Filters
Question type
Study Flashcards

A media storage application uploads user photos to Amazon S3 for processing. End users are reporting that some uploaded photos are not being processed properly. The Application Developers trace the logs and find that AWS Lambda is experiencing execution issues when thousands of users are on the system simultaneously. Issues are caused by: Limits around concurrent executions. The performance of Amazon DynamoDB when saving data. Which actions can be taken to increase the performance and reliability of the application? (Choose two.)


A) Evaluate and adjust the read capacity units (RCUs) for the DynamoDB tables.
B) Evaluate and adjust the write capacity units (WCUs) for the DynamoDB tables.
C) Add an Amazon ElastiCache layer to increase the performance of Lambda functions.
D) Configure a dead letter queue that will reprocess failed or timed-out Lambda functions.
E) Use S3 Transfer Acceleration to provide lower-latency access to end users.

F) D) and E)
G) All of the above

Correct Answer

verifed

verified

You are the new IT architect in a company that operates a mobile sleep tracking application. When activated at night, the mobile app is sending collected data points of 1 kilobyte every 5 minutes to your backend. The backend takes care of authenticating the user and writing the data points into an Amazon DynamoDB table. Every morning, you scan the table to extract and aggregate last night's data on a per user basis, and store the results in Amazon S3. Users are notified via Amazon SNS mobile push notifications that new data is available, which is parsed and visualized by the mobile app. Currently you have around 100k users who are mostly based out of North America. You have been tasked to optimize the architecture of the backend system to lower cost. What would you recommend? (Choose 2)


A) Have the mobile app access Amazon DynamoDB directly Instead of JSON files stored on Amazon S3.
B) Write data directly into an Amazon Redshift cluster replacing both Amazon DynamoDB and Amazon S3.
C) Introduce an Amazon SQS queue to buffer writes to the Amazon DynamoDB table and reduce provisioned write throughput.
D) Introduce Amazon Elasticache to cache reads from the Amazon DynamoDB table and reduce provisioned read throughput.
E) Create a new Amazon DynamoDB table each day and drop the one for the previous day after its data is on Amazon S3.

F) A) and B)
G) C) and D)

Correct Answer

verifed

verified

Will you be able to access EC2 snapshots using the regular Amazon S3 APIs?


A) Yes, you will be able to access using S3 APIs if you have chosen the snapshot to be stored in S3.
B) No, snapshots are only available through the Amazon EBS APIs.
C) Yes, you will be able to access them using S3 APIs as all snapshots are stored in S3.
D) No, snapshots are only available through the Amazon EC2 APIs.

E) A) and B)
F) A) and C)

Correct Answer

verifed

verified

The Solutions Architect manages a serverless application that consists of multiple API gateways, AWS Lambda functions, Amazon S3 buckets, and Amazon DynamoDB tables. Customers say that a few application components slow while loading dynamic images, and some are timing out with the "504 Gateway Timeout" error. While troubleshooting the scenario, the Solutions Architect confirms that DynamoDB monitoring metrics are at acceptable levels. Which of the following steps would be optimal for debugging these application issues? (Choose two.)


A) Parse HTTP logs in Amazon API Gateway for HTTP errors to determine the root cause of the errors.
B) Parse Amazon CloudWatch Logs to determine processing times for requested images at specified intervals.
C) Parse VPC Flow Logs to determine if there is packet loss between the Lambda function and S3.
D) Parse AWS X-Ray traces and analyze HTTP methods to determine the root cause of the HTTP errors.
E) Parse S3 access logs to determine if objects being accessed are from specific IP addresses to narrow the scope to geographic latency issues.

F) B) and D)
G) A) and D)

Correct Answer

verifed

verified

A user is creating a Provisioned IOPS volume. What is the maximum ratio the user should configure between Provisioned IOPS and the volume size?


A) 30 to 1
B) 50 to 1
C) 10 to 1
D) 20 to 1

E) A) and D)
F) A) and B)

Correct Answer

verifed

verified

In CloudFormation, if you want to map an Amazon Elastic Block Store to an Amazon EC2 instance, _________.


A) you reference the logical IDs to associate the block stores with the instance
B) you reference the physical IDs of the instance along with the resource type
C) you reference the instance IDs of the block store along with the resource properties
D) you reference the physical IDs of both the block stores and the instance

E) A) and D)
F) All of the above

Correct Answer

verifed

verified

A company wants to improve cost awareness for its Amazon EMR platform. The company has allocated budgets for each team's Amazon EMR usage. When a budgetary threshold is reached, a notification should be sent by email to the budget office's distribution list. Teams should be able to view their EMR cluster expenses to date. A solutions architect needs to create a solution that ensures the policy is proactively and centrally enforced in a multi-account environment. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)


A) Update the AWS CloudFormation template to include the AWS::Budgets::Budget::resource with the NotificationsWithSubscribers property.
B) Implement Amazon CloudWatch dashboards for Amazon EMR usage.
C) Create an EMR bootstrap action that runs at startup that calls the Cost Explorer API to set the budget on the cluster with the GetCostForecast and NotificationsWithSubscribers actions.
D) Create an AWS Service Catalog portfolio for each team. Add each team's Amazon EMR cluster as an AWS CloudFormation template to their Service Catalog portfolio as a Product.
E) Create an Amazon CloudWatch metric for billing. Create a custom alert when costs exceed the budgetary threshold.

F) A) and E)
G) A) and D)

Correct Answer

verifed

verified

A company is using an existing orchestration tool to manage thousands of Amazon EC2 instances. A recent penetration test found a vulnerability in the company's software stack. This vulnerability has prompted the company to perform a full evaluation of its current production environment. The analysis determined that the following vulnerabilities exist within the environment: Operating systems with outdated libraries and known vulnerabilities are being used in production. Relational databases hosted and managed by the company are running unsupported versions with known vulnerabilities. Data stored in databases is not encrypted. The solutions architect intends to use AWS Contig to continuously audit and assess the compliance of the company's AWS resource configurations with the company's policies and guidelines. What additional steps will enable the company to secure its environments and track resources while adhering to best practices?


A) Use AWS Application Discovery Service to evaluate all running EC2 instances Use the AWS CLI to modify each instance, and use EC2 user data to install the AWS Systems Manager Agent during boot. Schedule patching to run as a Systems Manager Maintenance Windows task. Migrate all relational databases to Amazon RDS and enable AWS KMS encryption.
B) Create an AWS CloudFormation template for the EC2 instances. Use EC2 user data in the CloudFormation template to install the AWS Systems Manager Agent, and enable AWS KMS encryption on all Amazon EBS volumes. Have CloudFormation replace all running instances. Use Systems Manager Patch Manager to establish a patch baseline and deploy a Systems Manager Maintenance Windows task to execute AWS-RunPatchBaseline using the patch baseline.
C) Install the AWS Systems Manager Agent on all existing instances using the company's current orchestration tool. Use the Systems Manager Run Command to execute a list of commands to upgrade software on each instance using operating system-specific tools. Enable AWS KMS encryption on all Amazon EBS volumes.
D) Install the AWS Systems Manager Agent on all existing instances using the company's current orchestration tool. Migrate all relational databases to Amazon RDS and enable AWS KMS encryption. Use Systems Manager Patch Manager to establish a patch baseline and deploy a Systems Manager Maintenance Windows task to execute AWS-RunPatchBaseline using the patch baseline.

E) None of the above
F) B) and C)

Correct Answer

verifed

verified

A user has launched an EBS optimized instance with EC2. Which of the below mentioned options is the correct statement?


A) It provides additional dedicated capacity for EBS IO
B) The attached EBS will have greater storage capacity
C) The user will have a PIOPS based EBS volume
D) It will be launched on dedicated hardware in VPC

E) B) and C)
F) C) and D)

Correct Answer

verifed

verified

You are tasked with moving a legacy application from a virtual machine running inside your datacenter to an Amazon VPC. Unfortunately, this app requires access to a number of on-premises services and no one who configured the app still works for your company. Even worse there's no documentation for it. What will allow the application running inside the VPC to reach back and access its internal dependencies without being reconfigured? (Choose three.)


A) An AWS Direct Connect link between the VPC and the network housing the internal services.
B) An Internet Gateway to allow a VPN connection.
C) An Elastic IP address on the VPC instance
D) An IP address space that does not conflict with the one on-premises
E) Entries in Amazon Route 53 that allow the Instance to resolve its dependencies' IP addresses
F) A VM Import of the current virtual machine

G) D) and F)
H) A) and B)

Correct Answer

verifed

verified

A multimedia company needs to deliver its video-on-demand (VOD) content to its subscribers in a cost-effective way. The video files range in size from 1-15 GB and are typically viewed frequently for the first 6 months after creation, and then access decreases considerably. The company requires all video files to remain immediately available for subscribers. There are now roughly 30,000 files, and the company anticipates doubling that number over time. What is the MOST cost-effective solution for delivering the company's VOD content?


A) Store the video files in an Amazon S3 bucket using S3 Intelligent-Tiering. Use Amazon CloudFront to deliver the content with the S3 bucket as the origin.
B) Use AWS Elemental MediaConvert and store the adaptive bitrate video files in Amazon S3. Configure an AWS Elemental MediaPackage endpoint to deliver the content from Amazon S3.
C) Store the video files in Amazon Elastic File System (Amazon EFS) Standard. Enable EFS lifecycle management to move the video files to EFS Infrequent Access after 6 months. Create an Amazon EC2 Auto Scaling group behind an Elastic Load Balancer to deliver the content from Amazon EFS.
D) Store the video files in Amazon S3 Standard. Create S3 Lifecycle rules to move the video files to S3 Standard-Infrequent Access (S3 Standard-IA) after 6 months and to S3 Glacier Deep Archive after 1 year. Use Amazon CloudFront to deliver the content with the S3 bucket as the origin.

E) B) and C)
F) A) and D)

Correct Answer

verifed

verified

A company developed a Java application and deployed it to an Apache Tomcat server that runs on Amazon EC2 instances. The company's Engineering team has implemented AWS CloudFormation and Chef Automate to automate the provisioning of and updates to the infrastructure and configuration of the application in the development, test, and production environments. These implementations have led to significantly improves reliability in releasing changes. The Engineering team reports there are frequent service disruptions due to unexpected errors when updating the application of the Apache Tomcat server. Which solution will increase the reliability of all releases?


A) Implement a blue/green deployment methodology.
B) Implement the canary release methodology.
C) Configure Amazon CloudFront to serve all requests from the cache while deploying the updates.
D) Implement the all at once deployment methodology.

E) None of the above
F) C) and D)

Correct Answer

verifed

verified

A media company has a static web application that is generated programmatically. The company has a build pipeline that generates HTML content that is uploaded to an Amazon S3 bucket served by Amazon CloudFront. The build pipeline runs inside a Build Account. The S3 bucket and CloudFront distribution are in a Distribution Account. The build pipeline uploads the files to Amazon S3 using an IAM role in the Build Account. The S3 bucket has a bucket policy that only allows CloudFront to read objects using an origin access identity (OAI) . During testing all attempts to access the application using the CloudFront URL result in an HTTP 403 Access Denied response. What should a solutions architect suggest to the company to allow access the objects in Amazon S3 through CloudFront?


A) Modify the S3 upload process in the Build Account to add the bucket-owner-full-control ACL to the objects at upload.
B) Create a new cross-account IAM role in the Distribution Account with write access to the S3 bucket. Modify the build pipeline to assume this role to upload the files to the Distribution Account.
C) Modify the S3 upload process in the Build Account to set the object owner to the Distribution Account.
D) Create a new IAM role in the Distribution Account with read access to the S3 bucket. Configure CloudFront to use this new role as its OAI. Modify the build pipeline to assume this role when uploading files from the Build Account.

E) All of the above
F) B) and C)

Correct Answer

verifed

verified

A user has suspended the scaling process on the Auto Scaling group. A scaling activity to increase the instance count was already in progress. What effect will the suspension have on that activity?


A) No effect. The scaling activity continues
B) Pauses the instance launch and launches it only after Auto Scaling is resumed
C) Terminates the instance
D) Stops the instance temporary

E) C) and D)
F) B) and C)

Correct Answer

verifed

verified

A group of Amazon EC2 instances have been configured as a high performance computing (HPC) cluster. The instances are running in a placement group, and are able to communicate with each other at network speeds of up to 20 Gbps. The cluster needs to communicate with a control EC2 instance outside of the placement group. The control instance has the same instance type and AMI as the other instances, and is configured with a public IP address. How can the Solutions Architect improve the network speeds between the control instance and the instances in the placement group?


A) Terminate the control instance and relaunch it in the placement group.
B) Ensure that the instances are communicating using their private IP addresses.
C) Ensure that the control instance is using an Elastic Network Adapter.
D) Move the control instance inside the placement group.

E) None of the above
F) All of the above

Correct Answer

verifed

verified

A company runs a video processing platform. Files are uploaded by users who connect to a web server, which stores them on an Amazon EFS share. This web server is running on a single Amazon EC2 instance. A different group of instances, running in an Auto Scaling group, scans the EFS share directory structure for new files to process and generates new videos (thumbnails, different resolution, compression, etc.) according to the instructions file, which is uploaded along with the video files. A different application running on a group of instances managed by an Auto Scaling group processes the video files and then deletes them from the EFS share. The results are stored in an S3 bucket. Links to the processed video files are emailed to the customer. The company has recently discovered that as they add more instances to the Auto Scaling Group, many files are processed twice, so image processing speed is not improved. The maximum size of these video files is 2GB. What should the Solutions Architect do to improve reliability and reduce the redundant processing of video files?


A) Modify the web application to upload the video files directly to Amazon S3. Use Amazon CloudWatch Events to trigger an AWS Lambda function every time a file is uploaded, and have this Lambda function put a message into an Amazon SQS queue. Modify the video processing application to read from SQS queue for new files and use the queue depth metric to scale instances in the video processing Auto Scaling group.
B) Set up a cron job on the web server instance to synchronize the contents of the EFS share into Amazon S3. Trigger an AWS Lambda function every time a file is uploaded to process the video file and store the results in Amazon S3. Using Amazon CloudWatch Events, trigger an Amazon SES job to send an email to the customer containing the link to the processed file.
C) Rewrite the web application to run directly from Amazon S3 and use Amazon API Gateway to upload the video files to an S3 bucket. Use an S3 trigger to run an AWS Lambda function each time a file is uploaded to process and store new video files in a different bucket. Using CloudWatch Events, trigger an SES job to send an email to the customer containing the link to the processed file.
D) Rewrite the web application to run from Amazon S3 and upload the video files to an S3 bucket. Each time a new file is uploaded, trigger an AWS Lambda function to put a message in an SQS queue containing the link and the instructions. Modify the video processing application to read from the SQS queue and the S3 bucket. Use the queue depth metric to adjust the size of the Auto Scaling group for video processing instances.

E) None of the above
F) All of the above

Correct Answer

verifed

verified

One of the components that is part of ec2-net-utils used with ENI's is ec2ifscan. Which of the following is not correct about ec2-net-utils?


A) ec2-net-utils generates an interface configuration file suitable for use with DHCP.
B) ec2-net-utils extends the functionality of the standard if up.
C) ec2-net-utils detaches a primary network interface from an instance.
D) ec2-net-utils identifies network interfaces when they are attached, detached, or reattached to a running instance.

E) None of the above
F) A) and C)

Correct Answer

verifed

verified

A company has an application behind a load balancer with enough Amazon EC2 instances to satisfy peak demand. Scripts and third-party deployment solutions are used to configure EC2 instances when demand increases or an instance fails. The team must periodically evaluate the utilization of the instance types to ensure that the correct sizes are deployed. How can this workload be optimized to meet these requirements?


A) Use CloudFormer` to create AWS CloudFormation stacks from the current resources. Deploy that stack by using AWS CloudFormation in the same region. Use Amazon CloudWatch alarms to send notifications about underutilized resources to provide cost-savings suggestions.
B) Create an Auto Scaling group to scale the instances, and use AWS CodeDeploy to perform the configuration. Change from a load balancer to an Application Load Balancer. Purchase a third-party product that provides suggestions for cost savings on AWS resources.
C) Deploy the application by using AWS Elastic Beanstalk with default options. Register for an AWS Support Developer plan. Review the instance usage for the application by using Amazon CloudWatch, and identify less expensive instances that can handle the load. Hold monthly meetings to review new instance types and determine whether Reserved instances should be purchased.
D) Deploy the application as a Docker image by using Amazon ECS. Set up Amazon EC2 Auto Scaling and Amazon ECS scaling. Register for AWS Business Support and use Trusted Advisor checks to provide suggestions on cost savings.

E) B) and C)
F) C) and D)

Correct Answer

verifed

verified

A large multinational company runs a timesheet application on AWS that is used by staff across the world. The application runs on Amazon EC2 instances in an Auto Scaling group behind an Elastic Load Balancing (ELB) load balancer, and stores data in an Amazon RDS MySQL Multi-AZ database instance. The CFO is concerned about the impact on the business if the application is not available. The application must not be down for more than two hours, but he solution must be as cost-effective as possible. How should the Solutions Architect meet the CFO's requirements while minimizing data loss?


A) In another region, configure a read replica and create a copy of the infrastructure. When an issue occurs, promote the read replica and configure as an Amazon RDS Multi-AZ database instance. Update the DNS record to point to the other region's ELB.
B) Configure a 1-day window of 60-minute snapshots of the Amazon RDS Multi-AZ database instance. Create an AWS CloudFormation template of the application infrastructure that uses the latest snapshot. When an issue occurs, use the AWS CloudFormation template to create the environment in another region. Update the DNS record to point to the other region's ELB.
C) Configure a 1-day window of 60-minute snapshots of the Amazon RDS Multi-AZ database instance which is copied to another region. Crate an AWS CloudFormation template of the application infrastructure that uses the latest copied snapshot. When an issue occurs, use the AWS CloudFormation template to create the environment in another region. Update the DNS record to point to the other region's ELB.
D) Configure a read replica in another region. Create an AWS CloudFormation template of the application infrastructure. When an issue occurs, promote the read replica and configure as an Amazon RDS Multi-AZ database instance and use the AWS CloudFormation template to create the environment in another region using the promoted Amazon RDS instance. Update the DNS record to point to the other region's ELB.

E) A) and D)
F) None of the above

Correct Answer

verifed

verified

A user has launched two EBS backed EC2 instances in the US-East-1a region. The user wants to change the zone of one of the instances. How can the user change it?


A) It is not possible to change the zone of an instance after it is launched
B) From the AWS EC2 console, select the Actions - > Change zones and specify the new zone
C) The zone can only be modified using the AWS CLI
D) Stop one of the instances and change the availability zone

E) C) and D)
F) None of the above

Correct Answer

verifed

verified

Showing 841 - 860 of 871

Related Exams

Exam 1

AWS Certified Advanced Networking - Specialty (ANS-C00)

397 Questions

Exam 2

AWS Certified Alexa Skill Builder - Specialty

68 Questions

Exam 3

AWS Certified Cloud Practitioner (CLF-C01)

803 Questions

Exam 4

AWS Certified Data Analytics - Specialty (DAS-C01)

135 Questions

Exam 5

AWS Certified Database - Specialty

156 Questions

Exam 6

AWS Certified Developer Associate (DVA-C01)

470 Questions

Exam 7

AWS Certified Machine Learning - Specialty (MLS-C01)

159 Questions

Exam 8

AWS Certified Security - Specialty (SCS-C01)

295 Questions

Exam 9

AWS Certified Solutions Architect - Associate SAA-C02

596 Questions

Exam 11

AWS Certified SysOps Administrator - Associate (SOA-C02)

54 Questions

Exam 12

AWS DevOps Engineer - Professional (DOP-C01)

610 Questions

Exam 13

AWS Certified SysOps Administrator (SOA-C01)

976 Questions

Show Answer