- (Exam Topic 1)
A company has a three-tier web application that is deployed on AWS. The web servers are deployed in a public subnet in a VPC. The application servers and database servers are deployed in private subnets in the same VPC. The company has deployed a third-party virtual firewall appliance from AWS Marketplace in an inspection VPC. The appliance is configured with an IP interface that can accept IP packets.
A solutions architect needs to Integrate the web application with the appliance to inspect all traffic to the application before the traffic teaches the web server. Which solution will moot these requirements with the LEAST operational overhead?

1. A. Create a Network Load Balancer the public subnet of the application's VPC to route the traffic lo the appliance for packet inspection
2. B. Create an Application Load Balancer in the public subnet of the application's VPC to route the traffic to the appliance for packet inspection
3. C. Deploy a transit gateway m the inspection VPC Configure route tables to route the incoming pockets through the transit gateway
4. D. Deploy a Gateway Load Balancer in the inspection VPC Create a Gateway Load Balancer endpoint to receive the incoming packets and forward the packets to the appliance

Correct Answer: D
https://aws.amazon.com/blogs/networking-and-content-delivery/scaling-network-traffic-inspection-using-aws-ga

- (Exam Topic 3)
A company is running a multi-tier recommence web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ OB instance. Amazon ROS is configured with the latest generation DB instance with 2.000 GB of storage In a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBSl volume. The database performance affects the application during periods high demand.
A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20.000.
What should a solutions architect do to improve the application performance?

1. A. Replace the volume with a magnetic volume.
2. B. Increase the number of IOPS on the gp3 volume.
3. C. Replace the volume with a Provisioned IOPS SSD (Io2) volume.
4. D. Replace the 2.000 GB gp3 volume with two 1.000 GB gp3 volumes

Correct Answer: C

- (Exam Topic 1)
A company hosts its multi-tier applications on AWS. For compliance, governance, auditing, and security, the company must track configuration changes on its AWS resources and record a history of API calls made to these resources.
What should a solutions architect do to meet these requirements?

1. A. Use AWS CloudTrail to track configuration changes and AWS Config to record API calls
2. B. Use AWS Config to track configuration changes and AWS CloudTrail to record API calls
3. C. Use AWS Config to track configuration changes and Amazon CloudWatch to record API calls
4. D. Use AWS CloudTrail to track configuration changes and Amazon CloudWatch to record API calls

Correct Answer: B

- (Exam Topic 3)
A company that primarily runs its application servers on premises has decided to migrate to AWS. The company wants to minimize its need to scale its Internet Small Computer Systems Interface (iSCSI) storage on premises. The company wants only its recently accessed data to remain stored locally.
Which AWS solution should the company use to meet these requirements?

1. A. Amazon S3 File Gateway
2. B. AWS Storage Gateway Tape Gateway
3. C. AWS Storage Gateway Volume Gateway stored volumes
4. D. AWS Storage Gateway Volume Gateway cachea volumes

Correct Answer: D

- (Exam Topic 2)
A company wants to direct its users to a backup static error page if the company's primary website is unavailable. The primary website's DNS records are hosted in Amazon Route 53. The domain is pointing to an Application Load Balancer (ALB). The company needs a solution that minimizes changes and infrastructure overhead.
Which solution will meet these requirements?

1. A. Update the Route 53 records to use a latency routing polic
2. B. Add a static error page that is hosted in an Amazon S3 bucket to the records so that the traffic is sent to the most responsive endpoints.
3. C. Set up a Route 53 active-passive failover configuratio
4. D. Direct traffic to a static error page that is hosted in an Amazon S3 bucket when Route 53 health checks determine that the ALB endpoint is unhealthy.
5. E. Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance that hosts a static error page as endpoint
6. F. Configure Route 53 to send requests to the instance only if the health checks fail for the ALB.
7. G. Update the Route 53 records to use a multivalue answer routing polic
8. H. Create a health chec
9. I. Direct traffic to the website if the health check passe
10. J. Direct traffic to a static error page that is hosted in Amazon S3 if the health check does not pass.

Correct Answer: B