All practice questions

A company is designing a new transactional invoicing application (OLTP workload) that requires high-performance write operations and must dynamically scale read traffic to handle seasonal audits. The architecture requires a Recovery Point Objective (RPO) of under 1 minute and a Recovery Time Objective (RTO) of under 5 minutes. Additionally, database backups must be securely shared with and copied to a separate, centralized security AWS account. Which database and storage strategy meets these requirements?

A retail company is modernizing its catalog query service by refactoring the legacy application to use Amazon API Gateway and AWS Lambda. The application queries an Amazon RDS MySQL database. During promotional events, traffic is expected to spike from $100$ requests per second (RPS) to over $5,000$ RPS within a few seconds. The Solutions Architect must ensure that database connections are not exhausted and that the traffic burst does not exhaust the AWS account's regional concurrent execution limit, which would throttle other critical services. The API must also only be accessible by the company's internal web application running in a separate VPC.

Which combination of steps should the Solutions Architect implement to meet these requirements? (Select TWO.)

A global healthcare provider is designing a patient medical records portal. The portal application runs on Amazon ECS tasks inside an Application Account (Account 444444444444). The ECS tasks must upload scanned medical records directly to a centralized Amazon S3 bucket located in a dedicated Compliance Account (Account 888888888888). The solutions architect must design a security and compliance control structure that meets the following requirements:
1. All objects uploaded to the S3 bucket must be encrypted at rest.
2. The ECS tasks must be able to write records to the S3 bucket, but must not be able to read or delete any existing objects.
3. The Compliance Account must automatically own all uploaded records to prevent cross-account access delegation complexities.
4. Security auditors in the Compliance Account must be able to read and decrypt the records.

Which combination of configuration steps will meet these requirements in the most secure manner?

An online multiplayer gaming platform is launching a weekly synchronized global tournament. Every Sunday at 18:00 UTC, the platform experiences an instant traffic spike, growing from a baseline of $2,000$ active connections to over $90,000$ active players initiating matchmaking requests within $60$ seconds. The backend architecture consists of an Application Load Balancer (ALB), an Amazon ECS cluster running on AWS Fargate, and an Amazon DynamoDB table that stores player session states. During initial testing of the tournament start, players experienced high latency, and a significant number of matchmaking requests resulted in HTTP $503$ Service Unavailable errors. Monitoring indicates that the ECS tasks scale out, but the bottlenecks occur at the entry point and during database write operations due to the sudden nature of the surge. Which two actions should a solutions architect take to optimize the performance and scalability of the platform for the tournament? (Select TWO.)

Apex Cargo Systems is designing a new cloud architecture. An application hosted on Amazon ECS tasks in the Operations account (Account $111122223333$) must write transactional log files to an Amazon S3 bucket located in the Compliance Archive account (Account $444455556666$). The logs must be encrypted at rest using an AWS KMS key managed by the Compliance team. The solution must ensure that files written to the bucket are encrypted and that the Operations account has the minimum necessary privileges to perform these writes.

Which combination of configuration steps will satisfy these security and compliance design requirements?

A company is designing a new transactional retail application on AWS. The application requires a highly available relational database (OLTP workload) that can automatically scale to handle sudden bursts of read traffic. In addition, the application must write daily transaction logs to an Amazon S3 bucket. These logs must be shared with a centralized compliance account. The compliance account needs to read the logs using cross-account IAM roles, and the logs must be encrypted at rest. Which two options should the solutions architect select to meet these database and storage requirements? (Choose two.)

A mobile gaming company is launching a multiplayer game with a weekly competitive event. The event ends every Sunday at 20:00 UTC, at which point the leaderboard is frozen, rewards are calculated, and players immediately log in to claim their rewards and view the final rankings. The peak traffic is projected to jump instantly from a baseline of $2,000$ requests per second (RPS) to $350,000$ RPS within $30\text{ seconds}$. The leaderboard and session state must be persistent, highly available across multiple Availability Zones, and support sub-millisecond read/write latency. The backend consists of a microservices architecture hosted on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate, fronted by an Application Load Balancer (ALB). The primary database is an Amazon Aurora MySQL cluster. Which design should a solutions architect recommend to handle this sudden surge in load while maintaining optimal performance?

A media streaming platform is designing a cross-region archive storage system for high-resolution video assets. The files contain proprietary digital media assets and must be stored in Amazon S3 buckets in two AWS Regions: $us-west-2$ (primary) and $eu-west-1$ (disaster recovery). The system architecture requires that files uploaded to $us-west-2$ are replicated to $eu-west-1$ using S3 Cross-Region Replication (CRR). The security policy requires:

- The media assets must be encrypted at rest using customer-managed KMS keys.
- In the event of a regional failover, applications in $eu-west-1$ must be able to decrypt the replicated data directly without performing any re-encryption or key management operations.
- The encryption keys must support automatic annual rotation.

Which combination of actions will meet these requirements? (Select TWO.)

An enterprise is designing a secure federated identity access strategy for its multi-account environment managed by AWS Organizations. The identity team is integrating an on-premises SAML 2.0 compliant Identity Provider (IdP) with target IAM roles in various member accounts. To meet regulatory compliance, the solutions architect must enforce the following security controls:
1. Federated users accessing roles in production accounts must have successfully completed a multi-factor authentication (MFA) challenge at the IdP.
2. No local IAM users or IAM access keys may be created or utilized within any member accounts in the organization.

Which combination of actions must the solutions architect take to implement these compliance controls? (Select TWO.)

A financial services company runs a reporting application on AWS. The application uses an Amazon Aurora MySQL database cluster with one primary writer instance. The application workload is highly read-intensive, with a predictable $10\times$ increase in read queries during the final three days of each month. The write query volume remains low and constant. The solution must dynamically scale the read capacity to maintain query latencies under $100\text{ ms}$ while minimizing costs during periods of low activity.

Which database scaling strategy should a solutions architect recommend?

A solutions architect is designing the database strategy for a new high-frequency transactional banking portal (OLTP workload). The portal requires sub-10 millisecond read and write latencies, dynamic read scaling to handle unpredictable traffic spikes, and a Recovery Time Objective (RTO) of less than 30 seconds. In compliance with corporate security guidelines, the database must be encrypted at rest using a key managed in a separate centralized security AWS account. Which database and storage strategy meets these requirements?

A digital publishing company is launching a breaking news notification system. When a major global news event is broadcast, the system will send push notifications that will immediately drive a surge of over $80,000$ concurrent readers to a web portal within three minutes. The portal runs on Amazon EC2 instances within an Auto Scaling group behind an Application Load Balancer (ALB). The database backend is an Amazon Aurora PostgreSQL cluster with one primary writer and one replica. The portal's traffic is highly read-intensive, requiring dynamic read scaling of the database. Which actions should a Solutions Architect recommend to ensure the application scales effectively without dropping incoming traffic? (Select TWO.)

A global advertising technology company is designing a real-time bidding and analytics platform. The platform must process over $2$ million bid requests per second with sub-10 millisecond latency. The bidding system is stateless and deployed on Amazon ECS on AWS Fargate. Behind the bidding service, a read-heavy database stores user profiles ($10\text{ TB}$) and a write-heavy ingestion pipeline receives transaction logs. During scheduled high-profile sporting events, incoming request traffic spikes instantly from a baseline of $100,000$ requests per second to $2,000,000$ requests per second in less than one minute. Which two of the following architectural strategies should the solutions architect implement to optimize performance and scalability for these spikes? (Select TWO.)

A property management platform is modernizing its tenant building access logging system. The legacy application receives high-volume access event telemetry from IoT-enabled doors at peak hours, which causes database connection exhaustion on the backend Amazon RDS for PostgreSQL database. The database is located in a private VPC subnet. The platform requires the API endpoint to be accessible only from the corporate network over a private network connection. Which TWO actions should a solutions architect take to implement a serverless solution that meets these requirements? (Select TWO.)

A media company is migrating its legacy content metadata ingestion system to a serverless architecture on AWS. The system must process high-volume, bursty traffic from external publishing partners, decrypt incoming metadata payloads that are encrypted in an Amazon S3 bucket, and write updates to an Amazon Aurora PostgreSQL database. The design must be highly available, run within a private subnet, connect to the database securely without exhausting connections, and prevent traffic surges from throttling other critical Lambda functions in the AWS account. The external partners run their applications in a separate AWS account and need permission to access the encrypted S3 bucket. Which architecture meets these requirements?

A biotechnology firm, BioGenetics Labs, is building a genomic analysis pipeline. The raw sequencing data is ingested into an Amazon S3 bucket in the Ingestion account ($111122223333$). The data must be replicated automatically to an S3 bucket in a dedicated Compliance and Archival account ($555566667777$) within the same AWS Organization. The compliance requirements specify that all objects must be encrypted at rest in both source and destination buckets using AWS KMS, the Ingestion account must not retain permission to read or delete the replicated objects once they are in the Compliance account, and access to decrypt the replicated data in the Compliance account must be restricted strictly to users within the Compliance account. Which of the following designs meets these security and compliance requirements?

A company is designing a new real-time mobile gaming leaderboard and user profile service (NoSQL and key-value caching workload) that must support users across North America and Europe. The key performance indicators include single-digit millisecond latency for both write and read operations globally. The session store and query cache must support data persistence, multi-Availability Zone replication, and sub-key eviction. Additionally, the database tier must support an active-active multi-region deployment to meet a Recovery Time Objective (RTO) of near-zero. Which of the following database and storage configurations should the solutions architect select to meet these requirements? (Select TWO.)

A financial services company is designing a new compliance reporting pipeline. A data ingestion application running on Amazon EC2 instances in a Production account (Account ID $111111111111$) must write monthly transaction reports directly to an Amazon S3 bucket located in a dedicated Security and Auditing account (Account ID $222222222222$). All objects written to the destination S3 bucket must be encrypted at rest using Server-Side Encryption with AWS KMS (SSE-KMS) to meet PCI-DSS requirements. Which combination of S3 and KMS configuration will successfully allow the application to write encrypted reports to the bucket?

A smart utility company is modernizing its on-premises customer smart meter management system by migrating to a serverless architecture on AWS. The solution will use Amazon API Gateway and AWS Lambda to process bursty configuration updates sent to millions of meters during scheduled maintenance windows. The Lambda functions must securely query and update an Amazon Aurora PostgreSQL database located in a private subnet. The functions also require highly available outbound internet access to retrieve security token updates from a third-party API. Any update to the Lambda functions must support automated rollback if latency increases.

Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)

A company is designing a high-performance web application to support a highly anticipated, time-sensitive product release. The release event will start precisely at 15:00 UTC and is expected to attract an immediate wave of over $300,000$ concurrent users submitting search queries and orders. The proposed architecture consists of a stateless web tier running on Amazon EC2 instances behind an Application Load Balancer (ALB), and a database tier utilizing an Amazon Aurora MySQL database cluster. Which TWO actions should the solutions architect implement to ensure the application scales effectively and maintains sub-second latencies during the start of the event? (Select TWO.)