Question 1

An IT consultancy company has multiple offices located in San Francisco, Frankfurt, Tokyo, and Manila. The company is using AWS Organizations to easily manage its several AWS accounts which are being used by its regional offices and subsidiaries. A new AWS account was recently added to a specific organizational unit (OU) which is responsible for the overall systems administration. The solutions architect noticed that the account is using a root-created Amazon ECS Cluster with an attached service-linked role. For regulatory purposes, the solutions architect created a custom SCP that would deny the new account from performing certain actions in relation to using ECS. However, after applying the policy, the new account could still perform the actions that it was supposed to be restricted from doing.

Which of the following is the most likely reason for this problem?

Options :

A : The ECS service is being run outside the jurisdiction of the organization. SCPs affect only the principals that are managed by accounts that are part of the organization.

B : The default SCP grants all permissions attached to every root, OU, and account. To apply stricter permissions, this policy is required to be modified.

C : SCPs do not affect any service-linked role. Service-linked roles enable other AWS services to integrate with AWS Organizations and can't be restricted by SCPs.

D : There is an SCP attached to a higher-level OU that permits the actions of the service-linked role. This permission would therefore be inherited by the current OU, and override the SCP placed by the administrator.

Answer: C

Question 2

A company manually runs its custom scripts when deploying a new version of its application that is hosted on a fleet of Amazon EC2 instances. This method is prone to human errors such as accidentally running the wrong script or deploying the wrong artifact. The company wants to automate its deployment procedure and leverage its team’s knowledge in Chef deployment tools. The new version of the application must first be deployed on a staging environment for verification and testing. After passing the tests, it can then be deployed to the production environment. If errors are encountered after the deployment, the company wants to roll back to the older application version within five minutes.

Which of the following options should the Solutions Architect implement to meet the requirements?

Options :

A : Create an environment on AWS Elastic Beanstalk and deploy the application. For succeeding deployments, choose a “rolling update” strategy for fast deployment and easy rollback procedure in case of errors.

B :

Create a new pipeline on AWS CodePipeline and add a stage that will deploy the application on the AWS EC2 instances. Choose a “rolling update with an additional batch” deployment strategy, to allow a quick rollback to the older version in case of errors.

C : Create a stack on AWS OpsWorks and deploy the application. Clone this stack and deploy the new application version on it. Use a “blue/green” deployment strategy to shift traffic to the newer stack.

D : Utilize AWS CodeBuild and add a job with the Chef recipes for the new application version. Use a “canary” deployment strategy to the new version on a new instance. Delete the canary instance if errors are found on the new version.

Answer: C

Question 3

A company wants to use AWS to create a business continuity solution in case the company's main on-premises

application fails. The application runs on physical servers that also run other applications. The on-premises

application that the company is planning to migrate uses a MySQL database as a data store. All the company's

on-premises applications use operating systems that are compatible with Amazon EC2.

Which solution will achieve the company's goal with the LEAST operational overhead?

Options :

A :

Install the AWS Replication Agent on the source servers, including the MySQL servers. Set up

replication for all servers. Launch test instances for regular drills. Cut over to the test instances to fail

over the workload in the case of a failure event.

B :

Install the AWS Replication Agent on the source servers, including the MySQL servers. Initialize AWS

Elastic Disaster Recovery in the target AWS Region. Define the launch settings. Frequently perform

failover and fallback from the most recent point in time.

C :

Create AWS Database Migration Service (AWS DMS) replication servers and a target Amazon Aurora

MySQL DB cluster to host the database. Create a DMS replication task to copy the existing data to the

target DB cluster. Create a local AWS Schema Conversion Tool (AWS SCT) change data capture

(CDC) task to keep the data synchronized. Install the rest of the software on EC2 instances by starting

with a compatible base AMI.

D :

Deploy an AWS Storage Gateway Volume Gateway on premises. Mount volumes on all on-premises

servers. Install the application and the MySQL database on the new volumes. Take regular snapshots.

Install all the software on EC2 Instances by starting with a compatible base AMI. Launch a Volume

Gateway on an EC2 instance. Restore the volumes from the latest snapshot. Mount the new volumes on

the EC2 instances in the case of a failure event.

Answer: B

Question 4

A company hosts a public software as a service (SaaS) application on Amazon EC2 instances that run Linux. The EC2 instances are in multiple Availability Zones behind an Application Load Balancer. The application uses an Amazon RDS Multi-AZ database to store application data, including user sessions. The company needs to minimize the latency that is involved in storing and accessing the user sessions. Which solution will meet this requirement?

Options :

A : Create an Amazon S3 bucket. Store the user sessions in S3 Standard storage.

B :

Create an Amazon FSx for Windows File Server volume. Mount the volume on each EC2 instance. Store the user sessions in the volume.

C :

Create a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume. Enable Multi-Attach. Attach the volume to each EC2 instance. Store the user sessions in the volume.

D : Create an Amazon ElastiCache for Redis cluster. Store the user sessions in the Redis cache.

Answer: D

Question 5

A company is processing videos in the AWS Cloud by using Amazon EC2 instances in an Auto Scaling group.

It takes 30 minutes to process a video. Several EC2 instances scale in and out depending on the number of

videos in an Amazon Simple Queue Service (Amazon SQS) queue.

The company has configured the SQS queue with a redrive policy that specifies a target dead-letter queue and

a maxReceiveCount of 1. The company has set the visibility timeout for the SQS queue to 1 hour. The

company has set up an Amazon CloudWatch alarm to notify the development team when there are messages in

the dead-letter queue.

Several times during the day, the development team receives notification that messages are in the dead-letter

queue and that videos have not been processed properly. An investigation finds no errors in the application

logs.

How can the company solve this problem?

Options :

A :

Turn on termination protection for the EC2 instances.

B :

Update the visibility timeout for the SOS queue to 3 hours.

C :

Configure scale-in protection for the instances during processing.

D : Update the redrive policy and set maxReceiveCount to 0.

Answer: B