- (Topic 3)
A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same high availability and resiliency, but the company wants to minimize storage costs.
Which storage solution will meet these requirements?

1. A. Move the data objects to S3 Glacier Deep Archive after 30 days.
2. B. Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.
3. C. Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.
4. D. Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately.

Correct Answer: B
Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days - will meet the requirements of keeping the data immediately accessible with high availability and resiliency, while minimizing storage costs. S3 Standard-IA is designed for infrequently accessed data, and it provides a lower storage cost than S3 Standard, while still offering the same low latency, high throughput, and high durability as S3 Standard.

- (Topic 4)
A solutions architect needs to copy files from an Amazon S3 bucket to an Amazon Elastic File System (Amazon EFS) file system and another S3 bucket. The files must be copied continuously. New files are added to the original S3 bucket consistently. The copied files should be overwritten only if the source file changes.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create an AWS DataSync location for both the destination S3 bucket and the EFS file syste
2. B. Create a task for the destination S3 bucket and the EFS file syste
3. C. Set the transfer mode to transfer only data that has changed.
4. D. Create an AWS Lambda functio
5. E. Mount the file system to the functio
6. F. Set up an S3 event notification to invoke the function when files are created and changed in Amazon S3. Configure the function to copy files to the file system and the destination S3 bucket.
7. G. Create an AWS DataSync location for both the destination S3 bucket and the EFS file syste
8. H. Create a task for the destination S3 bucket and the EFS file syste
9. I. Set the transfer mode to transfer all data.
10. J. Launch an Amazon EC2 instance in the same VPC as the file syste
11. K. Mount the file syste
12. L. Create a script to routinely synchronize all objects that changed in the origin S3 bucket to the destination S3 bucket and the mounted file system.

Correct Answer: A
AWS DataSync is a service that makes it easy to move large amounts of data between AWS storage services and on-premises storage systems. AWS DataSync can copy files from an S3 bucket to an EFS file system and another S3 bucket continuously, as well as overwrite only the files that have changed in the source. This solution will meet the requirements with the least operational overhead, as it does not require any code development or manual intervention.
References:
✑ 4 explains how to create AWS DataSync locations for different storage services.
✑ 5 describes how to create and configure AWS DataSync tasks for data transfer.
✑ 6 discusses the different transfer modes that AWS DataSync supports.

- (Topic 3)
A company selves a dynamic website from a flee! of Amazon EC2 instances behind an Application Load Balancer (ALB) The website needs to support multiple languages to serve customers around the world The website's architecture is running in the us-west-1 Region and is exhibiting high request latency tor users that are located in other parts of the world
The website needs to serve requests quickly and efficiently regardless of a user's location However the company does not want to recreate the existing architecture across multiple Regions
What should a solutions architect do to meet these requirements?

1. A. Replace the existing architecture with a website that is served from an Amazon S3 bucket Configure an Amazon CloudFront distribution with the S3 bucket as the origin Set the cache behavior settings to cache based on the Accept-Language request header
2. B. Configure an Amazon CloudFront distribution with the ALB as the origin Set the cache behavior settings to cache based on the Accept-Language request header
3. C. Create an Amazon API Gateway API that is integrated with the ALB Configure the API to use the HTTP integration type Set up an API Gateway stage to enable the API cache based on the Accept-Language request header
4. D. Launch an EC2 instance in each additional Region and configure NGINX to act as a cache server for that Region Put all the EC2 instances and the ALB behind an Amazon Route 53 record set with a geolocation routing policy

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/header- caching.html Configuring caching based on the language of the viewer: If you want CloudFront to cache different versions of your objects based on the language specified in the request, configure CloudFront to forward the Accept-Language header to your origin.

- (Topic 2)
A solutions architect is designing a customer-facing application for a company. The application's database will have a clearly defined access pattern throughout the year and will have a variable number of reads and writes that depend on the time of year. The company must retain audit records for the database for 7 days. The recovery point objective (RPO) must be less than 5 hours.
Which solution meets these requirements?

1. A. Use Amazon DynamoDB with auto scaling Use on-demand backups and Amazon DynamoDB Streams
2. B. Use Amazon Redshif
3. C. Configure concurrency scalin
4. D. Activate audit loggin
5. E. Perform database snapshots every 4 hours.
6. F. Use Amazon RDS with Provisioned IOPS Activate the database auditing parameter Perform database snapshots every 5 hours
7. G. Use Amazon Aurora MySQL with auto scalin
8. H. Activate the database auditing parameter

Correct Answer: A
This solution meets the requirements of a customer-facing application that has a clearly defined access pattern throughout the year and a variable number of reads and writes that depend on the time of year. Amazon DynamoDB is a fully managed NoSQL database service that can handle any level of request traffic and data size. DynamoDB auto scaling can automatically adjust the provisioned read and write capacity based on the actual workload. DynamoDB on-demand backups can create full backups of the tables for data protection and archival purposes. DynamoDB Streams can capture a time-ordered sequence of item-level modifications in the tables for audit purposes.
Option B is incorrect because Amazon Redshift is a data warehouse service that is designed for analytical workloads, not for customer-facing applications. Option C is incorrect because Amazon RDS with Provisioned IOPS can provide consistent performance for relational databases, but it may not be able to handle unpredictable spikes in traffic and data size. Option D is incorrect because Amazon Aurora MySQL with auto scaling can provide high performance and availability for relational databases, but it does not support audit logging as a parameter.
References:
✑ https://aws.amazon.com/dynamodb/
✑ https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/AutoScalin g.html
✑ https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/BackupRe store.html
✑ https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Streams.ht ml

- (Topic 2)
A company needs to move data from an Amazon EC2 instance to an Amazon S3 bucket. The company must ensure that no API calls and no data are routed through public internet routes. Only the EC2 instance can have access to upload data to the S3 bucket.
Which solution will meet these requirements?

1. A. Create an interface VPC endpoint for Amazon S3 in the subnet where the EC2 instance is locate
2. B. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.
3. C. Create a gateway VPC endpoint for Amazon S3 in the Availability Zone where the EC2 instance is locate
4. D. Attach appropriate security groups to the endpoin
5. E. Attach a resource policy lo the S3 bucket to only allow the EC2 instance's IAM role for access.
6. F. Run the nslookup tool from inside the EC2 instance to obtain the private IP address of the S3 bucket's service API endpoin
7. G. Create a route in the VPC route table to provide theEC2 instance with access to the S3 bucke
8. H. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.
9. I. Use the AWS provided, publicly available ip-ranges.json tile to obtain the private IP address of the S3 bucket's service API endpoin
10. J. Create a route in the VPC route table to provide the EC2 instance with access to the S3 bucke
11. K. Attach a resource policy to the S3 bucket to only allow the EC2 instance's IAM role for access.

Correct Answer: A
(https://aws.amazon.com/blogs/security/how-to-restrict-amazon-s3-bucket-access-to-a-specific-iam-role/)