AWS Certified Solutions Architect - Associate SAA-C03 證照考古題

AWS 架構師證照考古題大全20241011

AWS Certified Solutions Architect - Associate SAA-C03

Amazon Web Service（AWS 亞馬遜）全系列考古題，2024年最新題庫，持續更新，全網最完整。AWS 證照含金量高，自我進修、跨足雲端產業必備近期版本更新，隨時追蹤最新趨勢變化。

QUESTION 441

A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries.

Which policy should be used to meet this requirement?

A.       Simple routing policy

B.       Latency routing policy

C.      Multivalue routing policy

D.      Geolocation routing policy

Correct Answer: C

Section: (none)

QUESTION 442

A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimumlatency to clinics across the country for their on-premises, file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic.

What should a solutions architect recommend to meet these requirements?

A.       Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic

B.       Migrate the files to each clinic on-premises applications by using AWS DataSync for processing.

C.      Deploy an AWS Storage Gateway volume gateway as a virtual machine (VM) on premises at each clinic.

D.      Attach an Amazon Elastic File System (Amazon EFS) file system to each clinic on-premises servers.

Correct Answer: A

Section: (none)

QUESTION 443

A company is using a content management system that runs on a single Amazon EC2 instance. The EC2 instance contains both the web server and the database software. The company must make its website platform highly available and must enable the website to scale to meet user demand.

What should a solutions architect recommend to meet these requirements?

A.       Move the database to Amazon RDS, and enable automatic backups. Manually launch another EC2 instance in the sameAvailability Zone. Configure an Application Load Balancer in the Availability Zone, and set the two instances as targets.

B.       Migrate the database to an Amazon Aurora instance with a read replica in the same Availability Zone as the existing EC2 instance. Manually launch another EC2 instance in the same Availability Zone. Configure an Application Load Balancer, and set the two EC2 instances as targets.

C.      Move the database to Amazon Aurora with a read replica in another Availability Zone. Create an Amazon Machine Image(AMI) from the EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach an Auto Scaling group that uses the AMI across two Availability Zones.

D.      Move the database to a separate EC2 instance, and schedule backups to Amazon S3. Create an Amazon Machine Image(AMI) from the original EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach an Auto Scalinggroup that uses the AMI across two Availability Zones.

Correct Answer: C

Section: (none)

QUESTION 444

A company is launching an application on AWS. The application uses an Application Load Balancer (ALB) to direct traffic to atleast two Amazon EC2 instances in a single target group. The instances are in an Auto Scaling group for each environment. The company requires a development environment and a production environment. The production environment will have periods of high traffic.

Which solution will configure the development environment MOST cost-effectively?

A.       Reconfigure the target group in the development environment to have only one EC2 instance as a target.

B.       Change the ALB balancing algorithm to least outstanding requests.

C.      Reduce the size of the EC2 instances in both environments.

D.      Reduce the maximum number of EC2 instances in the development environment Auto Scaling group.

Correct Answer: A

Section: (none)

QUESTION 445

A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances asthe target group. However, the internet traffic is not reaching the EC2 instances.

How should the solutions architect reconfigure the architecture to resolve this issue?

A.       Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.

B.       Move the EC2 instances to public subnets. Add a rule to the EC2 instances?security groups to allow outbound traffic to 0.0.0.0/0.

C.      Update the route tables for the EC2 instances?subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add arule to the EC2 instances?security groups to allow outbound traffic to 0.0.0.0/0.

D.      Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

Correct Answer: C

Section: (none)

探索小豬科技的多元服務，看看我們如何支持您的業務發展！了解更多

QUESTION 446

A company has deployed a database in Amazon RDS for MySQL. Due to increased transactions, the database support team isreporting slow reads against the DB instance and recommends adding a read replica.

Which combination of actions should a solutions architect take before implementing this change? (Choose two.)

A.       Enable binlog replication on the RDS primary node.

B.       Choose a failover priority for the source DB instance.

C.      Allow long-running transactions to complete on the source DB instance.

D.      Create a global table and specify the AWS Regions where the table will be available.

E.       Enable automatic backups on the source instance by setting the backup retention period to a value other than 0.

Correct Answer: CE

Section: (none)

QUESTION 447

A company runs analytics software on Amazon EC2 instances. The software accepts job requests from users to process datathat has been uploaded to Amazon S3. Users report that some submitted data is not being processed Amazon CloudWatchreveals that the EC2 instances have a consistent CPU utilization at or near 100%. The company wants to improve system performance and scale the system based on user load.

What should a solutions architect do to meet these requirements?

A.       Create a copy of the instance. Place all instances behind an Application Load Balancer.

B.       Create an S3 VPC endpoint for Amazon S3. Update the software to reference the endpoint.

C.      Stop the EC2 instances. Modify the instance type to one with a more powerful CPU and more memory. Restart the instances.

D.      Route incoming requests to Amazon Simple Queue Service (Amazon SQS). Configure an EC2 Auto Scaling group based on queue size. Update the software to read from the queue.

Correct Answer: D

Section: (none)

QUESTION 448

A company security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently.

What should a solutions architect do to meet these requirements when configuring the logs?

A.       Use Amazon CloudWatch as the target. Set the CloudWatch log group with an expiration of 90 days

B.       Use Amazon Kinesis as the target. Configure the Kinesis stream to always retain the logs for 90 days.

C.      Use AWS CloudTrail as the target. Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering.

D.      Use Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard- Infrequent Access (S3 Standard-IA) after 90 days.

Correct Answer: D

Section: (none)

QUESTION 449

An Amazon EC2 instance is located in a private subnet in a new VPC. This subnet does not have outbound internet access, but the EC2 instance needs the ability to download monthly security updates from an outside vendor.

What should a solutions architect do to meet these requirements?

A.       Create an internet gateway, and attach it to the VPC. Configure the private subnet route table to use the internet gateway as the default route.

B.       Create a NAT gateway, and place it in a public subnet. Configure the private subnet route table to use the NAT gateway as the default route.

C.      Create a NAT instance, and place it in the same subnet where the EC2 instance is located. Configure the private subnet route table to use the NAT instance as the default route.

D.      Create an internet gateway, and attach it to the VPC. Create a NAT instance, and place it in the same subnet where the EC2instance is located. Configure the private subnet route table to use the internet gateway as the default route.

Correct Answer: B

Section: (none)

QUESTION 450

A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time.

The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy.

Which solution meets these requirements?

A.       Amazon Elastic File System (Amazon EFS)

B.       Amazon Elastic Block Store (Amazon EBS)

C.      Amazon S3 Glacier Deep Archive

D.      AWS Backup

Correct Answer: A

Section: (none)

只需幾步，馬上註冊 小豬科技，擁有專業的雲端支持！

QUESTION 451

A solutions architect has created two IAM policies: Policy1 and Policy2. Both policies are attached to an IAM group.

A cloud engineer is added as an IAM user to the IAM group. Which action will the cloud engineer be able to perform?

A.       Deleting IAM users

B.       Deleting directories

C.      Deleting Amazon EC2 instances

D.      Deleting logs from Amazon CloudWatch Logs

Correct Answer: C

Section: (none)

QUESTION 452

A company is reviewing a recent migration of a three-tier application to a VPC. The security team discovers that the principle of least privilege is not being applied to Amazon EC2 security group ingress and egress rules between the application tiers.

What should a solutions architect do to correct this issue?

A.       Create security group rules using the instance ID as the source or destination.

B.       Create security group rules using the security group ID as the source or destination.

C.      Create security group rules using the VPC CIDR blocks as the source or destination.

D.      Create security group rules using the subnet CIDR blocks as the source or destination.

Correct Answer: B

Section: (none)

QUESTION 453

A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution mustprevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to download, modify, and upload documents.

Which combination of actions should be taken to meet these requirements? (Choose two.)

A.       Enable a read-only bucket ACL.

B.       Enable versioning on the bucket.

C.      Attach an IAM policy to the bucket.

D.      Enable MFA Delete on the bucket.

E.       Encrypt the bucket using AWS KMS.

Correct Answer: BD

Section: (none)

QUESTION 454

A company is implementing new data retention policies for all databases that run on Amazon RDS DB instances. The companymust retain daily backups for a minimum period of 2 years. The backups must be consistent and restorable.

Which solution should a solutions architect recommend to meet these requirements?

A.       Create a backup vault in AWS Backup to retain RDS backups. Create a new backup plan with a daily schedule and anexpiration period of 2 years after creation. Assign the RDS DB instances to the backup plan.

B.       Configure a backup window for the RDS DB instances for daily snapshots. Assign a snapshot retention policy of 2 years to each RDS DB instance. Use Amazon Data Lifecycle Manager (Amazon DLM) to schedule snapshot deletions.

C.      Configure database transaction logs to be automatically backed up to Amazon CloudWatch Logs with an expiration period of 2 years.

D.      Configure an AWS Database Migration Service (AWS DMS) replication task. Deploy a replication instance, and configure achange data capture (CDC) task to stream database changes to Amazon S3 as the target. Configure S3 Lifecycle policies to delete the snapshots after 2 years.

Correct Answer: A

Section: (none)

QUESTION 455

A company compliance team needs to move its file shares to AWS. The shares run on a Windows Server SMB file share. A self-managed on-premises Active Directory controls access to the files and folders.

The company wants to use Amazon FSx for Windows File Server as part of the solution. The company must ensure that the on-premises Active Directory groups restrict access to the FSx for Windows File Server SMB compliance shares, folders, and filesafter the move to AWS. The company has created an FSx for Windows File Server file system.

Which solution will meet these requirements?

A.       Create an Active Directory Connector to connect to the Active Directory. Map the Active Directory groups to IAM groups to restrict access.

B.       Assign a tag with a Restrict tag key and a Compliance tag value. Map the Active Directory groups to IAM groups to restrict access.

C.      Create an IAM service-linked role that is linked directly to FSx for Windows File Server to restrict access.

D.      Join the file system to the Active Directory to restrict access.

Correct Answer: D

Section: (none)

專業支持不只是口號，立即聯絡 我們的小豬科技專員！

QUESTION 456

A company recently announced the deployment of its retail website to a global audience. The website runs on multiple AmazonEC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones.

The company wants to provide its customers with different versions of content based on the devices that the customers use to access the website.

Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

A.       Configure Amazon CloudFront to cache multiple versions of the content.

B.       Configure a host header in a Network Load Balancer to forward traffic to different instances.

C.      Configure a Lambda@Edge function to send specific objects to users based on the User-Agent header.

D.      Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up host-based routing to different EC2 instances.

E.       Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up path-based routing to different EC2 instances.

Correct Answer: AC

Section: (none)

QUESTION 457

A company plans to use Amazon ElastiCache for its multi-tier web application. A solutions architect creates a Cache VPC for the ElastiCache cluster and an App VPC for the application Amazon EC2 instances.

Both VPCs are in the us-east-1 Region.

The solutions architect must implement a solution to provide the application EC2 instances with access to the ElastiCache cluster.

Which solution will meet these requirements MOST cost-effectively?

A.       Create a peering connection between the VPCs. Add a route table entry for the peering connection in both VPCs. Configure an inbound rule for the ElastiCache cluster security group to allow inbound connection from the application security group.

B.       Create a Transit VPC. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the TransitVPC. Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application security group.

C.      Create a peering connection between the VPCs. Add a route table entry for the peering connection in both VPCs. Configure an inbound rule for the peering connection security group to allow inbound connection from the application security group.

D.      Create a Transit VPC. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the TransitVPC. Configure an inbound rule for the Transit VPC security group to allow inbound connection from the application security group.

Correct Answer: A

Section: (none)

QUESTION 458

A company is building an application that consists of several microservices. The company has decided to use containertechnologies to deploy its software on AWS. The company needs a solution that minimizes the amount of ongoing effort for maintenance and scaling. The company cannot manage additional infrastructure.

Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

A.       Deploy an Amazon Elastic Container Service (Amazon ECS) cluster.

B.       Deploy the Kubernetes control plane on Amazon EC2 instances that span multiple Availability Zones.

C.      Deploy an Amazon Elastic Container Service (Amazon ECS) service with an Amazon EC2 launch type. Specify a desired task number level of greater than or equal to 2.

D.      Deploy an Amazon Elastic Container Service (Amazon ECS) service with a Fargate launch type. Specify a desired task number level of greater than or equal to 2.

E.       Deploy Kubernetes worker nodes on Amazon EC2 instances that span multiple Availability Zones. Create a deployment that specifies two or more replicas for each microservice.

Correct Answer: AD

Section: (none)

QUESTION 459

A company has a web application hosted over 10 Amazon EC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application. The networking team finds thatsome DNS queries return IP addresses of unhealthy instances, resulting in the timeout error.

What should a solutions architect implement to overcome these timeout errors?

A.       Create a Route 53 simple routing policy record for each EC2 instance. Associate a health check with each record.

B.       Create a Route 53 failover routing policy record for each EC2 instance. Associate a health check with each record.

C.      Create an Amazon CloudFront distribution with EC2 instances as its origin. Associate a health check with the EC2 instances.

D.      Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances. Route to the ALB from Route 53.

Correct Answer: D

Section: (none)

QUESTION 460

A solutions architect needs to design a highly available application consisting of web, application, and database tiers. HTTPScontent delivery should be as close to the edge as possible, with the least delivery time.

Which solution meets these requirements and is MOST secure?

A.       Configure a public Application Load Balancer (ALB) with multiple redundant Amazon EC2 instances in public subnets. Configure Amazon CloudFront to deliver HTTPS content using the public ALB as the origin.

B.       Configure a public Application Load Balancer with multiple redundant Amazon EC2 instances in private subnets. ConfigureAmazon CloudFront to deliver HTTPS content using the EC2 instances as the origin.

C.      Configure a public Application Load Balancer (ALB) with multiple redundant Amazon EC2 instances in private subnets.Configure Amazon CloudFront to deliver HTTPS content using the public ALB as the origin.

D.      Configure a public Application Load Balancer with multiple redundant Amazon EC2 instances in public subnets. ConfigureAmazon CloudFront to deliver HTTPS content using the EC2 instances as the origin.

Correct Answer: C

Section: (none)

小豬科技讓雲端變得簡單，了解更多 讓您的業務更上一層樓！

QUESTION 461

A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact theuser experience and introduce unfair advantages to some players. The application is deployed in every AWS Region. It runs on Amazon EC2 instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs). A solutions architect needs to implement a mechanism to monitor the health of the application and redirect traffic to healthy endpoints.

Which solution meets these requirements?

A.       Configure an accelerator in AWS Global Accelerator. Add a listener for the port that the application listens on, and attach it to a Regional endpoint in each Region. Add the ALB as the endpoint.

B.       Create an Amazon CloudFront distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.

C.      Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure the

cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.

D.      Configure an Amazon DynamoDB database to serve as the data store for the application. Create a DynamoDB Accelerator (DAX) cluster to act as the in-memory cache for DynamoDB hosting the application data.

Correct Answer: A

Section: (none)

QUESTION 462

A company has one million users that use its mobile app. The company must analyze the data usage in near-real time. The company also must encrypt the data in near-real time and must store the data in a centralized location in Apache Parquet format for further processing.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analyticsapplication to analyze the data. Invoke an AWS Lambda function to send the data to the Kinesis Data Analytics application.

B.       Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data. Invoke an AWS Lambda function to send the data to the EMR cluster.

C.      Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data.

D.      Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data.

Correct Answer: D

Section: (none)

QUESTION 463

An ecommerce company has noticed performance degradation of its Amazon RDS based web application. The performancedegradation is attributed to an increase in the number of read-only SQL queries triggered by business analysts. A solutionsarchitect needs to solve the problem with minimal changes to the existing web application.

What should the solutions architect recommend?

A.       Export the data to Amazon DynamoDB and have the business analysts run their queries.

B.       Load the data into Amazon ElastiCache and have the business analysts run their queries.

C.      Create a read replica of the primary database and have the business analysts run their queries.

D.      Copy the data into an Amazon Redshift cluster and have the business analysts run their queries.

Correct Answer: C

Section: (none)

QUESTION 464

A company is using a centralized AWS account to store log data in various Amazon S3 buckets. A solutions architect needs to ensure that the data is encrypted at rest before the data is uploaded to the S3 buckets.

The data also must be encrypted in transit. Which solution meets theserequirements?

A.       Use client-side encryption to encrypt the data that is being uploaded to the S3 buckets.

B.       Use server-side encryption to encrypt the data that is being uploaded to the S3 buckets.

C.      Create bucket policies that require the use of server-side encryption with S3 managed encryption keys (SSE-S3) for S3 uploads.

D.      Enable the security option to encrypt the S3 buckets through the use of a default AWS Key Management Service (AWS KMS) key.

Correct Answer: A

Section: (none)

QUESTION 465

A solutions architect observes that a nightly batch processing job is automatically scaled up for 1 hour before the desired Amazon EC2 capacity is reached. The peak capacity is the ame every night and the batch jobs always start at 1 AM. The solutions architectneeds to find a cost-effective solution that will allow for the desired EC2 capacity to be reached quickly and allow the Auto Scalinggroup to scale down after the batch jobs are complete.

What should the solutions architect do to meet these requirements?

A.       Increase the minimum capacity for the Auto Scaling group.

B.       Increase the maximum capacity for the Auto Scaling group.

C.      Configure scheduled scaling to scale up to the desired compute level.

D.      Change the scaling policy to add more EC2 instances during each scaling operation.

Correct Answer: C

Section: (none)

立即註冊小豬科技，點擊這裡 輕鬆進入雲端世界！

QUESTION 466

A company runs an internal browser-based application. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling groupscales up to 20 instances during work hours, but scales down to 2 instances overnight. Staff are complaining that the application isvery slow when the day begins, although it runs well by mid-morning.

How should the scaling be changed to address the staff complaints and keep costs to a minimum?

A.       Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens.

B.       Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period.

C.      Implement a target tracking action triggered at a lower CPU threshold, and decrease the cooldown period.

D.      Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens.

Correct Answer: C

Section: (none)

QUESTION 467

A company has a multi-tier application deployed on several Amazon EC2 instances in an Auto Scaling group. An Amazon RDS for Oracle instance is the application?s data layer that uses Oracle-specific PL/ SQL functions. Traffic to the application has been steadily increasing. This is causing the EC2 instances to become overloaded and the RDS instance to run out of storage. The AutoScaling group does not have any scaling metrics and defines the minimum healthy instance count only. The company predicts thattraffic will continue to increase at a steady but unpredictable rate before leveling off.

What should a solutions architect do to ensure the system can automatically scale for the increased traffic? (Choose two.)

A.       Configure storage Auto Scaling on the RDS for Oracle instance.

B.       Migrate the database to Amazon Aurora to use Auto Scaling storage.

C.      Configure an alarm on the RDS for Oracle instance for low free storage space.

D.      Configure the Auto Scaling group to use the average CPU as the scaling metric.

E.       Configure the Auto Scaling group to use the average free memory as the scaling metric.

Correct Answer: AD

Section: (none)

QUESTION 468

A company provides an online service for posting video content and transcoding it for use by any mobile platform. The applicationarchitecture uses Amazon Elastic File System (Amazon EFS) Standard to collect and store the videos so that multiple Amazon EC2 Linux instances can access the video content for

processing. As the popularity of the service has grown over time, the storage costs have become too expensive.

Which storage solution is MOST cost-effective?

A.       Use AWS Storage Gateway for files to store and process the video content.

B.       Use AWS Storage Gateway for volumes to store and process the video content.

C.      Use Amazon EFS for storing the video content. Once processing is complete, transfer the files to Amazon Elastic Block Store (Amazon EBS).

D.      Use Amazon S3 for storing the video content. Move the files temporarily over to an Amazon Elastic Block Store (Amazon EBS) volume attached to the server for processing.

Correct Answer: D

Section: (none)

QUESTION 469

A company wants to create an application to store employee data in a hierarchical structured relationship. The company needs a minimum-latency response to high-traffic queries for the employee data and must protect any sensitive data. The company also needs to receive monthly email messages if any financial information is present in the employee data.

Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

A.       Use Amazon Redshift to store the employee data in hierarchies. Unload the data to Amazon S3 every month.

B.       Use Amazon DynamoDB to store the employee data in hierarchies. Export the data to Amazon S3 every month.

C.      Configure Amazon Macie for the AWS account. Integrate Macie with Amazon EventBridge to send monthly events to AWS Lambda.

D.      Use Amazon Athena to analyze the employee data in Amazon S3. Integrate Athena with Amazon QuickSight to publish analysis dashboards and share the dashboards with users.

E.       Configure Amazon Macie for the AWS account. Integrate Macie with Amazon EventBridge to send monthly notifications through an Amazon Simple Notification Service (Amazon SNS) subscription.

Correct Answer: BE

Section: (none)

QUESTION 470

A company is using Amazon CloudFront with its website. The company has enabled logging on the CloudFront distribution, andlogs are saved in one of the company Amazon S3 buckets. The company needs to perform advanced analyses on the logs and build visualizations.

What should a solutions architect do to meet these requirements?

A.       Use standard SQL queries in Amazon Athena to analyze the CloudFront logs in the S3 bucket. Visualize the results with AWS Glue.

B.       Use standard SQL queries in Amazon Athena to analyze the CloudFront logs in the S3 bucket. Visualize the results with Amazon QuickSight.

C.      Use standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs in the S3 bucket. Visualize the results with AWS Glue.

D.      Use standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs in the S3 bucket. Visualize the results with Amazon QuickSight.

Correct Answer: B

Section: (none)

小豬科技的專家隨時為您解答，點擊這裡 立即聯絡。

QUESTION 471

A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, thecompany sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases.

Which solution meets these requirements?

A.       Enable a Multi-AZ deployment for the DB instance.

B.       Enable auto scaling for the DB instance in one Availability Zone.

C.      Configure the DB instance in one Availability Zone, and create multiple read replicas in a separate Availability Zone.

D.      Configure the DB instance in one Availability Zone, and configure AWS Database Migration Service (AWS DMS) change data capture (CDC) tasks.

Correct Answer: A

Section: (none)

QUESTION 472

A research company runs experiments that are powered by a simulation application and a visualization application. Thesimulation application runs on Linux and outputs intermediate data to an NFS share every 5 minutes. The visualization application is a Windows desktop application that displays the simulation output and requires an SMB file system.

The company maintains two synchronized file systems. This strategy is causing data duplication and inefficient resource usage.The company needs to migrate the applications to AWS without making code changes to either application.

Which solution will meet these requirements?

A.       Migrate both applications to AWS Lambda. Create an Amazon S3 bucket to exchange data between the applications.

B.       Migrate both applications to Amazon Elastic Container Service (Amazon ECS). Configure Amazon FSx File Gateway for storage.

C.      Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2instances. Configure Amazon Simple Queue Service (Amazon SQS) to exchange data between the applications.

D.      Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon FSx for NetApp ONTAP for storage.

Correct Answer: D

Section: (none)

QUESTION 473

A company hosts its static website by using Amazon S3. The company wants to add a contact form to its webpage. The contactform will have dynamic server-side components for users to input their name, email address, phone number, and user message.The company anticipates that there will be fewer than 100 site visits each month.

Which solution will meet these requirements MOST cost-effectively?

A.       Host a dynamic contact form page in Amazon Elastic Container Service (Amazon ECS). Set up Amazon Simple Email Service (Amazon SES) to connect to any third-party email provider.

B.       Create an Amazon API Gateway endpoint with an AWS Lambda backend that makes a call to Amazon Simple Email Service (Amazon SES).

C.      Convert the static webpage to dynamic by deploying Amazon Lightsail. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.

D.      Create a t2.micro Amazon EC2 instance. Deploy a LAMP (Linux, Apache, MySQL, PHP/Perl/Python) stack to host thewebpage. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.

Correct Answer: B

Section: (none)

QUESTION 474

A company has a static website that is hosted on Amazon CloudFront in front of Amazon S3. The static website uses a databasebackend. The company notices that the website does not reflect updates that

have been made in the website Git repository. The company checks the continuous integration and continuous delivery (CI/CD)pipeline between the Git repository and Amazon S3. The company verifies that the webhooks are configured properly and that the CI/CD pipeline is sending messages that indicate successful deployments.

A solutions architect needs to implement a solution that displays the updates on the website. Which solution will meet these requirements?

A.       Add an Application Load Balancer.

B.       Add Amazon ElastiCache for Redis or Memcached to the database layer of the web application.

C.      Invalidate the CloudFront cache.

D.      Use AWS Certificate Manager (ACM) to validate the website SSL certificate.

Correct Answer: C

Section: (none)

QUESTION 475

A company wants to migrate a Windows-based application from on premises to the AWS Cloud. The application has threetiers: an application tier, a business tier, and a database tier with Microsoft SQL Server. The company wants to use specificfeatures of SQL Server such as native backups and Data Quality Services. The company also needs to share files for processing between the tiers.

How should a solutions architect design the architecture to meet these requirements?

A.       Host all three tiers on Amazon EC2 instances. Use Amazon FSx File Gateway for file sharing between the tiers.

B.       Host all three tiers on Amazon EC2 instances. Use Amazon FSx for Windows File Server for file sharing between the tiers.

C.      Host the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use Amazon Elastic File System (Amazon EFS) for file sharing between the tiers.

D.      Host the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use aProvisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume for file sharing between the tiers.

Correct Answer: B

Section: (none)

掌握最新科技，點擊這裡 深入了解小豬科技的創新方案！

QUESTION 476

A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application.

What should a solutions architect do to meet these requirements?

A.       Create an Amazon S3 Standard bucket with access to the web servers.

B.       Configure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.

C.      Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.

D.      Configure a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume to all web servers.

Correct Answer: C

Section: (none)

QUESTION 477

A company hosts a web application on multiple Amazon EC2 instances. The EC2 instances are in an Auto Scaling group thatscales in response to user demand. The company wants to optimize cost savings without making a long-term commitment.

Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements?

A.       Dedicated Instances only

B.       On-Demand Instances only

C.      A mix of On-Demand Instances and Spot Instances

D.      A mix of On-Demand Instances and Reserved Instances

Correct Answer: C

Section: (none)

QUESTION 478

A company has an on-premises volume backup solution that has reached its end of life. The company wants to use AWS as partof a new backup solution and wants to maintain local access to all the data while it is backed up on AWS. The company wants to ensure that the data backed up on AWS is automatically and securely transferred.

Which solution meets these requirements?

A.       Use AWS Snowball to migrate data out of the on-premises solution to Amazon S3. Configure on- premises systems to mount the Snowball S3 endpoint to provide local access to the data.

B.       Use AWS Snowball Edge to migrate data out of the on-premises solution to Amazon S3. Use the Snowball Edge file interface to provide on-premises systems with local access to the data.

C.      Use AWS Storage Gateway and configure a cached volume gateway. Run the Storage Gateway software appliance onpremises and configure a percentage of data to cache locally. Mount the gateway storage volumes to provide local access to the data.

D.      Use AWS Storage Gateway and configure a stored volume gateway. Run the Storage Gateway software appliance onpremises and map the gateway storage volumes to on-premises storage. Mount the gateway storage volumes to provide local access to the data.

Correct Answer: D

Section: (none)

QUESTION 479

A development team has launched a new application that is hosted on Amazon EC2 instances inside a development VPC. Asolutions architect needs to create a new VPC in the same account. The new VPC will be peered with the development VPC. The VPC CIDR block for the development VPC is 192.168.0.0/24.

The solutions architect needs to create a CIDR block for the new VPC. The CIDR block must be valid for a VPC peering connection to the development VPC.

What is the SMALLEST CIDR block that meets these requirements?

A.       10.0.1.0/32

B.       192.168.0.0/24

C.      192.168.1.0/32

D.      10.0.1.0/24

Correct Answer: D

Section: (none)

QUESTION 480

A company is running a critical business application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances run in an Auto Scaling group and access an Amazon RDS DB instance.

The design did not pass an operational review because the EC2 instances and the DB instance are all located in a single Availability Zone. A solutions architect must update the design to use a second Availability Zone.

Which solution will make the application highly available?

A.       Provision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across bothAvailability Zones. Configure the DB instance with connections to each network.

B.       Provision two subnets that extend across both Availability Zones. Configure the Auto Scaling group to distribute the EC2instances across both Availability Zones. Configure the DB instance with connections to each network.

C.      Provision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment.

D.      Provision a subnet that extends across both Availability Zones. Configure the Auto Scaling group to distribute the EC2instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment.

Correct Answer: C

Section: (none)

讓小豬科技專員為您提供量身訂製的解決方案，立即聯絡