- (Exam Topic 3)
A company uses a legacy application to produce data in CSV format The legacy application stores the output data In Amazon S3 The company is deploying a new commercial off-the-shelf (COTS) application that can perform complex SQL queries to analyze data that is stored Amazon Redshift and Amazon S3 only However the COTS application cannot process the csv files that the legacy application produces The company cannot update the legacy application to produce data in another format The company needs to implement a solution so that the COTS application can use the data that the legacy applicator produces.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create a AWS Glue extract, transform, and load (ETL) job that runs on a schedul
2. B. Configure the ETL job to process the .csv files and store the processed data in Amazon Redshit.
3. C. Develop a Python script that runs on Amazon EC2 instances to convert th
4. D. csv files to sql files invoke the Python script on cron schedule to store the output files in Amazon S3.
5. E. Create an AWS Lambda function and an Amazon DynamoDB tabl
6. F. Use an S3 event to invoke the Lambda functio
7. G. Configure the Lambda function to perform an extract transform, and load (ETL) job to process the .csv files and store the processed data in the DynamoDB table.
8. H. Use Amazon EventBridge (Amazon CloudWatch Events) to launch an Amazon EMR cluster on a weekly schedul
9. I. Configure the EMR cluster to perform an extract, tractform, and load (ETL) job to process the .csv files and store the processed data in an Amazon Redshift table.

Correct Answer: C
According to the Amazon website, Amazon S3 Select is an Amazon S3 feature that enables applications to retrieve only a subset of data from an object. It offers an efficient way to access data stored in Amazon S3 and can significantly improve query performance, save money, and increase the scalability of applications that frequently access data in S3. S3 Select allows applications to retrieve only the data that is needed, instead of the entire object, and supports SQL expressions, CSV, and JSON. Additionally, S3 Select can be used to query objects stored in the S3 Glacier storage class. The exact text from the Amazon website about S3 Select is:
"Amazon S3 Select is an Amazon S3 feature that enables applications to retrieve only a subset of data from an object. It offers an efficient way to access data stored in Amazon S3 and can significantly improve query performance, save money, and increase the scalability of applications that frequently access data in S3. S3 Select allows applications to retrieve only the data that is needed, instead of the entire object, and supports SQL expressions, CSV, and JSON. Additionally, S3 Select can be used to query objects stored in the S3 Glacier storage class."

- (Exam Topic 3)
A company is building a data analysis platform on AWS by using AWS Lake Formation. The platform will ingest data from different sources such as Amazon S3 and Amazon RDS. The company needs a secure solution to prevent access to portions of the data that contain sensitive information.

1. A. Create an IAM role that includes permissions to access Lake Formation tables.
2. B. Create data filters to implement row-level security and cell-level security.
3. C. Create an AWS Lambda function that removes sensitive information before Lake Formation ingests re data.
4. D. Create an AWS Lambda function that perodically Queries and removes sensitive information from Lake Formation tables.

Correct Answer: A

- (Exam Topic 3)
A company plans to use Amazon ElastiCache for its multi-tier web application. A solutions architect creates a Cache VPC for the ElastiCache cluster and an App VPC for the application’s Amazon EC2 instances. Both VPCs are in the us-east-1 Region.
The solutions architect must implement a solution to provide the application’s EC2 instances with access to the ElastiCache cluster.
Which solution will meet these requirements MOST cost-effectively?

1. A. Create a peering connection between the VPC
2. B. Add a route table entry for the peering connection in both VPC
3. C. Configure an inbound rule for the ElastiCache cluster’s security group to allow inbound connection from the application’s security group.
4. D. Create a Transit VP
5. E. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VP
6. F. Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application’s security group.
7. G. Create a peering connection between the VPC
8. H. Add a route table entry for the peering connection in both VPC
9. I. Configure an inbound rule for the peering connection’s security group to allow inbound connection from the application’s security group.
10. J. Create a Transit VP
11. K. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VP
12. L. Configure an inbound rule for the Transit VPC’s security group to allow inbound connection from the application’s security group.

Correct Answer: A
Creating a peering connection between the VPCs allows the application's EC2 instances to communicate with the ElastiCache cluster directly and efficiently. This is the most cost-effective solution as it does not involve creating additional resources such as a Transit VPC, and it does not incur additional costs for traffic passing through the Transit VPC. Additionally, it is also more secure as it allows you to configure a more restrictive security group rule to allow inbound connection from only the application's security group.

- (Exam Topic 3)
A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code.
Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.) ' A. Store the static files on Amazon S3. Use Amazon A. CloudFront to cache objects at the edge.

1. A. Store the static files on Amazon S3. Use Amazon ElastiCache to cache objects at the edge.
2. B. Store the server-side code on Amazon Elastic File System (Amazon EFS). Mount the EFS volume on each EC2 instance to share the files.
3. C. Store the server-side code on Amazon FSx for Windows File Serve
4. D. Mount the FSx for Windows File Server volume on each EC2 instance to share the files.
5. E. Store the server-side code on a General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volum
6. F. Mount the EBS volume on each EC2 instance to share the files.

Correct Answer: AE

- (Exam Topic 1)
An application runs on an Amazon EC2 instance in a VPC. The application processes logs that are stored in an Amazon S3 bucket. The EC2 instance needs to access the S3 bucket without connectivity to the internet.
Which solution will provide private network connectivity to Amazon S3?

1. A. Create a gateway VPC endpoint to the S3 bucket.
2. B. Stream the logs to Amazon CloudWatch Log
3. C. Export the logs to the S3 bucket.
4. D. Create an instance profile on Amazon EC2 to allow S3 access.
5. E. Create an Amazon API Gateway API with a private link to access the S3 endpoint.

Correct Answer: A
VPC endpoint allows you to connect to AWS services using a private network instead of using the public Internet