Question 790
In a design comparison, Amazon Route 53 DNS is associated with the objective to direct clients to an endpoint using managed domain name resolution. For the distinct objective to redirect DNS responses when monitored endpoint health changes, which option should be preferred?
- Amazon Route 53 DNS
- Availability Zone
- Route 53 failover routing
- AWS Region
Explanation
Correct Answer
C:Route 53 failover routing addresses the new need to redirect DNS responses when monitored endpoint health changes because Route 53 health checks and failover policies can influence which healthy target a client resolves; Amazon Route 53 DNS supports the different existing task to direct clients to an endpoint using managed domain name resolution.
Incorrect Answers
A:Amazon Route 53 DNS primarily supports the earlier need to direct clients to an endpoint using managed domain name resolution because Route 53 answers DNS queries according to hosted-zone records and routing policies, but the new task is to redirect DNS responses when monitored endpoint health changes; that is why Route 53 failover routing is preferable here.
B:Availability Zone is intended to separate redundant application components across isolated facilities within one Region because an Availability Zone is one or more discrete data centers with independent infrastructure in a Region; in this design the new outcome is to redirect DNS responses when monitored endpoint health changes, which calls for Route 53 failover routing rather than Availability Zone or the earlier Amazon Route 53 DNS.
D:AWS Region is intended to select a geographic area in which to place a workload because an AWS Region is a distinct geographic location containing multiple Availability Zones; in this design the new outcome is to redirect DNS responses when monitored endpoint health changes, which calls for Route 53 failover routing rather than AWS Region or the earlier Amazon Route 53 DNS.
Question 791
A platform engineering team has been asked to find subscribe to and manage eligible third-party software solutions. Which AWS service, capability, or concept most directly meets the stated need?
- AWS Marketplace
- Amazon SQS
- AWS Amplify
- Amazon CloudWatch
Explanation
Correct Answer
A:AWS Marketplace matches the goal to find subscribe to and manage eligible third-party software solutions because marketplace is a digital catalog of software data and related offerings. Buying a solution is not the same as hosting a frontend website. Amazon SQS is for the different objective to decouple systems with durable asynchronous message queues.
Incorrect Answers
B:Amazon SQS addresses the separate need to decouple systems with durable asynchronous message queues because sQS holds messages for consumers to process independently; it is not as direct as AWS Marketplace for the actual requirement to find subscribe to and manage eligible third-party software solutions.
C:AWS Amplify addresses the separate need to build and host web or mobile application frontends with integrated workflows because amplify provides frontend deployment and backend integrations for app teams; it is not as direct as AWS Marketplace for the actual requirement to find subscribe to and manage eligible third-party software solutions.
D:Amazon CloudWatch addresses the separate need to observe metrics logs alarms and events for running resources because cloudWatch helps monitor AWS workloads and alert on selected conditions; it is not as direct as AWS Marketplace for the actual requirement to find subscribe to and manage eligible third-party software solutions.
Question 792
A decision record states that the primary objective is to generate lists of objects and associated metadata for analysis. Which AWS offering or principle should it name?
- AWS Elastic Disaster Recovery
- S3 server-side encryption
- S3 bucket policy
- Amazon S3 Inventory
Explanation
Correct Answer
D:Amazon S3 Inventory matches the goal to generate lists of objects and associated metadata for analysis because S3 Inventory produces scheduled reports about bucket objects and properties. It is not the same as continuous application log monitoring. S3 server-side encryption is for the different objective to encrypt S3 object data at rest using supported key arrangements.
Incorrect Answers
A:AWS Elastic Disaster Recovery addresses the separate need to restore servers and workloads in AWS after an infrastructure disaster because elastic Disaster Recovery uses continuous block replication and orchestrated recovery; it is not as direct as Amazon S3 Inventory for the actual requirement to generate lists of objects and associated metadata for analysis.
B:S3 server-side encryption addresses the separate need to encrypt S3 object data at rest using supported key arrangements because S3 encrypts stored object data at rest and supports key-management choices; it is not as direct as Amazon S3 Inventory for the actual requirement to generate lists of objects and associated metadata for analysis.
C:S3 bucket policy addresses the separate need to control allowed and denied access to an S3 bucket and its objects because bucket policies are resource-based JSON permissions for supported S3 actions; it is not as direct as Amazon S3 Inventory for the actual requirement to generate lists of objects and associated metadata for analysis.
Question 793
The workload already uses NAT gateway to let private subnet resources initiate eligible outbound internet connections. A second workstream needs to distinguish outbound address translation from direct public routing. Which AWS choice fits the second workstream?
- NAT gateway
- NAT versus internet gateway
- Internet gateway
- Security group
Explanation
Correct Answer
B:NAT versus internet gateway addresses the new need to distinguish outbound address translation from direct public routing because NAT gateways enable private egress; internet gateways provide the VPC's internet attachment; NAT gateway supports the different existing task to let private subnet resources initiate eligible outbound internet connections.
Incorrect Answers
A:NAT gateway primarily supports the earlier need to let private subnet resources initiate eligible outbound internet connections because a NAT gateway translates egress traffic when appropriate routes are configured, but the new task is to distinguish outbound address translation from direct public routing; that is why NAT versus internet gateway is preferable here.
C:Internet gateway is intended to enable internet routing for resources in a VPC with suitable configuration because an internet gateway connects a VPC to the internet for eligible public addressing paths; in this design the new outcome is to distinguish outbound address translation from direct public routing, which calls for NAT versus internet gateway rather than Internet gateway or the earlier NAT gateway.
D:Security group is intended to enforce stateful inbound and outbound rules on supported resources because security groups act as virtual firewalls associated with network interfaces; in this design the new outcome is to distinguish outbound address translation from direct public routing, which calls for NAT versus internet gateway rather than Security group or the earlier NAT gateway.
Question 794
A decision meeting distinguishes between two outcomes: retain long-lived archives at very low storage cost when restoration can be slow, and retain multiple object versions to aid recovery from deletion or overwrite. The first is handled using S3 Glacier Deep Archive. Which option directly supports the second?
- S3 Versioning
- Amazon EFS
- S3 server-side encryption
- S3 Glacier Deep Archive
Explanation
Correct Answer
A:S3 Versioning addresses the new need to retain multiple object versions to aid recovery from deletion or overwrite because versioning maintains version identifiers for changed objects in a bucket; S3 Glacier Deep Archive supports the different existing task to retain long-lived archives at very low storage cost when restoration can be slow.
Incorrect Answers
B:Amazon EFS is intended to mount elastic shared file storage from multiple Linux workloads because eFS supplies managed NFS file systems that can be accessed concurrently by supported clients; in this design the new outcome is to retain multiple object versions to aid recovery from deletion or overwrite, which calls for S3 Versioning rather than Amazon EFS or the earlier S3 Glacier Deep Archive.
C:S3 server-side encryption is intended to encrypt S3 object data at rest using supported key arrangements because S3 encrypts stored object data at rest and supports key-management choices; in this design the new outcome is to retain multiple object versions to aid recovery from deletion or overwrite, which calls for S3 Versioning rather than S3 server-side encryption or the earlier S3 Glacier Deep Archive.
D:S3 Glacier Deep Archive primarily supports the earlier need to retain long-lived archives at very low storage cost when restoration can be slow because deep Archive is designed for extremely infrequent access and long retention, but the new task is to retain multiple object versions to aid recovery from deletion or overwrite; that is why S3 Versioning is preferable here.
Question 795
A platform engineering team has been asked to define AWS infrastructure using familiar programming languages. Which AWS service, capability, or concept most directly meets the stated need?
- AWS Service Catalog
- AWS Management Console
- AWS Cloud Development Kit (AWS CDK)
- AWS CodePipeline
Explanation
Correct Answer
C:AWS Cloud Development Kit (AWS CDK) matches the goal to define AWS infrastructure using familiar programming languages because AWS CDK constructs synthesize infrastructure definitions for deployment through CloudFormation. Source-code constructs ultimately represent infrastructure, not a running application service. AWS CodePipeline is for the different objective to orchestrate source-to-deployment stages automatically.
Incorrect Answers
A:AWS Service Catalog addresses the separate need to offer approved infrastructure products through governed self-service because service Catalog lets administrators define centrally governed products users can launch; it is not as direct as AWS Cloud Development Kit (AWS CDK) for the actual requirement to define AWS infrastructure using familiar programming languages.
B:AWS Management Console addresses the separate need to perform occasional AWS administration through a browser interface because the console provides graphical pages to view and configure AWS resources; it is not as direct as AWS Cloud Development Kit (AWS CDK) for the actual requirement to define AWS infrastructure using familiar programming languages.
D:AWS CodePipeline addresses the separate need to orchestrate source-to-deployment stages automatically because codePipeline coordinates supported actions across a delivery workflow; it is not as direct as AWS Cloud Development Kit (AWS CDK) for the actual requirement to define AWS infrastructure using familiar programming languages.
Question 796
A solution uses Amazon SNS for the requirement to fan out notifications to multiple subscribed endpoints. Which operating behavior underlies that use?
- This capability uses topics and subscriptions to publish messages to multiple destinations.
- This capability provides event buses and rule-based matching for supported events.
- This capability orchestrates service integrations and branching steps over time.
- SQS holds messages for consumers to process independently.
Explanation
Correct Answer
A:Amazon SNS meets the goal to fan out notifications to multiple subscribed endpoints because sNS uses topics and subscriptions to publish messages to multiple destinations. Pub/sub delivery is not the same as a worker queue with polling consumers.
Incorrect Answers
B:That description belongs to Amazon EventBridge because eventBridge provides event buses and rule-based matching for supported events; it is used to route events from producers to targets using event patterns, not to explain how Amazon SNS provides the function to fan out notifications to multiple subscribed endpoints.
C:That description belongs to AWS Step Functions because step Functions orchestrates service integrations and branching steps over time; it is used to coordinate multi-step application workflows with managed state, not to explain how Amazon SNS provides the function to fan out notifications to multiple subscribed endpoints.
D:That description belongs to Amazon SQS because sQS holds messages for consumers to process independently; it is used to decouple systems with durable asynchronous message queues, not to explain how Amazon SNS provides the function to fan out notifications to multiple subscribed endpoints.
Question 797
Engineers are documenting how AWS Database Migration Service fulfills an objective to move ongoing database data between supported source and destination engines. Which technical explanation belongs in that document?
- AWS SCT helps assess and convert compatible schema objects between database engines.
- Heterogeneous migration may require converting schema objects and application SQL.
- AWS DMS can perform initial loading and change data capture for supported databases.
- PITR continuously backs up eligible DynamoDB table data for point-in-time restore within its retention window.
Explanation
Correct Answer
C:AWS Database Migration Service meets the goal to move ongoing database data between supported source and destination engines because AWS DMS can perform initial loading and change data capture for supported databases. It moves data; schema or engine code conversion may require another tool.
Incorrect Answers
A:That description belongs to AWS Schema Conversion Tool because AWS SCT helps assess and convert compatible schema objects between database engines; it is used to translate supported database schemas and code for heterogeneous migrations, not to explain how AWS Database Migration Service provides the function to move ongoing database data between supported source and destination engines.
B:That description belongs to Heterogeneous database migration because heterogeneous migration may require converting schema objects and application SQL; it is used to move between dissimilar database engines with possible schema translation, not to explain how AWS Database Migration Service provides the function to move ongoing database data between supported source and destination engines.
D:That description belongs to DynamoDB point-in-time recovery because pITR continuously backs up eligible DynamoDB table data for point-in-time restore within its retention window; it is used to restore supported table data to a recent earlier point, not to explain how AWS Database Migration Service provides the function to move ongoing database data between supported source and destination engines.
Question 798
In a design comparison, Amazon EMR is associated with the objective to run supported big-data frameworks such as Apache Spark. For the distinct objective to discover prepare and integrate data across supported sources, which option should be preferred?
- AWS Glue
- Amazon Translate
- AWS Lake Formation
- Amazon EMR
Explanation
Correct Answer
A:AWS Glue addresses the new need to discover prepare and integrate data across supported sources because glue provides data integration workflows and a metadata Data Catalog; Amazon EMR supports the different existing task to run supported big-data frameworks such as Apache Spark.
Incorrect Answers
B:Amazon Translate is intended to translate text between supported human languages because translate is a machine-translation service used by multilingual applications; in this design the new outcome is to discover prepare and integrate data across supported sources, which calls for AWS Glue rather than Amazon Translate or the earlier Amazon EMR.
C:AWS Lake Formation is intended to govern data lakes with access and catalog integration because lake Formation helps establish and secure data-lake environments using AWS data services; in this design the new outcome is to discover prepare and integrate data across supported sources, which calls for AWS Glue rather than AWS Lake Formation or the earlier Amazon EMR.
D:Amazon EMR primarily supports the earlier need to run supported big-data frameworks such as Apache Spark because eMR provides managed cluster and serverless options for big-data processing, but the new task is to discover prepare and integrate data across supported sources; that is why AWS Glue is preferable here.
Question 799
A decision record states that the primary objective is to maintain copies of selected data outside its source Region. Which AWS offering or principle should it name?
- Availability Zone
- AWS Global Accelerator
- Regional disaster recovery tests
- Cross-Region replication
Explanation
Correct Answer
D:Cross-Region replication matches the goal to maintain copies of selected data outside its source Region because cross-Region replication moves eligible objects or database data into a different geography when configured. Replication behavior and lag depend on the specific service. Availability Zone is for the different objective to separate redundant application components across isolated facilities within one Region.
Incorrect Answers
A:Availability Zone addresses the separate need to separate redundant application components across isolated facilities within one Region because an Availability Zone is one or more discrete data centers with independent infrastructure in a Region; it is not as direct as Cross-Region replication for the actual requirement to maintain copies of selected data outside its source Region.
B:AWS Global Accelerator addresses the separate need to route user traffic toward healthy regional endpoints through AWS global network paths because global Accelerator uses static anycast IP addresses and endpoint health information to improve availability and performance; it is not as direct as Cross-Region replication for the actual requirement to maintain copies of selected data outside its source Region.
C:Regional disaster recovery tests addresses the separate need to verify a workload can resume in its backup Region because recovery exercises check replication, dependencies and traffic-routing procedures before a real incident; it is not as direct as Cross-Region replication for the actual requirement to maintain copies of selected data outside its source Region.
Question 800
A team already uses AWS App Runner to deploy supported web applications or container services without operating servers. It now must deploy supported applications while the platform provisions common resources, which is a separate requirement. What should it select for that new objective?
- Memory optimized EC2 instance
- AWS Elastic Beanstalk
- Amazon ECS
- AWS App Runner
Explanation
Correct Answer
B:AWS Elastic Beanstalk addresses the new need to deploy supported applications while the platform provisions common resources because elastic Beanstalk simplifies web-app deployment and orchestrates the supporting AWS components; AWS App Runner supports the different existing task to deploy supported web applications or container services without operating servers.
Incorrect Answers
A:Memory optimized EC2 instance is intended to support applications with large in-memory working sets because memory-optimized families provide higher RAM-to-vCPU ratios for memory-bound applications; in this design the new outcome is to deploy supported applications while the platform provisions common resources, which calls for AWS Elastic Beanstalk rather than Memory optimized EC2 instance or the earlier AWS App Runner.
C:Amazon ECS is intended to orchestrate containerized applications using AWS-managed control capabilities because eCS schedules and manages containers in clusters on supported launch types; in this design the new outcome is to deploy supported applications while the platform provisions common resources, which calls for AWS Elastic Beanstalk rather than Amazon ECS or the earlier AWS App Runner.
D:AWS App Runner primarily supports the earlier need to deploy supported web applications or container services without operating servers because app Runner automates build or container deployment and scales supported web services, but the new task is to deploy supported applications while the platform provisions common resources; that is why AWS Elastic Beanstalk is preferable here.