- (Exam Topic 2)
A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance. The analytics software is written in PHP and uses a MySQL database. The analytics software, the web server that provides PHP, and the database server are all hosted on the EC2 instance. The application is showing signs of performance degradation during busy times and is presenting 5xx errors. The company needs to make the application scale seamlessly.
Which solution will meet these requirements MOST cost-effectively?

1. A. Migrate the database to an Amazon RDS for MySQL DB instanc
2. B. Create an AMI of the web applicatio
3. C. Use the AMI to launch a second EC2 On-Demand Instanc
4. D. Use an Application Load Balancer to distribute the load to each EC2 instance.
5. E. Migrate the database to an Amazon RDS for MySQL DB instanc
6. F. Create an AMI of the web applicatio
7. G. Use the AMI to launch a second EC2 On-Demand Instanc
8. H. Use Amazon Route 53 weighted routing to distribute the load across the two EC2 instances.
9. I. Migrate the database to an Amazon Aurora MySQL DB instanc
10. J. Create an AWS Lambda function to stop the EC2 instance and change the instance typ
11. K. Create an Amazon CloudWatch alarm to invoke the Lambda function when CPU utilization surpasses 75%.
12. L. Migrate the database to an Amazon Aurora MySQL DB instanc
13. M. Create an AMI of the web application.Apply the AMI to a launch templat
14. N. Create an Auto Scaling group with the launch template Configure the launch template to use a Spot Flee
15. O. Attach an Application Load Balancer to the Auto Scaling group.

Correct Answer: D

- (Exam Topic 3)
A company wants to use Amazon S3 for the secondary copy of its on-premises dataset. The company would rarely need to access this copy. The storage solution’s cost should be minimal.
Which storage solution meets these requirements?

1. A. S3 Standard
2. B. S3 Intelligent-Tiering
3. C. S3 Standard-Infrequent Access (S3 Standard-IA)
4. D. S3 One Zone-Infrequent Access (S3 One Zone-IA)

Correct Answer: C

- (Exam Topic 3)
A solutions architect is designing a multi-tier application for a company. The application's users upload images from a mobile device. The application generates a thumbnail of each image and returns a message to the user to confirm that the image was uploaded successfully.
The thumbnail generation can take up to 60 seconds, but the company wants to provide a faster response time to its users to notify them that the original image was received. The solutions architect must design the application to asynchronously dispatch requests to the different application tiers.
What should the solutions architect do to meet these requirements?

1. A. Write a custom AWS Lambda function to generate the thumbnail and alert the use
2. B. Use the image upload process as an event source to invoke the Lambda function.
3. C. Create an AWS Step Functions workflow Configure Step Functions to handle the orchestration between the application tiers and alert the user when thumbnail generation is complete
4. D. Create an Amazon Simple Queue Service (Amazon SQS) message queu
5. E. As images are uploaded, place a message on the SQS queue for thumbnail generatio
6. F. Alert the user through an application message that the image was received
7. G. Create Amazon Simple Notification Service (Amazon SNS) notification topics and subscriptions Use one subscription with the application to generate the thumbnail after the image upload is complet
8. H. Use a second subscription to message the user's mobile app by way of a push notification after thumbnail generation is complete.

Correct Answer: C

- (Exam Topic 1)
A company uses AWS Organizations to manage multiple AWS accounts for different departments. The management account has an Amazon S3 bucket that contains project reports. The company wants to limit access to this S3 bucket to only users of accounts within the organization in AWS Organizations.
Which solution meets these requirements with the LEAST amount of operational overhead?

1. A. Add the aws:PrincipalOrgID global condition key with a reference to the organization ID to the S3 bucket policy.
2. B. Create an organizational unit (OU) for each departmen
3. C. Add the aws:PrincipalOrgPaths global condition key to the S3 bucket policy.
4. D. Use AWS CloudTrail to monitor the CreateAccount, InviteAccountToOrganization, LeaveOrganization, and RemoveAccountFromOrganization event
5. E. Update the S3 bucket policy accordingly.
6. F. Tag each user that needs access to the S3 bucke
7. G. Add the aws:PrincipalTag global condition key to the S3 bucket policy.

Correct Answer: A
https://aws.amazon.com/blogs/security/control-access-to-aws-resources-by-using-the-aws-organization-of-iam-p The aws:PrincipalOrgID global key provides an alternative to listing all the account IDs for all AWS accounts in an organization. For example, the following Amazon S3 bucket policy allows members of any account in the XXX organization to add an object into the examtopics bucket.
{"Version": "2020-09-10",
"Statement": {
"Sid": "AllowPutObject", "Effect": "Allow",
"Principal": "*", "Action": "s3:PutObject",
"Resource": "arn:aws:s3:::examtopics/*", "Condition": {"StringEquals":
{"aws:PrincipalOrgID":["XXX"]}}}} https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html

- (Exam Topic 3)
A research laboratory needs to process approximately 8 TB of data The laboratory requires sub-millisecond latencies and a minimum throughput of 6 GBps for the storage subsystem Hundreds of Amazon EC2 instances that run Amazon Linux will distribute and process the data
Which solution will meet the performance requirements?

1. A. Create an Amazon FSx for NetApp ONTAP file system Set each volume's tiering policy to ALL Import the raw data into the file system Mount the file system on the EC2 instances
2. B. Create an Amazon S3 bucket to stofe the raw data Create an Amazon FSx for Lustre file system that uses persistent SSD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances
3. C. Create an Amazon S3 bucket to store the raw data Create an Amazon FSx for Lustre file system that uses persistent HDD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances
4. D. Create an Amazon FSx for NetApp ONTAP file system Set each volume's tienng policy to NON
5. E. Import the raw data into the file system Mount the file system on the EC2 instances

Correct Answer: B
Create an Amazon S3 bucket to store the raw data Create an Amazon FSx for Lustre file system that uses persistent SSD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances. Amazon FSx for Lustre uses SSD storage for sub-millisecond latencies and up to 6 GBps throughput, and can import data from and export data to Amazon S3. Additionally, the option to select persistent SSD storage will ensure that the data is stored on the disk and not lost if the file system is stopped.