Question 1

The company needs to determine which costs on the monthly AWS bill are attributable to each application or

team. The company also must be able to create reports to compare costs from the last 12 months and to help

forecast costs for the next 12 months. A solutions architect must recommend an AWS Billing and Cost

Management solution that provides these cost reports.

Which combination of actions will meet these requirements? (Select THREE.)

Options :

A : Activate the user-defined cost allocation tags that represent the application and the team.

B : Activate the AWS generated cost allocation tags that represent the application and the team.

C : Create a cost category for each application in Billing and Cost Management.

D : Activate IAM access to Billing and Cost Management.

E : Create a cost budget.

F : Enable Cost Explorer.

Answer: A,C,F

Question 2

A company is running an application distributed over several Amazon EC2 instances in an Auto Seating group behind an Application Load Balancer The security team requires that all application access attempts be made available for analysis information about the client IP address, connection type, and user agent must be included Which solution will meet these requirements?

Options :

A : Enable EC2 detailed monitoring, and include network logs. Send all logs through Amazon Kinesis Data Firehose to an Amazon Elasticsearch Service (Amazon ES) cluster that the security team uses for analysis.

B : Enable VPC Flow Logs for all EC2 instance network interfaces Publish VPC Flow Logs to an Amazon S3 bucket Have the security team use Amazon Athena to query and analyze the logs.

C : Enable access logs for the Application Load Balancer, and publish the logs to an Amazon S3 bucket. Have the security team use Amazon Athena to query and analyze the logs

D : Enable Traffic Mirroring and specify all EC2 instance network interfaces as the source. Send all traffic information through Amazon Kinesis Data Firehose to an Amazon Elasticsearch Service (Amazon ES) cluster that the security team uses for analysis.

Answer: C

Question 3

A company is developing a NodeJS application that has an NGINX server for the front end, Elasticsearch, Logstash for log processing, as well as a MongoDB database instance for document management. In order to improve the process of updating the application stack for a newer version, the solutions architect presented two deployment methods to the management: In-place and Disposable deployments.

Which of the following is true about the In-place and Disposable method?

Options :

A : An in-place upgrade involves rolling out a new set of EC2 instances by terminating older instances. A disposable upgrade, on the other hand, involves performing application updates on live Amazon EC2 instances.

B :

An in-place upgrade combines the simplicity of managing AWS infrastructure provided by Elastic Beanstalk and the automation of custom network segmentation provided by AWS CloudFormation. A disposable upgrade, on the other hand, involves rolling out a new set of EC2 instances by terminating older instances.

C : An in-place upgrade involves performing application updates on live Amazon EC2 instances. A disposable upgrade, on the other hand, combines the simplicity of managing AWS infrastructure provided by Elastic Beanstalk and the automation of custom network segmentation provided by AWS CloudFormation.

D : An in-place upgrade involves performing application updates on live Amazon EC2 instances. A disposable upgrade, on the other hand, involves rolling out a new set of EC2 instances by terminating older instances.

Answer: D

Question 4

A leading financial company runs its application in an Amazon ECS Cluster. The application processes a large stream of intraday data and stores the generated result in a DynamoDB table. To comply with the financial regulatory policy, the solutions architect was tasked to design a system that detects new entries in the DynamoDB table and then automatically run tests to verify the results using a Lambda function.

Which of the following options can satisfy the company’s requirement with minimal configuration changes?

Options :

A : Detect the new entries in the DynamoDB table using Systems Manager Automation then automatically invoke the Lambda function for processing

B : Set up a DynamoDB stream to detect the new entries and automatically trigger the Lambda function.

C : Migrate the table to Amazon DocumentDB to take advantage of its integration with Amazon EventBridge which can invoke a Lambda function for specific database events.

D : Run an AWS Lambda function using Amazon SNS as a trigger each time the ECS Cluster successfully processes financial data.

Answer: B

Question 5

A company runs an application on AWS. The company curates data from several different sources. The

company uses proprietary algorithms to perform data transformations and aggregations. After the company

performs E TL processes, the company stores the results in Amazon Redshift tables. The company sells this

data to other companies. The company downloads the data as files from the Amazon Redshift tables and

transmits the files to several data customers by using FTP. The number of data customers has grown

significantly. Management of the data customers has become difficult.

The company will use AWS Data Exchange to create a data product that the company can use to share data

with customers. The company wants to confirm the identities of the customers before the company shares data.

The customers also need access to the most recent data when the company publishes the data.

Which solution will meet these requirements with the LEAST operational overhead?

Options :

A :

Use AWS Data Exchange for APIs to share data with customers. Configure subscription verification In

the AWS account of the company that produces the data, create an Amazon API Gateway Data API

service integration with Amazon Redshift. Require the data customers to subscribe to the data product In

the AWS account of the company that produces the data, create an AWS Data Exchange datashare by

connecting AWS Data Exchange to the Redshift

B : cluster. Configure subscription verification. Require the data customers to subscribe to the data product.

C :

Download the data from the Amazon Redshift tables to an Amazon S3 bucket periodically. Use AWS

Data Exchange for S3 to share data with customers.

D :

Publish the Amazon Redshift data to an Open Data on AWS Data Exchange. Require the customers to subscribe to the data product in AWS Data Exchange. In the AWS account of the company that produces the data, attach 1AM resource-based policies to the Amazon Redshift tables to allow access only to verified AWS accounts.

Answer: C