MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies.How should a solution architect address this issue?
Question2: A company is automating an order management application. The company's development team has decided to use SFTP to transfer and store the business-critical information files The files must be encrypted and must be highly available. The files also must be automatically deleted a month after they are created.Which solution meets these requirements with the LEAST operational overhead?
Question3: A company uses on-premises servers to host Its application. The company is running out of storage capacity.The applications use both block storage and NFS storage. The company needs a high-performing solution that supports local caching without re-architecting its existing applications Which combination of actions should a solutions architect take to meet these requirements'? (Select TWO.)
Question4: A company used an AWS Direct Connect connection to copy 1 PB of data from a colocation facility to an Amazon S3 bucket in the us-east-1 Region. The company now wants to copy the data to another S3 bucket in the us-weet-2 Region.Which solution will meet this requirement?
Question5: A solutions architect must migrate a Windows Internet Information Services (IIS) web application to AWS The application currently relies on a file share hosted in the user's on-premises network-attached storage (NAS) The solutions architect has proposed migrating the MS web servers to Amazon EC2 instances in multiple Availability Zones that are connected to the storage solution, and configuring an Elastic Load Balancer attached to the instances Which replacement to the on-premises file share is MOST resilient and durable?
Question6: A company is running a multi-tier web application on AWS. The application runs its database on Amazon Aurora MySQL. The application and database tiers are in the us-easily Region.A database administrator who monitors the Aurora DB cluster finds that an intermittent increase in read traffic is creating high CPU utilization on the read replica. The result is increased read latency for the application.The memory and disk utilization of the DB instance are stable throughout the event of increased latency.What should a solutions architect do to improve the read scalability?
Question7: A company receives data from millions of users totalling about 1 TB each day. The company providers its users with usage report going back 12 months. All usage data must be stored for at least 5 years to comply with regularly and auditing requirement?Which storage solution is MOST cost-effective?
Question8: A company has a three-tier application image sharing. The application uses an Amazon EC2 instance for the front-end layer, another EC2 instance tor the application layer, and a third EC2 instance for a MySQL database A solutions architect must design a scalable and nighty available solution mat requires the least amount of change to the application.Which solution meets these requirement?
Question9: A solutions architect is optimizing a website for an upcoming musical event Videos of the performances will be streamed in real time and then will be available on demand The event is expected to attract a global online audience Which service will improve the performance of both the real-time and on-demand streaming?
Question10: A company runs an AWS Lambda function in private subnets in a VPC The subnets have a default route to the internet through an Amazon EC2 NAT instance The Lambda function processes input data and saves its output as an object to Amazon S3 intermittently the Lambda function times out while trying to upload the object because of saturated traffic on the NAT instance's network The company wants to access Amazon S3 without traversing the internet Which solution will meet these requirements'
Question11: A database is on an Amazon RDS MySQL 5.6 Multi-AZ 06 instance that experiences highly dynamic reads.Application developers notice a significant slowdown when testing read performance from a secondary AWS Region. The developers want a solution that provider less than 1 second of read replication latency What should the solutions architect recommend?
Question12: A company's security policy requires that all AWS API activity in its AWS accounts be recorded for periodic auditing. The company needs to ensure that AWS CloudTrail is enabled on all of its current and future AWS accounts using AWS Organizations Which solution is MOST secure?
Question13: A company has two AWS accounts: Production and Development. The company needs to push code changes in the Development account to the Production account. In the alpha phase, only two developers on the development team need access to the Production account. In the beta phase, more developers will need access to perform testing.Which solution will meet these requirements?
Question14: A company is developing an Internal application that uses a PostgreSQL database. The company has decided to host the database on Amazon Aurora The application does not need to be highly available but data must be stored in multiple Availability Zones to maximize durability.Which database configuration meets these requirements MOST cost-effectively?
Question15: Which AWS service can a company use to store and manage Docker images?
Question16: A company is planning to store sensitive documents in an Amazon S3 bucket. The documents must be encrypted al rest. The company wants to manage the underlying keys that are used lor encryption However, the company does not want to manage the encryption and decryption process.Which solutions will meet these requirements? (Select TWO.)
Question17: A company is building a shopping application on AWS. The application offers a catalog that changes once each month and needs to scale with traffic volume. The company wants the lowest possible latency from the application. Data from each user's shopping cart needs to be highly available. User session data must be available even if the user is disconnected and reconnects.What should a solutions architect do to ensure that the shopping cart data is preserved at all times?
Question18: A company has a production web application in which users upload documents through a web interlace or a mobile app. According to a new regulatory requirement, new documents cannot be modified or deleted after they are stored.What should a solutions architect do to meet this requirement?
Question19: A company's production application runs online transaction processing (OLTP) transactions on an Amazon RDS MySQL DB instance The company is launching a new reporting tool that will access the same data The reporting tool must be highly available and not impact the performance of the production application How can this be achieved'?
Question20: A company has an internet-facing application that runs on premises. The application contains mostly user-generated content. The data is stored in an on-premises network-attached storage system. The company wants to archive this data annually and has chosen to move the archival data to Amazon S3. The company needs a solution to migrate the archival data into an S3 bucket.Which solution will meet these requirements?
Question21: A company wants to build an online marketplace application on AWS as a set of loosely coupled microservices For this application, when a customer submits a new order two microservices should handle the event simultaneously The Email microservice will send a confirmation email and the OrderProcessing microservice will start the order delivery process If a customer cancels an order, the OrderCancellation and Email microservices should handle the event simultaneously.A solutions architect wants to use Amazon Simple Queue Service (Amazon SQS) and Amazon Simple Notification Service (Amazon SNS) to design the messaging between the microservices.How should the solutions architect design the solution?
Question22: A company's near-real-time streaming application is running on AWS. As the data is ingested, a job runs on the data and takes 30 minutes to complete. The workload frequently experiences high latency due to large amounts of incoming data A solutions architect needs to design a scalable and serverless solution to enhance performance.Which combination of steps should the solutions architect take? (Select TWO.)
Question23: A global company plans to track and store information about local allergens in aj Amazon DynamoDB table and query this data from its website The website traffic will fluctuate The combined read capacity units (RCUs) and write capacity units (WCUs) will range from 10 per second to 10.000 per second, depending on the severity of the conditions for the given day A solutions architect must design a solution that avoids throttling issues and manages capacity efficiently The solution also must provide the ability to set a maximum number of capacity units What should the solutions architect do to meet these requirements?
Question24: A company has no existing file share services. A new project requires access to file storage that is mountable as a drive for on-premises desktops. The file server must authenticate users to an Active Directory domain before they are able to access the storage.Which service will allow Active Directory users to mount storage as a drive on their desktops?
Question25: A company has an on-premises MySQL database used by the global tales team with infrequent access patterns.The sales team requires the database to have minimal downtime. A database administrate wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users In the future.Which service should a solutions architect recommend?
Question26: A company has deployed a business-critical application in the AWS Good The application uses Amazon EC2 instances that run in the us-east-1 Region The application uses Amazon S3 for storage of all critical data To meet compliance requirements the company must create a disaster recovery (DR) plan that provides the capability of a full failover to another AWS Region What should a solutions architect recommend for this DR plan?
Question27: At part of budget planning. management wants a report of AWS billed dams listed by user. The data will be used to create department budgets. A solution architect needs to determine the most efficient way to obtain this report Information Which solution meets these requirement?
Question28: A solutions architect is designing the storage architecture tor a new web application used for storing and viewing engineering drawings All application components will be deployed on the AWS infrastructure.The application design must support caching to minimize the amount of time that users wait for the engineering drawings to load The application must be able to store petabytes of data.Which combination of storage and caching should the solutions architect use?
Question29: A company uses an application to present metrics from sporting events to the public. The application must scale quickly during live events and must store these metrics for log-term reporting purposes. The company's architecture includes the following:* Amazon EC2 instances that run in an Auto Scaling group in private subnets* A network Load Balancer That runs in public subnets* A MongoDB database cluster that runs across multiple EC2 instancesA solutions architect must implement a solution that minimizes operational overhead The solution alto must be able to Kale automatically. What should the solutions architect set up to meet these requirements?
Question30: A company hosts multiple production applications. One of the applications consists of resources from Amazon EC2. AWS Lambda. Amazon RDS. Amazon Simple Notification Service (Amazon SNS), and Amazon Simple Queue Service (Amazon SOS) across multiple AWS Regions. All company resources are tagged with a tag name of "application" and a value that corresponds to each application. A solutions architect must provide the quickest solution for identifying all of the tagged components.Which solution meets these requirements?
Question31: A solutions architect needs to design a resilient solution for Windows users' home directories. The solution must provide fault tolerance, file-level backup and recovery, and access control, based upon the company's Active Directory.Which storage solution meets these requirements?
Question32: A company hosts historical weather records in Amazon S3. The records are downloaded from the company's website by way of a URL that resolves to a domain name Users all over the world access this content through subscriptions. A third-party provider hosts the company's root domain name, but the company recently migrated some of its services to Amazon Route 53 The company wants to consolidate contracts, reduce latency for users, and reduce costs related to serving the application to subscribers.Which solution meets these requirements?
Question33: A company runs a shopping application lhat uses Amazon DynamoDB to store customer information. In case of data corruption, a solutions architect needs to design a solution that meets a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO> of 1 hour.What should the solutions architect recommend to meet these requirements?
Question34: A company is performing an AWS Well-Architected Framework review of an existing workload deployed on AWS The review Identified a public-facing website running on the same Amazon EC2 instance as a Microsoft Active Directory domain controller that was installed recently to support other AWS services A solutions architect needs to recommend a new design that would improve the security of the architecture and minimize the administrative demand on IT staff What should the solutions architect recommend?
Question35: A company manages and runs a critical data management application in containers that are hosted on Amazon Elastic Container Service (Amazon ECS). The application has endpoints that are exposed through Application Load Balancers (ALBs). The application uses an Amazon Elastic File System (Amazon EFS) file system mount for persistent data storage. The company has configured Amazon ECS to use a minimal IAM instance role.Which combination of actions should a solutions architect take to improve the overall security posture of the application? (Select TWO.)
Question36: A company has a Windows-based application that must be migrated to AWS. The application requires the use of a shared Windows Me system attached to multiple Amazon EC2 Windows instances that are deployed across multiple Availability Zones What should a solutions architect do to meet this requirement?
Question37: A company provides machine learning solutions .The company's users need to download large data sets from the company's Amazon S3 bucket. These downloads often take a long lime, especially when the users are running many simulations on a subset of those datasets. Users download the datasets to Amazon EC2 instances in the same AWS Region as the S3 bucket. Multiple users typically use the same datasets at the same time.Which solution will reduce the lime that is required to access the datasets?
Question38: A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance. Management says the application must be made more secure with the least amount of programming effort.What should a solutions architect do to meet these requirements?
Question39: A company has a corporate network on premises and has three VPCs in the AWS Cloud. The company has one VPC each for development, test, and, production. The company wants its system administrators to security gain remote command-line access from the corporate network to Amazon EC2 instances in the VPCs.Which solution meets these requirements MOST cost-effectively?
Question40: A company hosts an application used to upload files to an Amazon S3 bucket Once uploaded, the files are processed to extract metadata which takes less than 5 seconds The volume and frequency of the uploads vanes from a few files each hour to hundreds of concurrent uploads The company has asked a solutions architect to design a cost-effective architecture that will meet these requirements.What should the solutions architect recommend?
Question41: A solutions architect must design a database solution for a high-traffic ecommerce web application. The database stores customer profiles and shopping cart information. The database must support a peak load of several million requests each second and deliver responses in milliseconds The operational overhead for managing and scaling the database must be minimized Which database solution should the solutions architect recommend?
Question42: A company is running a mission-critical application on Amazon EC2 instances henna an Application Load Balancer The instances run in an Auto Scaling group in a single AWS Region The application is using a database in Ama2on Aurora as the data tier. A recent audit revealed that the current deployment of Aurora is not highly available.What should a solutions architect do to improve the availability of the database
Question43: A company wants to use AWS Systems Manager to manage a fleet ol Amazon EC2 instances. According to the company's security requirements, no EC2 instances can have internet access. A solutions architect needs to design network connectivity from the EC2 instances to Systems Manager while fulfilling this security obligation.Which solution will meet these requirements?
Question44: A company is running a multi-tier recommence web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ OB instance. Amazon ROS is configured with the latest generation DB instance with 2.000 GB of storage In a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBSl volume. The database performance affects the application during periods high demand.A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20.000.What should a solutions architect do to improve the application performance?
Question45: A company is planning to migrate its virtual server-based workloads to AWS The company has internet-facing load balancers backed by application servers The application servers rely on patches from an internet-hosted repository Which services should a solutions architect recommend be hosted on the public subnet? (Select TWO.)
Question46: A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimum latency to clinics across the country for their on-premises file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic.What should a solutions architect recommend to meet these requirements?
Question47: A company runs an application on a group of Amazon Linux EC2 instances. For compliance reasons, the company must retain all application log files for 7 years. The log files will be analyzed by a reporting tool that must be able to access all the files concurrently.Which storage solution meets these requirements MOST cost-effectively?
Question48: A company is running a database on Amazon Aurora The database is idle every evening An application that performs extensive reads on the database experiences performance issues during morning hours when user traffic spikes. During these peak penods. the application receives timeout errors when reading from the database The company does not have a dedicated operations team and needs an automated solution to address the performance issues Which actions should a solutions architect take to automatically adjust to the increased read load on the database? (Select TWO )
Question49: A company's packaged application dynamically creates and returns single-use text files in response to user requests. The company is using Amazon CloudFront for distribution^ but wants to further reduce data transfer costs The company cannot modify the application's source code What should a solutions architect do to reduce costs?
Question50: A large media company hosts a web application on AWS. The company wants to start caching confidential media files so that users around the 'world will have reliable access to the files. The content is stored in Amazon S3 buckets. The company must deliver the content quickly, regardless of where the requests originate geographically Which solution will meet these requirements?
Question51: A social media company allows users to upload images to its website. The website runs on Amazon EC2 instances. During upload requests, the website resizes the images to a standard size and stores the resized images in Amazon S3. Users are experiencing slow upload requests to the website.The company needs to reduce coupling within the application and improve website performance A solutions architect must design the most operationally efficient process for image uploads Which combination of actions should the solutions architect take to meet these requirements'? (Select TWO.)
Question52: An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table. What is me MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?
Question53: A company has several Amazon EC2 instances set up m a private subnet for security reasons. These instances host applications that read and write large amounts of data to end from Amazon S3 regularly. Currently subnet routing directs all the traffic destined for the internet through a NAT gateway. The company wants to optimize the overall coat without impacting the ability of the application to communication Amazon S3 or the outside internet.What should a solutions architect do to optimize costs?
Question54: A data science team requires storage for nightly log processing. The size and number of logs is unknown and will persist for 24 hours only. What is the MOST cost-effective solution?
Question55: A company hosts a training site on a fleet of Amazon EC2 instances. The company anticipates that its new course which consists of dozens of training videos on the site, will be extremely popular when it is released in1 weekWhat should a solutions architect do to minimize the anticipated server load?
Question56: A company needs to run its external website on Amazon EC2 instances and on-premises virtualized servers The AWS environment has a 1 GB AWS Direct Connect connection to the data center The application has IP addresses that will not change The on-premises and AWS servers are able to restart themselves while maintaining the same IP address if a failure occurs Some website users have to add their vendors to an allow list, so the solution must have a fixed IP address The company needs a solution with the lowest operational overhead to handle this split traffic What should a solutions architect do to meet these requirements?
Question57: A solutions architect must create a highly available bastion host architecture. The solution needs to be resilient within a single AWS Region and should require only minimal effort to maintain.What should the solutions architect do to meet these requirements?
Question58: A company is hosting 60 TB of production-level data in an Amazon S3 bucket A solutions architect needs to bring that data on premises for quarterly audit requirements This export of data must be encrypted while in transit The company has low network bandwidth in place between AWS and its on-premises data center.What should the solutions architect do to meet these requirements?
Question59: A company has established a new AWS account. The account is newly provisioned and no changes have been made to the default settings The company is concerned about the security of the AWS account root user What should be done to secure the root user?
Question60: A company wants to move its on-premises network attached storage (NAS) to AWS The company wants to make the data available to any Linux instances within its VPC and ensure changes are automatically synchronized across all instances accessing the data store The majority of the data is accessed very rarely, and some files are accessed by multiple users at the same time Which solution meets these requirements and is MOST cost-effective?
Question61: A meteorological startup company has a custom web application to sell weather data to its users online. The company uses Amazon DynamoDB to store is data and wants to bu4d a new service that sends an alert to the managers of four Internal teams every time a new weather event is recorded. The company does not want true new service to affect the performance of the current application What should a solutions architect do to meet these requirement with the LEAST amount of operational overhead?
Question62: A pharmaceutical company is developing a new drug. The volume of data that the company generates has grown exponentially over the past few months. The company's researchers regularly require a subset of the entire dataset to be immediately available with minimal lag. However, the entire dataset does not need to be accessed on a daily basis. All the data currently resides in on-premises storage arrays, and the company wants to reduce ongoing capital expenses.Which storage solution should a solutions architect recommend to meet these requirements?
Question63: A company hosts its application in the AWS Cloud. The application runs on Amazon EC2 instances behind an Elastic Load Balancer in an Auto Scaling group and with an Amazon DynamoDB table. The company wants to ensure the application can be made available in another AWS Region with minimal downtime.What should a solutions architect do to meet these requirements with the LEAST amount of downtime?
Question64: A company wants to track its daily AWS resource usage to avoid reaching service quotas unexpectedly The company needs to receive notifications when any service quota is exceeded Which combination of actions should a solutions architect take to meet this requirement? (Select TWO.)
Question65: A company runs a three-tier web application in a VPC across multiple Availability Zones Amazon EC2 instances run in an Auto Scaling group tor the application tier The company needs to make an automated scaling plan that will analyze each resource's daily and weekly historical workload trends The configuration must scale resources appropriately according to both the forecast and live changes in utilization Which scaling strategy should a solutions architect recommend to meet these requirements?
Question66: A company has a Microsoft NET application that runs on an on-premises Windows Server. The application stores data by using an Oracle Database Standard Edition server. The company is planning a migration to AWS and wants to minimize development changes while moving the application. The AWS application environment should be highly available.Which combination of actions should the company take to meet these requirements? (Select TWO.)
Question67: A social media company is building a feature tor its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users.Which solution meets these requirements with the MOST scalability?
Question68: A company has an Amazon S3 bucket that contains confidential information in its production AWS account The company has turned on AWS CloudTrail for the account. The account sends a copy of its logs to Amazon CloudWatch Logs. The company has configured the S3 bucket to log read and write data events.A company auditor discovers that some objects in the S3 bucket have been deleted A solutions architect must provide the auditor with information about who deleted the objects What should the solutions architect do to provide this information?
Question69: A company is running a photo hosting service in the us-east-1 Region. The service enables users across multiple countries to upload and view photos. Some photos are heavily viewed tor months, and others are viewed for less than a week. The application allows uploads of up to 20 MB for each photo. The service uses the photo metadata to determine which photos to display to each user.Which solution provides the appropriate user access MOST cost-effectively?
Question70: A company's security team requests that network traffic be captured in VPC Flow Logs The logs will be frequently accessed for 90 days and then accessed intermittently What should a solutions architect do to meet these requirements when configuring the logs?
Question71: A disaster relief company is designing a new solution to analyze real-time csv data. The data is collected by a network of thousands of research stations met are distributed across the world. The data volume is consistent and constant, and the size of each data We is 512 KB. The company needs to stream the data and analyze the data in real time.Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)
Question72: A company is building a website that relies on reading and writing to an Amazon DynamoDB database The website experiences high traffic during normal business hours, but the traffic declines drastically overnight and during weekends The company is concerned about operating costs Which solution will meet the website's traffic demands MOST cost-effectively?
Question73: A solutions architect is designing the cloud architecture for a company that needs to host hundreds of machine learning models for its users Dunng startup, the models need to load up to 10 GB of data from Amazon S3 into memory, out they do not need disk access Most of the models are used sporadically but the users expect all of them to be highly available and accessible with low latency.Which solution meets the requirements and is MOST cost-effective1?
Question74: A company wants to migrate its MySQL database from on premises to AWS. The company recently experienced a database outage that significantly impacted the business To ensure this does not happen again the company wants a reliable database solution on AWS that minimizes data loss and stores every transaction on at least two nodes Which solution meets these requirements?
Question75: A company has a web application hosted over 10 Amazon EC2 instances with traffic directed by Amazon Route 53 The company occasionally experiences a timeout error when attempting to browse the application The networking team finds that some DNS queries return IP addresses of unhealthy instances resulting in the timeout error What should a solutions architect implement to overcome these timeout errors?
Question76: A company plant to host a survey website on AWS The company anticipates an unpredictable amount of traffic This traffic results m asynchronous updates to the database. The company wants to ensure mat writes to the database hosted on AWS do not gel dropped How should the company write its application to hand to these database requests?
Question77: A company needs to save the results from a medical trial to an Amazon S3 repository. The repository must allow a few scientists to add new dies and must restrict all other users to read-only access No users can have the ability to modify or delete any files in the repository. The company must heap every lie in the repository for a minimum of 1 year after its creation date.Which solution will meet these requirements?
Question78: A company serves a multilingual website from a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB) This architecture is currently running in the us-west-1 Region but is exhibiting high request latency for users located in other parts of the world The website needs to serve requests quickly and efficiently regardless of a user's location However the company does not want to recreate the existing architecture across multiple Regions.How should a solutions architect accomplish this?
Question79: A company operates a two-tier application for image processing. The application uses two Availability Zones, each with one public subnet and one private subnet. An Application Load Balancer (ALB) for the web tier uses the public subnets. Amazon EC2 instances for the application tier use the private subnets.Users report that the application is running more slowly than expected. A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses. A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution.What should the solutions architect recommend to meet this requirement?
Question80: A company is hosting a static website on Amazon S3 and is using Amazon Route 53 for DNS. The website is experiencing increased demand from around the world. The company must decrease latency for users who access the website.Which solution meets these requirements MOST cost-effectively?
Question81: A company stores use' data in AWS The data is used continuously with peak usage during business hours Access patterns vary with some data not being used for months at a time A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability.Which storage solution meets these requirements?
Question82: A trucking company is deploying an application that will track the GPS coordinates of all the company's trucks The company needs a solution that will generate real-time statistics based on metadata lookups with high read throughput and microsecond latency The database must be fault tolerant and must minimize operational overhead and development effort.Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)
Question83: A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not traverse the internet What should the solutions architect do to accomplish this? (Select TWO.)
Question84: A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance. New company management wants to ensure the application is highly available.What should a solutions architect do to meet this requirement?
Question85: A company has an automobile sales website that stores its listings m a database on Amazon RDS When an automobile is sold the listing needs to be removed from the website and the data must be sent to multiple target systems.Which design should a solutions architect recommend?
Question86: A company has an application that generates a large number of lies, each approximately 5 MB in size. The files are stored in Amazon S3. Company policy requires the files to be stored for 4 years before they can be deleted Immediate accessibility is always required as the files contain critical business data that is not easy to reproduce. The files are frequently accessed in the first 30 days of the object creation but are rarely accessed after the first 30 days Which storage solution is MOST cost-effective?
Question87: An application runs on Amazon EC2 instances across multiple Availability Zones The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer The application performs best when the CPU utilization of the EC2 instances is at or near 40%.What should a solutions architect do to maintain the desired performance across all instances in the group?
Question88: A solutions architect observes that a nightly batch processing job is automatically scaled up for 1 hour before the desired Amazon EC2 capacity is reached The peak capacity is the same every night and the batch jobs always start at 1 AM The solutions architect needs to find a cost-effective solution that will allow for the desired EC2 capacity to be reached quickly and allow the Auto Scaling group to scale down after the batch jobs are complete What should the solutions architect do to meet these requirements^
Question89: A company's legacy application is currently relying on a single-instance Amazon RDS MySQL database without encryption. Due to new compliance requirements all existing and new data in this database must be encrypted.How should this be accomplished?
Question90: A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard A solutions architect needs to design a solution that can handle large traffic spikes process the mobile game updates in order of receipt and store the processed updates in a highly available database The company also wants to minimize the management overhead required to maintain the solution What should the solutions architect do to meet these requirements?
Question91: A company must migrate 20 TB of data from a data centre to the AWS Cloud within 30 days. The company's network bandwidth is limited to 15 Mbps and cannot exceed 70% utilization.What should a solutions architect do to meet these requirements?
Question92: A company recently expanded globally and wants to make its application accessible to users in those geographic locations. The application is deployed on Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group. The company needs the ability to shift traffic from resources in one region to another.What should a solutions architect recommend?
Question93: A company captures ordered clickstream data from multiple websites and uses batch processing to analyze the data. The company receives 100 million event records, all approximately 1 KB in size, each day. The company loads the data into Amazon Redshift each night, and business analysts consume the data.The company wants to move toward near-real-time data processing for timely insights. The solution should process the streaming data while requiring the least possible operational overhead.Which combination of AWS services will meet these requirements MOST cost-effectively? (Select TWO.)
Question94: A company runs an internet-facing web application on AWS. The company uses Amazon Route 53 for DNS management and has a public hosted zone lo route traffic from the internet to the application. The company wants to tog DNS response codes to help system administrators perform any root cause analysis in the future.Which solution will meet these requirements?
Question95: A solution architect is designing an application for a two-step order across. The first step is synhronous and must return to the user with little latency. The second step takes longer so it will be implemented in a separate component. Orders must be processed exacity once and in the order in which they are received.How should the solutions architect integrate these components?
Question96: A customer is running an application on Amazon EC2 instances hosted in a private subnet of a VPC. The EC2 instances are configured in an Auto Scaling group behind an Elastic Load Balancer (ELB). The EC2 instances use a NAT gateway outbound internet access However, the EC2 instances are not able to connect to the public internet to download software updates.
Question97: A company's website is used to sell products to the public The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) There is also an Amazon CloudFront distribution and AWS WAF Is being used to protect against SQL injection attacks The ALB is the origin for the CloudFront distribution A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website What should a solutions architect do to protect the application?
Question98: A solutions architect needs to host a high performance computing (HPC) workload in the AWS Cloud. The workload will run on hundreds of Amazon EC2 instances and will require parallel access to a shared file system to enable distributed processing of large datasets. Datasets will be accessed across multiple instances simultaneously. The workload requires access latency within 1 ms. After processing has completed, engineers will need access to the dataset for manual postprocessing.Which solution will meet these requirements?
Question99: A solutions architect is designing a high performance computing (HPC) workload on Amazon EC2 The EC2 instances need to communicate to each other frequently and require network performance with low latency and high throughput Which EC2 configuration meets these requirements?
Question100: A company wants to design its cloud architecture so that its workloads are resilient, can consistently perform their intended functions correctly, and can recover from failure quickly Which pillar of the AWS Well-Architected Framework does this architecture represent?
Question101: A company recently implemented hybrid cloud connectivity using AWS Direct Connect and is migrating data to Amazon S3. The company is looking for a fully managed solution that will automate and accelerate the replication of data between the on-premises storage systems and AWS storage services.Which solution should a solutions architect recommend to keep the data private?
Question102: A ride-sharing company stores historical service usage data as structured csv data files in Amazon S3 A data analyst needs to perform SQL queries on this data A solutions architect must recommend a solution that optimizes cost-effectiveness for the queries Which solution meets these requirements?
Question103: A manufacturing company has machine sensors that upload csv files to an Amazon S3 bucket These csv files must be converted into images and must be made available as soon as possible for the automatic generation of graphical reports.The images become irrelevant after 1 month, but the csv files must be kept to train machine learning (ML) models twice a year. The ML trainings and audits are planned weeks in advance.Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO )
Question104: A company's facility has badge readers at every entrance throughout the building. When badges are scanned, the readers send a message over HTTPS to indicate who attempted to access that particular entrance.A solutions architect must design a system to process these messages from the sensors. The solution must be highly available, and the results must be made available for the company's security team to analyze.Which system architecture should the solutions architect recommend?
Question105: A company runs demonstration environments for its customers on Amazon EC2 instances. Each environment is isolated in its own VPC. The company's operations team needs to be notified when RDP or SSH access to an environment has been established.What should a solutions architect recommend to meet these requirements?
Question106: A company recently launched a new service that involves medical images The company scans the images and sends them from its on-premises data center through an AWS Direct Connect connection to Amazon EC2 instances After processing is complete, the images are stored in an Amazon S3 bucket A company requirement states that the EC2 instances cannot be accessible through the internet The EC2 instances run in a private subnet, which has a default route back to the on-premises data center for outbound internet access Usage of the new service is increasing rapidly A solutions architect must recommend a solution that meets the company's requirements and reduces the Direct Connect charges.Which solution accomplishes these goals MOST cost-effectively?
Question107: A company is hosting multiple websites for several lines of business under its registered parent domain Users accessing these websites will be routed to appropriate backend Amazon EC2 instances based on the subdomain The websites host static webpages images, and server-side scripts like PHP and JavaScript.Some of the websites experience peak access during the first two hours of business with constant usage throughout the rest of the day A solutions architect needs to design a solution that will automatically adjust capacity to these traffic patterns while keeping costs low.Which combination of AWS services or features will meet these requirements? (Select TWO )
Question108: A company is developing a new online gaming application. The application will run on Amazon EC2 instances in multiple AWS Regions and will have a high number of globally distributed users A solutions architect must design the application to optimize network latency for the users.Which actions should the solutions architect take to meet these requirements? (Select TWO.)
Question109: A solutions architect is redesigning a monolithic application to be a loosely coupled application composed of two microservices: Microservice A and Microservice B Microservice A places messages in a mam Amazon Simple Queue Service (Amazon SOS) queue for Microservice B to consume When Microservice B fails to process a message after four retries, the message needs to be removed from the queue and stored for further investigation.What should the solutions architect do to meet these requirements?
Question110: A company manages its own Amazon EC2 instances that run MySQL databases The company is manually managing replication and scaling as demand increases or decreases The company needs a new solution that simplifies the process of adding or removing compute capacity to or from its database tier as needed The solution also must offer improved performance, scaling, and durability with minimal effort from operations Which solution meets these requirements'?
Question111: A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code. The database credentials needs to be removed from the Lambda source code. The credentials must then be securely stored and rotated on a on-going basis to meet security policy requirements.What should a solutions architect recommend meet these requirements?
Question112: A company wants to improve the availability and performance of its hybrid application. The application consists of a stateful TCP-based workload hosted on Amazon EC2 instances in different AWS Regions and a stateless UDP-based workload hosted on premises.Which combination of actions should a solutions architect take to improve availability and performance?(Select TWO.)
Question113: The financial application at a company stores monthly reports in an Amazon S3 bucket. The vice president of finance has mandated that ail access to these reports be logged and that any modifications to the tog files be detected Which actions can a solutions architect take to meet these requirements?
Question114: A solutions architect is creating a new VPC design There are two public subnets for the load balancer, two private subnets for web servers and two private subnets for MySQL The web servers use only HTTPS The solutions architect has already created a security group tor the load balancer allowing port 443 from 0 0 0 0/0 Company policy requires that each resource has the teas! access required to still be able to perform its tasks Which additional configuration strategy should the solutions architect use to meet these requirements?
Question115: A company has created an isolated backup of its environment in another Region The application is running in warm standby mode and is fronted by an Application Load Balancer (ALB) The current failover process is manual and requires updating a DNS alias record to point to the secondary ALB in another Region What should a solutions architect do to automate the failover process?
Question116: A company hosts an application on multiple Amazon EC2 instances The application processes messages from an Amazon SQS queue writes to an Amazon RDS table and deletes the message from the queue Occasional duplicate records are found in the RDS table. The SQS queue does not contain any duplicate messages.What should a solutions architect do to ensure messages are being processed once only?
Question117: A company wants lo share data that is collected from sell-driving cars with the automobile community. The data will be made available (rom within an Amazon S3 bucket. The company wants to minimize its cost of making this data available to other AWS accounts.What should a solutions architect do to accomplish this goal?
Question118: A company runs an on-premises application The company is planning to move the application to containers by using Kubernetes The company wants to migrate the application to AWS to reduce the overhead of container infrastructure management A solutions architect must configure the environment to allow deployment of the company's own custom Amazon Machine Image (AMI) to nodes Which solution will meet these requirements with the LEAST operational overhead'?
Question119: A company is designing a new web service that will run on Amazon EC2 instances behind an Elastic Load Balancer. However many of the web service clients can only reach IP addresses whitelisted on their firewalls.What should a solutions architect recommend to meet the clients' needs?
Question120: A company uses Amazon Redshift for to data warehouse. The company wants to ensure high durability for its data in case of any component failure. What should a solution architect recommend?
Question121: An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about300 MB of data each month. The data is stored in JSON format The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.Which solution meets these requirements MOST cost-effectively?
Question122: A company is using AWS Key Management Service (AWS KMS) customer master keys (CMKs) to encrypt AWS Lambda environment variables A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables.Which steps must the solutions architect take to implement the correct permissions? (Select TWO.)
Question123: A company is building a web application that serves a content management system.The content management system runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The EC2 instances run in an Auto Scaling group across multiple Availability Zones Users are constantly adding and updating files blogs and other website assets in the content management system.A solutions architect must implement a solution in which all the EC2 instances share up-to-date website content with the least possible lag time Which solution meets these requirements''
Question124: A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage.The application tier is hosted on Amazon EC2 instances The company's IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days What should a solutions architect do to meet this requirement with the LEAST operational effort?
Question125: A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer Based on the application's history the company anticipates a spike in traffic during a holiday each year A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users.Which solution will meet these requirements'?
Question126: A solutions architect is designing the cloud architecture for a new application that is being deployed on AWS.The application's users will interactively download and upload files. Files that are more than 90 days old will be accessed less frequently than newer files, but all files need to be instantly available. The solutions architect must ensure that the application can scale to store petabytes of data with maximum durability.Which solution meets these requirements?
Question127: A law firm needs to share information with the public. The information includes hundreds of files that must be publicly readable. Modifications or deletions of the files by anyone before a designated future date are prohibited.Which solution will meet these requirements in the MOST secure way?
Question128: A company uses an Amazon S3 bucket to store static images for its website. The company configured permissions to allow access to Amazon S3 objects by privileged users only. What should a solutions architect do to protect against data loss? (Select TWO.)
Question129: A company wants to build an immutable infrastructure for its software applications The company wants to test the software applications before sending traffic to them The company seeks an efficient solution that limits the effects of application bugs Which combination of steps should a solutions architect recommend? {Select TWO)
Question130: A company is migrating its application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster behind an Application Load Balancer (ALB). The disaster recovery (DR) requirements for the application include the ability to fail over to another AWS Region with minimal downtime.Which combination of actions should a solutions architect take to meet this requirement? (Select TWO.)
Question131: A company currently has 250 TB of backup files stored in Amazon S3 in a vendor's proprietary format. Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3. The company wants to minimize the data transfer charges associated with this conversion What should a solutions architect do to accomplish this?
Question132: A computer is reviewing a recent migration of a three-tier application to a VPC. The security team discover that the principle of lest privilege is not being applied to Amazon EC2 security group ingress and egress rules between the application tiers.What should a solution architect do to connect issue?
Question133: A medical records company is hosting an application on Amazon EC2 instances. The application processes customer data files that are stored on Amazon S3. The EC2 instances are hosted in public subnets. The EC2 instances access Amazon S3 over the internet, but they do not require any other network access.A new requirement mandates that the network traffic for file transfers take a private route and not be sent over the internet.Which change to the network architecture should a solutions architect recommend to meet this requirement"?
Question134: A solutions architect is designing the cloud architecture for a new application being deployed on AWS. The process should run in parallel while adding and removing application nodes as needed based on the number of fobs to be processed. The processor application is stateless. The solutions architect must ensure that the application is loosely copied and the job items are durably stored Which design should the solutions architect use?
Question135: A large international university has deployed all of its compute services in the AWS Cloud. These services include Amazon EC2. Amazon RDS. and Amazon DynamoDB. The university currently relies on many custom scripts to back up its infrastructure. However, the university wants to centralize management and automate data backups as much as possible by using AWS native options.Which solution will meet these requirements?
Question136: A company is deploying an application that processes streaming data in near-teal time. The company plans to use Amazon EC2 instances for the workload The network architecture must be configurable to provide the lowest possible latency between nodes.Which networking solution meets these requirements?
Question137: A company has a web application that includes an embedded NoSQL database The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone.A recent increase in traffic requires the application to be highly available and for the database to be eventually consistent Which solution will meet these requirements with the LEAST operational overhead*?
Question138: A company is running a media application in an on-premises data center and has accumulated 500 TB of data The company needs to migrate the data from the application s existing network-attached file system to AWS Users rarely access data that is older than 1 year Which solution meets these requirements MOST cost-effectively'
Question139: A company is managing health records on-peruses. The company must keep these records Indefinitely, disable any modifications to the records once they are stored, and granularly audit access at all levels. The chief technology officer (CTO) is concerned because there are already millions of record not being used by any application, and the current infrastructure is running out of space. The CTO has requested solutions architect design a solution to move easting data and support future records.Which services can the solutions architect recommend to meet these requirements?
Question140: A company's order fulfillment service uses a MySQL database The database needs to support a large number of concurrent queries and transactions Developers are spending time patching and tuning the database This is causing delays in releasing new product features The company wants to use cloud-based services to help address this new challenge The solution must allow the developers to migrate the database with little or no code changes and must optimize performance Which service should a solutions architect use to meet these requirements'?
Question141: A company is launching a new application deployed on an Amazon Elastic Container Service (Amazon ECS) cluster and is using the Fargate launch type tor ECS tasks The company is monitoring CPU and memory usage because it is expecting high traffic to the application upon its launch However the company wants to reduce costs when utilization decreases What should a solutions architect recommend?
Question142: A solutions architect is designing a new hybrid architecture to extend a company s on-premises infrastructure to AWS The company requires a highly available connection with consistent low latency to an AWS Region.The company needs to minimize costs and is willing to accept slower traffic if the primary connection fails What should the solutions architect do to meet these requirements?
Question143: An administrator of a large company wants to monitor for and prevent any cryptocurrency-related attacks on the company's AWS accounts Which AWS service can the administrator use to protect the company against attacks?
Question144: A company asks a solutions architect to design a new network architecture for its on-premises applications.The company has five application VPCs Each application VPC supports a different application. All the application VPCs need to reach a shared services VPC for enterprise services. The application VPCs need to communicate with each other.The number of VPCs will increase as the company grows The company needs a solution that minimizes operational overhead during setup and maintenance Which solution will meet these requirements?
Question145: A company processes large amounts of data. The output data is stored in Amazon S3 Standard storage in an S3 bucket, where it is analyzed for 1 month. The data must remain immediately accessible after the 1-month analysis period.Which storage solution meets these requirements MOST cost-effectively?
Question146: A company is running several business applications in three separate VPCs within the us-east-1 Region. The applications must be able to communicate between VPCs. The applications also must be able to consistently send hundreds of gigabytes of data each day to a latency-sensitive application that runs in a single on-premises data center.A solutions architect needs to design a network connectivity solution that maximizes cost-effectiveness.Which solution meets these requirements?
Question147: A company recently migrated multiple applications and databases from an on-premises data center to the AWS Cloud. Most of the applications run on AWS Fargate. and some of the applications run on Amazon EC2 instances Most of the databases run on Amazon RDS, and a small number of databases run on EC2 Instances.All the applications and databases must be available 24 hours a day. 7 days a week. The company uses AWS Organizations to manage AWS accounts. A solutions architect must recommend how to minimize the cost of these workloads over the next 3 years Which solution meets these requirements?
Question148: A company is designing a new application that runs in a VPC on Amazon EC2 instances. The application stores data in Amazon S3 and uses Amazon DynamoDB as its database For compliance reasons, the company prohibits all traffic between the EC2 instances and other AWS services from passing over the public internet What can a solutions architect do to meet this requirement?
Question149: A development team is collaborating with another company to create an integrate product. The other company needs to access an Amazon Simple Queue Service (Amazon SOS) queue that is contained in the development team's account. The other company wants to poll the queue without giving up its own account permissions to do so.How should a solutions architect provide access to the 303 queue7
Question150: A solutions architect wants all new users to have specific complexity requirements and mandatory rotation periods tor IAM user passwords What should the solutions architect do to accomplish this?
Question151: A development team stores its Amazon RDS MySQL DB instance user name and password credentials in a configuration file The configuration file is stored as plaintext on the root device volume of the team's Amazon EC2 instance When the team's application needs to reach the database it reads the file and loads the credentials into the code The team has modified the permissions of the configuration file so that only the application can read its content A solutions architect must design a more secure solution What should the solutions architect do to meet this requirement1?
Question152: A company runs an online marketplace web application on AWS. The application serves hundreds of thousands of users during peak hours. The company needs a scalable, near-real-time solution to share the details of millions of financial transactions with several other internal applications Transactions also need to be processed to remove sensitive data before being stored in a document database for low-latency retrieval What should a solutions architect recommend to meet these requirements?
Question153: A company is migrating a large, mission-critical database to AWS. A solutions architect has decided to use an Amazon RDS for MySQL Multi-AZ DB instance that Is deployed with 80,000 Provisioned IOPS for storage The solutions architect is using AWS Database Migration Service (AWS DMS) to perform the data migration.The migration is taking longer than expected, and the company wants to speed up the process. The company's network team has ruled out bandwidth as a limiting factor.Which actions should the solutions architect take to speed up the migration? (Select TWO.)
Question154: A company has migrated several applications to AWS in the past 3 months. The company wants to know the breakdown of costs for each of these applications. The company wants to receive a regular report that includes this information.Which solution will meet these requirements MOST cost-effectively?
Question155: What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?
Question156: A company is using a VPC peering strategy to connect its VPCs in a single Region to allow for cross-communication. A recent increase in account creations and VPCs has made it difficult to maintain the VPC peering strategy, and the company expects to grow to hundreds of VPCs. There are also new requests to create site-to-site VPNs some of the VPCs. A solution architect has been tasked with creating a centrally managed networking setup for multiple account, VPCs and VPNs.Which networking solution these requirements?
Question157: A company has a web application that users access from around the world The company has web servers in multiple AWS Regions to support the traffic A solutions architect must configure an Amazon Route 53 routing policy to send traffic to only the active web servers Which configuration meets this requirement?
Question158: A company has a three-tier environment on AWS that ingests sensor data from its users' devices The traffic flows through a Network Load Balancer (NIB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier that makes database calls What should a solutions architect do to improve the security of data in transit to the web tier?
Question159: A company needs to migrate a large amount of data from an on-premises storage area network (SAN) to Amazon S3 The SAN currently has 200 TB of data and is receiving an additional 20 TB of data each month The company has a 500 Mbps connection to the internet What should the company do to migrate the data to Amazon S3 in the LEAST amount of time?
Question160: A company is developing a video conversion application hosted on AWS The application will be available in two tiers: a free tier and a paid tier. Users in the paid tier will have their videos converted first and then the free tier users will have their videos converted Which solution meets these requirements and is MOST cost-effective?
Question161: A company has three AWS accounts Management Development and Production. These accounts use AWS services only in the us-east-1 Region All accounts have a VPC with VPC Flow Logs configured to publish data to an Amazon S3 bucket in each separate account For compliance reasons the company needs an ongoing method to aggregate all the VPC flow logs across all accounts into one destination S3 bucket in the Management account.What should a solutions architect do to meet these requirements with the LEAST operational overhead?
Question162: A company build an application that gives users the ability to check in to places they visit, rank the places, and add reviews about their experiences. The application is successful and is experiencing a rapid increase in the number of users every month.The company uses a single Amazon RDS for MySQL DB instance for its database. The company fears that the database might not be able to handle the load for the upcoming month because the DB instance has activated alarms that are related to resource exhaustion.A solutions architect must design a solution that prevents service interruptions at the database layer. The solutions architect also must minimize any changes to code.Which solution meets these requirements?
Question163: A company wants to enforce strict security guidelines on accessing AWS Cloud resources as the company migrates production workloads from its data centers. Company management wants all users to receive permissions according to their job roles and functions.Which solution meets these requirements with the LEAST operational overhead?
Question164: A company has a financial application that produces reports. The reports average 50 KB in size and are stored in Amazon S3. The reports are frequently accessed during the first week after production and must be stored for several years The reports must be retrievable within 6 hours Which solution meets these requirements MOST cost-effectively1?
Question165: An ecommerce company uses an Amazon Aurora DB cluster to store customer transactions. The company also maintains a separate Amazon DynamoDB table that contains item sales information The company wants the DB cluster to invoke a recently deployed AWS Lambda function to update the DynamoDB table every time a row is inserted into the database Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)
Question166: A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Single-AZ DB instance Management wants to eliminate single points of failure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code Which solution meets these requirements?
Question167: A company has been running a web application with an Oracle relational database in an on-premises data center for the past 15 years. The company must migrate the database to AWS. The company needs to reduce operational overhead without having to modify the application's code.Which solution meets these requirements?
Question168: A survey company has gathered data for several years from areas the United States. The company hosts the data in an Amazon S3 bucket that is 3 TB m size and growing. The company has started to share the data with a European marketing firm that has S3 buckets The company wants to ensure that its data transfer costs remain as low as possible Which solution will meet these requirements?