（新版）SAA-EN認(rèn)證考試題庫大全-下部分（800題）

PAGEPAGE647（新版）SAA_EN認(rèn)證考試題庫大全-下部分（800題）一、單選題1.Apanyisusingathird-partyvendortomanageitsmarketplaceanalytics.Thevendorneedslimitedprogrammaticaccesstoresourcesinthepany'saccount.Alltheneededpolicieshavebeencreatedtograntappropriateaccess.WhichadditionalponentwillprovidethevendorwiththeMOSTsecureaccesstotheaccount?A、CreateanIAMuser.B、Implementaservicecontrolpolicy(SCP).C、Useacross-accountrolewithanexternalID.D、Configureasinglesign-on(SSO)identityprovider.答案：C解析：2021-07-26D-->CBYChunWhenyouneedtograntaccesstoyourAWSresourcestoathirdparty,weremendyoudosousinganIAMrolewithexternalID.Inthispost,JoshBean,aprogrammerwriterontheAWSIdentitya。https://docs.aws.amazon./IAM/latest/UserGuide/id_roles_create_for-user_externaliD.html"Forexample,let'ssaythatyoudecidetohireathird-partypanycalledExampleCorptomonitoryourAWSaccountandhelpoptimizecosts.Inordertotrackyourdailyspending,ExampleCorpneedstoaccessyourAWSresources.ExampleCorpalsomonitorsmanyotherAWSaccountsforothercustomers.DonotgiveExampleCorpaccesstoanIAMuseranditslong-termcredentialsinyourAWSaccount.Instead,useanIAMroleanditstemporarysecuritycredentials.AnIAMroleprovidesamechanismtoallowathirdpartytoaccessyourAWSresourceswithoutneedingtosharelong-termcredentials(forexample,anIAMuser'saccesskey)."IAMisgoodbutnotenough."Programmaticaccess:TheIAMusermightneedtomakeAPIcalls,usetheAWSCLI,orusetheToolsforWindowsPowerShell.Inthatcase,createanaccesskey(accesskeyIDandasecretaccesskey)forthatuser.AWSManagementConsoleaccess:IftheuserneedstoaccesstheAWSManagementConsole,createapasswordfortheuser."<brstyle="white-space:normal;"/>原始答案是DThevendordoesn'tneccessarilyhaveanaccounttomanagewithSCP.SingleSignOngetsmyvotE.AnSCPdefinesaguardrail,orsetslimits,ontheactionsthattheaccount'sadministratorcandelegatetotheIAMusersandrolesintheaffectedaccounts.FM20100901642.Apanyisplanningtomigrateamercialoff-the-shelfapplicationfromitson-premisesdatacentertoAWS,Thesoftwarehasasoftwarelicensingmodelusingsocketsandcoreswithpredictablecapacityanduptimerequirements.Thepanywantstouseitsexistinglicenses,whichwerepurchasedearlierthisyear.WhichAmazonEC2pricingoptionistheMOSTcost-effective?A、DedicatedReservedHostsB、DedicatedOn-DemandHostsC、DedicatedReservedInstancesD、DedicatedOn-DemandInstances答案：A解析：FM20100901363.ApanywantstoimprovetheavailabilityandperformanceofitsstatelessUDP-basedworkloaD.TheworkloadisdeployedonAmazonEC2instancesinmultipleAWSRegions.Whatshouldasolutionsarchitectremendtoacplishthis?A、PlacetheEC2instancesbehindNetworkLoadBalancers(NLBs)ineachRegion.CreateanacceleratorusingAWSGlobalAccelerator.UsetheNLBsasendpointsfortheaccelerator.B、PlacetheEC2instancesbehindApplicationLoadBalancers(ALBs)ineachRegion.CreateanacceleratorusingAWSGlobalAccelerator.UsetheALBsasendpointsfortheaccelerator.C、PlacetheEC2instancesbehindNetworkLoadBalancers(NLBs)ineachRegion.CreateanAmazonCloudFrontdistributionwithanoriginthatusesAmazonRoute53latency-basedroutingtorouterequeststotheNLBs.D、PlacetheEC2instancesbehindApplicationLoadBalancers(ALBs)ineachRegion.CreateanAmazonCloudFrontdistributionwithanoriginthatusesAmazonRoute53latency-basedroutingtorouterequeststotheALBs答案：A解析：FM20100901554.Apanyisrunningamulti-tieremercewebapplicationintheAWSClouD.TheapplicationrunsonAmazonEC2instanceswithanAmazonRDSMySQLMulti-AZDBinstancE.AmazonRDSisconfiguredwiththelatestgenerationinstancewith2000GBofstorageinanAmazonEBSGeneralPurposeSSD(gp2)volumE.ThedatabaseperformanceimpactstheapplicationduringperiodsofhighdemanD.AfteranalyzingthelogsinAmazonCloudWatchLogs,adatabaseadministratorfindsthattheapplicationperformancealwaysdegradeswhenthenumberofreadandwriteIOPSishigherthan6,000.Whatshouldasolutionsarchitectdotoimprovetheapplicationperformance?A、ReplacethevolumewithaMagneticvolumE.B、IncreasethenumberofIOPSonthegp2volumE.C、ReplacethevolumewithaProvisionedIOPS(PIOPS)volumE.D、Replacethe2,000GBgp2volumewithtwo1,000GBgp2volumes.答案：C解析：FM20100901155.AuserwantstolisttheIAMrolethat蛃attachedtotheirAmazonEC2instanceTheuserhasloginaccesstotheEC2instancebutdoesnothaveIAMpermissions.Whatshouldasolutionsarchitectdotoretrievethisinformation?A、RunthefollowingEC2mand:curl54/latest/meta-data/iam/infoB、RunthefollowingEC2mand:curl54/latest/user-data/iam/infoC、RunthefollowingEC2mand:54/latest/dynamic/instance-identity/D、RunthefollowingAWSCLImanD.awsiamget-instance-profile;:--instance-profile-nameExampleInstanceProfile答案：A解析：FM20100901176.ApanyissettingupanapplicationtouseanAmazonRDSMySQLDBinstancE.ThedatabasemustbearchitectedforhighavailabilityacrossAvailabilityZonesandAWSRegionswithminimaldowntimE.Howshouldasolutionsarchitectmeetthisrequirement?A、SetupanRDSMySQLMulti-AZDBinstancE.Configureanappropriatebackupwindow.B、SetupanRDSMySQLMulti-AZDBinstancE.ConfigureareadreplicainadifferentRegion.C、SetupanRDSMySQLSingle-AZDBinstancE.Configureareadreplica.inadifferentRegion.D、SetupanRDSMySQLSingleAZDBinstancE.CopyautomatedsnapshotstoatleastoneotherRegion.答案：B解析：FM20100901307.Apanyisworkingwithanexternalvendorthatrequireswriteaccesstothepany'sAmazonSimpleQueueService(AmazonSQS)queuE.ThevendorhasitsownAWSaccount.Whatshouldasolutionsarchitectdotoimplementleastprivilegeaccess?A、UpdatethepermissionpolicyontheSQSqueuetogivewriteaccesstothevendor'sAWSaccount.B、CreateanIAMuserwithwriteaccesstotheSQSqueueandsharethecredentialsfortheIAMuser.C、UpdateAWSResourceAccessManagertoprovidewriteaccesstotheSQSqueuefromthevendor'sAWSaccount.D、Createacross-accountrolewithaccesstoallSQSqueuesandusethevendor'sAWSaccountinthetrustdocumentfortherolE.答案：A解析：<br/>2021-09-25-D-->Ahttps://docs.aws.amazon./AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-basic-examples-of-sqs-policies.htmlhttps://docs.aws.amazon./AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-overview-of-managing-access.html#sqs-managing-access-to-resources:"AttachapermissionpolicytoauserinanotherAWSaccount–TograntuserpermissionstocreateanAmazonSQSqueue,attachanAmazonSQSpermissionspolicytoauserinanotherAWSaccount."“為另一個(gè)AWS帳戶中的用戶附加權(quán)限策略—若要授予用戶創(chuàng)建AmazonSQS隊(duì)列的權(quán)限,請為另一個(gè)AWS帳戶中的用戶附加AmazonSQS權(quán)限策略?！盕M20100901378.Apanyhasdevelopedamicroservicesapplication.Itusesaclient-facingAPIwithAmazonAPIGatewayandmultipleinternalserviceshostedonAmazonEC2instancestoprocessuserrequests.TheAPIisdesignedtosupportunpredictablesurgesintraffic,butinternalservicesmaybeeoverwhelmedandunresponsiveforaperiodoftimeduringsurges.Asolutionsarchitectneedstodesignamorereliablesolutionthatreduceserrorswheninternalservicesbeeunresponsive0runavailablE.Whichsolutionmeetstheserequirements?A、UseAWSAutoScalingtoscaleupinternalserviceswhenthereisasurgeintraffiC.B、UsedifferentAvailabilityZonestohostinternalservices.SendanotificationtoasystemadministratorwhenaninternalservicebeesunresponsivE.C、UseanElasticLoadBalancertodistributethetrafficbetweeninternalservices.ConfigureAmazonCloudWatchmetricstomonitortraffictointernalservices.D、UseAmazonSimpleQueueService(AmazonSQS)tostoreuserrequestsastheyarrive.Changetheinternalservicestoretrievetherequestsfromthequeueforprocessing.答案：D解析：FM20100901589.Apanyprovidesanonlineserviceforpostingvideocontentandtranscodingitforusebyanymobileplatform.TheapplicationarchitectureusesAmazonElasticFileSystem(AmazonEFS)StandardtocollectandstorethevideosS0thatmultipleAmazonEC2Linuxinstancescanaccessthevideocontentforprocessing.Asthepopularityoftheservicehasgrownovertime,thestoragecostshavebeetooexpensive.WhichstoragesolutionisMOSTcost-effective?A、UseAWSStorageGatewayforfilestostoreandprocessthevideocontent.B、UseAWSStorageGatewayforvolumestostoreandprocessthevideocontent.C、UseAmazonEFSforstoringthevideocontent.OnceprocessingiSplete,transferthefilestoAmazonElasticBlockStore(AmazonEBS).D、UseAmazonS3forstoringthevideocontent.MovethefilestemporarilyovertoanAmazonElasticBlockStore(AmazonEBS)volumeattachedtotheserverforprocessing.答案：D解析：FM20100900910.Apanyiscreatingathree-tierwebapplicationconsistingofawebserver,anapplicationserver,andadatabaseserver.TheapplicationwilltrackGPScoordinatesofpackagesastheyarebeingdelivereD.Theapplicationwillupdatethedatabaseevery0.5seconds.Thetrackingwillneedtobereadasfastaspossibleforuserstocheckthestatusoftheirpackages.Onlyafewpackagesmightbetrackedonsomedays,whereasmillionsofpackagesmightbetrackedonotherdays.TrackingwillneedtobesearchablebytrackinglD,customerID,andorderlD.Ordersolderthan1monthnolongerneedtobetrackeD.Whatshouldasolutionsarchitectremendtoacplishthiswithminimaltotalcostofownership?A、UseAmazonDynamoDB.EnableAutoScalingontheDynamoDBtablE.Scheduleanautomaticdeletionscriptforitemsolderthan1month.B、UseAmazonDynamoDBwithglobalsecondaryindexes.EnableAutoScalingontheDynamoDBtableandtheglobalsecondaryindexes.EnableTTLontheDynamoDBtablE.C、UseanAmazonRDSOn-DemandInstancewithProvisionedIOPS(PIOPS).EnableAmazonCloudWatchalarmstosendnotificationswhenPIOPSareexceedeD.IncreaseanddecreasePIOPSasneedeD.D、UseanAmazonRDSReservedInstancewithProvisionedlOPS(PIOPS).EnableAmazonCloudWatchalarmstosendnotificationswhenPIOPSareexceedeD.IncreaseanddecreasePIOPSasneedeD.答案：B解析：FM201009015211.AsolutionsarchitectiSdesigningthearchitectureofanewapplicationbeingdeployedtotheAWSClouD.TheapplicationwillrunonAmazonEC2On-DemandInstancesandwillautomaticallyscaleacrossmultipleAvailabilityZones.TheEC2instanceswillscaleupanddownfrequentlythroughouttheday.AnApplicationLoadBalancer(AL.B)willhandletheloaddistribution.Thearchitectureneedstosupportdistributedsessiondatamanagement.ThepanyiswillingtomakechangestocodeifneedeD.Whatshouldthesolutionsarchitectdotoensurethatthearchitecturesupportsdistributedsessiondatamanagement?A、UseAmazonElastiCachetomanageandstoresessiondatA.B、Usesessionaffinity(stickysessions)oftheAL.BtomanagesessiondatA.C、UseSessionManagerfromAWSSystemsManagertomanagethesession.D、UsetheGetSessionTokenAPIoperationinAWSSecurityTokenService(AWSSTS)tomanagethesession.答案：A解析：FM201009012812.AsolutionsarchitectisdesigningasolutionthatrequiresfrequentupdatestoawebsitethatishostedonAmazonS3withversioningenabledForpliancereasons,theolderversionsoftheobjectswillnotbeaccessedfrequentlyandwillneedtobedeletedafter2years.WhatshouldthesolutionsarchitectremendtomeettheserequirementsattheLOWESTcost?A、UseS3batchoperationstoreplaceobjecttagsExpiretheobjectsbasedonthemodifiedtags.B、ConfigureanS3LifecyclepolicytotransitionolderversionsofobjectstoS3Glacier.Expiretheobjectsafter2years.C、EnableS3EventNotificationsonthebucketthatsendsolderobjectstotheAmazonSimpleQueueService(AmazonSQS)queueforfurtherprocessingD、Replicateolderobjectversionstoanewbucket.UseanS3Lifecyclepolicytoexpiretheobjectsinthenewbucketafter2years.答案：B解析：FM201009013313.ThefinancialapplicationatapanystoresmonthlyreportsinanAmazonS3bucket.ThevicepresidentoffinancehasmandatedthatallaccesstothesereportsbeloggedandthatanymodificationstothelogfilesbedetecteD.Whichactionscanasolutionsarchitecttaketomeettheserequirements?A、UseS3serveraccessloggingonthebucketthathousesthereportswiththereadandwritedataeventsandlogfilevalidationoptionsenableD.B、UseS3serveraccessloggingonthebucketthathousesthereportswiththereadandwritemanagementeventsandlogfilevalidationoptionsenableD.C、UseAWSCloudTrailtocreateanewtrail.ConfigurethetrailtologreadandwritedataeventsontheS3bucketthathousesthereports.Logtheseeventstoanewbucket,andenablelogfilevalidation.D、UseAWSCloudTrailtocreateanewtrail.ConfigurethetrailtologreadandwritemanagementeventsontheS3bucketthathousesthereports.Logtheseeventstoanewbucket,andenablelogfilevalidation.答案：C解析：https://aws.amazon./premiumsupport/knowledge-center/cloudtrail-data-management-events/https://docs.aws.amazon./awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.htmlDataevents:DataeventsprovidevisibilityintotheresourceoperationsperformedonorwithinaresourcE.Thesearealsoknownasdataplaneoperations.Dataeventsareoftenhigh-volumeactivities.Thefollowingdatatypesarerecorded:<ol><li>AmazonS3object-levelAPIactivity(forexample,GetObject,DeleteObject,andPutObjectAPIoperations)</li><li>AWSLambdafunctionexecutionactivity(theInvokeAPI).</li></ol>FM201009012414.ThefollowingIAMpolicyisattachedtoanIAMgroup.ThisiStheonlypolicyappliedtothegroup.<imgsrc="http://static72.cdn.ixunkE./qimg_stemofid1733No1.bmp"alt="">WhataretheeffectiveIAMpermissionsofthispolicyforgroupmembers?A、GroupmembersarepermittedanyAmazonEC2actionwithintheus-east-1Region.StatementsaftertheAllowpermissionarenotapplieD.B、GroupmembersaredeniedanyAmazonEC2permissionsintheus-east-1Regionunlesstheyareloggedinwithmulti-factorauthentication(MFA).C、Groupmembersareallowedtheec2:StopInstancesandec2.TerminatelnstancespermissionsforallRegionswhenloggedinwithmulti-factorauthentication(MFA).GroupmembersarepermittedanyotherAmazonEC2action.D、Groupmembersareallowedtheec2:StopInstancesandec2:TerminateInstancespermissionsfortheus-east-1Regiononlywhenloggedinwithmulti-factorauthentication(MFA)GroupmembersarepermittedanyotherAmazonEC2actionwithintheus-east-1Region.答案：D解析：FM201009021015.Apanyhasdevelopedanewvideogameasawebapplication.Theapplicationisinathree-tierarchitectureinaVPCwithAmazonRDSforMySQLinthedatabaselayer.SeveralplayerswillpeteconcurrentlyonlinE.Thegame'sdeveloperswanttodisplayatop-10scoreboardinnear-realtimeandoffertheabilitytostopandrestorethegamewhilepreservingthecurrentscores.Whatshouldasolutionsarchitectdotomeettheserequirements?A、SetupanAmazonElastiCacheforMemcachedclustertocachethescoresforthewebapplicationtodisplay.B、SetupanAmazonElastiCacheforRedisclustertoputeandcachethescoresforthewebapplicationtodisplay.C、PlaceanAmazonCloudFrontdistributioninfrontofthewebapplicationtocachethescoreboardinasectionoftheapplication.D、CreateareadreplicaonAmazonRDSforMySQLtorunqueriestoputethescoreboardandservethereadtraffictothewebapplication.答案：B解析：2021-07-21--D-->BRedisoffersonehighlyefficientandscalablesolution.Redisisanin-memorydatastorethatsupportsbasickey-valuefunctionality.Italsosupportsavarietyofdatastructuressuchashashes,lists,sets,sortedsets,rangequeries,andgeospatialindexes.ThissuggeststhepotentialadvantagesofstorageandqueryingthroughElastiCacheforRedisinsteadofthroughrelationaldatabases.Redis提供了一個(gè)高效和可擴(kuò)展的解決方案。Redis是一個(gè)內(nèi)存數(shù)據(jù)存儲,支持基本的鍵值功能。它還支持各種數(shù)據(jù)結(jié)構(gòu),如散列、列表、集、排序集、范圍查詢和地理空間索引。這表明了在Redis中通過ElastiCache進(jìn)行存儲和查詢的潛在優(yōu)勢,而不是通過關(guān)系數(shù)據(jù)庫。FM201009021516.ApanyhasNFSserversinanon-premisesdatacenterthatneedtoperiodicallybackupsmallamountsofdatatoAmazonS3.WhichsolutionmeetstheserequirementsandisMOSTcost-effective?A、SetupAWSGluetocopythedatafromtheon-premisesserverstoAmazonS3.B、SetupanAWSDataSyncagentontheon-premisesservers,andsyncthedatatoAmazonS3.C、SetupanSFTPsyncusingAWSTransferforSFTPtosyncdatafromonpremisestoAmazonS3.D、SetupanAWSDirectConnectconnectionbetweentheon-premisesdatacenterandaVPC,andcopythedatatoAmazonS3.答案：B解析：FM201009022317.Apanyisbackingupon-premisesdatabasestolocalfileserversharesusingtheSMBprotocol.Thepanyrequiresimmediateaccessto1weekofbackupfilestomeetrecoveryobjectives.Recoveryafteraweekislesslikelytooccur,andthepanycantolerateadelayinaccessingthoseolderbackupfiles.WhatshouldasolutionsarchitectdotomeettheserequirementswiththeLEASToperationaleffort?A、DeployAmazonFSxforWindowsFileServertocreateafilesystemwithexposedfileshareswithsufficientstoragetoholdallthedesiredbackups.B、DeployanAWSStorageGatewayfilegatewaywithsufficientstoragetohold1weekofbackups.PointthebackupstoSMBsharesfromthefilegatewayC、DeployAmazonElasticFileSystem(AmazonEFS)tocreateafilesystemwithexposedNFSshareswithsufficientstoragetoholdallthedesiredbackups.D、Continuetobackuptotheexistingfileshares.DeployAWSDatabaseMigrationService(AWSDMS)anddefineacopytasktocopybackupfilesolderthan1weektoAmazonS3,anddeletethebackupfilesfromthelocalfilestorE.答案：B解析：FM201009022618.ApanyispreparingtodeployanewserverlessworkloaD.AsolutionsarchitectneedstoconfigurepermissionsforinvokinganAWSLambdafunction.ThefunctionwillbetriggeredbyanAmazonEventBridge(AmazonCloudWatchEvents)rulE.PermissionsshouldbeconfiguredusingtheprincipleofleastprivilegE.Whichsolutionwillmeettheserequirements?A、AddanexecutionroletothefunctionwithlambdaInvokeFunctionastheactionand*astheprincipal.B、AddanexecutionroletothefunctionwithlambdA.lnvokeFunctionastheactionandServicE.eventsamazonaws.astheprincipal.C、Addaresource-basedpolicytothefunctionwithlambda:*astheactionandService:eventsamazonaws.astheprincipal.D、Addaresource-basedpolicytothefunctionwithlambda:lnvokeFunctionastheactionandService:eventsamazonaws.astheprincipal.答案：D解析：Modifyon 2021-10-27Byxfhttps://docs.aws.amazon./eventbridge/latest/userguide/resource-based-policies-eventbridgE.html#lambda-permissionsFM201009022919.AdevelopmentteamstoresitsAmazonRDSMySQLDBinstanceusernameandpasswordcredentialsinaconfigurationfilE.Theconfigurationfileisstoredasplaintextontherootdevicevolumeoftheteam'sAmazonEC2instancE.Whentheteam'sapplicationneedstoreachthedatabase,itreadsthefileandloadsthecredentialsintothecodE.Theteamhasmodifiedthepermissionsoftheconfigurationfilesothatonlytheapplicationcanreaditscontent.Asolutionsarchitectmustdesignamoresecuresolution.Whatshouldthesolutionsarchitectdotomeetthisrequirement?A、StoretheconfigurationfileinAmazonS3.GranttheapplicationaccesstoreadtheconfigurationfilE.B、CreateanIAMrolewithpermissiontoaccessthedatabasE.AttachthisIAMroletotheEC2instancE.C、EnableSSLconnectionsonthedatabaseinstancE.AlterthedatabaseusertorequireSSLwhenloggingin.D、MovetheconfigurationfiletoanEC2instancestore,andcreateanAmazonMachinelmage(AMI)oftheinstancE.LaunchnewinstancesfromthisAMI.答案：B解析：FM201009023420.ApanyhasaservicethatproduceseventdataThepanywantstouseAWStoprocesstheeventdataasitiSreceiveD.ThedataiSwritteninaspecificorderthatmustbemaintainedthroughoutprocessing.ThepanywantstoimplementasolutionthatminimizesoperationaloverheaD.Howshouldasolutionsarchitectacplishthis?A、CreateanAmazonSimpleQueueService(AmazonSQS)FIFOqueuetoholdmessagesSetupanAWSLambdafunctiontoprocessmessagesfromthequeuE.B、CreateanAmazonSimpleNotificationService(AmazonSNS)topictodelivernotificationscontainingpayloadstoprocess.ConfigureanAWSLambdafunctionasasubscriber.C、CreateanAmazonSimpleQueueService(AmazonSQS)standardqueuetoholdmessages.SetupanAWSLambdafunctiontoprocessmessagesfromthequeueindependently.D、CreateanAmazonSimpleNotificationService(AmazonSNS)topictodelivernotificationscontainingpayloadstoprocessConfigureanAmazonSimpleQueueService(AmazonSQS)queueasasubscriber.答案：A解析：Thedataneedstobeprocessedinorder2021-01-19FM201009024321.Apanyishosting60TBofproduction-leveldatainanAmazonS3bucket.Asolutionsarchitectneedstobringthatdataonpremisesforquarterlyauditrequirements.Thisexportofdatamustbeencryptedwhileintransit.ThepanyhaslownetworkbandwidthinplacebetweenAWSanditson-premisesdatacenter.Whatshouldthesolutionsarchitectdotomeettheserequirements?A、DeployAWSMigrationHubwith90-dayreplicationwindowsfordatatransfer.B、DeployanAWSStorageGatewayvolumegatewayonAWS.Enablea90-dayreplicationwindowtotransferthedatA.C、DeployAmazonElastiC.FileSystem(AmazonEFS),withlifecyclepoliciesenabled,onAWS.UseittotransferthedatA.D、DeployanAWSSnowballdeviceintheon-premisesdatacenterafterpletinganexportjobrequestintheAWSSnowballconsolE.答案：D解析：FM201009024522.Asolutionsarchitectisdesigningthecloudarchitectureforapanythatneedstohosthundredsofmachinelearningmodelsforitsusers.Duringstartup,themodelsneedtoloadupto10GBofdatafromAmazonS3intomemory,buttheydonotneeddiskaccessMostofthemodelsareusedsporadically,buttheusersexpectallofthemtobehighlyavailableandaccessiblewithlowlatency.WhichsolutionmeetstherequirementsandisMOSTcost-effective?A、DeploymodelsasAWSLambdafunctionsbehindanAmazonAPIGatewayforeachmodel.B、DeploymodelsasAmazonElasticContainerService(AmazonECS)servicesbehindanApplicationLoadBalancerforeachmodel.C、DeploymodelsasAWSLambdafunctionsbehindasingleAmazonAPIGatewaywithpath-basedroutingwhereonepathcorrespondstoeachmodel.D、DeploymodelsasAmazonElasticContainerService(AmazonECS)servicesbehindasingleApplicationLoadBalancerwithpath-basedroutingwhereonepathcorrespondstoeachmodel.答案：D解析：FM201009024723.AsolutionsarchitectneedstodesignaresilientsolutionforWindowsusers'homedirectories.Thesolutionmustprovidefaulttolerance,file-levelbackupandrecovery,andaccesscontrol,baseduponthepany'sActiveDirectory.Whichstoragesolutionmeetstheserequirements?A、ConfigureAmazonS3tostoretheusers"homedirectories.JoinAmazonS3toActiveDirectory.B、ConfigureaMulti-AZfilesystemwithAmazonFSxforWindowsFileServer.JoinAmazonFSxtoActiveDirectory.C、ConfigureAmazonElasticFileSystem(AmazonEFS)fortheusers'homedirectories.ConfigureAWSSingleSign-OnwithActiveDirectoryD、ConfigureAmazonElasticBlockStore(AmazonEBS)tostoretheusers'homedirectories.ConfigureAWSSingleSign-OnwithActiveDirectory.答案：B解析：FM201009024924.Apany蚐creatingawebapplicationthatwillstorealargenumberofimagesinAmazonS3.TheimageswillbeaccessedbyusersovervariableperiodsoftimE.Thepanywantsto:--Retainalltheimages.--Incurnocostforretrieval.--HaveminimalmanagementoverheaD.--Havetheimagesavailablewithnoimpactonretrievaltime.Whichsolutionmeetstheserequirements?A、ImplementS3Intelligent-Tiering.B、ImplementS3storageclassanalysis.C、ImplementanS3LifecyclepolicytomovedatatoS3Standard-InfrequentAccess(S3Standard-lA).D、ImplementanS3LifecyclepolicytomovedatatoS3OneZone-InfrequentAccess(S3OneZone-lA).答案：A解析：FM201009025725.AsolutionsarchitectneedstodesignanetworkthatwillallowmultipleAmazonEC2instancestoaccessamondatasourceusedformission-criticaldatathatcanbeaccessedbyalltheEC2instancessimultaneouslyThesolutionmustbehighlyscalable,easytoimplement,andsupporttheNFSprotocol.Whichsolutionmeetstheserequirements?A、CreateanAmazonEFSfilesystemConfigureamounttargetineachAvailabilityZonE.Attacheachinstancetotheappropriatemounttarget.B、CreateanadditionalEC2instanceandconfigureitasafileserver.CreateasecuritygroupthatallowsmunicationbetweentheinstancesandapplythattotheadditionalinstancE.C、CreateanAmazonS3bucketwiththeappropriatepermissions.CreatearoleinAWSIAMthatgrantsthecorrectpermissionstotheS3bucket.AttachtheroletotheEC2instancesthatneedaccesstothedatA.D、CreateanAmazonEBSvolumewiththeappropriatepermissions.CreatearoleinAWSIAMthatgrantsthecorrectpermissionstotheEBSvolumE.AttachtheroletotheEC2instancesthatneedaccesstothedatA.答案：A解析：FM201009026226.ApanyrunsanapplicationonanAmazonEC2instancebackedbyAmazonElasticBlockStore(AmazonEBS).Theinstanceneedstobeavailablefor12hoursdaily.Thepanywantstosavecostsbymakingtheinstanceunavailableoutsidethewindowrequiredfortheapplication.However,thecontentsoftheinstance'smemorymustbepreservedwhenevertheinstanceisunavailablE.Whatshouldasolutionsarchitectdotomeetthisrequirement?A、Stoptheinstanceoutsidetheapplication'savailabilitywindow.StartuptheinstanceagainwhenrequireD.B、Hibernatetheinstanceoutsidetheapplication'savailabilitywindow.StartuptheinstanceagainwhenrequireD.C、UseAutoScalingtoscaledowntheinstanceoutsidetheapplication'savailabilitywindow.ScaleuptheinstancewhenrequireD.D、Terminatetheinstanceoutsidetheapplication'savailabilitywindow.LaunchtheinstancebyusingapreconfiguredAmazonMachineImage(AMI)whenrequireD.答案：B解析：FM201009026427.ApanyhasapopulargamingplatformrunningonAWS.Theapplicationissensitivetolatencybecauselatencycanimpacttheuserexperienceandintroduceunfairadvantagestosomeplayers.TheapplicationisdeployedineveryAWSRegion.ItrunsonAmazonEC2instancesthatarepartofAutoScalinggroupsconfiguredbehindApplicationLoadBalancers(ALBs).Asolutionsarchitectneedstoimplementamechanismtomonitorthehealthoftheapplicationandredirecttraffictohealthyendpoints.Whichsolutionmeetstheserequirements?A、ConfigureanacceleratorinAWSGlobalAccelerator.Addalistenerfortheportthattheapplicationlistenson,andattachittoaRegionalendpointineachRegion.AddtheALBastheendpoint.B、CreateanAmazonCloudFrontdistributionandspecifytheALBastheoriginserver.Configurethecachebehaviortouseorigincacheheaders.UseAWSLambdafunctionstooptimizethetraffiC.C、CreateanAmazonCloudFrontdistributionandspecifyAmazonS3astheoriginserver.Configurethecachebehaviortouseorigincacheheaders.UseAWSLambdafunctionstooptimizethetraffiC.D、ConfigureanAmazonDynamoDBdatabasetoserveasthedatastorefortheapplication.CreateaDynamoDBAccelerator(DAX)clustertoactasthein-memorycacheforDynamoDBhostingtheapplicationdatA.答案：A解析：FM201009026528.AsolutionsarchitectiscreatinganewVPCdesign.Therearetwopublicsubnetfortheloadbalancer,twoprivatesubnetsforwebservers,andtwoprivatesubnetsforMySQL.ThewebservesuseonlyHTTPS.ThesolutionsarchitecthasalreadycreatedasecuritygroupfortheloadBalancerallowingport443from0.00.0/0.panypolicyrequiresthateachresourcehastheleastaccessrequiredtostillbeabletoperformitstasks.Whichadditionalconfigurationstrategyshouldthesolutionarchitectusetomeettheserequirements?A、Createasecuritygroupfarthewebserversandallowport443from0.0.0/0.CreateasecuritygrouptortheMySQLserve'saidallowport3306fromthewebserverssecuritygroup.B、CreateanetworkACLforthewebserversandallowport443from0.0.0/0.CreateanetworkACLfortheMySQLserversandallowport3306fromthewebserverssecuritygroupC、Createasecuritygroupforthewebserversandallowport443fromtheloadbalancer.CreateasecuritygrouptortheMySQLserversandallowport3306fromthewebsewerssecuritygroupD、CreateanetworkACLforthewebserversandallowport443fromthewebbalancer.CreateanetworkACLfortheMySQLserversandallowport3306fromthewebserverssecuritygroup.答案：C29.ApanyismigratinglotheAWSClouD.AfileserveristhefirstworkloadtomigratE.UsersmustbeabletoaccessthefileshareusingtheServerMessageBlock(SMB)protocol.WhichAWSmanagedservicemeetstheserequirements''A、AmazonEBSB、AmazonEC2C、AmazonFSxD、AmazonS3答案：C30.AsolutionsarchitectneedstodesignaresilientsolutionforWindowsusers'homedirectories.Thesolutionmustprovidefaulttolerance,file-levelbackupandrecovery,andaccesscontrol,baseduponthepany'sActiveDirectory.Whichstoragesolutionmeetstheserequirements?A、ConfigureAmazonS3tostoretheusers'homedirectories.JoinAmazonS3toActiveDirectory.B、ConfigureaMulti-AZfilesystemwithAmazonFSxforWindowsFileServer.JoinAmazonFSxtoActiveDirectory.C、ConfigureAmazonElasticFileSystem(AmazonEFS)fortheusers'homedirectories.ConfigureAWSSingleSign-OnwithActiveDirectory.D、ConfigureAmazonElasticBlockStore(AmazonEBS)tostoretheusers'homedirectories.ConfigureAWSSingleSign-OnwithActiveDirectory.答案：B31.ApanyhostsitsapplicationusingAmazonElasticContainerService(AmazonECS)andwantstoensurehighavailability.Thepanywantstobeable(odeployupdatestoitsapplicationevenifnodesinoneAvailabilityZonearenotaccessiblE.Theexpectedrequestvolumefortheapplicationis100requestspersecond,andeachcontainertaskisabletoserveatleast60requestspetseconD.ThepanysetupAmazonECSwitharollingupdatedeploymenttypewiththeminimumhealthypercentparametersetto50%andthemaximumpercentsetlo100%.WhichconfigurationoftasksandAvailabilityZonesmeetstheserequirements?A、DeploytheapplicationacrosstwoAvailabilityZones,withonetaskineachAvailabilityZoneB、DeploytheapplicationacrosstwoAvailabilityZones,withtwotasksineachAvailabilityZonE.C、DeploytheapplicationacrossthreeAvailabilityZones,withonetaskineachAvailabilityZonE.D、DeploytheapplicationacrossthreeAvailabilityZones,withtwotasksineachAvailabilityZonE.答案：D解析：total6-2(1AZDOWN)-1(update)=33/6=50%32.AwebapplicationrunsonAmazonEC2instancesbehindanApplicationLoadBalancer.TheapplicationallowsuserstocreatecustomreportsofhistoricalweatherdatA.Generatingareportcantakeupto5minutes.Theselo