- (Exam Topic 1)
A company runs a new application as a static website in Amazon S3. The company has deployed the application to a production AWS account and uses Amazon CloudFront to deliver the website. The website calls an Amazon API Gateway REST API. An AWS Lambda function backs each API method.
The company wants to create a CSV report every 2 weeks to show each API Lambda function’s recommended configured memory, recommended cost, and the price difference between current configurations and the recommendations. The company will store the reports in an S3 bucket.
Which solution will meet these requirements with the LEAST development time?

1. A. Create a Lambda function that extracts metrics data for each API Lambda function from Amazon CloudWatch Logs for the 2-week penod_ Collate the data into tabular forma
2. B. Store the data as a_csvfile in an S3 bucke
3. C. Create an Amazon Eventaridge rule to schedule the Lambda function to run every 2 weeks.
4. D. Opt in to AWS Compute Optimize
5. E. Create a Lambda function that calls the ExportLambdaFunctionRecommendatlons operatio
6. F. Export the _csv file to an S3 bucke
7. G. Create an Amazon Eventaridge rule to schedule the Lambda function to run every 2 weeks.
8. H. Opt in to AWS Compute Optimize
9. I. Set up enhanced infrastructure metric
10. J. Within the Compute Optimizer console, schedule a job to export the Lambda recommendations to a _csvfile_ Store the file in an S3 bucket every 2 weeks.
11. K. Purchase the AWS Business Support plan for the production accoun
12. L. Opt in to AWS Compute Optimizer for AWS Trusted Advisor check
13. M. In the Trusted Advisor console, schedule a job to export the cost optimization checks to a _csvfile_ Store the file in an S3 bucket every 2 weeks.

Correct Answer: B
https://docs.aws.amazon.com/compute-optimizer/latest/APIReference/API_ExportLambdaFunctionRecommend

- (Exam Topic 2)
A company needs to establish a connection from its on-premises data center to AWS. The company needs to connect all of its VPCs that are located in different AWS Regions with transitive routing capabilities between VPC networks. The company also must reduce network outbound traffic costs, increase bandwidth throughput, and provide a consistent network experience for end users.
Which solution will meet these requirements?

1. A. Create an AWS Site-to-Site VPN connection between the on-premises data center and a new central VP
2. B. Create VPC peering connections that initiate from the central VPC to all other VPCs.
3. C. Create an AWS Direct Connect connection between the on-premises data center and AW
4. D. Provision a transit VIF, and connect it to a Direct Connect gatewa
5. E. Connect the Direct Connect gateway to all the other VPCs by using a transit gateway in each Region.
6. F. Create an AWS Site-to-Site VPN connection between the on-premises data center and a new central VP
7. G. Use a transit gateway with dynamic routin
8. H. Connect the transit gateway to all other VPCs.
9. I. Create an AWS Direct Connect connection between the on-premises data center and AWS Establish an AWS Site-to-Site VPN connection between all VPCs in each Regio
10. J. Create VPC peering connections that initiate from the central VPC to all other VPCs.

Correct Answer: B
Transit GW + Direct Connect GW + Transit VIF + enabled SiteLink if two different DX locations https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-direct-connect-sitelink/

- (Exam Topic 3)
A company is currently in the design phase of an application that will need an RPO of less than 5 minutes and an RTO of less than 10 minutes. The solutions architecture team is forecasting that the database will store approximately 10 TB of data. As part of the design, they are looking for a database solution that will provide the company with the ability to fail over to a secondary Region.
Which solution will meet these business requirements at the LOWEST cost?

1. A. Deploy an Amazon Aurora DB cluster and take snapshots of the cluster every 5 minute
2. B. Once a snapshot is complete, copy the snapshot to a secondary Region to serve as a backup in the event of a failure.
3. C. Deploy an Amazon RDS instance with a cross-Region read replica in a secondary Regio
4. D. In the event of a failure, promote the read replica to become the primary.
5. E. Deploy an Amazon Aurora DB cluster in the primary Region and another in a secondary Regio
6. F. Use AWS DMS to keep the secondary Region in sync.
7. G. Deploy an Amazon RDS instance with a read replica in the same Regio
8. H. In the event of a failure, promote the read replica to become the primary.

Correct Answer: B
The best solution is to deploy an Amazon RDS instance with a cross-Region read replica in a secondary
Region. This will provide the company with a database solution that can fail over to the secondary Region in case of a disaster. The read replica will have minimal replication lag and can be promoted to become the primary in less than 10 minutes, meeting the RTO requirement. The RPO requirement of less than 5 minutes can also be met by using synchronous replication within the primary Region and asynchronous replication across Regions. This solution will also have the lowest cost compared to the other options, as it does not involve additional services or resources. References: [Amazon RDS User Guide], [Amazon Aurora User Guide]

- (Exam Topic 2)
A solutions architect needs to define a reference architecture for a solution for three-tier applications with web. application, and NoSQL data layers. The reference architecture must meet the following requirements:
• High availability within an AWS Region
• Able to fail over in 1 minute to another AWS Region for disaster recovery
• Provide the most efficient solution while minimizing the impact on the user experience Which combination of steps will meet these requirements? (Select THREE.)

1. A. Use an Amazon Route 53 weighted routing policy set to 100/0 across the two selected Region
2. B. Set Time to Live (TTL) to 1 hour.
3. C. Use an Amazon Route 53 failover routing policy for failover from the primary Region to the disaster recovery Regio
4. D. Set Time to Live (TTL) to 30 seconds.
5. E. Use a global table within Amazon DynamoDB so data can be accessed in the two selected Regions.
6. F. Back up data from an Amazon DynamoDB table in the primary Region every 60 minutes and then write the data to Amazon S3. Use S3 Cross-Region replication to copy the data from the primary Region to the disaster recovery Regio
7. G. Have a script import the data into DynamoDB in a disaster recovery scenario.
8. H. Implement a hot standby model using Auto Scaling groups for the web and application layers across multiple Availability Zones in the Region
9. I. Use zonal Reserved Instances for the minimum number of servers and On-Demand Instances for any additional resources.
10. J. Use Auto Scaling groups for the web and application layers across multiple Availability Zones in the Region
11. K. Use Spot Instances for the required resources.

Correct Answer: BCE
The requirements can be achieved by using an Amazon DynamoDB database with a global table. DynamoDB is a NoSQL database so it fits the requirements. A global table also allows both reads and writes to occur in both Regions. For the web and application tiers Auto Scaling groups should be configured. Due to the 1- minute RTO these must be configured in an active/passive state. The best pricing model to lower price but ensure resources are available when needed is to use a combination of zonal reserved instances and on-demand instances. To failover between the Regions, a Route 53 failover routing policy can be configured with a TTL configured on the record of 30 seconds. This will mean clients must resolve against Route 53 every 30 seconds to get the latest record. In a failover scenario the clients would be redirected to the secondary site if the primary site is unhealthy.

- (Exam Topic 2)
A company needs to migrate its customer transactions database from on premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server. According to a new security requirement, the company must rotate the database password each year.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Convert the database to Amazon DynamoDB by using the AWS Schema Conversion Tool (AWS SCT).Store the password in AWS Systems Manager Parameter Stor
2. B. Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.
3. C. Migrate the database to Amazon RDS for Oracl
4. D. Store the password in AWS Secrets Manage
5. E. Turn on automatic rotatio
6. F. Configure a yearly rotation schedule.
7. G. Migrate the database to an Amazon EC2 instanc
8. H. Use AWS Systems Manager Parameter Store to keep and rotate the connection string by using an AWS Lambda function on a yearly schedule
9. I. Migrate the database to Amazon Neptune by using the AWS Schema Conversion Tool {AWS SCT).Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.

Correct Answer: B