- (Exam Topic 3)
A solutions architect must update an application environment within AWS Elastic Beanstalk using a blue/green deployment methodology The solutions architect creates an environment that is identical to the existing application environment and deploys the application to the new environment.
What should be done next to complete the update?

1. A. Redirect to the new environment using Amazon Route 53
2. B. Select the Swap Environment URLs option
3. C. Replace the Auto Scaling launch configuration
4. D. Update the DNS records to point to the green environment

Correct Answer: B
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.CNAMESwap.html

- (Exam Topic 3)
A company's solutions architect needs to provide secure Remote Desktop connectivity to users for Amazon EC2 Windows instances that are hosted in a VPC. The solution must integrate centralized user management with the company's on-premises Active Directory. Connectivity to the VPC is through the internet. The company has hardware that can be used to establish an AWS Site-to-Site VPN connection.
Which solution will meet these requirements MOST cost-effectively?

1. A. Deploy a managed Active Directory by using AWS Directory Service for Microsoft Active Directory.Establish a trust with the on-premises Active Director
2. B. Deploy an EC2 instance as a bastion host in the VP
3. C. Ensure that the EC2 instance is joined to the domai
4. D. Use the bastion host to access the target instances through RDP.
5. E. Configure AWS IAM Identity Center (AWS Single Sign-On) to integrate with the on-premises Active Directory by using the AWS Directory Service for Microsoft Active Directory AD Connecto
6. F. Configure permission sets against user groups for access to AWS Systems Manage
7. G. Use Systems Manager Fleet Manager to access the target instances through RDP.
8. H. Implement a VPN between the on-premises environment and the target VP
9. I. Ensure that the target instances are joined to the on-premises Active Directory domain over the VPN connectio
10. J. Configure RDP access through the VP
11. K. Connect from the company's network to the target instances.
12. L. Deploy a managed Active Directory by using AWS Directory Service for Microsoft Active Directory.Establish a trust with the on-premises Active Director
13. M. Deploy a Remote Desktop Gateway on AWS by using an AWS Quick Star
14. N. Ensure that the Remote Desktop Gateway is joined to the domai
15. O. Use the Remote Desktop Gateway to access the target instances through RDP.

Correct Answer: D

- (Exam Topic 3)
A company is migrating its legacy .NET workload to AWS. The company has a containerized setup that includes a base container image. The base image is tens of gigabytes in size because of legacy libraries and other dependencies. The company has images for custom developed components that are dependent on the base image.
The company will use Amazon Elastic Container Registry (Amazon ECR) as part of its solution on AWS. Which solution will provide the LOWEST container startup time on AWS?

1. A. Use Amazon ECR to store the base image and the images for the custom developed component
2. B. Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to run the workload.
3. C. Use Amazon ECR to store the base image and the images for the custom developed component
4. D. Use AWS App Runner to run the workload.
5. E. Use Amazon ECR to store the images for the custom developed component
6. F. Create an AMI that contains the base imag
7. G. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances that are based on the AMI to run the workload
8. H. Use Amazon ECR to store the images for the custom developed component
9. I. Create an AMI that contains the base imag
10. J. Use Amazon Elastic Kubernetes Service (Amazon EKS) on AWS Fargate with the AMI to run the workload.

Correct Answer: C

- (Exam Topic 3)
A company is planning to migrate its on-premises transaction-processing application to AWS. The application runs inside Docker containers that are hosted on VMS in the company's data center. The Docker containers have shared storage where the application records transaction data.
The transactions are time sensitive. The volume of transactions inside the application is unpredictable. The company must implement a low-latency storage solution that will automatically scale throughput to meet increased demand. The company cannot develop the application further and cannot continue to administer the Docker hosting environment.
How should the company migrate the application to AWS to meet these requirements?

1. A. Migrate the containers that run the application to Amazon Elastic Kubernetes Service (Amazon EKS).Use Amazon S3 to store the transaction data that the containers share.
2. B. Migrate the containers that run the application to AWS Fargate for Amazon Elastic Container Service (Amazon ECS). Create an Amazon Elastic File System (Amazon EFS) file syste
3. C. Create a Fargate task definitio
4. D. Add a volume to the task definition to point to the EFS file system
5. E. Migrate the containers that run the application to AWS Fargate for Amazon Elastic Container Service (Amazon ECS). Create an Amazon Elastic Block Store (Amazon EBS) volum
6. F. Create a Fargate task definitio
7. G. Attach the EBS volume to each running task.
8. H. Launch Amazon EC2 instance
9. I. Install Docker on the EC2 instance
10. J. Migrate the containers to the EC2 instance
11. K. Create an Amazon Elastic File System (Amazon EFS) file syste
12. L. Add a mount point to the EC2 instances for the EFS file system.

Correct Answer: B
Migrating the containers that run the application to AWS Fargate for Amazon Elastic Container Service (Amazon ECS) will meet the requirement of not administering the Docker hosting environment. AWS Fargate is a serverless compute engine that runs containers without requiring any infrastructure management3.
Creating an Amazon Elastic File System (Amazon EFS) file system and adding a volume to the Fargate task definition to point to the EFS file system will meet the requirement of low-latency storage that will automatically scale throughput to meet increased demand. Amazon EFS is a fully managed file system service that provides shared access to data from multiple containers, supports NFSv4 protocol, and offers consistent performance and high availability4. Amazon EFS also supports automatic scaling of throughput based on the amount of data stored in the file system5.

- (Exam Topic 3)
A company is planning to migrate an Amazon RDS for Oracle database to an RDS for PostgreSQL DB instance in another AWS account. A solutions architect needs to design a migration strategy that will require no downtime and that will minimize the amount of time necessary to complete the migration. The migration strategy must replicate all existing data and any new data that is created during the migration The target database must be identical to the source database at completion of the migration process
All applications currently use an Amazon Route 53 CNAME record as their endpoint for communication with the RDS for Oracle DB instance The RDS for Oracle DB instance is in a private subnet.
Which combination of steps should the solutions architect take to meet these requirements? (Select THREE)

1. A. Create a new RDS for PostgreSQL DB instance in the target account Use the AWS Schema Conversion Tool (AWS SCT) to migrate the database schema from the source database to the target database
2. B. Use the AWS Schema Conversion Tool (AWS SCT) to create a new RDS for PostgreSQL DB instance in the target account with the schema and initial data from thesource database
3. C. Configure VPC peering between the VPCs in the two AWS accounts to provide connectivity to both DB instances from the target accoun
4. D. Configure the security groups that are attached to each DB instance to allow traffic on the database port from the VPC in the target account.
5. E. Temporarily allow the source DB instance to be publicly accessible to provide connectivity from the VPC in the target account Configure the security groups that are attached to each DB instance to allow traffic on the database port from the VPC in the target account.
6. F. Use AWS Database Migration Service (AWS DMS) in the target account to perform a full load plus change data capture (CDC) migration from the source database to the target database When the migration is complete, change the CNAME record to point to the target DB instance endpoint
7. G. Use AWS Database Migration Service (AWS DMS) in the target account to perform a change data capture (CDC) migration from the source database to the target database When the migration is complete change the CNAME record to point to the target DB instance endpoint.

Correct Answer: ACE