- (Exam Topic 1)
A company recently migrated to AWS and wants to implement a solution to protect the traffic that flows in and out of the production VPC. The company had an inspection server in its on-premises data center. The inspection server performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities in the AWS Cloud.
Which solution will meet these requirements?

1. A. Use Amazon GuardDuty for traffic inspection and traffic filtering in the production VPC
2. B. Use Traffic Mirroring to mirror traffic from the production VPC for traffic inspection and filtering.
3. C. Use AWS Network Firewall to create the required rules for traffic inspection and traffic filtering for the production VPC.
4. D. Use AWS Firewall Manager to create the required rules for traffic inspection and traffic filtering for the production VPC.

Correct Answer: C
AWS Network Firewall supports both inspection and filtering as required

- (Exam Topic 2)
A gaming company is designing a highly available architecture. The application runs on a modified Linux kernel and supports only UDP-based traffic. The company needs the front-end tier to provide the best possible user experience. That tier must have low latency, route traffic to the nearest edge location, and provide static IP addresses for entry into the application endpoints.
What should a solutions architect do to meet these requirements?

1. A. Configure Amazon Route 53 to forward requests to an Application Load Balance
2. B. Use AWS Lambda for the application in AWS Application Auto Scaling.
3. C. Configure Amazon CloudFront to forward requests to a Network Load Balance
4. D. Use AWS Lambda for the application in an AWS Application Auto Scaling group.
5. E. Configure AWS Global Accelerator to forward requests to a Network Load Balance
6. F. Use Amazon EC2 instances for the application in an EC2 Auto Scaling group.
7. G. Configure Amazon API Gateway to forward requests to an Application Load Balance
8. H. Use AmazonEC2 instances for the application in an EC2 Auto Scaling group.

Correct Answer: C

- (Exam Topic 1)
A company uses NFS to store large video files in on-premises network attached storage. Each video file ranges in size from 1MB to 500 GB. The total storage is 70 TB and is no longer growing. The company decides to migrate the video files to Amazon S3. The company must migrate the video files as soon as possible while using the least possible network bandwidth.
Which solution will meet these requirements?

1. A. Create an S3 bucket Create an IAM role that has permissions to write to the S3 bucke
2. B. Use the AWS CLI to copy all files locally to the S3 bucket.
3. C. Create an AWS Snowball Edge jo
4. D. Receive a Snowball Edge device on premise
5. E. Use the Snowball Edge client to transfer data to the devic
6. F. Return the device so that AWS can import the data into Amazon S3.
7. G. Deploy an S3 File Gateway on premise
8. H. Create a public service endpoint to connect to the S3 File Gateway Create an S3 bucket Create a new NFS file share on the S3 File Gateway Point the new file share to the S3 bucke
9. I. Transfer the data from the existing NFS file share to the S3 File Gateway.
10. J. Set up an AWS Direct Connect connection between the on-premises network and AW
11. K. Deploy an S3 File Gateway on premise
12. L. Create a public virtual interlace (VIF) to connect to the S3 File Gatewa
13. M. Create an S3 bucke
14. N. Create a new NFS file share on the S3 File Gatewa
15. O. Point the new file share to the S3 bucke
16. P. Transfer the data from the existing NFS file share to the S3 File Gateway.

Correct Answer: B

- (Exam Topic 2)
A company is migrating an application from on-premises servers to Amazon EC2 instances. As part of the migration design requirements, a solutions architect must implement infrastructure metric alarms. The company does not need to take action if CPU utilization increases to more than 50% for a short burst of time. However, if the CPU utilization increases to more than 50% and read IOPS on the disk are high at the same time, the company needs to act as soon as possible. The solutions architect also must reduce false alarms.
What should the solutions architect do to meet these requirements?

1. A. Create Amazon CloudWatch composite alarms where possible.
2. B. Create Amazon CloudWatch dashboards to visualize the metrics and react to issues quickly.
3. C. Create Amazon CloudWatch Synthetics canaries to monitor the application and raise an alarm.
4. D. Create single Amazon CloudWatch metric alarms with multiple metric thresholds where possible.

Correct Answer: A

- (Exam Topic 3)
A company recently migrated its web application to AWS by rehosting the application on Amazon EC2 instances in a single AWS Region. The company wants to redesign its application architecture to be highly available and fault tolerant. Traffic must reach all running EC2 instances randomly.
Which combination of steps should the company take to meet these requirements? (Choose two.)

1. A. Create an Amazon Route 53 failover routing policy.
2. B. Create an Amazon Route 53 weighted routing policy.
3. C. Create an Amazon Route 53 multivalue answer routing policy.
4. D. Launch three EC2 instances: two instances in one Availability Zone and one instance in another Availability Zone.
5. E. Launch four EC2 instances: two instances in one Availability Zone and two instances in another Availability Zone.

Correct Answer: CE
https://aws.amazon.com/premiumsupport/knowledge-center/multivalue-versus-simple-policies/