AWS Certified Solutions Architect - Associate SAA-C03 證照考古題

AWS 架構師證照考古題大全20241022

AWS Certified Solutions Architect - Associate SAA-C03

Amazon Web Service（AWS 亞馬遜）全系列考古題，2024年最新題庫，持續更新，全網最完整。AWS 證照含金量高，自我進修、跨足雲端產業必備近期版本更新，隨時追蹤最新趨勢變化。

QUESTION 521

A company is designing the network for an online multi-player game. The game uses the UDP networking protocol and will be deployed in eight AWS Regions. The network architecture needs to minimize latency and packet loss to give end users a high-quality gaming experience.

Which solution will meet these requirements?

A.       Setup a transit gateway in each Region. Create inter-Region peering attachments between each transit gateway.

B.       Set up AWS Global Accelerator with UDP listeners and endpoint groups in each Region.

C.      Set up Amazon CloudFront with UDP turned on. Configure an origin in each Region.

D.      Set up a VPC peering mesh between each Region. Turn on UDP for each VPC.

Correct Answer: B

Section: (none)

QUESTION 522

A company hosts a three-tier web application on Amazon EC2 instances in a single Availability Zone. The web application usesa self-managed MySQL database that is hosted on an EC2 instance to store data in an Amazon Elastic Block Store (Amazon EBS) volume. The MySQL database currently uses a 1 TB Provisioned IOPS SSD (io2) EBS volume. The company expectstraffic of 1,000 IOPS for both reads and writes at peak traffic.

The company wants to minimize any disruptions, stabilize performance, and reduce costs while retaining the capacity for doublethe IOPS. The company wants to move the database tier to a fully managed solution that is highly available and fault tolerant.

Which solution will meet these requirements MOST cost-effectively?

A.       Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with an io2 Block Express EBS volume.

B.       Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with a General Purpose SSD (gp2) EBS volume.

C.      Use Amazon S3 Intelligent-Tiering access tiers.

D.      Use two large EC2 instances to host the database in active-passive mode.

Correct Answer: B

Section: (none)

QUESTION 523

A company is migrating an old application to AWS. The application runs a batch job every hour and is CPU intensive. The batchjob takes 15 minutes on average with an on-premises server. The server has 64 virtual CPU (vCPU) and 512 GiB of memory.

Which solution will run the batch job within 15 minutes with the LEAST operational overhead?

A.       Use AWS Lambda with functional scaling.

B.       Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate.

C.      Use Amazon Lightsail with AWS Auto Scaling.

D.      Use AWS Batch on Amazon EC2.

Correct Answer: D

Section: (none)

QUESTION 524

A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same highavailability and resiliency, but the company wants to minimize storage costs.

Which storage solution will meet these requirements?

A.       Move the data objects to S3 Glacier Deep Archive after 30 days.

B.       Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

C.      Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.

D.      Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately.

Correct Answer: B

Section: (none)

QUESTION 525

A social media company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALBis the origin for an Amazon CloudFront distribution. The application has more than a billion images stored in an Amazon S3bucket and processes thousands of images each second. The company wants to resize the images dynamically and serve appropriate formats to clients.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Install an external image management library on an EC2 instance. Use the image management library to process the images.

B.       Create a CloudFront origin request policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

C.      Use a Lambda@Edge function with an external image management library. Associate the Lambda@Edge function with the CloudFront behaviors that serve the images.

D.      Create a CloudFront response headers policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

Correct Answer: C

Section: (none)

掌握最新科技，點擊這裡 深入了解小豬科技的創新方案！

QUESTION 526

A hospital needs to store patient records in an Amazon S3 bucket. The hospital compliance team must ensure that all protectedhealth information (PHI) is encrypted in transit and at rest. The compliance team must administer the encryption key for data at rest.

Which solution will meet these requirements?

A.       Create a public SSL/TLS certificate in AWS Certificate Manager (ACM). Associate the certificate with Amazon S3.Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.

B.       Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with S3 managed encryption keys (SSE-S3). Assign the compliance team to manage the SSE-S3 keys.

C.      Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS).Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.

D.      Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). UseAmazon Macie to protect the sensitive data that is stored in Amazon S3. Assign the compliance team to manage Macie.

Correct Answer: C

Section: (none)

QUESTION 527

A company uses Amazon API Gateway to run a private gateway with two REST APIs in the same VPC. The BuyStock RESTfulweb service calls the CheckFunds RESTful web service to ensure that enough funds are available before a stock can be purchased. The company has noticed in the VPC flow logs that the BuyStock RESTful web service calls the CheckFunds RESTful web service over the internet instead of through the VPC. A solutions architect must implement a solution so that the APIs communicate through the VPC.

Which solution will meet these requirements with the FEWEST changes to the code?

A.       Add an X-API-Key header in the HTTP header for authorization.

B.       Use an interface endpoint.

C.      Use a gateway endpoint.

D.      Add an Amazon Simple Queue Service (Amazon SQS) queue between the two REST APIs.

Correct Answer: B

Section: (none)

QUESTION 528

A company web application consists of an Amazon API Gateway API in front of an AWS Lambda function and an Amazon DynamoDB database. The Lambda function handles the business logic, and the DynamoDB table hosts the data. Theapplication uses Amazon Cognito user pools to identify the individual users of the application. A solutions architect needs toupdate the application so that only users who have a subscription can access premium content.

Which solution will meet this requirement with the LEAST operational overhead?

A.       Enable API caching and throttling on the API Gateway API.

B.       Set up AWS WAF on the API Gateway API. Create a rule to filter users who have a subscription.

C.      Apply fine-grained IAM permissions to the premium content in the DynamoDB table.

D.      Implement API usage plans and API keys to limit the access of users who do not have a subscription.

Correct Answer: D

Section: (none)

QUESTION 529

A company has migrated an application to Amazon EC2 Linux instances. One of these EC2 instances runs several 1-hour tasks on a schedule. These tasks were written by different teams and have no common programming language. The company is concerned about performance and scalability while these tasks run on a single instance. A solutions architect needs to implement a solution to resolve these concerns.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Use AWS Batch to run the tasks as jobs. Schedule the jobs by using Amazon EventBridge (Amazon CloudWatch Events).

B.       Convert the EC2 instance to a container. Use AWS App Runner to create the container on demand to run the tasks as jobs.

C.      Copy the tasks into AWS Lambda functions. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events).

D.      Create an Amazon Machine Image (AMI) of the EC2 instance that runs the tasks. Create an Auto Scaling group with the AMI to run multiple copies of the instance.

Correct Answer: A

Section: (none)

QUESTION 530

A company hosts a frontend application that uses an Amazon API Gateway API backend that is integrated with AWS Lambda. When the API receives requests, the Lambda function loads many libraries. Then the Lambda function connects to an Amazon RDS database, processes the data, and returns the data to the frontend application. The company wants to ensure that response latency is as low as possible for all its users with the fewest number of changes to the company's operations.

Which solution will meet these requirements?

A.       Establish a connection between the frontend application and the database to make queries faster by bypassing the API.

B.       Configure provisioned concurrency for the Lambda function that handles the requests.

C.      Cache the results of the queries in Amazon S3 for faster retrieval of similar datasets.

D.      Increase the size of the database to increase the number of connections Lambda can establish at one time.

Correct Answer: B

Section: (none)

在雲端時代站穩腳步，現在就 註冊 小豬科技，開始您的旅程！

QUESTION 531

A company hosts a three-tier web application that includes a PostgreSQL database. The database stores the metadata from documents. The company searches the metadata for key terms to retrieve documents that the company reviews in a report each month. The documents are stored in Amazon S3. The documents are usually written only once, but they are updated frequently.

The reporting process takes a few hours with the use of relational queries. The reporting process must not prevent any document modifications or the addition of new documents. A solutions architect needs to implement a solution to speed up the reporting process.

Which solution will meet these requirements with the LEAST amount of change to the application code?

A.       Set up a new Amazon DocumentDB (with MongoDB compatibility) cluster that includes a read replica. Scale the read replica to generate the reports.

B.       Set up a new Amazon Aurora PostgreSQL DB cluster that includes an Aurora Replica. Issue queries to the Aurora Replica to generate the reports.

C.      Set up a new Amazon RDS for PostgreSQL Multi-AZ DB instance. Configure the reporting module to query the secondary RDS node so that the reporting module does not affect the primary node.

D.      Set up a new Amazon DynamoDB table to store the documents. Use a fixed write capacity to support new document entries. Automatically scale the read capacity to support the reports.

Correct Answer: D

Section: (none)

QUESTION 532

A company wants to use an Amazon RDS for PostgreSQL DB cluster to simplify time-consuming database administrative tasksfor production database workloads. The company wants to ensure that its database is highly available and will provide automatic failover support in most scenarios in less than 40 seconds. The company wants to offload reads off of the primaryinstance and keep costs as low as possible.

Which solution will meet these requirements?

A.       Use an Amazon RDS Multi-AZ DB instance deployment. Create one read replica and point the read workload to the read replica.

B.       Use an Amazon RDS Multi-AZ DB duster deployment Create two read replicas and point the read workload to the read replicas.

C.      Use an Amazon RDS Multi-AZ DB instance deployment. Point the read workload to the secondary instances in the Multi-AZ pair.

D.      Use an Amazon RDS Multi-AZ DB cluster deployment Point the read workload to the reader endpoint.

Correct Answer: D

Section: (none)

QUESTION 533

A company runs a highly available SFTP service. The SFTP service uses two Amazon EC2 Linux instances that run with elasticIP addresses to accept traffic from trusted IP sources on the internet. The SFTP service is backed by shared storage that is attached to the instances. User accounts are created and managed as Linux users in the SFTP servers.

The company wants a serverless option that provides high IOPS performance and highly configurable security. The company also wants to maintain control over user permissions.

Which solution will meet these requirements?

A.       Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume. Create an AWS Transfer Family SFTP service with a public endpoint that allows only trusted IP addresses. Attach the EBS volume to the SFTP service endpoint. Grant users access to the SFTP service.

B.       Create an encrypted Amazon Elastic File System (Amazon EFS) volume. Create an AWS Transfer Family SFTP service with elastic IP addresses and a VPC endpoint that has internet-facing access. Attach a security group to the endpoint thatallows only trusted IP addresses. Attach the EFS volume to the SFTP service endpoint. Grant users access to the SFTP service.

C.      Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with apublic endpoint that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

D.      Create an Amazon S3 bucket with default encryption enabled. Create an AWS Transfer Family SFTP service with a VPCendpoint that has internal access in a private subnet. Attach a security group that allows only trusted IP addresses. Attach the S3 bucket to the SFTP service endpoint. Grant users access to the SFTP service.

Correct Answer: B

Section: (none)

QUESTION 534

A company is running a custom application on Amazon EC2 On-Demand Instances. The application has frontend nodes thatneed to run 24 hours a day, 7 days a week and backend nodes that need to run only for a short time based on workload. The number of backend nodes varies during the day.

The company needs to scale out and scale in more instances based on workload. Which solution will meet these requirements MOST cost-effectively?

A.       Use Reserved Instances for the frontend nodes. Use AWS Fargate for the backend nodes.

B.       Use Reserved Instances for the frontend nodes. Use Spot Instances for the backend nodes.

C.      Use Spot Instances for the frontend nodes. Use Reserved Instances for the backend nodes.

D.      Use Spot Instances for the frontend nodes. Use AWS Fargate for the backend nodes.

Correct Answer: B

Section: (none)

QUESTION 535

A company uses high block storage capacity to runs its workloads on premises. The company's daily peak input and output transactions per second are not more than 15,000 IOPS. The company wants to migrate the workloads to Amazon EC2 and to provision disk performance independent of storage capacity.

Which Amazon Elastic Block Store (Amazon EBS) volume type will meet these requirements MOST cost- effectively?

A.       GP2 volume type

B.       io2 volume type

C.      GP3 volume type

D.      io1 volume type

Correct Answer: C

Section: (none)

對服務有疑問？立即聯絡 小豬科技，專員幫您解答。

QUESTION 536

A serverless application uses Amazon API Gateway, AWS Lambda, and Amazon DynamoDB. The Lambda function needs permissions to read and write to the DynamoDB table.

Which solution will give the Lambda function access to the DynamoDB table MOST securely?

A.       Create an IAM user with programmatic access to the Lambda function. Attach a policy to the user that allows read andwrite access to the DynamoDB table. Store the access_key_id and secret_access_key parameters as part of the Lambda environment variables. Ensure that other AWS users do not have read and write access to the Lambda function configuration.

B.       Create an IAM role that includes Lambda as a trusted service. Attach a policy to the role that allows read and writeaccess to the DynamoDB table. Update the configuration of the Lambda function to use the new role as the execution role.

C.      Create an IAM user with programmatic access to the Lambda function. Attach a policy to the user that allows read andwrite access to the DynamoDB table. Store the access_key_id and secret_access_key parameters in AWS Systems Manager Parameter Store as secure string parameters. Update the Lambda function code to retrieve the secure string parameters before connecting to the DynamoDB table.

D.      Create an IAM role that includes DynamoDB as a trusted service. Attach a policy to the role that allows read and write access from the Lambda function. Update the code of the Lambda function to attach to the new role as an execution role.

Correct Answer: B

Section: (none)

QUESTION 537

A company is running its production and nonproduction environment workloads in multiple AWS accounts. The accounts are in an organization in AWS Organizations. The company needs to design a solution that will prevent the modification of cost usage tags.

Which solution will meet these requirements?

A.       Create a custom AWS Config rule to prevent tag modification except by authorized principals.

B.       Create a custom trail in AWS CloudTrail to prevent tag modification.

C.      Create a service control policy (SCP) to prevent tag modification except by authorized principals.

D.      Create custom Amazon CloudWatch logs to prevent tag modification.

Correct Answer: C

Section: (none)

QUESTION 538

A company needs to migrate a MySQL database from its on-premises data center to AWS within 2 weeks. The database is 20 TB in size. The company wants to complete the migration with minimal downtime.

Which solution will migrate the database MOST cost-effectively?

A.       Order an AWS Snowball Edge Storage Optimized device. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with replication of ongoing changes. Send the Snowball Edge device to AWS to finish the migration and continue the ongoing replication.

B.       Order an AWS Snowmobile vehicle. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with ongoing changes. Send the Snowmobile vehicle back to AWS to finish the migration and continue the ongoing replication.

C.      Order an AWS Snowball Edge Compute Optimized with GPU device. Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with ongoing changes. Send the Snowballdevice to AWS to finish the migration and continue the ongoing replication

D.      Order a 1 GB dedicated AWS Direct Connect connection to establish a connection with the data center.

Use AWS Database Migration Service (AWS DMS) with AWS Schema Conversion Tool (AWS SCT) to migrate the database with replication of ongoing changes.

Correct Answer: A

Section: (none)

QUESTION 539

A company moved its on-premises PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. The company successfully launched a new product. The workload on the database has increased. The company wants to accommodate the larger workload without adding infrastructure.

Which solution will meet these requirements MOST cost-effectively?

A.       Buy reserved DB instances for the total workload. Make the Amazon RDS for PostgreSQL DB instance larger.

B.       Make the Amazon RDS for PostgreSQL DB instance a Multi-AZ DB instance.

C.      Buy reserved DB instances for the total workload. Add another Amazon RDS for PostgreSQL DB instance.

D.      Make the Amazon RDS for PostgreSQL DB instance an on-demand DB instance.

Correct Answer: A

Section: (none)

QUESTION 540

A solutions architect configured a VPC that has a small range of IP addresses. The number of Amazon EC2 instances thatare in the VPC is increasing, and there is an insufficient number of IP addresses for future workloads.

Which solution resolves this issue with the LEAST operational overhead?

A.       Add an additional IPv4 CIDR block to increase the number of IP addresses and create additional subnets in the VPC. Create new resources in the new subnets by using the new CIDR.

B.       Create a second VPC with additional subnets. Use a peering connection to connect the second VPC with the first VPC Update the routes and create new resources in the subnets of the second VPC.

C.      Use AWS Transit Gateway to add a transit gateway and connect a second VPC with the first VPUpdate the routes of the transit gateway and VPCs. Create new resources in the subnets of the second VPC.

D.      Create a second VPC. Create a Site-to-Site VPN connection between the first VPC and the second VPC by using a VPN-hosted solution on Amazon EC2 and a virtual private gateway. Update the route between VPCs to the traffic through the VPN. Create new resources in the subnets of the second VPC.

Correct Answer: A

Section: (none)

您需要的不僅是雲端服務，而是專業支持。了解更多

QUESTION 541

A company stores data in PDF format in an Amazon S3 bucket. The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years.

Which solution will meet these requirements with the LEAST operational overhead?

A.       Turn on the S3 Versioning feature for the S3 bucket. Configure S3 Lifecycle to delete the data after 7 years. Configure multi-factor authentication (MFA) delete for all S3 objects.

B.       Turn on S3 Object Lock with governance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.

C.      Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.

D.      Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance.

Correct Answer: D

Section: (none)

QUESTION 542

A company runs its application on an Oracle database. The company plans to quickly migrate to AWS because of limitedresources for the database, backup administration, and data center maintenance. The application uses third-party database features that require privileged access.

Which solution will help the company migrate the database to AWS MOST cost-effectively?

A.       Migrate the database to Amazon RDS for Oracle. Replace third-party features with cloud services.

B.       Migrate the database to Amazon RDS Custom for Oracle. Customize the database settings to support third-party features.

C.      Migrate the database to an Amazon EC2 Amazon Machine Image (AMI) for Oracle. Customize the database settings to support third-party features.

D.      Migrate the database to Amazon RDS for PostgreSQL by rewriting the application code to remove dependency on Oracle APEX.

Correct Answer: B

Section: (none)

QUESTION 543

A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS.

Which activities will be managed by the company's operational team? (Choose three.)

A.       Management of the Amazon RDS infrastructure layer, operating system, and platforms

B.       Creation of an Amazon RDS DB instance and configuring the scheduled maintenance window

C.      Configuration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection

D.      Installation of patches for all minor and major database versions for Amazon RDS

E.       Ensure the physical security of the Amazon RDS infrastructure in the data center

F.       Encryption of the data that moves in transit through Direct Connect

Correct Answer: BCF

Section: (none)

QUESTION 544

A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previousemployee did not provide details about the resources inventory. The solutions architect needs to build and map the relationship details of the various workloads across all accounts.

Which solution will meet these requirements in the MOST operationally efficient way?

A.       Use AWS Systems Manager Inventory to generate a map view from the detailed view report.

B.       Use AWS Step Functions to collect workload details. Build architecture diagrams of the workloads manually.

C.      Use Workload Discovery on AWS to generate architecture diagrams of the workloads.

D.      Use AWS X-Ray to view the workload details. Build architecture diagrams with relationships.

Correct Answer: C

Section: (none)

QUESTION 545

A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. Thecompany wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period.

Which combination of solutions will meet these requirements? (Choose three.)

A.       Use AWS Budgets to create a budget. Set the budget amount under the Cost and Usage Reports section of the required AWS accounts.

B.       Use AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts.

C.      Create an IAM user for AWS Budgets to run budget actions with the required permissions.

D.      Create an IAM role for AWS Budgets to run budget actions with the required permissions.

E.       Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects theIAM identity created with the appropriate config rule to prevent provisioning of additional resources.

F.       Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources.

Correct Answer: BDF

Section: (none)

想要迅速部署雲端服務？立即註冊 小豬科技，開啟您的雲端之旅！

QUESTION 546

A company that uses AWS is building an application to transfer data to a product manufacturer. The company has its own identityprovider (IdP). The company wants the IdP to authenticate application users while the users use the application to transfer data.The company must use Applicability Statement 2 (AS2) protocol.

Which solution will meet these requirements?

A.       Use AWS DataSync to transfer the data. Create an AWS Lambda function for IdP authentication.

B.       Use Amazon AppFlow flows to transfer the data. Create an Amazon Elastic Container Service (Amazon ECS) task for IdP authentication.

C.      Use AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication.

D.      Use AWS Storage Gateway to transfer the data. Create an Amazon Cognito identity pool for IdP authentication.

Correct Answer: C

Section: (none)

QUESTION 547

A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service. The application requires 1 GBof memory and 2 GB of storage for its computation resources. The application will require that the data is in a relational format.

Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)

A.       Amazon EC2

B.       AWS Lambda

C.      Amazon RDS

D.      Amazon DynamoDB

E.       Amazon Elastic Kubernetes Services (Amazon EKS)

Correct Answer: BC

Section: (none)

QUESTION 548

A company uses AWS Organizations to run workloads within multiple AWS accounts. A tagging policy adds department tags to AWS resources when the company creates tags.

An accounting team needs to determine spending on Amazon EC2 consumption. The accounting team must determine which departments are responsible for the costs regardless ofAWS account. The accounting team has access to AWS Cost Explorerfor all AWS accounts within the organization and needs to access all reports from Cost Explorer.

Which solution meets these requirements in the MOST operationally efficient way?

A.       From the Organizations management account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

B.       From the Organizations management account billing console, activate an AWS-defined cost allocation tag nameddepartment. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

C.      From the Organizations member account billing console, activate a user-defined cost allocation tag named department.Create one cost report in Cost Explorer grouping by the tag name, and filter by EC2.

D.      From the Organizations member account billing console, activate an AWS-defined cost allocation tag named department.Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

Correct Answer: A

Section: (none)

QUESTION 549

A company is developing a mobile gaming app in a single AWS Region. The app runs on multiple Amazon EC2 instances in anAuto Scaling group. The company stores the app data in Amazon DynamoDB. The app communicates by using TCP traffic and UDP traffic between the users and the servers. The application will be used globally. The company wants to ensure the lowest possible latency for all users.

Which solution will meet these requirements?

A.       Use AWS Global Accelerator to create an accelerator. Create an Application Load Balancer (ALB) behind an acceleratorendpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB.

B.       Use AWS Global Accelerator to create an accelerator. Create a Network Load Balancer (NLB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB.

C.      Create an Amazon CloudFront content delivery network (CDN) endpoint. Create a Network Load Balancer (NLB) behindthe endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. Update CloudFront to use the NLB as the origin.

D.      Create an Amazon CloudFront content delivery network (CDN) endpoint. Create an Application Load Balancer (ALB)behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. Update CloudFront to use the ALB as the origin.

Correct Answer: B

Section: (none)

QUESTION 550

A company has an application that processes customer orders. The company hosts the application on an Amazon EC2instance that saves the orders to an Amazon Aurora database. Occasionally when traffic is high the workload does not process orders fast enough.

What should a solutions architect do to write the orders reliably to the database as quickly as possible?

A.       Increase the instance size of the EC2 instance when traffic is high. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic.

B.       Write orders to an Amazon Simple Queue Service (Amazon SQS) queue. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.

C.      Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SNS topic.

D.      Write orders to an Amazon Simple Queue Service (Amazon SQS) queue when the EC2 instance reaches CPU thresholdlimits. Use scheduled scaling of EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.

Correct Answer: B

Section: (none)

小豬科技的專家隨時為您解答，點擊這裡 立即聯絡。

QUESTION 551

An IoT company is releasing a mattress that has sensors to collect data about a user sleep. The sensors will send data to an Amazon S3 bucket. The sensors collect approximately 2 MB of data every night for each mattress. The company must processand summarize the data for each mattress. The results need to be available as soon as possible. Data processing will require 1 GB of memory and will finish within 30

seconds.

Which solution will meet these requirements MOST cost-effectively?

A.       Use AWS Glue with a Scala job

B.       Use Amazon EMR with an Apache Spark script

C.      Use AWS Lambda with a Python script

D.      Use AWS Glue with a PySpark job

Correct Answer: C

Section: (none)

QUESTION 552

A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Single-AZ DBinstance. Management wants to eliminate single points of failure and has asked a solutions architect to recommend anapproach to minimize database downtime without requiring any changes to the application code.

Which solution meets these requirements?

A.       Convert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option.

B.       Create a new RDS Multi-AZ deployment. Take a snapshot of the current RDS instance and restore the new Multi-AZ deployment with the snapshot.

C.      Create a read-only replica of the PostgreSQL database in another Availability Zone. Use Amazon Route 53 weighted record sets to distribute requests across the databases.

D.      Place the RDS for PostgreSQL database in an Amazon EC2 Auto Scaling group with a minimum group size of two. Use Amazon Route 53 weighted record sets to distribute requests across instances.

Correct Answer: A

Section: (none)

QUESTION 553

A company is developing an application to support customer demands. The company wants to deploy the application onmultiple Amazon EC2 Nitro-based instances within the same Availability Zone. The company also wants to give the applicationthe ability to write to multiple block storage volumes in multiple EC2 Nitro- based instances simultaneously to achieve higher application availability.

Which solution will meet these requirements?

A.       Use General Purpose SSD (gp3) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi- Attach

B.       Use Throughput Optimized HDD (st1) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach

C.      Use Provisioned IOPS SSD (io2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi- Attach

D.      Use General Purpose SSD (gp2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi- Attach

Correct Answer: C

Section: (none)

QUESTION 554

A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance. New company management wants to ensure the application is highly available.

What should a solutions architect do to meet this requirement?

A.       Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer

B.       Configure the application to take snapshots of the EC2 instances and send them to a different AWS

Region

C.      Configure the application to use Amazon Route 53 latency-based routing to feed requests to the application

D.      Configure Amazon Route 53 rules to handle incoming requests and create a Multi-AZ Application Load Balancer

Correct Answer: A

Section: (none)

QUESTION 555

A company uses AWS Organizations. A member account has purchased a Compute Savings Plan. Because of changes in theworkloads inside the member account, the account no longer receives the full benefit of the Compute Savings Plan commitment. The company uses less than 50% of its purchased compute power.

A.       Turn on discount sharing from the Billing Preferences section of the account console in the member account that purchased the Compute Savings Plan.

B.       Turn on discount sharing from the Billing Preferences section of the account console in the company's Organizations management account.

C.      Migrate additional compute workloads from another AWS account to the account that has the Compute Savings Plan.

D.      Sell the excess Savings Plan commitment in the Reserved Instance Marketplace.

Correct Answer: B

Section: (none)

小豬科技助您快速邁向雲端未來，點擊了解 我們的服務。

QUESTION 556

A company stores raw collected data in an Amazon S3 bucket. The data is used for several types of analytics on behalf of thecompany's customers. The type of analytics requested determines the access pattern on the S3 objects.

The company cannot predict or control the access pattern. The company wants to reduce its S3 costs. Which solution will meet these requirements?

A.       Use S3 replication to transition infrequently accessed objects to S3 Standard-Infrequent Access (S3 Standard-IA)

B.       Use S3 Lifecycle rules to transition objects from S3 Standard to Standard-Infrequent Access (S3 Standard-IA)

C.      Use S3 Lifecycle rules to transition objects from S3 Standard to S3 Intelligent-Tiering

D.      Use S3 Inventory to identify and transition objects that have not been accessed from S3 Standard to S3 Intelligent-Tiering

Correct Answer: C

Section: (none)

QUESTION 557

A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to beread with as little latency as possible. A solutions architect needs to design an optimal solution that requires minimal application changes.

Which method should the solutions architect select?

A.       Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAX endpoint.

B.       Add DynamoDB read replicas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.

C.      Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.

D.      Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to

the Redis cache endpoint instead of DynamoDB.

Correct Answer: A

Section: (none)

QUESTION 558

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves staticcontent. Website traffic is increasing, and the company is concerned about a potential increase in cost.

A.       Create an Amazon CloudFront distribution to cache state files at edge locations

B.       Create an Amazon ElastiCache cluster. Connect the ALB to the ElastiCache cluster to serve cached files

C.      Create an AWS WAF web ACL and associate it with the ALB. Add a rule to the web ACL to cache static files

D.      Create a second ALB in an alternative AWS Region. Route user traffic to the closest Region to minimize data transfer costs

Correct Answer: A

Section: (none)

QUESTION 559

A company has multiple VPCs across AWS Regions to support and run workloads that are isolated from workloads in otherRegions. Because of a recent application launch requirement, the company VPCs must communicate with all other VPCs across all Regions.

Which solution will meet these requirements with the LEAST amount of administrative effort?

A.       Use VPC peering to manage VPC communication in a single Region. Use VPC peering across Regions to manage VPC communications.

B.       Use AWS Direct Connect gateways across all Regions to connect VPCs across regions and manage VPC communications.

C.      Use AWS Transit Gateway to manage VPC communication in a single Region and Transit Gateway peering across Regions to manage VPC communications.

D.      Use AWS PrivateLink across all Regions to connect VPCs across Regions and manage VPC communications

Correct Answer: C

Section: (none)

QUESTION 560

A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS). Theapplication needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours. The file system needs to provide a mount target m each Availability Zone within a Region.

A solutions architect wants to use AWS Backup to manage the replication to another Region. Which solution will meet these requirements?

A.       Amazon FSx for Windows File Server with a Multi-AZ deployment

B.       Amazon FSx for NetApp ONTAP with a Multi-AZ deployment

C.      Amazon Elastic File System (Amazon EFS) with the Standard storage class

D.      Amazon FSx for OpenZFS

Correct Answer: C

Section: (none)

專業支持不只是口號，立即聯絡 我們的小豬科技專員！