Question 930
A decision meeting distinguishes between two outcomes: execute event-triggered code without managing virtual servers, and launch simple virtual servers with bundled management and predictable plans. The first is handled using AWS Lambda. Which option directly supports the second?
- EC2 user data
- Gateway Load Balancer
- Amazon Lightsail
- AWS Lambda
Explanation
Correct Answer
C:Amazon Lightsail addresses the new need to launch simple virtual servers with bundled management and predictable plans because lightsail packages compute networking and storage for straightforward applications; AWS Lambda supports the different existing task to execute event-triggered code without managing virtual servers.
Incorrect Answers
A:EC2 user data is intended to perform initial bootstrap actions during instance launch because user data can provide launch-time configuration and installation scripts; in this design the new outcome is to launch simple virtual servers with bundled management and predictable plans, which calls for Amazon Lightsail rather than EC2 user data or the earlier AWS Lambda.
B:Gateway Load Balancer is intended to insert compatible virtual network appliances into traffic paths because gateway Load Balancer distributes flows across appliance targets for inspection or similar tasks; in this design the new outcome is to launch simple virtual servers with bundled management and predictable plans, which calls for Amazon Lightsail rather than Gateway Load Balancer or the earlier AWS Lambda.
D:AWS Lambda primarily supports the earlier need to execute event-triggered code without managing virtual servers because lambda runs functions in managed execution environments with service-defined execution constraints, but the new task is to launch simple virtual servers with bundled management and predictable plans; that is why Amazon Lightsail is preferable here.
Question 931
The solution currently handles its need to operate a managed relational database engine with Amazon RDS. A new requirement is to preserve multi-step data consistency in a relational workload instead. Which service or principle addresses that different need?
- Amazon Aurora
- Amazon ElastiCache
- ACID relational transactions
- Amazon RDS
Explanation
Correct Answer
C:ACID relational transactions addresses the new need to preserve multi-step data consistency in a relational workload because relational engines support transactional properties appropriate to tightly consistent operations; Amazon RDS supports the different existing task to operate a managed relational database engine.
Incorrect Answers
A:Amazon Aurora is intended to use a cloud-optimized relational engine compatible with MySQL or PostgreSQL because aurora is a managed relational database with distributed storage and supported compatibility modes; in this design the new outcome is to preserve multi-step data consistency in a relational workload, which calls for ACID relational transactions rather than Amazon Aurora or the earlier Amazon RDS.
B:Amazon ElastiCache is intended to cache frequently accessed application data in memory because elastiCache offers managed in-memory caching engines to reduce repetitive backend reads; in this design the new outcome is to preserve multi-step data consistency in a relational workload, which calls for ACID relational transactions rather than Amazon ElastiCache or the earlier Amazon RDS.
D:Amazon RDS primarily supports the earlier need to operate a managed relational database engine because RDS automates selected relational database operations including backup and patching, but the new task is to preserve multi-step data consistency in a relational workload; that is why ACID relational transactions is preferable here.
Question 932
While reviewing a design, an architect identifies a gap: the workload needs to run analytical workloads in a purpose-built data warehouse. Which option closes that gap most directly?
- Real-time event analytics
- ETL data preparation
- Amazon Textract
- Amazon EMR
- Amazon Redshift
- Text sentiment classification
Explanation
Correct Answer
E:Amazon Redshift matches the goal to run analytical workloads in a purpose-built data warehouse because redshift supports warehouse-oriented queries across large structured datasets. It is not primarily a transaction store for app session state. Amazon EMR is for the different objective to run supported big-data frameworks such as Apache Spark; the requested capability is Amazon Redshift to run analytical workloads in a purpose-built data warehouse, in contrast with Amazon EMR to run supported big-data frameworks such as Apache Spark.
Incorrect Answers
A:Real-time event analytics addresses the separate need to act on measurements or clicks as they arrive because streaming architectures use ingestion and processing to reduce analysis latency; it is not as direct as Amazon Redshift for the actual requirement to run analytical workloads in a purpose-built data warehouse.
B:ETL data preparation addresses the separate need to clean transform and load datasets before reporting because eTL services such as AWS Glue transform records into analysis-ready formats; it is not as direct as Amazon Redshift for the actual requirement to run analytical workloads in a purpose-built data warehouse.
C:Amazon Textract addresses the separate need to extract printed and handwritten text and document structure because textract reads forms tables and text from supported document inputs; it is not as direct as Amazon Redshift for the actual requirement to run analytical workloads in a purpose-built data warehouse.
D:Amazon EMR addresses the separate need to run supported big-data frameworks such as Apache Spark because eMR provides managed cluster and serverless options for big-data processing; it is not as direct as Amazon Redshift for the actual requirement to run analytical workloads in a purpose-built data warehouse.
F:Text sentiment classification addresses the separate need to identify positive negative or neutral tone in a document because managed NLP sentiment analysis assesses the emotional polarity of text; it is not as direct as Amazon Redshift for the actual requirement to run analytical workloads in a purpose-built data warehouse.
Question 933
In an architecture review, Region outage planning was selected to prepare recovery beyond failure of one Availability Zone. Which account of its behavior justifies this decision?
- Deploying and replicating across Regions can isolate regional failures and serve separate markets.
- A regional recovery design uses another Region and explicit data and traffic recovery plans.
- An AWS Region is a distinct geographic location containing multiple Availability Zones.
- An Availability Zone is one or more discrete data centers with independent infrastructure in a Region.
Explanation
Correct Answer
B:Region outage planning meets the goal to prepare recovery beyond failure of one Availability Zone because a regional recovery design uses another Region and explicit data and traffic recovery plans. Simply adding more subnets in one Region cannot mitigate complete regional unavailability.
Incorrect Answers
A:That description belongs to Multi-Region architecture because deploying and replicating across Regions can isolate regional failures and serve separate markets; it is used to address disaster recovery or geography-spanning application availability, not to explain how Region outage planning provides the function to prepare recovery beyond failure of one Availability Zone.
C:That description belongs to AWS Region because an AWS Region is a distinct geographic location containing multiple Availability Zones; it is used to select a geographic area in which to place a workload, not to explain how Region outage planning provides the function to prepare recovery beyond failure of one Availability Zone.
D:That description belongs to Availability Zone because an Availability Zone is one or more discrete data centers with independent infrastructure in a Region; it is used to separate redundant application components across isolated facilities within one Region, not to explain how Region outage planning provides the function to prepare recovery beyond failure of one Availability Zone.
Question 934
In a design comparison, Gateway VPC endpoint is associated with the objective to connect a VPC to supported Amazon S3 or DynamoDB services through route-table entries. For the distinct objective to connect many VPCs and supported on-premises networks through a central hub, which option should be preferred?
- AWS Transit Gateway
- VPC peering
- Interface VPC endpoint
- Gateway VPC endpoint
Explanation
Correct Answer
A:AWS Transit Gateway addresses the new need to connect many VPCs and supported on-premises networks through a central hub because transit Gateway simplifies hub-and-spoke network connectivity at scale; Gateway VPC endpoint supports the different existing task to connect a VPC to supported Amazon S3 or DynamoDB services through route-table entries.
Incorrect Answers
B:VPC peering is intended to connect two VPCs privately for their routable address ranges because peering allows traffic between eligible VPCs with non-overlapping CIDRs and appropriate routes; in this design the new outcome is to connect many VPCs and supported on-premises networks through a central hub, which calls for AWS Transit Gateway rather than VPC peering or the earlier Gateway VPC endpoint.
C:Interface VPC endpoint is intended to reach supported services through private network interfaces in a subnet because privateLink-backed endpoints create private IP endpoints with associated security groups; in this design the new outcome is to connect many VPCs and supported on-premises networks through a central hub, which calls for AWS Transit Gateway rather than Interface VPC endpoint or the earlier Gateway VPC endpoint.
D:Gateway VPC endpoint primarily supports the earlier need to connect a VPC to supported Amazon S3 or DynamoDB services through route-table entries because gateway endpoints provide private service paths for S3 and DynamoDB, but the new task is to connect many VPCs and supported on-premises networks through a central hub; that is why AWS Transit Gateway is preferable here.
Question 935
A cloud team wants to create a managed front door for application APIs. It has considered Amazon WorkSpaces, whose main role is to provide managed cloud virtual desktop environments. Which other selection is more tightly matched to the actual task?
- Amazon SES
- Amazon WorkSpaces
- Amazon API Gateway
- AWS X-Ray
Explanation
Correct Answer
C:Amazon API Gateway addresses the new need to create a managed front door for application APIs because aPI Gateway exposes managed API endpoints with routing and controls; Amazon WorkSpaces supports the different existing task to provide managed cloud virtual desktop environments.
Incorrect Answers
A:Amazon SES is intended to send transactional or bulk application email because sES provides managed email sending and receiving capabilities; in this design the new outcome is to create a managed front door for application APIs, which calls for Amazon API Gateway rather than Amazon SES or the earlier Amazon WorkSpaces.
B:Amazon WorkSpaces primarily supports the earlier need to provide managed cloud virtual desktop environments because workSpaces delivers desktop computing to remote users, but the new task is to create a managed front door for application APIs; that is why Amazon API Gateway is preferable here.
D:AWS X-Ray is intended to trace distributed requests through supported application components because x-Ray provides distributed tracing to help find latency and failure sources; in this design the new outcome is to create a managed front door for application APIs, which calls for Amazon API Gateway rather than AWS X-Ray or the earlier Amazon WorkSpaces.
Question 936
A team already uses Infrastructure as code to treat resource configurations as version-controlled declarative definitions. It now must run scripted AWS API operations from shell commands, which is a separate requirement. What should it select for that new objective?
- AWS Outposts
- Infrastructure as code
- Public cloud deployment
- AWS CLI
Explanation
Correct Answer
D:AWS CLI addresses the new need to run scripted AWS API operations from shell commands because the AWS Command Line Interface exposes AWS service operations to terminals and automation; Infrastructure as code supports the different existing task to treat resource configurations as version-controlled declarative definitions.
Incorrect Answers
A:AWS Outposts is intended to run AWS-managed infrastructure at a customer premises for local requirements because outposts extends selected AWS infrastructure and services to supported on-premises locations; in this design the new outcome is to run scripted AWS API operations from shell commands, which calls for AWS CLI rather than AWS Outposts or the earlier Infrastructure as code.
B:Infrastructure as code primarily supports the earlier need to treat resource configurations as version-controlled declarative definitions because infrastructure as code makes deployments repeatable and reviewable through machine-readable files, but the new task is to run scripted AWS API operations from shell commands; that is why AWS CLI is preferable here.
C:Public cloud deployment is intended to run workloads on provider infrastructure without maintaining local servers because a public cloud model uses infrastructure operated by an external cloud provider; in this design the new outcome is to run scripted AWS API operations from shell commands, which calls for AWS CLI rather than Public cloud deployment or the earlier Infrastructure as code.
Question 937
The workload already uses DynamoDB global tables to provide multi-Region active-active replication for a DynamoDB application. A second workstream needs to cache frequently accessed application data in memory. Which AWS choice fits the second workstream?
- DynamoDB global tables
- Amazon ElastiCache
- Amazon Redshift
- DynamoDB point-in-time recovery
Explanation
Correct Answer
B:Amazon ElastiCache addresses the new need to cache frequently accessed application data in memory because elastiCache offers managed in-memory caching engines to reduce repetitive backend reads; DynamoDB global tables supports the different existing task to provide multi-Region active-active replication for a DynamoDB application.
Incorrect Answers
A:DynamoDB global tables primarily supports the earlier need to provide multi-Region active-active replication for a DynamoDB application because global tables replicate supported data across selected Regions for regional workloads, but the new task is to cache frequently accessed application data in memory; that is why Amazon ElastiCache is preferable here.
C:Amazon Redshift is intended to analyze large structured data sets in a columnar warehouse because redshift provides a cloud data warehouse optimized for analytical SQL workloads; in this design the new outcome is to cache frequently accessed application data in memory, which calls for Amazon ElastiCache rather than Amazon Redshift or the earlier DynamoDB global tables.
D:DynamoDB point-in-time recovery is intended to restore supported table data to a recent earlier point because pITR continuously backs up eligible DynamoDB table data for point-in-time restore within its retention window; in this design the new outcome is to cache frequently accessed application data in memory, which calls for Amazon ElastiCache rather than DynamoDB point-in-time recovery or the earlier DynamoDB global tables.
Question 938
A decision meeting distinguishes between two outcomes: organize and manage fleets of supported connected devices, and audit supported AWS account activity and API operations. The first is handled using AWS IoT Device Management. Which option directly supports the second?
- AWS IoT Device Management
- Amazon EventBridge Scheduler
- AWS CloudTrail
- AWS X-Ray
Explanation
Correct Answer
C:AWS CloudTrail addresses the new need to audit supported AWS account activity and API operations because cloudTrail records AWS actions for governance and incident review; AWS IoT Device Management supports the different existing task to organize and manage fleets of supported connected devices.
Incorrect Answers
A:AWS IoT Device Management primarily supports the earlier need to organize and manage fleets of supported connected devices because ioT device management capabilities help register organize and monitor connected devices, but the new task is to audit supported AWS account activity and API operations; that is why AWS CloudTrail is preferable here.
B:Amazon EventBridge Scheduler is intended to invoke supported targets according to one-time or recurring schedules because eventBridge Scheduler manages event-driven scheduled invocations; in this design the new outcome is to audit supported AWS account activity and API operations, which calls for AWS CloudTrail rather than Amazon EventBridge Scheduler or the earlier AWS IoT Device Management.
D:AWS X-Ray is intended to trace distributed requests through supported application components because x-Ray provides distributed tracing to help find latency and failure sources; in this design the new outcome is to audit supported AWS account activity and API operations, which calls for AWS CloudTrail rather than AWS X-Ray or the earlier AWS IoT Device Management.
Question 939
A cloud design relies on AWS service APIs to interact programmatically with AWS using supported service requests. What capability or process actually provides that outcome?
- Service Catalog lets administrators define centrally governed products users can launch.
- These tools provide language libraries and request handling for application integrations with AWS APIs.
- This capability provides inventory, automation, patching and remote operational capabilities.
- AWS APIs expose actions and resource operations through defined programmatic interfaces.
Explanation
Correct Answer
D:AWS service APIs meets the goal to interact programmatically with AWS using supported service requests because AWS APIs expose actions and resource operations through defined programmatic interfaces. API access does not bypass IAM enforcement.
Incorrect Answers
A:That description belongs to AWS Service Catalog because service Catalog lets administrators define centrally governed products users can launch; it is used to offer approved infrastructure products through governed self-service, not to explain how AWS service APIs provides the function to interact programmatically with AWS using supported service requests.
B:That description belongs to AWS SDKs because sDKs provide language libraries and request handling for application integrations with AWS APIs; it is used to integrate AWS service requests directly into application source code, not to explain how AWS service APIs provides the function to interact programmatically with AWS using supported service requests.
C:That description belongs to AWS Systems Manager because systems Manager provides inventory, automation, patching and remote operational capabilities; it is used to manage operational tasks across supported compute fleets, not to explain how AWS service APIs provides the function to interact programmatically with AWS using supported service requests.
Question 940
During the storage design, the requirement is to store recreatable infrequently accessed objects within one Availability Zone. Which option best addresses that exact requirement?
- AWS Storage Gateway
- Amazon S3 One Zone-IA
- Amazon S3 Object Lock
- S3 server-side encryption
Explanation
Correct Answer
B:Amazon S3 One Zone-IA matches the goal to store recreatable infrequently accessed objects within one Availability Zone because one Zone-IA has a single-AZ resilience profile and lower storage cost. It is not appropriate when the only copy must withstand AZ loss. AWS Storage Gateway is for the different objective to connect on-premises applications to cloud-backed storage interfaces.
Incorrect Answers
A:AWS Storage Gateway addresses the separate need to connect on-premises applications to cloud-backed storage interfaces because storage Gateway supports hybrid file volume and tape integration scenarios; it is not as direct as Amazon S3 One Zone-IA for the actual requirement to store recreatable infrequently accessed objects within one Availability Zone.
C:Amazon S3 Object Lock addresses the separate need to enforce supported WORM retention against object deletion or modification because object Lock supports retention modes and legal holds on eligible S3 object versions; it is not as direct as Amazon S3 One Zone-IA for the actual requirement to store recreatable infrequently accessed objects within one Availability Zone.
D:S3 server-side encryption addresses the separate need to encrypt S3 object data at rest using supported key arrangements because S3 encrypts stored object data at rest and supports key-management choices; it is not as direct as Amazon S3 One Zone-IA for the actual requirement to store recreatable infrequently accessed objects within one Availability Zone.