Question 1

A company has several microservices that send messages to an Amazon SQS queue and a backend application that poll the queue to process the messages. The company also has a Service Level Agreement (SLA) which defines the acceptable amount of time that can elapse from the point when the messages are received until a response is sent. The backend operations are I/O-intensive as the number of messages is constantly growing, causing the company to miss its SLA. The Solutions Architect must implement a new architecture that improves the application's processing time and load management.

Which of the following is the MOST effective solution that can satisfy the given requirement?

Options :

A : Create an AMI of the backend application-s EC2 instance and replace it with a larger instance size.

B :

Create an AMI of the backend application-s EC2 instance. Use the image to set up an Auto Scaling group and configure a target tracking scaling policy based on the CPUUtilization metric with a target value of 80%.

C : Create an AMI of the backend application-s EC2 instance and launch it to a cluster placement group.

D : Create an AMI of the backend application-s EC2 instance. Use the image to set up an Auto Scaling group and configure a target tracking scaling policy based on the ApproximateAgeOfOldestMessage metric.

Answer: D

Question 2

A company has an organization in AWS Organizations. The company runs Amazon EC2 instances across four AWS accounts in the root organizational unit (OU). There are three nonproduction accounts and one production account. The company wants to prohibit users from launching EC2 instances of a certain size in the nonproduction accounts. The company has created a service control policy (SCP) to deny access to launch instances that use the prohibited types.

Which solutions to deploy the SCP will meet these requirements? (Choose two.)

Options :

A : Attach the SCP to the root OU for the organization.

B : Attach the SCP to the three nonproduction Organizations member accounts.

C : Attach the SCP to the Organizations management account.

D : Create an OU for the production account. Attach the SCP to the OU. Move the production member account into the new OU.

E : Create an OU for the required accounts. Attach the SCP to the OU. Move the nonproduction member accounts into the new OU.

Answer: B,E

Question 3

A financial company needs to handle highly sensitive data. The company will store the data in an Amazon S3 bucket. The company needs to ensure that the data is encrypted in transit and at rest. The company must manage the encryption keys outside the AWS Cloud.

Which solution will meet these requirements?

Options :

A : Encrypt the data in the S3 bucket with server-side encryption (SSE) that uses an AWS Key Management Service (AWS KMS) customer managed key.

B : Encrypt the data in the S3 bucket with server-side encryption (SSE) that uses an AWS Key Management Service (AWS KMS) AWS managed key.

C : Encrypt the data in the S3 bucket with the default server-side encryption (SSE).

D : Encrypt the data at the company-s data center before storing the data in the S3 bucket.

Answer: D

Question 4

A pharma company is working on developing a vaccine for the COVID-19 virus. The researchers at the company want to process the reference healthcare data in a highly available as well as HIPAA compliant in-memory database that supports caching results of SQL queries.

As a solutions architect, which of the following AWS services would you recommend for this task?

Options :

A : Amazon DocumentDB

B : Amazon DynamoDB Accelerator (DAX)

C : Amazon ElastiCache for Redis/Memcached

D : Amazon DynamoDB

Answer: C

Question 5

A company uses an Amazon S3 bucket as its data lake storage platform The S3 bucket contains a massive amount of data that is accessed randomly by multiple teams and hundreds of applications. The company wants to reduce the S3 storage costs and provide immediate availability for frequently accessed objects What is the MOST operationally efficient solution that meets these requirements?

Options :

A : . Create an S3 Lifecycle rule to transition objects to the S3 Intelligent-Tiering storage class.

B : Store objects in Amazon S3 Glacier. Use S3 Select to provide applications with access to the data.

C : Use data from S3 storage class analysis to create S3 Lifecycle rules to automatically transition objects to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class.

D : Transition objects to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Create an AWS Lambda function to transition objects to the S3 Standard storage class when they are accessed by an application.

Answer: A