AWS Certified Solutions Architect - Associate SAA-C03 證照考古題

AWS 架構師證照考古題大全 20240927

AWS Certified Solutions Architect - Associate SAA-C03

Amazon Web Service（AWS 亞馬遜）全系列考古題，2024年最新題庫，持續更新，全網最完整。AWS 證照含金量高，自我進修、跨足雲端產業必備近期版本更新，隨時追蹤最新趨勢變化。

QUESTION 161

A company hosts a data lake on AWS. The data lake consists of data in Amazon S3 and Amazon RDS for PostgreSQL. The company needs a reporting solution that provides data visualization and includes all the data sources within the data lake. Onlythe company's management team should have full access to all the visualizations. The rest of the company should have only limited access.

Which solution will meet these requirements?

A.       Create an analysis in Amazon QuickSight. Connect all the data sources and create new datasets. Publish dashboards to visualize the data. Share the dashboards with the appropriate IAM roles.

B.       Create an analysis in Amazon QuickSight. Connect all the data sources and create new datasets. Publish dashboards tovisualize the data. Share the dashboards with the appropriate users and groups.

C.      Create an AWS Glue table and crawler for the data in Amazon S3. Create an AWS Glue extract, transform, and load(ETL)job to produce reports. Publish the reports to Amazon S3. Use S3 bucket policies to limit access to the reports.

D.      Create an AWS Glue table and crawler for the data in Amazon S3. Use Amazon Athena Federated Query to access datawithin Amazon RDS for PostgreSQL. Generate reports by using Amazon Athena. Publish the reports to Amazon S3.Use S3 bucket policies to limit access to the reports.

Correct Answer: B

Section: (none)

想要提升您的雲端運營效率？點擊這裡 了解小豬科技的專業方案。

QUESTION 162

A company needs to move data from an Amazon EC2 instance to an Amazon S3 bucket. The company must ensure that noAPI calls and no data are routed through public internet routes. Only the EC2 instance can have access to upload data to the S3 bucket.

Which solution will meet these requirements?

A.       Create an interface VPC endpoint for Amazon S3 in the subnet where the EC2 instance is located.

Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.

B.       Create a gateway VPC endpoint for Amazon S3 in the Availability Zone where the EC2 instance is located. Attachappropriate security groups to the endpoint. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.

C.      Run the nslookup tool from inside the EC2 instance to obtain the private IP address of the S3 bucket's service APIendpoint. Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucket. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.

D.      Use the AWS provided, publicly available ip-ranges.json file to obtain the private IP address of the S3 bucket's service API endpoint. Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucket. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.

Correct Answer: B

Section: (none)

QUESTION 163

A company runs a global web application on Amazon EC2 instances behind an Application Load Balancer. The application stores data in Amazon Aurora The company needs to create a disaster recovery solution and can tolerate up to 30 minutes of downtime and potential data loss. The solution does not need to handle the load when the primary infrastructure is healthy. What should a solutions architect do to meet these requirements?

A.       Deploy the application with the required infrastructure elements in place. Use Amazon Route 53 to configure active-passive failover. Create an Aurora Replica in a second AWS Region

B.       Host a scaled-down deployment of the application in a second AWS Region. Use Amazon Route 53 to configure active-active failover. Create an Aurora Replica in the second Region.

C.      Replicate the primary infrastructure in a second AWS Region. Use Amazon Route 53to configure active- active failover. Create an Aurora database that is restored from the latest snapshot

D.      Back up data with AWS Backup. Use the backup to create the required infrastructure in a second AWS Region. Use Amazon Route 53to configure active-passive failover. Create an Aurora second primary instance in the second Region.

Correct Answer: A

Section: (none)

QUESTION 164

A company performs monthly maintenance on its AWS infrastructure. During these maintenance activities, the company needs to rotate the credentials for its Amazon RDS for MySQL databases across multiple AWS Regions.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Store the credentials as secrets in AWS Secrets Manager. Use multi-Region secret replication for the required Regions. Configure Secrets Manager to rotate the secrets on a schedule

B.       Store the credentials as secrets in AWS Systems Manager by creating a secure string parameter. Use multi-Region secret replication for the required Regions. Configure Systems Manager to rotate the secrets on a schedule.

C.      Store the credentials in an Amazon S3 bucket that has server-side encryption (SSE) enabled. Use Amazon EventBridge(Amazon CloudWatch Events) to invoke an AWS Lambda function to rotate the credentials.

D.      Encrypt the credentials as secrets by using AWS Key Management Service (AWS KMS) multi-Region customer managed keys. Store the secrets in an Amazon DynamoDB global table. Use an AWS Lambda function to retrieve the secrets from DynamoDB. Use the RDS API to rotate the secrets.

Correct Answer: A

Section: (none)

QUESTION 165

A payment processing company records all voice communication with its customers and stores the audio files in an AmazonS3 bucket. The company needs to capture the text from the audio files. The company must remove from the text any personally identifiable information (PII) that belongs to customers. What should a solutions architect do to meet these requirements?

A.       Process the audio files by using Amazon Kinesis Video Streams. Use an AWS Lambda function to scan for known PII patterns

B.       When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start an Amazon Textract task to analyze the call recordings

C.      Configure an Amazon Transcribe transcription job with PII redaction turned on. When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start the transcription job. Store the output in a separate S3 bucket

D.      Create an Amazon Connect contact flow that ingests the audio files with transcription turned on. Embed an AWS Lambda function to scan for known PII patterns. Use Amazon EventBridge (Amazon CloudWatch Events) to start the contact flow when an audio file is uploaded to the S3 bucket.

Correct Answer: C

Section: (none)

不要錯過小豬科技的專屬優惠，馬上註冊 您的雲端帳號。

QUESTION 166

A company has a business system that generates hundreds of reports each day. The business system saves the reports toa network share in CSV format. The company needs to store this data in the AWS Cloud in near-real time for analysis.

Which solution will meet these requirements with the LEAST administrative overhead?

A.       Use AWS DataSync to transfer the files to Amazon S3. Create a scheduled task that runs at the end of each day

B.       Create an Amazon S3 File Gateway. Update the business system to use a new network share from the S3 File Gateway.

C.      Use AWS DataSync to transfer the files to Amazon S3. Create an application that uses the DataSync API in the automation workflow

D.      Deploy an AWS Transfer for SFTP endpoint. Create a script that checks for new files on the network share and uploads the new files by using SFTP

Correct Answer: B

Section: (none)

QUESTION 167

A company stores confidential data in an Amazon Aurora PostgreSQL database in the ap-southeast-3 Region. The database is encrypted with an AWS Key Management Service (AWS KMS) customer managed key. The company was recently acquiredand must securely share a backup of the database with the acquiring company's AWS account in ap-southeast-3.

What should a solutions architect do to meet these requirements?

A.       Create a database snapshot. Copy the snapshot to a new unencrypted snapshot. Share the new snapshot with the acquiring company's AWS account

B.       Create a database snapshot. Add the acquiring company's AWS account to the KMS key policy. Share the snapshot with the acquiring company's AWS account.

C.      Create a database snapshot that uses a different AWS managed KMS key. Add the acquiring company's AWS account tothe KMS key alias. Share the snapshot with the acquiring company's AWS account.

D.      Create a database snapshot. Download the database snapshot. Upload the database snapshot to an Amazon S3 bucket.Update the S3 bucket policy to allow access from the acquiring company's AWS account.

Correct Answer: B

Section: (none)

QUESTION 168

A company hosts a serverless application on AWS. The application uses Amazon API Gateway, AWS Lambda, and anAmazon RDS for PostgreSQL database.The company notices an increase in application errors that result from database connection timeouts during times of peak traffic or unpredictable traffic. The company needs a solution that reduces theapplication failures with the least amount of change to the code.

What should a solutions architect do to meet these requirements?

A.       Reduce the Lambda concurrency rate.

B.       Enable RDS Proxy on the RDS DB instance.

C.      Resize the RDS DB instance class to accept more connections.

D.      Migrate the database to Amazon DynamoDB with on-demand scaling. 

Correct Answer: B

Section: (none)

QUESTION 169

A company is building a new dynamic ordering website. The company wants to minimize server maintenance and patching. Thewebsite must be highly available and must scale read and write capacity as quickly as possible to meet changes in user demand.

Which solution will meet these requirements?

A.       Host static content in Amazon S3. Host dynamic content by using Amazon API Gateway and AWS Lambda. Use Amazon DynamoDB with on-demand capacity for the database. Configure Amazon CloudFront to deliver the website content.

B.       Host static content in Amazon S3. Host dynamic content by using Amazon API Gateway and AWS Lambda. Use AmazonAurora with Aurora Auto Scaling for the database. Configure Amazon CloudFront to deliver the website content.

C.      Host all the website content on Amazon EC2 instances. Create an Auto Scaling group to scale the EC2 instances. Use an Application Load Balancer to distribute traffic. Use Amazon DynamoDB with provisioned write capacity for the database.

D.      Host all the website content on Amazon EC2 instances. Create an Auto Scaling group to scale the EC2 instances Use an Application Load Balancer to distribute traffic. Use Amazon Aurora with Aurora Auto Scaling for the database.

Correct Answer: A

Section: (none)

QUESTION 170

An online retail company has more than 50 million active customers and receives more than 25,000 orders each day. Thecompany collects purchase data for customers and stores this data in Amazon S3.Additional customer data is stored in Amazon RDS.

The company wants to make all the data available to various teams so that the teams can perform analytics. The solution mustprovide the ability to manage fine-grained permissions for the data and must minimize operational overhead

Which solution will meet these requirements?

A.       Migrate the purchase data to write directly to Amazon RDS. Use RDS access controls to limit access

B.       Schedule an AWS Lambda function to periodically copy data from Amazon RDS to Amazon S3. Create an AWS Glue crawler. Use Amazon Athena to query the data Use S3 policies to limit access

C.      Create a data lake by using AWS Lake Formation. Create an AWS Glue JDBC connection to Amazon RDS. Register the S3 bucket in Lake Formation. Use Lake Formation access controls to limit access

D.      Create an Amazon Redshift cluster. Schedule an AWS Lambda function to periodically copy data from Amazon S3 and Amazon RDS to Amazon Redshift. Use Amazon Redshift access controls to limit access

Correct Answer: C

Section: (none)

有技術問題？點擊這裡 聯絡我們的小豬科技專員。

QUESTION 171

A solutions architect needs to implement a solution to reduce a company's storage costs.All the company's data is in the Amazon S3 Standard storage class. The company must keep all data for at least 25 years.

Data from the most recent 2 years must be highly available and immediately retrievable. Which solution will meet these requirements? 

A.       Set up an S3 Lifecycle policy to transition objects to S3 Glacier Deep Archive immediately.

B.       Set up an S3 Lifecycle policy to transition objects to S3 Glacier Deep Archive after 2 years.

C.      Use S3 Intelligent-Tiering. Activate the archiving option to ensure that data is archived in S3 Glacier Deep Archive.

D.      Set up an S3 Lifecycle policy to transition objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately and to S3 Glacier Deep Archive after 2 years.

Correct Answer: B

Section: (none)

QUESTION 172

A company wants to migrate its existing on-premises monolithic application to AWS. The company wants to keep as much of the front-end code and the backend code as possible. However, the company wants to break the application into smallerapplications.A different team will manage each application. The company needs a highly scalable solution that minimizes operational overhead.

Which solution will meet these requirements?

A.       Host the application on AWS Lambda. Integrate the application with Amazon API Gateway

B.       Host the application with AWS Amplify. Connect the application to an Amazon API Gateway API that is integrated with AWS Lambda

C.      Host the application on Amazon EC2 instances. Set up an Application Load Balancer with EC2 instances in an Auto Scaling group as targets

D.      Host the application on Amazon Elastic Container Service (Amazon ECS). Set up an Application Load Balancer with Amazon ECS as the target

Correct Answer: D

Section: (none)

QUESTION 173

A company is preparing a new data platform that will ingest real-time streaming data from multiple sources. The company needs to transform the data before writing the data to Amazon S3. The company needs the ability to use SQL to query the transformed data.

Which solutions will meet these requirements? (Select TWO.)

A.       Use Amazon Kinesis Data Streams to stream the data. Use Amazon Kinesis Data Analytics to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3

B.       Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use AWS Glue to transform thedata and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3

C.      Use AWS Database Migration Service (AWS DMS) to ingest the data. Use Amazon EMR to transform the data and towrite the data to Amazon S3.Use Amazon Athena to query the transformed data from Amazon S3

D.      Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use Amazon Kinesis Data Analytics to transform the data and to

write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3

E.       Use Amazon Kinesis Data Streams to stream the data. Use AWS Glue to transform the data. Use Amazon Kinesis DataFirehose to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3

Correct Answer: AB

Section: (none)

QUESTION 174

A company has a three-tier web application that is deployed on AWS. The web servers are deployed in a public subnet in a VPC. The application servers and database servers are deployed in private subnets in the same VPC. The company hasdeployed a third-party virtual firewall appliance from AWS Marketplace in an inspection VPC. The appliance is configured withan IP interface that can accept IP packets. A solutions architect needs to integrate the web application with the appliance to inspect all traffic to the application before the traffic reaches the web server.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Create a Network Load Balancer in the public subnet of the application's VPC to route the traffic to the appliance for packet inspection.

B.       Create an Application Load Balancer in the public subnet of the application's VPC to route the traffic to the appliance for packet inspection.

C.      Deploy a transit gateway in the inspection VPC. Configure route tables to route the incoming packets through the transit gateway.

D.      Deploy a Gateway Load Balancer in the inspection VPC. Create a Gateway Load Balancer endpoint to receive the incoming packets and forward the packets to the appliance.

Correct Answer: D

Section: (none)

QUESTION 175

A company recently launched a variety of new workloads on Amazon EC2 instances in its AWS account. The company needs tocreate a strategy to access and administer the instances remotely and securely The company needs to implement a repeatable process that works with native AWS services and follows the AWS Well-Architected Framework.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Use the EC2 serial console to directly access the terminal interface of each instance for administration.

B.       Attach the appropriate IAM role to each existing instance and new instance. Use AWS Systems Manager Session Manager to establish a remote SSH session.

C.      Create an administrative SSH key pair. Load the public key into each EC2 instance. Deploy a bastion host in a public subnet to provide a tunnel for administration of each instance.

D.      Establish an AWS Site-to-Site VPN connection. Instruct administrators to use their local on-premises machines to connect directly to the instances by using SSH keys across the VPN tunnel.

Correct Answer: B

Section: (none)

要深入了解小豬科技的雲端服務？點擊這裡 探索我們的全方位解決方案。

QUESTION 176

A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3. The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard. The solution must not affect the speed of EC2 instance launches. How should the company move the data to Amazon S3 to meet these requirements?

A.       Use an Amazon CloudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose. Store the data in Amazon S3

B.       Launch an Amazon EMR cluster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.

C.      Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a schedule. Configure the Lambda function to send the EC2Auto Scaling status data directly to Amazon S3

D.      Use a bootstrap script during the launch of an EC2 instance to install Amazon Kinesis Agent. Configure Kinesis Agent to collect the EC2Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.

Correct Answer: A

Section: (none)

QUESTION 177

A company uses a popular content management system (CMS) for its corporate website. However, the required patching and maintenance are burdensome.The company is redesigning its website and wants a new solution. The website will be updatedfour times a year and does not need to have any dynamic content available. The solution must provide high scalability andenhanced security. Which combination of changes will meet these requirements with the LEAST operational overhead? (Select TWO.)

A.       Configure Amazon CloudFront in front of the website to use HTTPS functionality.

B.       Deploy an AWS WAF web ACL in front of the website to provide HTTPS functionality.

C.      Create and deploy an AWS Lambda function to manage and serve the website content.

D.      Create the new website and an Amazon S3 bucket. Deploy the website on the S3 bucket with static website hosting enabled.

E.       Create the new website. Deploy the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer.

Correct Answer: AD

Section: (none)

QUESTION 178

A company is building a containerized application on premises and decides to move the application to AWS. The application will have thousands of users soon

after it is deployed. The company is unsure how to manage the deployment of containers at scale. The company needs to deploy the containerized application in a highly available architecture that minimizes operational overhead. Which solution will meet these requirements?

A.       Store container images in an Amazon Elastic Container Registry (Amazon ECR) repository. Use an Amazon ElasticContainer Service (Amazon ECS) cluster with the AWS Fargate launch type to run the containers. Use target tracking to scale automatically based on demand.

B.       Store container images in an Amazon Elastic Container Registry (Amazon ECR) repository. Use an Amazon ElasticContainer Service (Amazon ECS) cluster with the Amazon EC2 launch type to run the containers. Use target tracking to scale automatically based on demand.

C.      Store container images in a repository that runs on an Amazon EC2 instance. Run the containers on EC2instances thatare spread across multiple Availability Zones. Monitor the average CPU utilization in Amazon CloudWatch. Launch new EC2 instances as needed.

D.      Create an Amazon EC2 Amazon Machine Image (AMI) that contains the container image. Launch EC2instances in anAuto Scaling group across multiple Availability Zones. Use an Amazon CloudWatch alarm to scale out EC2 instances when the average CPU utilization threshold is breached.

Correct Answer: A

Section: (none)

QUESTION 179

A company is running a business-citical web application on Amazon EC2 instances behind an Application Load Balancer. TheEC2instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database that is deployed ina single Availability Zone. The company wants the application to be highly available with minimum downtime and minimum loss of data. Which solution will meet these requirements with the LEAST operational effort?

A.       Place the EC2 instances in different AWS Regions. Use Amazon Route 53 health checks to redirect traffic Use Aurora PostgreSQL Cross-Region Replication.

B.       Configure the Auto Scaling group to use multiple Availability Zones. Configure the database as Multi-AZ. Configure an Amazon RDS Proxy instance for the database.

C.      Configure the Auto Scaling group to use one Availability Zone. Generate hourly snapshots of the database. Recover the database from the snapshots in the event of a failure.

D.      Configure the Auto Scaling group to use multiple AWS Regions. Write the data from the application to Amazon S3. Use S3Event Notifications to launch an AWS Lambda function to write the data to the database.

Correct Answer: B

Section: (none)

QUESTION 180

A company is migrating its on-premises PostgreSQL database to Amazon Aurora PostgreSQL. The on- premises databasemust remain online and accessible during the migration. The Aurora database must remain synchronized with the on-premises database.

Which combination of actions must a solutions architect take to meet these requirements? (Select TWO.)

A.       Create an ongoing replication task.

B.       Create a database backup of the on-premises database.

C.      Create an AWS Database Migration Service (AWS DMS) replication server.

D.      Convert the database schema by using the AWS Schema Conversion Tool (AWS SCT)

E.       Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor the database synchronization.

Correct Answer: AC

Section: (none)

立即註冊小豬科技，點擊這裡 開始您的雲端之旅！

QUESTION 181

A company is developing an ecommerce application that will consist of a load-balanced front end, a container-basedapplication, and a relational database.A solutions architect needs to create a highly available solution that operates with as little manual intervention as possible.

Which solutions meet these requirements? (Select TWO.) 

A.       Create an Amazon RDS DB instance in Multi-AZ mode.

B.       Create an Amazon RDS DB instance and one or more replicas in another Availability Zone.

C.      Create an Amazon EC2 instance-based Docker cluster to handle the dynamic application load.

D.      Create an Amazon Elastic Container Service (Amazon ECS) cluster with a Fargate launch type to handle the dynamic application load.

E.       Create an Amazon Elastic Container Service (Amazon ECS) cluster with an Amazon EC2 launch type to handle the dynamic application load.

Correct Answer: AD

Section: (none)

QUESTION 182

A solutions architect is designing the architecture of a new application being deployed to the AWS Cloud. The application willrun on Amazon EC2 On-Demand Instances and will automatically scale across multiple Availability Zones. The EC2 instanceswill scale up and down frequently throughout the day. An Application Load Balancer (ALB) will handle the load distribution. Thearchitecture needs to support distributed session data management. The company is willing to make changes to code if needed. What should the solutions architect do to ensure that the architecture supports distributed session data management?

A.       Use Amazon ElastiCache to manage and store session data.

B.       Use session affinity (sticky sessions) of the ALB to manage session data.

C.      Use Session Manager from AWS Systems Manager to manage the session.

D.      Use the GetSessionToken APl operation in AWS Security Token Service (AWS STS) to manage the session.

Correct Answer: A

Section: (none)

QUESTION 183

A company uses a three-tier web application to provide training to new employees. The application is accessed for only 12hours every day. The company is using an Amazon RDS for MySQL DB instance to store information and wants to minimize costs.

What should a solutions architect do to meet these requirements?

A.       Configure an IAM policy for AWS Systems Manager Session Manager. Create an IAM role for the policy. Update thetrust relationship of the role. Set up automatic start and stop for the DB instance.

B.       Create an Amazon ElastiCache for Redis cache cluster that gives users the ability to access the data from the cachewhen the DB instance is stopped. Invalidate the cache after the DB instance is started.

C.      Launch an Amazon EC2 instance. Create an IAM role that grants access to Amazon RDS. Attach the role to the EC2 instance. Configure a cron job to start and stop the EC2 instance on the desired schedule.

D.      Create AWS Lambda functions to start and stop the DB instance. Create Amazon EventBridge (Amazon CloudWatch Events) scheduled rules to invoke the Lambda functions. Configure the Lambda functions as event targets for the rules.

Correct Answer: D

Section: (none)

QUESTION 184

A company needs to save the results from a medical trial to an Amazon S3 repository. The repository must allow a few scientists to add new files and must restrict all other users to read-only access.No users can have the ability to modify or delete any files in the repository. The company must keep every file in the repository fora minimum of 1 year after its creation date.

Which solution will meet these requirements?

A.       Use S3 Object Lock in governance mode with a legal hold of 1 year.

B.       Use S3 Object Lock in compliance mode with a retention period of 365 days.

C.      Use an IAM role to restrict all users from deleting or changing objects in the S3 bucket. Use an S3 bucket policy to only allow the IAM role.

D.      Configure the S3 bucket to invoke an AWS Lambda function every time an object is added. Configure the function to trackthe hash of the saved object so that modified objects can be marked accordingly.

Correct Answer: B

Section: (none)

QUESTION 185

A company is migrating an application from on-premises servers to Amazon EC2instances. As part of the migration design requirements, a solutions architect must implement infrastructure metric alarms. The company does not need to take action if CPU utilization increases to more than 50% for a short burst of time. However, if the CPU utilization increases to more than 50%and read IOPS on the disk are high at the same time, the company needs to act as soon as possible. The solutions architect also must reduce false alarms.

What should the solutions architect do to meet these requirements?

A.       Create Amazon CloudWatch composite alarms where possible.

B.       Create Amazon CloudWatch dashboards to visualize the metrics and react to issues quickly.

C.      Create Amazon CloudWatch Synthetics canaries to monitor the application and raise an alarm.

D.      Create single Amazon CloudWatch metric alarms with multiple metric thresholds where possible.

Correct Answer: A

Section: (none)

有任何問題？聯絡專員，我們隨時為您服務！

QUESTION 186

A solutions architect needs to securely store a database user name and password that an application uses to access an Amazon RDS DB instance. The application that accesses the database runs on an Amazon EC2 instance. The solutions architect wants to create a secure parameter in AWS Systems Manager Parameter Store.

What should the solutions architect do to meet this requirement?

A.       Create an IAM role that has read access to the Parameter Store parameter. Allow Decrypt access to an AWS KeyManagement Service (AWS KMS) key that is used to encrypt the parameter.Assign this IAM role to the EC2 instance.

B.       Create an IAM policy that allows read access to the Parameter Store parameter. Allow Decrypt access to an AWS Key Management Service (AWS KMS) key that is used to encrypt the parameter.

Assign this IAM policy to the EC2 instance.

C.      Create an IAM trust relationship between the Parameter Store parameter and the EC2 instance. Specify Amazon RDS as a principal in the trust policy.

D.      Create an IAM trust relationship between the DB instance and the EC2 instance. Specify Systems Manager as a principal in the trust policy

Correct Answer: A

Section: (none)

QUESTION 187

A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance. The analytics software iswritten in PHP and uses a MySQL database. The analytics software, the web server that provides PHP, and the database server are all hosted on the EC2 instance. The application is showing signs of performance degradation during busy times and is presenting 5xx errors. The company needs to make the application scale seamlessly.

Which solution will meet these requirements MOST cost-effectively?

A.       Migrate the database to an Amazon RDS for MySQL DB instance. Create an AMI of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use an Application Load Balancer to distribute the load to each EC2 instance.

B.       Migrate the database to an Amazon RDS for MySQL DB instance. Create an AMI of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use Amazon Route 53weighted routing to distribute the load across the two EC2 instances.

C.      Migrate the database to an Amazon Aurora MySQL DB instance. Create an AWS Lambda function to stop the EC2instance and change the instance type. Create an Amazon CloudWatch alarm to invoke the Lambda function when CPU utilization surpasses 75%.

D.      Migrate the database to an Amazon Aurora MySQL DB instance. Create an AMI of the web application.Apply the AMI to alaunch template. Create an Auto Scaling group with the launch template. Configure the launch template to use a Spot Fleet. Attach an Application Load Balancer to the Auto Scaling group.

Correct Answer: A

Section: (none)

QUESTION 188

An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about 300 MB of data each month. The data is stored in JSON format. The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.

Which solution meets these requirements MOST cost-effectively?

A.       Amazon OpenSearch Service (Amazon Elasticsearch Service)

B.       Amazon S3 Glacier

C.      Amazon S3 Standard

D.      Amazon RDS for PostgreSQL

Correct Answer: C

Section: (none)

QUESTION 189

A company runs workloads on AWS. The company needs to connect to a service from an external provider. The service is hosted in the provider's VPC. According to the company's security team, the connectivity must be private and must be restricted to the target service. The connection must be initiated only from the company's VPC.

Which solution will meet these requirements?

A.       Create a VPC peering connection between the company's VPC and the provider's VPC. Update the route table to connect to the target service.

B.       Ask the provider to create a virtual private gateway in its VPC. Use AWS Privatelink to connect to the target service.

C.      Create a NAT gateway in a public subnet of the company's VPC. Update the route table to connect to the target service.

D.      Ask the provider to create a VPC endpoint for the target service. Use AWS PrivateLink to connect to the target service.

Correct Answer: D

Section: (none)

QUESTION 190

A company has created an image analysis application in which users can upload photos and add photo frames to their images.The users upload images and metadata to indicate which photo frames they want to add to their images. The application uses a single Amazon EC2instance and Amazon DynamoDB to store the metadata.

The application is becoming more popular, and the number of users is increasing. The company expects the number of concurrent users to vary significantly depending on the time of day and day of week. The company must ensure that the application can scale to meet the needs of the growing user base.

Which solution meets these requirements?

A.       Use AWS Lambda to process the photos. Store the photos and metadata in DynamoDB.

B.       Use Amazon Kinesis Data Firehose to process the photos and to store the photos and metadata

C.      Use AWS Lambda to process the photos. Store the photos in Amazon S3. Retain DynamoDB to store the metadata

D.      increase the number of EC2 instances to three. Use Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volumes to store the photos and metadata

Correct Answer: C

Section: (none)

想要深入了解小豬科技的雲端服務？點擊這裡 探索我們的全方位解決方案。

QUESTION 191

A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis. Which solution will meet these requirements with the LEAST operational overhead?

A.       Store the database credentials in the instance metadata. Use Amazon EventBridge (Amazon CloudWatch Events) rulesto run a scheduled AWS Lambda function that updates the RDS credentials and instance metadata at the same time.

B.       Store the database credentials in a configuration file in an encrypted Amazon S3 bucket. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and the credentials in the configuration file at the same time. Use S3 Versioning to ensure the ability to fall back to previous values.

C.      Store the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation for the secret. Attach the required permission to the EC2 role to grant access to the secret.

D.      Store the database credentials as encrypted parameters in AWS Systems Manager Parameter Store. Turn on automaticrotation for the encrypted parameters. Attach the required permission to the EC2 role to grant access to the encrypted parameters. 

Correct Answer: C

Section: (none)

QUESTION 192

A company is planning to use an Amazon DynamoDB table for data storage. The company is concerned about costoptimization. The table will not be used on most mornings. In the evenings, the read and write traffic will often be unpredictable. When traffic spikes occur, they will happen very quickly.

What should a solutions architect recommend?

A.       Create a DynamoDB table in on-demand capacity mode.

B.       Create a DynamoDB table with a global secondary index.

C.      Create a DynamoDB table with provisioned capacity and auto scaling.

D.      Create a DynamoDB table in provisioned capacity mode, and configure it as a global table.

Correct Answer: A

Section: (none)

QUESTION 193

A company runs an application on Amazon EC2 instances. The company needs to implement a disaster recovery (DR)solution for the application. The DR solution needs to have a recovery time objective (RTO) of less than 4 hours. The DRsolution also needs to use the fewest possible AWS resources during normal operations.

Which solution will meet these requirements in the MOST operationally efficient way? 

A.       Create Amazon Machine Images (AMIs) to back up the EC2 instances. Copy the AMIS to a secondary

AWS Region.Automate infrastructure deployment in the secondary Region by using AWS Lambda and custom scripts.

B.       Create Amazon Machine Images (AMIs) to back up the EC2 instances. Copy the AMIs to a secondary AWS Region. Automate infrastructure deployment in the secondary Region by using AWS CloudFormation.

C.      Launch EC2 instances in a secondary AWS Region. Keep the EC2 instances in the secondary Region active at all times.

D.      Launch EC2 instances in a secondary Availability Zone. Keep the EC2 instances in the secondary Availability Zone active a tall times.

Correct Answer: B

Section: (none)

QUESTION 194

A telemarketing company is designing its customer call center functionality on AWS. The company needs a solution that provides multiple speaker recognition and generates transcript files. The company wants to query the transcript files to analyze thebusiness patterns. The transcript files must be stored for 7 years for auditing purposes.

Which solution will meet these requirements?

A.       Use Amazon Rekognition for multiple speaker recognition. Store the transcript files in Amazon S3. Use machine learning models for transcript file analysis.

B.       Use Amazon Transcribe for multiple speaker recognition. Use Amazon Athena for transcript file analysis.

C.      Use Amazon Translate for multiple speaker recognition. Store the transcript files in Amazon Redshift Use SQL queries for transcript file analysis

D.      Use Amazon Rekognition for multiple speaker recognition. Store the transcript files in Amazon S3. Use Amazon Textract for transcript file analysis.

Correct Answer: B

Section: (none)

QUESTION 195

A company wants to manage Amazon Machine Images (AMIS). The company currently copies AMIs to the same AWS Region where the AMIS were created. The company needs to design an application that captures AWS API calls and sends alertswhenever the Amazon EC2 CreateImage API operation is called within the company's account.

Which solution will meet these requirements with the LEAST operational overhead? 

A.       Create an AWS Lambda function to query AWS CloudTrail logs and to send an alert when a CreateImage API call is detected.

B.       Configure AWS CloudTrail with an Amazon Simple Notification Service (Amazon SNS) notification that occurs when updated logs are sent to Amazon S3. Use Amazon Athena to create a new table and to query on CreateImage when an API call is detected.

C.      Create an Amazon EventBridge (Amazon CloudWatch Events) rule for the CreateImage API cal. Configure the targetas an Amazon Simple Notification Service (Amazon SNS) topic to send an alert when a CreateImage API call is detected.

D.      Configure an Amazon Simple Queue Service (Amazon SQS) FIFO queue as a target for AWS CloudTrail logs. Create an AWS Lambda function to send an alert to an Amazon Simple Notification Service (Amazon SNS) topic when a CreateImage API call is detected.

Correct Answer: C

Section: (none)

享受一流的雲端支持，馬上註冊 小豬科技！

QUESTION 196

A hospital wants to create digital copies for its large collection of historical written records. The hospital will continue to add hundreds of new documents each day. The hospital's data team will scan the documents and will upload the documents to the AWS Cloud

A solutions architect must implement a solution to analyze the documents, extract the medical information, and store the documents so that an application can run SQL queries on the data. The solution must maximize scalability and operational efficiency

Which combination of steps should the solutions architect take to meet these requirements? (Select TWO.) 

A.       Write the document information to an Amazon EC2 instance that runs a MySQl database

B.       Write the document information to an Amazon S3 bucket. Use Amazon Athena to query the data

C.      Create an Auto Scaling group of Amazon EC2 instances to run a custom application that processes the scanned files and extracts the medical information

D.      Create an AWS Lambda function that runs when new documents are uploaded. Use Amazon Rekognition to convert thedocuments to raw text. Use Amazon Transcribe Medical to detect and extract relevant medical information from the text

E.       Create an AWS Lambda function that runs when new documents are uploaded. Use Amazon Textract to convert thedocuments to raw text. Use Amazon Comprehend Medical to detect and extract relevant medical information from the text

Correct Answer: BE

Section: (none)

QUESTION 197

A company serves a dynamic website from a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB).Thewebsite needs to support multiple languages to serve customers around the world. The website's architecture is running in the us-west-1 Region and is exhibiting high request latency for users that are located in other parts of the world

The website needs to serve requests quickly and efficiently regardless of a user's location. However, the company does not want to recreate the existing architecture across multiple Regions What should a solutions architect do to meet these requirements?

A.       Replace the existing architecture with a website that is served from an Amazon S3 bucket. Configure an Amazon CloudFront distribution with the S3 bucket as the origin. Set the cache behavior settings to cache based on the Accept-Language request header.

B.       Configure an Amazon CloudFront distribution with the ALB as the origin. Set the cache behavior settings to cache based on the Accept-Language request header

C.      Create an Amazon API Gateway API that is integrated with the ALB. Configure the API to use the HTTP integration type. Setup an API Gateway stage to enable the API cache based on the Accept-Language request header

D.      Launch an EC2 instance in each additional Region and configure NGlNX to act as a cache server for that Region. Put all the EC2 instances and the ALB behind an Amazon Route 53 record set with a geolocation routing policy.

Correct Answer: B

Section: (none)

QUESTION 198

A company runs a shopping application that uses Amazon DynamoDB to store customer information. In case of data corruption, a solutions architect needs to design a solution that meets a recovery point objective (RPO) of 15 minutes and arecovery time objective (RTO) of 1 hour. What should the solutions architect recommend to meet these requirements?

A.       Configure DynamoDB global tables. For RPO recovery, point the application to a different AWS Region.

B.       Configure DynamoDB point-in-time recovery. For RPO recovery,restore to the desired point in time.

C.      Export the DynamoDB data to Amazon S3 Glacier on a daily basis. For RPO recovery, import the data from S3 Glacier to DynamoDB.

D.      Schedule Amazon Elastic Block Store (Amazon EBS) snapshots for the DynamoDB table every 15 minutes. For RPO recovery, restore the DynamoDB table by using the EBS snapshot.

Correct Answer: B

Section: (none)

QUESTION 199

A company has implemented a self-managed DNS solution on three Amazon EC2 instances behind a Network Load Balancer(NLB) in the us-west-2 Region. Most of the company's users are located in the United States and Europe. The company wants to improve the performance and availability of the solution. The companylaunches and configures three EC2 instances in the eu-west-1 Region and adds the EC2 instances as targets for a new NLB.

Which solution can the company use to route traffic to all the EC2 instances?

A.       Create an Amazon Route 53 geolocation routing policy to route requests to one of the two NLBs. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution's origin.

B.       Create a standard accelerator in AWS GlobalAccelerator. Create endpoint groups in us-west-2 and eu- west-1.Add the two NLBs as endpoints for the endpoint groups.

C.      Attach Elastic IP addresses to the six EC2 instances. Create an Amazon Route 53 geolocation routing policy to routerequests to one of the six EC2 instances. Create an Amazon CloudFront distribution. Use the Route 53record as the distribution's origin.

D.      Replace the two NLBs with two Application Load Balancers (ALBs). Create an Amazon Route 53latency routing policy toroute requests to one of the two ALBs. Create an Amazon CloudFront distribution. Use the Route 53record as the distribution's origin.

Correct Answer: B

Section: (none)

QUESTION 200

A company is building an ecommerce web application on AWS. The application sends information about new orders to anAmazon API Gateway RESTAPI to process. The company wants to ensure that orders are processed in the order that they are received.

Which solution will meet these requirements?

A.       Use an API Gateway integration to publish a message to an Amazon Simple Notification Service (Amazon SNS) topicwhen the application receives an order. Subscribe an AWS Lambda function to the topic to perform processing.

B.       Use an API Gateway integration to send a message to an Amazon Simple Queue Service (Amazon SQS) FIFO queuewhen the application receives an order. Configure the SQS FIFO queue to invoke an AWS Lambda function for processing

C.      Use an API Gateway authorizer to block any requests while the application processes an order

D.      Use an API Gateway integration to send a message to an Amazon Simple Queue Service (Amazon SQS) standardqueue when the application receives an order. Configure the SQS standard queue to invoke an AWS Lambda function for processing.

Correct Answer: B

Section: (none)

您的需求就是我們的使命，立即聯絡 小豬科技專員。