Exam 3 (Udemy)
A Docker application, which is running on an Amazon ECS cluster behind a load balancer, is heavily using
Dynamo DB. You are instructed to improve the database performance by distributing the workload
evenly and using the provisioned throughput efficiently.
Which of the following would you consider to implement for your Dynamo DB table? - correct answers
An online shopping platform is hosted on an Auto Scaling group of Spot EC2 instances and uses Amazon
Aurora PostgreSQL as its database. There is a requirement to optimize your database workloads in your
cluster where you have to direct the write operations of the production traffic to your high-capacity
instances and point the reporting queries sent by your internal staff to the low-capacity instances.
Which is the most suitable configuration for your application as well as your Aurora database cluster to
achieve this requirement? - correct answers
An online medical system hosted in AWS stores sensitive Personally Identifiable Information (PII) of the
users in an Amazon S3 bucket. Both the master keys and the unencrypted data should never be sent to
AWS to comply with the strict compliance and regulatory requirements of the company.
Which S3 encryption technique should the Architect use? - correct answersS3 CLIENT SIDE ENCRYPTION
WITH A CLIENT SIDE MASTER KEY
A global IT company with offices around the world has multiple AWS accounts. To improve efficiency
and drive costs down, the Chief Information Officer (CIO) wants to set up a solution that centrally
manages their AWS resources. This will allow them to procure AWS resources centrally and share
resources such as AWS Transit Gateways, AWS License Manager configurations, or Amazon Route 53
Resolver rules across their various accounts.
As the Solutions Architect, which combination of options should you implement in this scenario? (Select
TWO.) - correct answers Consolidate all of the company's accounts using AWS Organizations.
AND
, Use the AWS Identity and Access Management service to set up cross-account access that will easily and
securely share your resources with your AWS accounts.
An organization needs a persistent block storage volume that will be used for mission-critical workloads.
The backup data will be stored in an object storage service and after 30 days, the data will be stored in a
data archiving storage service.
What should you do to meet the above requirement? - correct answers Attach an instance store volume
in your existing EC2 instance.
Use Amazon S3 to store your backup data and configure a lifecycle policy to transition your objects to
Amazon S3 Glacier
A company has a hybrid cloud architecture that connects their on-premises data center and cloud
infrastructure in AWS. They require a durable storage backup for their corporate documents stored on-
premises and a local cache that provides low latency access to their recently accessed data to reduce
data egress charges. The documents must be stored to and retrieved from AWS via the Server Message
Block (SMB) protocol. These files must immediately be accessible within minutes for six months and
archived for another decade to meet the data compliance.
Which of the following is the best and most cost-effective approach to implement in this scenario? -
correct answers Launch a new file gateway that connects to your on-premises data center using AWS
Storage Gateway. Upload the documents to the file gateway and set up a lifecycle policy to move the
data into Glacier for data archival.
An application consists of multiple EC2 instances in private subnets in different availability zones. The
application uses a single NAT Gateway for downloading software patches from the Internet to the
instances. There is a requirement to protect the application from a single point of failure when the NAT
Gateway encounters a failure or if its availability zone goes down.
How should the Solutions Architect redesign the architecture to be more highly available and cost-
effective - correct answers Create a NAT Gateway in each availability zone. Configure the route table in
each public subnet to ensure that instances use the NAT Gateway in the same availability zone.
A company has 3 DevOps engineers that are handling its software development and infrastructure
management processes. One of the engineers accidentally deleted a file hosted in Amazon S3 which has
caused disruption of service.
A Docker application, which is running on an Amazon ECS cluster behind a load balancer, is heavily using
Dynamo DB. You are instructed to improve the database performance by distributing the workload
evenly and using the provisioned throughput efficiently.
Which of the following would you consider to implement for your Dynamo DB table? - correct answers
An online shopping platform is hosted on an Auto Scaling group of Spot EC2 instances and uses Amazon
Aurora PostgreSQL as its database. There is a requirement to optimize your database workloads in your
cluster where you have to direct the write operations of the production traffic to your high-capacity
instances and point the reporting queries sent by your internal staff to the low-capacity instances.
Which is the most suitable configuration for your application as well as your Aurora database cluster to
achieve this requirement? - correct answers
An online medical system hosted in AWS stores sensitive Personally Identifiable Information (PII) of the
users in an Amazon S3 bucket. Both the master keys and the unencrypted data should never be sent to
AWS to comply with the strict compliance and regulatory requirements of the company.
Which S3 encryption technique should the Architect use? - correct answersS3 CLIENT SIDE ENCRYPTION
WITH A CLIENT SIDE MASTER KEY
A global IT company with offices around the world has multiple AWS accounts. To improve efficiency
and drive costs down, the Chief Information Officer (CIO) wants to set up a solution that centrally
manages their AWS resources. This will allow them to procure AWS resources centrally and share
resources such as AWS Transit Gateways, AWS License Manager configurations, or Amazon Route 53
Resolver rules across their various accounts.
As the Solutions Architect, which combination of options should you implement in this scenario? (Select
TWO.) - correct answers Consolidate all of the company's accounts using AWS Organizations.
AND
, Use the AWS Identity and Access Management service to set up cross-account access that will easily and
securely share your resources with your AWS accounts.
An organization needs a persistent block storage volume that will be used for mission-critical workloads.
The backup data will be stored in an object storage service and after 30 days, the data will be stored in a
data archiving storage service.
What should you do to meet the above requirement? - correct answers Attach an instance store volume
in your existing EC2 instance.
Use Amazon S3 to store your backup data and configure a lifecycle policy to transition your objects to
Amazon S3 Glacier
A company has a hybrid cloud architecture that connects their on-premises data center and cloud
infrastructure in AWS. They require a durable storage backup for their corporate documents stored on-
premises and a local cache that provides low latency access to their recently accessed data to reduce
data egress charges. The documents must be stored to and retrieved from AWS via the Server Message
Block (SMB) protocol. These files must immediately be accessible within minutes for six months and
archived for another decade to meet the data compliance.
Which of the following is the best and most cost-effective approach to implement in this scenario? -
correct answers Launch a new file gateway that connects to your on-premises data center using AWS
Storage Gateway. Upload the documents to the file gateway and set up a lifecycle policy to move the
data into Glacier for data archival.
An application consists of multiple EC2 instances in private subnets in different availability zones. The
application uses a single NAT Gateway for downloading software patches from the Internet to the
instances. There is a requirement to protect the application from a single point of failure when the NAT
Gateway encounters a failure or if its availability zone goes down.
How should the Solutions Architect redesign the architecture to be more highly available and cost-
effective - correct answers Create a NAT Gateway in each availability zone. Configure the route table in
each public subnet to ensure that instances use the NAT Gateway in the same availability zone.
A company has 3 DevOps engineers that are handling its software development and infrastructure
management processes. One of the engineers accidentally deleted a file hosted in Amazon S3 which has
caused disruption of service.
