- (Exam Topic 1)
A company has developed APIs that use Amazon API Gateway with Regional endpoints. The APIs call AWS Lambda functions that use API Gateway authentication mechanisms. After a design review, a solutions architect identifies a set of APIs that do not require public access.
The solutions architect must design a solution to make the set of APIs accessible only from a VPC. All APIs need to be called with an authenticated user.
Which solution will meet these requirements with the LEAST amount of effort?

1. A. Create an internal Application Load Balancer (ALB). Create a target grou
2. B. Select the Lambda function to cal
3. C. Use the ALB DNS name to call the API from the VPC.
4. D. Remove the DNS entry that is associated with the API in API Gatewa
5. E. Create a hosted zone in Amazon Route 53. Create a CNAME record in the hosted zon
6. F. Update the API in API Gateway with the CNAME recor
7. G. Use the CNAME record to call the API from the VPC.
8. H. Update the API endpoint from Regional to private in API Gatewa
9. I. Create an interface VPC endpoint in the VP
10. J. Create a resource policy, and attach it to the AP
11. K. Use the VPC endpoint to call the API from the VPC.
12. L. Deploy the Lambda functions inside the VP
13. M. Provision an EC2 instance, and install an Apache server.From the Apache server, call the Lambda function
14. N. Use the internal CNAME record of the EC2 instance to call the API from the VPC.

Correct Answer: C
This solution requires the least amount of effort as it only requires to update the API endpoint to private in API Gateway and create an interface VPC endpoint. Then create a resource policy and attach it to the API. This will make the API only accessible from the VPC and still keep the authentication mechanism intact. Reference:
https://aws.amazon.com/api-gateway/features/

- (Exam Topic 1)
A company is running a data-intensive application on AWS. The application runs on a cluster of hundreds of Amazon EC2 instances. A shared file system also runs on several EC2 instances that store 200 TB of data. The application reads and modifies the data on the shared file system and generates a report. The job runs once monthly, reads a subset of the files from the shared file system, and takes about 72 hours to complete. The compute instances scale in an Auto Scaling group, but the instances that host the shared file system run continuously. The compute and storage instances are all in the same AWS Region.
A solutions architect needs to reduce costs by replacing the shared file system instances. The file system must provide high performance access to the needed data for the duration of the 72-hour run.
Which solution will provide the LARGEST overall cost reduction while meeting these requirements?

1. A. Migrate the data from the existing shared file system to an Amazon S3 bucket that uses the S3 Intelligent-Tiering storage clas
2. B. Before the job runs each month, use Amazon FSx for Lustre to create a new file system with the data from Amazon S3 by using lazy loadin
3. C. Use the new file system as the shared storage for the duration of the jo
4. D. Delete the file system when the job is complete.
5. E. Migrate the data from the existing shared file system to a large Amazon Elastic Block Store (Amazon EBS) volume with Multi-Attach enable
6. F. Attach the EBS volume to each of the instances by using a user data script in the Auto Scaling group launch templat
7. G. Use the EBS volume as the shared storage for the duration of the jo
8. H. Detach the EBS volume when the job is complete.
9. I. Migrate the data from the existing shared file system to an Amazon S3 bucket that uses the S3 Standard storage clas
10. J. Before the job runs each month, use Amazon FSx for Lustre to create a new file system with the data from Amazon S3 by using batch loadin
11. K. Use the new file system as the shared storage for the duration of the jo
12. L. Delete the file system when the job is complete.
13. M. Migrate the data from the existing shared file system to an Amazon S3 bucke
14. N. Before the job runs each month, use AWS Storage Gateway to create a file gateway with the data from Amazon S3. Use the file gateway as the shared storage for the jo
15. O. Delete the file gateway when the job is complete.

Correct Answer: A
https://aws.amazon.com/blogs/storage/new-enhancements-for-moving-data-between-amazon-fsx-for-lustre-and

- (Exam Topic 1)
A company is hosting a three-tier web application in an on-premises environment. Due to a recent surge in traffic that resulted in downtime and a significant financial impact, company management has ordered that the application be moved to AWS. The application is written in .NET and has a dependency on a MySQL database A solutions architect must design a scalable and highly available solution to meet the demand of 200000 daily users.
Which steps should the solutions architect take to design an appropriate solution?

1. A. Use AWS Elastic Beanstalk to create a new application with a web server environment and an Amazon RDS MySQL Multi-AZ DB instance The environment should launch a Network Load Balancer (NLB) in front of an Amazon EC2 Auto Scaling group in multiple Availability Zones Use an Amazon Route 53 alias record to route traffic from the company's domain to the NLB.
2. B. Use AWS CloudFormation to launch a stack containing an Application Load Balancer (ALB) in front of an Amazon EC2 Auto Scaling group spanning three Availability Zone
3. C. The stack should launch a Multi-AZ deployment of an Amazon Aurora MySQL DB cluster with a Retain deletion polic
4. D. Use an Amazon Route 53 alias record to route traffic from the company's domain to the ALB
5. E. Use AWS Elastic Beanstalk to create an automatically scaling web server environment that spans two separate Regions with an Application Load Balancer (ALB) in each Regio
6. F. Create a Multi-AZ deployment of an Amazon Aurora MySQL DB cluster with a cross-Region read replica Use Amazon Route 53 with a geoproximity routing policy to route traffic between the two Regions.
7. G. Use AWS CloudFormation to launch a stack containing an Application Load Balancer (ALB) in front of an Amazon ECS cluster of Spot Instances spanning three Availability Zones The stack should launch an Amazon RDS MySQL DB instance with a Snapshot deletion policy Use an Amazon Route 53 alias record to route traffic from the company's domain to the ALB

Correct Answer: C
Using AWS CloudFormation to launch a stack with an Application Load Balancer (ALB) in front of an Amazon EC2 Auto Scaling group spanning three Availability Zones, a Multi-AZ deployment of an Amazon Aurora MySQL DB cluster with a Retain deletion policy, and an Amazon Route 53 alias record to route traffic from the company’s domain to the ALB will ensure that

- (Exam Topic 3)
An environmental company is deploying sensors in major cities throughout a country to measure air quality The sensors connect to AWS loT Core to ingest timesheets data readings. The company stores the data in Amazon DynamoDB
For business continuity the company must have the ability to ingest and store data in two AWS Regions Which solution will meet these requirements?

1. A. Create an Amazon Route 53 alias failover routing policy with values for AWS loT Core data endpoints in both Regions Migrate data to Amazon Aurora global tables
2. B. Create a domain configuration for AWS loT Core in each Region Create an Amazon Route 53latency-based routing policy Use AWS loT Core data endpoints in both Regions as values Migrate the data to Amazon MemoryDB for Radis and configure Cross-Region replication
3. C. Create a domain configuration for AWS loT Core in eac
4. D. Region Create an Amazon Route 53 health check that evaluates domain configuration health Create a failover routing policy with values for the domain name from the AWS loT Core domain configurations Update the DynamoDB table to a global table
5. E. Create an Amazon Route 53 latency-based routing polic
6. F. Use AWS loT Core data endpoints in both Regions as value
7. G. Configure DynamoDB streams and Cross-Region data replication

Correct Answer: C
https://aws.amazon.com/solutions/implementations/disaster-recovery-for-aws-iot/

- (Exam Topic 1)
A company has developed a web application. The company is hosting the application on a group of Amazon EC2 instances behind an Application Load Balancer. The company wants to improve the security posture of the application and plans to use AWS WAF web ACLs. The solution must not adversely affect legitimate traffic to the application.
How should a solutions architect configure the web ACLs to meet these requirements?

1. A. Set the action of the web ACL rules to Coun
2. B. Enable AWS WAF logging Analyze the requests for false positives Modify the rules to avoid any false positive Over time change the action of the web ACL rules from Count to Block.
3. C. Use only rate-based rules in the web ACL
4. D. and set the throttle limit as high as possible Temporarily block all requests that exceed the limi
5. E. Define nested rules to narrow the scope of the rate tracking.
6. F. Set the action o' the web ACL rules to Bloc
7. G. Use only AWS managed rule groups in the web ACLs Evaluate the rule groups by using Amazon CloudWatch metrics with AWS WAF sampled requests or AWS WAF logs.
8. H. Use only custom rule groups in the web ACL
9. I. and set the action to Allow Enable AWS WAF logging Analyze the requests tor false positives Modify the rules to avoid any false positive Over time, change the action of the web ACL rules from Allow to Block.

Correct Answer: A
https://aws.amazon.com/premiumsupport/knowledge-center/waf-analyze-count-action-rules/