Welcome to your AWS Free Test - 4 Name Email Phone 1. Question:A company is managing health records on-premises. The company must keep these records indefinitely, disable any modifications to the records once they are stored, and granularly audit access at all levels. The chief technology officer (CTO) is concerned because there are already millions of records not being used by any application, and the current infrastructure is running out of space The CTO has requested a solutions architect design a solution to move existing data and support future records Which services can the solutions architect recommend to meet these requirements'?Select 1 option(s): Use AWS DataSync to move existing data to AWS. Use Amazon S3 to store existing and new data Enable Amazon S3 object lock and enable AWS CloudTrail with data events. Use AWS Storage Gateway to move existing data to AWS Use Amazon S3 to store existing and new data. Enable Amazon S3 object lock and enable AWS CloudTrail with management events. Use AWS DataSync to move existing data to AWS Use Amazon S3 to store existing and new data Enable Amazon S3 object lock and enable AWS CloudTrail with management events. Use AWS Storage Gateway to move existing data to AWS Use Amazon Elastic Block Store (Amazon EBS) to store existing and new data Enable Amazon S3 object lock and enable Amazon S3 server access logging2. Question:A company needs to implement a relational database with a multi-Region disaster recovery Recovery Point Objective (RPO) of 1 second and an Recovery Time Objective (RTO) of 1 minute. Which AWS solution can achieve this?Select 1 option(s): Amazon Aurora Global Database Amazon DynamoDB global tables. Amazon RDS for MySQL with Multi-AZ enabled. Amazon RDS for MySQL with a cross-Region snapshot copy.3. Question: A company delivers files in Amazon S3 to certain users who do not have AWS credentials. These users must be given access for a limited lime. What should a solutions architect do to securely meet these requirements?Select 1 option(s): Enable public access on an Amazon S3 bucket. Generate a presigned URL to share with the users. Encrypt files using AWS KMS and provide keys to the users. Create and assign IAM roles that will grant GetObject permissions to the users.4. Question:A company wants to host a scalable web application on AWS. The application will be accessed by users from different geographic regions of the world. Application users will be able to download and upload unique data up to gigabytes in size. The development team wants a cost-effective solution to minimize upload and download latency and maximize performance. What should a solutions architect do to accomplish this?Select 1 option(s): Use Amazon S3 with Transfer Acceleration to host the application. Use Amazon S3 with CacheControl headers to host the application. Amazon EC2 with Auto Scaling and Amazon CloudFront to host the application. Use Amazon EC2 with Auto Scaling and Amazon ElastiCache to host the application.5. Question: A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB) The website has a mix of dynamic and static content Users around the globe are reporting that the website is slowWhich set of actions will improve website performance for users worldwide?Select 1 option(s): Create an Amazon CloudFront distribution and configure the ALB as an origin Then update the Amazon Route 53 record to point to the CloudFront distribution Create a latency-based Amazon Route 53 record for the ALB Then launch new EC2 instances with larger instance sizes and register the instances with the ALB Launch nev. EC2 instances hosting the same web application in different Regions closer to the users. Then register the instances with the same ALB using cross-Region VPC peering Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances Then update an Amazon Route 53 record to point to the S3 buckets6. Question:A solutions architect is designing a mission-critical web application. It will consist of Amazon EC2 instances behind an Application Load Balancer and a relational database. The database should be highly available and fault tolerant. Which database implementations will meet these requirements?Select 2 option(s): Amazon Redshift Amazon DynamoDB Amazon RDS for MySQL MySQL-compatible Amazon Aurora Multi-AZ Amazon RDS for SQL Server Standard Edition Mufti-AZ7. Question:A solutions architect is tasked with transferring 750 TB of data from a network-attached file system located at a branch office to Amazon S3 Glacier The solution must avoid saturating the branch office's low-bandwidth internet connection. What is the MOST cost-effective solution?Select 1 option(s): Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly Create a bucket policy to enforce a VPC endpoint Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination Create a bucket policy to enforce a VPC endpoint Mount the network-attached file system to Amazon S3 and copy the files directly. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier8. Question:A solutions architect needs to design a low-latency solution for a static single-page application accessed by users utilizing a custom domain name. The solution must be serverless, encrypted in transit, and cost-effective. Which combination of AWS services and features should the solutions architect use?Select 2 option(s): Amazon S3 Amazon EC2 AWS Fargate Amazon CloudFront Elastic Load Balancer9. Question: A solutions architect is designing an architecture for a new application that requires low network latency and high network throughput between Amazon EC2 instances. Which component should be included in the architectural design?Select 1 option(s): An Auto Scaling group with Spot Instance types. A placement group using a cluster placement strategy. A placement group using a partition placement strategy. An Auto Scaling group with On-Demand instance types.10. Question: a website on Amazon S3. The website serves petabytes of outbound traffic monthly, which accounts for most of the company's AWS costs. What should a solutions architect do to reduce costs?Select 1 option(s): Configure Amazon CloudFront with the existing website as the origin. Move the website to Amazon EC2 with Amazon EBS volumes for storage. Use AWS Global Accelerator and specify the existing website as the endpoint. Rearchitect the website to run on a combination of Amazon API Gateway and AWS Lambda.11. Question: An Amazon EC2 administrator created the following policy associated with an IAM group containing several users.{ "Version" : "2012-10-17", "Statement" : [{ "Effect" : "Allow", "Action" : "ec2 : TerminatesInstances", "Resource" : "*", "Condition" : { "IpAdress" : { "aws : sourceIp": "10.100.100.0/24" } } }, { "Effect" : "Deny", "Action" : "ec2:* ", "Resource": "*", "Condition" : { "StringNotEquals": { "ec2 : Region": "us-east-1" } } } ] } What is the effect of this policy? Select 1 option(s): Users can terminate an EC2 instance in any AWS Region except us-east-1. Users can terminate an EC2 instance with the IP address 10.100. 1001 in the us-east-1 Region Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.100.254 Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100. 100. 25412. Question: A solutions architect has created a new AWS account and must secure AWS account root user access Which combination of actions will accomplish this? Select 2 option(s): Ensure the root user uses a strong password Enable multi-factor authentication to the root user Store root user access keys in an encrypted Amazon S3 bucket Add the root user to a group containing administrative permissions. Apply the required permissions to the root user with an inline policy document13. Question:A solutions architect is designing the cloud architecture for a new application being deployed on AWS The process should run in parallel while adding and removing application nodes as needed based on the number of jobs to be processed The processor application is stateless The solutions architect must ensure that the application is loosely coupled and the job items are durably stored Which design should the solutions architect use?Select 1 option(s): Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch configuration that uses the AMI Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to add and remove nodes based on CPU usage Create an Amazon SQS queue to hold the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch configuration that uses the AMI Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to add and remove nodes based on network usage Create an Amazon SQS queue to hold the jobs that needs to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of items in the SQS queue Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of messages published to the SNS topic.14. Question:A company must re-evaluate its need for the Amazon EC2 instances it currently has provisioned in an Auto Scaling group. At present, the Auto Scaling group is configured for minimum of two instances and a maximum of four instances across two Availability zones. A Solutions architect reviewed Amazon CloudWatch metrics and found that CPU utilization is consistently low for the EC2 instances. What should the solutions architect recommend to maximize utilization while ensuring the application remains fault tolerant?Select 1 option(s): Remove some EC2 instances to increase the utilization of remaining instances. Increase the Amazon Elastic Block Store (Amazon EBS) capacity of instances with less CPU utilization. Modify the Auto Scaling group scaling policy to scale in and out based on a higher CPU utilization metric. Create a new launch configuration that uses smaller instance types. Update the existing Auto Scaling group.15. Question:A solutions architect is designing an application for a two-step order process The first step is synchronous and must return to the user with little latency The second step takes longer, so it will be implemented in a separate component Orders must be processed exactly once and in the order in which they are receivedHow should the solutions architect integrate these components?Select 1 option(s): Use an Amazon SQS FIFO queues Use an AWS Lambda function along with Amazon SQS standard queues Create an SNS topic and subscribe an Amazon SQS FIFO queue to that topic Create an SNS topic and subscribe an Amazon SQS Standard queue to that topic.16. Question:A company needs to share an Amazon S3 bucket with an external vendor. The bucket owner must be able to access all objects. Which action should be taken to share the S3 bucket?Select 1 option(s): Update the bucket to be a Requester Pays bucket Update the bucket to enable cross-origin resource sharing (CPORS) Create a bucket policy to require users to grant bucket-owner-full when uploading objects Create an IAM policy to require users to grant bucket-owner-full control when uploading objects.17. Question:A company is using a VPC peering strategy to connect its VPCs in a single Region to allow for cross-communication. A recent increase in account creations and VPCs has made it difficult to maintain the VPC peering strategy, and the company expects to grow to hundreds of VPCs. There are also new requests to create site-to-site VPNs with some of the VPCs. A solutions architect has been tasked with creating a centrally networking setup for multiple accounts, VPNS, and VPNs.Which networking solution meets these requirements?Select 1 option(s): Configure shared VPCs and VPNs and share to each other Configure a hub-and-spoke and route all traffic through VPC peering. Configure an AWS Direct Connect between all VPCs and VPNs. Configure a transit gateway with AWS Transit Gateway and connected all VPCs and VPNs.18. Question:A solutions architect is designing a solution where users will De directed to a backup static error page it the primary website is unavailable The primary website's DNS records are hosted in Amazon Route 53 where their domain is pointing to an Application Load Balancer (ALB)Which configuration should the solutions architect use to meet the company's needs while minimizing changes and infrastructure overhead? Select 1 option(s): Point a Route 53 alias record to an Amazon CloudFront distribution with the ALB as one of its origins Then, create custom error pages for the distribution Set up a Route 53 active-passive failover configuration Direct traffic to a static error page hosted within an Amazon S3 bucket when Route 53 health checks determine that the ALB endpoint is unhealthy Update the Route 53 record to use a latency-based routing policy Add the backup static error page hosted within an Amazon S3 bucket to the record so the traffic is sent to the most responsive endpoints Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance hosting a static error page as endpoints Route 53 will only send requests to the instance if the health checks fail for the ALB19. Question:A solutions architect is optimizing a website for an upcoming musical event Videos of the performances will be streamed in real time and then will be available on demand The event is expected to attract a global online audience Which service will improve the performance of both the real-time and on-demand streaming?Select 1 option(s): Amazon CloudFront AWS Global Accelerator Amazon Route 53 Amazon S3 Transfer Acceleration20. Question:A company captures clickstream data from multiple websites and analyzes it using batch processing. The data is loaded nightly into Amazon Redshift and is consumed by business analysts. The company wants to move towards near-real-time data processing for timely insights. The solution should process the streaming data with minimal effort and operational overhead. Which combination of AWS services are MOST cost-effective for this solution?Select 2 option(s): Amazon EC2 AWS Lambda Amazon Kinesis Data Streams Amazon Kinesis Data Firehose Amazon Kinesis Data Analytics21. Question:A company decides to migrate its three-tier web application from on premises to the AWS Cloud. The new database must be capable of dynamically scaling storage capacity and performing table joins. Which AWS service meets these requirements?Select 1 option(s): Amazon Aurora Amazon RDS for SqlServer Amazon DynamoDB Streams Amazon DynamoDB on-demand22. Question:A company's website provides users with downloadable historical performance reports. The website needs a solution that will scale to meet the company's website demands globally. The solution should be cost effective, limit the? provisioning of Into and provide the fastest possible response time. Which combination should a solutions architect recommend to meet these requirements?Select 1 option(s): Amazon CloudFront and Amazon S3 AWS Lambda and Amazon Dynamo Application Load Balancer with Amazon EC2 Auto Scaling Amazon Route 53 with internal Application Load Balances23. Question:A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an S3 bucket. Upon payment, content will be available for download for 14 days before the user is denied access Which of the following would be the LEAST complicated implementation?Select 1 option(s): Use an Amazon CloudFront distribution with an origin access identity (OAI) Configure the distribution with an Amazon S3 origin to provide access to the file through signed URL’s Design a Lambda function to remove data that is older than 14 days. Use an S3 bucket and provide direct access to the tile Design the application to track purchases in a DynamoDH table Configure a Lambda function to remove data that is older than 14 days based on a query to Amazon DynamoDB Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs Design the application to sot an expiration of 14 days for the URL Use an Amazon CloudFront distribution with an OAI Configure the distribution with an Amazon S3 origin to provide access to the file through signed URLs Design the application to set an expiration of 60 minutes for the URL and recreate the URL as necessary24. Question:A company uses Amazon S3 as its object storage solution. The company has thousands of S3 it uses to store data. Some of the S3 bucket have data that is accessed less frequently than others. A solutions architect found that lifecycle policies are not consistently implemented or are implemented partially. resulting in data being stored in high-cost storage. Which solution will lower costs without compromising the availability of objects?Select 1 option(s): Use S3 ACLs Use Amazon Elastic Block Store EBS) automated snapshots Use S3 intelligent-Tiering storage Use S3 One Zone-infrequent Access (S3 One Zone-IA).25. Question:A company has an application that calls AWS Lambda functions A recent code review found database credentials stored in the source code The database credentials need to be removed from the Lambda source code The credentials must then be securely stored and rotated on an ongoing basis to meet security policy requirements What should a solutions architect recommend to meet these requirements?Select 1 option(s): Store the password in AWS CloudHSM Associate the Lambda function with a role that can retrieve the password from CloudHSM given its key ID Store the password in AWS Secrets Manager Associate the Lambda function with a role that can retrieve the password from Secrets Manager given its secret ID Move the database password to an environment variable associated with the Lambda function Retrieve the password from the environment variable upon execution Store the password in AWS Key Management Service (AWS KMS) Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key ID26. Question:A company has a website running on Amazon EC2 instances across two Availability Zones. The company is expecting spikes in traffic on specific holidays, and wants to provide a consistent user experience. How can a solutions architect meet this requirement?Select 1 option(s): Use step scaling. Use simple scaling. Use lifecycle hooks. Use scheduled scaling.27. Question:A company has created a VPC with multiple private subnets in multiple Availability Zones (AZs) and one public subnet in one of the AZs. The public subnet is used to launch a NAT gateway. There are instance in the private subnet that use a NAT gateway to connect to the internet. In case is used of an AZ failure, the company wants to ensure that the instance are not all experiencing internet connectivity issues and that there is a backup plan ready.Which solution should a solutions architect recommend that is MOST highly available? Select 1 option(s): Create a new public subnet with a NAT gateway in the same AZ Distribute the traffic between the two NAT gateways Create an Amazon EC2 NAT instance in a now public subnet Distribute the traffic between the NAT gateway and the NAT instance Create public subnets In each AZ and launch a NAT gateway in each subnet Configure the traffic from the private subnets In each A2 to the respective NAT gateway Create an Amazon EC2 NAT instance in the same public subnet Replace the NAT gateway with the NAT instance and associate the instance with an Auto Scaling group with an appropriate scaling policy.28. Question:A company hosts a static website within an Amazon S3 bucket. A solutions architect needs to ensure that data can be recovered in case of accidental deletion.Which action will accomplish this?Select 1 option(s): Enable Amazon S3 versioning Enable Amazon S3 Intelligent-Tiering. Enable an Amazon S3 lifecycle policy Enable Amazon S3 cross-Region replication.29. Question:A solutions architect is designing a solution to access a catalog of images and provide users with the ability to submit requests to customize images Image customization parameters will be in any request sent to an AWS API Gateway API The customized image will be generated on demand, and users will receive a link they can click to view or download their customized image The solution must be highly available for viewing and customizing images What is the MOST cost-effective solution to meet these requirements?Select 1 option(s): Use Amazon EC2 instances to manipulate the original image into the requested customization Store the original and manipulated images in Amazon S3 Configure an Elastic Load Balancer in front of the EC2 instances Use AWS Lambda to manipulate the original image to the requested customization Store the original and manipulated images in Amazon S3 Configure an Amazon CloudFront distribution with the S3 bucket as the origin Use AWS Lambda to manipulate the original image to the requested customization Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB Configure an Elastic Load Balancer in front of the Amazon EC2 instances Use Amazon EC2 instances to manipulate the original image into the requested customization Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB Configure an Amazon CloudFront distribution with the S3 bucket as the origin30. Question:A company currently operates a web application backed by an Amazon RDS MySQL database It has automated backups that are run daily and are not encrypted A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed The company will make at least one encrypted backup before destroying the old backupsWhat should be done to enable encryption for future backups'' Select 1 option(s): Enable default encryption for the Amazon S3 bucket where backups are stored Modify the backup section of the database configuration to toggle the Enable encryption check box Create a snapshot of the database Copy it to an encrypted snapshot Restore the database from the encrypted snapshot Enable an encrypted read replica on RDS for MySQL Promote the encrypted read replica to primary Remove the original database instance31. Question:A company has a large Microsoft SharePoint deployment running on-premises that requires Microsoft Windows shared file storage. The company wants to migrate this workload to the AWS Cloud and is considering various storage options. The storage solution must be highly available and integrated with Active Directory for access control. Which solution will satisfy these requirements?Select 1 option(s): Configure Amazon EFS storage and set the Active Directory domain for authentication. Create an SMB file share on an AWS Storage Gateway file gateway in two Availability Zones. Create an Amazon S3 bucket and configure Microsoft Windows Server to mount it as a volume. Create an Amazon FSx for Windows File Server file system on AWS and set the Active Directory domain for authentication.32. Question:Organizers for a global event want to put daily reports online as static HTML pages The pages are expected to generate millions of views from users around the world The files are stored in an Amazon S3 bucket A solutions architect has been asked to design an efficient and effective solution Which action should the solutions architect take to accomplish this?Select 1 option(s): Generate presigned URLs for the files Use cross-Region replication to all Regions Use the geoproximity feature of Amazon Route 53 Use Amazon CloudFront with the S3 bucket as its origin33. Question:A product team is creating a new application that will store a large amount of data The data will be analyzed hourly and modified by multiple Amazon EC2 Linux instances The application team believes the amount of space needed will continue to grow for the next 6 monthsWhich set of actions should a solutions architect take to support these needs'?Select 1 option(s): Store the data in an Amazon EBS volume Mount the EBS volume on the application instances Store the data in an Amazon EFS file system Mount the file system on the application instances Store the data in Amazon S3 Glacier Update the vault policy to allow access to the application instances Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA) Update the bucket policy to allow access to the application instances34. Question: A data science team requires storage for nightly log processing. The size and number of logs is unknown and will persist for 24 hours only What is the MOST cost-effective solution?Select 1 option(s): Amazon S3 Glacier Amazon S3 Standard Amazon S3 intelligent-Tiering Amazon S3 One Zone-Infrequent Access {S3 One Zone-IA)35. Question:A company has multiple AWS accounts, for various departments. One of the departments wants to share an Amazon S3 bucket with all other department. Which solution will require the LEAST amount of effort?Select 1 option(s): Enable cross-account S3 replication for the bucket Create a pre signed URL tor the bucket and share it with other departments Set the S3 bucket policy to allow cross-account access to other departments Create IAM users for each of the departments and configure a read-only IAM policy36. Question:A company hosts its product information webpages on AWS. The existing solution uses multiple Amazon C2 instances behind an Application Load Balancer in an Auto Scaling group. The website also uses a custom DNS name and communicates with HTTPS only using a dedicated SSL certificate. The company is planning a new product launch and wants to be sure that users from around the world have the best possible experience on the new website. What should a solutions architect do to meet these requirements?Select 1 option(s) Redesign the application to use Amazon CloudFront. Redesign the application to use AWS Elastic Beanstalk. Redesign the application to use a Network Load Balancer. Redesign the application to use Amazon S3 static website hosting.37. Question:A solutions architect is designing a two-tier web application The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet Security is a high priority for the company How should security groups be configured in this situation?Select 2 option(s): Configure the security group for the web tier to allow inbound traffic on port 443 from 0 0 0 0/0 Configure the security group for the web tier to allow outbound traffic on port 443 from 0 0 0 0/0 Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier38. Question:A company serves content to its subscribers across the world using an application running on AWS The application has several Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB) Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block access for certain countries Which action will meet these requirements?Select 1 option(s): Modify the ALB security group to deny incoming traffic from blocked countries. Modify the security group for EC2 instances to deny incoming traffic from blocked countries. Use Amazon CloudFront to serve the application and deny access to blocked countries. Use ALB listener rules to return access denied responses to incoming traffic from blocked countries.39. Question:A company running an on-premises application is migrating the application to AWS to increase its elasticity and availability. The current architecture uses a Microsoft SQL Server database with heavy read activity. The company wants to explore alternate database options and migrate database engines, if needed. Every 4 hours, the development team does a full copy of the production database to populate a test database. During this period, users experience latency.What should a solution architect recommend as replacement database? Select 1 option(s): Use Amazon Aurora with Multi-AZ Aurora Replicas and restore from mysqldump for the test database. Use Amazon Aurora with Multi-AZ Aurora Replicas and restore snapshots from Amazon RDS for the test database. Use Amazon RDS for MySQL with a Multi-AZ deployment and read replicas, and use the standby instance for the test database. Use Amazon RDS for SQL Server with a Multi-AZ deployment and read replicas, and restore snapshots from RDS for the test database.40. Question:A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB) The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposuresWhat should the solutions architect recommend?Select 1 option(s): Leverage Amazon CloudFront with the ALB endpoint as the origin Deploy an appropriate managed rule for AWS WAF and associate it with the ALB Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances41. Question:A solutions architect is designing storage for a high performance computing (HPC) environment based on Amazon Linux. The workload stores and processes a large amount of engineering drawings that requireshared storage and heavy computing. Which storage option would be the optimal solution?Select 1 option(s): Amazon Elastic File System (Amazon EFS) Amazon FSx for Lustre Amazon EC2 instance store Amazon EBS Provisioned IOPS SSD (io1)42. Question:A company has been storing analytics data in an Amazon RDS instance for the past few years. The company asked a solutions architect to find a solution that allows users to access this data using an API The expectation is that the application will experience periods of inactivity but could receive bursts of traffic within seconds Which solution should the solutions architect suggest?Select 1 option(s): Set up an Amazon API Gateway and use Amazon ECS. Set up an Amazon API Gateway and use AWS Elastic Beanstalk. Set up an Amazon API Gateway and use AWS Lambda functions Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling43. Question:A solutions architect is deploying a distributed database on multiple Amazon EC2 instances The database stores all data on multiple instances so it can withstand the loss of an instance The database requires block storage with latency and throughput to support several million transactions per second per server Which storage solution should the solutions architect use?Select 1 option(s): Amazon EBS Amazon EC2 instance store Amazon EFS Amazon S344. Question:A solutions architect is designing a system to analyze the performance of financial markets while the markets are closed The system will run a series of compute-intensive jobs for 4 hours every night The time to complete the compute jobs is expected to remain constant, and jobs cannot be interrupted once started Once completed, the system is expected to run for a minimum of 1 year Which type of Amazon EC2 instances should be used to reduce the cost of the system?Select 1 option(s): Spot Instances On-Demand Instances Standard Reserved Instances Scheduled Reserved Instances45. Question: A company runs an application using Amazon ECS. The application creates resized versions of an original image and then makes Amazon S3 API calls to store the resized images in Amazon S3. How can a solutions architect ensure that the application has permission to access Amazon S3?Select 1 option(s): Update the S3 role in AWS IAM to allow read/write access from Amazon ECS, and then relaunch the container. Create an IAM role with S3 permissions, and then specify that role as the taskRoleArn in the task definition. Create a security group that allows access from Amazon ECS to Amazon S3, and update the launch configuration used by the ECS cluster. Create an IAM user with S3 permissions, and then relaunch the Amazon EC2 instances for the ECS cluster while logged in as this account.46. Question:A company wants to host a web application on AWS that will communicate to a database within a VPC. The application should be highly available. What should a solutions architect recommend?Select 1 option(s): Create two Amazon EC2 instances to host the web servers behind a load balancer, and then deploy the database on a large instance. Deploy a load balancer in multiple Availability Zones with an Auto Scaling group for the web servers, and then deploy Amazon RDS in multiple Availability Zones. Deploy a load balancer in the public subnet with an Auto Scaling group for the web servers, and then deploy the database on an Amazon EC2 instance in the private subnet. Deploy two web servers with an Auto Scaling group, configure a domain that points to the two web servers, and then deploy a database architecture in multiple Availability Zones.47. Question:A company's web application is using multiple Linux Amazon EC2 instances and storing data on Amazon EBS volumes. The company is looking for a solution to increase the resiliency of the application in case of a failure and to provide storage that complies with atomicity, consistency, isolation, and durability (ACID).What should a solutions architect do to meet these requirements?Select 1 option(s): Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones Mount an instance store on each EC2 instance Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon EFS and mount a target on each instance. Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)48. Question:A company currently has 250 TB of backup files stored in Amazon S3 in a vendor's proprietary format. Using a Linux-based software application provided by the vendor, the company wants to retrieve files from Amazon S3, transform the files to an industry-standard format, and re-upload them to Amazon S3. The company wants to minimize the data transfer charges associated with this conversation. What should a solution architect do to accomplish this?Select 1 option(s): Install the conversion software as an Amazon S3 batch operation so the data is transformed without leaving Amazon S3. Install the conversion software onto an on-premises virtual machines. Perform the transformation and re-upload the files to Amazon S3 from the virtual machine. Use AWS Snowball Edge device to expert the data and install the conversion software onto the devices. Perform the data transformation and re-upload the files to Amazon S3 from the Snowball devices. Launch an Amazon EC2 instance in the same Region as Amazon S3 and install the conversion software onto the instance. Perform the transformation and re-upload the files to Amazon S3 from the EC2 instance.49. Question:A solutions architect is designing a high performance computing (HPC) workload on Amazon EC2 The EC2 instances need to communicate to each other frequently and require network performance with low latency and high throughput Which EC2 configuration meets these requirements'?Select 1 option(s): Launch the EC2 instances in a cluster placement group in one Availability Zone Launch the EC2 instances in a spread placement group in one Availability Zone Launch the EC2 instances in an Auto Scaling group in two Regions and peer the VPCs Launch the EC2 instances in an Auto Scaling group spanning multiple Availability Zones50. Question: A company is using Site-to-Site VPN connections for secure connectivity to its AWS Cloud resources from on premises. Due to an increase in traffic across the VPN connections to the Amazon EC2 instances, users are experiencing slower VPN connectivity Which solution will improve the VPN throughput?Select 1 option(s): Implement multiple customer gateways for the same network to scale the throughput Use a transit gateway with equal cost multipath routing and add additional VPN tunnels Configure a virtual private gateway with equal cost multipath routing and multiple channels Increase the number of tunnels in the VPN configuration to scale the throughput beyond the default limit51. Question:A company runs a high performance computing (HPC) workload on AWS. The workload required low-latency network performance and high network throughput with tightly coupled node-to-node communication. The Amazon EC2 instances are properly sized for compute and storage capacity, and are launched using default options. What should a solutions architect propose to improve the performance of the workload?Select 1 option(s): Choose a cluster placement group while launching Amazon EC2 instances Choose dedicated instance tenancy while launching Amazon EC2 instances Choose an Elastic Inference accelerator while launching Amazon EC2 instances Choose the required capacity reservation while launching Amazon EC2 instances.0Choose the required capacity reservation while launching Amazon EC2 instances.52. Question: A solutions architect is designing a VPC with public and private subnets. The VPC and subnets use IPv4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability. An interne! gateway is used to provide internet access for the public subnets. The private subnets require access to the internet to allow Amazon EC2 instances to download software updates. What should the solutions architect do to enable internet access for the private subnets?Select 1 option(s): Create three NAT gateways, one for each public subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT gateway in its AZ Create three NAT instances, one for each private subnet in each AZ. Create a private route table for each AZ that forwards non-VPC traffic to the NAT instance in its AZ Create a second internet gateway on one of the private subnets. Update the route table for the private subnets that forward non-VPC traffic to the private internet gateway Create an egress only internet gateway on one of the public subnets. Update the route table for the private subnets that forward non-VPC traffic to the egress only internet gateway53. Question:A company has an application that posts messages to Amazon SQS Another application polls the queue and processes the messages in an l/O-intensive operation The company has a service level agreement (SLA) that specifies the maximum amount of time that can elapse between receiving the messages and responding to the users Due to an increase in the number of messages the company has difficulty meeting its SLA consistently.What should a solutions architect do to help improve the application's processing time and ensure it can handle the load at any level?Select 1 option(s): Create an Amazon Machine Image (AMI) from the instance used for processing Terminate the instance and replace it with a larger size. Create an Amazon Machine Image (AMI) from the instance used for processing Terminate the instance and replace it with an Amazon EC2 Dedicated Instance Create an Amazon Machine image (AMI) from the instance used for processing Create an Auto Scaling group using this image in its launch configuration Configure the group with a target tracking policy to keep us aggregate CPU utilization below 70% Create an Amazon Machine Image (AMI) from the instance used for processing Create an Auto Scaling group using this image in its launch configuration Configure the group with a target tracking policy based on the age of the oldest message in the SQS queue54. Question:A company recently deployed a two-tier application in two Availability Zones in the us-east-1 Region. The databases are deployed in a private subnet while the web servers are deployed in a public subnet. An internet gateway is attached to the VPC. The application and database run on Amazon EC2 instances. The database servers are unable to access patches on the internet. A solutions architect needs to design a solution that maintains database security with the least operational overhead. Which solution meets these requirements?Select 1 option(s): Deploy a NAT gateway inside the public subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route. Deploy a NAT gateway inside the private subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route. Deploy two NAT instances inside the public subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route. Deploy two NAT instances inside the private subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.Time is Up!