AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A delivery company needs to migrate its third-party route planning application to AWS. The third party supplies a supported Docker image from a public registry. The image can run in as many containers as required to generate the route map.
The company has divided the delivery area into sections with supply hubs so that delivery drivers travel the shortest distance possible from the hubs to the customers. To reduce the time necessary to generate route maps, each section uses its own set of Docker containers with a custom configuration that processes orders only in the section's area.
The company needs the ability to allocate resources cost-effectively based on the number of running containers.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster on Amazon EC2. Use the Amazon EKS CLI to launch the planning application in pods by using the -tags option to assign a custom tag to the pod.
2. B. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster on AWS Fargat
3. C. Use the Amazon EKS CLI to launch the planning applicatio
4. D. Use the AWS CLI tag-resource API call to assign a custom tag to the pod.
5. E. Create an Amazon Elastic Container Service (Amazon ECS) cluster on Amazon EC2. Use the AWS CLI with run-tasks set to true to launch the planning application by using the -tags option to assign a custom tag to the task.
6. F. Create an Amazon Elastic Container Service (Amazon ECS) cluster on AWS Fargat
7. G. Use the AWS CLI run-task command and set enableECSManagedTags to true to launch the planning applicatio
8. H. Use the --tags option to assign a custom tag to the task.

Correct Answer: D

- (Exam Topic 2)
A large education company recently introduced Amazon Workspaces to provide access to internal applications across multiple universities. The company is storing user proxies on an Amazon FSx for Windows File Server tile system. The Me system is configured with a DNS alias and is connected to a self-managed Active Directory As more users begin to use the Workspaces login time increases to unacceptable levels
An investigation reveals a degradation in performance of the file system. The company created the file system on HDD storage with a throughput of 16 MBps A solutions architect must improve the performance of the file system during a defined maintenance window
What should the solutions architect do to meet these requirements with the LEAST administrative effort?

1. A. Use AWS Backup to create a point-in-time backup of the file system Restore the backup to a new FSx for Windows File Server file system Select SSD as the storage type Select 32 MBps as the throughput capacity When the backup and restore process is completed adjust the DNS alias accordingly Delete the original file system
2. B. Disconnect users from the file system In the Amazon FSx console, update the throughput capacity to 32 MBps Update the storage type to SSD Reconnect users to the file system
3. C. Deploy an AWS DataSync agent onto a new Amazon EC2 instanc
4. D. Create a task Configure the existing file system as the source location Configure a new FSx for Windows File Server file system with SSD storage and 32 MBps of throughput as the target location Schedule the task When the task is completed adjust the DNS alias accordingly Delete the original file system.
5. E. Enable shadow copies on the existing file system by using a Windows PowerShell command Schedulethe shadow copy job to create a point-in-time backup of the file system Choose to restore previous versions Create a new FSx for Windows File Server file system with SSD storage and 32 MBps of throughput When the copy job is completed, adjust the DNS alias Delete the original file system

Correct Answer: D

- (Exam Topic 2)
A company has VPC flow logs enabled for its NAT gateway. The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2 instance.
A solutions architect must determine whether the traffic represents unsolicited inbound connections from the internet. The first two octets of the VPC CIDR block are 203.0.
Which set of steps should the solutions architect take to meet these requirements?

1. A. Open the AWS CloudTrail consol
2. B. Select the log group that contains the NAT gateway's elastic network interface and the private instance's elastic network interfac
3. C. Run a query to filter with the destination address set as "like 203.0" and the source address set as "like 198.51.100.2". Run the stats command to filter the sum of bytes transferred by the source address and the destination address.
4. D. Open the Amazon CloudWatch consol
5. E. Select the log group that contains the NAT gateway's elastic network interface and the private instance's elastic network interfac
6. F. Run a query to filter with the destination address set as "like 203.0" and the source address set as "like 198.51.100.2". Run the stats command to filter the sum of bytes transferred by the source address and the destination address.
7. G. Open the AWS CloudTrail consol
8. H. Select the log group that contains the NAT gateway's elastic network interface and the private instance's elastic network interfac
9. I. Run a query to filter with the destination address set as "like 198.51.100.2" and the source address set as "like 203.0". Run the stats command to filter the sum of bytes transferred by the source address and the destination address.
10. J. Open the Amazon CloudWatch consol
11. K. Select the log group that contains the NAT gateway's elasticnetwork interface and the private instance's elastic network interfac
12. L. Run a query to filter with the destination address set as "like 198.51.100.2" and the source address set as "like 203.0". Run the stats command to filter the sum of bytes transferred by the source address and the destination address.

Correct Answer: D
https://aws.amazon.com/premiumsupport/knowledge-center/vpc-analyze-inbound-traffic-nat-gateway/ by Cloudxie says "select appropriate log"

- (Exam Topic 1)
A company stores sales transaction data in Amazon DynamoDB tables. To detect anomalous behaviors and respond quickly, all changes lo the items stored in the DynamoDB tables must be logged within 30 minutes.
Which solution meets the requirements?

1. A. Copy the DynamoDB tables into Apache Hive tables on Amazon EMR every hour and analyze them (or anomalous behavior
2. B. Send Amazon SNS notifications when anomalous behaviors are detected.
3. C. Use AWS CloudTrail to capture all the APIs that change the DynamoDB table
4. D. Send SNS notifications when anomalous behaviors are detected using CloudTrail event filtering.
5. E. Use Amazon DynamoDB Streams to capture and send updates to AWS Lambd
6. F. Create a Lambda function to output records lo Amazon Kinesis Data Stream
7. G. Analyze any anomalies with Amazon Kinesis Data Analytic
8. H. Send SNS notifications when anomalous behaviors are detected.
9. I. Use event patterns in Amazon CloudWatch Events to capture DynamoDB API call events with an AWS Lambda (unction as a target to analyze behavio
10. J. Send SNS notifications when anomalous behaviors are detected.

Correct Answer: C
https://aws.amazon.com/blogs/database/dynamodb-streams-use-cases-and-design-patterns/#:~:text=DynamoDB DynamoDb Stream to capture DynamoDB update. And Kinesis Data Analytics for anomaly detection (it uses
AWS proprietary Random Cut Forest Algorithm)

- (Exam Topic 2)
A company has a media metadata extraction pipeline running on AWS. Notifications containing a reference to a file Amazon S3 are sent to an Amazon Simple Notification Service (Amazon SNS) topic The pipeline consists of a number of AWS Lambda functions that are subscribed to the SNS topic The Lambda functions extract the S3 file and write metadata to an Amazon RDS PostgreSQL DB instance.
Users report that updates to the metadata are sometimes stow to appear or are lost. During these times, the CPU utilization on the database is high and the number of failed Lambda invocations increases.
Which combination of actions should a solutions architect take to r-e'p resolve this issue? (Select TWO.)

1. A. Enable massage delivery status on the SNS topic Configure the SNS topic delivery policy to enable retries with exponential backoff
2. B. Create an Amazon Simple Queue Service (Amazon SOS) FIFO queue and subscribe the queue to the SNS topic Configure the Lambda functions to consume messages from the SQS queue.
3. C. Create an RDS proxy for the RDS instance Update the Lambda functions to connect to the RDS instance using the proxy.
4. D. Enable the RDS Data API for the RDS instanc
5. E. Update the Lambda functions to connect to the RDS instance using the Data API
6. F. Create an Amazon Simple Queue Service (Amazon SQS) standard queue for each Lambda function and subscribe the queues to the SNS topi
7. G. Configure the Lambda functions to consume messages from their respective SQS queue.

Correct Answer: CE