- (Exam Topic 2)
A company is migrating its data centre from on premises to the AWS Cloud. The migration will take several months to complete. The company will use Amazon Route 53 for private DNS zones.
During the migration, the company must Keep its AWS services pointed at the VPC's Route 53 Resolver for DNS. The company also must maintain the ability to resolve addresses from its on-premises DNS server A solutions architect must set up DNS so that Amazon EC2 instances can use native Route 53 endpoints to resolve on-premises DNS queries
Which configuration writ meet these requirements?

1. A. Configure Vie VPC DHCP options set to point to on-premises DNS server IP addresse
2. B. Ensure that security groups for EC2 instances allow outbound access to port 53 on those DNS server IP addresses.
3. C. Launch an EC2 instance that has DNS BIND installed and configure
4. D. Ensure that the security groups that are attached to the EC2 instance can access the on-premises DNS server IP address on port 53. Configure BIND to forward DNS queries to on-premises DNS server IP addresses Configure each migrated EC2 instances DNS settings to point to the BIND server IP address.
5. E. Create a new outbound endpoint in Route 53. and attach me endpoint to the VP
6. F. Ensure that the security groups that are attached to the endpoint can access the on-premises DNS server IP address on port 53 Create a new Route 53 Resolver rule that routes on-premises designated traffic to theon-premises DNS server.
7. G. Create a new private DNS zone in Route 53 with the same domain name as the on-premises domain.Create a single wildcard record with the on-premises DNS server IP address as the record's address.

Correct Answer: A

- (Exam Topic 1)
A financial company is building a system to generate monthly, immutable bank account statements for its users. Statements are stored in Amazon S3. Users should have immediate access to their monthly statements for up to 2 years. Some users access their statements frequently, whereas others rarely access their statements. The company's security and compliance policy requires that the statements be retained for at least 7 years.
What is the MOST cost-effective solution to meet the company's needs?

1. A. Create an S3 bucket with Object Lock disable
2. B. Store statements in S3 Standar
3. C. Define an S3 Lifecycle policy to transition the data to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 day
4. D. Define another S3 Lifecycle policy to move the data to S3 Glacier Deep Archive after 2 year
5. E. Attach an S3 Glacier Vault Lock policy with deny delete permissions for archives less than 7 years old.
6. F. Create an S3 bucket with versioning enable
7. G. Store statements in S3 Intelligent-Tierin
8. H. Usesame-Region replication to replicate objects to a backup S3 bucke
9. I. Define an S3 Lifecycle policy for the backup S3 bucket to move the data to S3 Glacie
10. J. Attach an S3 Glacier Vault Lock policy with deny delete permissions for archives less than 7 years old.
11. K. Create an S3 bucket with Object Lock enable
12. L. Store statements in S3 Intelligent-Tierin
13. M. Enable compliance mode with a default retention period of 2 year
14. N. Define an S3 Lifecycle policy to move the data to S3 Glacier after 2 year
15. O. Attach an S3 Glacier Vault Lock policy with deny delete permissionsfor archives less than 7 years old.
16. P. Create an S3 bucket with versioning disable
17. Q. Store statements in S3 One Zone-Infrequent Access (S3 One Zone-IA). Define an S3 Lifecyde policy to move the data to S3 Glacier Deep Archive after 2 year
18. R. Attach an S3 Glader Vault Lock policy with deny delete permissions for archives less than 7 years old.

Correct Answer: C
https://aws.amazon.com/about-aws/whats-new/2018/11/s3-object-lock/
Create an S3 bucket with Object Lock enabled. Store statements in S3 Intelligent-Tiering. Enable compliance mode with a default retention period of 2 years. Define an S3 Lifecycle policy to move the data to S3 Glacier after 2 years. Attach an S3 Glacier Vault Lock policy with deny delete permissions for archives less than 7 years old.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html

- (Exam Topic 2)
A company is planning to migrate an application from on premises to the AWS Cloud. The company will begin the migration by moving the application's underlying data storage to AWS The application data is stored on a shared tie system on premises, and the application servers connect to the shared We system through SMB.
A solutions architect must implement a solution that uses an Amazon S3 bucket tor shared storage Until the application Is fully migrated and code is rewritten to use native Amazon S3 APIs, the application must continue to have access to the data through SMB The solutions architect must migrate the application data to AWS to its new location while still allowing the on-premises application to access the data.
Which solution will meet these requirements?

1. A. Create a new Amazon FSx for Windows File Server fie system Configure AWS DataSync with one location tor the on-premises file share and one location for the new Amazon FSx file system Create a new DataSync task to copy the data from the on-premises file share location to the Amazon FSx file system
2. B. Create an S3 bucket for the applicatio
3. C. Copy the data from the on-premises storage to the S3 bucket
4. D. Deploy an AWS Server Migration Service (AWS SMS) VM to the on-premises environmen
5. E. Use AWS SMS to migrate the file storage server from on premises to an Amazon EC2 instance
6. F. Create an S3 bucket for the applicatio
7. G. Deploy a new AWS Storage Gateway Me gateway on anon-premises V
8. H. Create a new file share that stores data in the S3 bucket and is associated with the tie gatewa
9. I. Copy the data from the on-premises storage to the new file gateway endpoint.

Correct Answer: A

- (Exam Topic 1)
A company that tracks medical devices in hospitals wants to migrate its existing storage solution to the AWS Cloud. The company equips all of its devices with sensors that collect location and usage information. This sensor data is sent in unpredictable patterns with large spikes. The data is stored in a MySQL database running on premises at each hospital. The company wants the cloud storage solution to scale with usage.
The company's analytics team uses the sensor data to calculate usage by device type and hospital. The team needs to keep analysis tools running locally while fetching data from the cloud. The team also needs to use existing Java application and SQL queries with as few changes as possible.
How should a solutions architect meet these requirements while ensuring the sensor data is secure?

1. A. Store the data in an Amazon Aurora Serverless databas
2. B. Serve the data through a Network Load Balancer (NLB). Authenticate users using the NLB with credentials stored in AWS Secrets Manager.
3. C. Store the data in an Amazon S3 bucke
4. D. Serve the data through Amazon QuickSight using an IAM user authorized with AWS Identity and Access Management (IAM) with the S3 bucket as the data source.
5. E. Store the data in an Amazon Aurora Serverless databas
6. F. Serve the data through the Aurora Data API using an IAM user authorized with AWS Identity and Access Management (IAM) and the AWS Secrets Manager ARN.
7. G. Store the data in an Amazon S3 bucke
8. H. Serve the data through Amazon Athena using AWS PrivateLink to secure the data in transit.

Correct Answer: C
https://aws.amazon.com/blogs/aws/new-data-api-for-amazon-aurora-serverless/ https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html https://aws.amazon.com/blogs/aws/aws-privatelink-for-amazon-s3-now-available/ https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html#data-api.access
The data is currently stored in a MySQL database running on-prem. Storing MySQL data in S3 doesn't sound good so B & D are out. Aurora Data API "enables the SQL HTTP endpoint, a connectionless Web Service API for running SQL queries against this database. When the SQL HTTP endpoint is enabled, you can also query your database from inside the RDS console (these features are free to use)."

- (Exam Topic 2)
A large multinational company runs a timesheet application on AWS that is used by staff across the world The application runs on Amazon EC2 instances in an Auto Scaling group behind an Elastic Load Balancing (ELB) load balancer, and stores data in an Amazon RDS MySQL Multi-AZ database instance.
The CFO is concerned about the impact on the business if the application is not available The application must not be down for more than two hours, but the solution must be as cost-effective as possible
How should the solutions architect meet the CFO's requirements while minimizing data loss?

1. A. In another region, configure a read replica and create a copy of the infrastructure When an issue occurs, promote the read replica and configure as an Amazon RDS Multi-AZ database instance Update the DNS record to point to the other region's ELB
2. B. Configure a 1-day window of 60-minute snapshots of the Amazon RDS Multi-AZ database instance Create an AWS CloudFormation template of the application infrastructure that uses the latest snapshot When an issue occurs use the AWS CloudFormation template to create the environment in another region Update the DNS record to point to the other region's ELB.
3. C. Configure a 1-day window of 60 minute snapshots of the Amazon RDS Multi-AZ database instance which is copied to another region Create an AWS CloudFormation template of the application infrastructure that uses the latest copied snapshot When an issue occurs, use the AWS CloudFormation template to create the environment in another region Update the DNS record to point to the other region's ELB
4. D. Configure a read replica in another region Create an AWS CloudFormation template of the application infrastructure When an issue occurs, promote the read replica and configure as an Amazon RDSMulti-AZ database instance and use the AWS CloudFormation template to create the environment in another region using the promoted Amazon RDS instance Update the DNS record to point to the other region's ELB

Correct Answer: D