AWS Solutions Architect Professional Exam Dumps Free

1. A company deployed an application on AWS in a single AWS Region. It is a Windows application that runs on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances run in an Amazon EC2 Auto Scaling group, and the application uses a Multi-AZ Amazon RDS DB instance to store data. A solutions architect needs to develop a cross-Region disaster-recovery (DR) scenario to help ensure business continuity. The company requires a target RTO of 3 minutes and a RPO of 30 seconds. The company does not want to make any changes to the application.

Which solution will meet these requirements?

2. A company uses multiple Amazon DynamoDB tables to host data for three different applications. A security administrator would like to provide application administrators with the ability to manage permissions for the tables that are associated with each administrator's specific application only. The application administrators are currently part of an IAM group called DynamoDBAdmins, which has permissions on all tables. The company will create additional administrators and tables for new applications in the future.

Recently, one of the application administrators was able to create an IAM role that had permissions on tables not associated with the administrator's application. The security administrator must create a new solution that prevents application administrators from obtaining permissions on tables that are not associated with their applications.

Which solution meets this requirement with the LEAST amount of ongoing administrative effort?

3. A company has deployed a multi-tier web application in the AWS Cloud. The application consists of the following tiers:
• A Windows-based web tier that is hosted on Amazon EC2 instances with Elastic IP addresses
• A Linux-based application tier that is hosted on EC2 instances that run behind an Application Load Balancer (ALB) that uses path-based routing
• A MySQL database that runs on a Linux EC2 instance
All the EC2 instances are using Intel-based x86 CPUs. A solutions architect needs to modernize the infrastructure to achieve better performance. The solution must minimize the operational overhead of the application. Which combination of actions should the solutions architect take to meet these requirements? (Select TWO.)

4. While prioritizing applications for migration to AWS, the focus is on establishing initial criteria to define workloads that are good candidates for pilot applications. Which one of these would define the highest priority application to migrate?

5. A scientific research organization is looking for a data backup solution for their on-premises data. Their hybrid cloud storage solution should include
• Seamless connection between on-premises environments and AWS
• Quick and easy to deploy
• Moving backups to the cloud, using on-premises file shares backed by durable and cost-effective cloud storage
• Providing low-latency access to data in AWS for on-premises applications
• End-to-end data protection
Which of these will be a cost-conscious architecture that satisfies all of the above?

6. You are designing a serverless architecture for a web application on AWS. The application needs to process events from various sources asynchronously and trigger different AWS services based on these events. Which AWS service is suitable for this scenario?

7. A financial company is embarking on a journey to migrate its on-premises applications, database, and servers to AWS. They are looking for a single place to discover their existing servers, plan migrations, and track the status of each application migration.
You are hired as a migration expert. The company expects you to come up with recommendations to analyze their applications and help them determine the optimal strategy and tools to migrate and modernize at scale. Which AWS service will help you serve the company's needs?

8. A company is storing data in several Amazon DynamoDB tables. A solutions architect must use a serverless architecture to make the data accessible publicly through a simple API over HTTPS. The solution must scale automatically in response to demand. Which solutions meet these requirements? (Choose two.)

9. A Big Data company stores all its raw data in Amazon S3. Over a few days in every quarter of the calendar year, the petabyte-scale of data needs to be processed to the analytical platform. This processed data gets analyzed during Company's Quarterly Business Review (QBR) meeting and again in the annual review meeting by the year-end. As part of this solution, they plan to run their S3 data through 10 nodes of the Amazon EMR cluster hosted on c5.large EC2 instances and finally load the data to Amazon Redshift. You are a Solution Architect at the company, and the CTO
tasked you to optimize the cost of the overall solution. Which of these will be your pick?

10. With respect to AWS Lambda permissions model, at the time you create a Lambda function, you specify an IAM role that AWS Lambda can assume to execute your Lambda function on your behalf. This role is also referred to as the role.

11. By default, what is the maximum number of Cache Nodes you can run in Amazon EIastiCache?

12. A company has a three-tier application on AWS. The first two tiers consist of an enterprise Java web application and an order-processing application. Both applications run in Amazon EC2 Auto Scaling groups that the company deployed across multiple Availability Zones. The order-processing application is a complex stand-alone program. Typically, the order-processing application finishes within a few minutes. However, for large orders, the processing can take hours. The database tier consists of a MySQL database that runs on EC2 instances. The company wants to reduce the number of servers that it manages.

Which solution will meet these requirements?

13. A web design company builds and maintains customer products in separate AWS accounts. The company has its own AWS account and has full access to manage AWS accounts on behalf of its customers. As the number of the company's customers grows, the company's security team becomes overwhelmed with incident reports. The security team needs an efficient way to determine two things: the access to resources that is granted to external IAM identities and what sensitive information that is stored in Amazon S3 is publicly accessible.

Which solution meet these requirements with the LEAST operational overhead?

14. A company hosts multiple public web applications in the AWS Cloud. The company wants to give its employees the ability to work from home. Employees should have access to the company's applications. The employees also need access to a variety of Microsoft Windows desktop applications from the home computers that they regularly use for work.

Which solution will meet these requirements with the LEAST operational overhead?

15. A global weather company wants to migrate its main analytics application to AWS. The analytics application receives billions of events every day from multiple sensors in various locations. The company processes data by using a long-running process that the company implements in Java to build hourly, daily, and weekly trend forecasts. Some parts of the data processing can take more than 30 minutes.

When the data processing finishes, the company stores the data in a MySQL database, where the company can retrieve it for further analysis. As the amount of weather data grows, the existing analytics application that creates the trend forecasts experiences longer data retrieval times. Interaction with the database must be significantly faster to meet a new service level agreement.

Which migration strategy will meet these requirements with the FASTEST data retrieval time?

16. Doug has created a VPC with CIDR 10.201.0.0/16 in his AWS account. In this VPC he has created a public subnet with CIDR block 10.201.31.0/24. While launching a new EC2 from the console, he is not able to assign the private IP address 10.201.31.6 to this instance. Which is the most likely reason for this issue?

17. An international media company uses an on-premises data center, which comprises over 300 servers to store and process its large amount of data for its clients spread across 100 countries. To achieve Disaster Recovery (DR), the company relies on a second nearby data center and replicates its full stack of physical tapes. The DR process is manual, requires a significant number of resources, and staff has to travel to the secondary data center to retrieve the correct tapes if a DR event occurs.
The company wants to improve and automate its business unit's DR to replicate and recover its workloads to achieve faster recovery and minimize data loss during a service interruption.
The company hired you as a Solution Architect to guide them in this journey. What would you recommend here?

18. You help a team to create various AMls and Docker images through EC2 Image Builder pipelines. Other teams want to use the same EC2 Image Builder resources, including components, recipes and images in their image pipelines. You need to find a proper approach to share resources with other organizational units inside the AWS Organization or other specific AWS accounts. Which of the following methods is suitable?

19. A solutions architect is designing an application for a research company. The application will perform several complex mathematical calculations on a nightly basis. Each calculation is independent of all other calculations. Each calculation can take several hours to finish running.
The application design must minimize costs and interdependencies. Calculations must be run in parallel.

What should the solutions architect do to meet these requirements?

20. A company has a large AWS infrastructure footprint. The company needs to create some new Amazon EC2 instances and an Amazon S3 bucket. The company needs sub-second latency communications between the EC2 instances and the S3 bucket. The data and applications must reside on hardware under the company's physical control because of the sensitive nature of the information the company stores. The company wants to manage all the resources by using the AWS Management Console and the AWS CLI.

Which configuration will meet these requirements?

21. Your team uses Elastic Beanstalk to manage a legacy JAVA application for a financial system. The Elastic Beanstalk
environment is based on Amazon Linux. Now you need to update the operating system to Amazon Linux 2 in order to
take advantage of the latest Elastic Beanstalk functionality. During the update, there should be minimal service impact
to the application. Which of the following options describes the correct order to perform the operating system update?
1. Turn the new environment into the production environment by swapping its CNAME with the existing environment's
CNAME.
2. In the Elastic Beanstalk console, select the environment and update the platform to Amazon Linux 2.
3. Create a new environment in Elastic Beanstalk and deploy the application code to it.
4. Find and fix any application compatibility issues in the Amazon Linux 2 environment.
5. Terminate the old Elastic Beanstalk environment.

22. A company has two AWS accounts: one account for production workloads and one account for development workloads. A development team and an operations team create and manage these workloads. The company needs a security strategy that meets the following requirements:
• Developers need to create and delete development application infrastructure.
• Operators need to create and delete development and production application infrastructure.
• Developers must have no access to production infrastructure.
• All users must have a single set of AWS credentials.
Which strategy will meet these requirements?

23. You are working in a company as an AWS engineer. Your company uses a lot of Elastic Beanstalk applications on different platforms. Most of the Elastic Beanstalk environments do not enable platform updates. So, your team has to update the platforms during scheduled maintenance windows manually. You would like to enable managed platform updates through the Elastic Beanstalk console. Which of the following options do you need to configure for the managed platform updates? (Select TWO.)

24. A company uses AWS Organizations. The company recently acquired a new business unit and invited the new unit’s existing account to the company’s organization. The organization uses a deny list SCP in the root of the organization and all accounts are members of a single OU named Production. The administrators of the new business unit discovered that they are unable to access AWS Database Migration Service (DMS) to complete an in-progress migration. Which option will temporarily allow administrators to access AWS DMS and complete the migration project?

25. As a Solution Architect of a startup company, to reduce costs and improve performance, you want to identify workload patterns based on the usage and cost for diverse workloads in AWS compute resources like Amazon EC2 instance types, Amazon Elastic Block Store (EBS) volumes, Auto Scaling Group, AWS Lambda functions, etc. and avoid overprovisioning and underprovisioning of those resources.

You are expecting some kind of dashboard view in AWS that shows the savings and performance improvement opportunities at the account level, the estimated monthly savings and the possible savings for over-provisioned resources, and the bottleneck risk with the current configuration for under-provisioned resources. Which of the below services in AWS can serve your purpose?

26. A company is in the process of implementing AWS Organizations to constrain its developers to use only Amazon EC2. Amazon S3 and Amazon DynamoDB. The developers account resides In a dedicated organizational unit (OU). The solutions architect has implemented the following SCP on the developers account:

When this policy is deployed, IAM users in the developers account are still able to use AWS services that are not listed in the policy.
What should the solutions architect do to eliminate the developers' ability to use services outside the scope of this policy?

27. A company has many AWS accounts that individual business groups own. One of the accounts was recently compromised. The attacker launched a large number of instances, resulting in a high bill for that account. The company addressed the security breach, but a solutions architect needs to develop a solution to prevent excessive spending in all accounts. Each business group wants to retain full control of its AWS account. Which solution should the solutions architect recommend to meet these requirements?

28. You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet.
Which of the following options would you consider? (Choose two.)

29. A company operates an ecommerce application on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. After an order is successfully processed, the application immediately posts order data to a third-party affiliate’s external tracking system that pays sales commissions for order referrals.

During a successful marketing promotion, the number of EC2 instances increased from 2 to 20. The application continued to work correctly during this time. However, the increased request rate overwhelmed the third-party affiliate and resulted in failed requests. Which combination of architectural changes should a solutions architect make to ensure that the entire process functions correctly under load? (Select TWO.)

30. A company is hosting a three-tier web application in an on-premises environment. Due to a recent surge in traffic that resulted in downtime and a significant financial impact, company management has ordered that the application be moved to AWS. The application is written in .NET and has a dependency on a MySQL database A solutions architect must design a scalable and highly available solution to meet the demand of 200000 daily users.
Which steps should the solutions architect take to design an appropriate solution?

31. A company runs a sensitive application on Amazon EC2 instances in a VPC. The company wants to monitor and analyze network traffic for possible threats. The solution must scale to accommodate large amounts of network traffic. Additionally, the solution must offer the ability to query and visualize the data.

Which solution will meet these requirements with the LEAST operational overhead?

32. A company runs a serverless mobile app that uses Amazon API Gateway, AWS Lambda functions, Amazon Cognito, and Amazon DynamoDB. During large surges in traffic, users report intermittent system failures. The API Gateway API endpoint is returning HTTP status code 502 (Bad Gateway) errors to valid requests. Which solution will resolve this issue?

33. A retail company stores sales data for millions of products in a MySQL database that runs on Amazon EC2 instances. As the number of products increases, the company observes performance degradation in the database. Because of poor demand forecasts, the company frequently runs out of products. To prevent lost sales that result from product shortages, the company wants to automate the creation of demand forecasts by using analytics. The company is evaluating other AWS managed database options. The company has the following requirements:

Perform analytics on incoming data every minute.
Recognize consumer behavior trends such as daily page views, cart abandonment rate, and weekly orders based on aggregate, derivative, and correlation functions.
Efficiently store hundreds of terabytes of data, including current and historical data, to optimize performance.
Which solution will meet these requirements with the LEAST operational overhead?

34. XYZ Inc. is a global financial institution that manages sensitive customer data. They recently migrated their infrastructure to AWS for improved security and scalability. To continuously improve their existing solution, XYZ Inc. wants to enhance their data protection measures and implement advanced security controls. Which of the following approaches would be most effective for XYZ Inc to encrypt sensitive data at rest and in transit, which AWS service should XYZ Inc. use?

35. A company has a long-running analytics process that it runs on premises. The current infrastructure consists of a cluster of high-performance servers that are connected through a low-latency fiber network. The current infrastructure is due for a major hardware upgrade that will require a large budget increase. The company is considering migrating the analytics process to AWS. A solutions architect must recommend a solution to replicate the on-premises architecture on AWS.

Which solution would meet these requirements MOST cost-effectively?

36. A company has built an online ticketing web application on AWS. The application is hosted on AWS App Runner and uses images that are stored in an Amazon Elastic Container Registry (Amazon ECR) repository. The application stores data in an Amazon Aurora MySQL DB cluster.
The company has set up a domain name in Amazon Route 53. The company needs to deploy the application across two AWS Regions in an active-active configuration. Which combination of steps will meet these requirements with the LEAST change to the architecture? (Select THREE.)

37. A company is performing a full migration of its systems from an on-premises data center to the AWS Cloud. The company needs to move all the data that is stored on premises to Amazon S3 within 4 weeks. Currently, the on-premises storage holds 900 TB of data and is connected to the internet with a 100 Mbps connection. Existing systems use up to 20% of the connection's throughput in real time.

Which solution will complete the migration in the required time frame?

38. You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet. Which of the following options would you consider? (Choose 2 answers)

39. An e-commerce company wants to continuously improve its recommendation engine by analyzing customer behavior and preferences in real-time. Which AWS service can help them collect and analyze this data?

40. A company has multiple AWS accounts in an organization in AWS Organizations. The company has integrated its on-premises Active Directory with AWS Single Sign-On (AWS SSO) to grant Active Directory users least privilege permissions to manage infrastructure across all the accounts. A solutions architect must integrate a third-party monitoring solution that requires read-only access across all AWS accounts. The monitoring solution will run in its own AWS account. What should the solutions architect do to provide the monitoring solution with the required permissions?

41. A company's processing team has an AWS account with a production application. The application runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are hosted in private subnets in a VPC in the eu-west-1 Region. The VPC was assigned the CIDR block of 10.0.0.0/16. The company's billing team recently created a new AWS account and deployed an application on EC2 instances that are hosted in private subnets in a VPC in the eu-central-1 Region. The new VPC is assigned the CIDR block of 10.0.0.0/16.

The processing application needs to communicate securely with the billing application over a proprietary TCP port.

What should a solutions architect do to meet this requirement with the LEAST operational effort?

42. A user is hosting a public website on AWS. The user wants to have the database and the app server on the AWS VPC. The user wants to setup a database that can connect to the Internet for any patch upgrade but cannot receive any request from the internet. How can the user set this up?

43. A company has created an OU in AWS Organizations for each of its engineering teams Each OU owns multiple AWS accounts. The organization has hundreds of AWS accounts A solutions architect must design a solution so that each OU can view a breakdown of usage costs across its AWS accounts.
Which solution meets these requirements?

44. A company has a series of AWS Lambda functions that perform a complex series of processing activities. The functions need to run in a specific order. The entire workflow typically finishes in a few seconds, and the workflow always finishes in less than 20 seconds. A single Amazon API Gateway REST API call handles the processing requests. The REST API requires a response when the request is finished. It is possible to process multiple requests at the same time. The API Gateway code reuses the same execution name each time the workflow is called. The company is considering AWS Step Functions as a solution to create and manage the workflow.

Which solution will meet these requirements?

45. You are tasked with moving a legacy application from a virtual machine running Inside your datacenter to an Amazon VPC Unfortunately this app requires access to a number of on-premises services and no one who configured the app still works for your company. Even worse there's no documentation for it. What will allow the application running inside the VPC to reach back and access its internal dependencies without being reconfigured? (Choose 3 answers)

46. Your company uses a hybrid environment to host its infrastructure and services. Applications are mainly deployed in AWS. As a part of the company strategy, certain Amazon EC2 instances need to be exported through the VM Import/Export tool as OVA files and deployed in the on-premises VMware vSphere environment. How would you use the VM Import/ Export tool in the right way?

47. A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 in this VPC. The user is trying to create another subnet with the same VPC for CIDR 20.0.0.1/24. What will happen in this scenario?

48. A company is hosting an image-processing service on AWS in a VPC. The VPC extends across two Availability Zones. Each Availability Zone contains one public subnet and one private subnet. The service runs on Amazon EC2 instances in the private subnets. An Application Load Balancer in the public subnets is in front of the service. The service needs to communicate with the internet and does so through two NAT gateways. The service uses Amazon S3 for image storage. The EC2 instances retrieve approximately 1 ¢ ' of data from an S3 bucket each day. The company has promoted the service as highly secure. A solutions architect must reduce cloud expenditures as much as possible without compromising the service's security posture or increasing the time spent on ongoing operations.
Which solution will meet these requirements?

49. A company uses an on-premises data analytics platform. The system is highly available in a fully redundant configuration across 12 servers in the company's data center.
The system runs scheduled jobs, both hourly and daily, in addition to one-time requests from users. Scheduled jobs can take between 20 minutes and 2 hours to finish running and have tight SLAs. The scheduled jobs account for 65% of the system usage. User jobs typically finish running in less than 5 minutes and have no SL

50. Each development team at a company has its own nonproduction AWS accounts in AWS Organizations. In each of these accounts, developers have IAM users in developer IAM groups who grant administrative and cost permissions to their users. Each development team routinely exceeds its monthly budget. The company wants to place constraints on the development teams to reduce spending.

Which solution will prevent the development teams from launching new resources if they exceed the monthly budget?

51. The two policies that you attach to an IAM role are the access policy and the trust policy. The trust policy identifies who can assume the role and grants the permission in the AWS Lambda account principal by adding the action.

52. You are looking to migrate your Development (Dev) and Test environments to AWS. You have decided to use separate AWS accounts to host each environment.
You plan to link each accounts bill to a Master AWS account using Consolidated Billing. To make sure you keep within budget you would like to implement a way for administrators in the Master account to have access to stop, delete and/or terminate resources in both the Dev and Test accounts.
Identify which option will allow you to achieve this goal.

53. Your team is developing a new Lambda function for a microservice component. You need to package and deploy the Lambda function as a container image. The container image should be built based on the python:buster image with other dependencies and libraries installed. In order to use the container image properly for the Lambda function, which of the following actions is required?

54. A company is launching a new web service on an Amazon Elastic Container Service (Amazon ECS) cluster. The cluster consists of 100 Amazon EC2 instances. Company policy requires the security group on the cluster instances to block all inbound traffic except HTTPS (port 443). Which solution will meet these requirements?

55. A company has a three-tier web application that runs on Amazon EC2 instances behind an Application Load Balancer. The web and application tier instances run in Amazon EC2 Auto Scaling groups. The company has implemented the data tier on a single EC2 instance that runs a PostgreSQL database. The company has already replicated the web and application tiers to a second Region by using CloudFormation Stacksets. The company manages DNS requests by using Amazon Route 53 with configured weighted record sets. A solutions architect needs to design a multi-Region failover strategy for the data tier.

Which solution will meet these requirements with the FASTEST recovery time?

56. You are a Solution Architect in a Government research company. Recently in an audit by the Cloud Security Office team, most of your resources spread across multiple accounts become non-compliant. The CTO of the company has instructed you to come up with a framework to build and deploy compliance packages for all your AWS resources across multiple accounts and regions, which includes rules and remediation actions that are authored by the Cloud Security Officer. Also, the framework should have a reporting aspect and reduce the time for a resource left in a non-
compliant state. Which of the following will help you achieve this?

57. You've been brought in as solutions architect to assist an enterprise customer with their migration of an e-commerce platform to Amazon Virtual Private Cloud (VPC) The previous architect has already deployed a 3-tier VPC. The configuration is as follows:

VPC: vpc-2f8bc447
IGW: igw-2d8bc445 NACL: ad-208bc448
Subnets and Route Tables: Web sewers: subnet-258bc44d
Application servers: subnet-248bc44c Database sewers: subnet-9189c6f9
Route Tables: rrb-218bc449 rtb-238bc44b Associations: subnet-258bc44d : rtb-218bc449 subnet-248bc44c : rtb-238bc44b subnet-9189c6f9 : rtb-238bc44b
You are now ready to begin deploying EC2 instances into the VPC Web servers must have direct access to the internet Application and database servers cannot have direct access to the internet. Which configuration below will allow you the ability to remotely administer your application and database servers, as well as allow these sewers to retrieve updates from the Internet?

58. An organization is setting up a backup and restore system in AWS of their in premise system. The organization needs High AvaiIabiIity(HA) and Disaster Recovery(DR) but is okay to have a longer recovery time to save costs. Which of the below mentioned setup options helps achieve the objective of cost saving as well as DR in the most effective way?

59. A video-sharing mobile app uploads files that are larger than 10 GB to an Amazon S3 bucket. However, when users access the application in locations that are far away from the AWS Region where the S3 bucket resides, uploads take extended periods of time. In some cases, the uploads fail before they are complete.

Which combination of steps should a solutions architect take to improve the upload performance of the application? (Select TWO.)

60. You are a Solution Architect in an airline company. They want your advice as they embark on their on-premises to AWS Cloud migration journey. You are guiding the customer to perform their pre-migration assessment. At the moment, you are in the application portfolio assessment phase. Due to lack of time, you must ensure that the team does not pick up
something that is irrelevant to the assessment.
Which of the below activities are Not part of the Application Portfolio Assessment phase for AWS Cloud migration? (Select Two)

61. A financial company is embarking on a journey to migrate its on-premises legacy applications to AWS. The company's purpose of migration is to boost agility and improve business continuity; hence, they are talking about the decomposition of the monoliths to microservices. You are hired as a solution architect to help the company guide in the process of migration. After a few meetings with the business and tech team, you plan to use AWS serverless services to build the microservices.
Which migration strategy best suits this case?

62. A company has deployed a trading application in several AWS Regions. The application uses third-party REST services that are also deployed on AWS in the same Regions as the trading application. For security reasons, the application uses AWS PrivateLink VPC endpoints to connect to the third-party services. Recently, one of the third-party services began sending internal error responses. The error responses caused instability in the trading application in that Region. The result was a heavy financial loss for the company. The company wants a solution to failover to a secondary Region if a third-party service does not respond properly in one of the Regions.

Which solution will meet these requirements?

63. A read only news reporting site with a combined web and application tier and a database tier that receives large and unpredictable traffic demands must be able to respond to these traffic fluctuations automatically.
What AWS services should be used meet these requirements?

64. Your company plans to host a large donation website on Amazon Web Services (AWS). You anticipate a large and undetermined amount of traffic that will create many database writes. To be certain that you do not drop any writes to a database hosted on AWS.
Which service should you use?

65. A team is building an HTML form that is hosted in a public Amazon S3 bucket. The form uses JavaScript to post data to an Amazon API Gateway API endpoint. The API endpoint is integrated with AWS Lambda functions. The team has tested each method in the API Gateway console and has received valid responses. Which combination of steps must the team complete so that the form can successfully post to the API endpoint and receive a valid response? (Select TWO.)

66. You are migrating a legacy client-server application to AWS. The application responds to a specific DNS domain (e.g. www.examp|e.com) and has a 2-tier architecture, with multiple application sewers and a database sewer. Remote clients use TCP to connect to the application servers. The application servers need to know the IP address of the clients in order to function properly and are currently taking that information from the TCP socket. A MuIti-AZ RDS MySQL instance will be used for the database. During the migration you can change the application code, but you have to file a change request. How would you implement the architecture on AWS in order to maximize scalability and high availability?

67. A company uses AWS Organizations to manage its accounts. The company wants to prohibit the use of unapproved services in production AWS accounts. The company also wants to minimize additional management overhead as the number of accounts increases.

Which approach will meet these requirements?

68. An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue several API commands to discover Amazon EC2 resources running within the enterprise's account The enterprise has internal security policies that require any outside access to their environment must conform to the principles of least privilege and there must be controls in place to ensure that the credentials used by the SaaS vendor cannot be used by any other third party.
Which of the following would meet all of these conditions?

69. A company has a requirement to store documents that will be accessed by a serverless application. The documents will be accessed frequently for the first 3 months, and rarely after that. The documents must be retained for 7 years. What is the MOST cost-effective solution to meet these requirements?

70. A company is storing data on premises on a Windows file server. The company produces 5 GB of new data daily.
The company migrated part of its Windows-based workload to AWS and needs the data to be available on a file system in the cloud. The company already has established an AWS Direct Connect connection between the on-premises network and AWS.
Which data migration strategy should the company use?

71. An international travel-booking service company that sees 100 million unique users monthly for their web app, has built and deployed its applications in Amazon EC2 behind Elastic Load Balancer (ELB). To manage the surge in traffic, EC2 instances are configured with Auto Scaling Groups.
To improve the user experience and resolve latency, downtime related issues for global customers, the company is looking for a cross-region traffic management solution to route user traffic to the optimal endpoint based on performance, user's location, and instant reaction to the changes in application health.
You have been hired as a Solution Architect to implement this solution. Which is the best option in your opinion?

72. A solutions architect needs to reduce costs for a big data application. The application environment consists of hundreds of devices that send events to Amazon Kinesis Data Streams. The device ID is used as the partition key, so each device gets a separate shard. Each device sends between 50 KB and 450 KB of data each second. An AWS Lambda function polls the shards, processes the data, and stores the result in Amazon S3.
Every hour, another Lambda function runs an Amazon Athena query against the result data to identify outliers. This Lambda function places the outliers in an Amazon Simple Queue Service (Amazon SQS) queue. An Amazon EC2 Auto Scaling group of two EC2 instances monitors the queue and runs a 30- second process to address the outliers. The devices submit an average of 10 outlying values every hour. Which combination of changes to the application will MOST reduce costs? (Select TWO.)

73. A company is using an on-premises Active Directory service for user authentication. The company wants to use the same authentication service to sign in to the company's AWS accounts, which are using AWS Organizations. AWS Site-to-Site VPN connectivity already exists between the on-premises environment and all the company's AWS accounts.
The company's security policy requires conditional access to the accounts based on user groups and roles. User identities must be managed in a single location.
Which solution will meet these requirements?

74. A company uses a service to collect metadata from applications that the company hosts on premises. Consumer devices such as TVs and internet radios access the applications. Many older devices do not support certain HTTP headers and exhibit errors when these headers are present in responses. The company has configured an on-premises load balancer to remove the unsupported headers from responses sent to older devices, which the company identified by the User-Agent headers. The company wants to migrate the service to AWS, adopt serverless technologies, and retain the ability to support the older devices. The company has already migrated the applications into a set of AWS Lambda functions.
Which solution will meet these requirements?

75. A company is migrating an application from its data center to the AWS Cloud. The application currently stores an API key that is used to access a third-party service in a local file. When the application is deployed on AWS, the application will run on Amazon EC2 instances. As part of the migration, the application must make the API key more secure. Specifically, the application has these requirements:

Each environment (such as development, test, and production) must have its own API key.
All API key access requests must be logged for auditing purposes.
The API keys must be encrypted at rest with a customer managed key.
Access permissions must be granular. For example, the development environment cannot access the production API key.
What is the MOST secure way to meet these requirements?