Question 1

A company stores sales transaction data in Amazon DynamoDB tables. To detect anomalous behaviors and

respond quickly, all changes lo the items stored in the DynamoDB tables must be logged within 30 minutes.

Which solution meets the requirements?

Options :

A :

Copy the DynamoDB tables into Apache Hive tables on Amazon EMR every hour and analyze them (or

anomalous behaviors. Send Amazon SNS notifications when anomalous behaviors are detected.

B :

Use AWS CloudTrail to capture all the APIs that change the DynamoDB tables. Send SNS notifications

when anomalous behaviors are detected using CloudTrail event filtering.

C :

Use Amazon DynamoDB Streams to capture and send updates to AWS Lambda. Create a Lambda

function to output records lo Amazon Kinesis Data Streams. Analyze any anomalies with Amazon

Kinesis Data Analytics. Send SNS notifications when anomalous behaviors are detected.

D :

Use event patterns in Amazon CloudWatch Events to capture DynamoDB API call events with an AWS

Lambda (unction as a target to analyze behavior. Send SNS notifications when anomalous behaviors are

detected.

Answer: C

Question 2

A company has a three-tier application running on AWS with a web server, an application server, and an Amazon RDS MySQL DB instance. A solutions architect is designing a disaster recovery (OR) solution with an RPO of 5 minutes. Which solution will meet the company's requirements?

Options :

A : Configure AWS Backup to perform cross-Region backups of all servers every 5 minutes. Reprovision the three tiers in the DR Region from the backups using AWS CloudFormation in the event of a disaster.

B : Maintain another running copy of the web and application server stack in the DR Region using AWS CloudFormation drill detection. Configure cross-Region snapshots ol the DB instance to the DR Region every 5 minutes. In the event of a disaster, restore the DB instance using the snapshot in the DR Region.

C : Use Amazon EC2 Image Builder to create and copy AMIs of the web and application server to both the primary and DR Regions. Create a cross-Region read replica of the DB instance in the DR Region. In the event of a disaster, promote the read replica to become the master and reprovision the servers with AWS CloudFormation using the AMIs.

D : Create AMts of the web and application servers in the DR Region. Use scheduled AWS Glue jobs to synchronize the DB instance with another DB instance in the DR Region. In the event of a disaster, switch to the DB instance in the DR Region and reprovision the servers with AWS CloudFormation using the AMIs.

Answer: C

Question 3

A company has a web application that allows users to upload short videos. The videos are stored on Amazon

EBS volumes and analyzed by custom recognition software for categorization.

The website contains stat c content that has variable traffic with peaks in certain months. The architecture

consists of Amazon EC2 instances running in an Auto Scaling group for the web application and EC2

instances running in an Auto Scaling group to process an Amazon SQS queue The company wants to

re-architect the application to reduce operational overhead using AWS managed services where possible and

remove dependencies on third-party software.

Which solution meets these requirements?

Options :

A :

Use Amazon ECS containers for the web application and Spot Instances for the Auto Scaling group that

processes the SQS queue. Replace the custom software with Amazon Recognition to categorize the

videos.

B :

Store the uploaded videos n Amazon EFS and mount the file system to the EC2 instances for Te web

application. Process the SOS queue with an AWS Lambda function that calls the Amazon Rekognition

API to categorize the videos.

C :

Host the web application in Amazon S3. Store the uploaded videos in Amazon S3. Use S3 event

notifications to publish events to the SQS queue Process the SQS queue with an AWS Lambda function

that calls the Amazon Rekognition API to categorize the videos.

D :

Use AWS Elastic Beanstalk to launch EC2 instances in an Auto Scaling group for the web application

and launch a worker environment to process the SQS queue Replace the custom software with Amazon

Rekognition to categorize the videos.

Answer: C

Question 4

A company is running an application that uses an Amazon ElastiCache for Redis cluster as a caching layer A recent security audit revealed that the company has configured encryption at rest for ElastiCache However the company did not configure ElastiCache to use encryption in transit Additionally, users can access the cache without authentication

A solutions architect must make changes to require user authentication and to ensure that the company is using end-to-end encryption

Which solution will meet these requirements?

Options :

A : Create an AUTH token Store the token in AWS System Manager Parameter Store, as an encrypted parameter Create a new cluster with AUTH and configure encryption in transit Update the application to retrieve the AUTH token from Parameter Store when necessary and to use the AUTH token for authentication

B : Create an AUTH token Store the token in AWS Secrets Manager Configure the existing cluster to use the AUTH token and configure encryption in transit Update the application to retrieve the AUTH token from Secrets Manager when necessary and to use the AUTH token for authentication.

C :

Create an SSL certificate Store the certificate in AWS Secrets Manager Create a new cluster and configure encryption in transit Update the application to retrieve the SSL certificate from Secrets Manager when necessary and to use the certificate for authentication.

D : Create an SSL certificate Store the certificate in AWS Systems Manager Parameter Store, as an encrypted advanced parameter Update the existing cluster to configure encryption in transit Update the application to retrieve the SSL certificate from Parameter Store when necessary and to use the certificate for authentication

Answer: B

Question 5

A company has several applications written in TypeScript and Python hosted on the AWS cloud. The company uses an automated deployment solution for its applications using AWS CloudFormation templates and AWS CodePipeline. The company recently acquired a new business unit that uses Python scripts to deploy applications on AWS. The developers from the new business are having difficulty migrating their deployments to AWS CloudFormation because they need to learn a new domain-specific language and their old Python scripts require programming loops, which are not supported in CloudFormation.

Which of the following is the recommended solution to address the developers’ concerns and help them update their deployment procedures?

Options :

A : Import the Python scripts on AWS OpsWorks which can then be integrated with AWS CodePipeline. Ask the developers to write Chef recipes that run can run the Python scripts for application deployment on AWS.

B : Create a standard deployment process for the company and the new business unit by leveraging a third-party resource provisioning engine on AWS CodeBuild. Add a stage on AWS CodePipeline to integrate AWS CodeBuild on the application deployment.

C : Write TypeScript or Python code that will define AWS resources. Convert these codes to AWS CloudFormation templates by using AWS Cloud Development Kit (AWS CDK). Create CloudFormation stacks using AWS CDK. Create an AWS CodeBuild job that includes AWS CDK and add this stage on AWS CodePipeline.

D : Write new CloudFormation templates for the deployments of the new business unit. Extract parts of the Python scripts to be added as EC2 user data. Deploy the CloudFormation templates using the AWS Cloud Development Kit (AWS CDK). Add a stage on AWS CodePipline to integrate AWS CDK using the templates for the application deployment.

Answer: C