Question 1

A company that uses AWS needs a solution to predict the resources needed for manufacturing processes each month. The solution must use historical values that are currently stored in an Amazon S3 bucket. The company has no machine learning (ML) experience and wants to use a managed service for the training and predictions.

Which combination of steps will meet these requirements? (Choose two.)

Options :

A : Deploy an Amazon SageMaker model. Create a SageMaker endpoint for inference.

B : Use Amazon SageMaker to train a model by using the historical data in the S3 bucket.

C : Configure an AWS Lambda function with a function URL that uses Amazon SageMaker endpoints to create predictions based on the inputs.

D : onfigure an AWS Lambda function with a function URL that uses an Amazon Forecast predictor to create a prediction based on the inputs.

E : Train an Amazon Forsecast predictor by using the historical data in the S3 bucket.

Answer: B,E

Question 2

A multinational company has been building its new data analytics platform with high-performance computing workloads (HPC) which requires a scalable, POSIX-compliant storage service. The data need to be stored redundantly across multiple AZs and allows concurrent connections from thousands of EC2 instances hosted on multiple Availability Zones.

Which of the following AWS storage service is the most suitable one to use in this scenario?

Options :

A : Amazon Elastic File System

B : Amazon S3

C : Amazon EBS Volumes

D : Amazon ElastiCache

Answer: A

Question 3

A government agency plans to store confidential tax documents on AWS. Due to the sensitive information in the files, the Solutions Architect must restrict the data access requests made to the storage solution to a specific Amazon VPC only. The solution should also prevent the files from being deleted or overwritten to meet the regulatory requirement of having a write-once-read-many (WORM) storage model.

Which combination of the following options should the Architect implement? (Select TWO.)

Options :

A : Configure an Amazon S3 Access Point for the S3 bucket to restrict data access to a particular Amazon VPC only.

B : Create a new Amazon S3 bucket with the S3 Object Lock feature enabled. Store the documents in the bucket and set the Legal Hold option for object retention.

C : Store the tax documents in the Amazon S3 Glacier Instant Retrieval storage class to restrict fast data retrieval to a particular Amazon VPC of your choice.

D :

Set up a new Amazon S3 bucket to store the tax documents and integrate it with AWS Network Firewall. Configure the Network Firewall to only accept data access requests from a specific Amazon VPC.

E : Enable Object Lock but disable Object Versioning on the new Amazon S3 bucket to comply with the write-once-read-many (WORM) storage model requirement.

Answer: A,B

Question 4

A company plans to launch an Amazon EC2 instance in a private subnet for its internal corporate web portal. For security purposes, the EC2 instance must send data to Amazon DynamoDB and Amazon S3 via private endpoints that don't pass through the public Internet.

Which of the following can meet the above requirements?

Options :

A : Use AWS VPN CloudHub to route all access to S3 and DynamoDB via private endpoints.

B :

Use AWS Transit Gateway to route all access to S3 and DynamoDB via private endpoints.

C : Use AWS Direct Connect to route all access to S3 and DynamoDB via private endpoints.

D : Use VPC endpoints to route all access to S3 and DynamoDB via private endpoints.

Answer: D

Question 5

A company hosts an application on multiple Amazon EC2 instances. The application processes messages from an Amazon SQS queue, writes to an Amazon RDS table, and deletes the message from the queue. Occasional duplicate records are found in the RDS table. The SQS queue does not contain any duplicate messages. What should a solutions architect do to ensure messages are being processed once only?

Options :

A : Use the CreateQueue API call to create a new queue

B : Use the AddPermission API call to add appropriate permissions

C : Use the ReceiveMessage API call to set an appropriate wait time

D : Use the ChangeMessageVisibility API call to increase the visibility timeout.

Answer: D