" }, "NotlpAddress": { "aws:SourceIp": [
"10.100.0.0/24", "172.31.0.0/24"
J } }
} J }
What is the effect of the added bucket policy?

Question141: A company is moving its on-premises applications to Amazon EC2 instances. However, as a result of fluctuating compute requirements, the EC2 instances must always be ready to use between 8 AM and 5 PM in specific Availability Zones.
Which EC2 instances should the company choose to run the applications?

Question142: A company is using various types of Amazon EC2 On-Demand Instances.
The company suspects that these instances have greater CPU and memory capacity than its workloads require.
Which actions should the company take to obtain recommendations to optimize cost? (Select TWO.)

Question143: A solutions architect is designing a VPC with public and private subnets. The VPC and subnets use IP 4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zone (AZs) for high availability. An internet gateway is used to provide internet access for the public subnets. The private subnets require access to the internet to allow Amazon EC2 instances to download software updates.
What should the solutions architect do to enable Intrnet access for the private subnets?

Question144: Which of the below mentioned options is not available when an instance is launched by Auto Scaling with EC2 Classic?

Question145: A company hosts its web application on AWS using server Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be refumed in response to DNS queries.
Which policy should be used to meet this requirement?

Question146: A company is planning to deploy an Amazon RDS DB instance running Amazon Aurora.
The company has a backup retention policy requirement of 90 days.
Which solution should a solutions architect recommend?

Question147: A company has a mobile game that reads most of its metadata from an Amazon RDS DB instances. As the game increased in popularity, developer noticed slowdowns related to the game's metadata load times. Performance metrics Indicate that simply scaling the database will not help. A solutions architect must explore all options that include capabilities for snapshots, replication, and sub-millisecond response times.
What should the solutions architect recommend to solve the issues?

Question148: A company has created a VPC with multiple private subnets in multiple Availability Zones (AZs) and one public subnet in one of the AZs. The public subnet is used to launch a NAT gateway.
There are instance in the private subnet that use a NAT gateway to connect to the internet. In case is used of an AZ failure, the company wants to ensure that the instance are not all experiencing internet connectivity issues and that there is a backup plan ready.
Which solution should a solutions architect recommend that is MOST highly available?

Question149: An application running on an Amazon EC2 instance needs to access an Amazon DynamoDB table.
Both the EC2 instance and the DynamoDB table are in the same AWS account.
A solutions architect must configure the necessary permissions.
Which solution will allow least privilege access to the DynamoDB table from the EC2 instance?

Question150: A company is planning on deploying a newly built application on AWS in a default VPC The application will consist of a web layer and database layer.
The web server was created in public subnets, and the MySQL database was created in private subnets. All subnets are created with the default network ACL settings, and the default security group in the VPC will be replaced with new custom security groups.
The following are the key requirements:
- The web servers must be accessible only to users on an SSL connection.
- The database should be accessible to the web layer, which is created
in a public subnet only.
- All traffic to and from the IP range 182.20.0.0/16 subnet should be
blocked.
Which combination of steps meets these requirements? (Select TWO.)

Question151: An application runs on Amazon EC2 instances across multiple Availability Zones.
The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer.
The application performs best when the CPU utilization of the EC2 instances is at or near 40%.
What should a solutions architect do to maintain the desired performance across all instances m the group?

Question152: A solution architect has created two IAM policies: Policy1 and Policy2. Both policies are attached to an IAM group.

A cloud engineer is added as an IAM user to the IAM group. Which action will the cloud engineer be able to perform?

Question153: A solution architect creating an application that will handle batch processing of large amount of data. The input data will be held in Amazon S3 and the output data will be stored in a different S3 bucket. For processing the application will transfer the data over the network between multiple Amazon EC2 instances.
What should the solution architect do to reduce the overall data transfer costs ?

Question154: A solution architect is designing a hybrid application using the AWS cloud.
The network between the on- premises data center and AWS will use an AWS Direct Connect (DX) connection.
The application connectivity between AWS and the on-premises data center must be highly resilient.
Which DX configuration should be implemented to meet these requirements?

Question155: A solutions architect is designing a solution to access a catalog of images and provide users with the ability to submit requests to customize images.
Image customization parameters will be in any request sent to an AWS API Gateway API.
The customized image will be generated on demand, and users will receive a link they can click to view or download their customized image.
The solution must be highly available for viewing and customizing images What is the MOST cost-effective solution to meet these requirements?

Question156: A company has an on-premises MySQL database used by the global sales team with infrequent access patterns.
The sales team requires the database to have minimal downtime.
A database administrator wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users in the future.
Which service should a solution architect recommend?

Question157: An application calls a service run by a vendor.
The vendor charges based on the number of calls.
The finance department needs to know the number of calls that are made to the service to validate the billing statements.
How can a solutions architect design a system to durably store the number of calls without requiring changes to the application?

Question158: A company plans to store sensitive user data on Amazon S3.
Internal security compliance requirement mandata encryption of data before sending it to Amazon S3.
What should a solution architect recommend to satisfy these requirements?

Question159: A company owns an asynchronous API that is used to ingest use requests and, based on the request type, dispatch requests to the appropriate microservice for processing.
The company is using Amazon API Gateway to deploy the API front end, and an AWS Lambda function that invokes Amazon DynamoDB to store user requests before dispatching them to the processing microservices.
The company provisioned as much DynamoDB throughput as its budget allows, but the company is still experiencing availability issues and is losing user requests.
What should a solutions architect do to address this Issue without impacting existing users?

Question160: A company is deploying a web portal. The company wants to ensure that only the web portion of the application is publicly accessible. To accomplish this, the VPC was designed with two public subnets and two private subnets. The application will run on several Amazon EC2 instances in an Auto Scaling group. SSL termination must be offloaded from the EC2 instances.
What should a solutions architect do to ensure these requirements are met?

Question161: A recently created startup built a three-tier web application. The front end has static content. The application layer is based on microservices. User data is stored as JSON documents that need to be accessed with low latency. The company expects regular traffic to be low during the first year, with peaks in traffic when it publicizes new features every month. The startup team needs to minimize operational overhead costs.
What should a solutions architect recommend to accomplish this?

Question162: A company hosts its application in the AWS Cloud. The application runs on Amazon EC2 instances behind an Elastic Load Balancer in an Auto Scaling group and with an Amazon DynamoDB table. The company wants to ensure the application can be made available in another AWS Region with minimal downtime.
What should a solutions architect do to meet these requirements with the LEAST amount of downtime?

Question163: A company that hosts its web application on AWS wants to ensure all Amazon EC2 instances.
Amazon RDS DB instances and Amazon Redshift clusters are configured with tags.
The company wants to minimize the effort of configuring and operating this check.
What should a solutions architect do to accomplish this''

Question164: A company needs to share an Amazon S3 bucket with an external vendor. The bucket owner must be able to access all objects.
Which action should be taken to share the S3 bucket?

Question165: A company is migrating to the AWS Cloud. A file server is the first workload to migrate. Users must be able to access the file share using the Server Message Block (SMB) protocol.
Which AWS managed service meets these requirements?

Question166: An image hosting company uploads its large assets to Amazon S3 Standard buckets.
The company uses multipart upload in parallel by using S3 APIs and overwrites if the same object is uploaded again.
For the first 30 days after upload the objects will be accessed frequently.
The objects will be used less frequently after 30 days but the access patterns for each object will be inconsistent.
The company must optimize its S3 storage costs while maintaining high availability and resiliency of stored assets.
Which combination of actions should a solutions architect recommend lo meet these requirements? (Select TWO.)

Question167: After setting up a Virtual Private Cloud (VPC) network, a more experienced cloud engineer suggests that to achieve low network latency and high network throughput you should look into setting up a placement group. You know nothing about this, but begin to do some research about it and are especially curious about its limitations.
Which of the below statements is wrong in describing the limitations of a placement group?

Question168: You need to migrate a large amount of data into the cloud that you have stored on a hard disk and you decide that the best way to accomplish this is with AWS Import/Export and you mail the hard disk to AWS. Which of the following statements is incorrect in regards to AWS Import/Export?

Question169: A company has two VPCs that are located in the us-west-2 Region within the same AWS account. The company needs to allow network traffic between these VPCs. Approximately 500 GB of data transfer will occur between the VPCs each month.
What is the MOST cost-effective solution to connect these VPCs?

Question170: A company has a web application for travel ticketing.
The application is based on a database that runs in a single data center in North America. The company wants to expand the application to serve a global user base. The company needs to display the application to multiple AWS Regions.
Average latency must be less than 1 second on updates to reservation database.
The company wants to have separate deployments of its web platform across multiple Regions.
However, the company must maintain a single primary reservation database that is globally consistent.
Which solution should a solutions architect recommend to meet these requirements?

Question171: A company wants to identify underutilized instances for Amazon EX2 and Amazon RDS.
The company needs to report on the cost of all underutilized instances and the utilization metrics for each resource.
Which combination of tools and services will provide this data? (Select TWO.)

Question172: In DynamoDB, could you use IAM to grant access to Amazon DynamoDB resources and API actions?

Question173: A company has on-premises servers running a relational database.
The current database serves high read traffic for users in different locations.
The company wants to migrate to AWS with the least amount of effort.
The database solution should support disaster recovery and not affect the company's current traffic flow.
Which solution meets these requirements?

Question174: A company is running an application on AWS to process weather sensor data that is stored in an Amazon S3 bucket.
Three batch jobs run hourly to process the data in the S3 bucket for different purposes.
The company wants to reduce the overall processing time by running the three applications in parallel using an event-based approach.
What should a solutions architect do to meet these requirements?

Question175: A company has created a multi-tier application for its ecommerce website. The website uses an Application Load Balancer that resides in the public subnets, a web tier in the public subnets, and a MySQL cluster hosted on Amazon EC2 instances in the private subnets. The MySQL database needs to retrieve product catalog and pricing information that is hosted on the internet by a third- party provider. A solutions architect must devices a strategy that maximizes security without increasing operational overhead.
What should the solutions architect do to meet these requirements?

Question176: You are building infrastructure for a data warehousing solution and an extra request has come through that there will be a lot of business reporting queries running all the time and you are not sure if your current DB instance will be able to handle it. What would be the best solution for this?

Question177: A company designs a mobile app for its customers to upload photos to a website.
The app needs a secure login with multi-factor authentication (MFA).
The company wants to limit the initial build time and the maintenance of the solution.
Which solution should a solutions architect recommend to me t these requirements?

Question178: A company's web application uses an Amazon RDS PostgreSQL DB instance to store its application data.
During the financial closing period at the start of every month. Accountants run large queries that impact the database's performance due to high usage.
The company wants to minimize the impact that the reporting activity has on the web application.
What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

Question179: A company has an image processing workload running on Amazon Elastic Container Service (Amazon ECS) in two private subnets. Each private subnet uses a NAT instance for internet access. All images are stored in Amazon S3 buckets.
The company is concerned about the data transfer costs between Amazon ECS and Amazon S3.
What should a solutions architect do to reduce costs?

Question180: In Amazon EC2 Container Service, are other container types supported?

Question181: A solution architect is designing a solution that involves orchestrating a series of Amazon Elastic Container Service (Amazon ECS) task types running on Amazon EC2 instances that are part of an ECS cluster. The output and state data for all tasks needs to be stored. The amount of data output by each task is approximately 10 MB, and there could be hundreds of tasks running at a time. The system should be optimized for high frequency reading and writing. As old outputs are archived and deleted the storage size is not expected to exceed 1 TB.
Which storage solution should the solution architect recommend?

Question182: A company has a web application hosted over 10 Amazon CC2 instances with traffic directed by Amazon Route 53.
The company occasionally experiences a timeout error when attempting to browse the application.
The networking team finds that some DNS queries return IP addresses of unhealthy instances, resulting in the timeout error.
What should a solutions architect implement to overcome these timeout errors?

Question183: A company has a custom application running on an Amazon EC2 instance that:
- Reads a large amount of data from Amazon S3
- Performs a multi stage analysis
- Writes the results to Amazon DynamoDB
The application writes a significant number of large temporary files during the multi stage analysis The process performance depends on the temporary storage performance. What would be the fastest storage option for holding the temporary files?

Question184: A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB).
The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures.
What should the solutions architect recommend?

Question185: A company has global users accessing an application deployed in different AWS Regions, exposing public static IP addresses. The users are experiencing poor performance when accessing the application over the internet.
What should a solutions architect recommend to reduce internet latency?

Question186: A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance Management says the application must be made more secure with the least amount of programming effort.
What should a solutions architect do to meet these requirements?

Question187: A company has a customer relationship management (CRM) application that stores data in an Amazon RDS DB instance that runs Microsoft SQL Server. The company's IT staff has administrative access to the database. The database contains sensitive data. The company wants to ensure that the data is not accessible to the IT staff and that only authorized personnel can view the data.
What should a solutions architect do to secure the data?

Question188: A company runs a static website through its on-premises data center. The company has multiple servers that handle all of its traffic, but on busy days, services are interrupted and the website becomes unavailable. The company wants to expand its presence globally and plans to triple its website traffic What should a solutions architect recommend to meet these requirements?

Question189: A company receives structured and semi-structured data from various sources once every day.
A solutions architect needs to design a solution that leverages big data processing frameworks.
The data should be accessible using SQL queries and business intelligence tools.
What should the solutions architect recommend to build the MOST high-performing solution?

Question190: A company is building a web application that servers a content management system.
The content management system runs on Amazon EC2 instances behind an application Load Balancer (ALB).
The EC2 instances run in an Auto Scaling group across Availability Zones.
Users are constantly adding and updating files, blogs, and other website assets in the content management system.
Which solution meets these requirements?

Question191: A company is using Amazon S3 as its local repository for weekly analysis reports.
One of the company-wide requirements is to secure data at rest using encryption.
The company chooses Amazon 53 server-side encryption (SSE)
how can the object be decrypted when a GET request is issued?

Question192: An application uses an Amazon RDS MySQL DB instance.
The RDS database is becoming low on disk space.
A solutions architect wants to increase the disk space without downtime.
Which solution meets these requirements with the LEAST amount of effort?

Question193: A company runs a multi-tier web application that hosts news content.
The application runs on Amazon EC2 instances behind an Application Load Balancer.
The instances run in an EC2 Auto Scaling group across multiple Availability Zones and use an Amazon Aurora database.
A solutions architect needs to make the application more resilient to periodic increases in request rates.
Which architecture should the solutions architect implement? (Select TWO )

Question194: A company built an application that lets users check in to places they visit, rank the places, and add reviews about their experiences.
The application is successful with a rapid increase in the number of users every month.
The chief technology officer fears the database supporting the current Infrastructure may not handle the new load the following month because the single Amazon RDS for MySQL instance has triggered alarms related lo resource exhaustion due to read requests.
What can a solutions architect recommend to prevent service Interruptions at the database layer with minimal changes to code?

Question195: A solutions architect is designing a customer-facing application. The application is expected to have a variable amount of reads and writes depending on the time of year and clearly defined access patterns throughout the year. Management requires that database auditing and scaling be managed in the AWS Cloud. The Recovery Point Objective (RPO) must be less than 5 hours.
Which solutions can accomplish this? (Select TWO.)

Question196: Management has decided to deploy all AWS VPCs with IPv6 enabled. After sometime, a solutions architect tries to launch a new instance and receives an error stating that there is no enough IP address space available in the subnet.
What should the solutions architect do to fix this?

Question197: A company slops a cluster of Amazon EC2 instances over a weekend.
The costs decrease, but they do not drop to zero.
Which resources could still be generating costs? (Select TWO.)

Question198: A company's dynamic website is hosted using on-premises servers in the United States.
The company is launching its product in Europe and it wants to optimize site loading times for new European users.
The site's backend must remain in the United States. The product is being launched in a few days, and an immediate solution is needed What should the solutions architect recommend?

Question199: A company hosts its website on Amazon S3. The website serves petabytes of outbound traffic monthly, which accounts for most of the company's AWS costs.
What should a solutions architect do to reduce costs?

Question200: A company is deploying an application that processes large quantities of data in parallel.
The company plans to use Amazon EC2 instances for the workload.
The network architecture must be configurable to provide the lowest possible latency between nodes.
Which combination of network solutions will meet these requirements? (Select TWO )

Question201: An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table.
What is the MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?

Question202: A company wants to monitor its AWS costs for financial review. The cloud operations team is designing an architecture in the AWS Organizations master account to query AWS Cost and Usage Reports for all member accounts.
The team must run this query once a month and provide a detailed analysis of the bill.
Which solution is the MOST scalable and cost-effective way to meet these requirements?

Question203: A company stores 200 GB of data each month in Amazon S3.
The company needs to perform analytics on this data at the end of each month to determine the number of items sold in each sales region for the previous month.
Which analytics strategy is MOST cost-effective for the company to use?

Question204: A company has an AWS Direct Connect connection from its corporate data center to its VPC in the useast-1 Region.
The company recently acquired a corporation that has several VPCs and a Direct Connect connection between its on-premises data center and the eu-west-2 Region.
The CIDR blocks for the VPCs of the company and the corporation do not overlap. The company requires connectivity between two Regions and the data centers.
The company needs a solution that is scalable while reducing operational overhead.
What should a solutions architect do to meet these requirements?

Question205: A solutions architect is designing an application for a two-step order process.
The first step is synchronous and must return to the user with little latency.
The second step takes longer, so it will be implemented in a separate component Orders must be processed exactly once and in the order in which they are received.
How should the solutions architect integrate these components?

Question206: A solution architect must design a solution that uses Amazon CloudFront with an Amazon S3 to store a static website.
The company security policy requires that all websites traffic be inspected by AWS WAF.
How should the solution architect company with these requirements?

Question207: A company is planning to transfer multiple terabytes of data to AWS. The data is collected offline from ships. The company want to run complex transformation before transferring the data. Which AWS service should a solutions architect recommend for this migration?

Question208: A company uses Amazon S3 as its object storage solution. The company has thousands of S3 it uses to store data. Some of the S3 bucket have data that is accessed less frequently than others.
A solutions architect found that lifecycle policies are not consistently implemented or are implemented partially. resulting in data being stored in high-cost storage.
Which solution will lower costs without compromising the availability of objects?

Question209: A company wants to host a scalable web application on AWS.
The application will be accessed by users from different geographic regions of the world.
Application users will be able to download and upload unique data up to gigabytes in size.
The development team wants a cost-effective solution to minimize upload and download latency and maximize performance.
What should a solutions architect do to accomplish this?

Question210: A company company is planning to transfer multiple terabytes of data to AWS. The data is collected offline from ships. The company wants to run complex transformations before transferring the data.
Which AWS service should a solutions architect recommend for this migrations?

Question211: A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility.
However the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies.
How should a solutions architect address this issue?

Question212: A company is using Amazon Route 53 latency-based routing to route requests to its UDP-based application for users around the world. The application is hosted on redundant servers in the company's on-premises data centers in the United States, Asia, and Europe. The company's compliance requirements state that the application must be hosted on premises. The company wants to improve the performance and availability of the application.
What should a solutions architect do to meet these requirements?

Question213: A company is migrating a three-tier application to AWS.
The application requires a MySQL database. In the past, the application users reported poor application performance when creating new entries.
These performance issues were caused by users generating different real-time reports from the application duringworking hours.
Which solution will improve the performance of the application when it is moved to AWS?

Question214: A company uses a legacy on-premises analytics application that operate on gigabytes of .csv and represents months of data. The legacy application cannit handle the growing size of .csv files.
New CSV files added daily from various data sources to a central on-premises storage location.
The company wants to continuew to support the legacy application while user learn AWS analytics services. To achieve this, a solution architect wants to maintain two synchronizes copies of all the .csv files on-premises and in Amazon S3.
Which solution should the solution architect recommend?

Question215: A company runs an application on an Amazon EC2 instance Backed by Amazon Elastic Block Store (Amazon EBS).
The instance needs to be available for 12 hours daily.
The company wants to save costs by making the instance unavailable outside the window required for the application.
However the contents of the instance's memory must be preserved whenever the instance is unavailable.
What should a solutions architect do lo meet this requirement?

Question216: A company's database is hosted on an Amazon Aurora MySQL DB cluster in the us-east-1 Region. The database is 4 TB in size. The company needs to expand its disaster recovery strategy to the us-west-2 Region. The company must have the ability to fail over to us-west-2 with a recovery time objective (RTO) of 15 minutes.
What should a solutions architect recommend to meet these requirements?

Question217: A company is looking for a solution that can store video archives in AWS from old news footage.
The company needs to minimize costs and will rarely need to restore these files.
When the files are needed, they must be available in a maximum of five minutes.
What is the MOST cost-effective solution?

Question218: A company must generate sales reports at the beginning of every month.
The reporting process launches 20 Amazon EC2 instances on the first of the month.
The process runs for 7 days and cannot be interrupted. The company wants to minimize costs.
Which pricing model should the company choose?

Question219: An ecommerce company has noticed performance degradation of its Amazon RDS based web application.
The performance degradation is attribute to an increase in the number of read-only SQL queries triggered by business analysts.
A solution architect needs to solve the problem with minimal changes to the existing web application.
What should the solution architect recommend?

Question220: A solutions architect is using an AWS Cloud Formation template to deploy a three-tier web application. The web application consists of a web tier and an application tier that stores and retrieves user data in Amazon DynamoDB tables. The web and application tiers are hosted on Amazon EC2 instances, and the database tier is not publicly accessible. The application EC2 instances need to access the DynamoDB tables without exposing API credentials in the template.
What should the solutions architect do to meet these requirements?

Question221: A company is designing a web application using AWS that processes insurance quotes Users will request quotes from the application.
Quotes must be separated by quote type must be responded to within 24 hours, and must not be lost.
The solution should be simple to set up and maintain.
Which solution meets these requirements?

Question222: An operations team has a standard that states IAM policies should not be applied directly to users.
Some new members have not been following this standard.
The operation manager needs a way to easily identify the users with attached policies.
What should a solutions architect do to accomplish this?

Question223: A solutions architect is designing a solution for a dynamic website, "example.com," that is deployed in two AWS Regions: Tokyo. Japan and Sydney. Australia.
The architect wants to ensure that users located in Australia are directed to the website deployed in the Sydney AWS Region and users located in Japan are directed to the website in the Tokyo AWS Region when they browse to "example.com." Which service should the architect use to achieve this goal with the LEAST administrative effort?

Question224: An application allows users at a company's headquarters to access product data.
The product data is stored in an Amazon RDS MySQL DB instance.
The operations team has isolated an application performance slowdown and wants to separate read traffic from write traffic.
A solutions architect needs to optimize the application's performance quickly.
What should the solutions architect recommend?

Question225: A company is developing a data lake solution in Amazon S3 to analyze large scale datasets.
The solution makes infrequent SOL queries only in addition, the company wants to minimize infrastructure costs.
Which AWS service should be used to meet these requirements?

Question226: You are in the process of creating a Route 53 DNS failover to direct traffic to two EC2 zones.
Obviously, if one fails, you would like Route 53 to direct traffic to the other region. Each region has an ELB with some instances being distributed. What is the best way for you to configure the Route 53 health check?

Question227: A company has thousands of edge devices that collectively generate 1 TB of status alerts each day Each alert is approximately 2 KB in size.
A solutions architect needs to implement a solution to ingest and store the alerts for future analysis.
The company wants a highly available solution However the company needs to minimize costs and does not want to manage additional infrastructure.
Additionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older than 14 days.
What is the MOST operationally efficient solution that meets these requirements?

Question228: A company recently implemented hybrid cloud connectivity using AWS Direct Connect and is migrating data to Amazon S3.
The company is looking for a fully managed solution that will automate and accelerate the replication of data between the on-premises storage systems and AWS storage services.
Which solution should a solutions architect recommend to keep the data private?

Question229: A user wants to list the IAM role that is attached to their Amazon EC2 instance.
The user has login access to the EC2 instance but does not have IAM permissions.
What should a solutions architect do to retrieve this information?

Question230: A company is managing health records on-premises.
The company must keep these records indefinitely, disable any modifications to the records once they are stored, and granularly audit access at all levels.
The chief technology officer (CTO) is concerned because there are already millions of records not being used by any application, and the current infrastructure is running out of space.
The CTO has requested a solutions architect design a solution to move existing data and support future records.
Which services can the solutions architect recommend to meet these requirements'?